RE: Mass deployment of security tools

["Scott Ramsdell" <Scott.Ramsdell () cellnet com>]

Gary,

Active Directory can push these apps for you.

Look into "assigning" and "publishing" apps.  If you assign the apps,
they are delivered to the users at next login.  If you publish the apps,
they can be installed from Add/Remove Programs in the user's Control
Panel.

Apps without .MSIs have to be published, apps with .MSIs can be
assigned.  If you have a legacy app without an .MSI, you can use the
WinInstall app from the ValueAdd directory on the Win2000 Server CD to
build an .MSI.

For apps with an .MSI :
1.  create a group for intended users
2.  create a GPO for pushing the app
3.  in the GPO, use the Software Installation policy to assign the .MSI
(obviously, the .MSI will have to be in a properly permissioned share)
4.  link the GPO to an OU where your users reside
5.  grant read and apply GPO rights to your group from step #1 and
remove authenticated users' apply rights

Best Regards,
Scott Ramsdell

-----Original Message-----
From: listbounce () securityfocus com [mailto:listbounce () securityfocus com]
On Behalf Of Gary Collis
Sent: Monday, October 16, 2006 3:19 PM
To: security-basics () securityfocus com
Subject: Mass deployment of security tools

Hi all,

Forgive me if this is the wrong mailing list, please point me in the 
right direction if so.

I have been tasked with a project of installing various security 
applications remotely to the desktop, without visiting the individual 
PC's i.e. avoiding sneakernet. I was wondering what the best tool out 
their is for this task? Group policy? Software restriction policies? 
Zen? Altiris? etc. I am open to all suggestions.

(Some background)

I want to install  a number of security applications to windows PC's 
simultaneuosly either without user intervention ( no user is an 
admin/power user etc. ), or by allowing users to install it themselves. 
Software ranges from the basic to more complicated specialist apps etc.

What are my best options?

------------------------------------------------------------------------
---
This list is sponsored by: Norwich University

EARN A MASTER OF SCIENCE IN INFORMATION ASSURANCE - ONLINE
The NSA has designated Norwich University a center of Academic
Excellence 
in Information Security. Our program offers unparalleled Infosec
management 
education and the case study affords you unmatched consulting
experience. 
Using interactive e-Learning technology, you can earn this esteemed
degree, 
without disrupting your career or home life.

http://www.msia.norwich.edu/secfocus
------------------------------------------------------------------------
---


---------------------------------------------------------------------------
This list is sponsored by: Norwich University

EARN A MASTER OF SCIENCE IN INFORMATION ASSURANCE - ONLINE
The NSA has designated Norwich University a center of Academic Excellence
in Information Security. Our program offers unparalleled Infosec management
education and the case study affords you unmatched consulting experience.
Using interactive e-Learning technology, you can earn this esteemed degree,
without disrupting your career or home life.

http://www.msia.norwich.edu/secfocus
---------------------------------------------------------------------------