# win\_update on domain controller using a "Domain User" account.

**URL:** <https://forum.ansible.com/t/win-update-on-domain-controller-using-a-domain-user-account/29846>\
**Category:** Ansible Project\
**Tags:** windows\
**Created:** [March 8, 2019, 7:57am UTC](https://forum.ansible.com/t/win-update-on-domain-controller-using-a-domain-user-account/29846 "2019-03-08T07:57:16Z")\
**Posts on this page:** 4\
**Page:** 1

<div class="post-metadata">

**Author:** ![Flavio\_Gobber](https://avatars.discourse-cdn.com/v4/letter/f/839c29/32.png) [@Flavio\_Gobber](https://forum.ansible.com/u/Flavio_Gobber)\
**Post date:** [March 8, 2019, 7:57am UTC](https://forum.ansible.com/t/win-update-on-domain-controller-using-a-domain-user-account/29846/1 "2019-03-08T07:57:16Z")

</div>

Hello,  
I am using a “Domain User” to upgrade the windows server 2012 and 2016, on these server I have assigned to the this account to the local “Administrators” group.  
With this method the update works well.  
How can I using the same account to do execute win\_update on the domain controller server ?.  
We don’t wont to use “Domain Admins” for security reasons.

Thank you for help.

Best regards.

Flavio Gobber

---

<div class="post-metadata">

**Author:** ![jborean](https://sea1.discourse-cdn.com/ansible/user_avatar/forum.ansible.com/jborean/32/1525_2.png) [@jborean](https://forum.ansible.com/u/jborean)\
**Post date:** [March 8, 2019, 10:00am UTC](https://forum.ansible.com/t/win-update-on-domain-controller-using-a-domain-user-account/29846/2 "2019-03-08T10:00:46Z")

</div>

You can’t, an admin on a domain controller is in effect a domain administrator. You cannot install updates without being an admin so you will need to use an account that is a domain administrator.

---

<div class="post-metadata">

**Author:** ![Flavio\_Gobber](https://avatars.discourse-cdn.com/v4/letter/f/839c29/32.png) [@Flavio\_Gobber](https://forum.ansible.com/u/Flavio_Gobber)\
**Post date:** [March 8, 2019, 1:00pm UTC](https://forum.ansible.com/t/win-update-on-domain-controller-using-a-domain-user-account/29846/3 "2019-03-08T13:00:15Z")

</div>

Could I use the parameter “use\_scheduled\_task: yes” to run “win\_updates” with “Domain Users” ?.  
When and wy I need to use “use\_scheduled\_task: yes” to run “win\_updates” ?

Thank you for help.

Best regards

Flavio Gobber

---

<div class="post-metadata">

**Author:** ![jborean](https://sea1.discourse-cdn.com/ansible/user_avatar/forum.ansible.com/jborean/32/1525_2.png) [@jborean](https://forum.ansible.com/u/jborean)\
**Post date:** [March 8, 2019, 11:38pm UTC](https://forum.ansible.com/t/win-update-on-domain-controller-using-a-domain-user-account/29846/4 "2019-03-08T23:38:30Z")

</div>

No, even if you wanted to use a scheduled task you need to be an admin to create them bringing you back to the same problem. The only reason why this option exists is for older Windows versions where become was a bit more problematic. You shouldn’t have to worry about this option is you are using 2012 R2 or newer.