Patches and pain

  • Thread starter Thread starter K
  • Start date Start date
K

K

I have 50 computers that need the newest Windows 2000 patches installed.
The sad thing is they are not part of a domain, only a workgroup. All the
users of these systems belong to the local users group. Is it even possible
to deploy updates in the situation? I do not want to go to each computer to
login as an admin. I am willing to put some work into this situation so the
next time an update is released it is easier. I have a Windows 2000 server,
but having users login to the domain is just not going to happen any time in
the near future. All of the administrator passwords are the same on the 50
computers. I know the whole limitation of not logging into a domain is
limiting, but i'm just hoping someone knows of a solution.

Also..

1. Is it possible to setup an internal windows update site?
2. Does the automatic update applet in the control panel take effect when a
local user account is logged in instead of administrator?

I remember hearing something about corporate.windowsupdate.com but that is
not even online any more...

Thank you anyone who helps.
K
 
K said:
I have 50 computers that need the newest Windows 2000 patches installed.
The sad thing is they are not part of a domain, only a workgroup. All the
users of these systems belong to the local users group. Is it even possible
to deploy updates in the situation? I do not want to go to each computer to
login as an admin. I am willing to put some work into this situation so the
next time an update is released it is easier. I have a Windows 2000 server,
but having users login to the domain is just not going to happen any time in
the near future. All of the administrator passwords are the same on the 50
computers. I know the whole limitation of not logging into a domain is
limiting, but i'm just hoping someone knows of a solution.

Also..

1. Is it possible to setup an internal windows update site?
2. Does the automatic update applet in the control panel take effect when a
local user account is logged in instead of administrator?
Click to expand...

Hi

Shavlik's htfnetchkLT
If 50 computers or less htfnetchkLT is free (http://www.shavlik.com), it can
scan and push patches. It also finds patches needed for Office as well, and it
gives a really nice graphical analysis of the patch from truesecure.

You could consider implementing SUS (free) or something similar (links to some
3rd party products further down) for security patches.

Microsoft Software Update Services (SUS)
http://www.microsoft.com/windows2000/windowsupdate/sus/default.asp

Patch Management Using Microsoft Software Update Services - Operations Guide
http://www.microsoft.com/technet/itsolutions/msm/swdist/pmsusog.asp

Note that the current version will only install critical updates and security
rollup packages (SRPs).

A new version is in the works:
http://groups.google.com/[email protected]

SUS needs to be installed on a IIS server. Supports Win2k and WinXP clients
only. SP1 for WinXP and SP3 for Win2k installs the WU/SUS client as default.


There is a separate newsgroup for SUS:
microsoft.public.softwareupdatesvcs

URL to the group softwareupdatesvcs for those who uses the not so good Web
interface to access the newsgroups:
http://communities.microsoft.com/Ne...newsgroup=microsoft.public.softwareupdatesvcs



A Web site about SUS with a FAQ and a SUS forum:

SUSserver.com
http://www.susserver.com/

More Web sites about SUS
http://www.cites.uiuc.edu/sus/faq.html
http://www.faqshop.com/sus/default.htm
http://www.faqshop.com/sus/susclient.htm
http://computing.fusion13.com/SUS/Microsoft-Software-Update-Services-SUS.shtml



When evaluating hotfix administration methods/programs,
there are also 3rd party solutions available that will
give a lot more than what SUS offer, but of course, they
are not free. It is as always a cost/benefit analyze that
needs to be done.

Below is links to a 3rd party product example that does
not need a server to run and no IIS is needed (it supports
NT4 clients as well). You can deploy mostly all types of
hotfixes and service packs from an ordinary workstation
if you want. I have not tested it, but it gets a lot of prize
by other people e.g. in the newsgroups.


UpdateEXPERT from Sunbelt
http://www.sunbelt-software.com/product.cfm?id=357

UpdateEXPERT reseller with a price list
http://www.softwareshelf.com/products/display.asp?p=71


Here is a couple of third party products that supports Win9x and WinME as well:

PatchLink's Update
http://www.patchlink.com

BigFix Enterprise Suite
http://www.bigfix.com/website/enterprise/overview.html
 
Back
Top