updclpri
Grant client users certain privileges, such as performing "Update Now" and enabling scheduled update.
To grant update privileges:
Networked Computers > Client Management
In the client tree, click the root domain icon 
to include all clients or select specific domains or clients.
Click Settings > Privileges and Other Settings.
On the Privileges tab, go to the Component Update Privileges section.
Select the following options:
Click the Other Settings tab and go to the Update Settings section.
Select the following options:
Clients Download Updates From the Trend Micro ActiveUpdate Server
Clients Can Update Components but not Upgrade the Client Program or Deploy Hot Fixes
If you selected domain(s) or client(s) in the client tree, click Save. If you clicked the root domain icon, choose from the following options:
Apply to All Clients: Applies settings to all existing clients and to any new client added to an existing/future domain. Future domains are domains not yet created at the time you configured the settings.
Apply to Future Domains Only: Applies settings only to clients added to future domains. This option will not apply settings to new clients added to an existing domain.
Users with this privilege can update components on demand by right-clicking the OfficeScan icon on the system tray and selecting Update Now. You can allow client users to use proxy settings during "Update Now". See Proxy Configuration Privileges for Clients for details.
Incorrect user-configured proxy settings can cause update problems. Exercise caution when allowing users to configure their own proxy settings.
This privilege allows clients users to enable/disable scheduled update. Users with the privilege can enable/disable scheduled update but they cannot configure the actual schedule. You need to specify the schedule in Updates > Networked Computers > Automatic Update > Schedule-based Update.
When initiating updates, OfficeScan clients first get updates from the update source specified on the Updates > Networked Computers > Update Source screen. If the update is unsuccessful, the clients attempt to update from the OfficeScan server. Selecting this option enables clients to attempt to update from the Trend Micro ActiveUpdate server if the update from the OfficeScan server is unsuccessful.
A pure IPv6 client cannot update directly from the Trend Micro ActiveUpdate Server. A dual-stack proxy server that can convert IP addresses, such as DeleGate, is required to allow the clients to connect to the ActiveUpdate server.
Selecting this option forces the selected clients to always run scheduled update except when users have the privilege to enable/disable scheduled update and the user disables scheduled update.
Specify the update schedule in Updates > Networked Computers > Automatic Update > Schedule-based Update.
This option allows component updates to proceed but prevents hot fix deployment and client upgrade.
If you do not select this option, all clients simultaneously connect to the server to upgrade or install a hot fix. This may significantly affect server performance if you have a large number of clients. If you select this option, plan how to minimize the impact of client upgrade or hot fix deployment on the server and then execute your plan.
See also: