RE: Deploying Microsoft patches

From: Diane Ayers (dayers_at_pacbell.net)
Date: 07/19/03

  • Next message: wong chuin hun: "Re: ASP Pages"
    To: <security-basics@securityfocus.com>
    Date: Fri, 18 Jul 2003 17:31:34 -0700
    
    

    There is a SA version of SUS (SUS-SA) that can do OS patches and _some_
    applications patches but it is only available if you are under a software
    assurance contract with MS.

    Diane

    -----Original Message-----
    From: Charles Otstot [mailto:charles.otstot@ncmail.net]
    Sent: Monday, July 14, 2003 10:06 AM
    To: security-basics@securityfocus.com

    Bear in mind that SUS only supports OS patches. Application patches, Service
    Packs, etc. are not handled by SUS.
    http://www.microsoft.com/windows2000/windowsupdate/sus/susfaq.asp
    This does NOT mean that SUS isn't useful, only that it does have limitations
    (e.g It can't be used for MS Office, which may be a drawback for your
    workstations).
    You may also want to look at Shavlik's HFNetChk LT for free products. I
    believe you can do *some* application patching with it).

    If you are looking to do more than simply rollout OS-level security updates,
    you may well want to reconsider the commercial products.
    There are a number of solid products (Shavlik's HFNetChkPro, Patchlink and
    Update Expert all performed well in tests I've performed) that will allow
    you to more comprehensively manage your patch levels than the free tools
    alone.
    I would certainly investigate their capabilities (if you haven't already) to
    determine if any of the products provide you enough extra benefits to
    justify the cost.

    Charlie

    Dan Bartley wrote:

    > Software Update Services from Microsoft. It is free.
    >
    > http://www.microsoft.com/windows2000/windowsupdate/sus/default.asp
    >
    > Best Regards,
    >
    > Dan Bartley
    >
    > -----Original Message-----
    > From: Ronish Mehta [mailto:sf_mail_sbm@yahoo.com]
    > Sent: Friday, July 11, 2003 05:47
    > To: security-basics@securityfocus.com
    > Subject: Deploying Microsoft patches
    >
    > Hi,
    > there are about 500 pcs in the company that i work for, all of them
    > are on Win 2K Professional
    >
    > With this amount of PCs, it is very difficult to keep all of these PCs
    > patched with the latest security patches
    >
    > We have tried to automate the process by launching the installation by
    > using AD 'Startup Script'. However the patch is installed every time
    > the PC is booted
    >
    > Currently we are deploying patches manually, and this is very time
    > consuming, and we are not able to keep uptodate with the latest
    > patches being released by Microsoft
    >
    > Anyone who has an automated process for deploying patches without the
    > use of Commercial tools for remote installations?
    >
    > Thanks!
    >
    > __________________________________
    > Do you Yahoo!?
    > SBC Yahoo! DSL - Now only $29.95 per month!
    > http://sbc.yahoo.com
    >
    > ----------------------------------------------------------------------
    > --
    > ---
    > Evaluating SSL VPNs' Consider NEOTERIS, chosen as leader by top
    > analysts!
    > The Gartner Group just put Neoteris in the top of its Magic Quadrant,
    > while InStat has confirmed Neoteris as the leader in marketshare.
    >
    > Find out why, and see how you can get plug-n-play secure remote access
    > in about an hour, with no client, server changes, or ongoing
    > maintenance.
    >
    > Visit us at: http://www.neoteris.com/promos/sf-6-9.htm
    > ----------------------------------------------------------------------
    > --
    > ----
    >
    > ----------------------------------------------------------------------
    > ----- Evaluating SSL VPNs' Consider NEOTERIS, chosen as leader by top
    > analysts!
    > The Gartner Group just put Neoteris in the top of its Magic Quadrant,
    > while InStat has confirmed Neoteris as the leader in marketshare.
    >
    > Find out why, and see how you can get plug-n-play secure remote access
    > in about an hour, with no client, server changes, or ongoing maintenance.
    >
    > Visit us at: http://www.neoteris.com/promos/sf-6-9.htm
    > ----------------------------------------------------------------------
    > ------

    --
    E-mail correspondence to and from this address may be subject to the North
    Carolina Public Records Law and may be disclosed to third parties by an
    authorized state official.
    --
    ---------------------------------------------------------------------------
    Evaluating SSL VPNs' Consider NEOTERIS, chosen as leader by top analysts!
    The Gartner Group just put Neoteris in the top of its Magic Quadrant, while
    InStat has confirmed Neoteris as the leader in marketshare.
         
    Find out why, and see how you can get plug-n-play secure remote access in
    about an hour, with no client, server changes, or ongoing maintenance.
              
    Visit us at: http://www.neoteris.com/promos/sf-6-9.htm
    ----------------------------------------------------------------------------
    ---------------------------------------------------------------------------
    Evaluating SSL VPNs' Consider NEOTERIS, chosen as leader by top analysts!
    The Gartner Group just put Neoteris in the top of its Magic Quadrant,
    while InStat has confirmed Neoteris as the leader in marketshare.
         
    Find out why, and see how you can get plug-n-play secure remote access in
    about an hour, with no client, server changes, or ongoing maintenance.
              
    Visit us at: http://www.neoteris.com/promos/sf-6-9.htm
    ----------------------------------------------------------------------------
    

  • Next message: wong chuin hun: "Re: ASP Pages"

    Relevant Pages

    • RE: Deploying Microsoft patches
      ... The down side to SUS is it only does critical updates, ... Windows platforms and software, Unix (a number of commercial flavors - ... platforms (down to media player patches). ... The Gartner Group just put Neoteris in the top of its Magic ...
      (Security-Basics)
    • RE: Deploying Microsoft patches
      ... > You can't use a domain controller as a SUS ... > How can you apply different patches to w2k and win xp ... >> a DC as a client. ... The Gartner Group just put Neoteris in the ...
      (Security-Basics)
    • Re: Deploying Microsoft patches
      ... How can you apply different patches to w2k and win xp ... I just set up SUS and deploy it through group policy. ... > a DC as a client. ... The Gartner Group just put Neoteris in the ...
      (Security-Basics)
    • RE: Deploying Microsoft patches
      ... Subject: Deploying Microsoft patches ... Currently we are deploying patches manually, ... Evaluating SSL VPNs' Consider NEOTERIS, chosen as leader by top analysts! ... about an hour, with no client, server changes, or ongoing maintenance. ...
      (Security-Basics)
    • RE: Deploying Microsoft patches
      ... I don't know how good it is, as I am just deploying it myself, but if it ... One other thing, over half the patches they announce, don't require you ... SUS seems to have good documentation, ... The Gartner Group just put Neoteris in the top of its Magic Quadrant, ...
      (Security-Basics)