RE: AW: SUS Help

[Meidinger Chris <chris.meidinger () badenit de>]

Just wanted to follow up on this subject: 

i am in the process of implementing HFNetCheckPro in a medium scale ( >1000
User) distributed enterprise environment for a customer of ours, and am thus
far *very* happy with it. 

It works fine scanning and pushing patches without a client-side service to
NT/2K/XP clients, and as an added bonus has excellent reporting features.
The addition of an SQL Backend is what made me decide to purchase the
software. Everything is stored centrally in SQL, and the consoles at each
remote site get their configurations from there. This makes administration a
lot less pain-full. 

I guess it could be summed up with: 'A+, would implement again' *G*

-Chris 

> -----Original Message-----
> From: Meidinger Chris [mailto:chris.meidinger () badenit de] 
> Sent: Monday, September 15, 2003 6:53 PM
> To: 'Spencer D'oro'; 'Markus Rossi'; security-basics () securityfocus com
> Subject: AW: AW: SUS Help
>
>
> Wow, i was under the impressino that HFNetCheck could only 
> check, and not patch. I am about to leave work, but testing 
> will commence tomorrow - this is a current project of mine 
> (one of about 50) to automate patch distribution.
>
> Thanks for the tips, will report on the outcome,
>
> Chris
>
> -----Ursprüngliche Nachricht-----
> Von: Spencer D'oro [mailto:sdoro () comcast net] 
> Gesendet: Samstag, 13. September 2003 00:18
> An: 'Markus Rossi'; security-basics () securityfocus com
> Betreff: RE: AW: SUS Help
>
>
> You can try HFNetCheckLT from Shavlik Technologies, or 
> HFNetCheck Pro 4. I like the Pro, it does scanning of 
> domains,subnets, etc. and also does deploymeny patching.  
> Both use hfnetchk, and they interface is GUI.  LT is free 
> with a 50 client license, pro will cost you.
>
> Spencer
>
> -----Original Message-----
> From: Markus Rossi [mailto:news1 () familyrossi com] 
> Sent: Thursday, September 11, 2003 12:13 PM
> To: security-basics () securityfocus com
> Subject: Re: AW: SUS Help
>
>
> Meidinger Chris wrote:
>
> > Hi guys,
> >
> > i'm dealing with exactly the same problem, and i am fairly sure there 
> > is
> > *no* affordable option to automagically patch NT boxes without
> scripting it
> > yourself. Which is what i will spend the next week doing.....
> >  
> HFNetChk sounds good. Someone just recommended it to me so I haven't 
> tried it. It sounds solid, though, and should work with NT4. 
> http://hfnetchk.shavlik.com/
>
> MR
>
> > Cheers,
> >
> > Chris
> >
> > -----Ursprüngliche Nachricht-----
> > Von: Roger A. Grimes [mailto:rogerg () cox net]
> > Gesendet: Donnerstag, 11. September 2003 03:40
> > An: Gooch, Linnie; security-basics () securityfocus com
> > Betreff: RE: SUS Help
> >
> >
> > It doesn't work in NT environments.  SUS must be installed 
> on a W2K or 
> > Server 2003 server, and the client must run the Automatic Updates 
> > service (which doesn't run on NT).
> >
> > There are few options available when patching an NT 
> environment.  Even 
> > Win98 has more patch mgmt options.
> >
> > Roger
> >
> > *************************************************************
> **********
> > ****
> > *Roger A. Grimes, Computer Security Consultant
> > *CPA, MCSE (NT/2000), CNE (3/4), A+
> > *email: rogerg () cox net
> > *cell: 757-615-3355
> > *Author of Malicious Mobile Code:  Virus Protection for Windows by
> O'Reilly
> > *http://www.oreilly.com/catalog/malmobcode/
> > *Author of Apress's upcoming Honeypots for Windows
> > *************************************************************
> **********
> ****
> > -----Original Message-----
> > From: Gooch, Linnie [mailto:Linnie () wescom org]
> > Sent: Tuesday, September 09, 2003 8:28 PM
> > To: security-basics () securityfocus com
> > Subject: SUS Help
> >
> >
> > I've been reading everyone's input on SUS and I'm trying to 
> evaluate it
>
> > at my company. I want to know if anyone has deployed it with an NT4 
> > environment? We aren't moving to AD for another 3 months, 
> but with the 
> > blaster worm and other such vulnerabilities, I want to get it up and 
> > running right away.
> >
> > Here is what I'm looking for.
> >
> > I'm reading the documentation for SUS, and it talks about 
> setting the 
> > registry on client machines, which is no problem, but the 
> documentation
>
> > is so unclear about what exactly I need to add to the 
> registry. I was 
> > wondering if anyone knew exactly what registry keys needed 
> to be added 
> > or changed so I could test it right away.
> >
> > Thanks guys. This list rocks!
> >
> >
> > Linnie Gooch, MCSE
> > Manager of Systems and Technology
> > Wescom Credit Union
> > (888) 493 7266 x 8801

---------------------------------------------------------------------------
----------------------------------------------------------------------------