Go Premium for a chance to win a PS4. Enter to Win

x
?
Solved

Windows Updates

Posted on 2012-04-10
3
Medium Priority
?
315 Views
Last Modified: 2012-06-21
Hi,

I have 200 user network with mixture of xp, and windows 7 pcs.  We have 2 forests that are 2 way trusted.

I used to use gfi languard, until it decided to deploy windows updates during the day and reboot all of our machines!

can you please recommend what is the best, and/or if WSUS can be deployed over a trust.

Thanks

Phil
0
Comment
Question by:philipfarnes
  • 2
3 Comments
 
LVL 47

Expert Comment

by:Donald Stewart
ID: 37827851
Look over


Secure the WSUS 3.0 SP2 Deployment
http://technet.microsoft.com/en-us/library/dd939849%28v=ws.10%29.aspx
0
 
LVL 57

Accepted Solution

by:
Mike Kline earned 2000 total points
ID: 37827882
Damn reboot all machines during the day had to suck.  Yes you can use WSUS,  it can be done across forests but I won't blow smoke, in a single domain right now (80k users) but we don't go across forests.

You will use a GPO on your clients   http://technet.microsoft.com/en-us/library/cc708536(v=ws.10).aspx

As you can see you can schedule the install.  Having said that we still patch critical servers manually (exchange for example)

Thanks

Mike
0
 
LVL 47

Expert Comment

by:Donald Stewart
ID: 37832749
Any reason why my comment wasnt considered??????

Question>> "...what is the best, and/or if WSUS can be deployed over a trust."

Answer>> "Secure the WSUS 3.0 SP2 Deployment"
http://technet.microsoft.com/en-us/library/dd939849%28v=ws.10%29.aspx

Add authentication for connected WSUS servers in an Active Directory environment

You can add authentication for server-to-server synchronization in an Active Directory environment. If the WSUS servers are located in different forests, a trust between the forests must exist for this authentication method to succeed.

To enable server-to-server synchronization, follow these steps:

    Create and add a list of approved WSUS servers to the Web.config file

    Disable anonymous access to the WSUS server
0

Featured Post

Microsoft Certification Exam 74-409

Veeam® is happy to provide the Microsoft community with a study guide prepared by MVP and MCT, Orin Thomas. This guide will take you through each of the exam objectives, helping you to prepare for and pass the examination.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Uncontrolled local administrators groups within any organization pose a huge security risk. Because these groups are locally managed it becomes difficult to audit and maintain them.
In the absence of a fully-fledged GPO Management product like AGPM, the script in this article will provide you with a simple way to watch the domain (or a select OU) for GPOs changes and automatically take backups when policies are added, removed o…
This Micro Tutorial hows how you can integrate  Mac OSX to a Windows Active Directory Domain. Apple has made it easy to allow users to bind their macs to a windows domain with relative ease. The following video show how to bind OSX Mavericks to …
Microsoft Active Directory, the widely used IT infrastructure, is known for its high risk of credential theft. The best way to test your Active Directory’s vulnerabilities to pass-the-ticket, pass-the-hash, privilege escalation, and malware attacks …

885 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question