Critical Patch Distribution

[pmarshall]

I'm sure we can't be the only people with this problem.
Following Blaster and Nachi (Welchi) we have to patch all the servers and desktops.
Servers aren't too much of a problem, tedious but can be done, but we're having trouble getting all the workstations complete because:
* We don't use SMS
* We don't use Windows Update
* Users don't always have local admin rights (so updates won't install from login script)
* RAS users don't run login scripts

Does anyone have a solution to getting around all these issues, short of visiting each and every workstation (not possible)?

Many thanks
Phil

 

[neutec]

Have you considered using Software Update Services.

http://www.microsoft.com/windows2000/windowsupdate/sus/susdeployment.asp

 

[de1458]

check this site, the free ver. will patch up to 50 computers.

http://www.shavlik.com

 

[Claudek]

Neutec suggestion to use SUS fromm microsoft is on the spot especially if your clients are win2k/xp.
Which OSes are your clients running?

Claudius (What certifications??)

http://www.iteq.com.au

 

[celdridge]

i would sugest using a GPO to force the update of windows at a specfic time. (possibly after housrs when people arn't using their PC's.

i dont know what come with windows 2000 but with the SUS you get an additional template to better manager windows update. it is a per computer setting and therefor no user credentials are used.

for your RAS users i would sujest that you instruct them how to run windows update at their own lesure.

put the onus on them make sure they know the problem and let them know that if they do not run it they will not be allowed to connect. there is a tool on the technet website (

http://www.microsoft.com/technet)

to run a scan for which computer have and have not been updated

Cameron Eldridge