Security Basics mailing list archives
RE: Windows SUS Question
From: "Alex Lomas" <alex () alexlomas com>
Date: Thu, 15 Apr 2004 09:30:18 +0100
SUS can be easily configured without the use of group policies (e.g. if you don't run a domain). You just need to configure some registry entries to point at each machine at your SUS server, define when each machine will download the updates and whether it should reboot once done. You can use some of the tools from sysinternals.com (like psexec) to push the reg patch to all your machines remotely if need be. A guide to the reg entries can be found at: http://www.microsoft.com/windowsserversystem/sus/susdeployment.mspx Your registry entries will look something like: [HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU] "RescheduleWaitTime"=dword:00000004 "NoAutoRebootWithLoggedOnUsers"=dword:00000001 "NoAutoUpdate"=dword:00000000 "AUOptions"=dword:00000004 "ScheduledInstallDay"=dword:00000000 "ScheduledInstallTime"=dword:00000003 "UseWUServer"=dword:00000001 [HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate] "WUServer"="http://sus.mydomain.com/" "WUStatusServer"="http://sus.mydomain.com/" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\ Auto Update] "AUOptions"=dword:00000004 "AUState"=dword:00000002 --Alex -----Original Message----- From: Leon [mailto:roastin () yahoo com] Sent: 14 April 2004 19:50 To: security-basics () securityfocus com Subject: Windows SUS Question Hi everyone, My question regarding SUS is dealing with security permissions. Lets say 20 servers are part of a work group; is their still a way to use SUS under the context of the local system account or something similar to be able to centrally deploy patches in a de-centralizied network environment. I have a workgroup that needs to have patches deployed and I would prefer to use something like SUS which is central as opposed to something like Hfnetcheck pro. Thanks in advance, Leon __________________________________ Do you Yahoo!? Yahoo! Tax Center - File online by April 15th http://taxes.yahoo.com/filing.html --------------------------------------------------------------------------- Ethical Hacking at the InfoSec Institute. Mention this ad and get $545 off any course! All of our class sizes are guaranteed to be 10 students or less to facilitate one-on-one interaction with one of our expert instructors. Attend a course taught by an expert instructor with years of in-the-field pen testing experience in our state of the art hacking lab. Master the skills of an Ethical Hacker to better assess the security of your organization. Visit us at: http://www.infosecinstitute.com/courses/ethical_hacking_training.html ---------------------------------------------------------------------------- --------------------------------------------------------------------------- Ethical Hacking at the InfoSec Institute. Mention this ad and get $545 off any course! All of our class sizes are guaranteed to be 10 students or less to facilitate one-on-one interaction with one of our expert instructors. Attend a course taught by an expert instructor with years of in-the-field pen testing experience in our state of the art hacking lab. Master the skills of an Ethical Hacker to better assess the security of your organization. Visit us at: http://www.infosecinstitute.com/courses/ethical_hacking_training.html ----------------------------------------------------------------------------
Current thread:
- Windows SUS Question Leon (Apr 14)
- Re: Windows SUS Question Chris Burton (Apr 15)
- RE: Windows SUS Question Tom Milliner (Apr 15)
- RE: Windows SUS Question Shawn (Apr 16)
- RE: Windows SUS Question Carlton Foster (Apr 15)
- RE: Windows SUS Question Raoul Armfield (Apr 15)
- RE: Windows SUS Question Alex Lomas (Apr 15)
- Re: Windows SUS Question paralleluniverse (Apr 16)
- RE: Windows SUS Question Alex Lomas (Apr 16)
- RE: Windows SUS Question Nagy Gergely (Apr 19)
- Re: Windows SUS Question paralleluniverse (Apr 16)
- <Possible follow-ups>
- RE: Windows SUS Question Andrew Shore (Apr 15)
- RE: Windows SUS Question Raoul Armfield (Apr 16)
- RE: Windows SUS Question Glenn Pearl (Apr 16)
- RE: Windows SUS Question Rojo Ramon, Ricardo (Apr 15)
- RE: Windows SUS Question Wesley T. Scott (Apr 15)
- FW: Windows SUS Question Kelly Fuller (Apr 16)
- RE: Windows SUS Question Streeter, Joseph (WI) (Apr 16)