full-disclosure - Automating patch deployment

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [day] [month] [year] [list]

Message-ID: <E26CC5D31191E147B3E96E29B908DA28E55261@utopia.s2systems.com>
From: dlpassport at s2access.com (LaRose, Dallas)
Subject: Automating patch deployment

Mark is right on the money but left out one important detail.  Microsoft SUS
[1] allows you deploy a patch repository at your site.  This saves network
bandwidth and allows for greater control of deployment.

You can push the client software out via login scripts for your NT4 domains
or MSIs for your AD domains.  Client settings such as servernames and
intervals can be configured via registry imports for NT4 or GPOs for AD.

Good luck.
Dallas

[1] http://www.microsoft.com/windows2000/windowsupdate/sus/susdeployment.asp

-----Original Message-----
From: Johnson, Mark [mailto:mjohnson@...r.com] 
Sent: Tuesday, August 05, 2003 4:13 PM
To: George Peek; full-disclosure@...ts.netsys.com
Subject: RE: [Full-Disclosure] Automating patch deployment

Look at Microsoft Article 328010 for information on setting up Windows
2000, XP and 2003 to automatically update Microsoft's patches.  I know
this isn't the full solution, but maybe a start.

Hope this helps.
Mark J.

-----Original Message-----
From: George Peek [mailto:GKPeek@...stateTicketing.com] 
Sent: Tuesday, August 05, 2003 3:37 PM
To: 'full-disclosure@...ts.netsys.com';
'security-basics@...urityfocus.com'
Cc: George Peek
Subject: [Full-Disclosure] Automating patch deployment

We have two networks, one AD and one NT4.0. We can not use AD to deploy
MSI patch packages to workstations that are not part of the AD (Active
Directory), but are part of the NT domain. Not really interested in
purchasing SMS as it seems too costly (why should we?). Considering
HFNetChkPro 4 to automate the deployment of patches to our workstations
and servers, as doing it manually is far too costly and time consuming
for the company. Are there any other utilities or software that anyone
(possibly
free?) recommends that could be used to simplify patch deployment and
management to every workstation and server. We use Windows NT, 2000 and
XP workstation products, and NT4.0/2000/2000 Adv server products.

Thank You,

George K. Peek
Network Specialist
Allstate Ticketing _______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html
_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html