Security Basics mailing list archives

RE: Deploying Microsoft patches


From: "Alexander Suhovey" <asuhovey () mtu-net ru>
Date: Fri, 12 Sep 2003 22:03:04 +0400

-----Original Message-----
From: Kevin Ashurst [mailto:ashur624 () erau edu]
Sent: Friday, July 11, 2003 2:50 PM
To: Ronish Mehta
Cc: security-basics () securityfocus com
Subject: RE: Deploying Microsoft patches
[...]
If you choose to use SUS, consider these caveats: 
You can't use a domain controller (DC) as a SUS
[...]


From SUS SP1 Release Notes [1]:
--snip--
Some of the improvements described in the release notes include:
   Ability to run on Windows 2000 Domain Controller and Small Business
Server 
--snip--

[1] http://www.microsoft.com/windows2000/docs/SUS_sp1_install.doc

Al.



-----Original Message-----
From: Jane Han [mailto:janehan22 () yahoo com] 
Sent: Thursday, September 11, 2003 6:45 PM
To: ashur624 () erau edu
Cc: security-basics () securityfocus com
Subject: Re: Deploying Microsoft patches


How can you apply different patches to w2k and win xp
client machines since the patch is different with
these clients?  or it does not matter since the patch
can recognize thedifferent OS and apply them?

I just set up SUS and deploy it through group policy.

Thanks,

Jane

-----Original Message-----
From: Kevin Ashurst [mailto:ashur624 () erau edu]
Sent: Friday, July 11, 2003 2:50 PM
To: Ronish Mehta
Cc: security-basics () securityfocus com
Subject: RE: Deploying Microsoft patches


Try SUS from M$. Its free. You just set up your
windows 2000 server as a
windows update server for your organization. Then
you can turn on
automatic update featue on your clients, without
filling up your pipe to
the internet.


http://www.microsoft.com/windows2000/windowsupdate/sus/default.asp

If you choose to use SUS, consider these caveats:

You can't use a domain controller (DC) as a SUS
server, but you can use
a DC as a client. You can't use SUS to deploy
service packs. You can't
use SUS to deploy your own updates (you can use this
tool to deploy only
Windows critical updates, Windows critical security
updates, and Windows
security roll-ups)

A good article about SUS setup and maintenance:


http://www.winnetmag.com/Articles/Index.cfm?ArticleID=26752

-Kevin



-----Original Message-----
From: Ronish Mehta [mailto:sf_mail_sbm () yahoo com]
Sent: Friday, July 11, 2003 2:47 AM
To: security-basics () securityfocus com
Subject: Deploying Microsoft patches


Hi,
there are about 500 pcs in the company that i work
for,
all of them are on Win 2K Professional

With this amount of PCs, it is very difficult to
keep
all of these PCs patched with the latest security
patches

We have tried to automate the process by launching
the installation by
using AD 'Startup Script'. However the patch is
installed every time the
PC is booted

Currently we are deploying patches manually, and
this
is very time consuming, and we are not able to keep
uptodate with the latest patches being released by
Microsoft

Anyone who has an automated process for deploying
patches without the use of Commercial tools for
remote installations?

Thanks!



__________________________________
Do you Yahoo!?
SBC Yahoo! DSL - Now only $29.95 per month! http://sbc.yahoo.com


--------------------------------------------------------------
----------
---
Evaluating SSL VPNs' Consider NEOTERIS, chosen as
leader by top
analysts! The Gartner Group just put Neoteris in the
top of its Magic
Quadrant, while InStat has confirmed Neoteris as the
leader in
marketshare.

Find out why, and see how you can get plug-n-play
secure remote access
in about an hour, with no client, server changes, or
ongoing
maintenance.

Visit us at:
http://www.neoteris.com/promos/sf-6-9.htm

--------------------------------------------------------------
----------
----





--------------------------------------------------------------
----------
---
Evaluating SSL VPNs' Consider NEOTERIS, chosen as
leader by top
analysts! The Gartner Group just put Neoteris in the
top of its Magic
Quadrant, while InStat has confirmed Neoteris as the
leader in
marketshare.
     
Find out why, and see how you can get plug-n-play
secure remote access
in about an hour, with no client, server changes, or
ongoing
maintenance.
          
Visit us at:
http://www.neoteris.com/promos/sf-6-9.htm

--------------------------------------------------------------
----------
----



__________________________________
Do you Yahoo!?
Yahoo! SiteBuilder - Free, easy-to-use web site design software
http://sitebuilder.yahoo.com

--------------------------------------------------------------
-------------
Captus Networks 
Are you prepared for the next Sobig & Blaster? 
 - Instantly Stop DoS/DDoS Attacks, Worms & Port Scans 
 - Precisely Define and Implement Network Security 
 - Automatically Control P2P, IM and Spam Traffic 
FIND OUT NOW -  FREE Vulnerability Assessment Toolkit 
http://www.captusnetworks.com/ads/42.htm
--------------------------------------------------------------
--------------



---------------------------------------------------------------------------
Captus Networks 
Are you prepared for the next Sobig & Blaster? 
 - Instantly Stop DoS/DDoS Attacks, Worms & Port Scans 
 - Precisely Define and Implement Network Security 
 - Automatically Control P2P, IM and Spam Traffic 
FIND OUT NOW -  FREE Vulnerability Assessment Toolkit 
http://www.captusnetworks.com/ads/42.htm
----------------------------------------------------------------------------


Current thread: