RE: Deploying Microsoft patches

From: Kevin Ashurst (ashur624_at_erau.edu)
Date: 07/11/03

  • Next message: Su Wadlow: "Re: Deploying Microsoft patches"
    To: "Ronish Mehta" <sf_mail_sbm@yahoo.com>
    Date: Fri, 11 Jul 2003 11:50:20 -0700
    
    

    Try SUS from M$. Its free. You just set up your windows 2000 server as a
    windows update server for your organization. Then you can turn on automatic
    update featue on your clients, without filling up your pipe to the internet.

    http://www.microsoft.com/windows2000/windowsupdate/sus/default.asp

    If you choose to use SUS, consider these caveats:

    You can't use a domain controller (DC) as a SUS server, but you can use a DC
    as a client.
    You can't use SUS to deploy service packs.
    You can't use SUS to deploy your own updates (you can use this tool to
    deploy only Windows critical updates, Windows critical security updates, and
    Windows security roll-ups)

    A good article about SUS setup and maintenance:

    http://www.winnetmag.com/Articles/Index.cfm?ArticleID=26752

    -Kevin

    -----Original Message-----
    From: Ronish Mehta [mailto:sf_mail_sbm@yahoo.com]
    Sent: Friday, July 11, 2003 2:47 AM
    To: security-basics@securityfocus.com
    Subject: Deploying Microsoft patches

    Hi,
    there are about 500 pcs in the company that i work
    for,
    all of them are on Win 2K Professional

    With this amount of PCs, it is very difficult to keep
    all of these PCs patched with the latest security
    patches

    We have tried to automate the process by launching the
    installation by using AD 'Startup Script'. However the
    patch is installed every time the PC is booted

    Currently we are deploying patches manually, and this
    is very time consuming, and we are not able to keep
    uptodate with the latest patches being released by
    Microsoft

    Anyone who has an automated process for deploying
    patches without the use of Commercial tools for remote
    installations?

    Thanks!

    __________________________________
    Do you Yahoo!?
    SBC Yahoo! DSL - Now only $29.95 per month!
    http://sbc.yahoo.com

    ---------------------------------------------------------------------------
    Evaluating SSL VPNs' Consider NEOTERIS, chosen as leader by top analysts!
    The Gartner Group just put Neoteris in the top of its Magic Quadrant,
    while InStat has confirmed Neoteris as the leader in marketshare.

    Find out why, and see how you can get plug-n-play secure remote access in
    about an hour, with no client, server changes, or ongoing maintenance.

    Visit us at: http://www.neoteris.com/promos/sf-6-9.htm
    ----------------------------------------------------------------------------

    ---------------------------------------------------------------------------
    Evaluating SSL VPNs' Consider NEOTERIS, chosen as leader by top analysts!
    The Gartner Group just put Neoteris in the top of its Magic Quadrant,
    while InStat has confirmed Neoteris as the leader in marketshare.
         
    Find out why, and see how you can get plug-n-play secure remote access in
    about an hour, with no client, server changes, or ongoing maintenance.
              
    Visit us at: http://www.neoteris.com/promos/sf-6-9.htm
    ----------------------------------------------------------------------------


  • Next message: Su Wadlow: "Re: Deploying Microsoft patches"

    Relevant Pages

    • Re: Publishing Error FP2003 to Remote site
      ... I have 2 machines running Windows XP Pro SP2, with automatic updates. ... Ron Symonds (Microsoft MVP - FrontPage) ... Created a new vurtual server ...
      (microsoft.public.frontpage.extensions.windowsnt)
    • Re: Error 10061, 0x800ccc0e, bug?
      ... It's definitely the April Windows update!!!! ... Checked program files after restore and the updates are gone and OE is ... receive mail after changing account in windows. ... Mike, the error indicates that you are failing to connect to the server, ...
      (microsoft.public.windows.inetexplorer.ie6_outlookexpress)
    • Re: Multiple issues (Server & Desktop) since last Windows Updates
      ... and I am still fighting problems since the reboot after the updates. ... since SP1 on our main Domain controller, which is also DNS server for itself ... I have another two Windows Server 2003 Standard servers that I ... Lexmark printers printer, ...
      (microsoft.public.windows.file_system)
    • Re: Microsoft SUS on Apache?
      ... Group Policy which tells domain member machines to get their Windows ... believe by default with Windows XP (SUS doesn't provide patches for OS's ... way that client machines can get updates from an SUS server that I'm ... > for a Microsoft Server license to run it. ...
      (Security-Basics)
    • Re: Windows Server migration (from linux) question
      ... Particularly with a web server, the more you can cache in RAM the better ... Linux, and touched a little Unix, and it doesn't make any sense to me to ... Two questions though, first, what would> you recommend spec wise for a Windows webserver? ... >> like SUS to manage those updates in our environments, and updates are>> generally quite seamless. ...
      (microsoft.public.windows.server.migration)