Re: running patches as admin
From: Torgeir Bakken (MVP) (Torgeir.Bakken-spam@hydro.com)
Date: 03/25/03
- Next message: Steven L Umbach: "Re: Setup firewall using W2K IPSec MMC snap-in?"
- Previous message: Steven L Umbach: "Re: Remote registry and security template"
- In reply to: JK: "running patches as admin"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Date: Tue, 25 Mar 2003 22:47:06 +0100 From: "Torgeir Bakken (MVP)" <Torgeir.Bakken-spam@hydro.com>
JK wrote:
> Is there a way to modify Microsoft Patches so they don't
> require a user with administrator rights to run them?
>
> i.e. http://www.microsoft.com/technet/treeview/?
> url=/technet/security/bulletin/MS03-004.asp
>
> We need to run this on hundreds of computers. We are a
> mixed Microsoft and Novell environment.
Hi
>From logon script:
Some 3rd party RunAs solution that "hides" (encrypt) username/password are
listed in the link below (buy solutions). Can be run from network shares, so
nothing needs to be installed on the client computers.
http://groups.google.com/groups?selm=3E272913.27CBE26D%40hydro.com
You could look into SUS:
Microsoft Software Update Services
http://www.microsoft.com/windows2000/windowsupdate/sus/default.asp
Note that the free version will only install critical updates and security
rollup packages (SRPs).
SUS needs to be installed on a IIS server. Supports Win2k and WinXP clients
only. SP1 for WinXP and SP3 for Win2k installs the WU/SUS client as default.
http://www.microsoft.com/technet/itsolutions/msm/swdist/pmsusog.asp
Some info from a previous content in the URL above:
<quote>
SUS is available in two versions. One can be downloaded from
http://www.microsoft.com/windows2000/windowsupdate/SUS/default.asp ; the other
is available as a licensing program. The downloadable version downloads and
installs operating system critical updates and security rollup packages (SRPs).
All other patches, including applications, service packs, and non-critical
updates that need to be installed before they are issued as a security rollup
package, go through distribution and deployment.
For those customers on the Microsoft Software Assurance (SA) licensing program,
a more comprehensive version of SUS is available that can download and install
operating system service packs, non-critical security updates, and selected
Quick Fix Engineering (QFE) fixes determined to be vital to the successful
operation of the operating system. This version is known as SUS SA Edition.
Organizations wanting to obtain and use SUS SA Edition in their environments
will need to participate in the Software Assurance program. For more
information
on this program and licensing in general, see
http://www.microsoft.com/licensing/default.asp.
</quote>
Note that the SUS SA Edition still is in beta but should be available in a
release version soon.
There is a separate newsgroup for SUS:
microsoft.public.softwareupdatesvcs
URL to the group softwareupdatesvcs for those who uses the not so good Web
interface to access the newsgroups:
http://communities.microsoft.com/Newsgroups/default.asp?ICP=MSCOM&sLCID=US&newsgroup=microsoft.public.softwareupdatesvcs
A Web site about SUS with a FAQ and a SUS forum:
SUSserver.com
http://www.susserver.com/
When evaluating hotfix administration methods/programs, there are also 3rd
party
solutions available that will give a lot more than what SUS offer, but of
course, they are not free. It is as always a cost/benefit analyze that needs to
be done.
Below is links to a 3rd party product example that does not need a server to
run
and no IIS is needed. You can deploy mostly all types of hotfixes and service
packs from an ordinary workstation if you want. I have not tested it, but it
gets a lot of prize by other people e.g. in the newsgroups.
UpdateEXPERT from Sunbelt
http://www.sunbelt-software.com/product.cfm?id=357
UpdateEXPERT reseller with a price list
http://www.softwareshelf.com/products/display.asp?p=71
-- torgeir Microsoft MVP Scripting and WMI, Porsgrunn Norway Administration scripting examples and an ONLINE version of the 1328 page Scripting Guide: http://www.microsoft.com/technet/scriptcenter
- Next message: Steven L Umbach: "Re: Setup firewall using W2K IPSec MMC snap-in?"
- Previous message: Steven L Umbach: "Re: Remote registry and security template"
- In reply to: JK: "running patches as admin"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Relevant Pages
|
|
