darlodge

What do you use?

We had a small outbreak of the Nachi_B virus and I realised how far behind some of our Windows 2000 and XP are. As a result the Nachi B virus got into one PC before our virus scanning software did

I remember looking at this about 2 or 3 years ago with my last company and we used a utility from the command prompt to display which machines were out of date but there was no way of autamating the installation process.

Any responses would be appreciated

I'm looking into Systems Management Server 2003 Downloads and Patch Management Process at the moment but my bloody phone won't stop ringing.

Many thanks
Darren

David_Wallis

gfi languard network security scanner

ozzy

You can also use Software Update Services

Install it on a server, then use a Group Policy to enable automatic updates on PC's or use the Client for your Windows 2000 PC's (or any XP ones without SP1).

Basically the SUS server downloads all the available updates from MS, you approve the ones (or all of them) for distribution and schedule the PC's to check the local server.

Our PC's check daily and install any updates overnight.

Languard is a good way of looking at every PC and checking all the installed patches.

Stefan

David_Wallis

I would have suggested that but sms 2003 supercedes sus.. and makes it look like a toy.

David

ozzy

True; SUS is free though. Depends on what size of network Darren's managing I suppose.

darlodge

Thanks Stefan and David

Network is about 400 in total. 150 external, 150 in the south and the rest in the north.

We are looking at rolling out Active Directory and Exchange in the early part of next year but I wanted to get something sorted ASAP to stop the spread of any future viruses etc.

I'll have a look at the links on Monday