After I test on a test network at home, after I apply them to my 'canary
boxes' and check and make sure everything is fine, after I watch the
chatter on the patchmangement.org listserve and google on the newsgroups
for the KB article number to see if everything looks good and check my
own SBS newsgroup because someone has already installed it during the
lunch hour or middle of the day....
That's 'instant' gratification 'after' a patch testing process and
change management process.
Once that patch is 'approved' I want it on the boxes as fast as I can.
The tool is irrelevant. Pick one and get it set up. I like gui. And
WSUS annoys me.
It's the risk analysis and change management process that is the hard part.
Rocky Habeeb wrote:
So ...
You reboot on the fly ...
And I'm sure everybody is fine with that ...
And everything is tested ...
And you can promise all your users that none of their 700 apps are going to
crash ...
Just asking, because if that's the promise of Shavlik, then I'll stop
working on trying to get my WSUS system up.
RH
______________________________
-----Original Message-----
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] Behalf Of Susan Bradley,
CPA aka Ebitz - SBS Rocks [MVP]
Sent: Friday, January 06, 2006 12:43 PM
To: ActiveDir@mail.activedir.org
Subject: Re: [ActiveDir] OT: Patch Management
Sorry one other thing.. when I want to have instant gratification and
control... I patch ..right then and force a reboot of all
workstations/servers, etc. There's no waiting for them to check in, or
scripting a faster checkin [horrors] to get a faster patch deployment.
Also it had SBS specific patches way before WSUS did.
I'm a gui gal....what do you expect?
When I want things patched and patched right now...and not within the
next # number of hours... a push solution is way better than a pull in
my opinion.
Za Vue wrote:
We tested on wkstations and servers and decided it was not worth the
hefty price. My opinion is that it is too slow, tested on a duel CPU
P4 system. (Personally I think the GUI is ugly) We ran into firewall
issues as well. I have a dedicated W23K server for WSUS, no problem.
Microsoft workstations, Microsoft servers, why not make everything
Microsoft? Makes life easier in my environment. Now if I can only get
rid of those damn Macs.
Z.V.
Susan Bradley, CPA aka Ebitz - SBS Rocks [MVP] wrote:
Shavlik runs from my Desktop.
Za Vue wrote:
Pretty much all patch management applications require a server.
-Z.V.
Pohlschneider, Chris wrote:
Does anyone have recommendations for patch management software that
could be
installed on a desktop type system to manage a network with 120
nodes for
updates and patches. I was looking at WSUS, but the requirements
are that
you need a server OS, plus the minimum requirements were pretty stout.
Thanks in advance for recommendations!!
Chris Pohlschneider
Network Administrator
Cenveo-Sidney
937-497-2136
[EMAIL PROTECTED]
Cenveo is your visual communications connection for a broad
portfolio of
services and products including eServices, envelopes, offset and
digital
printing, labels and business documents
List info : http://www.activedir.org/List.aspx List FAQ :
http://www.activedir.org/ListFAQ.aspx List archive:
http://www.mail-archive.com/activedir%40mail.activedir.org/
List info : http://www.activedir.org/List.aspx
List FAQ : http://www.activedir.org/ListFAQ.aspx
List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
--
Letting your vendors set your risk analysis these days?
http://www.threatcode.com
List info : http://www.activedir.org/List.aspx
List FAQ : http://www.activedir.org/ListFAQ.aspx
List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
List info : http://www.activedir.org/List.aspx
List FAQ : http://www.activedir.org/ListFAQ.aspx
List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
--
Letting your vendors set your risk analysis these days?
http://www.threatcode.com
List info : http://www.activedir.org/List.aspx
List FAQ : http://www.activedir.org/ListFAQ.aspx
List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
