How to control all PCs updates on an AD system?

[EarAche]

I am looking for help with controling the patch level of all machines on an Active Directory Network. Currently, there are no controls for this other than on the individual machines. (I mean on my current network.)
I was looking at WSUS from MS. Quite frankly, I can't figure out how to even deploy it. Basically, I need to be able to control and/or view what machines are up to date on MS patches, updates, etc. besides going to each machine.

Please advise.
Thanks in advance.

 

[58sniper]

WSUS is what you need.

[google]Installing WSUS[/google]

Pat Richard, MCSE MCSA:Messaging CNA
Microsoft Exchange MVP
Want to know how email works? Read for yourself -

http://www.ietf.org/rfc/rfc2821.txt

 

[markdmac]

Download and install WSUS on a server with at least 7GB of free disk space you can spare. When you launch it the management of it is really extremely simple and will be self evident.

You will want to use a GPO to configure the workstations to use the WSUS server.

You will find additional information here:

http://support.microsoft.com/?scid=ph;en-us;9518

I hope you find this post helpful.

Regards,

Mark

Check out my scripting solutions at

http://www.thespidersparlor.com/vbscript