RE: Patch management recommendations
I'm just glad I no longer have to travel there for games. It's a pitstop on our way to Las Vegas. -Original Message- From: Charlie Kaiser [mailto:charl...@golden-eagle.org] Sent: Thursday, January 17, 2013 5:17 PM To: NT System Admin Issues Subject: RE: Patch management recommendations It is indeed an odd town. But when you're a falconer, it's one of the best places in the US to live... *** Charlie Kaiser charl...@golden-eagle.org Kingman, AZ *** -Original Message- From: Ray [mailto:rz...@qwest.net] Sent: Thursday, January 17, 2013 3:38 PM To: NT System Admin Issues Subject: RE: Patch management recommendations There is that. Kind of an odd town though. My kids played sports against Kingman. -Original Message- From: Charlie Kaiser [mailto:charl...@golden-eagle.org] Sent: Thursday, January 17, 2013 10:44 AM To: NT System Admin Issues Subject: RE: Patch management recommendations Everything's remote. Most clients in California, but cost of living is better here... :-) *** Charlie Kaiser charl...@golden-eagle.org Kingman, AZ *** -Original Message- From: Ray [mailto:rz...@qwest.net] Sent: Thursday, January 17, 2013 7:53 AM To: NT System Admin Issues Subject: RE: Patch management recommendations In Kingman? Wow. ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin
RE: Patch management recommendations
I had a conference yesterday with the Kace team and a product overview. The newest release has lots of cool features that I didn't see in the version I used previously. And if you do not already have a help desk, you can use that module (no extra cost). For small companies like mine, this sort of all-in-one product is great. Users can enter tickets, install software (system perms not logged in user), and read any internal KB docs you wish to post. KBox also comes with two Bomguard licenses, so you do not need extra GoToAssist or whatever purchases, if you just need a few licenses. Not that it may matter to the list, but I always found the Kbox agent very easy to deploy and upgrade. Tom From: John Cook [mailto:john.c...@pfsf.org] Sent: Thursday, January 17, 2013 9:39 AM To: NT System Admin Issues Subject: RE: Patch management recommendations We run Kace as a Virtual appliance (K1000) with no tweaks and it handles our approx. 250 computers with no issue. John W. Cook Network Operations Manager Partnership For Strong Families 5950 NW 1st Place Gainesville, Fl 32607 Office (352) 244-1610 Cell (352) 215-6944 MCSE, MCP+I, MCTS, CompTIA A+, N+, VSP4, VTSP4 From: Glen Johnson [mailto:gjohn...@vhcc.edu] Sent: Thursday, January 17, 2013 9:36 AM To: NT System Admin Issues Subject: RE: Patch management recommendations Almost all the Virginia Community colleges, dumped Altiris in favor of KACE. The latest update to Altiris was a disaster for everyone that attempted it. We were not one of the brave colleges to try, but from what I heard, the system requirements were huge, a dual socket, quad core server with 24gig ram was barely adequate to serve 3 to 400 client workstations. Ouch. We currently run both the K1000 and K2000 on a HP/Compaq dl-380 dual socket, quad core with 16gig ram under vmware 5 and it is very responsive. Also two other windows virtuals on the same host. The instructor led training was very good also. From: Rod Trent [mailto:rodtr...@myitforum.com] Sent: Thursday, January 17, 2013 9:08 AM To: NT System Admin Issues Subject: RE: Patch management recommendations I'd take a step back to wait and see on Altiris with yesterday's news. http://myitforum.com/myitforumwp/2013/01/16/altiris-to-become-altiris-again-symantec-dumping-it-for-less-than-it-paid/ From: Christopher Bodnar [mailto:christopher_bod...@glic.com] Sent: Thursday, January 17, 2013 8:40 AM To: NT System Admin Issues Subject: Re: Patch management recommendations Kace Altiris SCCM with SCUP One of these should fit most of your clients needs. Christopher Bodnar Enterprise Architect I, Corporate Office of Technology:Enterprise Architecture and Engineering Services Tel 610-807-6459 3900 Burgess Place, Bethlehem, PA 18017 christopher_bod...@glic.commailto: [cid:image001.jpg@01CDF492.11CAAC30] The Guardian Life Insurance Company of America www.guardianlife.comhttp://www.guardianlife.com/ From:Charlie Kaiser charl...@golden-eagle.orgmailto:charl...@golden-eagle.org To:NT System Admin Issues ntsysadmin@lyris.sunbelt-software.commailto:ntsysadmin@lyris.sunbelt-software.com Date:01/16/2013 06:04 PM Subject:Patch management recommendations I work for a consulting firm that manages a variety of SMB clients. As we increase our client load and the size of the clients (moving from the 3-10 seat to the 50-1000 seat clients) we are implementing more advanced products for a variety of tasks. We are currently looking at patch management solutions. Our current paradigm is a mix of WSUS and manual intervention, but it's not enough, obviously. I haven't used a centralized patch management system for around 5-6 years (used to use early versions of Shavlik) so I haven't been keeping up with the market. We're now looking for something that does 3rd party apps, not just MS stuff, so WSUS is off the table. Our clients are all on MS platforms, though; almost no *nix or Apple. I don't envision a one-size-fits-all product. I expect that we'll want a variety of solutions tailored to the size and complexity of the client. And I have no illusions about the ease of patch management given any product. :-) My boss would love an MSP-style of centrally managed product that can handle all our clients, but my belief is that trying to go that route is much more difficult than doing per-client implementations, especially without dedicated patch management admins. Having said all that, is anyone working with patch management systems that they really like for this space? Also, any you really DON'T like? Thanks! *** Charlie Kaiser charl...@golden-eagle.orgmailto:charl...@golden-eagle.org Kingman, AZ *** ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums
RE: Patch management recommendations
We looked at the KBox several years ago. Is it still extremely expensive? (I think we were quoted $20,000, which is a lot for us.) --Matt Ross Ephrata School District - Original Message - From: Tom Miller [mailto:tmil...@sfgtrust.com] To: NT System Admin Issues [mailto:ntsysadmin@lyris.sunbelt-software.com] Sent: Fri, 18 Jan 2013 04:25:03 -0800 Subject: RE: Patch management recommendations I had a conference yesterday with the Kace team and a product overview. The newest release has lots of cool features that I didn't see in the version I used previously. And if you do not already have a help desk, you can use that module (no extra cost). For small companies like mine, this sort of all-in-one product is great. Users can enter tickets, install software (system perms not logged in user), and read any internal KB docs you wish to post. KBox also comes with two Bomguard licenses, so you do not need extra GoToAssist or whatever purchases, if you just need a few licenses. Not that it may matter to the list, but I always found the Kbox agent very easy to deploy and upgrade. Tom From: John Cook [mailto:john.c...@pfsf.org] Sent: Thursday, January 17, 2013 9:39 AM To: NT System Admin Issues Subject: RE: Patch management recommendations We run Kace as a Virtual appliance (K1000) with no tweaks and it handles our approx. 250 computers with no issue. John W. Cook Network Operations Manager Partnership For Strong Families 5950 NW 1st Place Gainesville, Fl 32607 Office (352) 244-1610 Cell (352) 215-6944 MCSE, MCP+I, MCTS, CompTIA A+, N+, VSP4, VTSP4 From: Glen Johnson [mailto:gjohn...@vhcc.edu] Sent: Thursday, January 17, 2013 9:36 AM To: NT System Admin Issues Subject: RE: Patch management recommendations Almost all the Virginia Community colleges, dumped Altiris in favor of KACE. The latest update to Altiris was a disaster for everyone that attempted it. We were not one of the brave colleges to try, but from what I heard, the system requirements were huge, a dual socket, quad core server with 24gig ram was barely adequate to serve 3 to 400 client workstations. Ouch. We currently run both the K1000 and K2000 on a HP/Compaq dl-380 dual socket, quad core with 16gig ram under vmware 5 and it is very responsive. Also two other windows virtuals on the same host. The instructor led training was very good also. From: Rod Trent [mailto:rodtr...@myitforum.com] Sent: Thursday, January 17, 2013 9:08 AM To: NT System Admin Issues Subject: RE: Patch management recommendations I'd take a step back to wait and see on Altiris with yesterday's news. http://myitforum.com/myitforumwp/2013/01/16/altiris-to-become-altiris-again-symantec-dumping-it-for-less-than-it-paid/ From: Christopher Bodnar [mailto:christopher_bod...@glic.com] Sent: Thursday, January 17, 2013 8:40 AM To: NT System Admin Issues Subject: Re: Patch management recommendations Kace Altiris SCCM with SCUP One of these should fit most of your clients needs. Christopher Bodnar Enterprise Architect I, Corporate Office of Technology:Enterprise Architecture and Engineering Services Tel 610-807-6459 3900 Burgess Place, Bethlehem, PA 18017 christopher_bod...@glic.commailto: [cid:image001.jpg@01CDF492.11CAAC30] The Guardian Life Insurance Company of America www.guardianlife.comhttp://www.guardianlife.com/ From:Charlie Kaiser charl...@golden-eagle.orgmailto:charl...@golden-eagle.org To:NT System Admin Issues ntsysadmin@lyris.sunbelt-software.commailto:ntsysadmin@lyris.sunbelt-software.com Date:01/16/2013 06:04 PM Subject:Patch management recommendations I work for a consulting firm that manages a variety of SMB clients. As we increase our client load and the size of the clients (moving from the 3-10 seat to the 50-1000 seat clients) we are implementing more advanced products for a variety of tasks. We are currently looking at patch management solutions. Our current paradigm is a mix of WSUS and manual intervention, but it's not enough, obviously. I haven't used a centralized patch management system for around 5-6 years (used to use early versions of Shavlik) so I haven't been keeping up with the market. We're now looking for something that does 3rd party apps, not just MS stuff, so WSUS is off the table. Our clients are all on MS platforms, though; almost no *nix or Apple. I don't envision a one-size-fits-all product. I expect that we'll want a variety of solutions tailored to the size and complexity of the client. And I have no illusions about the ease of patch management given any product. :-) My boss would love an MSP-style of centrally managed product that can handle all our clients, but my belief is that trying to go that route is much more difficult than doing per-client implementations, especially without dedicated patch management admins
RE: Patch management recommendations
Cost depends on your business type, appliance used, and the number of nodes you need. I saved so many man-hours with KBox and that was a big factor. (About four years I ago I tried to get SCCM working. We got it working, but it required constant attention and so many man-hours. In the end I spent so many man-hours on it that the cheap non-profit cost was pointless. Changed to more expensive Kbox and cut the man-hours by 75% easily. My experience only and no offense to you SCCM folks.) -Original Message- From: Matthew W. Ross [mailto:mr...@ephrataschools.org] Sent: Friday, January 18, 2013 11:55 AM To: NT System Admin Issues Subject: RE: Patch management recommendations We looked at the KBox several years ago. Is it still extremely expensive? (I think we were quoted $20,000, which is a lot for us.) --Matt Ross Ephrata School District - Original Message - From: Tom Miller [mailto:tmil...@sfgtrust.com] To: NT System Admin Issues [mailto:ntsysadmin@lyris.sunbelt-software.com] Sent: Fri, 18 Jan 2013 04:25:03 -0800 Subject: RE: Patch management recommendations I had a conference yesterday with the Kace team and a product overview. The newest release has lots of cool features that I didn't see in the version I used previously. And if you do not already have a help desk, you can use that module (no extra cost). For small companies like mine, this sort of all-in-one product is great. Users can enter tickets, install software (system perms not logged in user), and read any internal KB docs you wish to post. KBox also comes with two Bomguard licenses, so you do not need extra GoToAssist or whatever purchases, if you just need a few licenses. Not that it may matter to the list, but I always found the Kbox agent very easy to deploy and upgrade. Tom From: John Cook [mailto:john.c...@pfsf.org] Sent: Thursday, January 17, 2013 9:39 AM To: NT System Admin Issues Subject: RE: Patch management recommendations We run Kace as a Virtual appliance (K1000) with no tweaks and it handles our approx. 250 computers with no issue. John W. Cook Network Operations Manager Partnership For Strong Families 5950 NW 1st Place Gainesville, Fl 32607 Office (352) 244-1610 Cell (352) 215-6944 MCSE, MCP+I, MCTS, CompTIA A+, N+, VSP4, VTSP4 From: Glen Johnson [mailto:gjohn...@vhcc.edu] Sent: Thursday, January 17, 2013 9:36 AM To: NT System Admin Issues Subject: RE: Patch management recommendations Almost all the Virginia Community colleges, dumped Altiris in favor of KACE. The latest update to Altiris was a disaster for everyone that attempted it. We were not one of the brave colleges to try, but from what I heard, the system requirements were huge, a dual socket, quad core server with 24gig ram was barely adequate to serve 3 to 400 client workstations. Ouch. We currently run both the K1000 and K2000 on a HP/Compaq dl-380 dual socket, quad core with 16gig ram under vmware 5 and it is very responsive. Also two other windows virtuals on the same host. The instructor led training was very good also. From: Rod Trent [mailto:rodtr...@myitforum.com] Sent: Thursday, January 17, 2013 9:08 AM To: NT System Admin Issues Subject: RE: Patch management recommendations I'd take a step back to wait and see on Altiris with yesterday's news. http://myitforum.com/myitforumwp/2013/01/16/altiris-to-become-altiris- again-symantec-dumping-it-for-less-than-it-paid/ From: Christopher Bodnar [mailto:christopher_bod...@glic.com] Sent: Thursday, January 17, 2013 8:40 AM To: NT System Admin Issues Subject: Re: Patch management recommendations Kace Altiris SCCM with SCUP One of these should fit most of your clients needs. Christopher Bodnar Enterprise Architect I, Corporate Office of Technology:Enterprise Architecture and Engineering Services Tel 610-807-6459 3900 Burgess Place, Bethlehem, PA 18017 christopher_bod...@glic.commailto: [cid:image001.jpg@01CDF492.11CAAC30] The Guardian Life Insurance Company of America www.guardianlife.comhttp://www.guardianlife.com/ From:Charlie Kaiser charl...@golden-eagle.orgmailto:charl...@golden-eagle.org To:NT System Admin Issues ntsysadmin@lyris.sunbelt-software.commailto:ntsysadmin@lyris.sunbelt-software.com Date:01/16/2013 06:04 PM Subject:Patch management recommendations I work for a consulting firm that manages a variety of SMB clients. As we increase our client load and the size of the clients (moving from the 3-10 seat to the 50-1000 seat clients) we are implementing more advanced products for a variety of tasks. We are currently looking at patch management solutions. Our current paradigm is a mix of WSUS and manual intervention, but it's not enough, obviously. I haven't used a centralized patch management system for around 5-6 years (used to use early versions
Re: Patch management recommendations
I'd take a look at the KACE (Now Dell) Kbox systems, the last time I looked at them a couple of years ago they did all that. Available as both physical Dell boxes or VM appliances. If I remember correctly I think they had a multiple tenancy facility, but I could be mistaken. There are a few users of them on here I believe who may be able to correct me. Tony On 16 January 2013 23:03, Charlie Kaiser charl...@golden-eagle.org wrote: I work for a consulting firm that manages a variety of SMB clients. As we increase our client load and the size of the clients (moving from the 3-10 seat to the 50-1000 seat clients) we are implementing more advanced products for a variety of tasks. We are currently looking at patch management solutions. Our current paradigm is a mix of WSUS and manual intervention, but it's not enough, obviously. I haven't used a centralized patch management system for around 5-6 years (used to use early versions of Shavlik) so I haven't been keeping up with the market. We're now looking for something that does 3rd party apps, not just MS stuff, so WSUS is off the table. Our clients are all on MS platforms, though; almost no *nix or Apple. I don't envision a one-size-fits-all product. I expect that we'll want a variety of solutions tailored to the size and complexity of the client. And I have no illusions about the ease of patch management given any product. :-) My boss would love an MSP-style of centrally managed product that can handle all our clients, but my belief is that trying to go that route is much more difficult than doing per-client implementations, especially without dedicated patch management admins. Having said all that, is anyone working with patch management systems that they really like for this space? Also, any you really DON'T like? Thanks! *** Charlie Kaiser charl...@golden-eagle.org Kingman, AZ *** ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin
Re: Patch management recommendations
Kace Altiris SCCM with SCUP One of these should fit most of your clients needs. Christopher Bodnar Enterprise Architect I, Corporate Office of Technology:Enterprise Architecture and Engineering Services Tel 610-807-6459 3900 Burgess Place, Bethlehem, PA 18017 christopher_bod...@glic.com The Guardian Life Insurance Company of America www.guardianlife.com From: Charlie Kaiser charl...@golden-eagle.org To: NT System Admin Issues ntsysadmin@lyris.sunbelt-software.com Date: 01/16/2013 06:04 PM Subject:Patch management recommendations I work for a consulting firm that manages a variety of SMB clients. As we increase our client load and the size of the clients (moving from the 3-10 seat to the 50-1000 seat clients) we are implementing more advanced products for a variety of tasks. We are currently looking at patch management solutions. Our current paradigm is a mix of WSUS and manual intervention, but it's not enough, obviously. I haven't used a centralized patch management system for around 5-6 years (used to use early versions of Shavlik) so I haven't been keeping up with the market. We're now looking for something that does 3rd party apps, not just MS stuff, so WSUS is off the table. Our clients are all on MS platforms, though; almost no *nix or Apple. I don't envision a one-size-fits-all product. I expect that we'll want a variety of solutions tailored to the size and complexity of the client. And I have no illusions about the ease of patch management given any product. :-) My boss would love an MSP-style of centrally managed product that can handle all our clients, but my belief is that trying to go that route is much more difficult than doing per-client implementations, especially without dedicated patch management admins. Having said all that, is anyone working with patch management systems that they really like for this space? Also, any you really DON'T like? Thanks! *** Charlie Kaiser charl...@golden-eagle.org Kingman, AZ *** ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin - This message, and any attachments to it, may contain information that is privileged, confidential, and exempt from disclosure under applicable law. If the reader of this message is not the intended recipient, you are notified that any use, dissemination, distribution, copying, or communication of this message is strictly prohibited. If you have received this message in error, please notify the sender immediately by return e-mail and delete the message and any attachments. Thank you. ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadminimage/jpeg
RE: Patch management recommendations
I'd take a step back to wait and see on Altiris with yesterday's news. http://myitforum.com/myitforumwp/2013/01/16/altiris-to-become-altiris-again- symantec-dumping-it-for-less-than-it-paid/ From: Christopher Bodnar [mailto:christopher_bod...@glic.com] Sent: Thursday, January 17, 2013 8:40 AM To: NT System Admin Issues Subject: Re: Patch management recommendations Kace Altiris SCCM with SCUP One of these should fit most of your clients needs. Christopher Bodnar Enterprise Architect I, Corporate Office of Technology:Enterprise Architecture and Engineering Services Tel 610-807-6459 3900 Burgess Place, Bethlehem, PA 18017 mailto: christopher_bod...@glic.com cid:image001.jpg@01CDF492.11CAAC30 The Guardian Life Insurance Company of America http://www.guardianlife.com/ www.guardianlife.com From:Charlie Kaiser charl...@golden-eagle.org To:NT System Admin Issues ntsysadmin@lyris.sunbelt-software.com Date:01/16/2013 06:04 PM Subject:Patch management recommendations _ I work for a consulting firm that manages a variety of SMB clients. As we increase our client load and the size of the clients (moving from the 3-10 seat to the 50-1000 seat clients) we are implementing more advanced products for a variety of tasks. We are currently looking at patch management solutions. Our current paradigm is a mix of WSUS and manual intervention, but it's not enough, obviously. I haven't used a centralized patch management system for around 5-6 years (used to use early versions of Shavlik) so I haven't been keeping up with the market. We're now looking for something that does 3rd party apps, not just MS stuff, so WSUS is off the table. Our clients are all on MS platforms, though; almost no *nix or Apple. I don't envision a one-size-fits-all product. I expect that we'll want a variety of solutions tailored to the size and complexity of the client. And I have no illusions about the ease of patch management given any product. :-) My boss would love an MSP-style of centrally managed product that can handle all our clients, but my belief is that trying to go that route is much more difficult than doing per-client implementations, especially without dedicated patch management admins. Having said all that, is anyone working with patch management systems that they really like for this space? Also, any you really DON'T like? Thanks! *** Charlie Kaiser charl...@golden-eagle.org Kingman, AZ *** ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin - This message, and any attachments to it, may contain information that is privileged, confidential, and exempt from disclosure under applicable law. If the reader of this message is not the intended recipient, you are notified that any use, dissemination, distribution, copying, or communication of this message is strictly prohibited. If you have received this message in error, please notify the sender immediately by return e-mail and delete the message and any attachments. Thank you. ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadminimage001.jpg
Re: Patch management recommendations
We've had good experience with Continuum, a MSP platform, albeit so far for clients smaller than 50 seats. On 1/17/2013 8:39 AM, Christopher Bodnar wrote: Kace Altiris SCCM with SCUP One of these should fit most of your clients needs. Christopher Bodnar Enterprise Architect I, Corporate Office of Technology:Enterprise Architecture and Engineering Services Tel 610-807-6459 3900 Burgess Place, Bethlehem, PA 18017 christopher_bod...@glic.com The Guardian Life Insurance Company of America www.guardianlife.com From: "Charlie Kaiser" charl...@golden-eagle.org To: "NT System Admin Issues" ntsysadmin@lyris.sunbelt-software.com Date: 01/16/2013 06:04 PM Subject: Patch management recommendations I work for a consulting firm that manages a variety of SMB clients. As we increase our client load and the size of the clients (moving from the 3-10 seat to the 50-1000 seat clients) we are implementing more advanced products for a variety of tasks. We are currently looking at patch management solutions. Our current paradigm is a mix of WSUS and manual intervention, but it's not enough, obviously. I haven't used a centralized patch management system for around 5-6 years (used to use early versions of Shavlik) so I haven't been keeping up with the market. We're now looking for something that does 3rd party apps, not just MS stuff, so WSUS is off the table. Our clients are all on MS platforms, though; almost no *nix or Apple. I don't envision a one-size-fits-all product. I expect that we'll want a variety of solutions tailored to the size and complexity of the client. And I have no illusions about the "ease" of patch management given any product. :-) My boss would love an MSP-style of centrally managed product that can handle all our clients, but my belief is that trying to go that route is much more difficult than doing per-client implementations, especially without dedicated patch management admins. Having said all that, is anyone working with patch management systems that they really like for this space? Also, any you really DON'T like? Thanks! *** Charlie Kaiser charl...@golden-eagle.org Kingman, AZ *** ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin - This message, and any attachments to it, may contain information that is privileged, confidential, and exempt from disclosure under applicable law. If the reader of this message is not the intended recipient, you are notified that any use, dissemination, distribution, copying, or communication of this message is strictly prohibited. If you have received this message in error, please notify the sender immediately by return e-mail and delete the message and any attachments. Thank you. ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~
RE: Patch management recommendations
Almost all the Virginia Community colleges, dumped Altiris in favor of KACE. The latest update to Altiris was a disaster for everyone that attempted it. We were not one of the brave colleges to try, but from what I heard, the system requirements were huge, a dual socket, quad core server with 24gig ram was barely adequate to serve 3 to 400 client workstations. Ouch. We currently run both the K1000 and K2000 on a HP/Compaq dl-380 dual socket, quad core with 16gig ram under vmware 5 and it is very responsive. Also two other windows virtuals on the same host. The instructor led training was very good also. From: Rod Trent [mailto:rodtr...@myitforum.com] Sent: Thursday, January 17, 2013 9:08 AM To: NT System Admin Issues Subject: RE: Patch management recommendations I'd take a step back to wait and see on Altiris with yesterday's news. http://myitforum.com/myitforumwp/2013/01/16/altiris-to-become-altiris-again-symantec-dumping-it-for-less-than-it-paid/ From: Christopher Bodnar [mailto:christopher_bod...@glic.com] Sent: Thursday, January 17, 2013 8:40 AM To: NT System Admin Issues Subject: Re: Patch management recommendations Kace Altiris SCCM with SCUP One of these should fit most of your clients needs. Christopher Bodnar Enterprise Architect I, Corporate Office of Technology:Enterprise Architecture and Engineering Services Tel 610-807-6459 3900 Burgess Place, Bethlehem, PA 18017 christopher_bod...@glic.commailto: [cid:image001.jpg@01CDF492.11CAAC30] The Guardian Life Insurance Company of America www.guardianlife.comhttp://www.guardianlife.com/ From:Charlie Kaiser charl...@golden-eagle.orgmailto:charl...@golden-eagle.org To:NT System Admin Issues ntsysadmin@lyris.sunbelt-software.commailto:ntsysadmin@lyris.sunbelt-software.com Date:01/16/2013 06:04 PM Subject:Patch management recommendations I work for a consulting firm that manages a variety of SMB clients. As we increase our client load and the size of the clients (moving from the 3-10 seat to the 50-1000 seat clients) we are implementing more advanced products for a variety of tasks. We are currently looking at patch management solutions. Our current paradigm is a mix of WSUS and manual intervention, but it's not enough, obviously. I haven't used a centralized patch management system for around 5-6 years (used to use early versions of Shavlik) so I haven't been keeping up with the market. We're now looking for something that does 3rd party apps, not just MS stuff, so WSUS is off the table. Our clients are all on MS platforms, though; almost no *nix or Apple. I don't envision a one-size-fits-all product. I expect that we'll want a variety of solutions tailored to the size and complexity of the client. And I have no illusions about the ease of patch management given any product. :-) My boss would love an MSP-style of centrally managed product that can handle all our clients, but my belief is that trying to go that route is much more difficult than doing per-client implementations, especially without dedicated patch management admins. Having said all that, is anyone working with patch management systems that they really like for this space? Also, any you really DON'T like? Thanks! *** Charlie Kaiser charl...@golden-eagle.orgmailto:charl...@golden-eagle.org Kingman, AZ *** ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin - This message, and any attachments to it, may contain information that is privileged, confidential, and exempt from disclosure under applicable law. If the reader of this message is not the intended recipient, you are notified that any use, dissemination, distribution, copying, or communication of this message is strictly prohibited. If you have received this message in error, please notify the sender immediately by return e-mail and delete the message and any attachments. Thank you. ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.commailto:listmana
RE: Patch management recommendations
Interesting. I wasn't aware of that. We had MS come in and give us a presentation on SCCM 2012, and then had Symantec come in for Altiris. Got to say I was impressed by Altiris. Christopher Bodnar Enterprise Architect I, Corporate Office of Technology:Enterprise Architecture and Engineering Services Tel 610-807-6459 3900 Burgess Place, Bethlehem, PA 18017 christopher_bod...@glic.com The Guardian Life Insurance Company of America www.guardianlife.com From: Rod Trent rodtr...@myitforum.com To: NT System Admin Issues ntsysadmin@lyris.sunbelt-software.com Date: 01/17/2013 09:09 AM Subject:RE: Patch management recommendations I’d take a step back to wait and see on Altiris with yesterday’s news. http://myitforum.com/myitforumwp/2013/01/16/altiris-to-become-altiris-again-symantec-dumping-it-for-less-than-it-paid/ From: Christopher Bodnar [mailto:christopher_bod...@glic.com] Sent: Thursday, January 17, 2013 8:40 AM To: NT System Admin Issues Subject: Re: Patch management recommendations Kace Altiris SCCM with SCUP One of these should fit most of your clients needs. Christopher Bodnar Enterprise Architect I, Corporate Office of Technology:Enterprise Architecture and Engineering Services Tel 610-807-6459 3900 Burgess Place, Bethlehem, PA 18017 christopher_bod...@glic.com The Guardian Life Insurance Company of America www.guardianlife.com From:Charlie Kaiser charl...@golden-eagle.org To:NT System Admin Issues ntsysadmin@lyris.sunbelt-software.com Date:01/16/2013 06:04 PM Subject:Patch management recommendations I work for a consulting firm that manages a variety of SMB clients. As we increase our client load and the size of the clients (moving from the 3-10 seat to the 50-1000 seat clients) we are implementing more advanced products for a variety of tasks. We are currently looking at patch management solutions. Our current paradigm is a mix of WSUS and manual intervention, but it's not enough, obviously. I haven't used a centralized patch management system for around 5-6 years (used to use early versions of Shavlik) so I haven't been keeping up with the market. We're now looking for something that does 3rd party apps, not just MS stuff, so WSUS is off the table. Our clients are all on MS platforms, though; almost no *nix or Apple. I don't envision a one-size-fits-all product. I expect that we'll want a variety of solutions tailored to the size and complexity of the client. And I have no illusions about the ease of patch management given any product. :-) My boss would love an MSP-style of centrally managed product that can handle all our clients, but my belief is that trying to go that route is much more difficult than doing per-client implementations, especially without dedicated patch management admins. Having said all that, is anyone working with patch management systems that they really like for this space? Also, any you really DON'T like? Thanks! *** Charlie Kaiser charl...@golden-eagle.org Kingman, AZ *** ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin - This message, and any attachments to it, may contain information that is privileged, confidential, and exempt from disclosure under applicable law. If the reader of this message is not the intended recipient, you are notified that any use, dissemination, distribution, copying, or communication of this message is strictly prohibited. If you have received this message in error, please notify the sender immediately by return e-mail and delete the message and any attachments. Thank you. ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin image/jpegimage/jpeg
Re: Patch management recommendations
...and there's ManageEngine's DesktopCentral which does patch mgt, asset mgt, file program distribution - pretty inexpensive. ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin
RE: Patch management recommendations
We run Kace as a Virtual appliance (K1000) with no tweaks and it handles our approx. 250 computers with no issue. John W. Cook Network Operations Manager Partnership For Strong Families 5950 NW 1st Place Gainesville, Fl 32607 Office (352) 244-1610 Cell (352) 215-6944 MCSE, MCP+I, MCTS, CompTIA A+, N+, VSP4, VTSP4 From: Glen Johnson [mailto:gjohn...@vhcc.edu] Sent: Thursday, January 17, 2013 9:36 AM To: NT System Admin Issues Subject: RE: Patch management recommendations Almost all the Virginia Community colleges, dumped Altiris in favor of KACE. The latest update to Altiris was a disaster for everyone that attempted it. We were not one of the brave colleges to try, but from what I heard, the system requirements were huge, a dual socket, quad core server with 24gig ram was barely adequate to serve 3 to 400 client workstations. Ouch. We currently run both the K1000 and K2000 on a HP/Compaq dl-380 dual socket, quad core with 16gig ram under vmware 5 and it is very responsive. Also two other windows virtuals on the same host. The instructor led training was very good also. From: Rod Trent [mailto:rodtr...@myitforum.com] Sent: Thursday, January 17, 2013 9:08 AM To: NT System Admin Issues Subject: RE: Patch management recommendations I'd take a step back to wait and see on Altiris with yesterday's news. http://myitforum.com/myitforumwp/2013/01/16/altiris-to-become-altiris-again-symantec-dumping-it-for-less-than-it-paid/ From: Christopher Bodnar [mailto:christopher_bod...@glic.com] Sent: Thursday, January 17, 2013 8:40 AM To: NT System Admin Issues Subject: Re: Patch management recommendations Kace Altiris SCCM with SCUP One of these should fit most of your clients needs. Christopher Bodnar Enterprise Architect I, Corporate Office of Technology:Enterprise Architecture and Engineering Services Tel 610-807-6459 3900 Burgess Place, Bethlehem, PA 18017 christopher_bod...@glic.commailto: [cid:image001.jpg@01CDF492.11CAAC30] The Guardian Life Insurance Company of America www.guardianlife.comhttp://www.guardianlife.com/ From:Charlie Kaiser charl...@golden-eagle.orgmailto:charl...@golden-eagle.org To:NT System Admin Issues ntsysadmin@lyris.sunbelt-software.commailto:ntsysadmin@lyris.sunbelt-software.com Date:01/16/2013 06:04 PM Subject:Patch management recommendations I work for a consulting firm that manages a variety of SMB clients. As we increase our client load and the size of the clients (moving from the 3-10 seat to the 50-1000 seat clients) we are implementing more advanced products for a variety of tasks. We are currently looking at patch management solutions. Our current paradigm is a mix of WSUS and manual intervention, but it's not enough, obviously. I haven't used a centralized patch management system for around 5-6 years (used to use early versions of Shavlik) so I haven't been keeping up with the market. We're now looking for something that does 3rd party apps, not just MS stuff, so WSUS is off the table. Our clients are all on MS platforms, though; almost no *nix or Apple. I don't envision a one-size-fits-all product. I expect that we'll want a variety of solutions tailored to the size and complexity of the client. And I have no illusions about the ease of patch management given any product. :-) My boss would love an MSP-style of centrally managed product that can handle all our clients, but my belief is that trying to go that route is much more difficult than doing per-client implementations, especially without dedicated patch management admins. Having said all that, is anyone working with patch management systems that they really like for this space? Also, any you really DON'T like? Thanks! *** Charlie Kaiser charl...@golden-eagle.orgmailto:charl...@golden-eagle.org Kingman, AZ *** ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin - This message, and any attachments to it, may contain information that is privileged, confidential, and exempt from disclosure under applicable law. If the reader of this message is not the intended recipient, you are notified that any use, dissemination, distribution, copying, or communication of this message is strictly prohibited. If you have received this message in error, please notify the sender immediately by return e-mail and delete the message and any attachments. Thank you. ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt
RE: Patch management recommendations
I’m curious. What impressed you about Altiris? I ask because, from what I’ve heard, they are good presenters and good salespeople, but the product itself has really tanked since the Symantec acquisition. From: Christopher Bodnar [mailto:christopher_bod...@glic.com] Sent: Thursday, January 17, 2013 9:37 AM To: NT System Admin Issues Subject: RE: Patch management recommendations Interesting. I wasn't aware of that. We had MS come in and give us a presentation on SCCM 2012, and then had Symantec come in for Altiris. Got to say I was impressed by Altiris. Christopher Bodnar Enterprise Architect I, Corporate Office of Technology:Enterprise Architecture and Engineering Services Tel 610-807-6459 3900 Burgess Place, Bethlehem, PA 18017 mailto: christopher_bod...@glic.com The Guardian Life Insurance Company of America http://www.guardianlife.com/ www.guardianlife.com From:Rod Trent rodtr...@myitforum.com To:NT System Admin Issues ntsysadmin@lyris.sunbelt-software.com Date:01/17/2013 09:09 AM Subject:RE: Patch management recommendations _ I’d take a step back to wait and see on Altiris with yesterday’s news. http://myitforum.com/myitforumwp/2013/01/16/altiris-to-become-altiris-again-symantec-dumping-it-for-less-than-it-paid/ http://myitforum.com/myitforumwp/2013/01/16/altiris-to-become-altiris-again-symantec-dumping-it-for-less-than-it-paid/ From: Christopher Bodnar [ mailto:christopher_bod...@glic.com mailto:christopher_bod...@glic.com] Sent: Thursday, January 17, 2013 8:40 AM To: NT System Admin Issues Subject: Re: Patch management recommendations Kace Altiris SCCM with SCUP One of these should fit most of your clients needs. Christopher Bodnar Enterprise Architect I, Corporate Office of Technology:Enterprise Architecture and Engineering Services Tel 610-807-6459 3900 Burgess Place, Bethlehem, PA 18017 mailto: christopher_bod...@glic.com cid:image001.jpg@01CDF492.11CAAC30 The Guardian Life Insurance Company of America http://www.guardianlife.com/ www.guardianlife.com From:Charlie Kaiser mailto:charl...@golden-eagle.org charl...@golden-eagle.org To:NT System Admin Issues mailto:ntsysadmin@lyris.sunbelt-software.com ntsysadmin@lyris.sunbelt-software.com Date:01/16/2013 06:04 PM Subject:Patch management recommendations _ I work for a consulting firm that manages a variety of SMB clients. As we increase our client load and the size of the clients (moving from the 3-10 seat to the 50-1000 seat clients) we are implementing more advanced products for a variety of tasks. We are currently looking at patch management solutions. Our current paradigm is a mix of WSUS and manual intervention, but it's not enough, obviously. I haven't used a centralized patch management system for around 5-6 years (used to use early versions of Shavlik) so I haven't been keeping up with the market. We're now looking for something that does 3rd party apps, not just MS stuff, so WSUS is off the table. Our clients are all on MS platforms, though; almost no *nix or Apple. I don't envision a one-size-fits-all product. I expect that we'll want a variety of solutions tailored to the size and complexity of the client. And I have no illusions about the ease of patch management given any product. :-) My boss would love an MSP-style of centrally managed product that can handle all our clients, but my belief is that trying to go that route is much more difficult than doing per-client implementations, especially without dedicated patch management admins. Having said all that, is anyone working with patch management systems that they really like for this space? Also, any you really DON'T like? Thanks! *** Charlie Kaiser mailto:charl...@golden-eagle.org charl...@golden-eagle.org Kingman, AZ *** ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ http://lyris.sunbelt-software.com/read/my_forums/ or send an email to mailto:listmana...@lyris.sunbeltsoftware.com listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin - This message, and any attachments to it, may contain information that is privileged, confidential, and exempt from disclosure under applicable law. If the reader of this message is not the intended recipient, you are notified that any use, dissemination, distribution, copying, or communication of this message is strictly prohibited. If you have received this message in error, please notify the sender immediately by return e-mail and delete the message and any attachments. Thank you
RE: Patch management recommendations
In Kingman? Wow. Anyway, AZ Dept of Corrections tries to use SCCM. I'd say it's been a failure for many reasons. I work for basically an ADC subnet, and I try to manually touch every machine (about 200) on a regular basis. Obviously that's not practical for everyone. -Original Message- From: Charlie Kaiser [mailto:charl...@golden-eagle.org] Sent: Wednesday, January 16, 2013 4:03 PM To: NT System Admin Issues Subject: Patch management recommendations I work for a consulting firm that manages a variety of SMB clients. As we increase our client load and the size of the clients (moving from the 3-10 seat to the 50-1000 seat clients) we are implementing more advanced products for a variety of tasks. We are currently looking at patch management solutions. Our current paradigm is a mix of WSUS and manual intervention, but it's not enough, obviously. I haven't used a centralized patch management system for around 5-6 years (used to use early versions of Shavlik) so I haven't been keeping up with the market. We're now looking for something that does 3rd party apps, not just MS stuff, so WSUS is off the table. Our clients are all on MS platforms, though; almost no *nix or Apple. I don't envision a one-size-fits-all product. I expect that we'll want a variety of solutions tailored to the size and complexity of the client. And I have no illusions about the ease of patch management given any product. :-) My boss would love an MSP-style of centrally managed product that can handle all our clients, but my belief is that trying to go that route is much more difficult than doing per-client implementations, especially without dedicated patch management admins. Having said all that, is anyone working with patch management systems that they really like for this space? Also, any you really DON'T like? Thanks! *** Charlie Kaiser charl...@golden-eagle.org Kingman, AZ *** ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin
RE: Patch management recommendations
Fixed that for you... -Original Message- From: Ray [mailto:rz...@qwest.net] Sent: Thursday, January 17, 2013 9:53 AM To: NT System Admin Issues Subject: RE: Patch management recommendations In Kingman? Wow. Anyway, AZ Dept of Corrections tries to use SCCM. I'd say it's been a failure for many reasons. I work for basically an ADC subnet, and I try to manually touch every machine (about 200) on a regular basis. Obviously that's not practical for everyone anyone. -Original Message- From: Charlie Kaiser [ mailto:charl...@golden-eagle.org mailto:charl...@golden-eagle.org] Sent: Wednesday, January 16, 2013 4:03 PM To: NT System Admin Issues Subject: Patch management recommendations I work for a consulting firm that manages a variety of SMB clients. As we increase our client load and the size of the clients (moving from the 3-10 seat to the 50-1000 seat clients) we are implementing more advanced products for a variety of tasks. We are currently looking at patch management solutions. Our current paradigm is a mix of WSUS and manual intervention, but it's not enough, obviously. I haven't used a centralized patch management system for around 5-6 years (used to use early versions of Shavlik) so I haven't been keeping up with the market. We're now looking for something that does 3rd party apps, not just MS stuff, so WSUS is off the table. Our clients are all on MS platforms, though; almost no *nix or Apple. I don't envision a one-size-fits-all product. I expect that we'll want a variety of solutions tailored to the size and complexity of the client. And I have no illusions about the ease of patch management given any product. :-) My boss would love an MSP-style of centrally managed product that can handle all our clients, but my belief is that trying to go that route is much more difficult than doing per-client implementations, especially without dedicated patch management admins. Having said all that, is anyone working with patch management systems that they really like for this space? Also, any you really DON'T like? Thanks! *** Charlie Kaiser mailto:charl...@golden-eagle.org charl...@golden-eagle.org Kingman, AZ *** ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ http://lyris.sunbelt-software.com/read/my_forums/ or send an email to mailto:listmana...@lyris.sunbeltsoftware.com listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ http://lyris.sunbelt-software.com/read/my_forums/ or send an email to mailto:listmana...@lyris.sunbeltsoftware.com listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin
RE: Patch management recommendations
We didn't bring it in house for a POC, so I can't say from experience, just what we saw at the presentation. We are an SCCM 2007 shop. Some of the things that stood out about the Altiris product: Less infrastructure required Significantly easier and integrated reporting Direct views into virtual infrastructure Built in patching for 3rd party software (Adobe, Java, etc...) Less issues with client agent health Christopher Bodnar Enterprise Architect I, Corporate Office of Technology:Enterprise Architecture and Engineering Services Tel 610-807-6459 3900 Burgess Place, Bethlehem, PA 18017 christopher_bod...@glic.com The Guardian Life Insurance Company of America www.guardianlife.com From: Rod Trent rodtr...@myitforum.com To: NT System Admin Issues ntsysadmin@lyris.sunbelt-software.com Date: 01/17/2013 09:54 AM Subject:RE: Patch management recommendations I’m curious. What impressed you about Altiris? I ask because, from what I’ve heard, they are good presenters and good salespeople, but the product itself has really tanked since the Symantec acquisition. From: Christopher Bodnar [mailto:christopher_bod...@glic.com] Sent: Thursday, January 17, 2013 9:37 AM To: NT System Admin Issues Subject: RE: Patch management recommendations Interesting. I wasn't aware of that. We had MS come in and give us a presentation on SCCM 2012, and then had Symantec come in for Altiris. Got to say I was impressed by Altiris. Christopher Bodnar Enterprise Architect I, Corporate Office of Technology:Enterprise Architecture and Engineering Services Tel 610-807-6459 3900 Burgess Place, Bethlehem, PA 18017 christopher_bod...@glic.com The Guardian Life Insurance Company of America www.guardianlife.com From:Rod Trent rodtr...@myitforum.com To:NT System Admin Issues ntsysadmin@lyris.sunbelt-software.com Date:01/17/2013 09:09 AM Subject:RE: Patch management recommendations I’d take a step back to wait and see on Altiris with yesterday’s news. http://myitforum.com/myitforumwp/2013/01/16/altiris-to-become-altiris-again-symantec-dumping-it-for-less-than-it-paid/ From: Christopher Bodnar [mailto:christopher_bod...@glic.com] Sent: Thursday, January 17, 2013 8:40 AM To: NT System Admin Issues Subject: Re: Patch management recommendations Kace Altiris SCCM with SCUP One of these should fit most of your clients needs. Christopher Bodnar Enterprise Architect I, Corporate Office of Technology:Enterprise Architecture and Engineering Services Tel 610-807-6459 3900 Burgess Place, Bethlehem, PA 18017 christopher_bod...@glic.com The Guardian Life Insurance Company of America www.guardianlife.com From:Charlie Kaiser charl...@golden-eagle.org To:NT System Admin Issues ntsysadmin@lyris.sunbelt-software.com Date:01/16/2013 06:04 PM Subject:Patch management recommendations I work for a consulting firm that manages a variety of SMB clients. As we increase our client load and the size of the clients (moving from the 3-10 seat to the 50-1000 seat clients) we are implementing more advanced products for a variety of tasks. We are currently looking at patch management solutions. Our current paradigm is a mix of WSUS and manual intervention, but it's not enough, obviously. I haven't used a centralized patch management system for around 5-6 years (used to use early versions of Shavlik) so I haven't been keeping up with the market. We're now looking for something that does 3rd party apps, not just MS stuff, so WSUS is off the table. Our clients are all on MS platforms, though; almost no *nix or Apple. I don't envision a one-size-fits-all product. I expect that we'll want a variety of solutions tailored to the size and complexity of the client. And I have no illusions about the ease of patch management given any product. :-) My boss would love an MSP-style of centrally managed product that can handle all our clients, but my belief is that trying to go that route is much more difficult than doing per-client implementations, especially without dedicated patch management admins. Having said all that, is anyone working with patch management systems that they really like for this space? Also, any you really DON'T like? Thanks! *** Charlie Kaiser charl...@golden-eagle.org Kingman, AZ *** ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin - This message, and any attachments to it, may contain information that is privileged, confidential, and exempt from disclosure under applicable law. If the reader of this message
RE: Patch management recommendations
Did they approach it that way because you are a 2007 shop? Or, did they take 2012 into consideration for their demo? I say that because, 2012 with SP1 allows less infrastructure, views into the virtual infrastructure, patching for 3rd party apps, and client health (for Windows, Mac, Linux, and Unix) has been greatly improved. The reporting thing, I can agree with. Looks to me like their competitor battle cards need to be updated. From: Christopher Bodnar [mailto:christopher_bod...@glic.com] Sent: Thursday, January 17, 2013 10:52 AM To: NT System Admin Issues Subject: RE: Patch management recommendations We didn't bring it in house for a POC, so I can't say from experience, just what we saw at the presentation. We are an SCCM 2007 shop. Some of the things that stood out about the Altiris product: Less infrastructure required Significantly easier and integrated reporting Direct views into virtual infrastructure Built in patching for 3rd party software (Adobe, Java, etc...) Less issues with client agent health Christopher Bodnar Enterprise Architect I, Corporate Office of Technology:Enterprise Architecture and Engineering Services Tel 610-807-6459 3900 Burgess Place, Bethlehem, PA 18017 mailto: christopher_bod...@glic.com The Guardian Life Insurance Company of America http://www.guardianlife.com/ www.guardianlife.com From:Rod Trent rodtr...@myitforum.com To:NT System Admin Issues ntsysadmin@lyris.sunbelt-software.com Date:01/17/2013 09:54 AM Subject:RE: Patch management recommendations _ I’m curious. What impressed you about Altiris? I ask because, from what I’ve heard, they are good presenters and good salespeople, but the product itself has really tanked since the Symantec acquisition. From: Christopher Bodnar [ mailto:christopher_bod...@glic.com mailto:christopher_bod...@glic.com] Sent: Thursday, January 17, 2013 9:37 AM To: NT System Admin Issues Subject: RE: Patch management recommendations Interesting. I wasn't aware of that. We had MS come in and give us a presentation on SCCM 2012, and then had Symantec come in for Altiris. Got to say I was impressed by Altiris. Christopher Bodnar Enterprise Architect I, Corporate Office of Technology:Enterprise Architecture and Engineering Services Tel 610-807-6459 3900 Burgess Place, Bethlehem, PA 18017 mailto: christopher_bod...@glic.com The Guardian Life Insurance Company of America http://www.guardianlife.com/ www.guardianlife.com From:Rod Trent rodtr...@myitforum.com To:NT System Admin Issues ntsysadmin@lyris.sunbelt-software.com Date:01/17/2013 09:09 AM Subject:RE: Patch management recommendations _ I’d take a step back to wait and see on Altiris with yesterday’s news. http://myitforum.com/myitforumwp/2013/01/16/altiris-to-become-altiris-again-symantec-dumping-it-for-less-than-it-paid/ http://myitforum.com/myitforumwp/2013/01/16/altiris-to-become-altiris-again-symantec-dumping-it-for-less-than-it-paid/ From: Christopher Bodnar [ mailto:christopher_bod...@glic.com mailto:christopher_bod...@glic.com] Sent: Thursday, January 17, 2013 8:40 AM To: NT System Admin Issues Subject: Re: Patch management recommendations Kace Altiris SCCM with SCUP One of these should fit most of your clients needs. Christopher Bodnar Enterprise Architect I, Corporate Office of Technology:Enterprise Architecture and Engineering Services Tel 610-807-6459 3900 Burgess Place, Bethlehem, PA 18017 mailto: christopher_bod...@glic.com cid:image001.jpg@01CDF492.11CAAC30 The Guardian Life Insurance Company of America http://www.guardianlife.com/ www.guardianlife.com From:Charlie Kaiser mailto:charl...@golden-eagle.org charl...@golden-eagle.org To:NT System Admin Issues mailto:ntsysadmin@lyris.sunbelt-software.com ntsysadmin@lyris.sunbelt-software.com Date:01/16/2013 06:04 PM Subject:Patch management recommendations _ I work for a consulting firm that manages a variety of SMB clients. As we increase our client load and the size of the clients (moving from the 3-10 seat to the 50-1000 seat clients) we are implementing more advanced products for a variety of tasks. We are currently looking at patch management solutions. Our current paradigm is a mix of WSUS and manual intervention, but it's not enough, obviously. I haven't used a centralized patch management system for around 5-6 years (used to use early versions of Shavlik) so I haven't been keeping up with the market. We're now looking for something that does 3rd party apps, not just MS stuff, so WSUS is off the table. Our clients are all on MS platforms, though; almost no *nix or Apple. I don't envision a one-size-fits-all product. I expect that we'll want a variety of solutions tailored to the size
RE: Patch management recommendations
Completely false as I'm doing it now and did it in my previous 2 jobs. If I had to wait for my domain admins to finally get it to work right we'd have been several hundred patches behind. The additional advantage, since I'm not in a nice pristine homogenous environment, is a hands on review of what's on the PC, do some maintenance, etc. From: Rod Trent [mailto:rodtr...@myitforum.com] Sent: Thursday, January 17, 2013 8:21 AM To: NT System Admin Issues Subject: RE: Patch management recommendations Fixed that for you... -Original Message- From: Ray [mailto:rz...@qwest.net] Sent: Thursday, January 17, 2013 9:53 AM To: NT System Admin Issues Subject: RE: Patch management recommendations In Kingman? Wow. Anyway, AZ Dept of Corrections tries to use SCCM. I'd say it's been a failure for many reasons. I work for basically an ADC subnet, and I try to manually touch every machine (about 200) on a regular basis. Obviously that's not practical for everyone anyone. -Original Message- From: Charlie Kaiser [ mailto:charl...@golden-eagle.org mailto:charl...@golden-eagle.org] Sent: Wednesday, January 16, 2013 4:03 PM To: NT System Admin Issues Subject: Patch management recommendations I work for a consulting firm that manages a variety of SMB clients. As we increase our client load and the size of the clients (moving from the 3-10 seat to the 50-1000 seat clients) we are implementing more advanced products for a variety of tasks. We are currently looking at patch management solutions. Our current paradigm is a mix of WSUS and manual intervention, but it's not enough, obviously. I haven't used a centralized patch management system for around 5-6 years (used to use early versions of Shavlik) so I haven't been keeping up with the market. We're now looking for something that does 3rd party apps, not just MS stuff, so WSUS is off the table. Our clients are all on MS platforms, though; almost no *nix or Apple. I don't envision a one-size-fits-all product. I expect that we'll want a variety of solutions tailored to the size and complexity of the client. And I have no illusions about the ease of patch management given any product. :-) My boss would love an MSP-style of centrally managed product that can handle all our clients, but my belief is that trying to go that route is much more difficult than doing per-client implementations, especially without dedicated patch management admins. Having said all that, is anyone working with patch management systems that they really like for this space? Also, any you really DON'T like? Thanks! *** Charlie Kaiser mailto:charl...@golden-eagle.org charl...@golden-eagle.org Kingman, AZ *** ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ http://lyris.sunbelt-software.com/read/my_forums/ or send an email to mailto:listmana...@lyris.sunbeltsoftware.com listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ http://lyris.sunbelt-software.com/read/my_forums/ or send an email to mailto:listmana...@lyris.sunbeltsoftware.com listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin
Re: Patch management recommendations
Was that a Symantec-inspired upgrade? *ASB **http://XeeMe.com/AndrewBaker* http://xeeme.com/AndrewBaker* **Providing Virtual CIO Services (IT Operations Information Security) for the SMB market…*** On Thu, Jan 17, 2013 at 9:35 AM, Glen Johnson gjohn...@vhcc.edu wrote: Almost all the Virginia Community colleges, dumped Altiris in favor of KACE. The latest update to Altiris was a disaster for everyone that attempted it. We were not one of the brave colleges to try, but from what I heard, the system requirements were huge, a dual socket, quad core server with 24gig ram was barely adequate to serve 3 to 400 client workstations. Ouch. We currently run both the K1000 and K2000 on a HP/Compaq dl-380 dual socket, quad core with 16gig ram under vmware 5 and it is very responsive. Also two other windows virtuals on the same host. The instructor led training was very good also. ** ** *From:* Rod Trent [mailto:rodtr...@myitforum.com] *Sent:* Thursday, January 17, 2013 9:08 AM *To:* NT System Admin Issues *Subject:* RE: Patch management recommendations ** ** I’d take a step back to wait and see on Altiris with yesterday’s news. *** * ** ** http://myitforum.com/myitforumwp/2013/01/16/altiris-to-become-altiris-again-symantec-dumping-it-for-less-than-it-paid/ ** ** *From:* Christopher Bodnar [mailto:christopher_bod...@glic.comchristopher_bod...@glic.com] *Sent:* Thursday, January 17, 2013 8:40 AM *To:* NT System Admin Issues *Subject:* Re: Patch management recommendations ** ** Kace Altiris SCCM with SCUP One of these should fit most of your clients needs. *Christopher Bodnar* Enterprise Architect I, Corporate Office of Technology:Enterprise Architecture and Engineering Services Tel 610-807-6459 3900 Burgess Place, Bethlehem, PA 18017 christopher_bod...@glic.com [image: cid:image001.jpg@01CDF492.11CAAC30] * The Guardian Life Insurance Company of America* * *www.guardianlife.com From:Charlie Kaiser charl...@golden-eagle.org To:NT System Admin Issues ntsysadmin@lyris.sunbelt-software.com Date:01/16/2013 06:04 PM Subject:Patch management recommendations -- I work for a consulting firm that manages a variety of SMB clients. As we increase our client load and the size of the clients (moving from the 3-10 seat to the 50-1000 seat clients) we are implementing more advanced products for a variety of tasks. We are currently looking at patch management solutions. Our current paradigm is a mix of WSUS and manual intervention, but it's not enough, obviously. I haven't used a centralized patch management system for around 5-6 years (used to use early versions of Shavlik) so I haven't been keeping up with the market. We're now looking for something that does 3rd party apps, not just MS stuff, so WSUS is off the table. Our clients are all on MS platforms, though; almost no *nix or Apple. I don't envision a one-size-fits-all product. I expect that we'll want a variety of solutions tailored to the size and complexity of the client. And I have no illusions about the ease of patch management given any product. :-) My boss would love an MSP-style of centrally managed product that can handle all our clients, but my belief is that trying to go that route is much more difficult than doing per-client implementations, especially without dedicated patch management admins. Having said all that, is anyone working with patch management systems that they really like for this space? Also, any you really DON'T like? Thanks! *** Charlie Kaiser charl...@golden-eagle.org Kingman, AZ *** *ASB* *http://XeeMe.com/AndrewBaker* http://xeeme.com/AndrewBaker** *Providing Expert Technology Consulting Services for the SMB market…* ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadminimage001.jpg
RE: Patch management recommendations
Well, there's a larger problem then that needs to be addressed. These things should be automated. Patching using ConfigMgr is not that tough, and getting it to work right is not that tough, either. Maybe offer your help to get it working. It'll save you a lot of time and ensure that your endpoints are secure today, instead of having to wait for you to get around to each PC. All of those maintenance tasks and PC reviews can be automated, too. From: Ray [mailto:rz...@qwest.net] Sent: Thursday, January 17, 2013 12:15 PM To: NT System Admin Issues Subject: RE: Patch management recommendations Completely false as I'm doing it now and did it in my previous 2 jobs. If I had to wait for my domain admins to finally get it to work right we'd have been several hundred patches behind. The additional advantage, since I'm not in a nice pristine homogenous environment, is a hands on review of what's on the PC, do some maintenance, etc. From: Rod Trent [mailto:rodtr...@myitforum.com] Sent: Thursday, January 17, 2013 8:21 AM To: NT System Admin Issues Subject: RE: Patch management recommendations Fixed that for you... -Original Message- From: Ray [mailto:rz...@qwest.net] Sent: Thursday, January 17, 2013 9:53 AM To: NT System Admin Issues Subject: RE: Patch management recommendations In Kingman? Wow. Anyway, AZ Dept of Corrections tries to use SCCM. I'd say it's been a failure for many reasons. I work for basically an ADC subnet, and I try to manually touch every machine (about 200) on a regular basis. Obviously that's not practical for everyone anyone. -Original Message- From: Charlie Kaiser [ mailto:charl...@golden-eagle.org mailto:charl...@golden-eagle.org] Sent: Wednesday, January 16, 2013 4:03 PM To: NT System Admin Issues Subject: Patch management recommendations I work for a consulting firm that manages a variety of SMB clients. As we increase our client load and the size of the clients (moving from the 3-10 seat to the 50-1000 seat clients) we are implementing more advanced products for a variety of tasks. We are currently looking at patch management solutions. Our current paradigm is a mix of WSUS and manual intervention, but it's not enough, obviously. I haven't used a centralized patch management system for around 5-6 years (used to use early versions of Shavlik) so I haven't been keeping up with the market. We're now looking for something that does 3rd party apps, not just MS stuff, so WSUS is off the table. Our clients are all on MS platforms, though; almost no *nix or Apple. I don't envision a one-size-fits-all product. I expect that we'll want a variety of solutions tailored to the size and complexity of the client. And I have no illusions about the ease of patch management given any product. :-) My boss would love an MSP-style of centrally managed product that can handle all our clients, but my belief is that trying to go that route is much more difficult than doing per-client implementations, especially without dedicated patch management admins. Having said all that, is anyone working with patch management systems that they really like for this space? Also, any you really DON'T like? Thanks! *** Charlie Kaiser mailto:charl...@golden-eagle.org charl...@golden-eagle.org Kingman, AZ *** ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ http://lyris.sunbelt-software.com/read/my_forums/ or send an email to mailto:listmana...@lyris.sunbeltsoftware.com listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ http://lyris.sunbelt-software.com/read/my_forums/ or send an email to mailto:listmana...@lyris.sunbeltsoftware.com listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body
RE: Patch management recommendations
Everything's remote. Most clients in California, but cost of living is better here... :-) *** Charlie Kaiser charl...@golden-eagle.org Kingman, AZ *** -Original Message- From: Ray [mailto:rz...@qwest.net] Sent: Thursday, January 17, 2013 7:53 AM To: NT System Admin Issues Subject: RE: Patch management recommendations In Kingman? Wow. ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin
RE: Patch management recommendations
Shavlik if not mentioned already Z Edward E. Ziots, CISSP, Security +, Network + Security Engineer Lifespan Organization ezi...@lifespan.org From: joseph palmieri [mailto:jpalm...@yahoo.com] Sent: Wednesday, January 16, 2013 9:58 PM To: NT System Admin Issues Subject: Re: Patch management recommendations look at LANDesk security suite (not cheep) it has all the functionality you need and more...only downside is tech support reps look to close trouble ticket without resolving issue --- On Wed, 1/16/13, Charlie Kaiser charl...@golden-eagle.orgmailto:charl...@golden-eagle.org wrote: From: Charlie Kaiser charl...@golden-eagle.orgmailto:charl...@golden-eagle.org Subject: Patch management recommendations To: NT System Admin Issues ntsysadmin@lyris.sunbelt-software.commailto:ntsysadmin@lyris.sunbelt-software.com Date: Wednesday, January 16, 2013, 6:03 PM I work for a consulting firm that manages a variety of SMB clients. As we increase our client load and the size of the clients (moving from the 3-10 seat to the 50-1000 seat clients) we are implementing more advanced products for a variety of tasks. We are currently looking at patch management solutions. Our current paradigm is a mix of WSUS and manual intervention, but it's not enough, obviously. I haven't used a centralized patch management system for around 5-6 years (used to use early versions of Shavlik) so I haven't been keeping up with the market. We're now looking for something that does 3rd party apps, not just MS stuff, so WSUS is off the table. Our clients are all on MS platforms, though; almost no *nix or Apple. I don't envision a one-size-fits-all product. I expect that we'll want a variety of solutions tailored to the size and complexity of the client. And I have no illusions about the ease of patch management given any product. :-) My boss would love an MSP-style of centrally managed product that can handle all our clients, but my belief is that trying to go that route is much more difficult than doing per-client implementations, especially without dedicated patch management admins. Having said all that, is anyone working with patch management systems that they really like for this space? Also, any you really DON'T like? Thanks! *** Charlie Kaiser charl...@golden-eagle.org/mc/compose?to=charl...@golden-eagle.org Kingman, AZ *** ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com/mc/compose?to=listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin
RE: Patch management recommendations
Most definitely. From: Andrew S. Baker [mailto:asbz...@gmail.com] Sent: Thursday, January 17, 2013 12:19 PM To: NT System Admin Issues Subject: Re: Patch management recommendations Was that a Symantec-inspired upgrade? ASB http://XeeMe.com/AndrewBakerhttp://xeeme.com/AndrewBaker Providing Virtual CIO Services (IT Operations Information Security) for the SMB market... On Thu, Jan 17, 2013 at 9:35 AM, Glen Johnson gjohn...@vhcc.edumailto:gjohn...@vhcc.edu wrote: Almost all the Virginia Community colleges, dumped Altiris in favor of KACE. The latest update to Altiris was a disaster for everyone that attempted it. We were not one of the brave colleges to try, but from what I heard, the system requirements were huge, a dual socket, quad core server with 24gig ram was barely adequate to serve 3 to 400 client workstations. Ouch. We currently run both the K1000 and K2000 on a HP/Compaq dl-380 dual socket, quad core with 16gig ram under vmware 5 and it is very responsive. Also two other windows virtuals on the same host. The instructor led training was very good also. From: Rod Trent [mailto:rodtr...@myitforum.commailto:rodtr...@myitforum.com] Sent: Thursday, January 17, 2013 9:08 AM To: NT System Admin Issues Subject: RE: Patch management recommendations I'd take a step back to wait and see on Altiris with yesterday's news. http://myitforum.com/myitforumwp/2013/01/16/altiris-to-become-altiris-again-symantec-dumping-it-for-less-than-it-paid/ From: Christopher Bodnar [mailto:christopher_bod...@glic.com] Sent: Thursday, January 17, 2013 8:40 AM To: NT System Admin Issues Subject: Re: Patch management recommendations Kace Altiris SCCM with SCUP One of these should fit most of your clients needs. Christopher Bodnar Enterprise Architect I, Corporate Office of Technology:Enterprise Architecture and Engineering Services Tel 610-807-6459tel:610-807-6459 3900 Burgess Place, Bethlehem, PA 18017 christopher_bod...@glic.commailto:christopher_bod...@glic.com [cid:image001.jpg@01CDF492.11CAAC30] The Guardian Life Insurance Company of America www.guardianlife.comhttp://www.guardianlife.com/ From:Charlie Kaiser charl...@golden-eagle.orgmailto:charl...@golden-eagle.org To:NT System Admin Issues ntsysadmin@lyris.sunbelt-software.commailto:ntsysadmin@lyris.sunbelt-software.com Date:01/16/2013 06:04 PM Subject:Patch management recommendations I work for a consulting firm that manages a variety of SMB clients. As we increase our client load and the size of the clients (moving from the 3-10 seat to the 50-1000 seat clients) we are implementing more advanced products for a variety of tasks. We are currently looking at patch management solutions. Our current paradigm is a mix of WSUS and manual intervention, but it's not enough, obviously. I haven't used a centralized patch management system for around 5-6 years (used to use early versions of Shavlik) so I haven't been keeping up with the market. We're now looking for something that does 3rd party apps, not just MS stuff, so WSUS is off the table. Our clients are all on MS platforms, though; almost no *nix or Apple. I don't envision a one-size-fits-all product. I expect that we'll want a variety of solutions tailored to the size and complexity of the client. And I have no illusions about the ease of patch management given any product. :-) My boss would love an MSP-style of centrally managed product that can handle all our clients, but my belief is that trying to go that route is much more difficult than doing per-client implementations, especially without dedicated patch management admins. Having said all that, is anyone working with patch management systems that they really like for this space? Also, any you really DON'T like? Thanks! *** Charlie Kaiser charl...@golden-eagle.orgmailto:charl...@golden-eagle.org Kingman, AZ *** ASB http://XeeMe.com/AndrewBakerhttp://xeeme.com/AndrewBaker Providing Expert Technology Consulting Services for the SMB market... ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmininline: image001.jpg
RE: Patch management recommendations
We specifically told them we would be getting a similar MS presentation. The thing to keep in mind when comparing these 2 products from a high level is that you do get all the SCCM products in one suite now, which is fantastic (Orchestrator, VMM, etc...) but they are still separate applications. So for example you do get VMM for the view into your virtual infrastructure, but it's still a separate management piece. Where as Altiris it's all in one component. Especially for 3rd party patching, that seems very attractive. Christopher Bodnar Enterprise Architect I, Corporate Office of Technology:Enterprise Architecture and Engineering Services Tel 610-807-6459 3900 Burgess Place, Bethlehem, PA 18017 christopher_bod...@glic.com The Guardian Life Insurance Company of America www.guardianlife.com From: Rod Trent rodtr...@myitforum.com To: NT System Admin Issues ntsysadmin@lyris.sunbelt-software.com Date: 01/17/2013 11:26 AM Subject:RE: Patch management recommendations Did they approach it that way because you are a 2007 shop? Or, did they take 2012 into consideration for their demo? I say that because, 2012 with SP1 allows less infrastructure, views into the virtual infrastructure, patching for 3rd party apps, and client health (for Windows, Mac, Linux, and Unix) has been greatly improved. The reporting thing, I can agree with. Looks to me like their competitor battle cards need to be updated. From: Christopher Bodnar [mailto:christopher_bod...@glic.com] Sent: Thursday, January 17, 2013 10:52 AM To: NT System Admin Issues Subject: RE: Patch management recommendations We didn't bring it in house for a POC, so I can't say from experience, just what we saw at the presentation. We are an SCCM 2007 shop. Some of the things that stood out about the Altiris product: Less infrastructure required Significantly easier and integrated reporting Direct views into virtual infrastructure Built in patching for 3rd party software (Adobe, Java, etc...) Less issues with client agent health Christopher Bodnar Enterprise Architect I, Corporate Office of Technology:Enterprise Architecture and Engineering Services Tel 610-807-6459 3900 Burgess Place, Bethlehem, PA 18017 christopher_bod...@glic.com The Guardian Life Insurance Company of America www.guardianlife.com From:Rod Trent rodtr...@myitforum.com To:NT System Admin Issues ntsysadmin@lyris.sunbelt-software.com Date:01/17/2013 09:54 AM Subject:RE: Patch management recommendations I’m curious. What impressed you about Altiris? I ask because, from what I’ve heard, they are good presenters and good salespeople, but the product itself has really tanked since the Symantec acquisition. From: Christopher Bodnar [mailto:christopher_bod...@glic.com] Sent: Thursday, January 17, 2013 9:37 AM To: NT System Admin Issues Subject: RE: Patch management recommendations Interesting. I wasn't aware of that. We had MS come in and give us a presentation on SCCM 2012, and then had Symantec come in for Altiris. Got to say I was impressed by Altiris. Christopher Bodnar Enterprise Architect I, Corporate Office of Technology:Enterprise Architecture and Engineering Services Tel 610-807-6459 3900 Burgess Place, Bethlehem, PA 18017 christopher_bod...@glic.com The Guardian Life Insurance Company of America www.guardianlife.com From:Rod Trent rodtr...@myitforum.com To:NT System Admin Issues ntsysadmin@lyris.sunbelt-software.com Date:01/17/2013 09:09 AM Subject:RE: Patch management recommendations I’d take a step back to wait and see on Altiris with yesterday’s news. http://myitforum.com/myitforumwp/2013/01/16/altiris-to-become-altiris-again-symantec-dumping-it-for-less-than-it-paid/ From: Christopher Bodnar [mailto:christopher_bod...@glic.com] Sent: Thursday, January 17, 2013 8:40 AM To: NT System Admin Issues Subject: Re: Patch management recommendations Kace Altiris SCCM with SCUP One of these should fit most of your clients needs. Christopher Bodnar Enterprise Architect I, Corporate Office of Technology:Enterprise Architecture and Engineering Services Tel 610-807-6459 3900 Burgess Place, Bethlehem, PA 18017 christopher_bod...@glic.com The Guardian Life Insurance Company of America www.guardianlife.com From:Charlie Kaiser charl...@golden-eagle.org To:NT System Admin Issues ntsysadmin@lyris.sunbelt-software.com Date:01/16/2013 06:04 PM Subject:Patch management recommendations I work for a consulting firm that manages a variety of SMB clients. As we increase our client load and the size of the clients (moving from the 3-10 seat to the 50-1000 seat clients) we are implementing more advanced products for a variety of tasks. We are currently looking at patch management solutions. Our current paradigm is a mix of WSUS
RE: Patch management recommendations
Of course there's a larger problem, none of which is within my control. They've been screwing around with SCCM for several years, including using MS (Premier?) consulting. Now they're trying to get 2012 to work. Not worth the effort at this point. From: Rod Trent [mailto:rodtr...@myitforum.com] Sent: Thursday, January 17, 2013 10:29 AM To: NT System Admin Issues Subject: RE: Patch management recommendations Well, there's a larger problem then that needs to be addressed. These things should be automated. Patching using ConfigMgr is not that tough, and getting it to work right is not that tough, either. Maybe offer your help to get it working. It'll save you a lot of time and ensure that your endpoints are secure today, instead of having to wait for you to get around to each PC. All of those maintenance tasks and PC reviews can be automated, too. From: Ray [mailto:rz...@qwest.net] Sent: Thursday, January 17, 2013 12:15 PM To: NT System Admin Issues Subject: RE: Patch management recommendations Completely false as I'm doing it now and did it in my previous 2 jobs. If I had to wait for my domain admins to finally get it to work right we'd have been several hundred patches behind. The additional advantage, since I'm not in a nice pristine homogenous environment, is a hands on review of what's on the PC, do some maintenance, etc. From: Rod Trent [mailto:rodtr...@myitforum.com] Sent: Thursday, January 17, 2013 8:21 AM To: NT System Admin Issues Subject: RE: Patch management recommendations Fixed that for you... -Original Message- From: Ray [mailto:rz...@qwest.net] Sent: Thursday, January 17, 2013 9:53 AM To: NT System Admin Issues Subject: RE: Patch management recommendations In Kingman? Wow. Anyway, AZ Dept of Corrections tries to use SCCM. I'd say it's been a failure for many reasons. I work for basically an ADC subnet, and I try to manually touch every machine (about 200) on a regular basis. Obviously that's not practical for everyone anyone. -Original Message- From: Charlie Kaiser [ mailto:charl...@golden-eagle.org mailto:charl...@golden-eagle.org] Sent: Wednesday, January 16, 2013 4:03 PM To: NT System Admin Issues Subject: Patch management recommendations I work for a consulting firm that manages a variety of SMB clients. As we increase our client load and the size of the clients (moving from the 3-10 seat to the 50-1000 seat clients) we are implementing more advanced products for a variety of tasks. We are currently looking at patch management solutions. Our current paradigm is a mix of WSUS and manual intervention, but it's not enough, obviously. I haven't used a centralized patch management system for around 5-6 years (used to use early versions of Shavlik) so I haven't been keeping up with the market. We're now looking for something that does 3rd party apps, not just MS stuff, so WSUS is off the table. Our clients are all on MS platforms, though; almost no *nix or Apple. I don't envision a one-size-fits-all product. I expect that we'll want a variety of solutions tailored to the size and complexity of the client. And I have no illusions about the ease of patch management given any product. :-) My boss would love an MSP-style of centrally managed product that can handle all our clients, but my belief is that trying to go that route is much more difficult than doing per-client implementations, especially without dedicated patch management admins. Having said all that, is anyone working with patch management systems that they really like for this space? Also, any you really DON'T like? Thanks! *** Charlie Kaiser mailto:charl...@golden-eagle.org charl...@golden-eagle.org Kingman, AZ *** ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ http://lyris.sunbelt-software.com/read/my_forums/ or send an email to mailto:listmana...@lyris.sunbeltsoftware.com listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ http://lyris.sunbelt-software.com/read/my_forums/ or send an email to mailto:listmana...@lyris.sunbeltsoftware.com listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http
RE: Patch management recommendations
There is that. Kind of an odd town though. My kids played sports against Kingman. -Original Message- From: Charlie Kaiser [mailto:charl...@golden-eagle.org] Sent: Thursday, January 17, 2013 10:44 AM To: NT System Admin Issues Subject: RE: Patch management recommendations Everything's remote. Most clients in California, but cost of living is better here... :-) *** Charlie Kaiser charl...@golden-eagle.org Kingman, AZ *** -Original Message- From: Ray [mailto:rz...@qwest.net] Sent: Thursday, January 17, 2013 7:53 AM To: NT System Admin Issues Subject: RE: Patch management recommendations In Kingman? Wow. ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin
RE: Patch management recommendations
Wow.I feel sorry for you, man. Your life could be a lot easier. Frankly, I'm not surprised MS consulting can't get it working. We were having a discussion about this last week. MCS has about as much time to ramp up on the new products as everyone else, a lot of it has to be done on their own. So, unless you get a top consultant or a real go-getter, you're better off doing it on your own. If you do have problems with their org, let me know and I can escalate. I'd just need to know who you're working with. If you're willing to do that, email me offline. From: Ray [mailto:rz...@qwest.net] Sent: Thursday, January 17, 2013 5:35 PM To: NT System Admin Issues Subject: RE: Patch management recommendations Of course there's a larger problem, none of which is within my control. They've been screwing around with SCCM for several years, including using MS (Premier?) consulting. Now they're trying to get 2012 to work. Not worth the effort at this point. From: Rod Trent [mailto:rodtr...@myitforum.com] Sent: Thursday, January 17, 2013 10:29 AM To: NT System Admin Issues Subject: RE: Patch management recommendations Well, there's a larger problem then that needs to be addressed. These things should be automated. Patching using ConfigMgr is not that tough, and getting it to work right is not that tough, either. Maybe offer your help to get it working. It'll save you a lot of time and ensure that your endpoints are secure today, instead of having to wait for you to get around to each PC. All of those maintenance tasks and PC reviews can be automated, too. From: Ray [mailto:rz...@qwest.net] Sent: Thursday, January 17, 2013 12:15 PM To: NT System Admin Issues Subject: RE: Patch management recommendations Completely false as I'm doing it now and did it in my previous 2 jobs. If I had to wait for my domain admins to finally get it to work right we'd have been several hundred patches behind. The additional advantage, since I'm not in a nice pristine homogenous environment, is a hands on review of what's on the PC, do some maintenance, etc. From: Rod Trent [mailto:rodtr...@myitforum.com] Sent: Thursday, January 17, 2013 8:21 AM To: NT System Admin Issues Subject: RE: Patch management recommendations Fixed that for you... -Original Message- From: Ray [mailto:rz...@qwest.net] Sent: Thursday, January 17, 2013 9:53 AM To: NT System Admin Issues Subject: RE: Patch management recommendations In Kingman? Wow. Anyway, AZ Dept of Corrections tries to use SCCM. I'd say it's been a failure for many reasons. I work for basically an ADC subnet, and I try to manually touch every machine (about 200) on a regular basis. Obviously that's not practical for everyone anyone. -Original Message- From: Charlie Kaiser [ mailto:charl...@golden-eagle.org mailto:charl...@golden-eagle.org] Sent: Wednesday, January 16, 2013 4:03 PM To: NT System Admin Issues Subject: Patch management recommendations I work for a consulting firm that manages a variety of SMB clients. As we increase our client load and the size of the clients (moving from the 3-10 seat to the 50-1000 seat clients) we are implementing more advanced products for a variety of tasks. We are currently looking at patch management solutions. Our current paradigm is a mix of WSUS and manual intervention, but it's not enough, obviously. I haven't used a centralized patch management system for around 5-6 years (used to use early versions of Shavlik) so I haven't been keeping up with the market. We're now looking for something that does 3rd party apps, not just MS stuff, so WSUS is off the table. Our clients are all on MS platforms, though; almost no *nix or Apple. I don't envision a one-size-fits-all product. I expect that we'll want a variety of solutions tailored to the size and complexity of the client. And I have no illusions about the ease of patch management given any product. :-) My boss would love an MSP-style of centrally managed product that can handle all our clients, but my belief is that trying to go that route is much more difficult than doing per-client implementations, especially without dedicated patch management admins. Having said all that, is anyone working with patch management systems that they really like for this space? Also, any you really DON'T like? Thanks! *** Charlie Kaiser mailto:charl...@golden-eagle.org charl...@golden-eagle.org Kingman, AZ *** ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ http://lyris.sunbelt-software.com/read/my_forums/ or send an email to mailto:listmana...@lyris.sunbeltsoftware.com listmana
RE: Patch management recommendations
Thanks. I don't know who they've been working with. I'm not on that team. I have no idea how far along they've gotten. Remote control and imaging was their 1st priorities. From: Rod Trent [mailto:rodtr...@myitforum.com] Sent: Thursday, January 17, 2013 3:43 PM To: NT System Admin Issues Subject: RE: Patch management recommendations Wow.I feel sorry for you, man. Your life could be a lot easier. Frankly, I'm not surprised MS consulting can't get it working. We were having a discussion about this last week. MCS has about as much time to ramp up on the new products as everyone else, a lot of it has to be done on their own. So, unless you get a top consultant or a real go-getter, you're better off doing it on your own. If you do have problems with their org, let me know and I can escalate. I'd just need to know who you're working with. If you're willing to do that, email me offline. From: Ray [mailto:rz...@qwest.net] Sent: Thursday, January 17, 2013 5:35 PM To: NT System Admin Issues Subject: RE: Patch management recommendations Of course there's a larger problem, none of which is within my control. They've been screwing around with SCCM for several years, including using MS (Premier?) consulting. Now they're trying to get 2012 to work. Not worth the effort at this point. From: Rod Trent [mailto:rodtr...@myitforum.com] Sent: Thursday, January 17, 2013 10:29 AM To: NT System Admin Issues Subject: RE: Patch management recommendations Well, there's a larger problem then that needs to be addressed. These things should be automated. Patching using ConfigMgr is not that tough, and getting it to work right is not that tough, either. Maybe offer your help to get it working. It'll save you a lot of time and ensure that your endpoints are secure today, instead of having to wait for you to get around to each PC. All of those maintenance tasks and PC reviews can be automated, too. From: Ray [mailto:rz...@qwest.net] Sent: Thursday, January 17, 2013 12:15 PM To: NT System Admin Issues Subject: RE: Patch management recommendations Completely false as I'm doing it now and did it in my previous 2 jobs. If I had to wait for my domain admins to finally get it to work right we'd have been several hundred patches behind. The additional advantage, since I'm not in a nice pristine homogenous environment, is a hands on review of what's on the PC, do some maintenance, etc. From: Rod Trent [mailto:rodtr...@myitforum.com] Sent: Thursday, January 17, 2013 8:21 AM To: NT System Admin Issues Subject: RE: Patch management recommendations Fixed that for you... -Original Message- From: Ray [mailto:rz...@qwest.net] Sent: Thursday, January 17, 2013 9:53 AM To: NT System Admin Issues Subject: RE: Patch management recommendations In Kingman? Wow. Anyway, AZ Dept of Corrections tries to use SCCM. I'd say it's been a failure for many reasons. I work for basically an ADC subnet, and I try to manually touch every machine (about 200) on a regular basis. Obviously that's not practical for everyone anyone. -Original Message- From: Charlie Kaiser [ mailto:charl...@golden-eagle.org mailto:charl...@golden-eagle.org] Sent: Wednesday, January 16, 2013 4:03 PM To: NT System Admin Issues Subject: Patch management recommendations I work for a consulting firm that manages a variety of SMB clients. As we increase our client load and the size of the clients (moving from the 3-10 seat to the 50-1000 seat clients) we are implementing more advanced products for a variety of tasks. We are currently looking at patch management solutions. Our current paradigm is a mix of WSUS and manual intervention, but it's not enough, obviously. I haven't used a centralized patch management system for around 5-6 years (used to use early versions of Shavlik) so I haven't been keeping up with the market. We're now looking for something that does 3rd party apps, not just MS stuff, so WSUS is off the table. Our clients are all on MS platforms, though; almost no *nix or Apple. I don't envision a one-size-fits-all product. I expect that we'll want a variety of solutions tailored to the size and complexity of the client. And I have no illusions about the ease of patch management given any product. :-) My boss would love an MSP-style of centrally managed product that can handle all our clients, but my belief is that trying to go that route is much more difficult than doing per-client implementations, especially without dedicated patch management admins. Having said all that, is anyone working with patch management systems that they really like for this space? Also, any you really DON'T like? Thanks! *** Charlie Kaiser mailto:charl...@golden-eagle.org charl...@golden-eagle.org Kingman, AZ *** ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http
RE: Patch management recommendations
It is indeed an odd town. But when you're a falconer, it's one of the best places in the US to live... *** Charlie Kaiser charl...@golden-eagle.org Kingman, AZ *** -Original Message- From: Ray [mailto:rz...@qwest.net] Sent: Thursday, January 17, 2013 3:38 PM To: NT System Admin Issues Subject: RE: Patch management recommendations There is that. Kind of an odd town though. My kids played sports against Kingman. -Original Message- From: Charlie Kaiser [mailto:charl...@golden-eagle.org] Sent: Thursday, January 17, 2013 10:44 AM To: NT System Admin Issues Subject: RE: Patch management recommendations Everything's remote. Most clients in California, but cost of living is better here... :-) *** Charlie Kaiser charl...@golden-eagle.org Kingman, AZ *** -Original Message- From: Ray [mailto:rz...@qwest.net] Sent: Thursday, January 17, 2013 7:53 AM To: NT System Admin Issues Subject: RE: Patch management recommendations In Kingman? Wow. ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin
Re: Patch management recommendations
look at LANDesk security suite (not cheep) it has all the functionality you need and more...only downside is tech support reps look to close trouble ticket without resolving issue --- On Wed, 1/16/13, Charlie Kaiser charl...@golden-eagle.org wrote: From: Charlie Kaiser charl...@golden-eagle.org Subject: Patch management recommendations To: NT System Admin Issues ntsysadmin@lyris.sunbelt-software.com Date: Wednesday, January 16, 2013, 6:03 PM I work for a consulting firm that manages a variety of SMB clients. As we increase our client load and the size of the clients (moving from the 3-10 seat to the 50-1000 seat clients) we are implementing more advanced products for a variety of tasks. We are currently looking at patch management solutions. Our current paradigm is a mix of WSUS and manual intervention, but it's not enough, obviously. I haven't used a centralized patch management system for around 5-6 years (used to use early versions of Shavlik) so I haven't been keeping up with the market. We're now looking for something that does 3rd party apps, not just MS stuff, so WSUS is off the table. Our clients are all on MS platforms, though; almost no *nix or Apple. I don't envision a one-size-fits-all product. I expect that we'll want a variety of solutions tailored to the size and complexity of the client. And I have no illusions about the ease of patch management given any product. :-) My boss would love an MSP-style of centrally managed product that can handle all our clients, but my belief is that trying to go that route is much more difficult than doing per-client implementations, especially without dedicated patch management admins. Having said all that, is anyone working with patch management systems that they really like for this space? Also, any you really DON'T like? Thanks! *** Charlie Kaiser charl...@golden-eagle.org Kingman, AZ *** ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin
RE: Patch management recommendations
Make sure to add SolarWinds Patch Manager to your list. http://www.solarwinds.com/patch-manager.aspx From: joseph palmieri [mailto:jpalm...@yahoo.com] Sent: Wednesday, January 16, 2013 9:58 PM To: NT System Admin Issues Subject: Re: Patch management recommendations look at LANDesk security suite (not cheep) it has all the functionality you need and more...only downside is tech support reps look to close trouble ticket without resolving issue --- On Wed, 1/16/13, Charlie Kaiser charl...@golden-eagle.org wrote: From: Charlie Kaiser charl...@golden-eagle.org Subject: Patch management recommendations To: NT System Admin Issues ntsysadmin@lyris.sunbelt-software.com Date: Wednesday, January 16, 2013, 6:03 PM I work for a consulting firm that manages a variety of SMB clients. As we increase our client load and the size of the clients (moving from the 3-10 seat to the 50-1000 seat clients) we are implementing more advanced products for a variety of tasks. We are currently looking at patch management solutions. Our current paradigm is a mix of WSUS and manual intervention, but it's not enough, obviously. I haven't used a centralized patch management system for around 5-6 years (used to use early versions of Shavlik) so I haven't been keeping up with the market. We're now looking for something that does 3rd party apps, not just MS stuff, so WSUS is off the table. Our clients are all on MS platforms, though; almost no *nix or Apple. I don't envision a one-size-fits-all product. I expect that we'll want a variety of solutions tailored to the size and complexity of the client. And I have no illusions about the ease of patch management given any product. :-) My boss would love an MSP-style of centrally managed product that can handle all our clients, but my belief is that trying to go that route is much more difficult than doing per-client implementations, especially without dedicated patch management admins. Having said all that, is anyone working with patch management systems that they really like for this space? Also, any you really DON'T like? Thanks! *** Charlie Kaiser charl...@golden-eagle.org Kingman, AZ *** ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin
Re: Patch management software...
Thanks for the heads up, Marc And especially thanks for the lovely 32-IP and 128-IP editions, which will help make them ubiquitous in SMB environments. * * *ASB* *http://XeeMe.com/AndrewBaker* *Harnessing the Advantages of Technology for the SMB market… * On Fri, Feb 10, 2012 at 1:19 AM, Marc Maiffret mmaiff...@eeye.com wrote: Just an update folks we released version 3.0 of Retina CS Community which now on top of the free patching and related there are new capabilities for integrated cloud security assessments (amazon/etc) and mobile security (android/activesync(ios) etc…) Plus a ton of other great improvements we heard from folks. Can download here: http://www.eeye.com/Products/Retina/Community and read more about what is new here: http://www.eeye.com/company/News-and-Events/Press-Releases/2012/eEye-Retina-CS-3-0-to-Close-the-Security-Gaps-Asso.aspx ** ** -Marc ** ** ** ** Signed, Marc Maiffret Founder/CTO eEye Digital Security WEB: http://www.eEye.com BLOG: http://blog.eeye.com TWITTER: http://twitter.com/marcmaiffret ** ** ** ** ** ** *From:* Marc Maiffret [mailto:mmaiff...@eeye.com] *Sent:* Thursday, February 02, 2012 7:10 PM *To:* NT System Admin Issues *Subject:* RE: Patch management software... ** ** Lively debates going on about doing so… J My vote is yes, so there is a good chance that might happen soon. -Marc ** ** *From:* James Rankin [mailto:kz2...@googlemail.com] *Sent:* Tuesday, January 31, 2012 5:59 AM *To:* NT System Admin Issues *Subject:* Re: Patch management software... ** ** That's really good for a free version. Any chance you could sneak Java in there as well? However, even without it that's great for a lot of small clients I know On 31 January 2012 06:25, Marc Maiffret mmaiff...@eeye.com wrote: Indeed it does Adobe Reader, Flash, Shockwave, Acrobat and also Mozilla Firefox plus Microsoft patches for free in the community version. The paid commercial version does a handful of other applications as well. http://www.eeye.com/products/retina/patch-management -Marc -Original Message- From: Alex Eckelberry [mailto:al...@eckelberry.com] Sent: Monday, January 30, 2012 8:38 PM To: NT System Admin Issues Cc: NT System Admin Issues Subject: Re: Patch management software... If it includes adobe and flash patching that is a sweet deal. Apart from windows those are the two programs that need vigilant patching. Alex Eckelberry www.eckelberry.com (c) 727 – 644 – 8830 Sent from my iPhone (Please excuse the occasional typos) On Jan 30, 2012, at 11:26 PM, Marc Maiffret mmaiff...@eeye.com wrote: Check out the free version of our Retina CS Community Edition. It is good up to 128 systems for free. Includes full vulnerability management and patching including patching for some third party apps. http://www.eeye.com/products/retina/community http://go.eeye.com/LP=68 -Marc Signed, Marc Maiffret Founder/CTO eEye Digital Security WEB: http://www.eEye.com BLOG: http://blog.eeye.com TWITTER: http://twitter.com/marcmaiffret From: ntsysadmin [mailto:ntsysad...@rccs.org] Sent: Monday, January 30, 2012 1:59 PM To: NT System Admin Issues Subject: Patch management software... I’m looking for affordable patch management software for several of my small business clients. Workstation numbers range from 4-80 PCs running XP, Vista, Windows7 and a few Macs. It’s okay if I can’t find anything to work with the Macs. I like the Secunia product but I didn’t see an offering for users with very small number of workstations. What are people using? Are there any free options out there that are worthwhile? Thanks, Mike ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin
RE: Patch management software...
A little bird told me we might move to 256 and toss in Java patching for free also. Sincerely would love your guys direct feedback so if you have any thoughts, issues, ideas please do not hesitate to send me email directly at mmaiffret[@]eeye.com. thanks -Marc -Original Message- From: Andrew S. Baker [mailto:asbz...@gmail.com] Sent: Friday, February 10, 2012 4:04 AM To: NT System Admin Issues Subject: Re: Patch management software... Thanks for the heads up, Marc And especially thanks for the lovely 32-IP and 128-IP editions, which will help make them ubiquitous in SMB environments. ASB http://XeeMe.com/AndrewBaker Harnessing the Advantages of Technology for the SMB market... On Fri, Feb 10, 2012 at 1:19 AM, Marc Maiffret mmaiff...@eeye.com wrote: Just an update folks we released version 3.0 of Retina CS Community which now on top of the free patching and related there are new capabilities for integrated cloud security assessments (amazon/etc) and mobile security (android/activesync(ios) etc...) Plus a ton of other great improvements we heard from folks. Can download here: http://www.eeye.com/Products/Retina/Community and read more about what is new here: http://www.eeye.com/company/News-and-Events/Press-Releases/2012/eEye-Retina-CS-3-0-to-Close-the-Security-Gaps-Asso.aspx -Marc Signed, Marc Maiffret Founder/CTO eEye Digital Security WEB: http://www.eEye.com BLOG: http://blog.eeye.com TWITTER: http://twitter.com/marcmaiffret From: Marc Maiffret [mailto:mmaiff...@eeye.com] Sent: Thursday, February 02, 2012 7:10 PM To: NT System Admin Issues Subject: RE: Patch management software... Lively debates going on about doing so... J My vote is yes, so there is a good chance that might happen soon. -Marc From: James Rankin [mailto:kz2...@googlemail.com] Sent: Tuesday, January 31, 2012 5:59 AM To: NT System Admin Issues Subject: Re: Patch management software... That's really good for a free version. Any chance you could sneak Java in there as well? However, even without it that's great for a lot of small clients I know On 31 January 2012 06:25, Marc Maiffret mmaiff...@eeye.com wrote: Indeed it does Adobe Reader, Flash, Shockwave, Acrobat and also Mozilla Firefox plus Microsoft patches for free in the community version. The paid commercial version does a handful of other applications as well. http://www.eeye.com/products/retina/patch-management -Marc -Original Message- From: Alex Eckelberry [mailto:al...@eckelberry.com] Sent: Monday, January 30, 2012 8:38 PM To: NT System Admin Issues Cc: NT System Admin Issues Subject: Re: Patch management software... If it includes adobe and flash patching that is a sweet deal. Apart from windows those are the two programs that need vigilant patching. Alex Eckelberry www.eckelberry.com (c) 727 - 644 - 8830 tel:727%20%E2%80%93%20644%20%E2%80%93%208830 Sent from my iPhone (Please excuse the occasional typos) On Jan 30, 2012, at 11:26 PM, Marc Maiffret mmaiff...@eeye.com wrote: Check out the free version of our Retina CS Community Edition. It is good up to 128 systems for free. Includes full vulnerability management and patching including patching for some third party apps. http://www.eeye.com/products/retina/community http://go.eeye.com/LP=68 -Marc Signed, Marc Maiffret Founder/CTO eEye Digital Security WEB: http://www.eEye.com BLOG: http://blog.eeye.com TWITTER: http://twitter.com/marcmaiffret From: ntsysadmin [mailto:ntsysad...@rccs.org] Sent: Monday, January 30, 2012 1:59 PM To: NT System Admin Issues Subject: Patch management software... I'm looking for affordable patch management software for several of my small business clients. Workstation numbers range from 4-80 PCs running XP, Vista, Windows7 and a few Macs. It's okay if I can't find anything to work with the Macs. I like the Secunia product but I didn't see an offering for users with very small number of workstations. What are people using? Are there any free options out there that are worthwhile
RE: Patch management software...
Just an update folks we released version 3.0 of Retina CS Community which now on top of the free patching and related there are new capabilities for integrated cloud security assessments (amazon/etc) and mobile security (android/activesync(ios) etc...) Plus a ton of other great improvements we heard from folks. Can download here: http://www.eeye.com/Products/Retina/Community and read more about what is new here: http://www.eeye.com/company/News-and-Events/Press-Releases/2012/eEye-Retina-CS-3-0-to-Close-the-Security-Gaps-Asso.aspx -Marc Signed, Marc Maiffret Founder/CTO eEye Digital Security WEB: http://www.eEye.com BLOG: http://blog.eeye.com TWITTER: http://twitter.com/marcmaiffret From: Marc Maiffret [mailto:mmaiff...@eeye.com] Sent: Thursday, February 02, 2012 7:10 PM To: NT System Admin Issues Subject: RE: Patch management software... Lively debates going on about doing so... :) My vote is yes, so there is a good chance that might happen soon. -Marc From: James Rankin [mailto:kz2...@googlemail.com]mailto:[mailto:kz2...@googlemail.com] Sent: Tuesday, January 31, 2012 5:59 AM To: NT System Admin Issues Subject: Re: Patch management software... That's really good for a free version. Any chance you could sneak Java in there as well? However, even without it that's great for a lot of small clients I know On 31 January 2012 06:25, Marc Maiffret mmaiff...@eeye.commailto:mmaiff...@eeye.com wrote: Indeed it does Adobe Reader, Flash, Shockwave, Acrobat and also Mozilla Firefox plus Microsoft patches for free in the community version. The paid commercial version does a handful of other applications as well. http://www.eeye.com/products/retina/patch-management -Marc -Original Message- From: Alex Eckelberry [mailto:al...@eckelberry.commailto:al...@eckelberry.com] Sent: Monday, January 30, 2012 8:38 PM To: NT System Admin Issues Cc: NT System Admin Issues Subject: Re: Patch management software... If it includes adobe and flash patching that is a sweet deal. Apart from windows those are the two programs that need vigilant patching. Alex Eckelberry www.eckelberry.comhttp://www.eckelberry.com (c) 727 - 644 - 8830tel:727%20%E2%80%93%20644%20%E2%80%93%208830 Sent from my iPhone (Please excuse the occasional typos) On Jan 30, 2012, at 11:26 PM, Marc Maiffret mmaiff...@eeye.commailto:mmaiff...@eeye.com wrote: Check out the free version of our Retina CS Community Edition. It is good up to 128 systems for free. Includes full vulnerability management and patching including patching for some third party apps. http://www.eeye.com/products/retina/community http://go.eeye.com/LP=68 -Marc Signed, Marc Maiffret Founder/CTO eEye Digital Security WEB: http://www.eEye.com BLOG: http://blog.eeye.com TWITTER: http://twitter.com/marcmaiffret From: ntsysadmin [mailto:ntsysad...@rccs.orgmailto:ntsysad...@rccs.org] Sent: Monday, January 30, 2012 1:59 PM To: NT System Admin Issues Subject: Patch management software... I'm looking for affordable patch management software for several of my small business clients. Workstation numbers range from 4-80 PCs running XP, Vista, Windows7 and a few Macs. It's okay if I can't find anything to work with the Macs. I like the Secunia product but I didn't see an offering for users with very small number of workstations. What are people using? Are there any free options out there that are worthwhile? Thanks, Mike ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send
RE: Patch management software...
Lively debates going on about doing so... :) My vote is yes, so there is a good chance that might happen soon. -Marc From: James Rankin [mailto:kz2...@googlemail.com] Sent: Tuesday, January 31, 2012 5:59 AM To: NT System Admin Issues Subject: Re: Patch management software... That's really good for a free version. Any chance you could sneak Java in there as well? However, even without it that's great for a lot of small clients I know On 31 January 2012 06:25, Marc Maiffret mmaiff...@eeye.commailto:mmaiff...@eeye.com wrote: Indeed it does Adobe Reader, Flash, Shockwave, Acrobat and also Mozilla Firefox plus Microsoft patches for free in the community version. The paid commercial version does a handful of other applications as well. http://www.eeye.com/products/retina/patch-management -Marc -Original Message- From: Alex Eckelberry [mailto:al...@eckelberry.commailto:al...@eckelberry.com] Sent: Monday, January 30, 2012 8:38 PM To: NT System Admin Issues Cc: NT System Admin Issues Subject: Re: Patch management software... If it includes adobe and flash patching that is a sweet deal. Apart from windows those are the two programs that need vigilant patching. Alex Eckelberry www.eckelberry.comhttp://www.eckelberry.com (c) 727 - 644 - 8830tel:727%20%E2%80%93%20644%20%E2%80%93%208830 Sent from my iPhone (Please excuse the occasional typos) On Jan 30, 2012, at 11:26 PM, Marc Maiffret mmaiff...@eeye.commailto:mmaiff...@eeye.com wrote: Check out the free version of our Retina CS Community Edition. It is good up to 128 systems for free. Includes full vulnerability management and patching including patching for some third party apps. http://www.eeye.com/products/retina/community http://go.eeye.com/LP=68 -Marc Signed, Marc Maiffret Founder/CTO eEye Digital Security WEB: http://www.eEye.com BLOG: http://blog.eeye.com TWITTER: http://twitter.com/marcmaiffret From: ntsysadmin [mailto:ntsysad...@rccs.orgmailto:ntsysad...@rccs.org] Sent: Monday, January 30, 2012 1:59 PM To: NT System Admin Issues Subject: Patch management software... I'm looking for affordable patch management software for several of my small business clients. Workstation numbers range from 4-80 PCs running XP, Vista, Windows7 and a few Macs. It's okay if I can't find anything to work with the Macs. I like the Secunia product but I didn't see an offering for users with very small number of workstations. What are people using? Are there any free options out there that are worthwhile? Thanks, Mike ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin -- On two occasions...I have been asked, 'Pray, Mr Babbage, if you put into the machine wrong figures, will the right answers come out?' I am not able rightly to apprehend the kind of confusion of ideas that could provoke such a question. * IMPORTANT INFORMATION/DISCLAIMER * This document should be read only by those persons to whom it is addressed. If you have received this message it was obviously addressed to you and therefore you can read it, even it we didn't mean to send it to you. However, if the contents of this email make no sense whatsoever then you probably were not the intended recipient, or, alternatively, you are a mindless cretin; either way, you should immediately kill yourself and destroy your computer (not necessarily
RE: Patch management software...
To my knowledge, SBS prior to 2011 is nothing special (only this month have I even seen an SBS 2011 setup screen and have yet to see the OS completely installed yet, working on two swing migrations at the moment) I've treated then the same as regular server OS's. Also, you could always check with them, but I wouldn't guarantee they'd know the difference. Dave From: James Hill [mailto:falc...@gmail.com] Sent: Tuesday, January 31, 2012 9:26 PM To: NT System Admin Issues Subject: RE: Patch management software... I doesn't list SBS as a supported OS though, which is a concern. From: ntsysadmin [mailto:ntsysad...@rccs.org]mailto:[mailto:ntsysad...@rccs.org] Sent: Wednesday, 1 February 2012 4:35 AM To: NT System Admin Issues Subject: RE: Patch management software... Thanks for all of the replies. I'm looking over the recommended apps and installing the demos. So far ManageEngine (http://www.manageengine.com/products/desktop-central/) looks like the winner. The functionality is awesome, web-based UI is beautiful and easy to read/navigate, feature-set - looks like it does so much I will have to read the docs to discover all the features. It does look like it's still free for 25 or fewer PCs, which is just amazing. This will work for most of my clients, I will get quotes for the larger ones. If you're not familiar with this product, I would highly recommend installing the free demo and trying it out. I am VERY impressed. Thanks, Mike From: Dennis Hoefer [mailto:dhoe...@ufcoop.com]mailto:[mailto:dhoe...@ufcoop.com] Sent: Monday, January 30, 2012 6:37 PM To: NT System Admin Issues Subject: RE: Patch management software... For the small Windows installations you might take a look at Desktop Central by ManageEngine, I believe they still offer a free version for up to 25 workstations. Dennis From: ntsysadmin [mailto:ntsysad...@rccs.org] Sent: Monday, January 30, 2012 3:59 PM To: NT System Admin Issues Subject: Patch management software... I'm looking for affordable patch management software for several of my small business clients. Workstation numbers range from 4-80 PCs running XP, Vista, Windows7 and a few Macs. It's okay if I can't find anything to work with the Macs. I like the Secunia product but I didn't see an offering for users with very small number of workstations. What are people using? Are there any free options out there that are worthwhile? Thanks, Mike ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin
RE: Patch management software...
I'm not running any SBS servers here and wasn't really concerned about patching servers anyway. Most of my clients are so small that they have only one or two servers and patching is done manually. I was reading the product's support forum last night and the techs seem to be very knowledgeable and responsive to user requests and feature requests. I feel like I've struck gold finding this... Thanks again to the person that posted about Desktop Central. From: James Hill [mailto:falc...@gmail.com] Sent: Wednesday, February 01, 2012 12:26 AM To: NT System Admin Issues Subject: RE: Patch management software... I doesn't list SBS as a supported OS though, which is a concern. From: ntsysadmin [mailto:ntsysad...@rccs.org] Sent: Wednesday, 1 February 2012 4:35 AM To: NT System Admin Issues Subject: RE: Patch management software... Thanks for all of the replies. I'm looking over the recommended apps and installing the demos. So far ManageEngine (http://www.manageengine.com/products/desktop-central/) looks like the winner. The functionality is awesome, web-based UI is beautiful and easy to read/navigate, feature-set - looks like it does so much I will have to read the docs to discover all the features. It does look like it's still free for 25 or fewer PCs, which is just amazing. This will work for most of my clients, I will get quotes for the larger ones. If you're not familiar with this product, I would highly recommend installing the free demo and trying it out. I am VERY impressed. Thanks, Mike From: Dennis Hoefer [mailto:dhoe...@ufcoop.com]mailto:[mailto:dhoe...@ufcoop.com] Sent: Monday, January 30, 2012 6:37 PM To: NT System Admin Issues Subject: RE: Patch management software... For the small Windows installations you might take a look at Desktop Central by ManageEngine, I believe they still offer a free version for up to 25 workstations. Dennis From: ntsysadmin [mailto:ntsysad...@rccs.org] Sent: Monday, January 30, 2012 3:59 PM To: NT System Admin Issues Subject: Patch management software... I'm looking for affordable patch management software for several of my small business clients. Workstation numbers range from 4-80 PCs running XP, Vista, Windows7 and a few Macs. It's okay if I can't find anything to work with the Macs. I like the Secunia product but I didn't see an offering for users with very small number of workstations. What are people using? Are there any free options out there that are worthwhile? Thanks, Mike ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin
RE: Patch management software...
You may have just saved a client of mine a Shavlik renewal Mark... Dave -Original Message- From: Marc Maiffret [mailto:mmaiff...@eeye.com] Sent: Monday, January 30, 2012 10:25 PM To: NT System Admin Issues Subject: RE: Patch management software... Indeed it does Adobe Reader, Flash, Shockwave, Acrobat and also Mozilla Firefox plus Microsoft patches for free in the community version. The paid commercial version does a handful of other applications as well. http://www.eeye.com/products/retina/patch-management -Marc -Original Message- From: Alex Eckelberry [mailto:al...@eckelberry.com] Sent: Monday, January 30, 2012 8:38 PM To: NT System Admin Issues Cc: NT System Admin Issues Subject: Re: Patch management software... If it includes adobe and flash patching that is a sweet deal. Apart from windows those are the two programs that need vigilant patching. Alex Eckelberry www.eckelberry.com (c) 727 – 644 – 8830 Sent from my iPhone (Please excuse the occasional typos) On Jan 30, 2012, at 11:26 PM, Marc Maiffret mmaiff...@eeye.com wrote: Check out the free version of our Retina CS Community Edition. It is good up to 128 systems for free. Includes full vulnerability management and patching including patching for some third party apps. http://www.eeye.com/products/retina/community http://go.eeye.com/LP=68 -Marc Signed, Marc Maiffret Founder/CTO eEye Digital Security WEB: http://www.eEye.com BLOG: http://blog.eeye.com TWITTER: http://twitter.com/marcmaiffret From: ntsysadmin [mailto:ntsysad...@rccs.org] Sent: Monday, January 30, 2012 1:59 PM To: NT System Admin Issues Subject: Patch management software... I’m looking for affordable patch management software for several of my small business clients. Workstation numbers range from 4-80 PCs running XP, Vista, Windows7 and a few Macs. It’s okay if I can’t find anything to work with the Macs. I like the Secunia product but I didn’t see an offering for users with very small number of workstations. What are people using? Are there any free options out there that are worthwhile? Thanks, Mike ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin
Re: Patch management software...
That's really good for a free version. Any chance you could sneak Java in there as well? However, even without it that's great for a lot of small clients I know On 31 January 2012 06:25, Marc Maiffret mmaiff...@eeye.com wrote: Indeed it does Adobe Reader, Flash, Shockwave, Acrobat and also Mozilla Firefox plus Microsoft patches for free in the community version. The paid commercial version does a handful of other applications as well. http://www.eeye.com/products/retina/patch-management -Marc -Original Message- From: Alex Eckelberry [mailto:al...@eckelberry.com] Sent: Monday, January 30, 2012 8:38 PM To: NT System Admin Issues Cc: NT System Admin Issues Subject: Re: Patch management software... If it includes adobe and flash patching that is a sweet deal. Apart from windows those are the two programs that need vigilant patching. Alex Eckelberry www.eckelberry.com (c) 727 – 644 – 8830 Sent from my iPhone (Please excuse the occasional typos) On Jan 30, 2012, at 11:26 PM, Marc Maiffret mmaiff...@eeye.com wrote: Check out the free version of our Retina CS Community Edition. It is good up to 128 systems for free. Includes full vulnerability management and patching including patching for some third party apps. http://www.eeye.com/products/retina/community http://go.eeye.com/LP=68 -Marc Signed, Marc Maiffret Founder/CTO eEye Digital Security WEB: http://www.eEye.com BLOG: http://blog.eeye.com TWITTER: http://twitter.com/marcmaiffret From: ntsysadmin [mailto:ntsysad...@rccs.org] Sent: Monday, January 30, 2012 1:59 PM To: NT System Admin Issues Subject: Patch management software... I’m looking for affordable patch management software for several of my small business clients. Workstation numbers range from 4-80 PCs running XP, Vista, Windows7 and a few Macs. It’s okay if I can’t find anything to work with the Macs. I like the Secunia product but I didn’t see an offering for users with very small number of workstations. What are people using? Are there any free options out there that are worthwhile? Thanks, Mike ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin -- On two occasions...I have been asked, 'Pray, Mr Babbage, if you put into the machine wrong figures, will the right answers come out?' I am not able rightly to apprehend the kind of confusion of ideas that could provoke such a question. ** IMPORTANT INFORMATION/DISCLAIMER * This document should be read only by those persons to whom it is addressed. If you have received this message it was obviously addressed to you and therefore you can read it, even it we didn't mean to send it to you. However, if the contents of this email make no sense whatsoever then you probably were not the intended recipient, or, alternatively, you are a mindless cretin; either way, you should immediately kill yourself and destroy your computer (not necessarily in that order). Once you have taken this action, please contact us.. no, sorry, you can't use your computer, because you just destroyed it, and possibly also committed suicide afterwards, but I am starting to digress.. * * The originator of this email is not liable for the transmission of the information contained in this communication. Or are they? Either way it's a pretty dull legal query and frankly one I'm not going to dwell on. But should you have nothing better to do, please feel free to ruminate on it, and please pass on any concrete conclusions should you find them
Re: Patch management software...
Send all commission checks to: Marc's Bahama Mama Fund 111 Theory Suite 250 Irvine, CA 92617-3041 Carl Webster Consultant and Citrix Technology Professional http://www.CarlWebster.com http://www.carlwebster.com/ On 1/31/12 7:54 AM, David Lum david@nwea.org wrote: You may have just saved a client of mine a Shavlik renewal Mark... Dave -Original Message- From: Marc Maiffret [mailto:mmaiff...@eeye.com] Sent: Monday, January 30, 2012 10:25 PM To: NT System Admin Issues Subject: RE: Patch management software... Indeed it does Adobe Reader, Flash, Shockwave, Acrobat and also Mozilla Firefox plus Microsoft patches for free in the community version. The paid commercial version does a handful of other applications as well. http://www.eeye.com/products/retina/patch-management -Marc -Original Message- From: Alex Eckelberry [mailto:al...@eckelberry.com] Sent: Monday, January 30, 2012 8:38 PM To: NT System Admin Issues Cc: NT System Admin Issues Subject: Re: Patch management software... If it includes adobe and flash patching that is a sweet deal. Apart from windows those are the two programs that need vigilant patching. Alex Eckelberry www.eckelberry.com (c) 727 644 8830 Sent from my iPhone (Please excuse the occasional typos) On Jan 30, 2012, at 11:26 PM, Marc Maiffret mmaiff...@eeye.com wrote: Check out the free version of our Retina CS Community Edition. It is good up to 128 systems for free. Includes full vulnerability management and patching including patching for some third party apps. http://www.eeye.com/products/retina/community http://go.eeye.com/LP=68 ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin
RE: Patch management software...
Hmm, the last time Marc had me send it to some offshore account - the CIA/FBI/NSA/Homeland security let him back in? -Original Message- From: Webster [mailto:webs...@carlwebster.com] Sent: Tuesday, January 31, 2012 6:04 AM To: NT System Admin Issues Subject: Re: Patch management software... Send all commission checks to: Marc's Bahama Mama Fund 111 Theory Suite 250 Irvine, CA 92617-3041 Carl Webster Consultant and Citrix Technology Professional http://www.CarlWebster.com http://www.carlwebster.com/ On 1/31/12 7:54 AM, David Lum david@nwea.org wrote: You may have just saved a client of mine a Shavlik renewal Mark... Dave -Original Message- From: Marc Maiffret [mailto:mmaiff...@eeye.com] Sent: Monday, January 30, 2012 10:25 PM To: NT System Admin Issues Subject: RE: Patch management software... Indeed it does Adobe Reader, Flash, Shockwave, Acrobat and also Mozilla Firefox plus Microsoft patches for free in the community version. The paid commercial version does a handful of other applications as well. http://www.eeye.com/products/retina/patch-management -Marc -Original Message- From: Alex Eckelberry [mailto:al...@eckelberry.com] Sent: Monday, January 30, 2012 8:38 PM To: NT System Admin Issues Cc: NT System Admin Issues Subject: Re: Patch management software... If it includes adobe and flash patching that is a sweet deal. Apart from windows those are the two programs that need vigilant patching. Alex Eckelberry www.eckelberry.com (c) 727 644 8830 Sent from my iPhone (Please excuse the occasional typos) On Jan 30, 2012, at 11:26 PM, Marc Maiffret mmaiff...@eeye.com wrote: Check out the free version of our Retina CS Community Edition. It is good up to 128 systems for free. Includes full vulnerability management and patching including patching for some third party apps. http://www.eeye.com/products/retina/community http://go.eeye.com/LP=68 ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin
RE: Patch management software...
Thanks for all of the replies. I'm looking over the recommended apps and installing the demos. So far ManageEngine (http://www.manageengine.com/products/desktop-central/) looks like the winner. The functionality is awesome, web-based UI is beautiful and easy to read/navigate, feature-set - looks like it does so much I will have to read the docs to discover all the features. It does look like it's still free for 25 or fewer PCs, which is just amazing. This will work for most of my clients, I will get quotes for the larger ones. If you're not familiar with this product, I would highly recommend installing the free demo and trying it out. I am VERY impressed. Thanks, Mike From: Dennis Hoefer [mailto:dhoe...@ufcoop.com] Sent: Monday, January 30, 2012 6:37 PM To: NT System Admin Issues Subject: RE: Patch management software... For the small Windows installations you might take a look at Desktop Central by ManageEngine, I believe they still offer a free version for up to 25 workstations. Dennis From: ntsysadmin [mailto:ntsysad...@rccs.org] Sent: Monday, January 30, 2012 3:59 PM To: NT System Admin Issues Subject: Patch management software... I'm looking for affordable patch management software for several of my small business clients. Workstation numbers range from 4-80 PCs running XP, Vista, Windows7 and a few Macs. It's okay if I can't find anything to work with the Macs. I like the Secunia product but I didn't see an offering for users with very small number of workstations. What are people using? Are there any free options out there that are worthwhile? Thanks, Mike ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin
RE: Patch management software...
I doesn't list SBS as a supported OS though, which is a concern. From: ntsysadmin [mailto:ntsysad...@rccs.org] Sent: Wednesday, 1 February 2012 4:35 AM To: NT System Admin Issues Subject: RE: Patch management software... Thanks for all of the replies. I'm looking over the recommended apps and installing the demos. So far ManageEngine (http://www.manageengine.com/products/desktop-central/) looks like the winner. The functionality is awesome, web-based UI is beautiful and easy to read/navigate, feature-set - looks like it does so much I will have to read the docs to discover all the features. It does look like it's still free for 25 or fewer PCs, which is just amazing. This will work for most of my clients, I will get quotes for the larger ones. If you're not familiar with this product, I would highly recommend installing the free demo and trying it out. I am VERY impressed. Thanks, Mike From: Dennis Hoefer [mailto:dhoe...@ufcoop.com] Sent: Monday, January 30, 2012 6:37 PM To: NT System Admin Issues Subject: RE: Patch management software... For the small Windows installations you might take a look at Desktop Central by ManageEngine, I believe they still offer a free version for up to 25 workstations. Dennis From: ntsysadmin [mailto:ntsysad...@rccs.org] Sent: Monday, January 30, 2012 3:59 PM To: NT System Admin Issues Subject: Patch management software... I'm looking for affordable patch management software for several of my small business clients. Workstation numbers range from 4-80 PCs running XP, Vista, Windows7 and a few Macs. It's okay if I can't find anything to work with the Macs. I like the Secunia product but I didn't see an offering for users with very small number of workstations. What are people using? Are there any free options out there that are worthwhile? Thanks, Mike ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin
Re: Patch management software...
On Mon, Jan 30, 2012 at 4:58 PM, ntsysadmin ntsysad...@rccs.org wrote: I’m looking for affordable patch management software for several of my small business clients. ... Are there any free options out there that are worthwhile? WSUS. -- Ben ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin
RE: Patch management software...
Have you looked at Windows Intune? From: ntsysadmin [mailto:ntsysad...@rccs.org] Sent: Monday, January 30, 2012 4:59 PM To: NT System Admin Issues Subject: Patch management software... I'm looking for affordable patch management software for several of my small business clients. Workstation numbers range from 4-80 PCs running XP, Vista, Windows7 and a few Macs. It's okay if I can't find anything to work with the Macs. I like the Secunia product but I didn't see an offering for users with very small number of workstations. What are people using? Are there any free options out there that are worthwhile? Thanks, Mike ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin
Re: Patch management software...
Hey Mike We have about 150 users and have the CSI Secunia product. It integrates quite well into WSUS and takes little time to add an adobe or quicktime update. Sent from my BlackBird. -Original Message- From: ntsysadmin ntsysad...@rccs.org Date: Mon, 30 Jan 2012 21:58:47 To: NT System Admin Issuesntsysadmin@lyris.sunbelt-software.com Reply-To: NT System Admin Issues ntsysadmin@lyris.sunbelt-software.comSubject: Patch management software... I'm looking for affordable patch management software for several of my small business clients. Workstation numbers range from 4-80 PCs running XP, Vista, Windows7 and a few Macs. It's okay if I can't find anything to work with the Macs. I like the Secunia product but I didn't see an offering for users with very small number of workstations. What are people using? Are there any free options out there that are worthwhile? Thanks, Mike ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin
RE: Patch management software...
I use both Shavlik and WSUS. Both places that I have managed to get Shavlik netChk Protect (%dayjob% and one %nightjob%) going I have found it useful to maintain WSUS for Windows-specific items. WSUS is very low maintenance, handling Java, Adobe, etc takes additional work. Not sure if it's the tool or the operator (me) not being proficient with NetChk Protect (err, VMWare vCenter Protect Essentials now that VMWare bought Shavlik) to be able to do away with WSUS, but there ya go. Shavlik is not c dirt cheap, but it is effective. Dave From: ntsysadmin [mailto:ntsysad...@rccs.org] Sent: Monday, January 30, 2012 1:59 PM To: NT System Admin Issues Subject: Patch management software... I'm looking for affordable patch management software for several of my small business clients. Workstation numbers range from 4-80 PCs running XP, Vista, Windows7 and a few Macs. It's okay if I can't find anything to work with the Macs. I like the Secunia product but I didn't see an offering for users with very small number of workstations. What are people using? Are there any free options out there that are worthwhile? Thanks, Mike ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin
RE: Patch management software...
For the small Windows installations you might take a look at Desktop Central by ManageEngine, I believe they still offer a free version for up to 25 workstations. Dennis From: ntsysadmin [mailto:ntsysad...@rccs.org] Sent: Monday, January 30, 2012 3:59 PM To: NT System Admin Issues Subject: Patch management software... I'm looking for affordable patch management software for several of my small business clients. Workstation numbers range from 4-80 PCs running XP, Vista, Windows7 and a few Macs. It's okay if I can't find anything to work with the Macs. I like the Secunia product but I didn't see an offering for users with very small number of workstations. What are people using? Are there any free options out there that are worthwhile? Thanks, Mike ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin
Re: Patch management software...
It does manage MACs, not sure about patching though. ntsysadmin ntsysad...@rccs.org 1/30/2012 4:58 PM I’m looking for affordable patch management software for several of my small business clients. Workstation numbers range from 4-80 PCs running XP, Vista, Windows7 and a few Macs. It’s okay if I can’t find anything to work with the Macs. I like the Secunia product but I didn’t see an offering for users with very small number of workstations. What are people using? Are there any free options out there that are worthwhile? Thanks, Mike ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin Confidentiality Notice: This e-mail message, including attachments, is for the sole use of the intended recipient(s) and may contain confidential and privileged information. Any unauthorized review, use, disclosure, or distribution is prohibited. If you are not the intended recipient, please contact the sender by reply e-mail and destroy all copies of the original message. ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin
Re: Patch management software...
+1 on the Kbox if it's affordable for your customers. John W. Cook Systems Administrator Partnership for Strong Families From: Tom Miller [mailto:tmil...@hnncsb.org] Sent: Monday, January 30, 2012 10:37 PM To: NT System Admin Issues ntsysadmin@lyris.sunbelt-software.com Subject: Re: Patch management software... Check out Dell's KBox systems. We use one here for about 1,000 PC and our servers. I think they recently released a smaller version for small offices such as yours. Patch management is one component, and it's very easy and hands off once you configure it. ntsysadmin ntsysad...@rccs.org 1/30/2012 4:58 PM I’m looking for affordable patch management software for several of my small business clients. Workstation numbers range from 4-80 PCs running XP, Vista, Windows7 and a few Macs. It’s okay if I can’t find anything to work with the Macs. I like the Secunia product but I didn’t see an offering for users with very small number of workstations. What are people using? Are there any free options out there that are worthwhile? Thanks, Mike ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin Confidentiality Notice: This e-mail message, including attachments, is for the sole use of the intended recipient(s) and may contain confidential and privileged information. Any unauthorized review, use, disclosure, or distribution is prohibited. If you are not the intended recipient, please contact the sender by reply e-mail and destroy all copies of the original message. ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin CONFIDENTIALITY STATEMENT: The information transmitted, or contained or attached to or with this Notice is intended only for the person or entity to which it is addressed and may contain Protected Health Information (PHI), confidential and/or privileged material. Any review, transmission, dissemination, or other use of, and taking any action in reliance upon this information by persons or entities other than the intended recipient without the express written consent of the sender are prohibited. This information may be protected by the Health Insurance Portability and Accountability Act of 1996 (HIPAA), and other Federal and Florida laws. Improper or unauthorized use or disclosure of this information could result in civil and/or criminal penalties. Consider the environment. Please don't print this e-mail unless you really need to. This email and any attached files are confidential and intended solely for the intended recipient(s). If you are not the named recipient you should not read, distribute, copy or alter this email. Any views or opinions expressed in this email are those of the author and do not represent those of the company. Warning: Although precautions have been taken to make sure no viruses are present in this email, the company cannot accept responsibility for any loss or damage that arise from the use of this email or attachments. ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin
RE: Patch management software...
Check out the free version of our Retina CS Community Edition. It is good up to 128 systems for free. Includes full vulnerability management and patching including patching for some third party apps. http://www.eeye.com/products/retina/community http://go.eeye.com/LP=68 -Marc Signed, Marc Maiffret Founder/CTO eEye Digital Security WEB: http://www.eEye.com BLOG: http://blog.eeye.com TWITTER: http://twitter.com/marcmaiffret From: ntsysadmin [mailto:ntsysad...@rccs.org] Sent: Monday, January 30, 2012 1:59 PM To: NT System Admin Issues Subject: Patch management software... I'm looking for affordable patch management software for several of my small business clients. Workstation numbers range from 4-80 PCs running XP, Vista, Windows7 and a few Macs. It's okay if I can't find anything to work with the Macs. I like the Secunia product but I didn't see an offering for users with very small number of workstations. What are people using? Are there any free options out there that are worthwhile? Thanks, Mike ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin
Re: Patch management software...
If you want cheap/free try ninite and wsus combined. Otherwise gfi languard is very inexpensive. Shavlik is is very good but might not fit your budget. Lumension is also decent but it is not cheap. Alex Eckelberry www.eckelberry.com (c) 727 – 644 – 8830 Sent from my iPhone (Please excuse the occasional typos) On Jan 30, 2012, at 5:38 PM, David Lum david@nwea.org wrote: I use both Shavlik and WSUS. Both places that I have managed to get Shavlik netChk Protect (%dayjob% and one %nightjob%) going I have found it useful to maintain WSUS for Windows-specific items. WSUS is very low maintenance, handling Java, Adobe, etc takes additional work. Not sure if it’s the tool or the operator (me) not being proficient with NetChk Protect (err, VMWare vCenter Protect Essentials now that VMWare bought Shavlik) to be able to do away with WSUS, but there ya go. Shavlik is not c dirt cheap, but it is effective. Dave From: ntsysadmin [mailto:ntsysad...@rccs.org] Sent: Monday, January 30, 2012 1:59 PM To: NT System Admin Issues Subject: Patch management software... I’m looking for affordable patch management software for several of my small business clients. Workstation numbers range from 4-80 PCs running XP, Vista, Windows7 and a few Macs. It’s okay if I can’t find anything to work with the Macs. I like the Secunia product but I didn’t see an offering for users with very small number of workstations. What are people using? Are there any free options out there that are worthwhile? Thanks, Mike ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin
Re: Patch management software...
If it includes adobe and flash patching that is a sweet deal. Apart from windows those are the two programs that need vigilant patching. Alex Eckelberry www.eckelberry.com (c) 727 – 644 – 8830 Sent from my iPhone (Please excuse the occasional typos) On Jan 30, 2012, at 11:26 PM, Marc Maiffret mmaiff...@eeye.com wrote: Check out the free version of our Retina CS Community Edition. It is good up to 128 systems for free. Includes full vulnerability management and patching including patching for some third party apps. http://www.eeye.com/products/retina/community http://go.eeye.com/LP=68 -Marc Signed, Marc Maiffret Founder/CTO eEye Digital Security WEB: http://www.eEye.com BLOG: http://blog.eeye.com TWITTER: http://twitter.com/marcmaiffret From: ntsysadmin [mailto:ntsysad...@rccs.org] Sent: Monday, January 30, 2012 1:59 PM To: NT System Admin Issues Subject: Patch management software... I’m looking for affordable patch management software for several of my small business clients. Workstation numbers range from 4-80 PCs running XP, Vista, Windows7 and a few Macs. It’s okay if I can’t find anything to work with the Macs. I like the Secunia product but I didn’t see an offering for users with very small number of workstations. What are people using? Are there any free options out there that are worthwhile? Thanks, Mike ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin
RE: Patch management software...
Indeed it does Adobe Reader, Flash, Shockwave, Acrobat and also Mozilla Firefox plus Microsoft patches for free in the community version. The paid commercial version does a handful of other applications as well. http://www.eeye.com/products/retina/patch-management -Marc -Original Message- From: Alex Eckelberry [mailto:al...@eckelberry.com] Sent: Monday, January 30, 2012 8:38 PM To: NT System Admin Issues Cc: NT System Admin Issues Subject: Re: Patch management software... If it includes adobe and flash patching that is a sweet deal. Apart from windows those are the two programs that need vigilant patching. Alex Eckelberry www.eckelberry.com (c) 727 – 644 – 8830 Sent from my iPhone (Please excuse the occasional typos) On Jan 30, 2012, at 11:26 PM, Marc Maiffret mmaiff...@eeye.com wrote: Check out the free version of our Retina CS Community Edition. It is good up to 128 systems for free. Includes full vulnerability management and patching including patching for some third party apps. http://www.eeye.com/products/retina/community http://go.eeye.com/LP=68 -Marc Signed, Marc Maiffret Founder/CTO eEye Digital Security WEB: http://www.eEye.com BLOG: http://blog.eeye.com TWITTER: http://twitter.com/marcmaiffret From: ntsysadmin [mailto:ntsysad...@rccs.org] Sent: Monday, January 30, 2012 1:59 PM To: NT System Admin Issues Subject: Patch management software... I’m looking for affordable patch management software for several of my small business clients. Workstation numbers range from 4-80 PCs running XP, Vista, Windows7 and a few Macs. It’s okay if I can’t find anything to work with the Macs. I like the Secunia product but I didn’t see an offering for users with very small number of workstations. What are people using? Are there any free options out there that are worthwhile? Thanks, Mike ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin
RE: RE: Patch management, revisited
Regarding the client comparing it to the KBox client:I used several methods to deploy the SCCM client (when we used SCCM), and each required some hand holding. Several PCs/laptops refused to install the client, even after the various WMI rebuilds/etc the SCCM list suggested. I always wondered by it was so hard for Microsoft to just create a self-installing file like other vendors. The KBox client is easy to install. The only requirement is Net 1.1 to be installed, and I think we had perhaps a few PCs (they were old) that didn't have it. I comes with the client and will install if needed. I deployed via a short script within a GPO. You can also do push install like SCCM. Regarding connectivity to your WAN sites, you can throttle (speed and time) distributions to your distribution point, similar to SCCM, but it uses it's own mechanism. Again, just my experience, may not be what others have seen. And my difficulties with SCCM were in part due to lack of time to dedicate to it. Tom Ray rz...@qwest.net 2/5/2011 2:19 PM The one word I’d use is patience. We have about 15 sites (mostly prisons) across the state. I’ve heard about various scripts that’ll help with the “client health” issue. Start deploying them. Step 2 would probably be install the “master”. There seems to be endless variations on how, and how often, you want the workstations to communicate with the server. Then I’d start trying to deploy the secondary sites. From: Jonathan [mailto:ncm...@gmail.com] Sent: Saturday, February 05, 2011 7:54 AM To: NT System Admin Issues Subject: Re: RE: Patch management, revisited Ray - you make a good point. We're covering 13 locations across the US, with varying WAN connectivity. Also, number of sites are the result of past acquisitions, so there has been a high level of site autonomy. We are the first internal IT department for the org to work toward standardization. This should be fun! Given the multiple locations, literally from NC to CA and CT to SC, and the history of autonomy among sites, any other thoughts/recommendations on how to tackle this? Jonathan - Thumb typed from my HTC Droid Incredible (and yes, it really is) on the Verizon network. On Feb 5, 2011 8:32 AM, Ray rz...@qwest.net wrote: The success of SCCM would have to depend on your environment. If you're in an environment with multiple locations that have had some level of autonomy on hardware purchases, and imaging, and patch management, it could be a nightmare. It seems to rely heavily on WMI. Speed is an issue too, so if your WAN suck, you'll have issues. On top of that, MS support is at best inconsistent on how this is supposed to work if you have multiple sites. The only way we finally got a whole lot of this to finally work was thru our TAM and whatever that support team is called. They spent days at our site trying to get it to work. I would hope most sites aren't as fundamentally screwed up as ours was however. I agree that the product has an amazing amount of power. From: Michael B. Smith [mailto:mich...@smithcons.com] Sent: Friday, February 04, 2011 11:50 AM To: NT System Admin Issues Subject: RE: Patch management, revisited If you don't do third party patches, SCCM is _almost_ exactly like WSUS. It is based on the WSUS engine as a matter of fact, and you have to install WSUS on the Software Update Point. J Doing the SCCM installation can be a little finicky; but once you set it up - it just RUNS. The challenge with SCCM in my eyes is that it can do SO MUCH, that unless you break it up into pieces (which is what I do when I teach classes on it), it can seem utterly overwhelming. Regards, Michael B. Smith Consultant and Exchange MVP http://TheEssentialExchange.com From: Jonathan [mailto:ncm...@gmail.com] Sent: Friday, February 04, 2011 1:43 PM To: NT System Admin Issues Subject: Patch management, revisited Ok, guys gals, I've sifted through the threads for the past year searching on patch management and SCCM, and not found exactly what I'm looking for... In my new gig, the team gets to choose what we will use to handle patches and updates, as there is nothing set in stone right now. Two options have been mentioned by the team: SCCM and Big Fix. I don't know anything about Big Fix, except hat they were just recently gobbled up by IBM and are now part of Tivoli. What I've heard about SCCM is that it is a bear to learn and manage. Right now we've got between 700 and 1,000 nodes (including servers, both virtual and physical), and potentially slated for continued growth. Some of the engineers have laptops that are NOT members of AD, and they run as local Admins. That is probably NOT going to change. Also, we may or may not be looking at needing to handle 3rd party updates as well. I've run WSUS, but only for a few hundred nodes, and really only for windows OS
Re: RE: RE: Patch management, revisited
Tom - thanks for the feedback. How many sites/clients are you supporting with KBox? Jonathan - Thumb typed from my HTC Droid Incredible (and yes, it really is) on the Verizon network. On Feb 7, 2011 9:09 AM, Tom Miller tmil...@hnncsb.org wrote: Regarding the client comparing it to the KBox client: I used several methods to deploy the SCCM client (when we used SCCM), and each required some hand holding. Several PCs/laptops refused to install the client, even after the various WMI rebuilds/etc the SCCM list suggested. I always wondered by it was so hard for Microsoft to just create a self-installing file like other vendors. The KBox client is easy to install. The only requirement is Net 1.1 to be installed, and I think we had perhaps a few PCs (they were old) that didn't have it. I comes with the client and will install if needed. I deployed via a short script within a GPO. You can also do push install like SCCM. Regarding connectivity to your WAN sites, you can throttle (speed and time) distributions to your distribution point, similar to SCCM, but it uses it's own mechanism. Again, just my experience, may not be what others have seen. And my difficulties with SCCM were in part due to lack of time to dedicate to it. Tom Ray rz...@qwest.net 2/5/2011 2:19 PM The one word I’d use is patience. We have about 15 sites (mostly prisons) across the state. I’ve heard about various scripts that’ll help with the “client health” issue. Start deploying them. Step 2 would probably be install the “master”. There seems to be endless variations on how, and how often, you want the workstations to communicate with the server. Then I’d start trying to deploy the secondary sites. From: Jonathan [mailto:ncm...@gmail.com] Sent: Saturday, February 05, 2011 7:54 AM To: NT System Admin Issues Subject: Re: RE: Patch management, revisited Ray - you make a good point. We're covering 13 locations across the US, with varying WAN connectivity. Also, number of sites are the result of past acquisitions, so there has been a high level of site autonomy. We are the first internal IT department for the org to work toward standardization. This should be fun! Given the multiple locations, literally from NC to CA and CT to SC, and the history of autonomy among sites, any other thoughts/recommendations on how to tackle this? Jonathan - Thumb typed from my HTC Droid Incredible (and yes, it really is) on the Verizon network. On Feb 5, 2011 8:32 AM, Ray rz...@qwest.net wrote: The success of SCCM would have to depend on your environment. If you're in an environment with multiple locations that have had some level of autonomy on hardware purchases, and imaging, and patch management, it could be a nightmare. It seems to rely heavily on WMI. Speed is an issue too, so if your WAN suck, you'll have issues. On top of that, MS support is at best inconsistent on how this is supposed to work if you have multiple sites. The only way we finally got a whole lot of this to finally work was thru our TAM and whatever that support team is called. They spent days at our site trying to get it to work. I would hope most sites aren't as fundamentally screwed up as ours was however. I agree that the product has an amazing amount of power. From: Michael B. Smith [mailto:mich...@smithcons.com] Sent: Friday, February 04, 2011 11:50 AM To: NT System Admin Issues Subject: RE: Patch management, revisited If you don't do third party patches, SCCM is _almost_ exactly like WSUS. It is based on the WSUS engine as a matter of fact, and you have to install WSUS on the Software Update Point. J Doing the SCCM installation can be a little finicky; but once you set it up - it just RUNS. The challenge with SCCM in my eyes is that it can do SO MUCH, that unless you break it up into pieces (which is what I do when I teach classes on it), it can seem utterly overwhelming. Regards, Michael B. Smith Consultant and Exchange MVP http://TheEssentialExchange.com From: Jonathan [mailto:ncm...@gmail.com] Sent: Friday, February 04, 2011 1:43 PM To: NT System Admin Issues Subject: Patch management, revisited Ok, guys gals, I've sifted through the threads for the past year searching on patch management and SCCM, and not found exactly what I'm looking for... In my new gig, the team gets to choose what we will use to handle patches and updates, as there is nothing set in stone right now. Two options have been mentioned by the team: SCCM and Big Fix. I don't know anything about Big Fix, except hat they were just recently gobbled up by IBM and are now part of Tivoli. What I've heard about SCCM is that it is a bear to learn and manage. Right now we've got between 700 and 1,000 nodes (including servers, both virtual and physical), and potentially slated for continued growth. Some of the engineers have laptops that are NOT members of AD
Re: RE: RE: Patch management, revisited
Here's the breakdown: - About 25 houses/apartment complexes, connected to site via VPN. Each site has 1-5 PCs. so about 75 PCs. - 7 WAN sites, about 200 PCs - HQ: about 700 PCs - Users with laptops that are not located in our offices, but at other locations (city jails, local schools): 100 and growing quickly At the houses and apartment complexes, I have one of the PCs there defined as a replication share (like a branch distribution point in SCCM). Tom Jonathan ncm...@gmail.com 2/7/2011 9:52 AM Tom - thanks for the feedback. How many sites/clients are you supporting with KBox? Jonathan - Thumb typed from my HTC Droid Incredible (and yes, it really is) on the Verizon network.On Feb 7, 2011 9:09 AM, Tom Miller tmil...@hnncsb.org wrote: Regarding the client comparing it to the KBox client: I used several methods to deploy the SCCM client (when we used SCCM), and each required some hand holding. Several PCs/laptops refused to install the client, even after the various WMI rebuilds/etc the SCCM list suggested. I always wondered by it was so hard for Microsoft to just create a self-installing file like other vendors. The KBox client is easy to install. The only requirement is Net 1.1 to be installed, and I think we had perhaps a few PCs (they were old) that didn't have it. I comes with the client and will install if needed. I deployed via a short script within a GPO. You can also do push install like SCCM. Regarding connectivity to your WAN sites, you can throttle (speed and time) distributions to your distribution point, similar to SCCM, but it uses it's own mechanism. Again, just my experience, may not be what others have seen. And my difficulties with SCCM were in part due to lack of time to dedicate to it. Tom Ray rz...@qwest.net 2/5/2011 2:19 PM The one word I’d use is patience. We have about 15 sites (mostly prisons) across the state. I’ve heard about various scripts that’ll help with the “client health” issue. Start deploying them. Step 2 would probably be install the “master”. There seems to be endless variations on how, and how often, you want the workstations to communicate with the server. Then I’d start trying to deploy the secondary sites. From: Jonathan [mailto:ncm...@gmail.com] Sent: Saturday, February 05, 2011 7:54 AM To: NT System Admin Issues Subject: Re: RE: Patch management, revisited Ray - you make a good point. We're covering 13 locations across the US, with varying WAN connectivity. Also, number of sites are the result of past acquisitions, so there has been a high level of site autonomy. We are the first internal IT department for the org to work toward standardization. This should be fun! Given the multiple locations, literally from NC to CA and CT to SC, and the history of autonomy among sites, any other thoughts/recommendations on how to tackle this? Jonathan - Thumb typed from my HTC Droid Incredible (and yes, it really is) on the Verizon network. On Feb 5, 2011 8:32 AM, Ray rz...@qwest.net wrote: The success of SCCM would have to depend on your environment. If you're in an environment with multiple locations that have had some level of autonomy on hardware purchases, and imaging, and patch management, it could be a nightmare. It seems to rely heavily on WMI. Speed is an issue too, so if your WAN suck, you'll have issues. On top of that, MS support is at best inconsistent on how this is supposed to work if you have multiple sites. The only way we finally got a whole lot of this to finally work was thru our TAM and whatever that support team is called. They spent days at our site trying to get it to work. I would hope most sites aren't as fundamentally screwed up as ours was however. I agree that the product has an amazing amount of power. From: Michael B. Smith [mailto:mich...@smithcons.com] Sent: Friday, February 04, 2011 11:50 AM To: NT System Admin Issues Subject: RE: Patch management, revisited If you don't do third party patches, SCCM is _almost_ exactly like WSUS. It is based on the WSUS engine as a matter of fact, and you have to install WSUS on the Software Update Point. J Doing the SCCM installation can be a little finicky; but once you set it up - it just RUNS. The challenge with SCCM in my eyes is that it can do SO MUCH, that unless you break it up into pieces (which is what I do when I teach classes on it), it can seem utterly overwhelming. Regards, Michael B. Smith Consultant and Exchange MVP http://TheEssentialExchange.com From: Jonathan [mailto:ncm...@gmail.com] Sent: Friday, February 04, 2011 1:43 PM To: NT System Admin Issues Subject: Patch management, revisited Ok, guys gals, I've sifted through the threads for the past year searching on patch management and SCCM, and not found exactly what I'm looking for... In my new gig, the team gets
RE: Patch management, revisited
The success of SCCM would have to depend on your environment. If you're in an environment with multiple locations that have had some level of autonomy on hardware purchases, and imaging, and patch management, it could be a nightmare. It seems to rely heavily on WMI. Speed is an issue too, so if your WAN suck, you'll have issues. On top of that, MS support is at best inconsistent on how this is supposed to work if you have multiple sites. The only way we finally got a whole lot of this to finally work was thru our TAM and whatever that support team is called. They spent days at our site trying to get it to work. I would hope most sites aren't as fundamentally screwed up as ours was however. I agree that the product has an amazing amount of power. From: Michael B. Smith [mailto:mich...@smithcons.com] Sent: Friday, February 04, 2011 11:50 AM To: NT System Admin Issues Subject: RE: Patch management, revisited If you don't do third party patches, SCCM is _almost_ exactly like WSUS. It is based on the WSUS engine as a matter of fact, and you have to install WSUS on the Software Update Point. J Doing the SCCM installation can be a little finicky; but once you set it up - it just RUNS. The challenge with SCCM in my eyes is that it can do SO MUCH, that unless you break it up into pieces (which is what I do when I teach classes on it), it can seem utterly overwhelming. Regards, Michael B. Smith Consultant and Exchange MVP http://TheEssentialExchange.com From: Jonathan [mailto:ncm...@gmail.com] Sent: Friday, February 04, 2011 1:43 PM To: NT System Admin Issues Subject: Patch management, revisited Ok, guys gals, I've sifted through the threads for the past year searching on patch management and SCCM, and not found exactly what I'm looking for... In my new gig, the team gets to choose what we will use to handle patches and updates, as there is nothing set in stone right now. Two options have been mentioned by the team: SCCM and Big Fix. I don't know anything about Big Fix, except hat they were just recently gobbled up by IBM and are now part of Tivoli. What I've heard about SCCM is that it is a bear to learn and manage. Right now we've got between 700 and 1,000 nodes (including servers, both virtual and physical), and potentially slated for continued growth. Some of the engineers have laptops that are NOT members of AD, and they run as local Admins. That is probably NOT going to change. Also, we may or may not be looking at needing to handle 3rd party updates as well. I've run WSUS, but only for a few hundred nodes, and really only for windows OS updates and nothing else. Finally, we need decent reporting tools that can provide us with compliance reports on where we stand with patch management. I've seen Shavlik, Kace/K-Box, WSUS, SCCM, GFI LANGuard all mentioned here... 1. Am I missing anything any products that I should be looking into? 2. Are any of these apps not well suited for the numbers of nodes I'm talking about (either over or under-powered for 700-2000 nodes)? 3. What's going to be the easiest learning curve/least administrative overhead? Thanks, -- Jonathan, A+, MCSA, MCSE ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin
Re: RE: Patch management, revisited
Ray - you make a good point. We're covering 13 locations across the US, with varying WAN connectivity. Also, number of sites are the result of past acquisitions, so there has been a high level of site autonomy. We are the first internal IT department for the org to work toward standardization. This should be fun! Given the multiple locations, literally from NC to CA and CT to SC, and the history of autonomy among sites, any other thoughts/recommendations on how to tackle this? Jonathan - Thumb typed from my HTC Droid Incredible (and yes, it really is) on the Verizon network. On Feb 5, 2011 8:32 AM, Ray rz...@qwest.net wrote: The success of SCCM would have to depend on your environment. If you're in an environment with multiple locations that have had some level of autonomy on hardware purchases, and imaging, and patch management, it could be a nightmare. It seems to rely heavily on WMI. Speed is an issue too, so if your WAN suck, you'll have issues. On top of that, MS support is at best inconsistent on how this is supposed to work if you have multiple sites. The only way we finally got a whole lot of this to finally work was thru our TAM and whatever that support team is called. They spent days at our site trying to get it to work. I would hope most sites aren't as fundamentally screwed up as ours was however. I agree that the product has an amazing amount of power. From: Michael B. Smith [mailto:mich...@smithcons.com] Sent: Friday, February 04, 2011 11:50 AM To: NT System Admin Issues Subject: RE: Patch management, revisited If you don't do third party patches, SCCM is _almost_ exactly like WSUS. It is based on the WSUS engine as a matter of fact, and you have to install WSUS on the Software Update Point. J Doing the SCCM installation can be a little finicky; but once you set it up - it just RUNS. The challenge with SCCM in my eyes is that it can do SO MUCH, that unless you break it up into pieces (which is what I do when I teach classes on it), it can seem utterly overwhelming. Regards, Michael B. Smith Consultant and Exchange MVP http://TheEssentialExchange.com From: Jonathan [mailto:ncm...@gmail.com] Sent: Friday, February 04, 2011 1:43 PM To: NT System Admin Issues Subject: Patch management, revisited Ok, guys gals, I've sifted through the threads for the past year searching on patch management and SCCM, and not found exactly what I'm looking for... In my new gig, the team gets to choose what we will use to handle patches and updates, as there is nothing set in stone right now. Two options have been mentioned by the team: SCCM and Big Fix. I don't know anything about Big Fix, except hat they were just recently gobbled up by IBM and are now part of Tivoli. What I've heard about SCCM is that it is a bear to learn and manage. Right now we've got between 700 and 1,000 nodes (including servers, both virtual and physical), and potentially slated for continued growth. Some of the engineers have laptops that are NOT members of AD, and they run as local Admins. That is probably NOT going to change. Also, we may or may not be looking at needing to handle 3rd party updates as well. I've run WSUS, but only for a few hundred nodes, and really only for windows OS updates and nothing else. Finally, we need decent reporting tools that can provide us with compliance reports on where we stand with patch management. I've seen Shavlik, Kace/K-Box, WSUS, SCCM, GFI LANGuard all mentioned here... 1. Am I missing anything any products that I should be looking into? 2. Are any of these apps not well suited for the numbers of nodes I'm talking about (either over or under-powered for 700-2000 nodes)? 3. What's going to be the easiest learning curve/least administrative overhead? Thanks, -- Jonathan, A+, MCSA, MCSE ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage
RE: RE: Patch management, revisited
The one word I'd use is patience. We have about 15 sites (mostly prisons) across the state. I've heard about various scripts that'll help with the client health issue. Start deploying them. Step 2 would probably be install the master. There seems to be endless variations on how, and how often, you want the workstations to communicate with the server. Then I'd start trying to deploy the secondary sites. From: Jonathan [mailto:ncm...@gmail.com] Sent: Saturday, February 05, 2011 7:54 AM To: NT System Admin Issues Subject: Re: RE: Patch management, revisited Ray - you make a good point. We're covering 13 locations across the US, with varying WAN connectivity. Also, number of sites are the result of past acquisitions, so there has been a high level of site autonomy. We are the first internal IT department for the org to work toward standardization. This should be fun! Given the multiple locations, literally from NC to CA and CT to SC, and the history of autonomy among sites, any other thoughts/recommendations on how to tackle this? Jonathan - Thumb typed from my HTC Droid Incredible (and yes, it really is) on the Verizon network. On Feb 5, 2011 8:32 AM, Ray rz...@qwest.net wrote: The success of SCCM would have to depend on your environment. If you're in an environment with multiple locations that have had some level of autonomy on hardware purchases, and imaging, and patch management, it could be a nightmare. It seems to rely heavily on WMI. Speed is an issue too, so if your WAN suck, you'll have issues. On top of that, MS support is at best inconsistent on how this is supposed to work if you have multiple sites. The only way we finally got a whole lot of this to finally work was thru our TAM and whatever that support team is called. They spent days at our site trying to get it to work. I would hope most sites aren't as fundamentally screwed up as ours was however. I agree that the product has an amazing amount of power. From: Michael B. Smith [mailto:mich...@smithcons.com] Sent: Friday, February 04, 2011 11:50 AM To: NT System Admin Issues Subject: RE: Patch management, revisited If you don't do third party patches, SCCM is _almost_ exactly like WSUS. It is based on the WSUS engine as a matter of fact, and you have to install WSUS on the Software Update Point. J Doing the SCCM installation can be a little finicky; but once you set it up - it just RUNS. The challenge with SCCM in my eyes is that it can do SO MUCH, that unless you break it up into pieces (which is what I do when I teach classes on it), it can seem utterly overwhelming. Regards, Michael B. Smith Consultant and Exchange MVP http://TheEssentialExchange.com From: Jonathan [mailto:ncm...@gmail.com] Sent: Friday, February 04, 2011 1:43 PM To: NT System Admin Issues Subject: Patch management, revisited Ok, guys gals, I've sifted through the threads for the past year searching on patch management and SCCM, and not found exactly what I'm looking for... In my new gig, the team gets to choose what we will use to handle patches and updates, as there is nothing set in stone right now. Two options have been mentioned by the team: SCCM and Big Fix. I don't know anything about Big Fix, except hat they were just recently gobbled up by IBM and are now part of Tivoli. What I've heard about SCCM is that it is a bear to learn and manage. Right now we've got between 700 and 1,000 nodes (including servers, both virtual and physical), and potentially slated for continued growth. Some of the engineers have laptops that are NOT members of AD, and they run as local Admins. That is probably NOT going to change. Also, we may or may not be looking at needing to handle 3rd party updates as well. I've run WSUS, but only for a few hundred nodes, and really only for windows OS updates and nothing else. Finally, we need decent reporting tools that can provide us with compliance reports on where we stand with patch management. I've seen Shavlik, Kace/K-Box, WSUS, SCCM, GFI LANGuard all mentioned here... 1. Am I missing anything any products that I should be looking into? 2. Are any of these apps not well suited for the numbers of nodes I'm talking about (either over or under-powered for 700-2000 nodes)? 3. What's going to be the easiest learning curve/least administrative overhead? Thanks, -- Jonathan, A+, MCSA, MCSE ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise
RE: Patch management, revisited
If you don't do third party patches, SCCM is _almost_ exactly like WSUS. It is based on the WSUS engine as a matter of fact, and you have to install WSUS on the Software Update Point. :) Doing the SCCM installation can be a little finicky; but once you set it up - it just RUNS. The challenge with SCCM in my eyes is that it can do SO MUCH, that unless you break it up into pieces (which is what I do when I teach classes on it), it can seem utterly overwhelming. Regards, Michael B. Smith Consultant and Exchange MVP http://TheEssentialExchange.com From: Jonathan [mailto:ncm...@gmail.com] Sent: Friday, February 04, 2011 1:43 PM To: NT System Admin Issues Subject: Patch management, revisited Ok, guys gals, I've sifted through the threads for the past year searching on patch management and SCCM, and not found exactly what I'm looking for... In my new gig, the team gets to choose what we will use to handle patches and updates, as there is nothing set in stone right now. Two options have been mentioned by the team: SCCM and Big Fix. I don't know anything about Big Fix, except hat they were just recently gobbled up by IBM and are now part of Tivoli. What I've heard about SCCM is that it is a bear to learn and manage. Right now we've got between 700 and 1,000 nodes (including servers, both virtual and physical), and potentially slated for continued growth. Some of the engineers have laptops that are NOT members of AD, and they run as local Admins. That is probably NOT going to change. Also, we may or may not be looking at needing to handle 3rd party updates as well. I've run WSUS, but only for a few hundred nodes, and really only for windows OS updates and nothing else. Finally, we need decent reporting tools that can provide us with compliance reports on where we stand with patch management. I've seen Shavlik, Kace/K-Box, WSUS, SCCM, GFI LANGuard all mentioned here... 1. Am I missing anything any products that I should be looking into? 2. Are any of these apps not well suited for the numbers of nodes I'm talking about (either over or under-powered for 700-2000 nodes)? 3. What's going to be the easiest learning curve/least administrative overhead? Thanks, -- Jonathan, A+, MCSA, MCSE ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin
RE: Patch management, revisited
Just my opinion, but based on your requirements, SCCM is still the leading candidate - and I have experience with all of them. KACE may come close, IF the number of end-points is closer to 700 than 2000. One of the HUGE factors that you need to also consider is the amount of support you will get. SCCM is the only one that has an entire community built around it so that you can get help 24x7. And, it's real help - not a place where you get slammed for being a newbie. MMS 2011 is coming up and is the qualified best source for training on the product (http://www.mms-2011.com). You can spend thousands on training classes, apps, and books and still not get as much out of them as you would by utilizing free community resources and MMS. From: Jonathan [mailto:ncm...@gmail.com] Sent: Friday, February 04, 2011 1:43 PM To: NT System Admin Issues Subject: Patch management, revisited Ok, guys gals, I've sifted through the threads for the past year searching on patch management and SCCM, and not found exactly what I'm looking for... In my new gig, the team gets to choose what we will use to handle patches and updates, as there is nothing set in stone right now. Two options have been mentioned by the team: SCCM and Big Fix. I don't know anything about Big Fix, except hat they were just recently gobbled up by IBM and are now part of Tivoli. What I've heard about SCCM is that it is a bear to learn and manage. Right now we've got between 700 and 1,000 nodes (including servers, both virtual and physical), and potentially slated for continued growth. Some of the engineers have laptops that are NOT members of AD, and they run as local Admins. That is probably NOT going to change. Also, we may or may not be looking at needing to handle 3rd party updates as well. I've run WSUS, but only for a few hundred nodes, and really only for windows OS updates and nothing else. Finally, we need decent reporting tools that can provide us with compliance reports on where we stand with patch management. I've seen Shavlik, Kace/K-Box, WSUS, SCCM, GFI LANGuard all mentioned here... 1. Am I missing anything any products that I should be looking into? 2. Are any of these apps not well suited for the numbers of nodes I'm talking about (either over or under-powered for 700-2000 nodes)? 3. What's going to be the easiest learning curve/least administrative overhead? Thanks, -- Jonathan, A+, MCSA, MCSE ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin
Re: Patch management, revisited
SCCM works very well if you have the time and staff to dedicate to it. I have about 1,000 PCs/laptops here and tried SCCM, but never had the time to dedicate to it. And it was a real a pain to manage when you have limited time. But, it can be a great product and has flexibility. I wasn't willing to hire a staff member just for SCCM for our size agency, so I decided to try the KBox (Kace, now owned by Dell). I can tell you the KBox is *so* easy to use. I spent maybe a week setting everything up the way I wanted, and now it pretty much runs on automatic. If you can do it in SCCM, you can probably do it with KBox, too. I use it for patching, inventorying, application distribution, file replication, and other odds and end. Unlike SCCM (maybe this has changed though) you don't need a server at each site for a replication point. That can be any PC or server with an agent on it. We have many sites with 1-5 PCs, so I just use one of them. KBox doesn't care about Pcs in AD or not. The KBox patches MS software, Java, Adobe products, and some A/V like Symantec and McAfee. There are videos on YouTube if you want to take a look at KBox. Look for KBoxbyKace. Just my comments, ignore if you wish. Jonathan ncm...@gmail.com 2/4/2011 1:43 PM Ok, guys gals, I've sifted through the threads for the past year searching on patch management and SCCM, and not found exactly what I'm looking for... In my new gig, the team gets to choose what we will use to handle patches and updates, as there is nothing set in stone right now. Two options have been mentioned by the team: SCCM and Big Fix. I don't know anything about Big Fix, except hat they were just recently gobbled up by IBM and are now part of Tivoli. What I've heard about SCCM is that it is a bear to learn and manage. Right now we've got between 700 and 1,000 nodes (including servers, both virtual and physical), and potentially slated for continued growth. Some of the engineers have laptops that are NOT members of AD, and they run as local Admins. That is probably NOT going to change. Also, we may or may not be looking at needing to handle 3rd party updates as well. I've run WSUS, but only for a few hundred nodes, and really only for windows OS updates and nothing else. Finally, we need decent reporting tools that can provide us with compliance reports on where we stand with patch management. I've seen Shavlik, Kace/K-Box, WSUS, SCCM, GFI LANGuard all mentioned here... 1. Am I missing anything any products that I should be looking into? 2. Are any of these apps not well suited for the numbers of nodes I'm talking about (either over or under-powered for 700-2000 nodes)? 3. What's going to be the easiest learning curve/least administrative overhead? Thanks, -- Jonathan, A+, MCSA, MCSE ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin Confidentiality Notice: This e-mail message, including attachments, is for the sole use of the intended recipient(s) and may contain confidential and privileged information. Any unauthorized review, use, disclosure, or distribution is prohibited. If you are not the intended recipient, please contact the sender by reply e-mail and destroy all copies of the original message. ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin
RE: Patch management, revisited
Just a note, SCCM supports Branch Distribution Points. They can also be any PC (workstation) or server with an agent. Regards, Michael B. Smith Consultant and Exchange MVP http://TheEssentialExchange.com From: Tom Miller [mailto:tmil...@hnncsb.org] Sent: Friday, February 04, 2011 1:58 PM To: NT System Admin Issues Subject: Re: Patch management, revisited SCCM works very well if you have the time and staff to dedicate to it. I have about 1,000 PCs/laptops here and tried SCCM, but never had the time to dedicate to it. And it was a real a pain to manage when you have limited time. But, it can be a great product and has flexibility. I wasn't willing to hire a staff member just for SCCM for our size agency, so I decided to try the KBox (Kace, now owned by Dell). I can tell you the KBox is *so* easy to use. I spent maybe a week setting everything up the way I wanted, and now it pretty much runs on automatic. If you can do it in SCCM, you can probably do it with KBox, too. I use it for patching, inventorying, application distribution, file replication, and other odds and end. Unlike SCCM (maybe this has changed though) you don't need a server at each site for a replication point. That can be any PC or server with an agent on it. We have many sites with 1-5 PCs, so I just use one of them. KBox doesn't care about Pcs in AD or not. The KBox patches MS software, Java, Adobe products, and some A/V like Symantec and McAfee. There are videos on YouTube if you want to take a look at KBox. Look for KBoxbyKace. Just my comments, ignore if you wish. Jonathan ncm...@gmail.commailto:ncm...@gmail.com 2/4/2011 1:43 PM Ok, guys gals, I've sifted through the threads for the past year searching on patch management and SCCM, and not found exactly what I'm looking for... In my new gig, the team gets to choose what we will use to handle patches and updates, as there is nothing set in stone right now. Two options have been mentioned by the team: SCCM and Big Fix. I don't know anything about Big Fix, except hat they were just recently gobbled up by IBM and are now part of Tivoli. What I've heard about SCCM is that it is a bear to learn and manage. Right now we've got between 700 and 1,000 nodes (including servers, both virtual and physical), and potentially slated for continued growth. Some of the engineers have laptops that are NOT members of AD, and they run as local Admins. That is probably NOT going to change. Also, we may or may not be looking at needing to handle 3rd party updates as well. I've run WSUS, but only for a few hundred nodes, and really only for windows OS updates and nothing else. Finally, we need decent reporting tools that can provide us with compliance reports on where we stand with patch management. I've seen Shavlik, Kace/K-Box, WSUS, SCCM, GFI LANGuard all mentioned here... 1. Am I missing anything any products that I should be looking into? 2. Are any of these apps not well suited for the numbers of nodes I'm talking about (either over or under-powered for 700-2000 nodes)? 3. What's going to be the easiest learning curve/least administrative overhead? Thanks, -- Jonathan, A+, MCSA, MCSE ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin Confidentiality Notice: This e-mail message, including attachments, is for the sole use of the intended recipient(s) and may contain confidential and privileged information. Any unauthorized review, use, disclosure, or distribution is prohibited. If you are not the intended recipient, please contact the sender by reply e-mail and destroy all copies of the original message. ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin
Re: RE: Patch management, revisited
how does sccm handle clients that are not joined to active directory? Jonathan - Thumb typed from my HTC Droid Incredible (and yes, it really is) on the Verizon network. On Feb 4, 2011 2:02 PM, Michael B. Smith mich...@smithcons.com wrote: Just a note, SCCM supports Branch Distribution Points. They can also be any PC (workstation) or server with an agent. Regards, Michael B. Smith Consultant and Exchange MVP http://TheEssentialExchange.com From: Tom Miller [mailto:tmil...@hnncsb.org] Sent: Friday, February 04, 2011 1:58 PM To: NT System Admin Issues Subject: Re: Patch management, revisited SCCM works very well if you have the time and staff to dedicate to it. I have about 1,000 PCs/laptops here and tried SCCM, but never had the time to dedicate to it. And it was a real a pain to manage when you have limited time. But, it can be a great product and has flexibility. I wasn't willing to hire a staff member just for SCCM for our size agency, so I decided to try the KBox (Kace, now owned by Dell). I can tell you the KBox is *so* easy to use. I spent maybe a week setting everything up the way I wanted, and now it pretty much runs on automatic. If you can do it in SCCM, you can probably do it with KBox, too. I use it for patching, inventorying, application distribution, file replication, and other odds and end. Unlike SCCM (maybe this has changed though) you don't need a server at each site for a replication point. That can be any PC or server with an agent on it. We have many sites with 1-5 PCs, so I just use one of them. KBox doesn't care about Pcs in AD or not. The KBox patches MS software, Java, Adobe products, and some A/V like Symantec and McAfee. There are videos on YouTube if you want to take a look at KBox. Look for KBoxbyKace. Just my comments, ignore if you wish. Jonathan ncm...@gmail.commailto:ncm...@gmail.com 2/4/2011 1:43 PM Ok, guys gals, I've sifted through the threads for the past year searching on patch management and SCCM, and not found exactly what I'm looking for... In my new gig, the team gets to choose what we will use to handle patches and updates, as there is nothing set in stone right now. Two options have been mentioned by the team: SCCM and Big Fix. I don't know anything about Big Fix, except hat they were just recently gobbled up by IBM and are now part of Tivoli. What I've heard about SCCM is that it is a bear to learn and manage. Right now we've got between 700 and 1,000 nodes (including servers, both virtual and physical), and potentially slated for continued growth. Some of the engineers have laptops that are NOT members of AD, and they run as local Admins. That is probably NOT going to change. Also, we may or may not be looking at needing to handle 3rd party updates as well. I've run WSUS, but only for a few hundred nodes, and really only for windows OS updates and nothing else. Finally, we need decent reporting tools that can provide us with compliance reports on where we stand with patch management. I've seen Shavlik, Kace/K-Box, WSUS, SCCM, GFI LANGuard all mentioned here... 1. Am I missing anything any products that I should be looking into? 2. Are any of these apps not well suited for the numbers of nodes I'm talking about (either over or under-powered for 700-2000 nodes)? 3. What's going to be the easiest learning curve/least administrative overhead? Thanks, -- Jonathan, A+, MCSA, MCSE ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.commailto: listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin Confidentiality Notice: This e-mail message, including attachments, is for the sole use of the intended recipient(s) and may contain confidential and privileged information. Any unauthorized review, use, disclosure, or distribution is prohibited. If you are not the intended recipient, please contact the sender by reply e-mail and destroy all copies of the original message. ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.commailto: listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise
RE: Patch management, revisited
I stand corrected. It's been a while so I couldn't remember. Michael B. Smith mich...@smithcons.com 2/4/2011 2:01 PM Just a note, SCCM supports Branch Distribution Points. They can also be any PC (workstation) or server with an agent. Regards, Michael B. Smith Consultant and Exchange MVP http://TheEssentialExchange.com From: Tom Miller [mailto:tmil...@hnncsb.org] Sent: Friday, February 04, 2011 1:58 PM To: NT System Admin Issues Subject: Re: Patch management, revisited SCCM works very well if you have the time and staff to dedicate to it. I have about 1,000 PCs/laptops here and tried SCCM, but never had the time to dedicate to it. And it was a real a pain to manage when you have limited time. But, it can be a great product and has flexibility. I wasn't willing to hire a staff member just for SCCM for our size agency, so I decided to try the KBox (Kace, now owned by Dell). I can tell you the KBox is *so* easy to use. I spent maybe a week setting everything up the way I wanted, and now it pretty much runs on automatic. If you can do it in SCCM, you can probably do it with KBox, too. I use it for patching, inventorying, application distribution, file replication, and other odds and end. Unlike SCCM (maybe this has changed though) you don't need a server at each site for a replication point. That can be any PC or server with an agent on it. We have many sites with 1-5 PCs, so I just use one of them. KBox doesn't care about Pcs in AD or not. The KBox patches MS software, Java, Adobe products, and some A/V like Symantec and McAfee. There are videos on YouTube if you want to take a look at KBox. Look for KBoxbyKace. Just my comments, ignore if you wish. Jonathan ncm...@gmail.com 2/4/2011 1:43 PM Ok, guys gals, I've sifted through the threads for the past year searching on patch management and SCCM, and not found exactly what I'm looking for... In my new gig, the team gets to choose what we will use to handle patches and updates, as there is nothing set in stone right now. Two options have been mentioned by the team: SCCM and Big Fix. I don't know anything about Big Fix, except hat they were just recently gobbled up by IBM and are now part of Tivoli. What I've heard about SCCM is that it is a bear to learn and manage. Right now we've got between 700 and 1,000 nodes (including servers, both virtual and physical), and potentially slated for continued growth. Some of the engineers have laptops that are NOT members of AD, and they run as local Admins. That is probably NOT going to change. Also, we may or may not be looking at needing to handle 3rd party updates as well. I've run WSUS, but only for a few hundred nodes, and really only for windows OS updates and nothing else. Finally, we need decent reporting tools that can provide us with compliance reports on where we stand with patch management. I've seen Shavlik, Kace/K-Box, WSUS, SCCM, GFI LANGuard all mentioned here... 1. Am I missing anything any products that I should be looking into? 2. Are any of these apps not well suited for the numbers of nodes I'm talking about (either over or under-powered for 700-2000 nodes)? 3. What's going to be the easiest learning curve/least administrative overhead? Thanks, -- Jonathan, A+, MCSA, MCSE ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin Confidentiality Notice: This e-mail message, including attachments, is for the sole use of the intended recipient(s) and may contain confidential and privileged information. Any unauthorized review, use, disclosure, or distribution is prohibited. If you are not the intended recipient, please contact the sender by reply e-mail and destroy all copies of the original message. ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin Confidentiality Notice: This e-mail message, including attachments, is for the sole use of the intended recipient(s) and may contain confidential and privileged information. Any unauthorized review, use, disclosure, or distribution is prohibited. If you are not the intended recipient, please
RE: RE: Patch management, revisited
It handles them just fine. Deploying the agents is a little tougher than deploying agents to computers that are in AD, because you have to know an admin password to install the agent. Alternately, the agent can be pulled to non-AD computers instead of pushed (and in that case, the SCCM administrator would typically be required to approve the device before it's allowed to become a member of the deployment, although that can be overridden). Regards, Michael B. Smith Consultant and Exchange MVP http://TheEssentialExchange.com From: Jonathan [mailto:ncm...@gmail.com] Sent: Friday, February 04, 2011 2:08 PM To: NT System Admin Issues Subject: Re: RE: Patch management, revisited how does sccm handle clients that are not joined to active directory? Jonathan - Thumb typed from my HTC Droid Incredible (and yes, it really is) on the Verizon network. On Feb 4, 2011 2:02 PM, Michael B. Smith mich...@smithcons.commailto:mich...@smithcons.com wrote: Just a note, SCCM supports Branch Distribution Points. They can also be any PC (workstation) or server with an agent. Regards, Michael B. Smith Consultant and Exchange MVP http://TheEssentialExchange.com From: Tom Miller [mailto:tmil...@hnncsb.orgmailto:tmil...@hnncsb.org] Sent: Friday, February 04, 2011 1:58 PM To: NT System Admin Issues Subject: Re: Patch management, revisited SCCM works very well if you have the time and staff to dedicate to it. I have about 1,000 PCs/laptops here and tried SCCM, but never had the time to dedicate to it. And it was a real a pain to manage when you have limited time. But, it can be a great product and has flexibility. I wasn't willing to hire a staff member just for SCCM for our size agency, so I decided to try the KBox (Kace, now owned by Dell). I can tell you the KBox is *so* easy to use. I spent maybe a week setting everything up the way I wanted, and now it pretty much runs on automatic. If you can do it in SCCM, you can probably do it with KBox, too. I use it for patching, inventorying, application distribution, file replication, and other odds and end. Unlike SCCM (maybe this has changed though) you don't need a server at each site for a replication point. That can be any PC or server with an agent on it. We have many sites with 1-5 PCs, so I just use one of them. KBox doesn't care about Pcs in AD or not. The KBox patches MS software, Java, Adobe products, and some A/V like Symantec and McAfee. There are videos on YouTube if you want to take a look at KBox. Look for KBoxbyKace. Just my comments, ignore if you wish. Jonathan ncm...@gmail.commailto:ncm...@gmail.commailto:ncm...@gmail.commailto:ncm...@gmail.com 2/4/2011 1:43 PM Ok, guys gals, I've sifted through the threads for the past year searching on patch management and SCCM, and not found exactly what I'm looking for... In my new gig, the team gets to choose what we will use to handle patches and updates, as there is nothing set in stone right now. Two options have been mentioned by the team: SCCM and Big Fix. I don't know anything about Big Fix, except hat they were just recently gobbled up by IBM and are now part of Tivoli. What I've heard about SCCM is that it is a bear to learn and manage. Right now we've got between 700 and 1,000 nodes (including servers, both virtual and physical), and potentially slated for continued growth. Some of the engineers have laptops that are NOT members of AD, and they run as local Admins. That is probably NOT going to change. Also, we may or may not be looking at needing to handle 3rd party updates as well. I've run WSUS, but only for a few hundred nodes, and really only for windows OS updates and nothing else. Finally, we need decent reporting tools that can provide us with compliance reports on where we stand with patch management. I've seen Shavlik, Kace/K-Box, WSUS, SCCM, GFI LANGuard all mentioned here... 1. Am I missing anything any products that I should be looking into? 2. Are any of these apps not well suited for the numbers of nodes I'm talking about (either over or under-powered for 700-2000 nodes)? 3. What's going to be the easiest learning curve/least administrative overhead? Thanks, -- Jonathan, A+, MCSA, MCSE ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin Confidentiality Notice: This e-mail message, including attachments, is for the sole use of the intended recipient(s) and may contain confidential and privileged information. Any unauthorized review, use, disclosure, or distribution is prohibited
RE: Patch management, revisited
Not correcting - just clarifying. :) Regards, Michael B. Smith Consultant and Exchange MVP http://TheEssentialExchange.com From: Tom Miller [mailto:tmil...@hnncsb.org] Sent: Friday, February 04, 2011 2:11 PM To: NT System Admin Issues Subject: RE: Patch management, revisited I stand corrected. It's been a while so I couldn't remember. Michael B. Smith mich...@smithcons.commailto:mich...@smithcons.com 2/4/2011 2:01 PM Just a note, SCCM supports Branch Distribution Points. They can also be any PC (workstation) or server with an agent. Regards, Michael B. Smith Consultant and Exchange MVP http://TheEssentialExchange.com From: Tom Miller [mailto:tmil...@hnncsb.org] Sent: Friday, February 04, 2011 1:58 PM To: NT System Admin Issues Subject: Re: Patch management, revisited SCCM works very well if you have the time and staff to dedicate to it. I have about 1,000 PCs/laptops here and tried SCCM, but never had the time to dedicate to it. And it was a real a pain to manage when you have limited time. But, it can be a great product and has flexibility. I wasn't willing to hire a staff member just for SCCM for our size agency, so I decided to try the KBox (Kace, now owned by Dell). I can tell you the KBox is *so* easy to use. I spent maybe a week setting everything up the way I wanted, and now it pretty much runs on automatic. If you can do it in SCCM, you can probably do it with KBox, too. I use it for patching, inventorying, application distribution, file replication, and other odds and end. Unlike SCCM (maybe this has changed though) you don't need a server at each site for a replication point. That can be any PC or server with an agent on it. We have many sites with 1-5 PCs, so I just use one of them. KBox doesn't care about Pcs in AD or not. The KBox patches MS software, Java, Adobe products, and some A/V like Symantec and McAfee. There are videos on YouTube if you want to take a look at KBox. Look for KBoxbyKace. Just my comments, ignore if you wish. Jonathan ncm...@gmail.commailto:ncm...@gmail.com 2/4/2011 1:43 PM Ok, guys gals, I've sifted through the threads for the past year searching on patch management and SCCM, and not found exactly what I'm looking for... In my new gig, the team gets to choose what we will use to handle patches and updates, as there is nothing set in stone right now. Two options have been mentioned by the team: SCCM and Big Fix. I don't know anything about Big Fix, except hat they were just recently gobbled up by IBM and are now part of Tivoli. What I've heard about SCCM is that it is a bear to learn and manage. Right now we've got between 700 and 1,000 nodes (including servers, both virtual and physical), and potentially slated for continued growth. Some of the engineers have laptops that are NOT members of AD, and they run as local Admins. That is probably NOT going to change. Also, we may or may not be looking at needing to handle 3rd party updates as well. I've run WSUS, but only for a few hundred nodes, and really only for windows OS updates and nothing else. Finally, we need decent reporting tools that can provide us with compliance reports on where we stand with patch management. I've seen Shavlik, Kace/K-Box, WSUS, SCCM, GFI LANGuard all mentioned here... 1. Am I missing anything any products that I should be looking into? 2. Are any of these apps not well suited for the numbers of nodes I'm talking about (either over or under-powered for 700-2000 nodes)? 3. What's going to be the easiest learning curve/least administrative overhead? Thanks, -- Jonathan, A+, MCSA, MCSE ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin
RE: Patch management, revisited
And, if you want to dump the hardware for a branch DP, you can use something like Nomad: http://www.1e.com/softwareproducts/nomadenterprise/index.aspx From: Tom Miller [mailto:tmil...@hnncsb.org] Sent: Friday, February 04, 2011 2:11 PM To: NT System Admin Issues Subject: RE: Patch management, revisited I stand corrected. It's been a while so I couldn't remember. Michael B. Smith mich...@smithcons.com 2/4/2011 2:01 PM Just a note, SCCM supports Branch Distribution Points. They can also be any PC (workstation) or server with an agent. Regards, Michael B. Smith Consultant and Exchange MVP http://TheEssentialExchange.com From: Tom Miller [mailto:tmil...@hnncsb.org] Sent: Friday, February 04, 2011 1:58 PM To: NT System Admin Issues Subject: Re: Patch management, revisited SCCM works very well if you have the time and staff to dedicate to it. I have about 1,000 PCs/laptops here and tried SCCM, but never had the time to dedicate to it. And it was a real a pain to manage when you have limited time. But, it can be a great product and has flexibility. I wasn't willing to hire a staff member just for SCCM for our size agency, so I decided to try the KBox (Kace, now owned by Dell). I can tell you the KBox is *so* easy to use. I spent maybe a week setting everything up the way I wanted, and now it pretty much runs on automatic. If you can do it in SCCM, you can probably do it with KBox, too. I use it for patching, inventorying, application distribution, file replication, and other odds and end. Unlike SCCM (maybe this has changed though) you don't need a server at each site for a replication point. That can be any PC or server with an agent on it. We have many sites with 1-5 PCs, so I just use one of them. KBox doesn't care about Pcs in AD or not. The KBox patches MS software, Java, Adobe products, and some A/V like Symantec and McAfee. There are videos on YouTube if you want to take a look at KBox. Look for KBoxbyKace. Just my comments, ignore if you wish. Jonathan ncm...@gmail.com 2/4/2011 1:43 PM Ok, guys gals, I've sifted through the threads for the past year searching on patch management and SCCM, and not found exactly what I'm looking for... In my new gig, the team gets to choose what we will use to handle patches and updates, as there is nothing set in stone right now. Two options have been mentioned by the team: SCCM and Big Fix. I don't know anything about Big Fix, except hat they were just recently gobbled up by IBM and are now part of Tivoli. What I've heard about SCCM is that it is a bear to learn and manage. Right now we've got between 700 and 1,000 nodes (including servers, both virtual and physical), and potentially slated for continued growth. Some of the engineers have laptops that are NOT members of AD, and they run as local Admins. That is probably NOT going to change. Also, we may or may not be looking at needing to handle 3rd party updates as well. I've run WSUS, but only for a few hundred nodes, and really only for windows OS updates and nothing else. Finally, we need decent reporting tools that can provide us with compliance reports on where we stand with patch management. I've seen Shavlik, Kace/K-Box, WSUS, SCCM, GFI LANGuard all mentioned here... 1. Am I missing anything any products that I should be looking into? 2. Are any of these apps not well suited for the numbers of nodes I'm talking about (either over or under-powered for 700-2000 nodes)? 3. What's going to be the easiest learning curve/least administrative overhead? Thanks, -- Jonathan, A+, MCSA, MCSE ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin Confidentiality Notice: This e-mail message, including attachments, is for the sole use of the intended recipient(s) and may contain confidential and privileged information. Any unauthorized review, use, disclosure, or distribution is prohibited. If you are not the intended recipient, please contact the sender by reply e-mail and destroy all copies of the original message. ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin Confidentiality
Re: RE: Patch management, revisited
SCCM works very well if you have the time and staff to dedicate to it. I have about 1,000 PCs/ laptops here and tried SCCM, but never had the time to dedicate to it. And it was a real a pain to manage when you have limited time. But, it can be a great product and has flexibility. I wasn't willing to hire a staff member just for SCCM. This is one of the things that concerns meadministrative overhead is not a luxury we've got. MBS says it just runs once it is setup So, what's it really take to get it running and keep it that way? Also, I now know that we're initially focusing on strictly MS updates. Once MS patches are under reasonable control, we may look at 3rd party apps. Jonathan - Thumb typed from my HTC Droid Incredible (and yes, it really is) on the Verizon network. On Feb 4, 2011 2:24 PM, Rod Trent rodtr...@myitforum.com wrote: ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin
Re: RE: Patch management, revisited
Also, if we wanted to start with WSUS and then migrate to SCCM down the road, is that realistically feasible? Jonathan - Thumb typed from my HTC Droid Incredible (and yes, it really is) on the Verizon network. On Feb 4, 2011 2:36 PM, Jonathan ncm...@gmail.com wrote: SCCM works very well if you have the time and staff to dedicate to it. I have about 1,000 PCs/ laptops here and tried SCCM, but never had the time to dedicate to it. And it was a real a pain to manage when you have limited time. But, it can be a great product and has flexibility. I wasn't willing to hire a staff member just for SCCM. This is one of the things that concerns meadministrative overhead is not a luxury we've got. MBS says it just runs once it is setup So, what's it really take to get it running and keep it that way? Also, I now know that we're initially focusing on strictly MS updates. Once MS patches are under reasonable control, we may look at 3rd party apps. Jonathan - Thumb typed from my HTC Droid Incredible (and yes, it really is) on the Verizon network. On Feb 4, 2011 2:24 PM, Rod Trent rodtr...@myitforum.com wrote: ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin
RE: RE: Patch management, revisited
Sure. Regards, Michael B. Smith Consultant and Exchange MVP http://TheEssentialExchange.com From: Jonathan [mailto:ncm...@gmail.com] Sent: Friday, February 04, 2011 2:40 PM To: NT System Admin Issues Subject: Re: RE: Patch management, revisited Also, if we wanted to start with WSUS and then migrate to SCCM down the road, is that realistically feasible? Jonathan - Thumb typed from my HTC Droid Incredible (and yes, it really is) on the Verizon network. On Feb 4, 2011 2:36 PM, Jonathan ncm...@gmail.commailto:ncm...@gmail.com wrote: SCCM works very well if you have the time and staff to dedicate to it. I have about 1,000 PCs/ laptops here and tried SCCM, but never had the time to dedicate to it. And it was a real a pain to manage when you have limited time. But, it can be a great product and has flexibility. I wasn't willing to hire a staff member just for SCCM. This is one of the things that concerns meadministrative overhead is not a luxury we've got. MBS says it just runs once it is setup So, what's it really take to get it running and keep it that way? Also, I now know that we're initially focusing on strictly MS updates. Once MS patches are under reasonable control, we may look at 3rd party apps. Jonathan - Thumb typed from my HTC Droid Incredible (and yes, it really is) on the Verizon network. On Feb 4, 2011 2:24 PM, Rod Trent rodtr...@myitforum.commailto:rodtr...@myitforum.com wrote: ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin
RE: RE: Patch management, revisited
So, I wouldn't do anything without a few hours of discovery. But if you are just going to use it for patch management, say three days (worst case) to set it up and train someone how to deal with patches. Ongoing support is really no different than WSUS from my perspective. Regards, Michael B. Smith Consultant and Exchange MVP http://TheEssentialExchange.com From: Jonathan [mailto:ncm...@gmail.com] Sent: Friday, February 04, 2011 2:36 PM To: NT System Admin Issues Subject: Re: RE: Patch management, revisited SCCM works very well if you have the time and staff to dedicate to it. I have about 1,000 PCs/ laptops here and tried SCCM, but never had the time to dedicate to it. And it was a real a pain to manage when you have limited time. But, it can be a great product and has flexibility. I wasn't willing to hire a staff member just for SCCM. This is one of the things that concerns meadministrative overhead is not a luxury we've got. MBS says it just runs once it is setup So, what's it really take to get it running and keep it that way? Also, I now know that we're initially focusing on strictly MS updates. Once MS patches are under reasonable control, we may look at 3rd party apps. Jonathan - Thumb typed from my HTC Droid Incredible (and yes, it really is) on the Verizon network. On Feb 4, 2011 2:24 PM, Rod Trent rodtr...@myitforum.commailto:rodtr...@myitforum.com wrote: ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin
RE: RE: Patch management, revisited
One thing I am doing with Systems Center is going slow...just doing a part at a time starting with the most important part. And there are a boatload of good webinars and labs on MS's website about it that have been extremely helpful. From: Michael B. Smith [mailto:mich...@smithcons.com] Sent: Friday, February 04, 2011 2:43 PM To: NT System Admin Issues Subject: RE: RE: Patch management, revisited Sure. Regards, Michael B. Smith Consultant and Exchange MVP http://TheEssentialExchange.com From: Jonathan [mailto:ncm...@gmail.com] Sent: Friday, February 04, 2011 2:40 PM To: NT System Admin Issues Subject: Re: RE: Patch management, revisited Also, if we wanted to start with WSUS and then migrate to SCCM down the road, is that realistically feasible? Jonathan - Thumb typed from my HTC Droid Incredible (and yes, it really is) on the Verizon network. On Feb 4, 2011 2:36 PM, Jonathan ncm...@gmail.commailto:ncm...@gmail.com wrote: SCCM works very well if you have the time and staff to dedicate to it. I have about 1,000 PCs/ laptops here and tried SCCM, but never had the time to dedicate to it. And it was a real a pain to manage when you have limited time. But, it can be a great product and has flexibility. I wasn't willing to hire a staff member just for SCCM. This is one of the things that concerns meadministrative overhead is not a luxury we've got. MBS says it just runs once it is setup So, what's it really take to get it running and keep it that way? Also, I now know that we're initially focusing on strictly MS updates. Once MS patches are under reasonable control, we may look at 3rd party apps. Jonathan - Thumb typed from my HTC Droid Incredible (and yes, it really is) on the Verizon network. On Feb 4, 2011 2:24 PM, Rod Trent rodtr...@myitforum.commailto:rodtr...@myitforum.com wrote: ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin
RE: Patch management, revisited
You teach SCCM classes? Good to know, because I can't even get it to install - it dies at Setup failed to install SMS provider: error which IIRC means I need to do some setspn thing... Dave From: Michael B. Smith [mailto:mich...@smithcons.com]mailto:[mailto:mich...@smithcons.com] Sent: Friday, February 04, 2011 10:50 AM To: NT System Admin Issues Subject: RE: Patch management, revisited If you don't do third party patches, SCCM is _almost_ exactly like WSUS. It is based on the WSUS engine as a matter of fact, and you have to install WSUS on the Software Update Point. :) Doing the SCCM installation can be a little finicky; but once you set it up - it just RUNS. The challenge with SCCM in my eyes is that it can do SO MUCH, that unless you break it up into pieces (which is what I do when I teach classes on it), it can seem utterly overwhelming. Regards, Michael B. Smith Consultant and Exchange MVP http://TheEssentialExchange.com From: Jonathan [mailto:ncm...@gmail.com]mailto:[mailto:ncm...@gmail.com] Sent: Friday, February 04, 2011 1:43 PM To: NT System Admin Issues Subject: Patch management, revisited Ok, guys gals, I've sifted through the threads for the past year searching on patch management and SCCM, and not found exactly what I'm looking for... In my new gig, the team gets to choose what we will use to handle patches and updates, as there is nothing set in stone right now. Two options have been mentioned by the team: SCCM and Big Fix. I don't know anything about Big Fix, except hat they were just recently gobbled up by IBM and are now part of Tivoli. What I've heard about SCCM is that it is a bear to learn and manage. Right now we've got between 700 and 1,000 nodes (including servers, both virtual and physical), and potentially slated for continued growth. Some of the engineers have laptops that are NOT members of AD, and they run as local Admins. That is probably NOT going to change. Also, we may or may not be looking at needing to handle 3rd party updates as well. I've run WSUS, but only for a few hundred nodes, and really only for windows OS updates and nothing else. Finally, we need decent reporting tools that can provide us with compliance reports on where we stand with patch management. I've seen Shavlik, Kace/K-Box, WSUS, SCCM, GFI LANGuard all mentioned here... 1. Am I missing anything any products that I should be looking into? 2. Are any of these apps not well suited for the numbers of nodes I'm talking about (either over or under-powered for 700-2000 nodes)? 3. What's going to be the easiest learning curve/least administrative overhead? Thanks, -- Jonathan, A+, MCSA, MCSE ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin
RE: Patch management, revisited
Like I said - it can be a little finicky to install. :) Regards, Michael B. Smith Consultant and Exchange MVP http://TheEssentialExchange.com From: David Lum [mailto:david@nwea.org] Sent: Friday, February 04, 2011 3:32 PM To: NT System Admin Issues Subject: RE: Patch management, revisited You teach SCCM classes? Good to know, because I can't even get it to install - it dies at Setup failed to install SMS provider: error which IIRC means I need to do some setspn thing... Dave From: Michael B. Smith [mailto:mich...@smithcons.com]mailto:[mailto:mich...@smithcons.com] Sent: Friday, February 04, 2011 10:50 AM To: NT System Admin Issues Subject: RE: Patch management, revisited If you don't do third party patches, SCCM is _almost_ exactly like WSUS. It is based on the WSUS engine as a matter of fact, and you have to install WSUS on the Software Update Point. :) Doing the SCCM installation can be a little finicky; but once you set it up - it just RUNS. The challenge with SCCM in my eyes is that it can do SO MUCH, that unless you break it up into pieces (which is what I do when I teach classes on it), it can seem utterly overwhelming. Regards, Michael B. Smith Consultant and Exchange MVP http://TheEssentialExchange.com From: Jonathan [mailto:ncm...@gmail.com]mailto:[mailto:ncm...@gmail.com] Sent: Friday, February 04, 2011 1:43 PM To: NT System Admin Issues Subject: Patch management, revisited Ok, guys gals, I've sifted through the threads for the past year searching on patch management and SCCM, and not found exactly what I'm looking for... In my new gig, the team gets to choose what we will use to handle patches and updates, as there is nothing set in stone right now. Two options have been mentioned by the team: SCCM and Big Fix. I don't know anything about Big Fix, except hat they were just recently gobbled up by IBM and are now part of Tivoli. What I've heard about SCCM is that it is a bear to learn and manage. Right now we've got between 700 and 1,000 nodes (including servers, both virtual and physical), and potentially slated for continued growth. Some of the engineers have laptops that are NOT members of AD, and they run as local Admins. That is probably NOT going to change. Also, we may or may not be looking at needing to handle 3rd party updates as well. I've run WSUS, but only for a few hundred nodes, and really only for windows OS updates and nothing else. Finally, we need decent reporting tools that can provide us with compliance reports on where we stand with patch management. I've seen Shavlik, Kace/K-Box, WSUS, SCCM, GFI LANGuard all mentioned here... 1. Am I missing anything any products that I should be looking into? 2. Are any of these apps not well suited for the numbers of nodes I'm talking about (either over or under-powered for 700-2000 nodes)? 3. What's going to be the easiest learning curve/least administrative overhead? Thanks, -- Jonathan, A+, MCSA, MCSE ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin
RE: Patch management, revisited
http://social.technet.microsoft.com/forums/en-US/configmgrsetup/thread/d06a6 b81-68d0-466a-8382-ceb7fb0bb8c3/ From: Michael B. Smith [mailto:mich...@smithcons.com] Sent: Friday, February 04, 2011 3:40 PM To: NT System Admin Issues Subject: RE: Patch management, revisited Like I said - it can be a little finicky to install. J Regards, Michael B. Smith Consultant and Exchange MVP http://TheEssentialExchange.com From: David Lum [mailto:david@nwea.org] Sent: Friday, February 04, 2011 3:32 PM To: NT System Admin Issues Subject: RE: Patch management, revisited You teach SCCM classes? Good to know, because I can't even get it to install - it dies at Setup failed to install SMS provider: error which IIRC means I need to do some setspn thing. Dave From: Michael B. Smith [mailto:mich...@smithcons.com] Sent: Friday, February 04, 2011 10:50 AM To: NT System Admin Issues Subject: RE: Patch management, revisited If you don't do third party patches, SCCM is _almost_ exactly like WSUS. It is based on the WSUS engine as a matter of fact, and you have to install WSUS on the Software Update Point. J Doing the SCCM installation can be a little finicky; but once you set it up - it just RUNS. The challenge with SCCM in my eyes is that it can do SO MUCH, that unless you break it up into pieces (which is what I do when I teach classes on it), it can seem utterly overwhelming. Regards, Michael B. Smith Consultant and Exchange MVP http://TheEssentialExchange.com From: Jonathan [mailto:ncm...@gmail.com] Sent: Friday, February 04, 2011 1:43 PM To: NT System Admin Issues Subject: Patch management, revisited Ok, guys gals, I've sifted through the threads for the past year searching on patch management and SCCM, and not found exactly what I'm looking for... In my new gig, the team gets to choose what we will use to handle patches and updates, as there is nothing set in stone right now. Two options have been mentioned by the team: SCCM and Big Fix. I don't know anything about Big Fix, except hat they were just recently gobbled up by IBM and are now part of Tivoli. What I've heard about SCCM is that it is a bear to learn and manage. Right now we've got between 700 and 1,000 nodes (including servers, both virtual and physical), and potentially slated for continued growth. Some of the engineers have laptops that are NOT members of AD, and they run as local Admins. That is probably NOT going to change. Also, we may or may not be looking at needing to handle 3rd party updates as well. I've run WSUS, but only for a few hundred nodes, and really only for windows OS updates and nothing else. Finally, we need decent reporting tools that can provide us with compliance reports on where we stand with patch management. I've seen Shavlik, Kace/K-Box, WSUS, SCCM, GFI LANGuard all mentioned here... 1. Am I missing anything any products that I should be looking into? 2. Are any of these apps not well suited for the numbers of nodes I'm talking about (either over or under-powered for 700-2000 nodes)? 3. What's going to be the easiest learning curve/least administrative overhead? Thanks, -- Jonathan, A+, MCSA, MCSE ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin
RE: Patch management, revisited
It actually made me feel better when I saw you post that! I general I consider myself reasonable savvy, but when I tried to install SCCM and got that and couldn't resolve it in the 20 mins I was giving to it. After our Exchange outsourcing this weekend I am hoping to get back to SCCM and upgrade our old SMS environment. Dave From: Michael B. Smith [mailto:mich...@smithcons.com] Sent: Friday, February 04, 2011 12:40 PM To: NT System Admin Issues Subject: RE: Patch management, revisited Like I said - it can be a little finicky to install. :) Regards, Michael B. Smith Consultant and Exchange MVP http://TheEssentialExchange.com From: David Lum [mailto:david@nwea.org] Sent: Friday, February 04, 2011 3:32 PM To: NT System Admin Issues Subject: RE: Patch management, revisited You teach SCCM classes? Good to know, because I can't even get it to install - it dies at Setup failed to install SMS provider: error which IIRC means I need to do some setspn thing... Dave From: Michael B. Smith [mailto:mich...@smithcons.com]mailto:[mailto:mich...@smithcons.com] Sent: Friday, February 04, 2011 10:50 AM To: NT System Admin Issues Subject: RE: Patch management, revisited If you don't do third party patches, SCCM is _almost_ exactly like WSUS. It is based on the WSUS engine as a matter of fact, and you have to install WSUS on the Software Update Point. :) Doing the SCCM installation can be a little finicky; but once you set it up - it just RUNS. The challenge with SCCM in my eyes is that it can do SO MUCH, that unless you break it up into pieces (which is what I do when I teach classes on it), it can seem utterly overwhelming. Regards, Michael B. Smith Consultant and Exchange MVP http://TheEssentialExchange.com From: Jonathan [mailto:ncm...@gmail.com]mailto:[mailto:ncm...@gmail.com] Sent: Friday, February 04, 2011 1:43 PM To: NT System Admin Issues Subject: Patch management, revisited Ok, guys gals, I've sifted through the threads for the past year searching on patch management and SCCM, and not found exactly what I'm looking for... In my new gig, the team gets to choose what we will use to handle patches and updates, as there is nothing set in stone right now. Two options have been mentioned by the team: SCCM and Big Fix. I don't know anything about Big Fix, except hat they were just recently gobbled up by IBM and are now part of Tivoli. What I've heard about SCCM is that it is a bear to learn and manage. Right now we've got between 700 and 1,000 nodes (including servers, both virtual and physical), and potentially slated for continued growth. Some of the engineers have laptops that are NOT members of AD, and they run as local Admins. That is probably NOT going to change. Also, we may or may not be looking at needing to handle 3rd party updates as well. I've run WSUS, but only for a few hundred nodes, and really only for windows OS updates and nothing else. Finally, we need decent reporting tools that can provide us with compliance reports on where we stand with patch management. I've seen Shavlik, Kace/K-Box, WSUS, SCCM, GFI LANGuard all mentioned here... 1. Am I missing anything any products that I should be looking into? 2. Are any of these apps not well suited for the numbers of nodes I'm talking about (either over or under-powered for 700-2000 nodes)? 3. What's going to be the easiest learning curve/least administrative overhead? Thanks, -- Jonathan, A+, MCSA, MCSE ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http
RE: Patch management, revisited
And there ya go. Regards, Michael B. Smith Consultant and Exchange MVP http://TheEssentialExchange.com From: Rod Trent [mailto:rodtr...@myitforum.com] Sent: Friday, February 04, 2011 3:53 PM To: NT System Admin Issues Subject: RE: Patch management, revisited http://social.technet.microsoft.com/forums/en-US/configmgrsetup/thread/d06a6b81-68d0-466a-8382-ceb7fb0bb8c3/ From: Michael B. Smith [mailto:mich...@smithcons.com] Sent: Friday, February 04, 2011 3:40 PM To: NT System Admin Issues Subject: RE: Patch management, revisited Like I said - it can be a little finicky to install. :) Regards, Michael B. Smith Consultant and Exchange MVP http://TheEssentialExchange.com From: David Lum [mailto:david@nwea.org] Sent: Friday, February 04, 2011 3:32 PM To: NT System Admin Issues Subject: RE: Patch management, revisited You teach SCCM classes? Good to know, because I can't even get it to install - it dies at Setup failed to install SMS provider: error which IIRC means I need to do some setspn thing... Dave From: Michael B. Smith [mailto:mich...@smithcons.com]mailto:[mailto:mich...@smithcons.com] Sent: Friday, February 04, 2011 10:50 AM To: NT System Admin Issues Subject: RE: Patch management, revisited If you don't do third party patches, SCCM is _almost_ exactly like WSUS. It is based on the WSUS engine as a matter of fact, and you have to install WSUS on the Software Update Point. :) Doing the SCCM installation can be a little finicky; but once you set it up - it just RUNS. The challenge with SCCM in my eyes is that it can do SO MUCH, that unless you break it up into pieces (which is what I do when I teach classes on it), it can seem utterly overwhelming. Regards, Michael B. Smith Consultant and Exchange MVP http://TheEssentialExchange.com From: Jonathan [mailto:ncm...@gmail.com]mailto:[mailto:ncm...@gmail.com] Sent: Friday, February 04, 2011 1:43 PM To: NT System Admin Issues Subject: Patch management, revisited Ok, guys gals, I've sifted through the threads for the past year searching on patch management and SCCM, and not found exactly what I'm looking for... In my new gig, the team gets to choose what we will use to handle patches and updates, as there is nothing set in stone right now. Two options have been mentioned by the team: SCCM and Big Fix. I don't know anything about Big Fix, except hat they were just recently gobbled up by IBM and are now part of Tivoli. What I've heard about SCCM is that it is a bear to learn and manage. Right now we've got between 700 and 1,000 nodes (including servers, both virtual and physical), and potentially slated for continued growth. Some of the engineers have laptops that are NOT members of AD, and they run as local Admins. That is probably NOT going to change. Also, we may or may not be looking at needing to handle 3rd party updates as well. I've run WSUS, but only for a few hundred nodes, and really only for windows OS updates and nothing else. Finally, we need decent reporting tools that can provide us with compliance reports on where we stand with patch management. I've seen Shavlik, Kace/K-Box, WSUS, SCCM, GFI LANGuard all mentioned here... 1. Am I missing anything any products that I should be looking into? 2. Are any of these apps not well suited for the numbers of nodes I'm talking about (either over or under-powered for 700-2000 nodes)? 3. What's going to be the easiest learning curve/least administrative overhead? Thanks, -- Jonathan, A+, MCSA, MCSE ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint
RE: Patch management, revisited
You are being too kind J That said, once up, the SCCM infrastructure is pretty solid. The continual struggle we have is with client health. -Malcolm From: Michael B. Smith [mailto:mich...@smithcons.com] Sent: Friday, February 04, 2011 14:40 To: NT System Admin Issues Subject: RE: Patch management, revisited Like I said - it can be a little finicky to install. J Regards, Michael B. Smith Consultant and Exchange MVP http://TheEssentialExchange.com From: David Lum [mailto:david@nwea.org] Sent: Friday, February 04, 2011 3:32 PM To: NT System Admin Issues Subject: RE: Patch management, revisited You teach SCCM classes? Good to know, because I can't even get it to install - it dies at Setup failed to install SMS provider: error which IIRC means I need to do some setspn thing. Dave From: Michael B. Smith [mailto:mich...@smithcons.com] Sent: Friday, February 04, 2011 10:50 AM To: NT System Admin Issues Subject: RE: Patch management, revisited If you don't do third party patches, SCCM is _almost_ exactly like WSUS. It is based on the WSUS engine as a matter of fact, and you have to install WSUS on the Software Update Point. J Doing the SCCM installation can be a little finicky; but once you set it up - it just RUNS. The challenge with SCCM in my eyes is that it can do SO MUCH, that unless you break it up into pieces (which is what I do when I teach classes on it), it can seem utterly overwhelming. Regards, Michael B. Smith Consultant and Exchange MVP http://TheEssentialExchange.com From: Jonathan [mailto:ncm...@gmail.com] Sent: Friday, February 04, 2011 1:43 PM To: NT System Admin Issues Subject: Patch management, revisited Ok, guys gals, I've sifted through the threads for the past year searching on patch management and SCCM, and not found exactly what I'm looking for... In my new gig, the team gets to choose what we will use to handle patches and updates, as there is nothing set in stone right now. Two options have been mentioned by the team: SCCM and Big Fix. I don't know anything about Big Fix, except hat they were just recently gobbled up by IBM and are now part of Tivoli. What I've heard about SCCM is that it is a bear to learn and manage. Right now we've got between 700 and 1,000 nodes (including servers, both virtual and physical), and potentially slated for continued growth. Some of the engineers have laptops that are NOT members of AD, and they run as local Admins. That is probably NOT going to change. Also, we may or may not be looking at needing to handle 3rd party updates as well. I've run WSUS, but only for a few hundred nodes, and really only for windows OS updates and nothing else. Finally, we need decent reporting tools that can provide us with compliance reports on where we stand with patch management. I've seen Shavlik, Kace/K-Box, WSUS, SCCM, GFI LANGuard all mentioned here... 1. Am I missing anything any products that I should be looking into? 2. Are any of these apps not well suited for the numbers of nodes I'm talking about (either over or under-powered for 700-2000 nodes)? 3. What's going to be the easiest learning curve/least administrative overhead? Thanks, -- Jonathan, A+, MCSA, MCSE ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin
RE: Patch management, revisited
There's a couple solutions for Client Health. Paul Thomsen (Microsoft IT) has a bunch of stuff on client health that should help: http://myitforum.com/cs2/blogs/pthomsen/ And, then, of course, WakeUp has client health built in: http://www.1e.com/softwareproducts/1ewakeup/index.aspx WakeUp eliminates close to 99% of client health issues. From: Malcolm Reitz [mailto:malcolm.re...@live.com] Sent: Friday, February 04, 2011 4:32 PM To: NT System Admin Issues Subject: RE: Patch management, revisited You are being too kind J That said, once up, the SCCM infrastructure is pretty solid. The continual struggle we have is with client health. -Malcolm From: Michael B. Smith [mailto:mich...@smithcons.com] Sent: Friday, February 04, 2011 14:40 To: NT System Admin Issues Subject: RE: Patch management, revisited Like I said - it can be a little finicky to install. J Regards, Michael B. Smith Consultant and Exchange MVP http://TheEssentialExchange.com From: David Lum [mailto:david@nwea.org] Sent: Friday, February 04, 2011 3:32 PM To: NT System Admin Issues Subject: RE: Patch management, revisited You teach SCCM classes? Good to know, because I can't even get it to install - it dies at Setup failed to install SMS provider: error which IIRC means I need to do some setspn thing. Dave From: Michael B. Smith [mailto:mich...@smithcons.com] Sent: Friday, February 04, 2011 10:50 AM To: NT System Admin Issues Subject: RE: Patch management, revisited If you don't do third party patches, SCCM is _almost_ exactly like WSUS. It is based on the WSUS engine as a matter of fact, and you have to install WSUS on the Software Update Point. J Doing the SCCM installation can be a little finicky; but once you set it up - it just RUNS. The challenge with SCCM in my eyes is that it can do SO MUCH, that unless you break it up into pieces (which is what I do when I teach classes on it), it can seem utterly overwhelming. Regards, Michael B. Smith Consultant and Exchange MVP http://TheEssentialExchange.com From: Jonathan [mailto:ncm...@gmail.com] Sent: Friday, February 04, 2011 1:43 PM To: NT System Admin Issues Subject: Patch management, revisited Ok, guys gals, I've sifted through the threads for the past year searching on patch management and SCCM, and not found exactly what I'm looking for... In my new gig, the team gets to choose what we will use to handle patches and updates, as there is nothing set in stone right now. Two options have been mentioned by the team: SCCM and Big Fix. I don't know anything about Big Fix, except hat they were just recently gobbled up by IBM and are now part of Tivoli. What I've heard about SCCM is that it is a bear to learn and manage. Right now we've got between 700 and 1,000 nodes (including servers, both virtual and physical), and potentially slated for continued growth. Some of the engineers have laptops that are NOT members of AD, and they run as local Admins. That is probably NOT going to change. Also, we may or may not be looking at needing to handle 3rd party updates as well. I've run WSUS, but only for a few hundred nodes, and really only for windows OS updates and nothing else. Finally, we need decent reporting tools that can provide us with compliance reports on where we stand with patch management. I've seen Shavlik, Kace/K-Box, WSUS, SCCM, GFI LANGuard all mentioned here... 1. Am I missing anything any products that I should be looking into? 2. Are any of these apps not well suited for the numbers of nodes I'm talking about (either over or under-powered for 700-2000 nodes)? 3. What's going to be the easiest learning curve/least administrative overhead? Thanks, -- Jonathan, A+, MCSA, MCSE ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email
RE: RE: Patch management, revisited
Do you ever run into any problems with SCCM clients where folks have done supernetting of AD Sites? Our SSCM guys are scared of it because they were told it could be problematic but we're tired of all the netlogon events we get on the DCs. We did an ADRAP and got dinged on it again this week and it came up again, the PFE said he didn't think it was a problem but could find articles in the internal KB/DLs where the SCCM team said worst case, it wasn't a supported configuration. I looked today and see the SCCM documentation team has even blogged about it. From: Michael B. Smith [mailto:mich...@smithcons.com] Sent: Friday, February 04, 2011 11:46 AM To: NT System Admin Issues Subject: RE: RE: Patch management, revisited So, I wouldn't do anything without a few hours of discovery. But if you are just going to use it for patch management, say three days (worst case) to set it up and train someone how to deal with patches. Ongoing support is really no different than WSUS from my perspective. Regards, Michael B. Smith Consultant and Exchange MVP http://TheEssentialExchange.com From: Jonathan [mailto:ncm...@gmail.com] Sent: Friday, February 04, 2011 2:36 PM To: NT System Admin Issues Subject: Re: RE: Patch management, revisited SCCM works very well if you have the time and staff to dedicate to it. I have about 1,000 PCs/ laptops here and tried SCCM, but never had the time to dedicate to it. And it was a real a pain to manage when you have limited time. But, it can be a great product and has flexibility. I wasn't willing to hire a staff member just for SCCM. This is one of the things that concerns meadministrative overhead is not a luxury we've got. MBS says it just runs once it is setup So, what's it really take to get it running and keep it that way? Also, I now know that we're initially focusing on strictly MS updates. Once MS patches are under reasonable control, we may look at 3rd party apps. Jonathan - Thumb typed from my HTC Droid Incredible (and yes, it really is) on the Verizon network. On Feb 4, 2011 2:24 PM, Rod Trent rodtr...@myitforum.commailto:rodtr...@myitforum.com wrote: ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin
RE: RE: Patch management, revisited
If you do supernetting then you should manually specify the SCCM site and you'll be fine. You can do that when you deploy the agent, either automatically or manually. (And it can be done with a registry key change and service restart on the client afterwards) (Specifying the site may be even a capability of the client utility. I can't remember off the top of my head, but it probably is.). But no, it isn't officially supported. Regards, Michael B. Smith Consultant and Exchange MVP http://TheEssentialExchange.com From: Free, Bob [mailto:r...@pge.com] Sent: Friday, February 04, 2011 4:50 PM To: NT System Admin Issues Subject: RE: RE: Patch management, revisited Do you ever run into any problems with SCCM clients where folks have done supernetting of AD Sites? Our SSCM guys are scared of it because they were told it could be problematic but we're tired of all the netlogon events we get on the DCs. We did an ADRAP and got dinged on it again this week and it came up again, the PFE said he didn't think it was a problem but could find articles in the internal KB/DLs where the SCCM team said worst case, it wasn't a supported configuration. I looked today and see the SCCM documentation team has even blogged about it. From: Michael B. Smith [mailto:mich...@smithcons.com] Sent: Friday, February 04, 2011 11:46 AM To: NT System Admin Issues Subject: RE: RE: Patch management, revisited So, I wouldn't do anything without a few hours of discovery. But if you are just going to use it for patch management, say three days (worst case) to set it up and train someone how to deal with patches. Ongoing support is really no different than WSUS from my perspective. Regards, Michael B. Smith Consultant and Exchange MVP http://TheEssentialExchange.com From: Jonathan [mailto:ncm...@gmail.com] Sent: Friday, February 04, 2011 2:36 PM To: NT System Admin Issues Subject: Re: RE: Patch management, revisited SCCM works very well if you have the time and staff to dedicate to it. I have about 1,000 PCs/ laptops here and tried SCCM, but never had the time to dedicate to it. And it was a real a pain to manage when you have limited time. But, it can be a great product and has flexibility. I wasn't willing to hire a staff member just for SCCM. This is one of the things that concerns meadministrative overhead is not a luxury we've got. MBS says it just runs once it is setup So, what's it really take to get it running and keep it that way? Also, I now know that we're initially focusing on strictly MS updates. Once MS patches are under reasonable control, we may look at 3rd party apps. Jonathan - Thumb typed from my HTC Droid Incredible (and yes, it really is) on the Verizon network. On Feb 4, 2011 2:24 PM, Rod Trent rodtr...@myitforum.commailto:rodtr...@myitforum.com wrote: ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin
Re: Patch Management
WSUS and SCCM 2007. We can't beat the license agreement our company has! On Thu, Oct 28, 2010 at 1:54 PM, Brumbaugh, Luke luke.brumba...@butlerschein.com wrote: Now that I have figured out how to update adobe. My next question is what do you guys use for patch management. What do you think of EminentWare for wsus? Is there something better? Luke L. Brumbaugh Network Engineer Butler Animal Health Supply Ph:(614) 659-1736 ** CONFIDENTIALITY NOTICE - The information transmitted in this message is intended only for the person or entity to which it is addressed and may contain confidential and/or privileged material. Any review, retransmission, dissemination or other use of this information by persons or entities other than the intended recipient is prohibited. If you received this in error, please contact the sender and destroy all copies of this document. Thank you. Butler Schein Animal Health ** ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin
RE: Patch Management
Shavlik. Haven't tried EminentWare. Dave From: Brumbaugh, Luke [mailto:luke.brumba...@butlerschein.com] Sent: Thursday, October 28, 2010 10:55 AM To: NT System Admin Issues Subject: Patch Management Now that I have figured out how to update adobe. My next question is what do you guys use for patch management. What do you think of EminentWare for wsus? Is there something better? Luke L. Brumbaugh Network Engineer Butler Animal Health Supply Ph:(614) 659-1736 ** CONFIDENTIALITY NOTICE - The information transmitted in this message is intended only for the person or entity to which it is addressed and may contain confidential and/or privileged material. Any review, retransmission, dissemination or other use of this information by persons or entities other than the intended recipient is prohibited. If you received this in error, please contact the sender and destroy all copies of this document. Thank you. Butler Schein Animal Health ** ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin
RE: Patch Management
+1 for Shavlik, working through the pain in V 7.6.0 at the moment, but its getting better, next step is getting the agents functioning as expected. Z Edward E. Ziots CISSP, Network +, Security + Network Engineer Lifespan Organization Email:ezi...@lifespan.org Cell:401-639-3505 From: David Lum [mailto:david@nwea.org] Sent: Thursday, October 28, 2010 2:24 PM To: NT System Admin Issues Subject: RE: Patch Management Shavlik. Haven't tried EminentWare. Dave From: Brumbaugh, Luke [mailto:luke.brumba...@butlerschein.com] Sent: Thursday, October 28, 2010 10:55 AM To: NT System Admin Issues Subject: Patch Management Now that I have figured out how to update adobe. My next question is what do you guys use for patch management. What do you think of EminentWare for wsus? Is there something better? Luke L. Brumbaugh Network Engineer Butler Animal Health Supply Ph:(614) 659-1736 ** CONFIDENTIALITY NOTICE - The information transmitted in this message is intended only for the person or entity to which it is addressed and may contain confidential and/or privileged material. Any review, retransmission, dissemination or other use of this information by persons or entities other than the intended recipient is prohibited. If you received this in error, please contact the sender and destroy all copies of this document. Thank you. Butler Schein Animal Health ** ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin
Re: Patch Management
kbox, but the appliance is also software distribution, remote control, inventorying, etc. Brumbaugh, Luke luke.brumba...@butlerschein.com 10/28/2010 1:54 PM Now that I have figured out how to update adobe. My next question is what do you guys use for patch management. What do you think of EminentWare for wsus? Is there something better? Luke L. Brumbaugh Network Engineer Butler Animal Health Supply Ph:(614) 659-1736 ** CONFIDENTIALITY NOTICE - The information transmitted in this message is intended only for the person or entity to which it is addressed and may contain confidential and/or privileged material. Any review, retransmission, dissemination or other use of this information by persons or entities other than the intended recipient is prohibited. If you received this in error, please contact the sender and destroy all copies of this document. Thank you. Butler Schein Animal Health ** ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin Confidentiality Notice: This e-mail message, including attachments, is for the sole use of the intended recipient(s) and may contain confidential and privileged information. Any unauthorized review, use, disclosure, or distribution is prohibited. If you are not the intended recipient, please contact the sender by reply e-mail and destroy all copies of the original message. ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin
RE: Patch Management
+1 From: david@nwea.org To: ntsysadmin@lyris.sunbelt-software.com Date: Thu, 28 Oct 2010 11:24:27 -0700 Subject: RE: Patch Management Shavlik. Haven’t tried EminentWare. Dave From: Brumbaugh, Luke [mailto:luke.brumba...@butlerschein.com] Sent: Thursday, October 28, 2010 10:55 AM To: NT System Admin Issues Subject: Patch Management Now that I have figured out how to update adobe. My next question is what do you guys use for patch management. What do you think of EminentWare for wsus? Is there something better? Luke L. Brumbaugh Network Engineer Butler Animal Health Supply Ph:(614) 659-1736 ** CONFIDENTIALITY NOTICE - The information transmitted in this message is intended only for the person or entity to which it is addressed and may contain confidential and/or privileged material. Any review, retransmission, dissemination or other use of this information by persons or entities other than the intended recipient is prohibited. If you received this in error, please contact the sender and destroy all copies of this document. Thank you. Butler Schein Animal Health ** ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin
Re: Patch Management
My first choice would be Kbox systems management appliance now from dell. There is no difference in pricing between agents for desktops or servers. Also gives you hardware/software inventory, application deployment, security compliance scanning, license compliance and a lot more. You can get it as a physical server or a VMWare appliance, but the price difference was negligible. Tightly integrated with appdeploy, they owned it before dell bought kace. They have a downloadable trial available. www.kace.com T typed slowly on HTC Desire On 28 Oct 2010 18:55, Brumbaugh, Luke luke.brumba...@butlerschein.com wrote: ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin
Re: Patch Management
I should start reading the full threads before replying :) Forgot to add that I was the patch management solution at my previous job, don't know what they use here yet. All application updates were via vb scripts that ran at shutdown, naturally I forgot to take copies before I left. T typed slowly on HTC Desire On 28 Oct 2010 20:01, Tom Miller tmil...@hnncsb.org wrote: kbox, but the appliance is also software distribution, remote control, inventorying, etc. Brumbaugh, Luke luke.brumba...@butlerschein.com 10/28/2010 1:54 PM Now that I have figured out how to update adobe. My next question is what do you guys use for patch management. What do you think of EminentWare for wsus? Is there something better? Luke L. Brumbaugh Network Engineer Butler Animal Health Supply Ph:(614) 659-1736 ** CONFIDENTIALITY NOTICE - The information transmitted in this message is intended only for the person or entity to which it is addressed and may contain confidential and/or privileged material. Any review, retransmission, dissemination or other use of this information by persons or entities other than the intended recipient is prohibited. If you received this in error, please contact the sender and destroy all copies of this document. Thank you. Butler Schein Animal Health ** ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin Confidentiality Notice: This e-mail message, including attachments, is for the sole use of the intended recipient(s) and may contain confidential and privileged information. Any unauthorized review, use, disclosure, or distribution is prohibited. If you are not the intended recipient, please contact the sender by reply e-mail and destroy all copies of the original message. ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin
RE: Patch Management - again
Exactly my point! Therefore it doesn't exist as it's not relevant unless it's used .. Having said that, no doubt MS would be clouted with some dumb legal action over cornering the market in patching or some other such BS, were the solution every successful and in widespread use .. a -Original Message- From: Phil Brutsche [mailto:p...@optimumdata.com] Sent: 15 June 2010 17:15 To: NT System Admin Issues Subject: Re: Patch Management - again It isn't. The WSUS engine is more than capable of distributing and automatically installing third-party updates - it's what's used in products like System Center Essentials for the task - and MS created System Center Updates Publisher (aka SCUP) so that admins can add the updates. Third parties who refuse to publish catalogs SCUP can use (like Adobe) are as much as fault as anyone else. SCUP links: http://technet.microsoft.com/en-us/library/bb531022.aspx http://www.microsoft.com/downloads/details.aspx?FamilyID=0446cce9-94a4-4 fb0-b335-e7516044063ddisplaylang=en On 6/15/2010 11:06 AM, Alan Davies wrote: And why is a solution like this missing from MS operating systems?? -- Phil Brutsche p...@optimumdata.com ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ WARNING: The information in this email and any attachments is confidential and may be legally privileged. If you are not the named addressee, you must not use, copy or disclose this email (including any attachments) or the information in it save to the named addressee nor take any action in reliance on it. If you receive this email or any attachments in error, please notify the sender immediately and then delete the same and any copies. CLS Services Ltd × Registered in England No 4132704 × Registered Office: Exchange Tower × One Harbour Exchange Square × London E14 9GE ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~
RE: Patch Management - again
-Original Message- From: Ben Scott [mailto:mailvor...@gmail.com] Subject: Re: Patch Management - again And even Win32 (NT/9x) didn't have anything approaching a common installer system until 2000 or so, and side-by-side DLL installs didn't show up until... what, Win XP? XP SP2? .NET was supposed to solve all these problems, but I haven't really seen that materialize. Even Microsoft publishes stuff that demands a particular release of the .NET Framework. :-( .NET Framework is design to allow multiple versions of the Framework to run side-by-side. Having a .NET application that requires a particular version isn't what it's designed to solve. Newer applications will require the functionality of newer versions of the framework. And newer versions may remove deprecated features, thus requiring an older version for older apps. Cheers Ken ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~
RE: Patch Management - again
And why is a solution like this missing from MS operating systems?? Well, because vendors with their own commercial interests (ie. spend as little as possible and agree on nothing with competitors) don't play well. If there were an open platform for plugging into a patch-updating type API, and all vendors were forced/coerced into using it, the world would be a better place. Well .. a bit anyway ;) Secunia PSI does a great job at telling you what you need, we just need something that translates that with vendor supported methods of actually scheduling and installing the damn updates! :( With Open Source .. people *usually* want to do the right thing. Different world. a P.S. Shavlik, Altiris, and a hundred other 3rd party solutions do non-MS patch release on the Windows platform in the enterprise. You just have to invest in hosting it, learning how to use it, deploying it, testing with it and integrating it into your change control procedures ... -Original Message- From: Crawford, Scott [mailto:crawfo...@evangel.edu] Sent: 11 June 2010 23:51 To: NT System Admin Issues Subject: RE: Patch Management - again Thanks very much for this. It's exactly the kind of info I was looking for. -Original Message- From: Ben Scott [mailto:mailvor...@gmail.com] Sent: Friday, June 11, 2010 5:26 PM To: NT System Admin Issues Subject: Re: Patch Management - again On Fri, Jun 11, 2010 at 5:37 PM, Crawford, Scott crawfo...@evangel.edu wrote: Our only non-Windows computers are running Linux, and Linux makes patch management ridiculously easy. I'm sure there's countless places I could find this information, but could you elaborate on that statement a bit? WARNING: The information in this email and any attachments is confidential and may be legally privileged. If you are not the named addressee, you must not use, copy or disclose this email (including any attachments) or the information in it save to the named addressee nor take any action in reliance on it. If you receive this email or any attachments in error, please notify the sender immediately and then delete the same and any copies. CLS Services Ltd × Registered in England No 4132704 × Registered Office: Exchange Tower × One Harbour Exchange Square × London E14 9GE ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~
RE: Patch Management - again
Speaking of Secunia...webinar on now... http://secunia.com/vulnerability_scanning/corporate/webinars/ -Original Message- From: Alan Davies [mailto:adav...@cls-services.com] Sent: Tuesday, June 15, 2010 12:07 PM To: NT System Admin Issues Subject: RE: Patch Management - again And why is a solution like this missing from MS operating systems?? Well, because vendors with their own commercial interests (ie. spend as little as possible and agree on nothing with competitors) don't play well. If there were an open platform for plugging into a patch-updating type API, and all vendors were forced/coerced into using it, the world would be a better place. Well .. a bit anyway ;) Secunia PSI does a great job at telling you what you need, we just need something that translates that with vendor supported methods of actually scheduling and installing the damn updates! :( With Open Source .. people *usually* want to do the right thing. Different world. a P.S. Shavlik, Altiris, and a hundred other 3rd party solutions do non-MS patch release on the Windows platform in the enterprise. You just have to invest in hosting it, learning how to use it, deploying it, testing with it and integrating it into your change control procedures ... -Original Message- From: Crawford, Scott [mailto:crawfo...@evangel.edu] Sent: 11 June 2010 23:51 To: NT System Admin Issues Subject: RE: Patch Management - again Thanks very much for this. It's exactly the kind of info I was looking for. -Original Message- From: Ben Scott [mailto:mailvor...@gmail.com] Sent: Friday, June 11, 2010 5:26 PM To: NT System Admin Issues Subject: Re: Patch Management - again On Fri, Jun 11, 2010 at 5:37 PM, Crawford, Scott crawfo...@evangel.edu wrote: Our only non-Windows computers are running Linux, and Linux makes patch management ridiculously easy. I'm sure there's countless places I could find this information, but could you elaborate on that statement a bit? WARNING: The information in this email and any attachments is confidential and may be legally privileged. If you are not the named addressee, you must not use, copy or disclose this email (including any attachments) or the information in it save to the named addressee nor take any action in reliance on it. If you receive this email or any attachments in error, please notify the sender immediately and then delete the same and any copies. CLS Services Ltd × Registered in England No 4132704 × Registered Office: Exchange Tower × One Harbour Exchange Square × London E14 9GE ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~
Re: Patch Management - again
It isn't. The WSUS engine is more than capable of distributing and automatically installing third-party updates - it's what's used in products like System Center Essentials for the task - and MS created System Center Updates Publisher (aka SCUP) so that admins can add the updates. Third parties who refuse to publish catalogs SCUP can use (like Adobe) are as much as fault as anyone else. SCUP links: http://technet.microsoft.com/en-us/library/bb531022.aspx http://www.microsoft.com/downloads/details.aspx?FamilyID=0446cce9-94a4-4fb0-b335-e7516044063ddisplaylang=en On 6/15/2010 11:06 AM, Alan Davies wrote: And why is a solution like this missing from MS operating systems?? -- Phil Brutsche p...@optimumdata.com ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~
Re: Patch Management - again
On Tue, Jun 15, 2010 at 12:15 PM, Phil Brutsche p...@optimumdata.com wrote: And why is a solution like this missing from MS operating systems?? It isn't. Comparing MSI/WSUS to RPM/YUM (or dpkg/APT or...) is really missing a lot. MSI is a beast to develop for, it's a compatibility nightmare across releases, MSI packages frequently require an interactive presence, MSIs vary radically in design, they're a bear to customize, the post-install management functions are non-existent, WSUS is a completely different framework vs MSI, I could go on and on and on. Third parties who refuse to publish catalogs SCUP can use (like Adobe) are as much as fault as anyone else. So, basically, practically the entire software industry. Microsoft has been working on Windows software installation for a decade plus, and it's still very hairy, especially if you want to also support not-the-latest-release-of-Windows. I can't really blame third-party developers for (1) resorting to doing their own thing and (2) not wanting to jump aboard Microsoft's bandwagon when Microsoft themselves weren't done building it yet (and still may not be). Now, a lot of this is due to the legacy Microsoft built with classic Windows, which was completely ad hoc. The entire Windows software industry ecosystem is built up around that. It's way too late to get it right the first time, so now Microsoft has to come up with a way to migrate the world's largest installed base to something more manageable. That's not going to be quick. Microsoft is still responsible, since they built it like that way-back-when, but even Microsoft can't change the past. They work in the world they built, and it's not realistic to expect them to fix it overnight. But for those same reasons, expecting the rest of the software industry to adopt what Microsoft's latest idea quickly is also unrealistic. In contrast, all the current Linux distributions were designed right the right time, with strong package management from day one. So everything has been and continues to be much smoother on the package/update management front. -- Ben ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~
Re: Patch Management - again
On Tue, Jun 15, 2010 at 1:28 PM, David Lum david@nwea.org wrote: +1 for Johnny Dangerously Do you know your last name is an adverb? +1 for Shavlik Yah, I haven't used Shavlik NetChk much, but what I did try was impressive. I tried the free NetChk Limited package, and it found an issue that WSUS/WU does not. I'm still investigating that (in my copious free time). To Microsoft's credit, someone on the patch-management list from MSFT emailed offering to help on that issue. -- Ben ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~
Re: Patch Management - again
I don't know that I would say that Linux *always* had package management going well -- certainly not all distros. There was a time when Debian was highly regarded *because* of its excellent package management system. Redhat was next, and then RPM became a major standard because of their popularity and subsequent clout. SuSE was probably the next one in line. I'm not disagreeing with you as far as where things stand today, but at best, we can say that Linux started off on a better footing, and had less legacy and installed base to overcome. Such is both the power and drawback of a large installed base over a shaky foundation. -ASB: http://XeeSM.com/AndrewBaker On Tue, Jun 15, 2010 at 1:47 PM, Ben Scott mailvor...@gmail.com wrote: On Tue, Jun 15, 2010 at 12:15 PM, Phil Brutsche p...@optimumdata.com wrote: And why is a solution like this missing from MS operating systems?? It isn't. Comparing MSI/WSUS to RPM/YUM (or dpkg/APT or...) is really missing a lot. MSI is a beast to develop for, it's a compatibility nightmare across releases, MSI packages frequently require an interactive presence, MSIs vary radically in design, they're a bear to customize, the post-install management functions are non-existent, WSUS is a completely different framework vs MSI, I could go on and on and on. Third parties who refuse to publish catalogs SCUP can use (like Adobe) are as much as fault as anyone else. So, basically, practically the entire software industry. Microsoft has been working on Windows software installation for a decade plus, and it's still very hairy, especially if you want to also support not-the-latest-release-of-Windows. I can't really blame third-party developers for (1) resorting to doing their own thing and (2) not wanting to jump aboard Microsoft's bandwagon when Microsoft themselves weren't done building it yet (and still may not be). Now, a lot of this is due to the legacy Microsoft built with classic Windows, which was completely ad hoc. The entire Windows software industry ecosystem is built up around that. It's way too late to get it right the first time, so now Microsoft has to come up with a way to migrate the world's largest installed base to something more manageable. That's not going to be quick. Microsoft is still responsible, since they built it like that way-back-when, but even Microsoft can't change the past. They work in the world they built, and it's not realistic to expect them to fix it overnight. But for those same reasons, expecting the rest of the software industry to adopt what Microsoft's latest idea quickly is also unrealistic. In contrast, all the current Linux distributions were designed right the right time, with strong package management from day one. So everything has been and continues to be much smoother on the package/update management front. -- Ben ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~
Re: Patch Management - again
shaky foundation? Andrew S. Baker asbz...@gmail.com 6/15/2010 2:42 PM I don't know that I would say that Linux *always* had package management going well -- certainly not all distros. There was a time when Debian was highly regarded *because* of its excellent package management system. Redhat was next, and then RPM became a major standard because of their popularity and subsequent clout. SuSE was probably the next one in line. I'm not disagreeing with you as far as where things stand today, but at best, we can say that Linux started off on a better footing, and had less legacy and installed base to overcome. Such is both the power and drawback of a large installed base over a shaky foundation. -ASB: http://XeeSM.com/AndrewBaker On Tue, Jun 15, 2010 at 1:47 PM, Ben Scott mailvor...@gmail.com wrote: On Tue, Jun 15, 2010 at 12:15 PM, Phil Brutsche p...@optimumdata.com wrote: And why is a solution like this missing from MS operating systems?? It isn't. Comparing MSI/WSUS to RPM/YUM (or dpkg/APT or...) is really missing a lot. MSI is a beast to develop for, it's a compatibility nightmare across releases, MSI packages frequently require an interactive presence, MSIs vary radically in design, they're a bear to customize, the post-install management functions are non-existent, WSUS is a completely different framework vs MSI, I could go on and on and on. Third parties who refuse to publish catalogs SCUP can use (like Adobe) are as much as fault as anyone else. So, basically, practically the entire software industry. Microsoft has been working on Windows software installation for a decade plus, and it's still very hairy, especially if you want to also support not-the-latest-release-of-Windows. I can't really blame third-party developers for (1) resorting to doing their own thing and (2) not wanting to jump aboard Microsoft's bandwagon when Microsoft themselves weren't done building it yet (and still may not be). Now, a lot of this is due to the legacy Microsoft built with classic Windows, which was completely ad hoc. The entire Windows software industry ecosystem is built up around that. It's way too late to get it right the first time, so now Microsoft has to come up with a way to migrate the world's largest installed base to something more manageable. That's not going to be quick. Microsoft is still responsible, since they built it like that way-back-when, but even Microsoft can't change the past. They work in the world they built, and it's not realistic to expect them to fix it overnight. But for those same reasons, expecting the rest of the software industry to adopt what Microsoft's latest idea quickly is also unrealistic. In contrast, all the current Linux distributions were designed right the right time, with strong package management from day one. So everything has been and continues to be much smoother on the package/update management front. -- Ben ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~
Re: Patch Management - again
Nor do they do the applications on a given distribution 'right' all the time. You are essentially relying on 'some' random maintainer to be doing something 'right' or at least agreed on and that their choices will not nuke your existing configuration. Steven Peck On Tue, Jun 15, 2010 at 2:42 PM, Andrew S. Baker asbz...@gmail.com wrote: I don't know that I would say that Linux *always* had package management going well -- certainly not all distros. There was a time when Debian was highly regarded *because* of its excellent package management system. Redhat was next, and then RPM became a major standard because of their popularity and subsequent clout. SuSE was probably the next one in line. I'm not disagreeing with you as far as where things stand today, but at best, we can say that Linux started off on a better footing, and had less legacy and installed base to overcome. Such is both the power and drawback of a large installed base over a shaky foundation. -ASB: http://XeeSM.com/AndrewBaker On Tue, Jun 15, 2010 at 1:47 PM, Ben Scott mailvor...@gmail.com wrote: On Tue, Jun 15, 2010 at 12:15 PM, Phil Brutsche p...@optimumdata.com wrote: And why is a solution like this missing from MS operating systems?? It isn't. Comparing MSI/WSUS to RPM/YUM (or dpkg/APT or...) is really missing a lot. MSI is a beast to develop for, it's a compatibility nightmare across releases, MSI packages frequently require an interactive presence, MSIs vary radically in design, they're a bear to customize, the post-install management functions are non-existent, WSUS is a completely different framework vs MSI, I could go on and on and on. Third parties who refuse to publish catalogs SCUP can use (like Adobe) are as much as fault as anyone else. So, basically, practically the entire software industry. Microsoft has been working on Windows software installation for a decade plus, and it's still very hairy, especially if you want to also support not-the-latest-release-of-Windows. I can't really blame third-party developers for (1) resorting to doing their own thing and (2) not wanting to jump aboard Microsoft's bandwagon when Microsoft themselves weren't done building it yet (and still may not be). Now, a lot of this is due to the legacy Microsoft built with classic Windows, which was completely ad hoc. The entire Windows software industry ecosystem is built up around that. It's way too late to get it right the first time, so now Microsoft has to come up with a way to migrate the world's largest installed base to something more manageable. That's not going to be quick. Microsoft is still responsible, since they built it like that way-back-when, but even Microsoft can't change the past. They work in the world they built, and it's not realistic to expect them to fix it overnight. But for those same reasons, expecting the rest of the software industry to adopt what Microsoft's latest idea quickly is also unrealistic. In contrast, all the current Linux distributions were designed right the right time, with strong package management from day one. So everything has been and continues to be much smoother on the package/update management front. -- Ben ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~
