Re: Windows update for 100's of PC's?

From: Torgeir Bakken \(MVP\) (Torgeir.Bakken-spam_at_hydro.com)
Date: 09/13/04


Date: Mon, 13 Sep 2004 21:00:37 +0200

AW wrote:

> Hi, we have 100'2 of Windows 2000 Pro PC's and a few XP
> Pro PC's, how can we keep these all up to date via the
> microsoft website. THese users only have Power USer
> rights too.
Hi

I suggest you look into SUS to deploy security updates.

Microsoft Software Update Services (SUS) is a kind of "Windows Update"
server you can set up inside your own network, where you centrally
approve what security updates is to be distributed to the clients.

The clients use Automatic Update to connect to the SUS server and
download and install updates that apply to that computer (note that
there is no Windows Update GUI available).

It is able to deploy updates even if the user is Power User as long
as you configure the SUS client to use AUOptions 4 (automatic
download and scheduled installation).

More here:

Microsoft Software Update Services (SUS)
http://www.microsoft.com/windowsserversystem/sus/default.mspx

Patch Management Using Microsoft Software Update Services - Operations Guide
http://www.microsoft.com/technet/itsolutions/msm/swdist/pmsusog.asp

Note that the current version will only install critical updates and security
rollup packages (SRPs), as well as SP4 for Win2k and SP1 for WinXP.

A new version is in the works (SUS 2.0, renamed to WUS):
http://groups.google.com/groups?selm=ungsInEZDHA.2336%40TK2MSFTNGP09.phx.gbl

SUS needs to be installed on a IIS server. Supports Win2k, WinXP and Win2k3
clients only. SP1 for WinXP and SP3/4 for Win2k installs the WU/SUS client as
default.

Fyi, there is a separate newsgroup for SUS:

microsoft.public.softwareupdatesvcs

news://msnews.microsoft.com/microsoft.public.softwareupdatesvcs

URL to the group softwareupdatesvcs for those who uses the Web
interface to access the newsgroups:
http://www.microsoft.com/windowsserver2003/community/newsgroups/dgbrowser/en-us/default.mspx?dg=microsoft.public.softwareupdatesvcs

A Web site about SUS with a FAQ and a SUS forum:
http://www.susserver.com/

More SUS Web sites:
http://www.cites.uiuc.edu/sus/faq.html
http://www.faqshop.com/sus/default.htm

-- 
torgeir, Microsoft MVP Scripting and WMI, Porsgrunn Norway
Administration scripting examples and an ONLINE version of
the 1328 page Scripting Guide:
http://www.microsoft.com/technet/scriptcenter/default.mspx


Relevant Pages

  • Re: Patch Deployment
    ... Microsoft Software Update Services (SUS) is a kind of "Windows Update" ... approve what security updates is to be distributed to the clients. ... Note that the current version will only install critical updates and security ...
    (microsoft.public.windowsxp.setup_deployment)
  • RE: SuS updates
    ... In regards to this SuS topic, I am having several issues myself with my SuS ... Windows Updates, but they are not downloading or installing the updates. ... there are updates available for download or for install. ... reboot, but will not be able to postpone the reboot. ...
    (Focus-Microsoft)
  • Re: SUS, IIS Lockdown and Terminal Server
    ... This has been discussed in the SUS newsgroup ... Server Requirements and Recommendations for Installing Microsoft Software ... If you are going to install SUS on an existing server, ... Better integration with IIS lockdown tool ...
    (microsoft.public.win2000.security)
  • Re: running patches as admin
    ... Note that the free version will only install critical updates and security ... SUS needs to be installed on a IIS server. ... installs operating system critical updates and security rollup packages. ...
    (microsoft.public.win2000.security)
  • Re: Scheduled Updates Reboots Machines
    ... This is amusing - I decided to look into SUS. ... >> Updates are set to automatically download and then ... >> install @3AM every night. ...
    (microsoft.public.windowsxp.security_admin)