Solved

Microsoft, Windows 2000 server and 2003 server, Windows 2000 server and 2003 server, No internet access from these servers

Posted on 2007-12-06
7
223 Views
Last Modified: 2013-12-05
what is best and proven method to update MS patches/updates to servers that don't have access to the internet(this is on purpose and the servers can't be connected to the internet due to security requirements)
0
Comment
Question by:cde123ans
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 2
  • 2
7 Comments
 
LVL 10

Accepted Solution

by:
Cro0707 earned 125 total points
ID: 20426029
Best method is that you implement WSUS on one of servers that are able to go to internet. Others servers will updates trought this server. This is recommended by Microsoft and this is best method. Current version of WSUS is 3.0, http://technet.microsoft.com/en-us/wsus/default.aspx

Other methods are that you download patches and install them manualy on all others servers.

Thirt solution is that you download program called Autopatcher 2003, this is program that have all pathes compiled into one single EXE file, all that you need to do is run this program, then you will be able to choose which updates you want to install. Problem is that AP has stop updating before few months, but this is still great choice. http://www.autopatcher.com

Hope this help!
0
 

Author Comment

by:cde123ans
ID: 20426092
Cro0707, thank you  the WSUS is good, but I've seen/read about issues with 3.0.  I would probably implement 2.0, but I'm not quite at that knowledge level yet.  

Can patches be downloaded to any hard drive, then burned to CD, then installed?  Can I simply copy a folder from patches that have been installed on other similar type servers that ARE patched(these)?  

I guess my main need is to learn what is best way to download the patches manually, then how to apply on those "private" servers(of course this refers to servers that don't have access to the internet)

Thank You for quick response,
Cesar
0
 
LVL 10

Expert Comment

by:Cro0707
ID: 20426120
Yes, patches are normal *.exe files that can be downloaded and burned to CD, or copyed to USB drives, over the network, etc... More info at http://www.microsoft.com/technet/archive/community/columns/security/essays/secpatch.mspx?mfr=true

Once that you collect all of those patches manualy, you can install them on as many servers you want to.

Also, good practice is that you download SP2 for MS Windows 2003 server, because most of the patches are already in SP2. After that, you only need to download patches that are released after SP2 and install them on your servers.

But if you want to save time, try to use Autopatcher, you will love it.

Hope this help!
0
 
LVL 4

Expert Comment

by:majidhajali
ID: 20426577
as my friends said, WSUS is the best method and program, but you can use 3rd party softwares like GFI languard N.S.S. this is a complete solution for patch management and vulnerability scanning for your clients and servers.
I use this for my network, since this is very powerful software. scan your clients and informs you about all vulnerabilities, include missing patches or SPs for microsoft applications, shared folders on the systems, users, hardwares, open ports , and many other tools.
More info at http://www.gfi.com/lannetscan/
0
 

Author Comment

by:cde123ans
ID: 20435861
Cro0707 and majidhajali,   Thank You for your information.

"After that, you only need to download patches that are released after SP2 and install them on your servers."

I notice that updates are always "downloaded" before installation.  Can I use those downloads and if so, where are they located and how would I    RE-USE them?   On our internet-attached servers this is now problem due to MSupdate site, but for our servers that ARE NOT ON THE INTERNET, can I just place those files or folders on thumb drive or somewhere then RUN THEM or something like that?

Thank You
Cesar  ;-)    what else does one do on a Saturday night  ;---)))


0

Featured Post

MS Dynamics Made Instantly Simpler

Make Your Microsoft Dynamics Investment Count  & Drastically Decrease Training Time by Providing Intuitive Step-By-Step WalkThru Tutorials.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Title # Comments Views Activity
Upgrading from SBS2003 to Windows Server 2012r2 Essentials 13 64
Enterprise Mode 4 55
Spinning up a new Hyper V virtual machine 4 123
Moving a windows 7 install to new hardware 9 105
Some time ago I faced the need to use a uniform folder structure that spanned across numerous sites of an enterprise to be used as a common repository for the Software packages of the Configuration Manager 2007 infrastructure. Because the procedu…
ADCs have gained traction within the last decade, largely due to increased demand for legacy load balancing appliances to handle more advanced application delivery requirements and improve application performance.
Finds all prime numbers in a range requested and places them in a public primes() array. I've demostrated a template size of 30 (2 * 3 * 5) but larger templates can be built such 210  (2 * 3 * 5 * 7) or 2310  (2 * 3 * 5 * 7 * 11). The larger templa‚Ķ

726 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question