RE: Automating patch deployment

You could try to install the Windows Update Server in your LAN. Basically you setup a server that fetches all of the hotfixes. Set up all the servers manually or via GPOs in AD to get updates every night at 3am (for example) and only the updates YOU approve via the main console will propergate through.

http://www.microsoft.com/windows2000/windowsupdate/sus/susoverview.asp

Erick Grau
IT Manager
Khronos LLC

-----Original Message-----

From: George Peek [mailto:GKPeek@AllstateTicketing.com] Sent: Tuesday, August 05, 2003 4:37 PM
To: 'full-disclosure@lists.netsys.com'; 'security-basics@securityfocus.com' Cc: George Peek
Subject: Automating patch deployment

We have two networks, one AD and one NT4.0. We can not use AD to deploy MSI patch packages to workstations that are not part of the AD (Active Directory), but are part of the NT domain. Not really interested in purchasing SMS as it seems too costly (why should we?). Considering HFNetChkPro 4 to automate the deployment of patches to our workstations and servers, as doing it manually is far too costly and time consuming for the company. Are there any other utilities or software that anyone (possibly free?) recommends that could be used to simplify patch deployment and management to every workstation and server. We use Windows NT, 2000 and XP workstation products, and NT4.0/2000/2000 Adv server products.

Thank You,

George K. Peek
Network Specialist
Allstate Ticketing