RE: Windows SUS Question

["Dan Denton" <ddenton () PAYLESSOFFICE com>]

As I told Leon before, we use SUS on a non-domain win2k server to
provide patches to 35 workstations, who are on a domain. Using either
manual registry hacks or GPEDIT.msc to set the location of the SUS
server gets around the use of domain policies. While you have to use
GPEDIT.msc on each machine individually, it is more fool-proof than
editing the registry manually.

-----Original Message-----
From: Chris Burton [mailto:cyberhiker99 () yahoo com] 
Sent: Wednesday, April 14, 2004 9:05 PM
To: Leon; security-basics () securityfocus com
Subject: Re: Windows SUS Question


I have used SUS, and I am thinking that it is not
domain oriented.  You could use the Registry settings
that are in Deployment guide
(http://www.microsoft.com/windowsserversystem/sus/susdeployment.mspx)
in order to point the Servers to the SUS box.  We did
more than a few boxes that way.  Also, I would make
sure that all the servers don't reboot all at once.  I
attached a sample .reg that I renamed so that it
passes through most virus filters.  It has been some
time since I looked at it but I think that these
settings will reboot the clients automatically.

Regards,
Chris

--- Leon <roastin () yahoo com> wrote:
> Hi everyone,
>
> My question regarding SUS is dealing with security permissions.  Lets 
> say 20 servers are part of a work group; is their still a way to use 
> SUS under the context of the local system account or something
> similar to be able to centrally deploy patches in a
> de-centralizied network environment.  I have a
> workgroup that needs to have patches deployed and I
> would prefer to use something like SUS which is
> central as opposed to something like Hfnetcheck pro.
>
> Thanks in advance,
>
> Leon
>
>
>       
>               
> __________________________________
> Do you Yahoo!?
> Yahoo! Tax Center - File online by April 15th 
> http://taxes.yahoo.com/filing.html
------------------------------------------------------------------------
---
> Ethical Hacking at the InfoSec Institute. Mention
> this ad and get $545 off
> any course! All of our class sizes are guaranteed to
> be 10 students or less 
> to facilitate one-on-one interaction with one of our
> expert instructors. 
> Attend a course taught by an expert instructor with
> years of in-the-field 
> pen testing experience in our state of the art
> hacking lab. Master the skills 
> of an Ethical Hacker to better assess the security
> of your organization. 
> Visit us at: 
http://www.infosecinstitute.com/courses/ethical_hacking_training.html
>
------------------------------------------------------------------------
----
>



        
                
__________________________________
Do you Yahoo!?
Yahoo! Tax Center - File online by April 15th
http://taxes.yahoo.com/filing.html

------------------------------------------------------------------------
---
Ethical Hacking at the InfoSec Institute. Mention this ad and get $545
off 
any course! All of our class sizes are guaranteed to be 10 students or
less 
to facilitate one-on-one interaction with one of our expert instructors.

Attend a course taught by an expert instructor with years of
in-the-field 
pen testing experience in our state of the art hacking lab. Master the
skills 
of an Ethical Hacker to better assess the security of your organization.

Visit us at: 
http://www.infosecinstitute.com/courses/ethical_hacking_training.html
------------------------------------------------------------------------
----


---------------------------------------------------------------------------
Ethical Hacking at the InfoSec Institute. Mention this ad and get $545 off
any course! All of our class sizes are guaranteed to be 10 students or less
to facilitate one-on-one interaction with one of our expert instructors.
Attend a course taught by an expert instructor with years of in-the-field
pen testing experience in our state of the art hacking lab. Master the skills
of an Ethical Hacker to better assess the security of your organization.
Visit us at:
http://www.infosecinstitute.com/courses/ethical_hacking_training.html
----------------------------------------------------------------------------