Tek-Tips is the largest IT community on the Internet today!

Members share and learn making Tek-Tips Forums the best source of peer-reviewed technical information on the Internet!

  • Congratulations IamaSherpa on being selected by the Tek-Tips community for having the most helpful posts in the forums last week. Way to Go!

Installing Updates from domain controller

Status
Not open for further replies.

jrogerom

IS-IT--Management
Aug 16, 2007
44
MX
Hi. I have windows 2003 server with doamin controller, 500 computers with win XP. the 500 computers don't have internet access and I want to do the following:
1.- Install updates from win XP to 500 computer.
2.- Install updates to antivirus in the 500 computers.
3.- Install java updates to 500 computers.

Is anything I can do with domain controller to install all mentioned?

Thanks in advance.
 
Windows Server Update Services (WSUS) Home

for the Windows updates. You'd have to check with your AV vendor for the AV piece. But I wouldn't install either on a domain controller. You should use a separate server for those and any other non DC related functions.

Pat Richard MVP
Plan for performance, and capacity takes care of itself. Plan for capacity, and suffer poor performance.
 
you shouldnt be using the DC for such purposes if it can at all be avoided...

WSUS can take care of the normal windows updates for you...

Installation of the antivirus and the java updates may be possible via GPO, however, you will need to provide a transform for the installation. ADS could do the trick there too though...

- Brandon Wilson
MCSE:Security00/03; MCSA:Security03
MCSA:Messaging00; MCP; A+
IT Pangaea (
 
You could also do the installs of Antivirus and Java via a login script. Upon completion of the install you could write a file out to a network share or locally on each PC that would designate that the software has already been installed.

Thanks,
Andrew

[medal] Hard work often pays off over time, but procrastination pays off right now!
 
the logon script method will require that users are local admins most likely...if this is not the case, that will not work without extensive alteration of permissions adjustments for share/NTFS/and some GPO settings....

- Brandon Wilson
MCSE:Security00/03; MCSA:Security03
MCSA:Messaging00; MCP; A+
IT Pangaea (
 
Good point about permissions. Our users are admins on the local PC's (not my decision), so it does make things like that easier.

Thanks,
Andrew

[medal] Hard work often pays off over time, but procrastination pays off right now!
 
Ok in that case than either method will work, but if you want to make yourself look good, and your nevironment look good, I would go with a more streamlined solution that cna handle many other purposes too...aka, go with ADS and WSUS combo on a new or preexisting server that is not the DC :)

- Brandon Wilson
MCSE:Security00/03; MCSA:Security03
MCSA:Messaging00; MCP; A+
IT Pangaea (
 
Status
Not open for further replies.

Part and Inventory Search

Sponsor

Back
Top