Re: Deploying Microsoft patches

From: Charles Otstot (charles.otstot_at_ncmail.net)
Date: 07/14/03

  • Next message: Andy Cuff [Talisker]: "Re: File permission scanner"
    Date: Mon, 14 Jul 2003 13:06:28 -0400
    To: security-basics@securityfocus.com
    
    

    Bear in mind that SUS only supports OS patches. Application patches, Service
    Packs, etc. are not handled by SUS.
    http://www.microsoft.com/windows2000/windowsupdate/sus/susfaq.asp
    This does NOT mean that SUS isn't useful, only that it does have limitations
    (e.g It can't be used for MS Office, which may be a drawback for your
    workstations).
    You may also want to look at Shavlik's HFNetChk LT for free products. I believe
    you can do *some* application patching with it).

    If you are looking to do more than simply rollout OS-level security updates, you
    may well want to reconsider the commercial products.
    There are a number of solid products (Shavlik's HFNetChkPro, Patchlink and
    Update Expert all performed well in tests I've performed) that will allow you to
    more comprehensively manage your patch levels than the free tools alone.
    I would certainly investigate their capabilities (if you haven't already) to
    determine if any of the products provide you enough extra benefits to justify
    the cost.

    Charlie

    Dan Bartley wrote:

    > Software Update Services from Microsoft. It is free.
    >
    > http://www.microsoft.com/windows2000/windowsupdate/sus/default.asp
    >
    > Best Regards,
    >
    > Dan Bartley
    >
    > -----Original Message-----
    > From: Ronish Mehta [mailto:sf_mail_sbm@yahoo.com]
    > Sent: Friday, July 11, 2003 05:47
    > To: security-basics@securityfocus.com
    > Subject: Deploying Microsoft patches
    >
    > Hi,
    > there are about 500 pcs in the company that i work
    > for,
    > all of them are on Win 2K Professional
    >
    > With this amount of PCs, it is very difficult to keep
    > all of these PCs patched with the latest security
    > patches
    >
    > We have tried to automate the process by launching the
    > installation by using AD 'Startup Script'. However the
    > patch is installed every time the PC is booted
    >
    > Currently we are deploying patches manually, and this
    > is very time consuming, and we are not able to keep
    > uptodate with the latest patches being released by
    > Microsoft
    >
    > Anyone who has an automated process for deploying
    > patches without the use of Commercial tools for remote
    > installations?
    >
    > Thanks!
    >
    > __________________________________
    > Do you Yahoo!?
    > SBC Yahoo! DSL - Now only $29.95 per month!
    > http://sbc.yahoo.com
    >
    > ------------------------------------------------------------------------
    > ---
    > Evaluating SSL VPNs' Consider NEOTERIS, chosen as leader by top
    > analysts!
    > The Gartner Group just put Neoteris in the top of its Magic Quadrant,
    > while InStat has confirmed Neoteris as the leader in marketshare.
    >
    > Find out why, and see how you can get plug-n-play secure remote access
    > in
    > about an hour, with no client, server changes, or ongoing maintenance.
    >
    > Visit us at: http://www.neoteris.com/promos/sf-6-9.htm
    > ------------------------------------------------------------------------
    > ----
    >
    > ---------------------------------------------------------------------------
    > Evaluating SSL VPNs' Consider NEOTERIS, chosen as leader by top analysts!
    > The Gartner Group just put Neoteris in the top of its Magic Quadrant,
    > while InStat has confirmed Neoteris as the leader in marketshare.
    >
    > Find out why, and see how you can get plug-n-play secure remote access in
    > about an hour, with no client, server changes, or ongoing maintenance.
    >
    > Visit us at: http://www.neoteris.com/promos/sf-6-9.htm
    > ----------------------------------------------------------------------------

    --
    E-mail correspondence to and from this address may be subject to the North
    Carolina Public Records Law and may be disclosed to third parties by an
    authorized state official.
    --
    ---------------------------------------------------------------------------
    Evaluating SSL VPNs' Consider NEOTERIS, chosen as leader by top analysts!
    The Gartner Group just put Neoteris in the top of its Magic Quadrant,
    while InStat has confirmed Neoteris as the leader in marketshare.
         
    Find out why, and see how you can get plug-n-play secure remote access in
    about an hour, with no client, server changes, or ongoing maintenance.
              
    Visit us at: http://www.neoteris.com/promos/sf-6-9.htm
    ----------------------------------------------------------------------------
    

  • Next message: Andy Cuff [Talisker]: "Re: File permission scanner"

    Relevant Pages

    • RE: Deploying Microsoft patches
      ... The down side to SUS is it only does critical updates, ... Windows platforms and software, Unix (a number of commercial flavors - ... platforms (down to media player patches). ... The Gartner Group just put Neoteris in the top of its Magic ...
      (Security-Basics)
    • RE: Deploying Microsoft patches
      ... > You can't use a domain controller as a SUS ... > How can you apply different patches to w2k and win xp ... >> a DC as a client. ... The Gartner Group just put Neoteris in the ...
      (Security-Basics)
    • Re: Deploying Microsoft patches
      ... How can you apply different patches to w2k and win xp ... I just set up SUS and deploy it through group policy. ... > a DC as a client. ... The Gartner Group just put Neoteris in the ...
      (Security-Basics)
    • RE: Deploying Microsoft patches
      ... Subject: Deploying Microsoft patches ... Currently we are deploying patches manually, ... Evaluating SSL VPNs' Consider NEOTERIS, chosen as leader by top analysts! ... about an hour, with no client, server changes, or ongoing maintenance. ...
      (Security-Basics)
    • RE: Deploying Microsoft patches
      ... There is a SA version of SUS that can do OS patches and _some_ ... Bear in mind that SUS only supports OS patches. ... > The Gartner Group just put Neoteris in the top of its Magic Quadrant, ... > in about an hour, with no client, server changes, or ongoing maintenance. ...
      (Security-Basics)