How do you deploy Win 2k Service Packs??

[Darkstar]

Just looking for some ideas on how you deploy Win 2k service packs. I just got a MS Security Update Services server up and running and configured in AD, so I thought it might be fun to continue in this vein and install SP4 remotely.

We're pretty much getting big enough to where it warrants remotely doing more things. At least that's my excuse, as I am laaaaaazy.

[PuterGeekGirl]

I deploy mine using Microsoft SMS......thats how I deploy all my software.

I do other MS patches via Microsoft SUS (software update services), its free, but doesn't do SP's

Another tool, GFI Languard is good for patching and does SP's. http://www.gfi.com/lannetscan/ you can push all updated and patches from right there, scan all desktops or servers, I'm using it for servers, its pretty cool!

[Diver01]

We use Marimba here. I have not personally used it but it seems to get the job done...


http://www.marimba.com/

[dcohn]

HFNetChk Pro, nothing beats this. It allows you to see abolutely every server and exactly what patches are missing. You can create scheduled updates, watch list etc. This is the company that built the Update products for Microsoft.
http://www.shavlik.com/pHFNetChkPro.aspx

Download the free utility first since if you have under 50 systems it works fine. I use it in house where we have only 35 servers (no desktops to worry about really).

Good luck

DC

Just looking for some ideas on how you deploy Win 2k service packs. I just got a MS Security Update Services server up and running and configured in AD, so I thought it might be fun to continue in this vein and install SP4 remotely.

We're pretty much getting big enough to where it warrants remotely doing more things. At least that's my excuse, as I am laaaaaazy.

[PuterGeekGirl]

**Update** Looks like I can now pull my SP's using MS SUS. Til now it hasn't been an option.

http://www.microsoft.com/downloads/d...displaylang=en

I went to get my updates for the week and now SP4 is there! Guess some sort of update has been done without us knowing!

[Darkstar]

**Update** Looks like I can now pull my SP's using MS SUS. Til now it hasn't been an option.

http://www.microsoft.com/downloads/d...displaylang=en

I went to get my updates for the week and now SP4 is there! Guess some sort of update has been done without us knowing!

Are you sure about this? Everything I've seen and done leads me to still believe you can't deploy service packs with SUS. Is it really working for you?

***Nevermind, you are correct!! They just implemented it.

Does SUS support service packs?

A. Yes. Service packs are now available through SUS starting with Windows 2000 SP4 and Windows XP SP1. Future service packs for Windows Server™ 2003 will also be made available via SUS as the service packs are released.

[PuterGeekGirl]

[+Daemon+]

yes MS SUS and SMS will work

[browolf]

you can use gfi languard to push applications too, if they're in single file installs, like adobe acrobat 6 and its netopsystems installer.

It wont seem to do multi-file installations. i'm using the incredibly odd. jt.exe from a service pack instead.
which is like 'at' but with tonnes more obfuscated options. but the most useful being the ability to send the run-as username and password.

~Andy

[Gearbox]

Anyone have a quick guide on installing SUS (for WIN2K3) and clients?

[PuterGeekGirl]

Anyone have a quick guide on installing SUS (for WIN2K3) and clients?

Not much to it, hope this helps.

http://www.microsoft.com/technet/tre...h_sus_liwx.asp

http://www.microsoft.com/technet/tre...h_sus_liwx.asp

http://www.microsoft.com/technet/tre...h_sus_liwx.asp

[Darkstar]

There's a whitepaper on the SUS site that had everything I needed. Mainly it's just a matter of getting your group policy the way you want it.

Oh, and make sure if you're using SUS to deploy SP4 your users know now to reboot in the middle of the update installations, even if it looks like their computer is doing nothing!! Happened twice here, the morons.

[browolf]

you can use gfi languard to push applications too, if they're in single file installs, like adobe acrobat 6 and its netopsystems installer.

It wont seem to do multi-file installations. i'm using the incredibly odd. jt.exe from a service pack instead.
which is like 'at' but with tonnes more obfuscated options. but the most useful being the ability to send the run-as username and password.

~Andy

today I discovered the sfx options on winrar. Think I can use that to create a single file install that gfi languard will accept.

:-)