Re: SUS server, questions

From: Brendon Rogers (brendon_at_nospam-itology.net)
Date: 08/16/03


Date: Sat, 16 Aug 2003 17:10:50 -0400


Answers inline.

Also see the whitepaper:
http://www.microsoft.com/windows2000/windowsupdate/sus/default.asp

"Bob_M" <Stardate10@hotmail.com> wrote in message
news:%23Iz6FCDZDHA.384@TK2MSFTNGP12.phx.gbl...
> Hi All,
>
> We have about a 70 user network and would like to find an easier way to
> deploy the MS patches to the workstations. It seems the MS SUS utility may
> help but I have a few questions.
>
> 1) Can the clients be setup to install the updates automatically at logon
to
> the domain?

The client PC's run the Automatic Update service (also known as Windows
Update or WU). This client downloads updates from the SUS server whenever
they are available and whenever the client is online. It uses idle bandwidth
and won't affect other applications in use. The part that is configurable is
when the updates are installed - there are a number of options.

>
> 2) What if a user (all of them) do not have administrator privileges?

No admin rights are needed because the WU client does the install.

>
> 3) Does SUS do service packs?

Not the current version of SUS.

>
> 4) Can you control what patches the clients are allowed to load at the SUS
> server? In other words, I would like to test each patch before it's
> automatically applied. I can imagine coming in some morning and find the
> whole network down because of one misbehaved patch.

Yes you can.

>
> Thanks
>
> bob
>
>



Relevant Pages

  • RE: pushing updates to windows clients
    ... If you are really looking for a push technology, SUS is not it. ... The end result is the client gets patch with the ... pushing updates to windows clients ... Attend a course taught by an expert instructor with years of in-the-field ...
    (Security-Basics)
  • Re: MS SUS on SBS Using Group Policy
    ... Have you added the adm template for SUS? ... >updates to the client pcs on the network. ... As I thought it would be best on Client Computer GP ...
    (microsoft.public.windows.server.sbs)
  • Re: Logeinträge bei SUS-Server
    ... Laut Approval Log sind alle Updates freigegeben. ... Ich habe die GP nur an einem Rechner lokal ... wird das LogFile am SUS um genau diesen Eintrag erweitert. ... >für welche Zeit hast Du Deinen Client konfiguriert? ...
    (microsoft.public.de.security.netzwerk.sicherheit)
  • Re: client unable to update from sus server
    ... My first recommendation is to check out this white paper on SUS. ... have to manually set up every clients that will pull updates from SUS. ... > 2) on client machines in control panel automatic update ... > but there is no option to give sus server name .So how ...
    (microsoft.public.win2000.security)
  • Re: FYI for eTrust AV 7.x Users
    ... When I just had my little incident with the redistribution settings on the SBS, my clients were logging successful checks for updates, and the logs indicated that no updates were found. ... That turned out to be because I had not gone back and checked the redistribution server box for 8.x after reinstalling the redistribution server. ... installed the new remote install utility which works the same as v7 did - just edited the .ICF file the way I wanted it and ran the client upgrades from the server. ... I can't remember if it's a separate install, or if you have to click a box when you do the Agent install, but redistribution server is not installed by default. ...
    (microsoft.public.windows.server.sbs)