RE: Program with Functionality Similar to UpdateEXPERT?

From: Chris Berry (compjma_at_hotmail.com)
Date: 09/09/03

  • Next message: Paul Farag: "Re: ICMP (Ping)"
    To: security-basics@securityfocus.com
    Date: Mon, 08 Sep 2003 16:33:05 -0700
    
    

    >From: "Jason Balicki" <kodak@frontierhomemortgage.com>
    > >From: Chris Berry [mailto:compjma@hotmail.com]
    >
    > >However if you don't want to do that, why not
    > >just turn on the auto-update feature for all the workstations?
    >
    >Because automatic updates are dangerous. I need to test the
    >updates in our specific environment before I apply them
    >network-wide.
    >
    >Microsoft updates have broken things before (811493 for example)
    >and testing patches=saved asses.

    That's sound planning. Hmm, have you considered using samba 3.0 to deploy
    them using group policy objects, or you could download and distribute using
    logon scripts, or you could probably write a perl program to distribute it
    for you, etc. etc. What I do is use my workstation as the patch test bed.

    >And in regards to an "all MS" shop -- yeah, only one would be
    >needed. But it's a slippery slope. :)

    Hehe that's true. I don't have any choice here, some of our apps only run
    on MS OS.

    Chris Berry
    compjma@hotmail.com
    Systems Administrator
    JM Associates

    "Conciousness: that annoying time between naps."

    _________________________________________________________________
    Try MSN Messenger 6.0 with integrated webcam functionality!
    http://www.msnmessenger-download.com/tracking/reach_webcam

    ---------------------------------------------------------------------------
    Captus Networks
    Are you prepared for the next Sobig & Blaster?
     - Instantly Stop DoS/DDoS Attacks, Worms & Port Scans
     - Precisely Define and Implement Network Security
     - Automatically Control P2P, IM and Spam Traffic
    FIND OUT NOW - FREE Vulnerability Assessment Toolkit
    http://www.captusnetworks.com/ads/42.htm
    ----------------------------------------------------------------------------


  • Next message: Paul Farag: "Re: ICMP (Ping)"

    Relevant Pages

    • Re: Reporting Hackers
      ... Have you patched the programs OTHER than Windows XP/Norton using their ... Patches and Updates! ... How to configure and use Automatic Updates in Windows XP ... are pay - some you can only download if you are registered - but it is best ...
      (microsoft.public.windowsxp.security_admin)
    • Re: WSUS 3.0
      ... POLICY!!AutoUpdateCfg ... AutoUpdateCfg="Configure Automatic Updates" ... If any of the updates require a restart to complete the installation, Windows will restart the computer automatically. ...
      (microsoft.public.windows.server.general)
    • Re: wsus question
      ... Did you install the .adm and configure it for the clients? ... POLICY!!AutoUpdateCfg ... AutoUpdateCfg="Configure Automatic Updates" ...
      (microsoft.public.windows.server.general)
    • Re: how to add computers to WSUS computer group
      ... POLICY!!AutoUpdateCfg ... AutoUpdateCfg="Configure Automatic Updates" ...
      (microsoft.public.windows.server.general)
    • Re: When Automatic Updates can be harmful
      ... I was advised nearly 12 months ago by an MVP to be cautious of MS updates. ... For years I've been advising Windows consumers to disable Automatic ... Don't click the Automatic Updates bar at ... Microsoft pushes out the Patch Tuesday door. ...
      (microsoft.public.windowsxp.general)