speaking of SUS

From: VNV Jeep (vnvjeep_at_hotmail.com)
Date: 07/17/03

  • Next message: Thom Larner: "RE: AW: Multi-User Access to Password Database" 
    To: security-basics@securityfocus.com
Date: Thu, 17 Jul 2003 17:25:07 -0400

    Hey All... Speaking of SUS... I know it's good & all if all your clients are
    local admins on their machines, but what options are out there if all your
    clients are running under restricted user accounts? As you know, restricted
    users have a hellova time installing anything, including patches from M$.

    1.) Will the SUS client on each client be able to download & install
    patches behind the scenes while the user is logged in as a restricted user?

    2.) SUS has an option for delivery: "Download updates automatically and
    then automatically install them on a specified schedule", after which you'd
    then choose using a day and a time drop down list. Does this option let you
    do what I want?

    3.) Can the SUS service on the client be running under an admin account
    that will let it install patches while a restricted user is logged in?

    Before I spend the time to get this config up & running for testing
    purposes, I thought I'd throw it out there for all those of you running &
    playing with SUS.

    Thanks guys (and gals),
    Mike -- VNVJeep

    _________________________________________________________________
    MSN 8 helps eliminate e-mail viruses. Get 2 months FREE*.
    http://join.msn.com/?page=features/virus

    ---------------------------------------------------------------------------
    Evaluating SSL VPNs' Consider NEOTERIS, chosen as leader by top analysts!
    The Gartner Group just put Neoteris in the top of its Magic Quadrant,
    while InStat has confirmed Neoteris as the leader in marketshare.
         
    Find out why, and see how you can get plug-n-play secure remote access in
    about an hour, with no client, server changes, or ongoing maintenance.
              
    Visit us at: http://www.neoteris.com/promos/sf-6-9.htm
    ----------------------------------------------------------------------------

  • Next message: Thom Larner: "RE: AW: Multi-User Access to Password Database"

    Relevant Pages

    • Re: Windows SUS
      ... > install, It prompt the user whether to install the downloaded patches ... Have you set the appropriate policies described in the SUS Deployment ... White Paper (section "Configuring the Automatic Updates client ... to facilitate one-on-one interaction with one of our expert instructors. ...
      (Security-Basics)
    • Re: MS SUS
      ... There is a separate newsgroup for SUS where you should ask question about SUS: ... > When I go and look for the regisrty key to add additional ... > the SUS install on a test computer thinking that it will ... > make that reg entry but when I install the client it says ...
      (microsoft.public.win2000.security)
    • RE: Incorrect SUS Client Message
      ... Subject: Incorrect SUS Client Message ... Do you have "Automatically download and schedule the install" selected? ...
      (microsoft.public.win2000.windows_update)
    • Re: SUS10SP1 with ShrPntSrvcs on IIS60?
      ... client to attempt to connect to the SUS server to get updates. ... the Windows Update.log file. ... Maybe that is because of the .aspx that Sharepoint ...
      (microsoft.public.inetserver.iis.security)
    • Re: Group Policy and IE6 cummulative patches
      ... > LE software to create a MSI file and deploy to the client PC. ... > But it seem the MSI file not able to install automatically. ... Microsoft Software Update Services (SUS) is a kind of "Windows Update" ... Supports Win2k, WinXP and Win2k3 ...
      (microsoft.public.windows.server.active_directory)