Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I'd like to know your thoughts on a solid commercial, or open source, software deployment and patching tool. We've been down the route of WPKG (good, but quite a lot of work and no reporting of roll-out progress), GFI Languard - doesn't handle custom package deployment very well and the 3rd party patch detection was poor (we have custom in-house software to deploy occasionally).

Any ideas are welcome as we're wasting huge amounts of time on login scripts/writing custom XML scripts to deploy software, that's without starting the 3rd party patching.

share|improve this question

If you are a Microsoft shop, SCCM would be a good fit.

share|improve this answer

For commercial products I'd do a comparison between Microsoft's SCCM, IBM's Tivoli Endpoint Manager, and maybe Symantec's Altiris products.

I've only got experice in Tivoli Endpoint Manager (TEM, formerly known as BigFix). It does software deployment + OS patching + 3rd party app patching, with pre-made tools for software deployment and patching, and also good methods for running custom tasks. It can target Windows, *nixes and OS X.

There's an active community at, you could send a question with more details on your needs there and see if it fits.

share|improve this answer

In a Windows environment you can use WSUS for operating system updates.

Also take a look at the Admin Arsenal website. They have some interesting products.

share|improve this answer

If the main concern is roll-out progress, then wpkgCreateReport and "Ugly perl script to check if packages are installed on a set of workstations" (rename that attachment.bin link to -- it's a perl script) may be of use. Both of these are linked at WPKG's contributed software page.

Note that for either of these, you'll need to ensure that your wpkg.xml files get copied up to a central location after the runs finish. Either do this with an "Execute after" in WPKG client, or automatically point it to the server according to these instructions.

I'm elbow-deep in testing WPKG at the moment. 50-60 packages down, two major ones (and roughly a dozen minor ones) to go.

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.