Re: Execute Update on multiple network computers

From: Torgeir Bakken (MVP) (Torgeir.Bakken-spam_at_hydro.com)
Date: 02/12/04


Date: Thu, 12 Feb 2004 21:53:37 +0100

Savut wrote:

> Someone can help me, if there is a way to execute update on all network
> computer automatically, well I have them on an OU, using the same GPO, I
> know we can use GPO to execute programme at boot or logon, but it's seem too
> somplicated as I have to download all patches one by one on the MS website,
> unfortunately, I can't even find the patches on the website just the
> services pack but all my computer are already installed with the SP1.
> Someone can give me an solution. How do you update your network workstations

Hi

You could consider implementing SUS (free) or something similar (links to some
3rd party products further down) for security patches.

Microsoft Software Update Services (SUS)
http://www.microsoft.com/windowsserversystem/sus/default.mspx

Patch Management Using Microsoft Software Update Services - Operations Guide
http://www.microsoft.com/technet/itsolutions/msm/swdist/pmsusog.asp

Note that the current version will only install critical updates and security
rollup packages (SRPs), as well as SP4 for Win2k and SP1 for WinXP.

A new version is in the works:
http://groups.google.com/groups?selm=ungsInEZDHA.2336%40TK2MSFTNGP09.phx.gbl

SUS needs to be installed on a IIS server. Supports Win2k, WinXP and Win2k3
clients only. SP1 for WinXP and SP3/4 for Win2k installs the WU/SUS client as
default.

There is a separate newsgroup for SUS:
microsoft.public.softwareupdatesvcs
news://msnews.microsoft.com/microsoft.public.softwareupdatesvcs

URL to the group softwareupdatesvcs for those who uses the Web
interface to access the newsgroups:
http://www.microsoft.com/windowsserver2003/community/newsgroups/dgbrowser/en-us/default.mspx?dg=microsoft.public.softwareupdatesvcs

A Web site about SUS with a FAQ and a SUS forum:

SUSserver.com
http://www.susserver.com/

More Web sites about SUS
http://www.cites.uiuc.edu/sus/faq.html
http://www.faqshop.com/sus/default.htm
http://computing.fusion13.com/SUS/Microsoft-Software-Update-Services-SUS.shtml

When evaluating hotfix administration methods/programs,
there are also 3rd party solutions available that will
give a lot more than what SUS offer, but of course, they
are not free. It is as always a cost/benefit analyze that
needs to be done.

Below is links to a 3rd party product example that does
not need a server to run and no IIS is needed (it supports
NT4 clients as well). You can deploy mostly all types of
hotfixes and service packs from an ordinary workstation
if you want.

UpdateEXPERT from Sunbelt
http://www.sunbelt-software.com/product.cfm?id=357

UpdateEXPERT reseller with a price list
http://www.softwareshelf.com/products/display.asp?p=71

Shavlik's HFNetChkPro/HFNetChkLT
If 10 computers or less htfnetchkLT is free (http://www.shavlik.com), it can
scan and push patches. It also finds patches needed for Office as well, and it
gives a really nice graphical analysis of the patch from truesecure.

Here is a third party product that supports Win9x and WinME as well:

PatchLink's Update
http://www.patchlink.com

--
torgeir
Microsoft MVP Scripting and WMI, Porsgrunn Norway
Administration scripting examples and an ONLINE version of the 1328 page
Scripting Guide: http://www.microsoft.com/technet/scriptcenter


Relevant Pages

  • Re: Execute Update on multiple network computers
    ... > somplicated as I have to download all patches one by one on the MS website, ... You could consider implementing SUS or something similar (links to some ... Note that the current version will only install critical updates and security ... Here is a third party product that supports Win9x and WinME as well: ...
    (microsoft.public.win2000.general)
  • Re: How to apply MS patches/updates centrally?
    ... > YOu don't specify which version of SBS you are running? ... > run Microsoft SUS... ... locally managed MS patches and distributes them to each ... > me to go to each workstation to download and install Windows patches/critical ...
    (microsoft.public.backoffice.smallbiz2000)
  • RE: MS Software Update Service
    ... I looked extensively at SUS and it looks like it provides a reasonable ... Update client provides a great option for "hands free" fully automated ... MS patches without testing first. ... - cannot install Service Packs (though note that Service Packs can be ...
    (Focus-Microsoft)
  • Re: How does Windows Update Work
    ... > identify what patches to install, and what are not valid patches for ... there is a separate newsgroup for SUS: ... -- torgeir, Microsoft MVP Scripting and WMI, Porsgrunn Norway Administration scripting examples and an ONLINE version of the 1328 page Scripting Guide: ...
    (microsoft.public.windowsupdate)
  • RE: SuS updates
    ... In regards to this SuS topic, I am having several issues myself with my SuS ... Windows Updates, but they are not downloading or installing the updates. ... there are updates available for download or for install. ... reboot, but will not be able to postpone the reboot. ...
    (Focus-Microsoft)