Educause Security Discussion mailing list archives

Re: DShield and Symantec report MSBlast in wild


From: Michelle Mueller <muellerm () MTMARY EDU>
Date: Thu, 14 Aug 2003 09:32:31 -0500

We use a Software Update Services server which is basically an internal
Windows Update Server.  You need to be using Group Policies to use SUS.
It's worked great for us.  When the notice came out about the RPC
vulnerability, I pushed the critical update out to all campus computers
using this server.  We were protected by the afternoon of that day.
Here's the link to the SUS site.  And best of all, it's free.

http://www.microsoft.com/downloads/details.aspx?FamilyId=A7AA96E4-6E41-4F54-972C-AE66A4E4BF6C&displaylang=en


Marty Hoag wrote:

  It isn't my area but I'd be interested in pointers to strategies
campuses use to update "imaged" systems, e.g. computer labs with
hundreds of computers which have been imaged from one source.

  I'm told some of our images are 6 GB and even using multicast take
hours to install. We normally run Deep Freeze (but they said they
are going to the Enterprise Edition if that is meaningful). They
normally only build new images a few times a year so we need to
find a way to put on the more frequent critical patches.

  If there is a list/FAQ where this is discussed that would be
helpful. I can't believe we are the only ones facing this.  ;-)

  If you want to reply to me directly instead of the list remember
to change the address in the reply.  Thank you!

  Marty Hoag
  marty.hoag () ndsu nodak edu

**********
Participation and subscription information for this EDUCAUSE Discussion Group discussion list can be found at 
http://www.educause.edu/cg/.



**********
Participation and subscription information for this EDUCAUSE Discussion Group discussion list can be found at 
http://www.educause.edu/cg/.

Current thread: