Security Basics mailing list archives
RE: Deploying Microsoft patches
From: "Alexander Suhovey" <asuhovey () mtu-net ru>
Date: Fri, 12 Sep 2003 22:03:04 +0400
-----Original Message----- From: Kevin Ashurst [mailto:ashur624 () erau edu] Sent: Friday, July 11, 2003 2:50 PM To: Ronish Mehta Cc: security-basics () securityfocus com Subject: RE: Deploying Microsoft patches
[...]
If you choose to use SUS, consider these caveats: You can't use a domain controller (DC) as a SUS
[...]
From SUS SP1 Release Notes [1]:
--snip-- Some of the improvements described in the release notes include: Ability to run on Windows 2000 Domain Controller and Small Business Server --snip-- [1] http://www.microsoft.com/windows2000/docs/SUS_sp1_install.doc Al.
-----Original Message----- From: Jane Han [mailto:janehan22 () yahoo com] Sent: Thursday, September 11, 2003 6:45 PM To: ashur624 () erau edu Cc: security-basics () securityfocus com Subject: Re: Deploying Microsoft patches How can you apply different patches to w2k and win xp client machines since the patch is different with these clients? or it does not matter since the patch can recognize thedifferent OS and apply them? I just set up SUS and deploy it through group policy. Thanks, Jane-----Original Message----- From: Kevin Ashurst [mailto:ashur624 () erau edu] Sent: Friday, July 11, 2003 2:50 PM To: Ronish Mehta Cc: security-basics () securityfocus com Subject: RE: Deploying Microsoft patches Try SUS from M$. Its free. You just set up your windows 2000 server as a windows update server for your organization. Then you can turn on automatic update featue on your clients, without filling up your pipe to the internet.http://www.microsoft.com/windows2000/windowsupdate/sus/default.aspIf you choose to use SUS, consider these caveats: You can't use a domain controller (DC) as a SUS server, but you can use a DC as a client. You can't use SUS to deploy service packs. You can't use SUS to deploy your own updates (you can use this tool to deploy only Windows critical updates, Windows critical security updates, and Windows security roll-ups) A good article about SUS setup and maintenance:http://www.winnetmag.com/Articles/Index.cfm?ArticleID=26752-Kevin -----Original Message----- From: Ronish Mehta [mailto:sf_mail_sbm () yahoo com] Sent: Friday, July 11, 2003 2:47 AM To: security-basics () securityfocus com Subject: Deploying Microsoft patches Hi, there are about 500 pcs in the company that i work for, all of them are on Win 2K Professional With this amount of PCs, it is very difficult to keep all of these PCs patched with the latest security patches We have tried to automate the process by launching the installation by using AD 'Startup Script'. However the patch is installed every time the PC is booted Currently we are deploying patches manually, and this is very time consuming, and we are not able to keep uptodate with the latest patches being released by Microsoft Anyone who has an automated process for deploying patches without the use of Commercial tools for remote installations? Thanks! __________________________________ Do you Yahoo!? SBC Yahoo! DSL - Now only $29.95 per month! http://sbc.yahoo.com-------------------------------------------------------------- ------------- Evaluating SSL VPNs' Consider NEOTERIS, chosen as leader by top analysts! The Gartner Group just put Neoteris in the top of its Magic Quadrant, while InStat has confirmed Neoteris as the leader in marketshare. Find out why, and see how you can get plug-n-play secure remote access in about an hour, with no client, server changes, or ongoing maintenance. Visit us at: http://www.neoteris.com/promos/sf-6-9.htm-------------------------------------------------------------- ---------------------------------------------------------------------------- ------------- Evaluating SSL VPNs' Consider NEOTERIS, chosen as leader by top analysts! The Gartner Group just put Neoteris in the top of its Magic Quadrant, while InStat has confirmed Neoteris as the leader in marketshare. Find out why, and see how you can get plug-n-play secure remote access in about an hour, with no client, server changes, or ongoing maintenance. Visit us at: http://www.neoteris.com/promos/sf-6-9.htm-------------------------------------------------------------- --------------__________________________________ Do you Yahoo!? Yahoo! SiteBuilder - Free, easy-to-use web site design software http://sitebuilder.yahoo.com -------------------------------------------------------------- ------------- Captus Networks Are you prepared for the next Sobig & Blaster? - Instantly Stop DoS/DDoS Attacks, Worms & Port Scans - Precisely Define and Implement Network Security - Automatically Control P2P, IM and Spam Traffic FIND OUT NOW - FREE Vulnerability Assessment Toolkit http://www.captusnetworks.com/ads/42.htm -------------------------------------------------------------- --------------
--------------------------------------------------------------------------- Captus Networks Are you prepared for the next Sobig & Blaster? - Instantly Stop DoS/DDoS Attacks, Worms & Port Scans - Precisely Define and Implement Network Security - Automatically Control P2P, IM and Spam Traffic FIND OUT NOW - FREE Vulnerability Assessment Toolkit http://www.captusnetworks.com/ads/42.htm ----------------------------------------------------------------------------
Current thread:
- Re: Deploying Microsoft patches Jane Han (Sep 11)
- RE: Deploying Microsoft patches Alexander Suhovey (Sep 12)
- <Possible follow-ups>
- RE: Deploying Microsoft patches Nick Duda (Sep 11)