Securing Interfaces, Methods, and Properties in the WUA API

Some interfaces, methods, and properties of Windows Update Agent (WUA) are accessible only to callers who belong to the following Windows security groups:

• Administrator
• User
• Power User

When WUA detects that a caller does not have permission to access an interface, method, or property, the HRESULT E_ACCESSDENIED is returned.

The following interfaces are available to the Administrator, User, and Power User security groups:

• IAutomaticUpdates
• IAutomaticUpdatesSettings
• IAutomaticUpdatesSettings2
• ISystemInformation
• IUpdateSearcher
• IUpdateSession and IUpdateSession2

Note

If the following conditions are true, a search fails:

• A user who is not an administrator sets the UserLocale property of the IUpdateSession2 interface to a locale that corresponds to a language that is not installed on the computer.
• The search uses an UpdateSearch object created from the UpdateSession object.

 

The following download interfaces and methods are available to the Administrator and Power User groups:

• IUpdateDownloader

• IUpdate::CopyFromCache

• IAutomaticUpdatesSettings2::CheckPermission

  Note

  Administrators, users, and power users can call IAutomaticUpdatesSettings2::CheckPermission.

   

The following installation interfaces, methods, and properties are available to the Administrator groups:

• IAutomaticUpdates::Pause

• IAutomaticUpdates::Resume

• IAutomaticUpdates::EnableService

• IUpdateInstaller

• IsHidden Property of IUpdate

  Note

  Administrators, users, and power users can retrieve the values of the IsHidden Property of IUpdate. However, only administrators and power users can set the values.

   

• IUpdate::AcceptEula

  Note

  Administrators and power users can call the AcceptEula method of IUpdate.

   

• IAutomaticUpdatesSettings::Save

• NotificationLevel Property of IAutomaticUpdatesSettings

  Note

  Administrators, users, and power users can retrieve the values of the NotificationLevel Property of IAutomaticUpdatesSettings. However, only administrators can set the values.

   

• ScheduledInstallationDay Property of IAutomaticUpdatesSettings

  Note

  Administrators, users, and power users can retrieve the values of the ScheduledInstallationDay Property of IAutomaticUpdatesSettings. However, only administrators can set the values.

   

• ScheduledInstallationTime Property of IAutomaticUpdatesSettings

  Note

  Administrators, users, and power users can retrieve the values of the ScheduledInstallationTime Property of IAutomaticUpdatesSettings. However, only administrators can set the values.

   

• IncludeRecommendedUpdates Property of IAutomaticUpdatesSettings2

  Note

  Administrators, users, and power users can retrieve the values of the IncludeRecommendedUpdates Property of IAutomaticUpdatesSettings2. However, only administrators can set the values.