RE: Can I update a new patch for the whole windows computers of m

[kurtis.myers () us army mil]

Use of SUS is an option; but when implementing it is critical that 1) the
machines are current with patches, or 2) the SA must properly approve the
installation of the patch.  It was our experience that when approving
patches with SUS there is no control for the sequence of applying the patch;
therefore one may get an older patch installed after an earlier one which
will negate the effects.  Once all systems are updated in the proper
sequence then SUS is a good tool for patch application.  One also must
understand their architechture to ensure that the background activity
doesn't impede normal operation.

Kurt Myers

-----Original Message-----
From: Chee Heng Chin [mailto:chchin () iastate edu] 
Sent: Monday, October 20, 2003 11:19 PM
To: Hagen, Eric; Meidinger Chris; 'jay.stapleton () mnr gov on ca';
s970501 () ku edu np; security-basics () securityfocus com
Subject: RE: Can I update a new patch for the whole windows computers of m


Why don't you just use MS SUS? It's free.
> I'm curious what the overall costs for implementing this in a 
> medium/large enterprise with several thousand users.
>
> We've been evaluating "LAN Guard" but would be open to other options.
>
> Eric Hagen
>
> -----Original Message-----
> From: Meidinger Chris [mailto:chris.meidinger () badenit de]
> Sent: Monday, October 20, 2003 3:43 AM
> To: 'jay.stapleton () mnr gov on ca'; s970501 () ku edu np; 
> security-basics () securityfocus com
> Subject: RE: Can I update a new patch for the whole windows computers 
> of m y organization in my room?
>
>
> hfnetcheckpro from www.shavlik.com is a pretty robust solution.
>
> Chris Meidinger
> IT Technology and Services
>
> badenIT GmbH
> Innovationstechnologie für Ihre Zukunft
>
> Tel. +49 761 279 2280
> Fax. +49 761 279 2200
>
> Tullastrasse 70
> 79108 Freiburg
> Deutschland
>
> -----Original Message-----
> From: jay.stapleton () mnr gov on ca [mailto:jay.stapleton () mnr gov on ca]
> Sent: Friday, October 17, 2003 7:31 PM
> To: s970501 () ku edu np; security-basics () securityfocus com
> Subject: RE: Can I update a new patch for the whole windows computers 
> of m y organization in my room?
>
>
> I've been using <a 
> href="http://www.sysinternals.com/ntw2k/freeware/psexec.shtml";>psexec<
> > /A> from sysinternals. It's quite handy for patch delivery.
>
> Then you just have to confirm that you are running the correct version 
> of the patch for each operating system.
> I have a script set up to run psinfo (from the same package as psexec),
> use
> `cut` to pick out the version, and 
> run the correct patch.  I just have to feed it a list of IP addresses.
>
> If you've got a large network, <a 
> href="http://www.microsoft.com/windowsserversystem/sus/default.mspx";>S
> > US</a> or from Microsoft might better suit your needs.
>
> - Jay Stapleton
>
>
> -----Original Message-----
> From: s970501 () ku edu np [mailto:s970501 () ku edu np]
> Sent: Friday, October 17, 2003 9:23 AM
> To: security-basics () securityfocus com
> Subject: Can I update a new patch for the whole windows computers of 
> my organization in my room?
>
>
> Hi, i have a question.
> Can I update a new patch for the whole windows computers of my 
> organization in my room? usually, i run windows-update from all the 
> computers. or download patch file once and run it on every computer.
> it's really time consuming job, you know...
> anybody can give me a neat advice??? :)
>
>
>
>
> ------------------------------------------------------------------------>
---
> FREE Whitepaper: Better Management for Network Security
>
> Looking for a better way to manage your IP security?
> Learn how Solsoft can help you:
> - Ensure robust IP security through policy-based management
> - Make firewall, VPN, and NAT rules interoperable across heterogeneous 
> networks
> - Quickly respond to network events from a central console
>
> Download our FREE whitepaper at: 
> http://www.securityfocus.com/sponsor/Solsoft_security-basics_031015
> ------------------------------------------------------------------------>
----
> ------------------------------------------------------------------------>
---
> FREE Whitepaper: Better Management for Network Security
>
> Looking for a better way to manage your IP security?
> Learn how Solsoft can help you:
> - Ensure robust IP security through policy-based management
> - Make firewall, VPN, and NAT rules interoperable across heterogeneous 
> networks
> - Quickly respond to network events from a central console
>
> Download our FREE whitepaper at: 
> http://www.securityfocus.com/sponsor/Solsoft_security-basics_031015
> ------------------------------------------------------------------------>
----
> ------------------------------------------------------------------------>
---
> FREE Whitepaper: Better Management for Network Security
>
> Looking for a better way to manage your IP security?
> Learn how Solsoft can help you:
> - Ensure robust IP security through policy-based management
> - Make firewall, VPN, and NAT rules interoperable across heterogeneous 
> networks
> - Quickly respond to network events from a central console
>
> Download our FREE whitepaper at: 
> http://www.securityfocus.com/sponsor/Solsoft_security-basics_031015
> ------------------------------------------------------------------------>
----
> ----------------------------------------------------------------------
> -----
> FREE Whitepaper: Better Management for Network Security
>
> Looking for a better way to manage your IP security?
> Learn how Solsoft can help you:
> - Ensure robust IP security through policy-based management
> - Make firewall, VPN, and NAT rules interoperable across heterogeneous 
> networks
> - Quickly respond to network events from a central console
>
> Download our FREE whitepaper at: 
> http://www.securityfocus.com/sponsor/Solsoft_security-basics_031015
> ----------------------------------------------------------------------
> ------



Chee-Heng Chin










---------------------------------------------------------------------------
FREE Whitepaper: Better Management for Network Security

Looking for a better way to manage your IP security?
Learn how Solsoft can help you:
- Ensure robust IP security through policy-based management
- Make firewall, VPN, and NAT rules interoperable across heterogeneous
networks
- Quickly respond to network events from a central console

Download our FREE whitepaper at:
http://www.securityfocus.com/sponsor/Solsoft_security-basics_031015
----------------------------------------------------------------------------


---------------------------------------------------------------------------
FREE Whitepaper: Better Management for Network Security

Looking for a better way to manage your IP security?
Learn how Solsoft can help you:
- Ensure robust IP security through policy-based management
- Make firewall, VPN, and NAT rules interoperable across heterogeneous
networks
- Quickly respond to network events from a central console

Download our FREE whitepaper at:
http://www.securityfocus.com/sponsor/Solsoft_security-basics_031015
----------------------------------------------------------------------------