Windows Update (2000 server XP Pro clients)

[ScC]

Hello.

I've just started in a new job and have noticed most of the computers don'
t have any service packs or updates on them. I want to get them all up to
date in the easiest and quickest possible way. We have a 2000 server with
around 25 clients running XP Pro (a few with SP1).

I have thought about going around them all, but this will mean I will have
to chuck the user off the machine while I do the update. I have also tried
remote assistance to do it, but it won't allow me to download and run any
apps.

Any suggestions?

 

[Phillip Windell]

Use "Software Update Services". It is freely downloaded off of MS's site.
Read what you can find about it and don't deploy it until you understand how
it works fairly well.

It runs as a Server that collects the Updates from MS, then uses Active
Directory to force the Automatic Update utility on the clients to look to
the SUS Server instead of the Internet to MS. The clients then receive the
Updates from the SUS Server after you "approve" them for deployment.

Then you just check the server once in a while for updates that are new and
can "approve" the ones you want deployed.

 

[ScC]

Thanks for the reply. I did notice that on the microsoft site.

I take it it works for service packs too? And is there any software needed
on the clients or only the server?

I think ill pop back there and have a read about it then.

Thanks

Use "Software Update Services". It is freely downloaded off of MS's site.
Read what you can find about it and don't deploy it until you understand how
it works fairly well.

It runs as a Server that collects the Updates from MS, then uses Active
Directory to force the Automatic Update utility on the clients to look to
the SUS Server instead of the Internet to MS. The clients then receive the
Updates from the SUS Server after you "approve" them for deployment.

Then you just check the server once in a while for updates that are new and
can "approve" the ones you want deployed.

--

Phillip Windell [MCP, MVP, CCNA]
www.wandtv.com

Hello.

I've just started in a new job and have noticed most of the computers don'
t have any service packs or updates on them. I want to get them all up to
date in the easiest and quickest possible way. We have a 2000 server with
around 25 clients running XP Pro (a few with SP1).

I have thought about going around them all, but this will mean I will have
to chuck the user off the machine while I do the update. I have also tried
remote assistance to do it, but it won't allow me to download and run any
apps.

Any suggestions?

 

[Phillip Windell]

No, I don't think is does Service Packs,...only patches.

--

Phillip Windell [MCP, MVP, CCNA]
www.wandtv.com

Thanks for the reply. I did notice that on the microsoft site.

I take it it works for service packs too? And is there any software needed
on the clients or only the server?

I think ill pop back there and have a read about it then.

Thanks

Use "Software Update Services". It is freely downloaded off of MS's site.
Read what you can find about it and don't deploy it until you understand how
it works fairly well.

It runs as a Server that collects the Updates from MS, then uses Active
Directory to force the Automatic Update utility on the clients to look to
the SUS Server instead of the Internet to MS. The clients then receive the
Updates from the SUS Server after you "approve" them for deployment.

Then you just check the server once in a while for updates that are new and
can "approve" the ones you want deployed.

--

Phillip Windell [MCP, MVP, CCNA]
www.wandtv.com

Hello.

I've just started in a new job and have noticed most of the

computers
don'

t have any service packs or updates on them. I want to get them all

up

to

 

[Richard G. Harper]

SUS-SP1 (the latest release) does service packs.

--
Richard G. Harper [MVP Win9x] (e-mail address removed)
* PLEASE post all messages and replies in the newsgroups
* for the benefit of all. Private mail is usually not replied to.
* HELP us help YOU ... http://www.dts-l.org/goodpost.htm

No, I don't think is does Service Packs,...only patches.

--

Phillip Windell [MCP, MVP, CCNA]
www.wandtv.com

Thanks for the reply. I did notice that on the microsoft site.

I take it it works for service packs too? And is there any software needed
on the clients or only the server?

I think ill pop back there and have a read about it then.

Thanks

Use "Software Update Services". It is freely downloaded off of MS's site.
Read what you can find about it and don't deploy it until you

understand
how

it works fairly well.

It runs as a Server that collects the Updates from MS, then uses Active
Directory to force the Automatic Update utility on the clients to look to
the SUS Server instead of the Internet to MS. The clients then receive the
Updates from the SUS Server after you "approve" them for deployment.

Then you just check the server once in a while for updates that are

new
and

can "approve" the ones you want deployed.

--

Phillip Windell [MCP, MVP, CCNA]
www.wandtv.com


Hello.

I've just started in a new job and have noticed most of the computers
don'
t have any service packs or updates on them. I want to get them all

up

to
date in the easiest and quickest possible way. We have a 2000

server
with

around 25 clients running XP Pro (a few with SP1).

I have thought about going around them all, but this will mean I

will
have

to chuck the user off the machine while I do the update. I have also
tried
remote assistance to do it, but it won't allow me to download and

run
any

apps.

Any suggestions?

 

[serverguy]

Pre-SP1 XP clients will need the wuau22.msi client installed - can be easily
deployed via group policy.

I suggest reading the deployment whitepaper....and then read it a second or
third time. It is gospel.

 

[Phillip Windell]

Ah! I guess I could have just read the Welcome screen on that and seen that,
eh?

I don't think it downloaded and Service Packs when it "synced". Do I have to
place the SP's somewhere so it can use them? No Service Packs ever showed
up in the Approve/Disapprove list.

What will happen to patches already installed if a SP is applied when an
existing installed patch may be newer than the SP?
--

Phillip Windell [MCP, MVP, CCNA]
www.wandtv.com

SUS-SP1 (the latest release) does service packs.

--
Richard G. Harper [MVP Win9x] (e-mail address removed)
* PLEASE post all messages and replies in the newsgroups
* for the benefit of all. Private mail is usually not replied to.
* HELP us help YOU ... http://www.dts-l.org/goodpost.htm

No, I don't think is does Service Packs,...only patches.

--

Phillip Windell [MCP, MVP, CCNA]
www.wandtv.com

Thanks for the reply. I did notice that on the microsoft site.

I take it it works for service packs too? And is there any software needed
on the clients or only the server?

I think ill pop back there and have a read about it then.

Thanks

Use "Software Update Services". It is freely downloaded off of MS's site.
Read what you can find about it and don't deploy it until you understand
how
it works fairly well.

It runs as a Server that collects the Updates from MS, then uses Active
Directory to force the Automatic Update utility on the clients to

look
to

the SUS Server instead of the Internet to MS. The clients then

receive
the

Updates from the SUS Server after you "approve" them for deployment.

Then you just check the server once in a while for updates that are new
and
can "approve" the ones you want deployed.

--

Phillip Windell [MCP, MVP, CCNA]
www.wandtv.com


Hello.

I've just started in a new job and have noticed most of the computers
don'
t have any service packs or updates on them. I want to get them

all
up

to
date in the easiest and quickest possible way. We have a 2000 server
with
around 25 clients running XP Pro (a few with SP1).

I have thought about going around them all, but this will mean I will
have
to chuck the user off the machine while I do the update. I have also
tried
remote assistance to do it, but it won't allow me to download and run
any
apps.

Any suggestions?

 

[serverguy]

Do I have to

place the SP's somewhere so it can use them? No Service Packs ever showed
up in the Approve/Disapprove list.

You need to look hard for them and scroll through the entire list. They are
mixed in with all the other updates. If you don't see them, check the synch
log to make sure they were downloaded.

What will happen to patches already installed if a SP is applied when an
existing installed patch may be newer than the SP?

Nothing.

 

[Richard G. Harper]

Inline:

Ah! I guess I could have just read the Welcome screen on that and seen that,
eh?

Well, I guess that's the hazard of reading the friendly manual. ;-)

I don't think it downloaded and Service Packs when it "synced". Do I have to
place the SP's somewhere so it can use them? No Service Packs ever showed
up in the Approve/Disapprove list.

Mine shows the service packs (Windows 2000 Service Pack 4 Network Install,
Windows XP Service Pack 1 Network Install) in the proper places in the
approved list. I didn't do anything fancy, just built the server and let it
sync with Microsoft.

What will happen to patches already installed if a SP is applied when an
existing installed patch may be newer than the SP?

Good question. Unfortunately I always build my base-image on the latest
available SP, then let SUS take care of the follow-up patches. I know that
in the case of dependent patches it will catch the lowest level patch on the
first pass, then the follow-up patch on the next pass. I know that most
security patches have some brains built into them - they won't replace newer
components with older ones - so I'd guess (but can't conclusively prove)
that even if you installed SP4 over newer patch levels the newer patch would
remain intact. Hmmm ... maybe you've given me an idea to play with this
weekend ... <g>

 

[Phillip Windell]

Inline:

Mine shows the service packs (Windows 2000 Service Pack 4 Network Install,
Windows XP Service Pack 1 Network Install) in the proper places in the

I didn't see mine in the Approved list, I don't have the patients to read
through the whole thing looking for them, but I did see the actual files for
them located in the folder where all the patches are kept, so I'm sure
everything is ok.

first pass, then the follow-up patch on the next pass. I know that most
security patches have some brains built into them - they won't replace newer
components with older ones - so I'd guess (but can't conclusively prove)
that even if you installed SP4 over newer patch levels the newer patch would
remain intact.

I've been told that it keeps things straight and doesn't hurt anything.