sus and sms 3

[terry712]

is there or does anyone have a quick good guide to installing the sus feature pack

preferable a 3 - 4 page dummy install guide rather than the 60 page tombs on technet that leave you feeling more confused than when you picked it up
i have one primary site and currently 90 secondary sites - due to increase to approx 140

primary now on sp5 - all secondaries sp4 - new sites will be going in as sp5 and secondaries staying at sp4 unless any major issues identified

 

[Jpoandl]

(I would keep all SMS servers at the same SP level. For example, I think SP 5 can better identify Windows 2003 machine...where SP 4 see's them as NT machines. Having a mixed service packed environment is not reccomended.)

Anyway, I don't have a quick guide for you but I can tell you what I have learned.

First of all download the SUS for SMS.

1) You first need to then download the latest XML database containing all of the relavent service packs.

2) Then you have to send out the SUS scanner package to all systems. This package is used to scan the client and figure out what security packs are all ready applied and which security packs are applicable for each client. This information will be captured by SMS hardware/software inventory and saved in the SMS database (You will see it listed under Hardware- Software Updates)

3) I would also download and install the Standard Web Reports from the MS web site. This has a built in web query that will show you (in various ways) what client machines need what security updates. [go to the MS web site- go to Servers- SMS- Downloads)

4)After SUS scanner goes out and scans your environment, you can then push out - say MS03-034 and MS03-040 (for example) SUS will automatically figure out what OS and IE version the client systems have and push the package to the client.

I haven't gotten to step 4 yet. I just have been using the scanning features to tell me what security update are needed and applied. I then create manuall packages for the security updates I want to push out.

-hope some of this helps..

Joseph L. Poandl
MCSE 2000

If your company is in need of experts to examine technical problems/solutions, please check out

http://www.NJCOMPUTERNETWORKS.com

(Sales@njcomputernetworks.com)

 

[samisu]

Hi,
As Jpoandl said it;s easy to work with SMS FP, only try to download the EXE file then run it & follow the wizard it will work fine with u



SAMI
Regards

 

[RodTrent]

Here you go...

http://www.myitforum.com/articles/1/view.asp?id=4679

Rod Trent
Microsoft.MVP.SMS
=======================================
Main site:

http://www.myITforum.com

=======================================

 

[jhawks]

Here is another link, jump down to installation sequences. Be very sure step 5 completes before going to the next step.

http://www.microsoft.com/smserver/downloads/20/featurepacks/suspack/installation.asp

 

[Jpoandl]

Nice write up Rod! I like this abbreviated SUS guide.

Thank you very much....

Joseph L. Poandl
MCSE 2000

If your company is in need of experts to examine technical problems/solutions, please check out

http://www.NJCOMPUTERNETWORKS.com

(Sales@njcomputernetworks.com)

 

[terry712]

cheers

i'll off for a few weeks so will start reading and implementing on return

 

[terry712]

whats the safest/easiest way to update sp4 - 5
i cant do it on site - needs to be remote

all sites are untrusted

only link to each is via smssender account

 

[MarvintheMartian]

How fast are your links?

I've upgraded over 56k links - worked OK.

 

[terry712]

still no joy installing sus

stop right at beginning with advertisement.dll prob

this dll isnt on server
do i need to install xml or something first - if so from where

 

[Hankejp]

Does or has anyone used the SUS feature pack on SMS 2003? The one I download off of the Microsoft site looks like it may be for 2.0?

 

[evz]

Have managed to Install the SUS Feature pack tools as the documents say, but whenever I go to try to distribute a security update, I don't get any options showing in the Add and Remove Updates. I know that the there is a WIndows XP PC in my pre production collection that requires 14 updates as I have run Windows update on it to find out this info.

I have read some articles which say download mssecure.xml - but where should this go ?

Is there anything I need to do to get the list of available updates ? I am pretty sure the sync task has run

anyone got any ideas ?

thanks

 

[potts007]

evz - It sounds like your SMS systems inventory cycle has not completed yet. Give it a little more time and then check. It does not happen instantaneously.

Tim