RE: Deploying Microsoft patches

From: Brad Bemis (Brad.Bemis_at_airborne.com)
Date: 07/25/03

  • Next message: Ghaith Nasrawi: "RE: Cisco Workaround"
    Date: Fri, 25 Jul 2003 13:25:20 -0700
    To: security-basics@securityfocus.com
    
    

    -----BEGIN PGP SIGNED MESSAGE-----
    Hash: SHA1

    You need an SA contract with MS...

    Thank you for your time and attention,

    ========================
    Brad Bemis
    Information Security Services
    Airborne Express
    (206) 830-3478
    ========================
    Email Notice: This communication may contain sensitive information. If you
    are not the intended recipient, or believe that you have received this
    communication in error; do not print, copy, retransmit, disseminate, or
    otherwise use the information contained herein for any purpose. Please
    alert the sender that you have received this message in error, and delete
    the copy that you received.

    > -----Original Message-----
    > From: KOCHAR,GURPREET (HP-Singapore,ex1)
    > [mailto:gurpreet.kochar@hp.com]
    > Sent: Thursday, July 24, 2003 7:07 PM
    > To: Doug Massey; dnvaidya@rilinfo.net
    > Cc: 'Roger A. Grimes'; 'MOHESOWA BYAS';
    > security-basics@securityfocus.com
    > Subject: RE: Deploying Microsoft patches
    >
    >
    > From where can you download Software Assurance version of SUS
    >
    > Is it free of cost .
    >
    >
    >
    > -----Original Message-----
    > From: Doug Massey [mailto:doug@masseytechnologies.com]
    > Sent: Friday, July 25, 2003 1:37 AM
    > To: dnvaidya@rilinfo.net
    > Cc: 'Roger A. Grimes'; 'MOHESOWA BYAS';
    > security-basics@securityfocus.com
    > Subject: RE: Deploying Microsoft patches
    >
    >
    > SUS stands for System Update Services. It doesn't apply
    > service packs, only hot patches. I have it implemented and
    > it works quite well. The latest version allows you to
    > suppress the reboot if a user is logged on. If no one is
    > logged on, it installs and reboots. Once implemented, I
    > have had zero problems wiht it.
    > I deployed configuration information for SUS with Group
    > Policy.
    > As a means of deploying service packs, try Group Policy if
    > you have AD. That also works quite well in my experience.
    >
    > ---- Original message ----
    > >Date: Thu, 24 Jul 2003 10:19:00 +0530
    > >From: "D N Vaidya" <dnvaidya@rilinfo.net>
    > >Subject: RE: Deploying Microsoft patches
    > >To: "'Roger A. Grimes'" <rogerg@cox.net>, "'MOHESOWA BYAS'"
    > <byasmohesowa@sbm.intnet.mu>, <security- basics@securityfocus.com>
    > >
    > >May I know what is SUS stands for? Also I want to know the
    > best practice for
    > >deploying new Service Packs and Hot fixes in production
    > environment. Because
    > >I faced some problems after installing SP4 of Win2K server
    > on one production
    > >machin. That machine became very slow and stopped sending
    > mails to the
    > >Internet but i can send mails within Intranet.
    > >
    > >Next time I dont want to repeate same mistek. Also where I
    > can get the
    > >technical info of new service packs i.e. what changes that
    > SP is going to do
    > >on my system and is there any way to roll back only
    > required component of SP
    > >or Hot fix.
    > >
    > >Please help.
    > >
    > >Sincerely,
    > >D.N.Vaidya
    > >
    > >-----Original Message-----
    > >From: Roger A. Grimes [mailto:rogerg@cox.net]
    > >Sent: Tuesday, July 15, 2003 10:48 PM
    > >To: MOHESOWA BYAS; security-basics@securityfocus.com
    > >Subject: Re: Deploying Microsoft patches
    > >
    > >
    > >Yes on IE, no for IIS. Which is a little interesting
    > considering that it
    > >runs using IIS.
    > >
    > >Basically, it's Windows critical updates and security roll-
    > ups that you can
    > >see using Windows Update, minus driver updates and service
    > packs (service
    > >packs can be installed using the Software Assurance version
    > of SUS).
    > >
    > >Roger
    > >
    > >************************************************************
    > ****************
    > >****
    > >*Roger A. Grimes, Computer Security Consultant
    > >*CPA, MCSE (NT/2000), CNE (3/4), A+
    > >*email: rogerg@cox.net
    > >*cell: 757-615-3355
    > >*Author of Malicious Mobile Code: Virus Protection for
    > Windows by O'Reilly
    > >*http://www.oreilly.com/catalog/malmobcode
    > >*Author of upcoming Honeypots for Windows (Apress)
    > >************************************************************
    > ****************
    > >*****
    > >
    > >----- Original Message -----
    > >From: "MOHESOWA BYAS" <byasmohesowa@sbm.intnet.mu>
    > >To: <security-basics@securityfocus.com>
    > >Sent: Tuesday, July 15, 2003 1:20 AM
    > >Subject: RE: Deploying Microsoft patches
    > >
    > >
    > >> Can SUS be used to deploy Patch for IIS and IE?
    > >>
    > >> -----Original Message-----
    > >> From: Roger A. Grimes [mailto:rogerg@cox.net]
    > >> Sent: Saturday, July 12, 2003 01:08
    > >> To: security-basics@securityfocus.com
    > >> Subject: Re: Deploying Microsoft patches
    > >>
    > >>
    > >> The newest Software Assurance version of SUS can be used
    > to deploy service
    > >> packs.
    > >>
    > >> > You can't use SUS to deploy service packs.
    > >>
    > >>
    > >************************************************************
    > ****************
    > >> ****
    > >> *Roger A. Grimes, Computer Security Consultant
    > >> *CPA, MCSE (NT/2000), CNE (3/4), A+
    > >> *email: rogerg@cox.net
    > >> *cell: 757-615-3355
    > >> *Author of Malicious Mobile Code: Virus Protection for
    > Windows by
    > >O'Reilly
    > >> *http://www.oreilly.com/catalog/malmobcode
    > >> *Author of upcoming Honeypots for Windows (Apress)
    > >>
    > >************************************************************
    > ****************
    > >> *****
    > >>
    > >>
    > >> ----------------------------------------------------------
    > ----------------
    > >-
    > >> Evaluating SSL VPNs' Consider NEOTERIS, chosen as leader
    > by top analysts!
    > >> The Gartner Group just put Neoteris in the top of its
    > Magic Quadrant,
    > >> while InStat has confirmed Neoteris as the leader in
    > marketshare.
    > >>
    > >> Find out why, and see how you can get plug-n-play secure
    > remote access in
    > >> about an hour, with no client, server changes, or ongoing
    > maintenance.
    > >>
    > >> Visit us at: http://www.neoteris.com/promos/sf-6-9.htm
    > >> ----------------------------------------------------------
    > ----------------
    > >--
    > >> ###########################################
    > >>
    > >> This message has been scanned by F-Secure Anti-Virus for
    > Microsoft
    > >Exchange.
    > >> For more information, connect to http://www.F-Secure.com/
    > >>
    > >> ----------------------------------------------------------
    > ----------------
    > >-
    > >> Evaluating SSL VPNs' Consider NEOTERIS, chosen as leader
    > by top analysts!
    > >> The Gartner Group just put Neoteris in the top of its
    > Magic Quadrant,
    > >> while InStat has confirmed Neoteris as the leader in
    > marketshare.
    > >>
    > >> Find out why, and see how you can get plug-n-play secure
    > remote access in
    > >> about an hour, with no client, server changes, or ongoing
    > maintenance.
    > >>
    > >> Visit us at: http://www.neoteris.com/promos/sf-6-9.htm
    > >> ----------------------------------------------------------
    > ----------------
    > >--
    > >>
    > >>
    > >
    > >
    > >------------------------------------------------------------
    > ---------------
    > >Evaluating SSL VPNs' Consider NEOTERIS, chosen as leader by
    > top analysts!
    > >The Gartner Group just put Neoteris in the top of its Magic
    > Quadrant,
    > >while InStat has confirmed Neoteris as the leader in
    > marketshare.
    > >
    > >Find out why, and see how you can get plug-n-play secure
    > remote access in
    > >about an hour, with no client, server changes, or ongoing
    > maintenance.
    > >
    > >Visit us at: http://www.neoteris.com/promos/sf-6-9.htm
    > >------------------------------------------------------------
    > ----------------
    > >
    > >
    > >
    > >------------------------------------------------------------
    > ---------------
    > >------------------------------------------------------------
    > ----------------
    > >
    > Doug Massey
    > Massey Technologies, Inc.
    > 301-717-6404
    >
    > --------------------------------------------------------------
    > -------------
    > --------------------------------------------------------------
    > --------------
    >
    > --------------------------------------------------------------
    > -------------
    > --------------------------------------------------------------
    > --------------
    >
    >
    >

    -----BEGIN PGP SIGNATURE-----

    iQA/AwUBPyGSMJDnOfS48mrdEQJ/BQCff28bVEtyMHG2yNMClpw9ZBjmr9oAniQs
    I43kUtMc0YTX3Q3LSahEIKNb
    =0m8l
    -----END PGP SIGNATURE-----

    ---------------------------------------------------------------------------
    ----------------------------------------------------------------------------


  • Next message: Ghaith Nasrawi: "RE: Cisco Workaround"

    Relevant Pages

    • RE: Deploying Microsoft patches
      ... May I know what is SUS stands for? ... deploying new Service Packs and Hot fixes in production environment. ... Subject: Deploying Microsoft patches ... > Evaluating SSL VPNs' Consider NEOTERIS, chosen as leader by top analysts! ...
      (Security-Basics)
    • RE: Deploying Microsoft patches
      ... service packs, only hot patches. ... I deployed configuration information for SUS with Group ... it's Windows critical updates and security roll- ... >> Evaluating SSL VPNs' Consider NEOTERIS, ...
      (Security-Basics)
    • RE: Deploying Microsoft patches
      ... From where can you download Software Assurance version of SUS ... Subject: Deploying Microsoft patches ... service packs, only hot patches. ... >> Evaluating SSL VPNs' Consider NEOTERIS, ...
      (Security-Basics)
    • SUS changes - the word from Microsoft as posted into the SUS newsgroup...
      ... and Windows XP SP1 as new content through SUS. ... newsgroup, as well as a couple of 3rd party community sites, but we did not ... required registration to download or use SUS. ... no. Delivering service packs is essentially the same as ...
      (NT-Bugtraq)