Is there a difference between security updates and patches? Does Windows XP Update tool do both of them or just the security updates and the patches need to be done manually? Can someone shed some light on it, I work at a place with 5 servers and 50 workstations and we don't have WSUS or something like that running, we only have GP set to do Windows Updates or regular basis, is this sufficient to get ALL available security and updates?
Security updates are patches that address the patching of security holes, while patches are general fixes which can include security updates. The automatic windows update updates the important patches, and among those are the security updates and some other patches that by M$ are regarded as important. Other upgrades which can add functionality to the OS aren't automatically updated. Those you'd have to do manually by starting windowsupdates and then not selecting the simple update option, but rather the manual one. The same applies for driver updates which aren't upgraded automatically either. Generally I'd be carefull about driver updates. I've often seen a PC not booting or something not working after such an upgrade.
if my GP is set to Automatic Updates does it do the basic one with only most important updates or it downloads and install all available?
It doesn't install all the updates available, only the important ones are done.
so then I need to run around :-) and install the rest of it on each machine? or then I'd have to have a WSUS or similar program running to do it globally?