How do I push Anti-virus, Microsoft patches?

[iluvsushi]

Hi all,
I was wondering how can I push software patches, i.e anti-virus, Windows, ...etc through the use of active directory. I tried through group policy but it only allows me to push .msi files. What if i wanted to push ANY non microsoft software or patches?
Thanks!

 

[Davetoo]

You use WSUS to push the MS Updates. The antivirus package should have it's own delivery method.

I'm Certifiable, not cert-ified.
It just means my answers are from experience, not a book.
The poster formerly known as lander215

 

[iluvsushi]

Forgive my ignorance but what is WSUS?

 

[pagy]

http://www.google.co.uk/search?hl=en&q=WSUS&btnG=Google+Search&meta=

Paul

MCSE 2003

"Two things are infinite: the universe and human stupidity; and I'm not sure about the the universe."
Albert Einstein

 

[kmkeshav]

http://www.microsoft.com/windowsserversystem/updateservices/default.mspx

WSUS is a service that runs on a Windows Server, from where your organization computers (workstations and servers) can pull the Windows updates from. WSUS server will pull the updates from Windows Update site.

-Keshav

 

[SquaredNull]

You also can create administrative install by running setup with /a switch. You only need to make sure you've placed your administrative install point folder one step under the shared folder. There are also third-party tools that can do that. We use Desktop Authority right for that similar task. We deliver user software updates with it. Because each single department has its own set of software we need to create rules that distribute assigned updates to dedicated department. It aslo supports WSUS natively so there are no problems with getting updates for MS products too.

 

[iluvsushi]

What we have right now is an isolated network that is not able to access the web or anyone other than the workstations, Domain Controller and WSUS. How do I get WSUS to send updates to the workstations if WSUS can't get to the web? Can I just download the updates to USB stick back to the WSUS server? Would it be that simple?
Thanks.

 

[SquaredNull]

I guess you can use something like WSUSutil with movecontent command to set the local storage for updates. Additional info on this is available here.