RE: Patch Management

["Chinnery, Paul" <PaulC () mmcwm com>]

Well, one of the benefits is, of course, the cost of WSUS: none.

Some things I did notice about WSUS (v2.0):

1. Won't roll out patches to Office 2000;
2. Report feature is fair but not as good as Shavlik (supposed to improve
   with 3.0);
3. Won't patch anything but MS products

It's pretty easy to configure though.  Once I set up the GPO, I easily set up different groups in WSUS to reflect the 
patch procedure: test group to test out patches, etc.

I should point out that we have less than 300 desktops and we do our servers manually (since we're a hospital our HCIS 
runs 24/7 so we have to schedule downtime for the servers). 

WSUS has served us well but it has its limitations which is why we may proceed with Shavlik this fall or early 2008.

Paul Chinnery
Network Administrator
Memorial Medical Center


-----Original Message-----
From: listbounce () securityfocus com
[mailto:listbounce () securityfocus com]On Behalf Of Weir, Jason
Sent: Thursday, April 19, 2007 2:22 PM
To: security-basics () securityfocus com
Subject: RE: Patch Management


We use Shavlik NetCheck v5.8, works great for us.  I've never tried WSUS
how does it compare to Shavlik's stuff??

Jason Weir
Sysadmin
New Hampshire Retirement System

-----Original Message-----
From: listbounce () securityfocus com [mailto:listbounce () securityfocus com]
On Behalf Of Chinnery, Paul
Sent: Thursday, April 19, 2007 12:43 PM
To: security-basics () securityfocus com
Subject: RE: Patch Management


Currently, since we ar a 'Windows' shop, we use WSUS.  However, we have
been looking at Shavlik's product.  I did demo the Patchlink product and
while it was very good, the yearly maintenance was pretty high.

Paul Chinnery
Network Administrator
Memorial Medical Center


-----Original Message-----
From: listbounce () securityfocus com
[mailto:listbounce () securityfocus com]On Behalf Of
donald.shroyer () dfas mil
Sent: Wednesday, April 18, 2007 11:58 AM
To: security-basics () securityfocus com
Subject: Patch Management


Just curious what you all use in your work for security patch
management? Thanks.