Deploying security updates

[Adam]

hi all,

what is the easiest way to secure our pc's and servers on our network ?

Do I need to manually go to the windows update site on a regular basis and
apply patches ? Do I need to patch all machines ?

Is there an easier way than the above ? We've got about 50 or so Win2K
machines and a couple of Win2K servers SP4.

cheers,

Adam

 

[dj]

You can use Software Update Services (SUS) - do a search
on Microsoft Web Site.
Also, there was a very useful webcast yesterday about
patch managment. There should be a recorded version of
this event.

 

[Brian Oakes [MSFT]]

Here is a link to the SUS (Software Update Service) whitepaper.

http://www.microsoft.com/windows2000/windowsupdate/sus/susoverview.asp

Also something like SMS can help in the process.
--

Best regards,
Brian Oakes, MCSE
Microsoft Product Support
Windows 2000 Server Networking Team

This posting is provided "AS IS" with no warranties and confers no rights.
Please reply to the newsgroup so that others may benefit.

 

[Jefferson Krogh]

Aside from SUS, there are good third-party utilities for centralized patch
management. We have used UpdateEXPERT from St. Bernard Software with great
success over the last couple of years.

Jefferson Krogh
IS Manager
Kenneley-Spratling, Inc.