Too many Security Patches

[Guest]

I'm too confused on which security patches to update. I run some web services like ASP and some web component. and there's a 10-20 list of security updates waiting for me to install. I have 7 productions servers and 5 development servers. how to manage so many server with the proper updates?

Of course I used teh windows auto-update, but then, my 1st concern these servers I have are not in-synch with what is installed.

Clement

 

[Karl Levinson [x y] mvp]

If you're having confusion about this, then I strongly recommend using
http://windowsupdate.microsoft.com for your updates. Ensure you've got the
right version of all the right patches as fast as possible with no
confusion. [You're correct that Windows Update does not detect or update
all Microsoft products that may need patching, but it's a good start.] You
could also consider the free SUS server from Microsoft to be able to control
when your servers get WindowsUpdate-hosted patches, what they do with them
and when.

Another alternative that you may also want to consider instead or in
addition is to download and run the free MBSA tool from
www.microsoft.com/technet/security in command-line HFNETCHK mode to look for
missing patches.

I'm too confused on which security patches to update. I run some web

services like ASP and some web component. and there's a 10-20 list of
security updates waiting for me to install. I have 7 productions servers and
5 development servers. how to manage so many server with the proper updates?

Of course I used teh windows auto-update, but then, my 1st concern these

servers I have are not in-synch with what is installed.

 

[Curtis Koenig [MSFT]]

I wold also reccomend looking at Microsoft Software Update Services, its a
free adon for Windows Server and allows you to decide what updates will be
installe and when so your network can be properly test for each patch and
you can control it at a level that is more granular that direct Windows
Update for each machine.
--
Curtis Koenig
Support Engineer
Product Support Services, Security Team
MCSE, MCSES, CISSP

This posting is provided "AS IS" with no warranties and confers no rights.
Please reply to the newsgroup so that others may benefit. Thanks!

--------------------