RE: Can I update a new patch for the whole windows computers of m

From: Rod Trent (rodtrent_at_yahoo.com)
Date: 10/21/03

  • Next message: Jorge Garcia: "hunt tool"
    To: <kurtis.myers@us.army.mil>, <chchin@iastate.edu>, <ehagen@DenverNewspaperAgency.com>, <chris.meidinger@badenit.de>, <jay.stapleton@mnr.gov.on.ca>, <s970501@ku.edu.np>, <security-basics@securityfocus.com>
    Date: Tue, 21 Oct 2003 13:52:03 -0400
    
    

    The functionality of the old qchain.exe is built into the current update.exe
    that is used to install patches, and it is smart enough to not overwrite
    newer binaries with older ones.

    -----Original Message-----
    From: kurtis.myers@us.army.mil [mailto:kurtis.myers@us.army.mil]
    Sent: Tuesday, October 21, 2003 2:22 AM
    To: chchin@iastate.edu; ehagen@DenverNewspaperAgency.com;
    chris.meidinger@badenit.de; jay.stapleton@mnr.gov.on.ca; s970501@ku.edu.np;
    security-basics@securityfocus.com
    Subject: RE: Can I update a new patch for the whole windows computers of m

    Use of SUS is an option; but when implementing it is critical that 1) the
    machines are current with patches, or 2) the SA must properly approve the
    installation of the patch. It was our experience that when approving
    patches with SUS there is no control for the sequence of applying the patch;
    therefore one may get an older patch installed after an earlier one which
    will negate the effects. Once all systems are updated in the proper
    sequence then SUS is a good tool for patch application. One also must
    understand their architechture to ensure that the background activity
    doesn't impede normal operation.

    Kurt Myers

    -----Original Message-----
    From: Chee Heng Chin [mailto:chchin@iastate.edu]
    Sent: Monday, October 20, 2003 11:19 PM
    To: Hagen, Eric; Meidinger Chris; 'jay.stapleton@mnr.gov.on.ca';
    s970501@ku.edu.np; security-basics@securityfocus.com
    Subject: RE: Can I update a new patch for the whole windows computers of m

    Why don't you just use MS SUS? It's free.
    > I'm curious what the overall costs for implementing this in a
    > medium/large enterprise with several thousand users.
    >
    > We've been evaluating "LAN Guard" but would be open to other options.
    >
    > Eric Hagen
    >
    > -----Original Message-----
    > From: Meidinger Chris [mailto:chris.meidinger@badenit.de]
    > Sent: Monday, October 20, 2003 3:43 AM
    > To: 'jay.stapleton@mnr.gov.on.ca'; s970501@ku.edu.np;
    > security-basics@securityfocus.com
    > Subject: RE: Can I update a new patch for the whole windows computers
    > of m y organization in my room?
    >
    >
    > hfnetcheckpro from www.shavlik.com is a pretty robust solution.
    >
    > Chris Meidinger
    > IT Technology and Services
    >
    > badenIT GmbH
    > Innovationstechnologie für Ihre Zukunft
    >
    > Tel. +49 761 279 2280
    > Fax. +49 761 279 2200
    >
    > Tullastrasse 70
    > 79108 Freiburg
    > Deutschland
    >
    > -----Original Message-----
    > From: jay.stapleton@mnr.gov.on.ca [mailto:jay.stapleton@mnr.gov.on.ca]
    > Sent: Friday, October 17, 2003 7:31 PM
    > To: s970501@ku.edu.np; security-basics@securityfocus.com
    > Subject: RE: Can I update a new patch for the whole windows computers
    > of m y organization in my room?
    >
    >
    > I've been using <a
    > href="http://www.sysinternals.com/ntw2k/freeware/psexec.shtml">psexec<
    > > /A> from sysinternals. It's quite handy for patch delivery.
    >
    > Then you just have to confirm that you are running the correct version
    > of the patch for each operating system.
    > I have a script set up to run psinfo (from the same package as psexec),
    > use
    > `cut` to pick out the version, and
    > run the correct patch. I just have to feed it a list of IP addresses.
    >
    > If you've got a large network, <a
    > href="http://www.microsoft.com/windowsserversystem/sus/default.mspx">S
    > > US</a> or from Microsoft might better suit your needs.
    >
    > - Jay Stapleton
    >
    >
    > -----Original Message-----
    > From: s970501@ku.edu.np [mailto:s970501@ku.edu.np]
    > Sent: Friday, October 17, 2003 9:23 AM
    > To: security-basics@securityfocus.com
    > Subject: Can I update a new patch for the whole windows computers of
    > my organization in my room?
    >
    >
    > Hi, i have a question.
    > Can I update a new patch for the whole windows computers of my
    > organization in my room? usually, i run windows-update from all the
    > computers. or download patch file once and run it on every computer.
    > it's really time consuming job, you know...
    > anybody can give me a neat advice??? :)
    >
    >
    >
    >
    > ------------------------------------------------------------------------>

    ---
    > FREE Whitepaper: Better Management for Network Security
    > 
    > Looking for a better way to manage your IP security?
    > Learn how Solsoft can help you:
    > - Ensure robust IP security through policy-based management
    > - Make firewall, VPN, and NAT rules interoperable across heterogeneous 
    > networks
    > - Quickly respond to network events from a central console
    > 
    > Download our FREE whitepaper at: 
    > http://www.securityfocus.com/sponsor/Solsoft_security-basics_031015
    > ------------------------------------------------------------------------>
    ----
    > 
    > ------------------------------------------------------------------------>
    ---
    > FREE Whitepaper: Better Management for Network Security
    > 
    > Looking for a better way to manage your IP security?
    > Learn how Solsoft can help you:
    > - Ensure robust IP security through policy-based management
    > - Make firewall, VPN, and NAT rules interoperable across heterogeneous 
    > networks
    > - Quickly respond to network events from a central console
    > 
    > Download our FREE whitepaper at: 
    > http://www.securityfocus.com/sponsor/Solsoft_security-basics_031015
    > ------------------------------------------------------------------------>
    ----
    > 
    > ------------------------------------------------------------------------>
    ---
    > FREE Whitepaper: Better Management for Network Security
    > 
    > Looking for a better way to manage your IP security?
    > Learn how Solsoft can help you:
    > - Ensure robust IP security through policy-based management
    > - Make firewall, VPN, and NAT rules interoperable across heterogeneous 
    > networks
    > - Quickly respond to network events from a central console
    > 
    > Download our FREE whitepaper at: 
    > http://www.securityfocus.com/sponsor/Solsoft_security-basics_031015
    > ------------------------------------------------------------------------>
    ----
    > 
    > ----------------------------------------------------------------------
    > -----
    > FREE Whitepaper: Better Management for Network Security
    > 
    > Looking for a better way to manage your IP security?
    > Learn how Solsoft can help you:
    > - Ensure robust IP security through policy-based management
    > - Make firewall, VPN, and NAT rules interoperable across heterogeneous 
    > networks
    > - Quickly respond to network events from a central console
    > 
    > Download our FREE whitepaper at: 
    > http://www.securityfocus.com/sponsor/Solsoft_security-basics_031015
    > ----------------------------------------------------------------------
    > ------
    > 
    > 
    Chee-Heng Chin
    ---------------------------------------------------------------------------
    FREE Whitepaper: Better Management for Network Security
    Looking for a better way to manage your IP security?
    Learn how Solsoft can help you:
    - Ensure robust IP security through policy-based management
    - Make firewall, VPN, and NAT rules interoperable across heterogeneous
    networks
    - Quickly respond to network events from a central console
    Download our FREE whitepaper at:
    http://www.securityfocus.com/sponsor/Solsoft_security-basics_031015
    ----------------------------------------------------------------------------
    ---------------------------------------------------------------------------
    FREE Whitepaper: Better Management for Network Security
    Looking for a better way to manage your IP security?
    Learn how Solsoft can help you:
    - Ensure robust IP security through policy-based management
    - Make firewall, VPN, and NAT rules interoperable across heterogeneous
    networks
    - Quickly respond to network events from a central console
    Download our FREE whitepaper at:
    http://www.securityfocus.com/sponsor/Solsoft_security-basics_031015
    ----------------------------------------------------------------------------
    ---------------------------------------------------------------------------
    Visual & Easy-to-use are not words that you think of when talking about 
    network analyzers. Are you sick of the three window text decodes? Download ClearSight Network's Analyzer and see a new network analysis tool that 
    makes the complex - easy
    http://www.securityfocus.com/sponsor/ClearSightNetworks_security-basics_031021
    ----------------------------------------------------------------------------
    

  • Next message: Jorge Garcia: "hunt tool"

    Relevant Pages

    • RE: Auditing enabled but Logon Failures not showing up
      ... FREE Whitepaper: Better Management for Network Security ... Ensure robust IP security through policy-based management ...
      (Focus-Microsoft)
    • RE: Auditing enabled but Logon Failures not showing up
      ... FREE Whitepaper: Better Management for Network Security ... Ensure robust IP security through policy-based management ...
      (Focus-Microsoft)
    • Re: Terminal Services Auditing?
      ... Read Special Ops and mount an assault to eradicate network negligence today. ... FREE Whitepaper: Better Management for Network Security ... Ensure robust IP security through policy-based management ...
      (Focus-Microsoft)
    • RE: Alternatives to sftp?
      ... FREE Whitepaper: Better Management for Network Security ... Ensure robust IP security through policy-based management ...
      (Security-Basics)
    • RE: Alternatives to sftp?
      ... FREE Whitepaper: Better Management for Network Security ... Ensure robust IP security through policy-based management ...
      (Security-Basics)