Re: Patch Management

From: Molnir (Molnir_at_discussions.microsoft.com)
Date: 01/28/05

  • Next message: K.V: "Re: Event Logs" 
    Date: Thu, 27 Jan 2005 19:03:06 -0800

    "Steven L Umbach" wrote:

    > As Danny referred to Software Update Services is freely available and works
    > well. It installs on a server running IIS on your domain, preferrerably one
    > that is not using IIS for anything else. The nice thing about SUS is that
    > you can download the updates to your SUS server from Microsoft, approve the
    > ones you want to issue, and the domain computers will pull the updates from
    > your SUS server. It can also distribute Service Packs and domain clients can
    > be configured via Group Policy to automate the whole patching process
    > without requiring the domain user to be a local administrator. When you
    > setup SUS I suggest you use the manual/advanced option so you can specify
    > the drive to store the downloaded updates. --- Steve

    Thanks for the responses.

    I've used SUS before, but not in an environment this large. The two problems
    that we have with SUS is that it currently only supports OS patches (we'd
    like something that does SQL, Office, etc. as well) and there's no method for
    determining what workstations actually successfully download the updates (in
    other words, reporting is nil).

    Thanks again.

  • Next message: K.V: "Re: Event Logs"

    Relevant Pages

    • RE: Deploying Microsoft patches
      ... Try SUS from M$. ... windows update server for your organization. ... You can't use SUS to deploy your own updates (you can use this tool to ...
      (Security-Basics)
    • Re: Error 0x80070057
      ... For suggestions related to SUS please post on the SUS newsgroup: ... I have a 'closed' system with no outside internet access. ... SUS runs on the server. ... Under Options on the SUS server I just set it to> get updates from another SUS server. ...
      (microsoft.public.windowsupdate)
    • Re: Newbie has two SBS2003 issues
      ... personally prefer to manually approve updates in SUS. ... Whether your servers or even workstations see these updates in SUS would ... There was a brief period a few weeks ago where an SBS 2k3 server, ... So far as the backups go, you'd have to inspect the backup logs themselves ...
      (microsoft.public.windows.server.sbs)
    • Re: SUS not updating on clients and servers
      ... be sure the SUS policy scope is directed towards the ... >computers for your Automatic Updates settings. ... >server by fully qualified domain name. ...
      (microsoft.public.windows.group_policy)
    • Re: "iusr_servername" user logon errors
      ... SUS is on a member server. ... the domain are now downloading updates by SUS but client ... >> on the SUS server when AU clients try to connect to IIS. ...
      (microsoft.public.inetserver.iis.security)