Security Basics mailing list archives
RE: AW: SUS Help
From: Meidinger Chris <chris.meidinger () badenit de>
Date: Thu, 9 Oct 2003 16:35:59 +0100
Just wanted to follow up on this subject: i am in the process of implementing HFNetCheckPro in a medium scale ( >1000 User) distributed enterprise environment for a customer of ours, and am thus far *very* happy with it. It works fine scanning and pushing patches without a client-side service to NT/2K/XP clients, and as an added bonus has excellent reporting features. The addition of an SQL Backend is what made me decide to purchase the software. Everything is stored centrally in SQL, and the consoles at each remote site get their configurations from there. This makes administration a lot less pain-full. I guess it could be summed up with: 'A+, would implement again' *G* -Chris
-----Original Message----- From: Meidinger Chris [mailto:chris.meidinger () badenit de] Sent: Monday, September 15, 2003 6:53 PM To: 'Spencer D'oro'; 'Markus Rossi'; security-basics () securityfocus com Subject: AW: AW: SUS Help Wow, i was under the impressino that HFNetCheck could only check, and not patch. I am about to leave work, but testing will commence tomorrow - this is a current project of mine (one of about 50) to automate patch distribution. Thanks for the tips, will report on the outcome, Chris -----Ursprüngliche Nachricht----- Von: Spencer D'oro [mailto:sdoro () comcast net] Gesendet: Samstag, 13. September 2003 00:18 An: 'Markus Rossi'; security-basics () securityfocus com Betreff: RE: AW: SUS Help You can try HFNetCheckLT from Shavlik Technologies, or HFNetCheck Pro 4. I like the Pro, it does scanning of domains,subnets, etc. and also does deploymeny patching. Both use hfnetchk, and they interface is GUI. LT is free with a 50 client license, pro will cost you. Spencer -----Original Message----- From: Markus Rossi [mailto:news1 () familyrossi com] Sent: Thursday, September 11, 2003 12:13 PM To: security-basics () securityfocus com Subject: Re: AW: SUS Help Meidinger Chris wrote:Hi guys, i'm dealing with exactly the same problem, and i am fairly sure there is *no* affordable option to automagically patch NT boxes withoutscripting ityourself. Which is what i will spend the next week doing.....HFNetChk sounds good. Someone just recommended it to me so I haven't tried it. It sounds solid, though, and should work with NT4. http://hfnetchk.shavlik.com/ MRCheers, Chris -----Ursprüngliche Nachricht----- Von: Roger A. Grimes [mailto:rogerg () cox net] Gesendet: Donnerstag, 11. September 2003 03:40 An: Gooch, Linnie; security-basics () securityfocus com Betreff: RE: SUS Help It doesn't work in NT environments. SUS must be installedon a W2K orServer 2003 server, and the client must run the Automatic Updates service (which doesn't run on NT). There are few options available when patching an NTenvironment. EvenWin98 has more patch mgmt options. Roger *************************************************************************** *Roger A. Grimes, Computer Security Consultant *CPA, MCSE (NT/2000), CNE (3/4), A+ *email: rogerg () cox net *cell: 757-615-3355 *Author of Malicious Mobile Code: Virus Protection for Windows byO'Reilly*http://www.oreilly.com/catalog/malmobcode/ *Author of Apress's upcoming Honeypots for Windows *********************************************************************** ****-----Original Message----- From: Gooch, Linnie [mailto:Linnie () wescom org] Sent: Tuesday, September 09, 2003 8:28 PM To: security-basics () securityfocus com Subject: SUS Help I've been reading everyone's input on SUS and I'm trying toevaluate itat my company. I want to know if anyone has deployed it with an NT4 environment? We aren't moving to AD for another 3 months,but with theblaster worm and other such vulnerabilities, I want to get it up and running right away. Here is what I'm looking for. I'm reading the documentation for SUS, and it talks aboutsetting theregistry on client machines, which is no problem, but thedocumentationis so unclear about what exactly I need to add to theregistry. I waswondering if anyone knew exactly what registry keys neededto be addedor changed so I could test it right away. Thanks guys. This list rocks! Linnie Gooch, MCSE Manager of Systems and Technology Wescom Credit Union (888) 493 7266 x 8801
--------------------------------------------------------------------------- ----------------------------------------------------------------------------
Current thread:
- RE: AW: SUS Help Meidinger Chris (Oct 09)