RE: Deploying Microsoft patches

From: Alexander Suhovey (asuhovey_at_mtu-net.ru)
Date: 09/12/03

Next message: Spencer D'oro: "RE: AW: SUS Help"

Previous message: Gregory M. Brown: "RE: Enterprise AV"
In reply to: Jane Han: "Re: Deploying Microsoft patches"
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]

To: <ashur624@erau.edu>
Date: Fri, 12 Sep 2003 22:03:04 +0400

> > -----Original Message-----
> > From: Kevin Ashurst [mailto:ashur624@erau.edu]
> > Sent: Friday, July 11, 2003 2:50 PM
> > To: Ronish Mehta
> > Cc: security-basics@securityfocus.com
> > Subject: RE: Deploying Microsoft patches
[...]
> If you choose to use SUS, consider these caveats:
> You can't use a domain controller (DC) as a SUS
[...]

From SUS SP1 Release Notes [1]:
--snip--
Some of the improvements described in the release notes include:
Ability to run on Windows 2000 Domain Controller and Small Business
Server
--snip--

[1] http://www.microsoft.com/windows2000/docs/SUS_sp1_install.doc

Al.

> -----Original Message-----
> From: Jane Han [mailto:janehan22@yahoo.com]
> Sent: Thursday, September 11, 2003 6:45 PM
> To: ashur624@erau.edu
> Cc: security-basics@securityfocus.com
> Subject: Re: Deploying Microsoft patches
>
>
> How can you apply different patches to w2k and win xp
> client machines since the patch is different with
> these clients? or it does not matter since the patch
> can recognize thedifferent OS and apply them?
>
> I just set up SUS and deploy it through group policy.
>
> Thanks,
>
> Jane
> >
> > -----Original Message-----
> > From: Kevin Ashurst [mailto:ashur624@erau.edu]
> > Sent: Friday, July 11, 2003 2:50 PM
> > To: Ronish Mehta
> > Cc: security-basics@securityfocus.com
> > Subject: RE: Deploying Microsoft patches
> >
> >
> > Try SUS from M$. Its free. You just set up your
> > windows 2000 server as a
> > windows update server for your organization. Then
> > you can turn on
> > automatic update featue on your clients, without
> > filling up your pipe to
> > the internet.
> >
> >
> http://www.microsoft.com/windows2000/windowsupdate/sus/default.asp
> >
> > If you choose to use SUS, consider these caveats:
> >
> > You can't use a domain controller (DC) as a SUS
> > server, but you can use
> > a DC as a client. You can't use SUS to deploy
> > service packs. You can't
> > use SUS to deploy your own updates (you can use this
> > tool to deploy only
> > Windows critical updates, Windows critical security
> > updates, and Windows
> > security roll-ups)
> >
> > A good article about SUS setup and maintenance:
> >
> >
> http://www.winnetmag.com/Articles/Index.cfm?ArticleID=26752
> >
> > -Kevin
> >
> >
> >
> > -----Original Message-----
> > From: Ronish Mehta [mailto:sf_mail_sbm@yahoo.com]
> > Sent: Friday, July 11, 2003 2:47 AM
> > To: security-basics@securityfocus.com
> > Subject: Deploying Microsoft patches
> >
> >
> > Hi,
> > there are about 500 pcs in the company that i work
> > for,
> > all of them are on Win 2K Professional
> >
> > With this amount of PCs, it is very difficult to
> > keep
> > all of these PCs patched with the latest security
> > patches
> >
> > We have tried to automate the process by launching
> > the installation by
> > using AD 'Startup Script'. However the patch is
> > installed every time the
> > PC is booted
> >
> > Currently we are deploying patches manually, and
> > this
> > is very time consuming, and we are not able to keep
> > uptodate with the latest patches being released by
> > Microsoft
> >
> > Anyone who has an automated process for deploying
> > patches without the use of Commercial tools for
> > remote installations?
> >
> > Thanks!
> >
> >
> >
> > __________________________________
> > Do you Yahoo!?
> > SBC Yahoo! DSL - Now only $29.95 per month! http://sbc.yahoo.com
> >
> >
> --------------------------------------------------------------
> ----------
> > ---
> > Evaluating SSL VPNs' Consider NEOTERIS, chosen as
> > leader by top
> > analysts! The Gartner Group just put Neoteris in the
> > top of its Magic
> > Quadrant, while InStat has confirmed Neoteris as the
> > leader in
> > marketshare.
> >
> > Find out why, and see how you can get plug-n-play
> > secure remote access
> > in about an hour, with no client, server changes, or
> > ongoing
> > maintenance.
> >
> > Visit us at:
> > http://www.neoteris.com/promos/sf-6-9.htm
> >
> --------------------------------------------------------------
> ----------
> > ----
> >
> >
> >
> >
> >
> --------------------------------------------------------------
> ----------
> > ---
> > Evaluating SSL VPNs' Consider NEOTERIS, chosen as
> > leader by top
> > analysts! The Gartner Group just put Neoteris in the
> > top of its Magic
> > Quadrant, while InStat has confirmed Neoteris as the
> > leader in
> > marketshare.
> >
> > Find out why, and see how you can get plug-n-play
> > secure remote access
> > in about an hour, with no client, server changes, or
> > ongoing
> > maintenance.
> >
> > Visit us at:
> > http://www.neoteris.com/promos/sf-6-9.htm
> >
> --------------------------------------------------------------
> ----------
> > ----
> >
>
>
> __________________________________
> Do you Yahoo!?
> Yahoo! SiteBuilder - Free, easy-to-use web site design software
> http://sitebuilder.yahoo.com
>
> --------------------------------------------------------------
> -------------
> Captus Networks
> Are you prepared for the next Sobig & Blaster?
> - Instantly Stop DoS/DDoS Attacks, Worms & Port Scans
> - Precisely Define and Implement Network Security
> - Automatically Control P2P, IM and Spam Traffic
> FIND OUT NOW - FREE Vulnerability Assessment Toolkit
> http://www.captusnetworks.com/ads/42.htm
> --------------------------------------------------------------
> --------------
>

---------------------------------------------------------------------------
Captus Networks
Are you prepared for the next Sobig & Blaster?
- Instantly Stop DoS/DDoS Attacks, Worms & Port Scans
- Precisely Define and Implement Network Security
- Automatically Control P2P, IM and Spam Traffic
FIND OUT NOW - FREE Vulnerability Assessment Toolkit
http://www.captusnetworks.com/ads/42.htm
----------------------------------------------------------------------------

Next message: Spencer D'oro: "RE: AW: SUS Help"

Previous message: Gregory M. Brown: "RE: Enterprise AV"
In reply to: Jane Han: "Re: Deploying Microsoft patches"
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]

Relevant Pages

RE: Deploying Microsoft patches
... The down side to SUS is it only does critical updates, ... Windows platforms and software, Unix (a number of commercial flavors - ... platforms (down to media player patches). ... The Gartner Group just put Neoteris in the top of its Magic ...
(Security-Basics)
Re: Deploying Microsoft patches
... How can you apply different patches to w2k and win xp ... I just set up SUS and deploy it through group policy. ... > a DC as a client. ... The Gartner Group just put Neoteris in the ...
(Security-Basics)
RE: MS Software Update Service
... I looked extensively at SUS and it looks like it provides a reasonable ... Update client provides a great option for "hands free" fully automated ... MS patches without testing first. ... - cannot install Service Packs (though note that Service Packs can be ...
(Focus-Microsoft)
Re: SUS server, questions
... It seems the MS SUS utility may ... > 1) Can the clients be setup to install the updates automatically at logon ... the autoupdate client can be set at the domain level however using group ... The AU client allows for patches to be downloaded on a predetermined ...
(microsoft.public.win2000.security)
RE: Deploying Microsoft patches
... I don't know how good it is, as I am just deploying it myself, but if it ... One other thing, over half the patches they announce, don't require you ... SUS seems to have good documentation, ... The Gartner Group just put Neoteris in the top of its Magic Quadrant, ...
(Security-Basics)