Patch Management Recommendation

From: adfreak (rtivnan_at_comcast.net)
Date: 09/11/03


Date: Thu, 11 Sep 2003 09:29:50 -0400


Hello,

In light of the recent Blaster & RPC vulnerabilities, my client who up to
this point has to patch management process in place, has stopped all other
initiatives to put one in place. I recommended to them SUS. I've already
built a SUS server and synchronized it with the MS Windows Update site. Now
I need to put a plan of action together for updating our desktops with the
Automatic Update 2.2 client. Let me state that we do not have AD deployed
as of yet (in the planning stages as of this writing unfortunately). Our
desktops consist of everything:
XP SP1
XP
W2K Pro
98
95

I know that SUS can only be used with W2K SP3 or greater and XP SP1. My
client just purchased GFI's Languard NSS yesterday. We're using that tool
the past 24 hours to push our MS03-039. In the meantime, I need to get a
plan in place to do the following (let me know if I'm missing something).

For the W2K machines that are at SP2 or lower and the XP machines without
SP1, figure out a way to install the update AU client.
Since we're not running AD and cannot use GPO, once all the clients have the
AU 2.2 client, come up with a way to change the registry on them to point to
the inhouse SUS server I built.

What would be the easiest way to go about doing this taking into
consideration the 2 tools I have (SUS and GFI).

Thanks



Relevant Pages

  • Re: Error message
    ... I'm not on sp1. ... I am experiencing the long delay in log off from an Adv Client running Term ... I have some remote machines that connect sporadically over vpn and probably ... > Advanced Clients in Systems Management Server 2003 ...
    (microsoft.public.sms.admin)
  • Re: Error message
    ... that this hotfix is more about fixing the 'noise level' in the Event Log ... than fixing client functionality. ... > I'm not on sp1. ... > machines showing this error? ...
    (microsoft.public.sms.admin)
  • Re: Access 2007
    ... The client machines have the "free" Access runtime version installed. ... I recently installed SP1 for Office 2007 on my computer. ... I had them DL the SP2 file and install it on their individual machines. ...
    (comp.databases.ms-access)
  • Re: Access 2007
    ... However when I tried to install SP1 on the machines with Access ... The client machines have the "free" Access runtime version installed. ...
    (comp.databases.ms-access)
  • Re: How can I Use the SUS feature on standalone computers?
    ... There are also 5 laptops that they belong to sales ... > 1) Download the SUS Server component and install it into the DC; ... > 2) Download the GPO component wua.adm and add it to the Domain GPO; ... > 3) The Client component is not necessary because the client are update to ...
    (microsoft.public.windowsupdate)

Quantcast