Re: Patch management software...
Thanks for the heads up, Marc And especially thanks for the lovely 32-IP and 128-IP editions, which will help make them ubiquitous in SMB environments. * * *ASB* *http://XeeMe.com/AndrewBaker* *Harnessing the Advantages of Technology for the SMB market… * On Fri, Feb 10, 2012 at 1:19 AM, Marc Maiffret mmaiff...@eeye.com wrote: Just an update folks we released version 3.0 of Retina CS Community which now on top of the free patching and related there are new capabilities for integrated cloud security assessments (amazon/etc) and mobile security (android/activesync(ios) etc…) Plus a ton of other great improvements we heard from folks. Can download here: http://www.eeye.com/Products/Retina/Community and read more about what is new here: http://www.eeye.com/company/News-and-Events/Press-Releases/2012/eEye-Retina-CS-3-0-to-Close-the-Security-Gaps-Asso.aspx ** ** -Marc ** ** ** ** Signed, Marc Maiffret Founder/CTO eEye Digital Security WEB: http://www.eEye.com BLOG: http://blog.eeye.com TWITTER: http://twitter.com/marcmaiffret ** ** ** ** ** ** *From:* Marc Maiffret [mailto:mmaiff...@eeye.com] *Sent:* Thursday, February 02, 2012 7:10 PM *To:* NT System Admin Issues *Subject:* RE: Patch management software... ** ** Lively debates going on about doing so… J My vote is yes, so there is a good chance that might happen soon. -Marc ** ** *From:* James Rankin [mailto:kz2...@googlemail.com] *Sent:* Tuesday, January 31, 2012 5:59 AM *To:* NT System Admin Issues *Subject:* Re: Patch management software... ** ** That's really good for a free version. Any chance you could sneak Java in there as well? However, even without it that's great for a lot of small clients I know On 31 January 2012 06:25, Marc Maiffret mmaiff...@eeye.com wrote: Indeed it does Adobe Reader, Flash, Shockwave, Acrobat and also Mozilla Firefox plus Microsoft patches for free in the community version. The paid commercial version does a handful of other applications as well. http://www.eeye.com/products/retina/patch-management -Marc -Original Message- From: Alex Eckelberry [mailto:al...@eckelberry.com] Sent: Monday, January 30, 2012 8:38 PM To: NT System Admin Issues Cc: NT System Admin Issues Subject: Re: Patch management software... If it includes adobe and flash patching that is a sweet deal. Apart from windows those are the two programs that need vigilant patching. Alex Eckelberry www.eckelberry.com (c) 727 – 644 – 8830 Sent from my iPhone (Please excuse the occasional typos) On Jan 30, 2012, at 11:26 PM, Marc Maiffret mmaiff...@eeye.com wrote: Check out the free version of our Retina CS Community Edition. It is good up to 128 systems for free. Includes full vulnerability management and patching including patching for some third party apps. http://www.eeye.com/products/retina/community http://go.eeye.com/LP=68 -Marc Signed, Marc Maiffret Founder/CTO eEye Digital Security WEB: http://www.eEye.com BLOG: http://blog.eeye.com TWITTER: http://twitter.com/marcmaiffret From: ntsysadmin [mailto:ntsysad...@rccs.org] Sent: Monday, January 30, 2012 1:59 PM To: NT System Admin Issues Subject: Patch management software... I’m looking for affordable patch management software for several of my small business clients. Workstation numbers range from 4-80 PCs running XP, Vista, Windows7 and a few Macs. It’s okay if I can’t find anything to work with the Macs. I like the Secunia product but I didn’t see an offering for users with very small number of workstations. What are people using? Are there any free options out there that are worthwhile? Thanks, Mike ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin
RE: Patch management software...
A little bird told me we might move to 256 and toss in Java patching for free also. Sincerely would love your guys direct feedback so if you have any thoughts, issues, ideas please do not hesitate to send me email directly at mmaiffret[@]eeye.com. thanks -Marc -Original Message- From: Andrew S. Baker [mailto:asbz...@gmail.com] Sent: Friday, February 10, 2012 4:04 AM To: NT System Admin Issues Subject: Re: Patch management software... Thanks for the heads up, Marc And especially thanks for the lovely 32-IP and 128-IP editions, which will help make them ubiquitous in SMB environments. ASB http://XeeMe.com/AndrewBaker Harnessing the Advantages of Technology for the SMB market... On Fri, Feb 10, 2012 at 1:19 AM, Marc Maiffret mmaiff...@eeye.com wrote: Just an update folks we released version 3.0 of Retina CS Community which now on top of the free patching and related there are new capabilities for integrated cloud security assessments (amazon/etc) and mobile security (android/activesync(ios) etc...) Plus a ton of other great improvements we heard from folks. Can download here: http://www.eeye.com/Products/Retina/Community and read more about what is new here: http://www.eeye.com/company/News-and-Events/Press-Releases/2012/eEye-Retina-CS-3-0-to-Close-the-Security-Gaps-Asso.aspx -Marc Signed, Marc Maiffret Founder/CTO eEye Digital Security WEB: http://www.eEye.com BLOG: http://blog.eeye.com TWITTER: http://twitter.com/marcmaiffret From: Marc Maiffret [mailto:mmaiff...@eeye.com] Sent: Thursday, February 02, 2012 7:10 PM To: NT System Admin Issues Subject: RE: Patch management software... Lively debates going on about doing so... J My vote is yes, so there is a good chance that might happen soon. -Marc From: James Rankin [mailto:kz2...@googlemail.com] Sent: Tuesday, January 31, 2012 5:59 AM To: NT System Admin Issues Subject: Re: Patch management software... That's really good for a free version. Any chance you could sneak Java in there as well? However, even without it that's great for a lot of small clients I know On 31 January 2012 06:25, Marc Maiffret mmaiff...@eeye.com wrote: Indeed it does Adobe Reader, Flash, Shockwave, Acrobat and also Mozilla Firefox plus Microsoft patches for free in the community version. The paid commercial version does a handful of other applications as well. http://www.eeye.com/products/retina/patch-management -Marc -Original Message- From: Alex Eckelberry [mailto:al...@eckelberry.com] Sent: Monday, January 30, 2012 8:38 PM To: NT System Admin Issues Cc: NT System Admin Issues Subject: Re: Patch management software... If it includes adobe and flash patching that is a sweet deal. Apart from windows those are the two programs that need vigilant patching. Alex Eckelberry www.eckelberry.com (c) 727 - 644 - 8830 tel:727%20%E2%80%93%20644%20%E2%80%93%208830 Sent from my iPhone (Please excuse the occasional typos) On Jan 30, 2012, at 11:26 PM, Marc Maiffret mmaiff...@eeye.com wrote: Check out the free version of our Retina CS Community Edition. It is good up to 128 systems for free. Includes full vulnerability management and patching including patching for some third party apps. http://www.eeye.com/products/retina/community http://go.eeye.com/LP=68 -Marc Signed, Marc Maiffret Founder/CTO eEye Digital Security WEB: http://www.eEye.com BLOG: http://blog.eeye.com TWITTER: http://twitter.com/marcmaiffret From: ntsysadmin [mailto:ntsysad...@rccs.org] Sent: Monday, January 30, 2012 1:59 PM To: NT System Admin Issues Subject: Patch management software... I'm looking for affordable patch management software for several of my small business clients. Workstation numbers range from 4-80 PCs running XP, Vista, Windows7 and a few Macs. It's okay if I can't find anything to work with the Macs. I like the Secunia product but I didn't see an offering for users with very small number of workstations. What are people using? Are there any free options out there that are worthwhile
RE: Patch management software...
Just an update folks we released version 3.0 of Retina CS Community which now on top of the free patching and related there are new capabilities for integrated cloud security assessments (amazon/etc) and mobile security (android/activesync(ios) etc...) Plus a ton of other great improvements we heard from folks. Can download here: http://www.eeye.com/Products/Retina/Community and read more about what is new here: http://www.eeye.com/company/News-and-Events/Press-Releases/2012/eEye-Retina-CS-3-0-to-Close-the-Security-Gaps-Asso.aspx -Marc Signed, Marc Maiffret Founder/CTO eEye Digital Security WEB: http://www.eEye.com BLOG: http://blog.eeye.com TWITTER: http://twitter.com/marcmaiffret From: Marc Maiffret [mailto:mmaiff...@eeye.com] Sent: Thursday, February 02, 2012 7:10 PM To: NT System Admin Issues Subject: RE: Patch management software... Lively debates going on about doing so... :) My vote is yes, so there is a good chance that might happen soon. -Marc From: James Rankin [mailto:kz2...@googlemail.com]mailto:[mailto:kz2...@googlemail.com] Sent: Tuesday, January 31, 2012 5:59 AM To: NT System Admin Issues Subject: Re: Patch management software... That's really good for a free version. Any chance you could sneak Java in there as well? However, even without it that's great for a lot of small clients I know On 31 January 2012 06:25, Marc Maiffret mmaiff...@eeye.commailto:mmaiff...@eeye.com wrote: Indeed it does Adobe Reader, Flash, Shockwave, Acrobat and also Mozilla Firefox plus Microsoft patches for free in the community version. The paid commercial version does a handful of other applications as well. http://www.eeye.com/products/retina/patch-management -Marc -Original Message- From: Alex Eckelberry [mailto:al...@eckelberry.commailto:al...@eckelberry.com] Sent: Monday, January 30, 2012 8:38 PM To: NT System Admin Issues Cc: NT System Admin Issues Subject: Re: Patch management software... If it includes adobe and flash patching that is a sweet deal. Apart from windows those are the two programs that need vigilant patching. Alex Eckelberry www.eckelberry.comhttp://www.eckelberry.com (c) 727 - 644 - 8830tel:727%20%E2%80%93%20644%20%E2%80%93%208830 Sent from my iPhone (Please excuse the occasional typos) On Jan 30, 2012, at 11:26 PM, Marc Maiffret mmaiff...@eeye.commailto:mmaiff...@eeye.com wrote: Check out the free version of our Retina CS Community Edition. It is good up to 128 systems for free. Includes full vulnerability management and patching including patching for some third party apps. http://www.eeye.com/products/retina/community http://go.eeye.com/LP=68 -Marc Signed, Marc Maiffret Founder/CTO eEye Digital Security WEB: http://www.eEye.com BLOG: http://blog.eeye.com TWITTER: http://twitter.com/marcmaiffret From: ntsysadmin [mailto:ntsysad...@rccs.orgmailto:ntsysad...@rccs.org] Sent: Monday, January 30, 2012 1:59 PM To: NT System Admin Issues Subject: Patch management software... I'm looking for affordable patch management software for several of my small business clients. Workstation numbers range from 4-80 PCs running XP, Vista, Windows7 and a few Macs. It's okay if I can't find anything to work with the Macs. I like the Secunia product but I didn't see an offering for users with very small number of workstations. What are people using? Are there any free options out there that are worthwhile? Thanks, Mike ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send
RE: Patch management software...
Lively debates going on about doing so... :) My vote is yes, so there is a good chance that might happen soon. -Marc From: James Rankin [mailto:kz2...@googlemail.com] Sent: Tuesday, January 31, 2012 5:59 AM To: NT System Admin Issues Subject: Re: Patch management software... That's really good for a free version. Any chance you could sneak Java in there as well? However, even without it that's great for a lot of small clients I know On 31 January 2012 06:25, Marc Maiffret mmaiff...@eeye.commailto:mmaiff...@eeye.com wrote: Indeed it does Adobe Reader, Flash, Shockwave, Acrobat and also Mozilla Firefox plus Microsoft patches for free in the community version. The paid commercial version does a handful of other applications as well. http://www.eeye.com/products/retina/patch-management -Marc -Original Message- From: Alex Eckelberry [mailto:al...@eckelberry.commailto:al...@eckelberry.com] Sent: Monday, January 30, 2012 8:38 PM To: NT System Admin Issues Cc: NT System Admin Issues Subject: Re: Patch management software... If it includes adobe and flash patching that is a sweet deal. Apart from windows those are the two programs that need vigilant patching. Alex Eckelberry www.eckelberry.comhttp://www.eckelberry.com (c) 727 - 644 - 8830tel:727%20%E2%80%93%20644%20%E2%80%93%208830 Sent from my iPhone (Please excuse the occasional typos) On Jan 30, 2012, at 11:26 PM, Marc Maiffret mmaiff...@eeye.commailto:mmaiff...@eeye.com wrote: Check out the free version of our Retina CS Community Edition. It is good up to 128 systems for free. Includes full vulnerability management and patching including patching for some third party apps. http://www.eeye.com/products/retina/community http://go.eeye.com/LP=68 -Marc Signed, Marc Maiffret Founder/CTO eEye Digital Security WEB: http://www.eEye.com BLOG: http://blog.eeye.com TWITTER: http://twitter.com/marcmaiffret From: ntsysadmin [mailto:ntsysad...@rccs.orgmailto:ntsysad...@rccs.org] Sent: Monday, January 30, 2012 1:59 PM To: NT System Admin Issues Subject: Patch management software... I'm looking for affordable patch management software for several of my small business clients. Workstation numbers range from 4-80 PCs running XP, Vista, Windows7 and a few Macs. It's okay if I can't find anything to work with the Macs. I like the Secunia product but I didn't see an offering for users with very small number of workstations. What are people using? Are there any free options out there that are worthwhile? Thanks, Mike ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin -- On two occasions...I have been asked, 'Pray, Mr Babbage, if you put into the machine wrong figures, will the right answers come out?' I am not able rightly to apprehend the kind of confusion of ideas that could provoke such a question. * IMPORTANT INFORMATION/DISCLAIMER * This document should be read only by those persons to whom it is addressed. If you have received this message it was obviously addressed to you and therefore you can read it, even it we didn't mean to send it to you. However, if the contents of this email make no sense whatsoever then you probably were not the intended recipient, or, alternatively, you are a mindless cretin; either way, you should immediately kill yourself and destroy your computer (not necessarily
RE: Patch management software...
To my knowledge, SBS prior to 2011 is nothing special (only this month have I even seen an SBS 2011 setup screen and have yet to see the OS completely installed yet, working on two swing migrations at the moment) I've treated then the same as regular server OS's. Also, you could always check with them, but I wouldn't guarantee they'd know the difference. Dave From: James Hill [mailto:falc...@gmail.com] Sent: Tuesday, January 31, 2012 9:26 PM To: NT System Admin Issues Subject: RE: Patch management software... I doesn't list SBS as a supported OS though, which is a concern. From: ntsysadmin [mailto:ntsysad...@rccs.org]mailto:[mailto:ntsysad...@rccs.org] Sent: Wednesday, 1 February 2012 4:35 AM To: NT System Admin Issues Subject: RE: Patch management software... Thanks for all of the replies. I'm looking over the recommended apps and installing the demos. So far ManageEngine (http://www.manageengine.com/products/desktop-central/) looks like the winner. The functionality is awesome, web-based UI is beautiful and easy to read/navigate, feature-set - looks like it does so much I will have to read the docs to discover all the features. It does look like it's still free for 25 or fewer PCs, which is just amazing. This will work for most of my clients, I will get quotes for the larger ones. If you're not familiar with this product, I would highly recommend installing the free demo and trying it out. I am VERY impressed. Thanks, Mike From: Dennis Hoefer [mailto:dhoe...@ufcoop.com]mailto:[mailto:dhoe...@ufcoop.com] Sent: Monday, January 30, 2012 6:37 PM To: NT System Admin Issues Subject: RE: Patch management software... For the small Windows installations you might take a look at Desktop Central by ManageEngine, I believe they still offer a free version for up to 25 workstations. Dennis From: ntsysadmin [mailto:ntsysad...@rccs.org] Sent: Monday, January 30, 2012 3:59 PM To: NT System Admin Issues Subject: Patch management software... I'm looking for affordable patch management software for several of my small business clients. Workstation numbers range from 4-80 PCs running XP, Vista, Windows7 and a few Macs. It's okay if I can't find anything to work with the Macs. I like the Secunia product but I didn't see an offering for users with very small number of workstations. What are people using? Are there any free options out there that are worthwhile? Thanks, Mike ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin
RE: Patch management software...
I'm not running any SBS servers here and wasn't really concerned about patching servers anyway. Most of my clients are so small that they have only one or two servers and patching is done manually. I was reading the product's support forum last night and the techs seem to be very knowledgeable and responsive to user requests and feature requests. I feel like I've struck gold finding this... Thanks again to the person that posted about Desktop Central. From: James Hill [mailto:falc...@gmail.com] Sent: Wednesday, February 01, 2012 12:26 AM To: NT System Admin Issues Subject: RE: Patch management software... I doesn't list SBS as a supported OS though, which is a concern. From: ntsysadmin [mailto:ntsysad...@rccs.org] Sent: Wednesday, 1 February 2012 4:35 AM To: NT System Admin Issues Subject: RE: Patch management software... Thanks for all of the replies. I'm looking over the recommended apps and installing the demos. So far ManageEngine (http://www.manageengine.com/products/desktop-central/) looks like the winner. The functionality is awesome, web-based UI is beautiful and easy to read/navigate, feature-set - looks like it does so much I will have to read the docs to discover all the features. It does look like it's still free for 25 or fewer PCs, which is just amazing. This will work for most of my clients, I will get quotes for the larger ones. If you're not familiar with this product, I would highly recommend installing the free demo and trying it out. I am VERY impressed. Thanks, Mike From: Dennis Hoefer [mailto:dhoe...@ufcoop.com]mailto:[mailto:dhoe...@ufcoop.com] Sent: Monday, January 30, 2012 6:37 PM To: NT System Admin Issues Subject: RE: Patch management software... For the small Windows installations you might take a look at Desktop Central by ManageEngine, I believe they still offer a free version for up to 25 workstations. Dennis From: ntsysadmin [mailto:ntsysad...@rccs.org] Sent: Monday, January 30, 2012 3:59 PM To: NT System Admin Issues Subject: Patch management software... I'm looking for affordable patch management software for several of my small business clients. Workstation numbers range from 4-80 PCs running XP, Vista, Windows7 and a few Macs. It's okay if I can't find anything to work with the Macs. I like the Secunia product but I didn't see an offering for users with very small number of workstations. What are people using? Are there any free options out there that are worthwhile? Thanks, Mike ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin
RE: Patch management software...
You may have just saved a client of mine a Shavlik renewal Mark... Dave -Original Message- From: Marc Maiffret [mailto:mmaiff...@eeye.com] Sent: Monday, January 30, 2012 10:25 PM To: NT System Admin Issues Subject: RE: Patch management software... Indeed it does Adobe Reader, Flash, Shockwave, Acrobat and also Mozilla Firefox plus Microsoft patches for free in the community version. The paid commercial version does a handful of other applications as well. http://www.eeye.com/products/retina/patch-management -Marc -Original Message- From: Alex Eckelberry [mailto:al...@eckelberry.com] Sent: Monday, January 30, 2012 8:38 PM To: NT System Admin Issues Cc: NT System Admin Issues Subject: Re: Patch management software... If it includes adobe and flash patching that is a sweet deal. Apart from windows those are the two programs that need vigilant patching. Alex Eckelberry www.eckelberry.com (c) 727 – 644 – 8830 Sent from my iPhone (Please excuse the occasional typos) On Jan 30, 2012, at 11:26 PM, Marc Maiffret mmaiff...@eeye.com wrote: Check out the free version of our Retina CS Community Edition. It is good up to 128 systems for free. Includes full vulnerability management and patching including patching for some third party apps. http://www.eeye.com/products/retina/community http://go.eeye.com/LP=68 -Marc Signed, Marc Maiffret Founder/CTO eEye Digital Security WEB: http://www.eEye.com BLOG: http://blog.eeye.com TWITTER: http://twitter.com/marcmaiffret From: ntsysadmin [mailto:ntsysad...@rccs.org] Sent: Monday, January 30, 2012 1:59 PM To: NT System Admin Issues Subject: Patch management software... I’m looking for affordable patch management software for several of my small business clients. Workstation numbers range from 4-80 PCs running XP, Vista, Windows7 and a few Macs. It’s okay if I can’t find anything to work with the Macs. I like the Secunia product but I didn’t see an offering for users with very small number of workstations. What are people using? Are there any free options out there that are worthwhile? Thanks, Mike ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin
Re: Patch management software...
That's really good for a free version. Any chance you could sneak Java in there as well? However, even without it that's great for a lot of small clients I know On 31 January 2012 06:25, Marc Maiffret mmaiff...@eeye.com wrote: Indeed it does Adobe Reader, Flash, Shockwave, Acrobat and also Mozilla Firefox plus Microsoft patches for free in the community version. The paid commercial version does a handful of other applications as well. http://www.eeye.com/products/retina/patch-management -Marc -Original Message- From: Alex Eckelberry [mailto:al...@eckelberry.com] Sent: Monday, January 30, 2012 8:38 PM To: NT System Admin Issues Cc: NT System Admin Issues Subject: Re: Patch management software... If it includes adobe and flash patching that is a sweet deal. Apart from windows those are the two programs that need vigilant patching. Alex Eckelberry www.eckelberry.com (c) 727 – 644 – 8830 Sent from my iPhone (Please excuse the occasional typos) On Jan 30, 2012, at 11:26 PM, Marc Maiffret mmaiff...@eeye.com wrote: Check out the free version of our Retina CS Community Edition. It is good up to 128 systems for free. Includes full vulnerability management and patching including patching for some third party apps. http://www.eeye.com/products/retina/community http://go.eeye.com/LP=68 -Marc Signed, Marc Maiffret Founder/CTO eEye Digital Security WEB: http://www.eEye.com BLOG: http://blog.eeye.com TWITTER: http://twitter.com/marcmaiffret From: ntsysadmin [mailto:ntsysad...@rccs.org] Sent: Monday, January 30, 2012 1:59 PM To: NT System Admin Issues Subject: Patch management software... I’m looking for affordable patch management software for several of my small business clients. Workstation numbers range from 4-80 PCs running XP, Vista, Windows7 and a few Macs. It’s okay if I can’t find anything to work with the Macs. I like the Secunia product but I didn’t see an offering for users with very small number of workstations. What are people using? Are there any free options out there that are worthwhile? Thanks, Mike ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin -- On two occasions...I have been asked, 'Pray, Mr Babbage, if you put into the machine wrong figures, will the right answers come out?' I am not able rightly to apprehend the kind of confusion of ideas that could provoke such a question. ** IMPORTANT INFORMATION/DISCLAIMER * This document should be read only by those persons to whom it is addressed. If you have received this message it was obviously addressed to you and therefore you can read it, even it we didn't mean to send it to you. However, if the contents of this email make no sense whatsoever then you probably were not the intended recipient, or, alternatively, you are a mindless cretin; either way, you should immediately kill yourself and destroy your computer (not necessarily in that order). Once you have taken this action, please contact us.. no, sorry, you can't use your computer, because you just destroyed it, and possibly also committed suicide afterwards, but I am starting to digress.. * * The originator of this email is not liable for the transmission of the information contained in this communication. Or are they? Either way it's a pretty dull legal query and frankly one I'm not going to dwell on. But should you have nothing better to do, please feel free to ruminate on it, and please pass on any concrete conclusions should you find them
Re: Patch management software...
Send all commission checks to: Marc's Bahama Mama Fund 111 Theory Suite 250 Irvine, CA 92617-3041 Carl Webster Consultant and Citrix Technology Professional http://www.CarlWebster.com http://www.carlwebster.com/ On 1/31/12 7:54 AM, David Lum david@nwea.org wrote: You may have just saved a client of mine a Shavlik renewal Mark... Dave -Original Message- From: Marc Maiffret [mailto:mmaiff...@eeye.com] Sent: Monday, January 30, 2012 10:25 PM To: NT System Admin Issues Subject: RE: Patch management software... Indeed it does Adobe Reader, Flash, Shockwave, Acrobat and also Mozilla Firefox plus Microsoft patches for free in the community version. The paid commercial version does a handful of other applications as well. http://www.eeye.com/products/retina/patch-management -Marc -Original Message- From: Alex Eckelberry [mailto:al...@eckelberry.com] Sent: Monday, January 30, 2012 8:38 PM To: NT System Admin Issues Cc: NT System Admin Issues Subject: Re: Patch management software... If it includes adobe and flash patching that is a sweet deal. Apart from windows those are the two programs that need vigilant patching. Alex Eckelberry www.eckelberry.com (c) 727 644 8830 Sent from my iPhone (Please excuse the occasional typos) On Jan 30, 2012, at 11:26 PM, Marc Maiffret mmaiff...@eeye.com wrote: Check out the free version of our Retina CS Community Edition. It is good up to 128 systems for free. Includes full vulnerability management and patching including patching for some third party apps. http://www.eeye.com/products/retina/community http://go.eeye.com/LP=68 ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin
RE: Patch management software...
Hmm, the last time Marc had me send it to some offshore account - the CIA/FBI/NSA/Homeland security let him back in? -Original Message- From: Webster [mailto:webs...@carlwebster.com] Sent: Tuesday, January 31, 2012 6:04 AM To: NT System Admin Issues Subject: Re: Patch management software... Send all commission checks to: Marc's Bahama Mama Fund 111 Theory Suite 250 Irvine, CA 92617-3041 Carl Webster Consultant and Citrix Technology Professional http://www.CarlWebster.com http://www.carlwebster.com/ On 1/31/12 7:54 AM, David Lum david@nwea.org wrote: You may have just saved a client of mine a Shavlik renewal Mark... Dave -Original Message- From: Marc Maiffret [mailto:mmaiff...@eeye.com] Sent: Monday, January 30, 2012 10:25 PM To: NT System Admin Issues Subject: RE: Patch management software... Indeed it does Adobe Reader, Flash, Shockwave, Acrobat and also Mozilla Firefox plus Microsoft patches for free in the community version. The paid commercial version does a handful of other applications as well. http://www.eeye.com/products/retina/patch-management -Marc -Original Message- From: Alex Eckelberry [mailto:al...@eckelberry.com] Sent: Monday, January 30, 2012 8:38 PM To: NT System Admin Issues Cc: NT System Admin Issues Subject: Re: Patch management software... If it includes adobe and flash patching that is a sweet deal. Apart from windows those are the two programs that need vigilant patching. Alex Eckelberry www.eckelberry.com (c) 727 644 8830 Sent from my iPhone (Please excuse the occasional typos) On Jan 30, 2012, at 11:26 PM, Marc Maiffret mmaiff...@eeye.com wrote: Check out the free version of our Retina CS Community Edition. It is good up to 128 systems for free. Includes full vulnerability management and patching including patching for some third party apps. http://www.eeye.com/products/retina/community http://go.eeye.com/LP=68 ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin
RE: Patch management software...
Thanks for all of the replies. I'm looking over the recommended apps and installing the demos. So far ManageEngine (http://www.manageengine.com/products/desktop-central/) looks like the winner. The functionality is awesome, web-based UI is beautiful and easy to read/navigate, feature-set - looks like it does so much I will have to read the docs to discover all the features. It does look like it's still free for 25 or fewer PCs, which is just amazing. This will work for most of my clients, I will get quotes for the larger ones. If you're not familiar with this product, I would highly recommend installing the free demo and trying it out. I am VERY impressed. Thanks, Mike From: Dennis Hoefer [mailto:dhoe...@ufcoop.com] Sent: Monday, January 30, 2012 6:37 PM To: NT System Admin Issues Subject: RE: Patch management software... For the small Windows installations you might take a look at Desktop Central by ManageEngine, I believe they still offer a free version for up to 25 workstations. Dennis From: ntsysadmin [mailto:ntsysad...@rccs.org] Sent: Monday, January 30, 2012 3:59 PM To: NT System Admin Issues Subject: Patch management software... I'm looking for affordable patch management software for several of my small business clients. Workstation numbers range from 4-80 PCs running XP, Vista, Windows7 and a few Macs. It's okay if I can't find anything to work with the Macs. I like the Secunia product but I didn't see an offering for users with very small number of workstations. What are people using? Are there any free options out there that are worthwhile? Thanks, Mike ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin
RE: Patch management software...
I doesn't list SBS as a supported OS though, which is a concern. From: ntsysadmin [mailto:ntsysad...@rccs.org] Sent: Wednesday, 1 February 2012 4:35 AM To: NT System Admin Issues Subject: RE: Patch management software... Thanks for all of the replies. I'm looking over the recommended apps and installing the demos. So far ManageEngine (http://www.manageengine.com/products/desktop-central/) looks like the winner. The functionality is awesome, web-based UI is beautiful and easy to read/navigate, feature-set - looks like it does so much I will have to read the docs to discover all the features. It does look like it's still free for 25 or fewer PCs, which is just amazing. This will work for most of my clients, I will get quotes for the larger ones. If you're not familiar with this product, I would highly recommend installing the free demo and trying it out. I am VERY impressed. Thanks, Mike From: Dennis Hoefer [mailto:dhoe...@ufcoop.com] Sent: Monday, January 30, 2012 6:37 PM To: NT System Admin Issues Subject: RE: Patch management software... For the small Windows installations you might take a look at Desktop Central by ManageEngine, I believe they still offer a free version for up to 25 workstations. Dennis From: ntsysadmin [mailto:ntsysad...@rccs.org] Sent: Monday, January 30, 2012 3:59 PM To: NT System Admin Issues Subject: Patch management software... I'm looking for affordable patch management software for several of my small business clients. Workstation numbers range from 4-80 PCs running XP, Vista, Windows7 and a few Macs. It's okay if I can't find anything to work with the Macs. I like the Secunia product but I didn't see an offering for users with very small number of workstations. What are people using? Are there any free options out there that are worthwhile? Thanks, Mike ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin
Re: Patch management software...
On Mon, Jan 30, 2012 at 4:58 PM, ntsysadmin ntsysad...@rccs.org wrote: I’m looking for affordable patch management software for several of my small business clients. ... Are there any free options out there that are worthwhile? WSUS. -- Ben ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin
RE: Patch management software...
Have you looked at Windows Intune? From: ntsysadmin [mailto:ntsysad...@rccs.org] Sent: Monday, January 30, 2012 4:59 PM To: NT System Admin Issues Subject: Patch management software... I'm looking for affordable patch management software for several of my small business clients. Workstation numbers range from 4-80 PCs running XP, Vista, Windows7 and a few Macs. It's okay if I can't find anything to work with the Macs. I like the Secunia product but I didn't see an offering for users with very small number of workstations. What are people using? Are there any free options out there that are worthwhile? Thanks, Mike ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin
Re: Patch management software...
Hey Mike We have about 150 users and have the CSI Secunia product. It integrates quite well into WSUS and takes little time to add an adobe or quicktime update. Sent from my BlackBird. -Original Message- From: ntsysadmin ntsysad...@rccs.org Date: Mon, 30 Jan 2012 21:58:47 To: NT System Admin Issuesntsysadmin@lyris.sunbelt-software.com Reply-To: NT System Admin Issues ntsysadmin@lyris.sunbelt-software.comSubject: Patch management software... I'm looking for affordable patch management software for several of my small business clients. Workstation numbers range from 4-80 PCs running XP, Vista, Windows7 and a few Macs. It's okay if I can't find anything to work with the Macs. I like the Secunia product but I didn't see an offering for users with very small number of workstations. What are people using? Are there any free options out there that are worthwhile? Thanks, Mike ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin
RE: Patch management software...
I use both Shavlik and WSUS. Both places that I have managed to get Shavlik netChk Protect (%dayjob% and one %nightjob%) going I have found it useful to maintain WSUS for Windows-specific items. WSUS is very low maintenance, handling Java, Adobe, etc takes additional work. Not sure if it's the tool or the operator (me) not being proficient with NetChk Protect (err, VMWare vCenter Protect Essentials now that VMWare bought Shavlik) to be able to do away with WSUS, but there ya go. Shavlik is not c dirt cheap, but it is effective. Dave From: ntsysadmin [mailto:ntsysad...@rccs.org] Sent: Monday, January 30, 2012 1:59 PM To: NT System Admin Issues Subject: Patch management software... I'm looking for affordable patch management software for several of my small business clients. Workstation numbers range from 4-80 PCs running XP, Vista, Windows7 and a few Macs. It's okay if I can't find anything to work with the Macs. I like the Secunia product but I didn't see an offering for users with very small number of workstations. What are people using? Are there any free options out there that are worthwhile? Thanks, Mike ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin
RE: Patch management software...
For the small Windows installations you might take a look at Desktop Central by ManageEngine, I believe they still offer a free version for up to 25 workstations. Dennis From: ntsysadmin [mailto:ntsysad...@rccs.org] Sent: Monday, January 30, 2012 3:59 PM To: NT System Admin Issues Subject: Patch management software... I'm looking for affordable patch management software for several of my small business clients. Workstation numbers range from 4-80 PCs running XP, Vista, Windows7 and a few Macs. It's okay if I can't find anything to work with the Macs. I like the Secunia product but I didn't see an offering for users with very small number of workstations. What are people using? Are there any free options out there that are worthwhile? Thanks, Mike ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin
Re: Patch management software...
It does manage MACs, not sure about patching though. ntsysadmin ntsysad...@rccs.org 1/30/2012 4:58 PM I’m looking for affordable patch management software for several of my small business clients. Workstation numbers range from 4-80 PCs running XP, Vista, Windows7 and a few Macs. It’s okay if I can’t find anything to work with the Macs. I like the Secunia product but I didn’t see an offering for users with very small number of workstations. What are people using? Are there any free options out there that are worthwhile? Thanks, Mike ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin Confidentiality Notice: This e-mail message, including attachments, is for the sole use of the intended recipient(s) and may contain confidential and privileged information. Any unauthorized review, use, disclosure, or distribution is prohibited. If you are not the intended recipient, please contact the sender by reply e-mail and destroy all copies of the original message. ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin
Re: Patch management software...
+1 on the Kbox if it's affordable for your customers. John W. Cook Systems Administrator Partnership for Strong Families From: Tom Miller [mailto:tmil...@hnncsb.org] Sent: Monday, January 30, 2012 10:37 PM To: NT System Admin Issues ntsysadmin@lyris.sunbelt-software.com Subject: Re: Patch management software... Check out Dell's KBox systems. We use one here for about 1,000 PC and our servers. I think they recently released a smaller version for small offices such as yours. Patch management is one component, and it's very easy and hands off once you configure it. ntsysadmin ntsysad...@rccs.org 1/30/2012 4:58 PM I’m looking for affordable patch management software for several of my small business clients. Workstation numbers range from 4-80 PCs running XP, Vista, Windows7 and a few Macs. It’s okay if I can’t find anything to work with the Macs. I like the Secunia product but I didn’t see an offering for users with very small number of workstations. What are people using? Are there any free options out there that are worthwhile? Thanks, Mike ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin Confidentiality Notice: This e-mail message, including attachments, is for the sole use of the intended recipient(s) and may contain confidential and privileged information. Any unauthorized review, use, disclosure, or distribution is prohibited. If you are not the intended recipient, please contact the sender by reply e-mail and destroy all copies of the original message. ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin CONFIDENTIALITY STATEMENT: The information transmitted, or contained or attached to or with this Notice is intended only for the person or entity to which it is addressed and may contain Protected Health Information (PHI), confidential and/or privileged material. Any review, transmission, dissemination, or other use of, and taking any action in reliance upon this information by persons or entities other than the intended recipient without the express written consent of the sender are prohibited. This information may be protected by the Health Insurance Portability and Accountability Act of 1996 (HIPAA), and other Federal and Florida laws. Improper or unauthorized use or disclosure of this information could result in civil and/or criminal penalties. Consider the environment. Please don't print this e-mail unless you really need to. This email and any attached files are confidential and intended solely for the intended recipient(s). If you are not the named recipient you should not read, distribute, copy or alter this email. Any views or opinions expressed in this email are those of the author and do not represent those of the company. Warning: Although precautions have been taken to make sure no viruses are present in this email, the company cannot accept responsibility for any loss or damage that arise from the use of this email or attachments. ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin
RE: Patch management software...
Check out the free version of our Retina CS Community Edition. It is good up to 128 systems for free. Includes full vulnerability management and patching including patching for some third party apps. http://www.eeye.com/products/retina/community http://go.eeye.com/LP=68 -Marc Signed, Marc Maiffret Founder/CTO eEye Digital Security WEB: http://www.eEye.com BLOG: http://blog.eeye.com TWITTER: http://twitter.com/marcmaiffret From: ntsysadmin [mailto:ntsysad...@rccs.org] Sent: Monday, January 30, 2012 1:59 PM To: NT System Admin Issues Subject: Patch management software... I'm looking for affordable patch management software for several of my small business clients. Workstation numbers range from 4-80 PCs running XP, Vista, Windows7 and a few Macs. It's okay if I can't find anything to work with the Macs. I like the Secunia product but I didn't see an offering for users with very small number of workstations. What are people using? Are there any free options out there that are worthwhile? Thanks, Mike ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin
Re: Patch management software...
If you want cheap/free try ninite and wsus combined. Otherwise gfi languard is very inexpensive. Shavlik is is very good but might not fit your budget. Lumension is also decent but it is not cheap. Alex Eckelberry www.eckelberry.com (c) 727 – 644 – 8830 Sent from my iPhone (Please excuse the occasional typos) On Jan 30, 2012, at 5:38 PM, David Lum david@nwea.org wrote: I use both Shavlik and WSUS. Both places that I have managed to get Shavlik netChk Protect (%dayjob% and one %nightjob%) going I have found it useful to maintain WSUS for Windows-specific items. WSUS is very low maintenance, handling Java, Adobe, etc takes additional work. Not sure if it’s the tool or the operator (me) not being proficient with NetChk Protect (err, VMWare vCenter Protect Essentials now that VMWare bought Shavlik) to be able to do away with WSUS, but there ya go. Shavlik is not c dirt cheap, but it is effective. Dave From: ntsysadmin [mailto:ntsysad...@rccs.org] Sent: Monday, January 30, 2012 1:59 PM To: NT System Admin Issues Subject: Patch management software... I’m looking for affordable patch management software for several of my small business clients. Workstation numbers range from 4-80 PCs running XP, Vista, Windows7 and a few Macs. It’s okay if I can’t find anything to work with the Macs. I like the Secunia product but I didn’t see an offering for users with very small number of workstations. What are people using? Are there any free options out there that are worthwhile? Thanks, Mike ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin
Re: Patch management software...
If it includes adobe and flash patching that is a sweet deal. Apart from windows those are the two programs that need vigilant patching. Alex Eckelberry www.eckelberry.com (c) 727 – 644 – 8830 Sent from my iPhone (Please excuse the occasional typos) On Jan 30, 2012, at 11:26 PM, Marc Maiffret mmaiff...@eeye.com wrote: Check out the free version of our Retina CS Community Edition. It is good up to 128 systems for free. Includes full vulnerability management and patching including patching for some third party apps. http://www.eeye.com/products/retina/community http://go.eeye.com/LP=68 -Marc Signed, Marc Maiffret Founder/CTO eEye Digital Security WEB: http://www.eEye.com BLOG: http://blog.eeye.com TWITTER: http://twitter.com/marcmaiffret From: ntsysadmin [mailto:ntsysad...@rccs.org] Sent: Monday, January 30, 2012 1:59 PM To: NT System Admin Issues Subject: Patch management software... I’m looking for affordable patch management software for several of my small business clients. Workstation numbers range from 4-80 PCs running XP, Vista, Windows7 and a few Macs. It’s okay if I can’t find anything to work with the Macs. I like the Secunia product but I didn’t see an offering for users with very small number of workstations. What are people using? Are there any free options out there that are worthwhile? Thanks, Mike ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin
RE: Patch management software...
Indeed it does Adobe Reader, Flash, Shockwave, Acrobat and also Mozilla Firefox plus Microsoft patches for free in the community version. The paid commercial version does a handful of other applications as well. http://www.eeye.com/products/retina/patch-management -Marc -Original Message- From: Alex Eckelberry [mailto:al...@eckelberry.com] Sent: Monday, January 30, 2012 8:38 PM To: NT System Admin Issues Cc: NT System Admin Issues Subject: Re: Patch management software... If it includes adobe and flash patching that is a sweet deal. Apart from windows those are the two programs that need vigilant patching. Alex Eckelberry www.eckelberry.com (c) 727 – 644 – 8830 Sent from my iPhone (Please excuse the occasional typos) On Jan 30, 2012, at 11:26 PM, Marc Maiffret mmaiff...@eeye.com wrote: Check out the free version of our Retina CS Community Edition. It is good up to 128 systems for free. Includes full vulnerability management and patching including patching for some third party apps. http://www.eeye.com/products/retina/community http://go.eeye.com/LP=68 -Marc Signed, Marc Maiffret Founder/CTO eEye Digital Security WEB: http://www.eEye.com BLOG: http://blog.eeye.com TWITTER: http://twitter.com/marcmaiffret From: ntsysadmin [mailto:ntsysad...@rccs.org] Sent: Monday, January 30, 2012 1:59 PM To: NT System Admin Issues Subject: Patch management software... I’m looking for affordable patch management software for several of my small business clients. Workstation numbers range from 4-80 PCs running XP, Vista, Windows7 and a few Macs. It’s okay if I can’t find anything to work with the Macs. I like the Secunia product but I didn’t see an offering for users with very small number of workstations. What are people using? Are there any free options out there that are worthwhile? Thanks, Mike ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin
RE: Patch management software question, again...
AFAIK only the CTO left about a month ago, but you may have better intel than me. -Original Message- From: Rod Trent [mailto:rodtr...@myitforum.com] Sent: Saturday, October 10, 2009 6:41 PM To: NT System Admin Issues Subject: RE: Patch management software question, again... Big exec shake-up at Shavlik a couple weeks ago. -Original Message- From: Alex Eckelberry [mailto:al...@sunbelt-software.com] Sent: Saturday, October 10, 2009 5:59 PM To: NT System Admin Issues Subject: RE: Patch management software question, again... Sorry all, I had no idea that there was this bad taste on Shavlik products. They license our VIPRE SDK for their new version (for antimalware) and I've gotten to know their team fairly well, and think highly of them from an engineering standpoint. However, as always, the actual admin that has to run the product is always the better judge. Incidentally, I am seeing a LOT of attacks using PDF and Flash, etc. I really wouldn't just rely on WUS -- if you do, at the very least, stay on top of vulnerable attack vectors on non-MSFT programs. And/or run a free or cheap VA product. Alex -Original Message- From: Sam Cayze [mailto:sam.ca...@rollouts.com] Sent: Wednesday, October 07, 2009 9:24 PM To: NT System Admin Issues Subject: RE: Patch management software question, again... I like to think Alex spends his time making his awesome company more awesome, other than reading every post on this list ;) -Original Message- From: Free, Bob [mailto:r...@pge.com] Sent: Wednesday, October 07, 2009 6:33 PM To: NT System Admin Issues Subject: RE: Patch management software question, again... From Brian's post this Monday- I couldn't stand Shavlik when I was using it to patch 250 or so servers. Slower than anything and the UI was awful over any sort of realistic RDP connection. Also in the same thread, Joe said Shavlik is what we're currently using. Looking to move away from it, possibly. -Original Message- From: Free, Bob Sent: Wednesday, October 07, 2009 4:28 PM To: NT System Admin Issues Subject: RE: Patch management software question, again... If you read one of Brian's recent posts to this list he created the tool below because of his dislike for that particular product... -Original Message- From: Alex Eckelberry [mailto:al...@sunbelt-software.com] Sent: Wednesday, October 07, 2009 4:24 PM To: NT System Admin Issues Subject: RE: Patch management software question, again... Check out shavlik -Original Message- From: Free, Bob [mailto:r...@pge.com] Sent: Wednesday, October 07, 2009 7:15 PM To: NT System Admin Issues Subject: RE: Patch management software question, again... http://briandesmond.com/tools/simplepatch/#PatchingWithSimplePatch could get you there with a little work. It has a /NoReboot option available. The price is right for your environment and the warranty is exquisite. -Original Message- From: Joseph Heaton [mailto:jhea...@dfg.ca.gov] Sent: Wednesday, October 07, 2009 2:49 PM To: NT System Admin Issues Subject: Patch management software question, again... Anyone know of a patch management software that will allow you to check a box to NOT have the software reboot your machine, AND will also give you a report of servers that needed a reboot but weren't rebooted? Joseph L. Heaton Windows Server Support Group Information Technology Branch Department of Fish and Game 1807 13th Street, Suite 201 Sacramento, CA 95811 Desk: (916) 323-1284 ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~
RE: Patch management software question, again...
What's a VA Product? Sam -Original Message- From: Alex Eckelberry [mailto:al...@sunbelt-software.com] Sent: Monday, October 12, 2009 8:08 AM To: NT System Admin Issues Subject: RE: Patch management software question, again... AFAIK only the CTO left about a month ago, but you may have better intel than me. -Original Message- From: Rod Trent [mailto:rodtr...@myitforum.com] Sent: Saturday, October 10, 2009 6:41 PM To: NT System Admin Issues Subject: RE: Patch management software question, again... Big exec shake-up at Shavlik a couple weeks ago. -Original Message- From: Alex Eckelberry [mailto:al...@sunbelt-software.com] Sent: Saturday, October 10, 2009 5:59 PM To: NT System Admin Issues Subject: RE: Patch management software question, again... Sorry all, I had no idea that there was this bad taste on Shavlik products. They license our VIPRE SDK for their new version (for antimalware) and I've gotten to know their team fairly well, and think highly of them from an engineering standpoint. However, as always, the actual admin that has to run the product is always the better judge. Incidentally, I am seeing a LOT of attacks using PDF and Flash, etc. I really wouldn't just rely on WUS -- if you do, at the very least, stay on top of vulnerable attack vectors on non-MSFT programs. And/or run a free or cheap VA product. Alex -Original Message- From: Sam Cayze [mailto:sam.ca...@rollouts.com] Sent: Wednesday, October 07, 2009 9:24 PM To: NT System Admin Issues Subject: RE: Patch management software question, again... I like to think Alex spends his time making his awesome company more awesome, other than reading every post on this list ;) -Original Message- From: Free, Bob [mailto:r...@pge.com] Sent: Wednesday, October 07, 2009 6:33 PM To: NT System Admin Issues Subject: RE: Patch management software question, again... From Brian's post this Monday- I couldn't stand Shavlik when I was using it to patch 250 or so servers. Slower than anything and the UI was awful over any sort of realistic RDP connection. Also in the same thread, Joe said Shavlik is what we're currently using. Looking to move away from it, possibly. -Original Message- From: Free, Bob Sent: Wednesday, October 07, 2009 4:28 PM To: NT System Admin Issues Subject: RE: Patch management software question, again... If you read one of Brian's recent posts to this list he created the tool below because of his dislike for that particular product... -Original Message- From: Alex Eckelberry [mailto:al...@sunbelt-software.com] Sent: Wednesday, October 07, 2009 4:24 PM To: NT System Admin Issues Subject: RE: Patch management software question, again... Check out shavlik -Original Message- From: Free, Bob [mailto:r...@pge.com] Sent: Wednesday, October 07, 2009 7:15 PM To: NT System Admin Issues Subject: RE: Patch management software question, again... http://briandesmond.com/tools/simplepatch/#PatchingWithSimplePatch could get you there with a little work. It has a /NoReboot option available. The price is right for your environment and the warranty is exquisite. -Original Message- From: Joseph Heaton [mailto:jhea...@dfg.ca.gov] Sent: Wednesday, October 07, 2009 2:49 PM To: NT System Admin Issues Subject: Patch management software question, again... Anyone know of a patch management software that will allow you to check a box to NOT have the software reboot your machine, AND will also give you a report of servers that needed a reboot but weren't rebooted? Joseph L. Heaton Windows Server Support Group Information Technology Branch Department of Fish and Game 1807 13th Street, Suite 201 Sacramento, CA 95811 Desk: (916) 323-1284 ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ ~ Finally, powerful endpoint security that ISN'T
RE: Patch management software question, again...
vulnerability assessment -Original Message- From: Sam Cayze [mailto:sam.ca...@rollouts.com] Sent: Monday, October 12, 2009 12:48 PM To: NT System Admin Issues Subject: RE: Patch management software question, again... What's a VA Product? Sam -Original Message- From: Alex Eckelberry [mailto:al...@sunbelt-software.com] Sent: Monday, October 12, 2009 8:08 AM To: NT System Admin Issues Subject: RE: Patch management software question, again... AFAIK only the CTO left about a month ago, but you may have better intel than me. -Original Message- From: Rod Trent [mailto:rodtr...@myitforum.com] Sent: Saturday, October 10, 2009 6:41 PM To: NT System Admin Issues Subject: RE: Patch management software question, again... Big exec shake-up at Shavlik a couple weeks ago. -Original Message- From: Alex Eckelberry [mailto:al...@sunbelt-software.com] Sent: Saturday, October 10, 2009 5:59 PM To: NT System Admin Issues Subject: RE: Patch management software question, again... Sorry all, I had no idea that there was this bad taste on Shavlik products. They license our VIPRE SDK for their new version (for antimalware) and I've gotten to know their team fairly well, and think highly of them from an engineering standpoint. However, as always, the actual admin that has to run the product is always the better judge. Incidentally, I am seeing a LOT of attacks using PDF and Flash, etc. I really wouldn't just rely on WUS -- if you do, at the very least, stay on top of vulnerable attack vectors on non-MSFT programs. And/or run a free or cheap VA product. Alex -Original Message- From: Sam Cayze [mailto:sam.ca...@rollouts.com] Sent: Wednesday, October 07, 2009 9:24 PM To: NT System Admin Issues Subject: RE: Patch management software question, again... I like to think Alex spends his time making his awesome company more awesome, other than reading every post on this list ;) -Original Message- From: Free, Bob [mailto:r...@pge.com] Sent: Wednesday, October 07, 2009 6:33 PM To: NT System Admin Issues Subject: RE: Patch management software question, again... From Brian's post this Monday- I couldn't stand Shavlik when I was using it to patch 250 or so servers. Slower than anything and the UI was awful over any sort of realistic RDP connection. Also in the same thread, Joe said Shavlik is what we're currently using. Looking to move away from it, possibly. -Original Message- From: Free, Bob Sent: Wednesday, October 07, 2009 4:28 PM To: NT System Admin Issues Subject: RE: Patch management software question, again... If you read one of Brian's recent posts to this list he created the tool below because of his dislike for that particular product... -Original Message- From: Alex Eckelberry [mailto:al...@sunbelt-software.com] Sent: Wednesday, October 07, 2009 4:24 PM To: NT System Admin Issues Subject: RE: Patch management software question, again... Check out shavlik -Original Message- From: Free, Bob [mailto:r...@pge.com] Sent: Wednesday, October 07, 2009 7:15 PM To: NT System Admin Issues Subject: RE: Patch management software question, again... http://briandesmond.com/tools/simplepatch/#PatchingWithSimplePatch could get you there with a little work. It has a /NoReboot option available. The price is right for your environment and the warranty is exquisite. -Original Message- From: Joseph Heaton [mailto:jhea...@dfg.ca.gov] Sent: Wednesday, October 07, 2009 2:49 PM To: NT System Admin Issues Subject: Patch management software question, again... Anyone know of a patch management software that will allow you to check a box to NOT have the software reboot your machine, AND will also give you a report of servers that needed a reboot but weren't rebooted? Joseph L. Heaton Windows Server Support Group Information Technology Branch Department of Fish and Game 1807 13th Street, Suite 201 Sacramento, CA 95811 Desk: (916) 323-1284 ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http
RE: Patch management software question, again...
Sorry all, I had no idea that there was this bad taste on Shavlik products. They license our VIPRE SDK for their new version (for antimalware) and I've gotten to know their team fairly well, and think highly of them from an engineering standpoint. However, as always, the actual admin that has to run the product is always the better judge. Incidentally, I am seeing a LOT of attacks using PDF and Flash, etc. I really wouldn't just rely on WUS -- if you do, at the very least, stay on top of vulnerable attack vectors on non-MSFT programs. And/or run a free or cheap VA product. Alex -Original Message- From: Sam Cayze [mailto:sam.ca...@rollouts.com] Sent: Wednesday, October 07, 2009 9:24 PM To: NT System Admin Issues Subject: RE: Patch management software question, again... I like to think Alex spends his time making his awesome company more awesome, other than reading every post on this list ;) -Original Message- From: Free, Bob [mailto:r...@pge.com] Sent: Wednesday, October 07, 2009 6:33 PM To: NT System Admin Issues Subject: RE: Patch management software question, again... From Brian's post this Monday- I couldn't stand Shavlik when I was using it to patch 250 or so servers. Slower than anything and the UI was awful over any sort of realistic RDP connection. Also in the same thread, Joe said Shavlik is what we're currently using. Looking to move away from it, possibly. -Original Message- From: Free, Bob Sent: Wednesday, October 07, 2009 4:28 PM To: NT System Admin Issues Subject: RE: Patch management software question, again... If you read one of Brian's recent posts to this list he created the tool below because of his dislike for that particular product... -Original Message- From: Alex Eckelberry [mailto:al...@sunbelt-software.com] Sent: Wednesday, October 07, 2009 4:24 PM To: NT System Admin Issues Subject: RE: Patch management software question, again... Check out shavlik -Original Message- From: Free, Bob [mailto:r...@pge.com] Sent: Wednesday, October 07, 2009 7:15 PM To: NT System Admin Issues Subject: RE: Patch management software question, again... http://briandesmond.com/tools/simplepatch/#PatchingWithSimplePatch could get you there with a little work. It has a /NoReboot option available. The price is right for your environment and the warranty is exquisite. -Original Message- From: Joseph Heaton [mailto:jhea...@dfg.ca.gov] Sent: Wednesday, October 07, 2009 2:49 PM To: NT System Admin Issues Subject: Patch management software question, again... Anyone know of a patch management software that will allow you to check a box to NOT have the software reboot your machine, AND will also give you a report of servers that needed a reboot but weren't rebooted? Joseph L. Heaton Windows Server Support Group Information Technology Branch Department of Fish and Game 1807 13th Street, Suite 201 Sacramento, CA 95811 Desk: (916) 323-1284 ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~
RE: Patch management software question, again...
Big exec shake-up at Shavlik a couple weeks ago. -Original Message- From: Alex Eckelberry [mailto:al...@sunbelt-software.com] Sent: Saturday, October 10, 2009 5:59 PM To: NT System Admin Issues Subject: RE: Patch management software question, again... Sorry all, I had no idea that there was this bad taste on Shavlik products. They license our VIPRE SDK for their new version (for antimalware) and I've gotten to know their team fairly well, and think highly of them from an engineering standpoint. However, as always, the actual admin that has to run the product is always the better judge. Incidentally, I am seeing a LOT of attacks using PDF and Flash, etc. I really wouldn't just rely on WUS -- if you do, at the very least, stay on top of vulnerable attack vectors on non-MSFT programs. And/or run a free or cheap VA product. Alex -Original Message- From: Sam Cayze [mailto:sam.ca...@rollouts.com] Sent: Wednesday, October 07, 2009 9:24 PM To: NT System Admin Issues Subject: RE: Patch management software question, again... I like to think Alex spends his time making his awesome company more awesome, other than reading every post on this list ;) -Original Message- From: Free, Bob [mailto:r...@pge.com] Sent: Wednesday, October 07, 2009 6:33 PM To: NT System Admin Issues Subject: RE: Patch management software question, again... From Brian's post this Monday- I couldn't stand Shavlik when I was using it to patch 250 or so servers. Slower than anything and the UI was awful over any sort of realistic RDP connection. Also in the same thread, Joe said Shavlik is what we're currently using. Looking to move away from it, possibly. -Original Message- From: Free, Bob Sent: Wednesday, October 07, 2009 4:28 PM To: NT System Admin Issues Subject: RE: Patch management software question, again... If you read one of Brian's recent posts to this list he created the tool below because of his dislike for that particular product... -Original Message- From: Alex Eckelberry [mailto:al...@sunbelt-software.com] Sent: Wednesday, October 07, 2009 4:24 PM To: NT System Admin Issues Subject: RE: Patch management software question, again... Check out shavlik -Original Message- From: Free, Bob [mailto:r...@pge.com] Sent: Wednesday, October 07, 2009 7:15 PM To: NT System Admin Issues Subject: RE: Patch management software question, again... http://briandesmond.com/tools/simplepatch/#PatchingWithSimplePatch could get you there with a little work. It has a /NoReboot option available. The price is right for your environment and the warranty is exquisite. -Original Message- From: Joseph Heaton [mailto:jhea...@dfg.ca.gov] Sent: Wednesday, October 07, 2009 2:49 PM To: NT System Admin Issues Subject: Patch management software question, again... Anyone know of a patch management software that will allow you to check a box to NOT have the software reboot your machine, AND will also give you a report of servers that needed a reboot but weren't rebooted? Joseph L. Heaton Windows Server Support Group Information Technology Branch Department of Fish and Game 1807 13th Street, Suite 201 Sacramento, CA 95811 Desk: (916) 323-1284 ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~
RE: Patch management software question, again...
WSUS will tell you what is pending reboot. David Lum // SYSTEMS ENGINEER NORTHWEST EVALUATION ASSOCIATION (Desk) 971.222.1025 // (Cell) 503.267.9764 -Original Message- From: Joseph Heaton [mailto:jhea...@dfg.ca.gov] Sent: Thursday, October 08, 2009 11:48 AM To: NT System Admin Issues Subject: Re: Patch management software question, again... Yep...understood. We're going to end up going with GFI LANGuard, which has an option to not reboot the server upon updates. However, I would still need to get a script, or something that can give me a report on what servers need to be rebooted. Ben Scott mailvor...@gmail.com 10/8/2009 11:09 AM On Thu, Oct 8, 2009 at 2:03 PM, Joseph Heaton jhea...@dfg.ca.gov wrote: But, my sup here wants to be able to schedule the updates, install them, but NOT reboot. I don't think you want to do that. That means you've got some files on the system updated, but others pending move, so you could end up running new tasks with an inconsistent code base. I know I've seen commentary from Microsoft that says you should reboot ASAP after doing an update. Schedule the install and reboot to happen at the same time. You can schedule the install to happen after hours, too. -- Ben ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~
RE: Patch management software question, again...
The reasons we're moving away from Shavlik are: 1) Price increased dramatically. They originally purchased the product when there was only one license type. When the renewal came up last year, they renewed without realizing that Shavlik had created a new server license which, I guess, was a lot more money. The sales guy never mentioned the increased cost, so when the bill came in, my manager was quite upset. 2) Also, he was telling me that there was/is an issue with Shavlik and Server 2008, where it would reboot the box, even if you told it not to. That is our main concern, as we have lots of servers that don't play well with unexpected reboots. We're looking at GFI LANGuard at the moment, but if I can get WSUS to do what I want, combined with Group Policy, and some type of script, I'm guessing to give me a report of pending reboots, then we'd be golden. Free, Bob r...@pge.com 10/7/2009 4:32 PM From Brian's post this Monday- I couldn't stand Shavlik when I was using it to patch 250 or so servers. Slower than anything and the UI was awful over any sort of realistic RDP connection. Also in the same thread, Joe said Shavlik is what we're currently using. Looking to move away from it, possibly. -Original Message- From: Free, Bob Sent: Wednesday, October 07, 2009 4:28 PM To: NT System Admin Issues Subject: RE: Patch management software question, again... If you read one of Brian's recent posts to this list he created the tool below because of his dislike for that particular product... -Original Message- From: Alex Eckelberry [mailto:al...@sunbelt-software.com] Sent: Wednesday, October 07, 2009 4:24 PM To: NT System Admin Issues Subject: RE: Patch management software question, again... Check out shavlik -Original Message- From: Free, Bob [mailto:r...@pge.com] Sent: Wednesday, October 07, 2009 7:15 PM To: NT System Admin Issues Subject: RE: Patch management software question, again... http://briandesmond.com/tools/simplepatch/#PatchingWithSimplePatch could get you there with a little work. It has a /NoReboot option available. The price is right for your environment and the warranty is exquisite. -Original Message- From: Joseph Heaton [mailto:jhea...@dfg.ca.gov] Sent: Wednesday, October 07, 2009 2:49 PM To: NT System Admin Issues Subject: Patch management software question, again... Anyone know of a patch management software that will allow you to check a box to NOT have the software reboot your machine, AND will also give you a report of servers that needed a reboot but weren't rebooted? Joseph L. Heaton Windows Server Support Group Information Technology Branch Department of Fish and Game 1807 13th Street, Suite 201 Sacramento, CA 95811 Desk: (916) 323-1284 ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~
Re: Patch management software question, again...
On Thu, Oct 8, 2009 at 11:30 AM, Joseph Heaton jhea...@dfg.ca.gov wrote: The reasons we're moving away from Shavlik are: 1) Price increased dramatically. ... 2) ... it would reboot the box, even if you told it not to. ... ... if I can get WSUS to do what I want, combined with Group Policy ... I'm pretty sure WSUS will do all that. You can't beat the price. It's limited to Microsoft products only, of course. (I've seen a third-party product that was supposed to add fourth-party updates to WSUS, but never tried it.) WUAU: Windows Update Auto Update. This is the thing that sits in the background, checking for updates, downloading them, and installing them, depending on options and commands. By default, it looks to Microsoft's public servers for updates, but you can change that to look to your WSUS server. WSUS: Windows Software Update Services. You run a WSUS server. It acts as a local repository/mirror of updates, distributes them to WUAU clients, collects reporting information from clients, and maintains its management database. WSUS management UI: You can approve updates for just detection (reporting as needed), or installation. You can put computers in groups. You approve patches differently for each group. You can set groups to auto-approve updates. It can give you reports on update installation status, by computer or by update.Some other things. Group Policy gives you: Central configuration of WUAU. Just notify on patches, or download and prompt for install, or automatically install (same options as for the stand-alone client WUAU GUI). What WSUS server to use. When to attempt detect/install. Prompt the user to reboot or not. Some other things. We have our WSUS server set to auto-approve critical updates. Clients are set to detect/install every night at 3 AM. If the computer is off at 3 AM, it runs the detect/install as soon as the computer starts. Reboots are forced, with a 5 minute countdown displayed on the screen. Users can tell it to reboot sooner if they don't want to wait, but they can't defer it. Servers are set to detect and download and notify, but not auto install. We manually log into servers and run the updates. We only have a few servers, so this works for us. WSUS is actually a pretty good solution, I think, given the price of viable alternatives. Of course, most alternatives support non-Microsoft products, too, so that's not really the same thing. -- Ben ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~
Re: Patch management software question, again...
Ben, How can you tell it not to reboot the server? The only setting I've found is the GP setting which tells it not to automatically reboot if there's a user logged in. Ben Scott mailvor...@gmail.com 10/8/2009 9:09 AM On Thu, Oct 8, 2009 at 11:30 AM, Joseph Heaton jhea...@dfg.ca.gov wrote: The reasons we're moving away from Shavlik are: 1) Price increased dramatically. ... 2) ... it would reboot the box, even if you told it not to. ... ... if I can get WSUS to do what I want, combined with Group Policy ... I'm pretty sure WSUS will do all that. You can't beat the price. It's limited to Microsoft products only, of course. (I've seen a third-party product that was supposed to add fourth-party updates to WSUS, but never tried it.) WUAU: Windows Update Auto Update. This is the thing that sits in the background, checking for updates, downloading them, and installing them, depending on options and commands. By default, it looks to Microsoft's public servers for updates, but you can change that to look to your WSUS server. WSUS: Windows Software Update Services. You run a WSUS server. It acts as a local repository/mirror of updates, distributes them to WUAU clients, collects reporting information from clients, and maintains its management database. WSUS management UI: You can approve updates for just detection (reporting as needed), or installation. You can put computers in groups. You approve patches differently for each group. You can set groups to auto-approve updates. It can give you reports on update installation status, by computer or by update.Some other things. Group Policy gives you: Central configuration of WUAU. Just notify on patches, or download and prompt for install, or automatically install (same options as for the stand-alone client WUAU GUI). What WSUS server to use. When to attempt detect/install. Prompt the user to reboot or not. Some other things. We have our WSUS server set to auto-approve critical updates. Clients are set to detect/install every night at 3 AM. If the computer is off at 3 AM, it runs the detect/install as soon as the computer starts. Reboots are forced, with a 5 minute countdown displayed on the screen. Users can tell it to reboot sooner if they don't want to wait, but they can't defer it. Servers are set to detect and download and notify, but not auto install. We manually log into servers and run the updates. We only have a few servers, so this works for us. WSUS is actually a pretty good solution, I think, given the price of viable alternatives. Of course, most alternatives support non-Microsoft products, too, so that's not really the same thing. -- Ben ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~
Re: Patch management software question, again...
I have a WSUS GPO for servers, they are set to auto download and notify for install. Workstations GPO is auto download and schedule the install. - Original Message - From: Joseph Heaton jhea...@dfg.ca.gov To: NT System Admin Issues ntsysadmin@lyris.sunbelt-software.com Sent: Thursday, October 08, 2009 1:43 PM Subject: Re: Patch management software question, again... Ben, How can you tell it not to reboot the server? The only setting I've found is the GP setting which tells it not to automatically reboot if there's a user logged in. Ben Scott mailvor...@gmail.com 10/8/2009 9:09 AM On Thu, Oct 8, 2009 at 11:30 AM, Joseph Heaton jhea...@dfg.ca.gov wrote: The reasons we're moving away from Shavlik are: 1) Price increased dramatically. ... 2) ... it would reboot the box, even if you told it not to. ... ... if I can get WSUS to do what I want, combined with Group Policy ... I'm pretty sure WSUS will do all that. You can't beat the price. It's limited to Microsoft products only, of course. (I've seen a third-party product that was supposed to add fourth-party updates to WSUS, but never tried it.) WUAU: Windows Update Auto Update. This is the thing that sits in the background, checking for updates, downloading them, and installing them, depending on options and commands. By default, it looks to Microsoft's public servers for updates, but you can change that to look to your WSUS server. WSUS: Windows Software Update Services. You run a WSUS server. It acts as a local repository/mirror of updates, distributes them to WUAU clients, collects reporting information from clients, and maintains its management database. WSUS management UI: You can approve updates for just detection (reporting as needed), or installation. You can put computers in groups. You approve patches differently for each group. You can set groups to auto-approve updates. It can give you reports on update installation status, by computer or by update.Some other things. Group Policy gives you: Central configuration of WUAU. Just notify on patches, or download and prompt for install, or automatically install (same options as for the stand-alone client WUAU GUI). What WSUS server to use. When to attempt detect/install. Prompt the user to reboot or not. Some other things. We have our WSUS server set to auto-approve critical updates. Clients are set to detect/install every night at 3 AM. If the computer is off at 3 AM, it runs the detect/install as soon as the computer starts. Reboots are forced, with a 5 minute countdown displayed on the screen. Users can tell it to reboot sooner if they don't want to wait, but they can't defer it. Servers are set to detect and download and notify, but not auto install. We manually log into servers and run the updates. We only have a few servers, so this works for us. WSUS is actually a pretty good solution, I think, given the price of viable alternatives. Of course, most alternatives support non-Microsoft products, too, so that's not really the same thing. -- Ben ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~
Re: Patch management software question, again...
Yep, I know that's the normal way to do it, lots of you guys, and myself where I was before, do it that way. But, my sup here wants to be able to schedule the updates, install them, but NOT reboot. He then wants a report, that tells us what servers are pending a reboot due to the updates, so we can schedule those reboots. James Kerr cluster...@gmail.com 10/8/2009 10:53 AM I have a WSUS GPO for servers, they are set to auto download and notify for install. Workstations GPO is auto download and schedule the install. - Original Message - From: Joseph Heaton jhea...@dfg.ca.gov To: NT System Admin Issues ntsysadmin@lyris.sunbelt-software.com Sent: Thursday, October 08, 2009 1:43 PM Subject: Re: Patch management software question, again... Ben, How can you tell it not to reboot the server? The only setting I've found is the GP setting which tells it not to automatically reboot if there's a user logged in. Ben Scott mailvor...@gmail.com 10/8/2009 9:09 AM On Thu, Oct 8, 2009 at 11:30 AM, Joseph Heaton jhea...@dfg.ca.gov wrote: The reasons we're moving away from Shavlik are: 1) Price increased dramatically. ... 2) ... it would reboot the box, even if you told it not to. ... ... if I can get WSUS to do what I want, combined with Group Policy ... I'm pretty sure WSUS will do all that. You can't beat the price. It's limited to Microsoft products only, of course. (I've seen a third-party product that was supposed to add fourth-party updates to WSUS, but never tried it.) WUAU: Windows Update Auto Update. This is the thing that sits in the background, checking for updates, downloading them, and installing them, depending on options and commands. By default, it looks to Microsoft's public servers for updates, but you can change that to look to your WSUS server. WSUS: Windows Software Update Services. You run a WSUS server. It acts as a local repository/mirror of updates, distributes them to WUAU clients, collects reporting information from clients, and maintains its management database. WSUS management UI: You can approve updates for just detection (reporting as needed), or installation. You can put computers in groups. You approve patches differently for each group. You can set groups to auto-approve updates. It can give you reports on update installation status, by computer or by update.Some other things. Group Policy gives you: Central configuration of WUAU. Just notify on patches, or download and prompt for install, or automatically install (same options as for the stand-alone client WUAU GUI). What WSUS server to use. When to attempt detect/install. Prompt the user to reboot or not. Some other things. We have our WSUS server set to auto-approve critical updates. Clients are set to detect/install every night at 3 AM. If the computer is off at 3 AM, it runs the detect/install as soon as the computer starts. Reboots are forced, with a 5 minute countdown displayed on the screen. Users can tell it to reboot sooner if they don't want to wait, but they can't defer it. Servers are set to detect and download and notify, but not auto install. We manually log into servers and run the updates. We only have a few servers, so this works for us. WSUS is actually a pretty good solution, I think, given the price of viable alternatives. Of course, most alternatives support non-Microsoft products, too, so that's not really the same thing. -- Ben ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~
Re: Patch management software question, again...
On Thu, Oct 8, 2009 at 1:43 PM, Joseph Heaton jhea...@dfg.ca.gov wrote: How can you tell it not to reboot the server? The only setting I've found is the GP setting which tells it not to automatically reboot if there's a user logged in. Configure WUAU to auto download, but notify before installing. Now the server won't do anything until you tell it to install updates. You get the little tray icon. You click tray icon to install. When it's done, it prompts for reboot. Same as for regular WUAU without WSUS. For the above, you can either leave GP unconfigured for WUAU, or explicitly set it to 3 - Auto download and notify for install. That's under Computer - Admin Templates - Windows Components - Windows Updates - Configure Automatic Updates. If you have lots of servers and don't want to login and click icons on each one, I seem to recall coming across a VBS script on MSKB somewhere that could drive WU for you. -- Ben ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~
Re: Patch management software question, again...
On Thu, Oct 8, 2009 at 2:03 PM, Joseph Heaton jhea...@dfg.ca.gov wrote: But, my sup here wants to be able to schedule the updates, install them, but NOT reboot. I don't think you want to do that. That means you've got some files on the system updated, but others pending move, so you could end up running new tasks with an inconsistent code base. I know I've seen commentary from Microsoft that says you should reboot ASAP after doing an update. Schedule the install and reboot to happen at the same time. You can schedule the install to happen after hours, too. -- Ben ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~
RE: Patch management software question, again...
+1 I don't like the sounds of this at all. -Original Message- From: Ben Scott [mailto:mailvor...@gmail.com] Sent: Thursday, October 08, 2009 1:10 PM To: NT System Admin Issues Subject: Re: Patch management software question, again... On Thu, Oct 8, 2009 at 2:03 PM, Joseph Heaton jhea...@dfg.ca.gov wrote: But, my sup here wants to be able to schedule the updates, install them, but NOT reboot. I don't think you want to do that. That means you've got some files on the system updated, but others pending move, so you could end up running new tasks with an inconsistent code base. I know I've seen commentary from Microsoft that says you should reboot ASAP after doing an update. Schedule the install and reboot to happen at the same time. You can schedule the install to happen after hours, too. -- Ben ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~
Re: Patch management software question, again...
Yep...understood. We're going to end up going with GFI LANGuard, which has an option to not reboot the server upon updates. However, I would still need to get a script, or something that can give me a report on what servers need to be rebooted. Ben Scott mailvor...@gmail.com 10/8/2009 11:09 AM On Thu, Oct 8, 2009 at 2:03 PM, Joseph Heaton jhea...@dfg.ca.gov wrote: But, my sup here wants to be able to schedule the updates, install them, but NOT reboot. I don't think you want to do that. That means you've got some files on the system updated, but others pending move, so you could end up running new tasks with an inconsistent code base. I know I've seen commentary from Microsoft that says you should reboot ASAP after doing an update. Schedule the install and reboot to happen at the same time. You can schedule the install to happen after hours, too. -- Ben ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~
RE: Patch management software question, again...
You could try scripting pendmoves with a for loop http://technet.microsoft.com/en-us/sysinternals/bb897556.aspx Or read HKLM\System\CurrentControlSet\Control\Session Manager\PendingFileRenameOperations value directly in a script Might be some other ways as well but I believe those would catch the file operations that are usually why a HF needs to reboot. Still a far better idea to do the patching/reboots in the same maintenance period. Asking for trouble if you don't but you know that already :-) -Original Message- From: Joseph Heaton [mailto:jhea...@dfg.ca.gov] Sent: Thursday, October 08, 2009 11:48 AM To: NT System Admin Issues Subject: Re: Patch management software question, again... Yep...understood. We're going to end up going with GFI LANGuard, which has an option to not reboot the server upon updates. However, I would still need to get a script, or something that can give me a report on what servers need to be rebooted. Ben Scott mailvor...@gmail.com 10/8/2009 11:09 AM On Thu, Oct 8, 2009 at 2:03 PM, Joseph Heaton jhea...@dfg.ca.gov wrote: But, my sup here wants to be able to schedule the updates, install them, but NOT reboot. I don't think you want to do that. That means you've got some files on the system updated, but others pending move, so you could end up running new tasks with an inconsistent code base. I know I've seen commentary from Microsoft that says you should reboot ASAP after doing an update. Schedule the install and reboot to happen at the same time. You can schedule the install to happen after hours, too. -- Ben ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~
Re: Patch management software question, again...
We are using Microsoft Configuration Manager, which uses WSUS but has more granular control. It's not perfect but you can great those sort of policies. Shavlik HFNetcheck is supposed to do this, but it's been a few years since I used it last. Tom Miller Engineer, Information Technology Hampton-Newport News Community Services Board 757-788-0528 Joseph Heaton jhea...@dfg.ca.gov 10/07/09 5:49 PM Anyone know of a patch management software that will allow you to check a box to NOT have the software reboot your machine, AND will also give you a report of servers that needed a reboot but weren't rebooted? Joseph L. Heaton Windows Server Support Group Information Technology Branch Department of Fish and Game 1807 13th Street, Suite 201 Sacramento, CA 95811 Desk: (916) 323-1284 ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ Confidentiality Notice: This e-mail message, including attachments, is for the sole use of the intended recipient(s) and may contain confidential and privileged information. Any unauthorized review, use, disclosure, or distribution is prohibited. If you are not the intended recipient, please contact the sender by reply e-mail and destroy all copies of the original message. ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~
RE: Patch management software question, again...
http://briandesmond.com/tools/simplepatch/#PatchingWithSimplePatch could get you there with a little work. It has a /NoReboot option available. The price is right for your environment and the warranty is exquisite. -Original Message- From: Joseph Heaton [mailto:jhea...@dfg.ca.gov] Sent: Wednesday, October 07, 2009 2:49 PM To: NT System Admin Issues Subject: Patch management software question, again... Anyone know of a patch management software that will allow you to check a box to NOT have the software reboot your machine, AND will also give you a report of servers that needed a reboot but weren't rebooted? Joseph L. Heaton Windows Server Support Group Information Technology Branch Department of Fish and Game 1807 13th Street, Suite 201 Sacramento, CA 95811 Desk: (916) 323-1284 ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~
RE: Patch management software question, again...
Check out shavlik -Original Message- From: Free, Bob [mailto:r...@pge.com] Sent: Wednesday, October 07, 2009 7:15 PM To: NT System Admin Issues Subject: RE: Patch management software question, again... http://briandesmond.com/tools/simplepatch/#PatchingWithSimplePatch could get you there with a little work. It has a /NoReboot option available. The price is right for your environment and the warranty is exquisite. -Original Message- From: Joseph Heaton [mailto:jhea...@dfg.ca.gov] Sent: Wednesday, October 07, 2009 2:49 PM To: NT System Admin Issues Subject: Patch management software question, again... Anyone know of a patch management software that will allow you to check a box to NOT have the software reboot your machine, AND will also give you a report of servers that needed a reboot but weren't rebooted? Joseph L. Heaton Windows Server Support Group Information Technology Branch Department of Fish and Game 1807 13th Street, Suite 201 Sacramento, CA 95811 Desk: (916) 323-1284 ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~
RE: Patch management software question, again...
If you read one of Brian's recent posts to this list he created the tool below because of his dislike for that particular product... -Original Message- From: Alex Eckelberry [mailto:al...@sunbelt-software.com] Sent: Wednesday, October 07, 2009 4:24 PM To: NT System Admin Issues Subject: RE: Patch management software question, again... Check out shavlik -Original Message- From: Free, Bob [mailto:r...@pge.com] Sent: Wednesday, October 07, 2009 7:15 PM To: NT System Admin Issues Subject: RE: Patch management software question, again... http://briandesmond.com/tools/simplepatch/#PatchingWithSimplePatch could get you there with a little work. It has a /NoReboot option available. The price is right for your environment and the warranty is exquisite. -Original Message- From: Joseph Heaton [mailto:jhea...@dfg.ca.gov] Sent: Wednesday, October 07, 2009 2:49 PM To: NT System Admin Issues Subject: Patch management software question, again... Anyone know of a patch management software that will allow you to check a box to NOT have the software reboot your machine, AND will also give you a report of servers that needed a reboot but weren't rebooted? Joseph L. Heaton Windows Server Support Group Information Technology Branch Department of Fish and Game 1807 13th Street, Suite 201 Sacramento, CA 95811 Desk: (916) 323-1284 ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~
RE: Patch management software question, again...
From Brian's post this Monday- I couldn't stand Shavlik when I was using it to patch 250 or so servers. Slower than anything and the UI was awful over any sort of realistic RDP connection. Also in the same thread, Joe said Shavlik is what we're currently using. Looking to move away from it, possibly. -Original Message- From: Free, Bob Sent: Wednesday, October 07, 2009 4:28 PM To: NT System Admin Issues Subject: RE: Patch management software question, again... If you read one of Brian's recent posts to this list he created the tool below because of his dislike for that particular product... -Original Message- From: Alex Eckelberry [mailto:al...@sunbelt-software.com] Sent: Wednesday, October 07, 2009 4:24 PM To: NT System Admin Issues Subject: RE: Patch management software question, again... Check out shavlik -Original Message- From: Free, Bob [mailto:r...@pge.com] Sent: Wednesday, October 07, 2009 7:15 PM To: NT System Admin Issues Subject: RE: Patch management software question, again... http://briandesmond.com/tools/simplepatch/#PatchingWithSimplePatch could get you there with a little work. It has a /NoReboot option available. The price is right for your environment and the warranty is exquisite. -Original Message- From: Joseph Heaton [mailto:jhea...@dfg.ca.gov] Sent: Wednesday, October 07, 2009 2:49 PM To: NT System Admin Issues Subject: Patch management software question, again... Anyone know of a patch management software that will allow you to check a box to NOT have the software reboot your machine, AND will also give you a report of servers that needed a reboot but weren't rebooted? Joseph L. Heaton Windows Server Support Group Information Technology Branch Department of Fish and Game 1807 13th Street, Suite 201 Sacramento, CA 95811 Desk: (916) 323-1284 ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~
RE: Patch management software question, again...
WSUS! Add those servers to a group, GPO that group to not reboot upon updates, and schedule a report to tell you which machines are pending reboot. Viola. -Original Message- From: Joseph Heaton [mailto:jhea...@dfg.ca.gov] Sent: Wednesday, October 07, 2009 4:49 PM To: NT System Admin Issues Subject: Patch management software question, again... Anyone know of a patch management software that will allow you to check a box to NOT have the software reboot your machine, AND will also give you a report of servers that needed a reboot but weren't rebooted? Joseph L. Heaton Windows Server Support Group Information Technology Branch Department of Fish and Game 1807 13th Street, Suite 201 Sacramento, CA 95811 Desk: (916) 323-1284 ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~
RE: Patch management software question, again...
I like to think Alex spends his time making his awesome company more awesome, other than reading every post on this list ;) -Original Message- From: Free, Bob [mailto:r...@pge.com] Sent: Wednesday, October 07, 2009 6:33 PM To: NT System Admin Issues Subject: RE: Patch management software question, again... From Brian's post this Monday- I couldn't stand Shavlik when I was using it to patch 250 or so servers. Slower than anything and the UI was awful over any sort of realistic RDP connection. Also in the same thread, Joe said Shavlik is what we're currently using. Looking to move away from it, possibly. -Original Message- From: Free, Bob Sent: Wednesday, October 07, 2009 4:28 PM To: NT System Admin Issues Subject: RE: Patch management software question, again... If you read one of Brian's recent posts to this list he created the tool below because of his dislike for that particular product... -Original Message- From: Alex Eckelberry [mailto:al...@sunbelt-software.com] Sent: Wednesday, October 07, 2009 4:24 PM To: NT System Admin Issues Subject: RE: Patch management software question, again... Check out shavlik -Original Message- From: Free, Bob [mailto:r...@pge.com] Sent: Wednesday, October 07, 2009 7:15 PM To: NT System Admin Issues Subject: RE: Patch management software question, again... http://briandesmond.com/tools/simplepatch/#PatchingWithSimplePatch could get you there with a little work. It has a /NoReboot option available. The price is right for your environment and the warranty is exquisite. -Original Message- From: Joseph Heaton [mailto:jhea...@dfg.ca.gov] Sent: Wednesday, October 07, 2009 2:49 PM To: NT System Admin Issues Subject: Patch management software question, again... Anyone know of a patch management software that will allow you to check a box to NOT have the software reboot your machine, AND will also give you a report of servers that needed a reboot but weren't rebooted? Joseph L. Heaton Windows Server Support Group Information Technology Branch Department of Fish and Game 1807 13th Street, Suite 201 Sacramento, CA 95811 Desk: (916) 323-1284 ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~
Re: Patch management software question, again...
On Wed, Oct 7, 2009 at 5:48 PM, Joseph Heaton jhea...@dfg.ca.gov wrote: Anyone know of a patch management software that will allow you to check a box to NOT have the software reboot your machine, AND will also give you a report of servers that needed a reboot but weren't rebooted? The first part, WSUS, WUAU, and AD GP can give you. You have options for what to push, when to push it, whether to require a reboot, whether to immediately redo missed patch detections, whether to allow users to defer a reboot, etc. I can generally derive the later by looking at the reports in WSUS for what patches are installed and what are pending. But we only have a couple servers anyway, and servers don't get auto patched (we log in to them and tell it to run), so there's usually no half patched states to worry about. (That said, half patched is generally an unreliable configuration, so I'd suggest avoiding it in the first place.) -- Ben ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~
