Since my servers and workstations are in separate OU's, I use a separate set of settings for the servers.
On the client/workstation side, I've got it set to download and force install (without automatic reboot). This ensures that my user community is relatively well protected. On the servers, I've set it to download and notify that the patches are ready - but not to automatically install. That way, I control when and how the systems get patched. Alternately, one could chose the notify only option, where you then get the option to download and install them at the same time - but I prefer to distribute the patches automatically and apply them at the time of my choosing. That might, of course, have something to do with our change management process as well... In either case, I manually approve the updates, so the two service packs (and a number of other updates) sit in blissful "Not Approved" status, where they will remain most likely indefinitely. -------------------------------------------------------------- Roger D. Seielstad - MTS MCSE MS-MVP Sr. Systems Administrator Inovis Inc. > -----Original Message----- > From: Henderson Richard [mailto:[EMAIL PROTECTED] > Sent: Friday, September 19, 2003 7:13 AM > To: '[EMAIL PROTECTED]' > Subject: RE: [ActiveDir] SUS does SPs now > > > As it will only run on W2KSP2+ Clients SMS is still needed > for NT4 Clients. > > But another question, how many here will setup SUS SP > updates to Servers? > i.e 100 servers all being rebooted at 3am Sunday morning ?? > > -----Original Message----- > From: Graham Turner [mailto:[EMAIL PROTECTED] > Sent: 19 September 2003 09:44 > To: [EMAIL PROTECTED] > Subject: Re: [ActiveDir] SUS does SPs now > > > Have just picked up on this thread of SUS - looks a real winner > > would be glad for the views of the positioning of this > product relative to > SMS ?? > > GT > > ----- Original Message ----- > From: "Free, Bob" <[EMAIL PROTECTED]> > To: <[EMAIL PROTECTED]> > Sent: Thursday, September 18, 2003 11:44 PM > Subject: RE: [ActiveDir] SUS does SPs now > > > >a complete rollup with every patch released for a particular OS. > > There is actually a current WU beta along those lines... > > If history repeats, it may be available sooner than later > > > -----Original Message----- > From: Crenshaw, Jason [mailto:[EMAIL PROTECTED] > Sent: Thursday, September 18, 2003 1:17 PM > To: '[EMAIL PROTECTED]' > Subject: RE: [ActiveDir] SUS does SPs now > > > You should see a "roll-back/recall" in SUS 2.0. I didn't > hear about the > SP's being available in SUS until this morning when I saw that it was > something that was available to be published, so something or > someone must > have pulled the trigger for this to happen. Being an > Enterprise customer of > Microsoft, they usually go way out of their way to ensure > that we know about > major upcoming changes before going live with them. > > I guess Microsoft is tired of getting slammed with deployment > problems for > SP's. For anyone not using SMS, UpdateExpert, or something > else along those > lines, deploying SP's enterprise wide can be a task within itself. > > It's too bad that Microsoft doesn't offer patches in a two > prong manner. One > being you can just install the one "hotfix" for a particular > problem and the > other would be a complete rollup with every patch released > for a particular > OS. > > Of course, it is easy to say that from a customer side. I > don't have to > write or manage any of the changes; I just have to work with what I am > given. > > Jason > > > > > List info : http://www.activedir.org/mail_list.htm > List FAQ : http://www.activedir.org/list_faq.htm > List archive: > http://www.mail-archive.com/activedir%> 40mail.activedir.org/ > > > List info : > http://www.activedir.org/mail_list.htm > List FAQ : http://www.activedir.org/list_faq.htm > List archive: > http://www.mail-archive.com/activedir%> 40mail.activedir.org/ > > > > > ************************************************************** > ********************************************* > This correspondence is confidential and is solely for the > intended recipient(s). If you are not the intended recipient, > you must not use, disclose, copy, distribute or retain this > message or any part of it. If you are not the intended > recipient please delete this correspondence from your system > and notify the sender immediately. > No warranty is given that this correspondence is free from > any virus. In keeping with good computer practice, you should > ensure that it is actually virus free. E-mail messages may be > subject to delays, non-delivery and unauthorised alterations > therefore, information expressed in this message is not given > or endorsed by Sx3 unless otherwise notified by our duly > authorised representative independent of this message. > Sx3 is a trading name of Service and Systems Solutions > Limited, a limited company registered in Northern Ireland > under number NI 32979 whose registered office is at 120 > Malone Road, Belfast, BT9 5HT. > ************************************************************** > ********************************************* > > List info : http://www.activedir.org/mail_list.htm > List FAQ : http://www.activedir.org/list_faq.htm > List archive: > http://www.mail-archive.com/activedir%> 40mail.activedir.org/ > List info : http://www.activedir.org/mail_list.htm List FAQ : http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
