asked on

Desktop Authority vs Languard NSS

Just came into a new department and the DST changes have made it very clear that we are sadly lacking in management of Windows Updates. Currently running a Win 2000 Server domain. We have plans to upgrade to Win 2003 Server, but it won't happen in the near future.
I have been looking into software to help manage our updating process. I'm considering two.
1. Desktop Authority - seems like it will do everything I want. I also like the remote control option so I can remotely log into a user's pc. That would come in handy for troubleshooting, but all of our offices are within a couple of miles, travel time is almost non-existent, so it's not critical.
2. GFI Languard Network Security Scanner - is more of a network scanning tool that can also be used to push out updates. I like the functionality of the network scan and having that information on the network readily available.

So, what I am looking for is comments/suggestions from people who have used either or both of these. What did you think of the software? Did it do what you wanted? How easy was it to install and maintain? Any other suggestions?

Thanks,

michko

tonypjones

Depending on the size of your organization, both of those may be overkills. I have 350+ node network with 41 servers. I use VNC for desktop emulation and the Microsoft WSUS for updates. Both are free. Granted you need to know a little something about AD and the Group Policy to run the WSUS, but there are plenty of documents to help you through it.

As far as network scanning tools, what are you looking for there? Do you want traffic analysis, node uptime. etc etc.

michko

ASKER

Have approximately 150 pc's on 9 nodes with 10 servers (this includes backup server, PBX, Exchange, Blackberry, etc). It is a win2000 server domain, could be wrong but I didn't think win2k server supported WSUS. All pc's are Win XP Pro. I can handle the AD and GP, mostly need something that will push out updates. If I can configure WSUS to do this, great.

Network scanning - mostly interested in traffic analysis, but also want the capability to scan for unsecured shared folders, open ports, etc.

ASKER CERTIFIED SOLUTION

tonypjones

membership

This solution is only available to members.

To access this solution, you must be a member of Experts Exchange.

Start Free Trial

michko

ASKER

Let me make sure I have this right - I don't need to have the 2k3 server be the DC? I can still do all user validation through the 2k server like it's set up now and still use a 2k3 server for WSUS?

I've played some with Ethereal so guess I'll have to get a little more proficient with it.

tonypjones

Yes indeed. My PDC and BDC are both 2k machines. In fact, all of my major application servers are 2k. Only my web and WSUS servers are 2k3. I push out patches to everything from the WSUS server using the 2k AD and GP.

michko

ASKER

So then, will I need another server just for WSUS, or can I utilize one of my 2 2k3 servers? One of these is an SQL server, the other is for data storage.

tonypjones

Hmmm...I'd have to say that it depends mostly on your connection speed to those servers, storage size of the SQL database and storage server, and how taxed the processor is on the two servers currently. I have one server dedicated to it, but thats overkill. I'd think it would be fine on another application server as long as you keep an eye on your free space. I haven't noticed mine working the processor very hard

fpcit

Just in case, you needed an extra opinion...

We've ran WSUS in a VM, and currently on a beefed up desktop for 250 pc's on4 4 nodes, and 36 servers. It runs great! Good luck with your patching and the "New Y2K". :-)