Access the answers to your technology questions today.
Subscribe Now
30-day free trial. Register in 60 seconds.
What Makes Experts Exchange Unique?
Members of the expert community talk about why the experience at Experts Exchange is different than what you will find anywhere else.
Try it out and discover for yourself.
Subscribe Now
30-day free trial. Register in 60 seconds.
Join the Community
Give a Little. Get a Lot.
Join the community of experts here and help other tech pros by answering question in your area of expertise. You can earn FREE access to all Experts Exchange's premium features and resources.
Join the Community
by: JConchiePosted on 2003-08-18 at 13:22:24ID: 9176319
Microsoft provides several patch management tools, some of which are available for free. For small businesses, Microsoft recommends using its basic Windows Update Service, the same service most consumers use to keep their Windows systems up to date. The autoupdate client for Windows Update is included in Windows XP and Windows 2000 Service Pack 3.
ownloads/d etails.asp x? FamilyId =A7AA96E4- 6E41-4F54- 972C-AE66A 4E4BF6C&di splaylang= en
kstation software at:
ite/index. html .com/
For larger organizations, or those that want to centralize patch management internally, Microsoft offers Software Update Services (SUS). SUS is basically a Windows Update Server housed on your corporate network. Using a Win 2000 Server and installing SUS software, which is a free download from Microsoft, you can point the autoupdate clients on all your systems to your internal server. The internal server synchs with Microsoft's Update Servers to provide up-to-date patch installations. One note: SUS only synchs critical updates for Windows. To configure the client systems to monitor the internal SUS server, the changes can be made through Group Policy or by manual registry changes on each system.
For larger companies, Microsoft released the SUS Feature Pack to its existing System Management Server (SMS) product. While organizations must purchase an SMS server and clients, the SUS Feature Pack is a free add-on. So for organizations already using SMS, the Feature Pack provides a cost-effective means of providing enterprise patch management. The feature pack uses HfNetChk, Microsoft's freely available patch tool licensed from Shavlik Technologies, as its engine to show patches that are installed on a machine and those that are missing. A wizard then lets administrators create SMS deployment packages to enable the missing patches to be installed on the necessary systems.
Microsoft offers some powerful patch management tools for free, but they are not designed to scale to very large corporations. SMS has the ability to support a large organization, but it is a bit of overkill if you are just looking for patch management. Additionally, the free Software Update Service only supports "Critical" updates, so you will miss out on any other deployments Microsoft releases.
The SUS download is at:
http://www.microsoft.com/d
You can find third party makers of patch deployment-to-multiple-wor
http://www.bigfix.com/webs
http://www.securitybastion
http://www.patchlink.com/
http://www.shavlik.com/