When I enacted some Sofware Restriction Policies on a Windows Server 2003 machine in order to lock it down a bit I never thought it would prevent Windows Update from working, but it seems Microsoft (in its wisdom?) decided that Windows Updates would extract to the root of the drive with the largest free space into a folder with a random name. This is very irritating as the Sofware Restriction Policy prevents it from executing the extracted code.

Does anyone know a way of forcing Windows Updates to create their randomly named folder as a sub folder of a specific folder on the system of the administrators choosing? Thereby allowing said administrator to allow programs to execute from that folder via the policy?

[Reply or follow-up to this message]