Re: Keeping my NT Server Up to Date with Windows Update

From: Cavell.McDermott@apw.com
Date: 09/06/01 

Subject: Re: Keeping my NT Server Up to Date with Windows Update
To: <psmithen@home.com>
Message-ID: <OF526C820A.A6F2BB14-ON86256ABF.005D7019@apw-enclosures.com>
From: Cavell.McDermott@apw.com
Date: Thu, 6 Sep 2001 12:06:07 -0500

      I've come to find that after running Windows Update on NT
workstations and servers that it still does not update all patches/security
bullitens, etc. Your best bet (at least from my own experience) is after
running the Windows Update on your servers, download the hfnetchk.exe made
recently available from MS on all servers on your network. This will
provide you with the information on exactly what patches/updates are needed
for each server to keep them completely up2date security-wise. You might
end up installing the same security patch you installed a month ago, but
its better to do it twice than not at all. Sometimes it doesn't recognize
everything that was already installed on your machine. It's one of the
best tools I've seen from MS (not that that is saying much) as far as ease
of use and functionality.

http://www.microsoft.com/technet/treeview/default.asp?url=/TechNet/itsolutions/security/tools/hfnetchk.asp

  Good luck!

Cavell McDermott
APW Ltd. - Texas Campus
214-343-1400 - Main
214-355-2039 - Helpdesk
214-341-9950 - Fax
http://www.apw.com

                                                                                                                          
                    Peter Smithen
                    <psmithen@criticalte To: "'security-basics@securityfocus.com'"
                    lecom.com> <security-basics@securityfocus.com>
                                                cc:
                    09/05/2001 12:38 PM Subject: Keeping my NT Server Up to Date with Windows Update
                    Please respond to
                    psmithen
                                                                                                                          
                                                                                                                          

Hi,
I'm wondering if going through the Windows Update process is all I need
to do to keep my Microsoft Servers up to date regarding security
patches. For a NT 4.0 Server, I understand that the update process does
not update the Option Pack or any Microsoft Apps such as Exchange. For
a Windows 2000 Server I don't know whether it covers all the web
components as well since it's part of the default install.

Thanks,

Relevant Pages

  • Re: Windows update error 80244019
    ... The requested URL does not exist on the server. ... Retry the download a couple ... But since the system recovery I know have Windows update error ...
    (microsoft.public.windowsupdate)
  • RE: Windows update access slow from my SBS 2003 Server
    ... I understand that the SBS server box can not apply ... access the following Windows Update web sites and use the HTTP and HTTPS ... you can configure the following settings on the ISA server: ... Microsoft CSS Online Newsgroup Support ...
    (microsoft.public.windows.server.sbs)
  • Re: Firewall and Word 2004 Security Updatel
    ... Verify that the server is not listed as nor the port listed as ... >Internet Explorer, ... >instructions to YOUR firewall to build the same settings in your given ... Enter "Windows Update" in the Name field, ...
    (microsoft.public.windowsupdate)
  • Re: SBS 2003 will not update
    ... Vic Russell wrote: ... I was not aware that we had a proxy server set up. ... When I used the proxycfg utility I found that we had a proxy left over from when our ISP was BT. ... When I use IE7 to visit Windows Update I get the 0x80072EFD error. ...
    (microsoft.public.windowsupdate)
  • Re: NO free SUPPORT on Server update fiascos???
    ... Once they find out its a server you can't get ... I'm on hold with them now while waiting for a windows update UNinstall to ... >> I just got off the phone with Windows Support - they want to charge me to ... >> get support on my Windows2003 server - which, after installing one of ...
    (microsoft.public.windowsupdate)