Install MS updates to many servers

[biglebowski]

Hi,

I need to install MS updates on multiple servers across multiple domains. There are 5 seperate 2000 domains each with 1 win 2000 server DC and 6 win 2000 servers as member servers. Each of the domains has a 2 way trust. None of these servers have been updated in 3 years. We have an update package but because it is 450MB I would like to run it from a single location. There are currently no GPOs set up and the update is run via an exe. Is there any way I can update all the servers via a GPO?

Thanks

When I was born I was so suprised I didn't talk for 18 months

 

[victorv]

hi,
are you sure to start a "so massive" intervent in a production environment ?

May be a good idea to leave all as it is ?

Which are the motivations to do it ?

Have you tried to start manually this operation in 1 server,
and verify all is ok at reboot ?

bye
victor

 

[GrimR]

Have you heard of WSUS? You can configure WSUS as upstream or replicas

 

[technome]

Personally, I would not think of updating all the servers at the same time; with 3 years retro, you bound to have at least one patch issue crop up. At the same time I would not leave the servers unpatched. My scenario would be to patch each individually, waiting more than 3 days between each, brush fires are easier to deal with then wildfires.


........................................
Chernobyl disaster..a must see pictorial

http://www.kiddofspeed.com/default.htm

 

[Grenage]

Just to throw my two cents into the rings; I agree with the previous posters' comments. Avoid updating your network in one go (not that you said you were planning to).

WSUS would be a good way to go, but i have a suspicion that the latest releases require Windows 2003 or above. WSUS can be, and generally is, controlled by a GPO.

If you're working with your packaged updates, I would recommend installing them manually and one at a time.

"We can categorically state that we have not released man-eating badgers into the area" - Major Mike Shearer

 

[markdmac]

Grenage, I can confirm that WSUS does require Windows 2003. If you have a 2003 server, WSUS is the best way to get this job done. It will take you very little time to setup even if you have never done it before, and you will have the ability to approve/disapprove any fixes you want from a central location.

I too am in agreement that you should do this a little at a time. You could potentially cripple your environment if you were to do this en mass.

I hope you find this post helpful.

Regards,

Mark

Check out my scripting solutions at

http://www.thespidersparlor.com/vbscript

Work SMARTER not HARDER. The Spider's Parlor's Admin Script Pack is a collection of Administrative scripts designed to make IT Administration easier! Save time, get more work done, get the Admin Script Pack.

 

[Grenage]

Cheers for the confirmation, Mark; good to know.

"We can categorically state that we have not released man-eating badgers into the area" - Major Mike Shearer