RE: Change control (was RE: [On-Topic] Patching with PSEXEC)

2009-09-01 Thread Erik Goldoff
e: Change control (was RE: [On-Topic] Patching with PSEXEC) I've worked for a number of outsourcing companies and the change control is always very tight. It's the only way they can do it, but I admit it is completely inflexible for the client - particularly those that retain IT staff wh

RE: Change control (was RE: [On-Topic] Patching with PSEXEC)

2009-09-01 Thread Chris Orovet
Hmm do we work for the same company? Regards, Chris Orovet From: James Rankin [mailto:kz2...@googlemail.com] Sent: Monday, August 31, 2009 3:59 PM To: NT System Admin Issues Subject: Re: Change control (was RE: [On-Topic] Patching with PSEXEC) I've worked for a numb

RE: [On-Topic] Patching with PSEXEC

2009-08-31 Thread Brian Desmond
I have patched tens of thousands of boxes with psexec. My current patching script I use is a VBScript which I launch from psexec. Works great. Logging is built-in to the scripts... Thanks, Brian Desmond br...@briandesmond.com c - 312.731.3132 Active Directory, 4th Ed - http://www.briandesmond.

Re: Change control (was RE: [On-Topic] Patching with PSEXEC)

2009-08-31 Thread Jon Harris
ace any repercussions from deploying w/out testing? I >> would use them as an opportunity to either work with him or go above him >> with a plan on “this is how we should handle change, xxx problems happened >> because we had no process and ExampleA and ExampleB problems would have been

Re: Change control (was RE: [On-Topic] Patching with PSEXEC)

2009-08-31 Thread James Rankin
e been > prevented, here’s how….” > > > > Dave > > > > *From:* James Rankin [mailto:kz2...@googlemail.com] > *Sent:* Monday, August 31, 2009 12:09 PM > *To:* NT System Admin Issues > *Subject:* Re: [On-Topic] Patching with PSEXEC > > > > The problem is al

Change control (was RE: [On-Topic] Patching with PSEXEC)

2009-08-31 Thread David Lum
[mailto:kz2...@googlemail.com] Sent: Monday, August 31, 2009 12:09 PM To: NT System Admin Issues Subject: Re: [On-Topic] Patching with PSEXEC The problem is all the companies with these stringent change control processes have been, to speak proverbially, bitten squarely in the ass by a lack of

Re: [On-Topic] Patching with PSEXEC

2009-08-31 Thread James Rankin
ensibly is a company I > will not work for. > > > > Dave > > > > *From:* tony patton [mailto:tony.pat...@quinn-insurance.com] > *Sent:* Monday, August 31, 2009 8:08 AM > *To:* NT System Admin Issues > *Subject:* Re: [On-Topic] Patching with PSEXEC > > > &

RE: [On-Topic] Patching with PSEXEC

2009-08-31 Thread David Lum
elll!!) . A company not thinking sensibly is a company I will not work for. Dave From: tony patton [mailto:tony.pat...@quinn-insurance.com] Sent: Monday, August 31, 2009 8:08 AM To: NT System Admin Issues Subject: Re: [On-Topic] Patching with PSEXEC What I mean by no control is two-fold: 1. I don

Re: [On-Topic] Patching with PSEXEC

2009-08-31 Thread James Rankin
alue of logging, reporting, error > handling, etc… > > > > It’s a significant challenge. > > > > -sc > > > > *From:* James Rankin [mailto:kz2...@googlemail.com] > *Sent:* Monday, August 31, 2009 11:32 AM > *To:* NT System Admin Issues > *Subject:* Re: [On

Re: [On-Topic] Patching with PSEXEC

2009-08-31 Thread Jon Harris
ton > Desktop Operations Cavan > Ext 8078 > Direct Dial 049 435 2878 > email: tony.pat...@quinn-insurance.com > > > From: Jon Harris To: "NT System Admin Issues" < > ntsysadmin@lyris.sunbelt-software.com> > Dat

RE: [On-Topic] Patching with PSEXEC

2009-08-31 Thread Steven M. Caesare
From: James Rankin [mailto:kz2...@googlemail.com] Sent: Monday, August 31, 2009 9:49 AM To: NT System Admin Issues Subject: Re: [On-Topic] Patching with PSEXEC We used to use a batch script using psexec to patch 500 Windows NT Server systems because management wouldn't pay for anything

Re: [On-Topic] Patching with PSEXEC

2009-08-31 Thread tony patton
31/08/2009 16:37 Subject: Re: [On-Topic] Patching with PSEXEC Okay I will bite on this, why no WSUS? I am directing this to the OP now. It is relativity free, it does require a license for a machine but it will run on a desktop (not very well but it will run). Server licenses are not chea

Re: [On-Topic] Patching with PSEXEC

2009-08-31 Thread Jon Harris
n. > > To use PSEXEC long-term would be a full-time job, and we have enough to do > at the minute. > > Regards > > Tony Patton > Desktop Operations Cavan > Ext 8078 > Direct Dial 049 435 2878 > email: *tony.pat...@quinn-insurance.com*

Re: [On-Topic] Patching with PSEXEC

2009-08-31 Thread James Rankin
; > > > *From:* James Rankin [mailto:kz2...@googlemail.com] > *Sent:* Monday, August 31, 2009 9:49 AM > *To:* NT System Admin Issues > *Subject:* Re: [On-Topic] Patching with PSEXEC > > > > We used to use a batch script using psexec to patch 500 Windows NT Server >

Re: [On-Topic] Patching with PSEXEC

2009-08-31 Thread tony patton
ance.com From: Jonathan Link To: "NT System Admin Issues" Date: 31/08/2009 15:30 Subject: Re: [On-Topic] Patching with PSEXEC Out of curiosity, what exactly is running at machine startup (and why can't you control it)? Or are you confusing startup with logon? Startup and

RE: [On-Topic] Patching with PSEXEC

2009-08-31 Thread tony patton
, August 31, 2009 10:18 AM To: NT System Admin Issues Subject: RE: [On-Topic] Patching with PSEXEC The reasoning for not using GPO's is the amount of things that are already running on machine startup, no control over this. Machine shutdown GPO is an option. -sc, the reason I mentioned

RE: [On-Topic] Patching with PSEXEC

2009-08-31 Thread Steven M. Caesare
ystem Admin Issues Subject: RE: [On-Topic] Patching with PSEXEC The reasoning for not using GPO's is the amount of things that are already running on machine startup, no control over this. Machine shutdown GPO is an option. -sc, the reason I mentioned logging, or lack thereof, is

RE: [On-Topic] Patching with PSEXEC

2009-08-31 Thread Steven M. Caesare
I agree on the "it becomes a full time job part". However, he specifically mention non-MS apps... and WSUS won't do that. -sc From: James Rankin [mailto:kz2...@googlemail.com] Sent: Monday, August 31, 2009 9:49 AM To: NT System Admin Issues Subject: Re: [On-Topic] Patch

Re: [On-Topic] Patching with PSEXEC

2009-08-31 Thread Jonathan Link
@quinn-insurance.com > > > From: "Sam Cayze" To: "NT System Admin Issues" > Date: 31/08/2009 13:35 Subject: RE: > [On-Topic] Patching with PSEXEC > -- > > > > +1 > > I just use psexec for the random one-off tasks. &

RE: [On-Topic] Patching with PSEXEC

2009-08-31 Thread tony patton
se PSEXEC long-term would be a full-time job, and we have enough to do at the minute. Regards Tony Patton Desktop Operations Cavan Ext 8078 Direct Dial 049 435 2878 email: tony.pat...@quinn-insurance.com From: "Sam Cayze" To: "NT System Admin Issues" Date: 31/08/2009 13:35

Re: [On-Topic] Patching with PSEXEC

2009-08-31 Thread James Rankin
We used to use a batch script using psexec to patch 500 Windows NT Server systems because management wouldn't pay for anything. We had to do the OS, Internet Explorer (all versions), Adobe, Office, all the other stuff. We started off using a text file full of data being parsed for the relevant syst

RE: [On-Topic] Patching with PSEXEC

2009-08-31 Thread Steven M. Caesare
You don't want logging? Did you mean that? I'd suggest it's critical. I'd say that trying "roll your own" methods for patch management on 2800 desktops is going to be pretty tough to manage, unless you have a VERY locked down and cookie-cutter infrastructure. -sc From: tony patton [mail

RE: [On-Topic] Patching with PSEXEC

2009-08-31 Thread Sam Cayze
+1 I just use psexec for the random one-off tasks. Sam From: Kennedy, Jim [mailto:kennedy...@elyriaschools.org] Sent: Monday, August 31, 2009 6:57 AM To: NT System Admin Issues Subject: RE: [On-Topic] Patching with PSEXEC Ok, I am going off in a

RE: [On-Topic] Patching with PSEXEC

2009-08-31 Thread Kennedy, Jim
Ok, I am going off in a completely different direction. I did not see the part where you talked to others about PSEXEC so I don't know why you are going in that direction. Why not just script it to the machines via GPO. If it is a machine policy the install/update will run with elevated privs s