Patch Management refers to updating and patching systems, and particularly to tools and systems which automate this process for a large number of systems.
1
vote
0answers
17 views
Resume by RTC to guarantee software updates
I am maintaining around 100 user workstations with various software and operating systems.
I use a WSUS Server for Windows updates and I have a set of custom scripts for other software.
WSUS will ...
1
vote
1answer
30 views
Managing patches to configuration files
I use a configuration management system and, as I believe is common, my CM software simply copy-pastes configuration files to deploy them to my Linux servers, blindly clobbering whatever's there. But ...
0
votes
1answer
82 views
WsusContent folder how to clear down
I have an SBS2008 server, the WsusContent folder was 78 GB in size, I have ran the server cleanup wizard but it is still 71GB, is there any safe way to clear these out, there are a total of 7786 ...
0
votes
0answers
24 views
Update vmware tools after deploying Windows updates from VCE?
We use vmware vcenter protect to deploy security patches to Windows servers and I wonder if there is a way to update vmware tools if needed on servers listed in a group in VCE console, and not to ...
-1
votes
1answer
59 views
Windows Server Patching: Verification of Windows server coming back up after reboots? [closed]
I have been working towards improving our monthly Windows Server update process. The goal is to remove as much of the manual process as possible. Our process has been 1) Present updates to servers ...
23
votes
4answers
573 views
Will virtualizing a server mean another OS layer to patch and update, more work and greater risk?
I've done a search and have not found anything addressing issues regarding patching and system updates. I've got guidelines that say servers need to have necessary patches. If I have a VM host then ...
2
votes
0answers
35 views
superceded patch - would the old one still show?
Example - if you have a Windows security patch that was released earlier in the year and you installed it. Then, if another security patch came out to SUPERCEDE that original one...would the ...
2
votes
1answer
88 views
Patch Management in computer lab environment
Backgound
I work at a university as an administrator over all of the public computer labs. Our labs are composed of hundreds of dual-boot iMacs(Mountain Lion + Windows 7) as well as hundreds Windows ...
1
vote
2answers
417 views
How do I determine the SP and Rollup version of an Exchange installation?
How do I determine the SP version number and Rollup version of an Exchange installation?
2
votes
3answers
65 views
Managing several PCs
I'm looking for suggestions on how to best manage a group of 5-10 Windows 7 PCs. My primary concern is making sure the OS and applications stay up-to-date.
My ideal solution would be to partition ...
1
vote
1answer
75 views
Use WSUS to select patched to install, but not to download them
I am looking after three sites. Two are nice and close and share a high-speed link, so there is a single WSUS server to manage those - no problems there.
The other site is 4 servers in China, using ...
1
vote
0answers
40 views
patch management that doesn't require RPC & SMB file sharing [closed]
I am searching for a patch management solution to replace VMware Update Manager 4.1. Version 5 and later do not perform guest OS patching. My issue is that I need to patch systems on the other side ...
28
votes
4answers
3k views
Are VMWare ESXi 5 patches cumulative?
This seems basic, but I'm confused about the patching strategy involved with manually updating standalone VMWare ESXi hosts. The VMWare vSphere blog attempts to explain this, but the actual process is ...
0
votes
3answers
716 views
Get a list of missing hotfixes for windows
How to get a list of all available patches/hotfixes for any given Windows platform? What I would like to do is:
Get a list of already deployed patches (using something like wmic qfe list full ...
2
votes
3answers
161 views
When Is it proper to autoupdate servers?
I'm asking this question of the SF community based on the latest posting from Dreamhost (a significant webhosting provider here in the US) based on significant downtime suffered from them:
We run ...
1
vote
1answer
1k views
GPO: Windows Firewall Exceptions - enable for one target IP only (LAN Guard)
I'm in the midst of setting up GFI LAN Guard for vulnerability scanning and patch management. The first thing I have to get in order is for LG to inventory all of the clients on the network. In order ...
2
votes
0answers
202 views
Remotely update Adobe Reader on Mac OS X from terminal
I want to update Adobe Reader remotely on a Mac through the terminal. Flash Player had a .pkg file in the .dmg, so installing that wasn't difficult. There is no .pkg file in Adobe Reader updates.
...
3
votes
1answer
60 views
Patching Exchange mailbox server without potential data loss
I have what I think is a quick easy question. I'd like to apply a service pack to my exchange 2007 mailbox server. I don't have a CCR setup, so its a pretty standard configuration. We do have it ...
1
vote
1answer
49 views
Check that NLM is patched in Netware 6.5
We need to solve vulnerability CVE-2011-4191
"Stack-based buffer overflow in the xdrDecodeString function in XNFS.NLM in Novell NetWare 6.5 SP8 allows remote attackers to execute arbitrary code or ...
0
votes
1answer
104 views
Confirming updates were applied via WSUS
Is there a way to setup WSUS to e-mail a weekly or monthly report which would indicate the current patch status of each computer under a given WSUS policy?
I'm hoping there is another way to verify ...
1
vote
2answers
165 views
Patch Management Solution? [closed]
I'm currently in the process of looking for a patch management solution. The solution would need to be able to patch both MS software and 3rd party software like Adobe. It will also need to be able ...
3
votes
3answers
196 views
How do you manage software's local forks?
As a system administrator, I often have to modify programs for my company.
Example:
We're using an web interface to manage our local DNS.
After downloading and extracting the tar.gz file from the ...
1
vote
4answers
153 views
Convenient source for information on known exploits (not theoretical)
Forgive me if this question has been asked before or is off-topic.
The past couple of security patches I've installed have been discovered from reading news articles, which publicly discuss security ...
3
votes
2answers
179 views
Patch Panel Cable Tangle
Possibly the noob-est question ever (I'm a developer stepping in to do some sysadmin stuff):
I have a 48-port patch panel bolted to a wall about 10 feet from where my rack is.
Right now there's a ...
3
votes
4answers
115 views
How do you know when to patch your Ubuntu box?
I have a VPS hosted somewhere running Ubuntu 10.04. How do I know when to patch the system? Is there a notification system analogous to, for example, Mac OS or Windows warning me (through email) to ...
2
votes
2answers
38 views
Are upgrades of system-critical libraries used immediately
Given a security fix for a system-critical library like libc.
Debian-based distros will publish after a few hours / days packages for it.
But is the library immediately used for already running ...
8
votes
4answers
972 views
Centralized Windows/Mac Patch Management that is easy to use
I'm looking for advice on what patch management solutions you would recommend based upon your experience. I'm also looking for which ones you would not recommend based upon your experience.
We have ...
5
votes
5answers
304 views
IE8 vs Firefox 4 with regards to central management and updating
For an organization still using XP, and that plans to continue using XP for at least another year, do you think it would be better to switch to Firefox 4 or continue to use IE8? Is Firefox ...
2
votes
3answers
2k views
How can I query my system via command line to see if a KB patch is installed?
I'm looking to find out if a KB is installed via command line.
8
votes
5answers
2k views
Suggestions for free/cheap asset/patch management software (Adobe, Java, etc)
I am using WSUS for Microsoft patching but would like something that will inventory and patch Adobe, Java, Firefox, Quicktime, etc.
I have used Lumension in the past and it was OK but it is too ...
6
votes
6answers
357 views
How to Minimize Linux Server Reboots
Last week there were a fair few comments on a slashdot article about whether Unix (or Linux) machines ever need to be rebooted. More than a few of the commenters mentioned having machines with ...
4
votes
4answers
547 views
Patch Management and System Inventory on a Windows network? [closed]
What are some good ways to have patch management and systems/hardware inventory for a Windows (Server 2003 or 2008) network?
For example, at a minimum knowing the basics for all the machines out on ...
1
vote
2answers
6k views
Update RHEL Servers without Internet Connection
I plan to have a few servers installed with RHEL, but the servers will not have Internet connection.
Is it possible to update RHEL servers without Internet connection?
Can I download the updated ...
1
vote
2answers
90 views
When should I upgrade (or not upgrade) Java?
I'm pretty familliar with .NET and know that patches and upgrades are mutually exclusive to framework versions (1.x) and (2.x / 3.x) and (4.x). This segregation makes it easy to understand the ...
0
votes
2answers
108 views
run installer on all machines on domain
is it reasonable to automatically run an installer (for an activex control) as administrator on all machines in my domain, using an out-of-the-box windows (any version)?
0
votes
4answers
153 views
Efficiently installing fully-patched Windows XP, IE, and Office 2007 on an isolated PC
I have been tasked to install Windows XP, IE, and Office 2007 on a computer that will become part of a standalone network not connected to the Internet. What is a good way to install all of the ...
7
votes
6answers
240 views
How do you keep aprised of important software updates?
How do you keep track of major patches for windows systems such as Flash, Reader... etc as they are released?
0
votes
4answers
315 views
how do you do linux patching in enterprise environment?
what are the most common tool that you used for linux patching in enterprise environment?
0
votes
3answers
1k views
What methods are available for updating a non-Internet-connected VMWare ESXi host?
I have a stand-alone installation of VMWare vSphere Essentials, with a vCenter Server and 3 ESXi 4.0 host servers. The environment is intended to remain as a stand-alone network, with the exception ...
0
votes
1answer
2k views
Are there 3rd party tools or good custom queries for WSUS 3.0?
I'm working with a WSUS SP2 server, and I'm looking for ways to generate better reports. The built-in reporting system, is almost (but not quite) useless.
My reading suggests that WSUS stores it's ...
1
vote
3answers
627 views
Antivirus patch using gpo?
Can i use gpo for antivirus patches or update ?
is there any way i can extend wsus to do it ?
2
votes
3answers
256 views
Disabling Windows Update and managing patches manually
We are hosting a few servers at a colo facility and we have arranged for another company to perform some monitoring and server maintenance work of our machines. This provider is suggesting that we ...
1
vote
2answers
4k views
What is the diference between GPOs, WSUS, SCCM and SCE in software and patch deployment?
If any one can explain to me the difference between sccm, wsus, gpo, sce "system center essential", in sw and patch deployment.
Thanks
2
votes
4answers
2k views
Push Windows Updates?
Is there a method or software that will allow the ability to push windows updates to clients in an non-active directory environment?
WSUS is not an option for the situation as it doesn't have the ...
7
votes
3answers
277 views
Sane patch schedule for Windows 2003 cluster
We've got a cluster of 75 Win2k3 nodes at work in a coarse grained compute cluster. The cluster is behind a mountain of firewalls and resides in its own VLAN. Jobs of all sizes and types run on the ...
0
votes
1answer
36 views
Deleted flag on Sunsolve patch description
I have question about the Sunsolve patch description. In the filelist of the files belonging to a patch, some files are marked as (deleted). What does this mean? Is the file going to be deleted or ...
1
vote
1answer
300 views
Determining When a Windows Reboot is Required
We are using Microsoft Systems Management Server (SMS) & Inventory Tool for Microsoft Updates (ITMU) for the distribution of Microsoft Security Patches. We use the following command for ...
1
vote
1answer
44 views
What do I have to install to update MOSS?
I found this great blog post on SharePoint patches:
http://blogs.msdn.com/sowmyancs/archive/2008/09/24/all-available-sharepoint-service-packs-patches-and-related-information.aspx
My question is do I ...
0
votes
5answers
3k views
What is the proper way to keep Ubuntu Server 8.04 updated?
I have a web server running Ubuntu Server 8.04 and I would like to know the proper commands to keep it updated.
I’ve been using apt-get update and apt-get upgrade, but occasionally it tells me that ...
3
votes
4answers
8k views
Patching AIX systems - patches are where? how to apply?
I'm not an AIX guru.....I've been assigned to patch my systems up to the latest patch level.
First, where do I get the patches for AIX 5.1 and 5.3?
Second, how are they generally installed (i.e. ...
