Microsoft Patches!
Microsoft Patches!
Is there a way to verify Remotely that a user has installed a Security patch?
http://www.sysinternals.com/Utilities/PsInfo.html
You need to have enough access to the machine to have "remote registry" access (domain admin usually), but it can tell you a *ton* of useful information, including what is installed on the machine, which then includes patches.
Anyone that has to admin/maintain windows on more than a couple of machines should get familiar w/ the sysinternals site. Awesome stuff, all freeware.
You need to have enough access to the machine to have "remote registry" access (domain admin usually), but it can tell you a *ton* of useful information, including what is installed on the machine, which then includes patches.
Anyone that has to admin/maintain windows on more than a couple of machines should get familiar w/ the sysinternals site. Awesome stuff, all freeware.
May 2003 - "Mission Accomplished"
June 2005 - "The mission isn't easy, and it will not be accomplished overnight"
-- G W Bush, freelance writer for The Daily Show.
June 2005 - "The mission isn't easy, and it will not be accomplished overnight"
-- G W Bush, freelance writer for The Daily Show.
-
Adelrune Argenti
- Almost 1337
- Posts: 831
- Joined: July 9, 2002, 4:22 pm
- Location: San Diego, CA
You can also install Windows Software Update Server and then apply all patches to every system in your domain. You can edit your group policy for the domain to force everyone to get updates each day and either have the machine reboot or prompt for a reboot.
It also allows you to see each system and which updates it has installed.
I use this to cut down on bandwidth usage since all patches come from an internal server as well as to force updates on people and not rely on the lazy people to actually do something I tell them to.
It also allows you to see each system and which updates it has installed.
I use this to cut down on bandwidth usage since all patches come from an internal server as well as to force updates on people and not rely on the lazy people to actually do something I tell them to.
Adelrune Argenti
-
Animalor
- Super Poster!
- Posts: 5902
- Joined: July 8, 2002, 12:03 pm
- Gender: Male
- XBL Gamertag: Anirask
- PSN ID: Anirask
- Location: Canada
We use ScriptLogic Patch Management at my office. We get the patches about 2 days after MS releases while they do some testing to make sure nothing breaks.
You can also configure what you want or may not want to install.
For instance, we can't install the recent IE fixes because the June updates to IE that change activeX will mess up our users ability to use Siebel. Until we upgrade Siebel (which I'm told should happen in the coming month or 2) we can't install and have disabled IE patches (which sucks cause most patches are IE anyhow.
If you're gonna be in a corporate environment, then forcing system patching and being able to control what goes in and what doesn't is critical.
You can also configure what you want or may not want to install.
For instance, we can't install the recent IE fixes because the June updates to IE that change activeX will mess up our users ability to use Siebel. Until we upgrade Siebel (which I'm told should happen in the coming month or 2) we can't install and have disabled IE patches (which sucks cause most patches are IE anyhow.
If you're gonna be in a corporate environment, then forcing system patching and being able to control what goes in and what doesn't is critical.