Security Basics mailing list archives

Re: Third Party Patch Management


From: badz <smanaois3 () gmail com>
Date: Wed, 25 Mar 2009 07:22:32 +0800

Hi Al,

You can try to use the native Windows Software Distribution
capabilities of GPOs. If the updates come as .msi packages, you can
straight away deploy these to your machines; if these come as .exe
files, you can create .zap files to deploy these updates. Here are a
couple of links that should provide you with some ideas how to
implement software installations via group policies:

Managing Group Policy Software Installation
http://technet.microsoft.com/en-us/library/cc782727.aspx

File types that you use with Group Policy Software Installation
http://technet.microsoft.com/en-us/library/cc757669.aspx

What Is Group Policy Software Installation Extension?
http://technet.microsoft.com/en-us/library/cc739148.aspx

HTH.

Regards,

Salvador Manaois III
mcitp(x3) mcts(x5) mcse mcsa ciwa c|eh
Bytes & Badz : http://badzmanaois.blogspot.com


On Wed, Mar 25, 2009 at 12:28 AM, Al Cooper <cooper () hmcnetworks com> wrote:
With all the security updates to programs like Acrobat & Java, I am
interested in how the community is handling patch management practically in
small to medium sized organizations (50 to 200 computers).  Microsoft Update
Server works for Windows patches but will not handle third party patches.
Microsoft System Center is nice but too expensive for this market.

What solutions are you using and how effective are they?

Thanks,

Coop




------------------------------------------------------------------------
This list is sponsored by: InfoSec Institute

Learn all of the latest penetration testing techniques in InfoSec Institute's Ethical Hacking class.
Totally hands-on course with evening Capture The Flag (CTF) exercises, Certified Ethical Hacker and Certified 
Penetration Tester exams, taught by an expert with years of real pen testing experience.

http://www.infosecinstitute.com/courses/ethical_hacking_training.html
------------------------------------------------------------------------



------------------------------------------------------------------------
This list is sponsored by: InfoSec Institute

Learn all of the latest penetration testing techniques in InfoSec Institute's Ethical Hacking class.
Totally hands-on course with evening Capture The Flag (CTF) exercises, Certified Ethical Hacker and Certified 
Penetration Tester exams, taught by an expert with years of real pen testing experience.

http://www.infosecinstitute.com/courses/ethical_hacking_training.html
------------------------------------------------------------------------


Current thread: