The new docs.trellix.com features a modernized UI and AI-powered conversational search. Content is currently available in English, with additional languages launching in early November 2026. We hope you enjoy the updated experience.

Press CTRL+K to open search

Manage updaters in an unmanaged environment

  • Published on Sep 1, 2026
  • 1 minute(s) read
Prev Next

If a program is configured as an updater, it can install new software and update existing software. You can add, edit, or remove updaters.

  1. Add updaters.

    • Add files as updaters:

      sadmin updaters add <filename>

    • Add installers as updaters:

      sadmin updaters add file.exe

    • Add scripts as updaters:

      sadmin updaters add <scriptname>

    • Add users as updaters:

      sadmin updaters add –u <username>

    • Add certificates as updaters:

      sadmin cert add –u <certfilename>

      Note

      All components signed by these certificates are allowed to change binaries on the system and start new applications.

    Argument

    Description

    -d

    Excludes the child process of the file from inheriting updater permissions.

    sadmin updaters add –d <filename>

    sadmin updaters add –d winlogon.exe

    -n

    Disables event logging for a file to be added as an updater.

    sadmin updaters add –n <filename>

    sadmin updaters add –n winlogon.exe

    -l

    Adds an execution file as an updater only when the specified library name is loaded for the execution file.

    sadmin updaters add -l <associated libraryname> <filename>

    sadmin updaters add –l system32\wuauserv.dll svchost.exe

    -t

    • Includes the tags for a file to be added as an updater.

      sadmin updaters add -t <associated tag> –l <associated libraryname> <filename>

      sadmin updaters add –t Win_up_schedule1 –l system32\wuauserv.dll svchost.exe

    • Adds a user with a tag name as an updater.

      sadmin updaters add –t <tagname> –u <username>

      sadmin updaters add –t McAfee001 -u john_smith

    -p

    Adds a file as an updater, only when its parent execution file is running.

    sadmin updaters add -p <parentname> <filename>

    sadmin updaters add –p svchost.exe iexplore.exe

    -u

    Adds a user as an updater. All update operations by the specified user name are allowed.

    Note

    When you specify the –u argument, other arguments, such as -l, -p, -d, and –n are not applicable.

    sadmin updaters add –u <username>

    Here's are the types of user names that can be added as updaters.

    • Simple name

      For example, john_smith.

      If you specify a simple name, users with this name in all domains are added as updaters.

    • Domain name (username@domain name)

      For example, john_smith@mycompany.com.

    • Hierarchical domain name (domain name\user name)

      For example, mydomain\john_smith.

    If you right-click a file and select Run as <updater user name>, the file can run as an updater only if the file is added to the allow list and authorized to run.

  2. View all updaters:

    sadmin updaters list

  3. Remove updaters.

    • Delete all components from the updaters list:

      sadmin updaters flush

    • Remove a specific component from the updaters list:

      sadmin updaters remove <filename>