Solved

Windows Updates

Posted on 2012-04-10
3
308 Views
Last Modified: 2012-06-21
Hi,

I have 200 user network with mixture of xp, and windows 7 pcs.  We have 2 forests that are 2 way trusted.

I used to use gfi languard, until it decided to deploy windows updates during the day and reboot all of our machines!

can you please recommend what is the best, and/or if WSUS can be deployed over a trust.

Thanks

Phil
0
Comment
Question by:philipfarnes
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 2
3 Comments
 
LVL 47

Expert Comment

by:Donald Stewart
ID: 37827851
Look over


Secure the WSUS 3.0 SP2 Deployment
http://technet.microsoft.com/en-us/library/dd939849%28v=ws.10%29.aspx
0
 
LVL 57

Accepted Solution

by:
Mike Kline earned 500 total points
ID: 37827882
Damn reboot all machines during the day had to suck.  Yes you can use WSUS,  it can be done across forests but I won't blow smoke, in a single domain right now (80k users) but we don't go across forests.

You will use a GPO on your clients   http://technet.microsoft.com/en-us/library/cc708536(v=ws.10).aspx

As you can see you can schedule the install.  Having said that we still patch critical servers manually (exchange for example)

Thanks

Mike
0
 
LVL 47

Expert Comment

by:Donald Stewart
ID: 37832749
Any reason why my comment wasnt considered??????

Question>> "...what is the best, and/or if WSUS can be deployed over a trust."

Answer>> "Secure the WSUS 3.0 SP2 Deployment"
http://technet.microsoft.com/en-us/library/dd939849%28v=ws.10%29.aspx

Add authentication for connected WSUS servers in an Active Directory environment

You can add authentication for server-to-server synchronization in an Active Directory environment. If the WSUS servers are located in different forests, a trust between the forests must exist for this authentication method to succeed.

To enable server-to-server synchronization, follow these steps:

    Create and add a list of approved WSUS servers to the Web.config file

    Disable anonymous access to the WSUS server
0

Featured Post

Technology Partners: We Want Your Opinion!

We value your feedback.

Take our survey and automatically be enter to win anyone of the following:
Yeti Cooler, Amazon eGift Card, and Movie eGift Card!

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Always backup Domain, SYSVOL etc.using processes according to Microsoft Best Practices. This is meant as a disaster recovery process for small environments that did not implement backup processes and did not run a secondary domain controller that ne…
A hard and fast method for reducing Active Directory Administrators members.
Microsoft Active Directory, the widely used IT infrastructure, is known for its high risk of credential theft. The best way to test your Active Directory’s vulnerabilities to pass-the-ticket, pass-the-hash, privilege escalation, and malware attacks …
This video shows how to use Hyena, from SystemTools Software, to bulk import 100 user accounts from an external text file. View in 1080p for best video quality.

738 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question