Tag Info

Hot answers tagged

17

Does the server have to run Windows 2003 Server, or will Windows XP Professional work? Yes, Windows Server is required. Where do I download the WSUS packages from? Microsoft's website: WSUS 3.0 How can I configure my computers to look for updates from my server instead of the internet? There's a deployment guide & a step-by-step guide that explains ...


13

Yes, according to apple themselves you can run OSX server on a mac pro, iMac or Mac Mini. So it should just work.


11

Yes, if you use System Center Updates Publisher (SCUP) to publish the updates via WSUS/SCCM. Then Configure Automatic Updates to Allow Non-administrators to Receive Update Notifications using Group Policy. Limited users will see the updates as below. If you use Automatic Updates scheduling, these updates will install as normal, without user interaction. ...


8

If you do not have access to SCCM to use @jscott's method, but you have a WSUS server, you can use WSUS API to publish the software. There are open-source tools available that make publishing quite easy: WSUS Update Packager Local Update Publisher If you do not have a WSUS server you can obtain MSI installers from Adobe and deploy the software by using ...


6

Yes, its perfectly possible to install Mac OSX Server on a Mac Mini, although performance may not be stellar. The minimum system requirements advertised for OS X 10.5 Server are: Mac server or desktop computer with an Intel, PowerPC G5, or PowerPC G4 (867MHz or faster) processor 1 GB of RAM 20 GB of available disk space A recent Mac Mini will fulfill ...


4

Disable the group policy allowing the notification to non-admins: Computer Configuration > Administrative Templates > Windows Components > Windows Update > Allow non-administrators to receive update notifications But, this behavior is the default - so either someone's specifically enabled this policy in the past, or the users are admins?


4

The WSUS offline update Project (http://www.wsusoffline.net/) allows you to build a repository of MS Updates / Hotfixes for one or more MS OS' and also supplies scripts to deploy them offline from a CD, disk or internal distribution share.


4

WIndows saves the VM's then restarts. If saving takes too long some vm's just fail and restart from cold boot. Server 8 can - in a cluster - empty the machine by moving the VM's over first, but that is not in standard 2008 R2, sadly. We do save / shutdown before upating the virtual servers. But we only have three.


4

This is why you should have a backup server. Or at least a test environment that can pretend to be a server in a pinch. Upgrade the backup server. TEST the backup server. Fail over to the backup server. Upgrade the main server. TEST the main server. Fail back to the main server. As for apt-get update messing with other stuff, it shouldn't be an issue ...


4

I am not sure if it is possible to find the number of pending important updates. But in HKLM\Software\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update\UAS there is a Key called UpdateCount that will give you the total number of pending updates.


3

It's important to note however, that while OSX Server 10.5 is still the primary Apple server OS, your Mac Mini is not supported by Apple. While the server operating system will run with little to no problem, should you require any support from Apple, they will hang up on you (metaphorically) when you tell them what it's running on. Official support for the ...


3

You can use a package called unattended-upgrades to keep your system up to date. There's a guide that can help you set it up over on HowtoForge.


3

but what about Firefox, Flash and other third party program updates? It is called update hell. Seriously. Isn't there a better solution than to go to everyone's computer and give them my username/password so that the update will actually go through? SCOM etc. can roll out install packages to selected computers that run with admin ...


3

1: I would run it on server 2003. 2: http://technet.microsoft.com/en-us/wsus/default.aspx The install is fairly simple. A whole bunch of "next" and "yes" You have to pay attention to the port number though, that must be the same port number to put in the group policy. 3: The easiest way is to issue domain group policy on the automatic updates Group ...


3

The only thing I will add to the other excellent answers is a warning. WSUS uses a lot of disk space, especially if you configure it wrongly. Make sure you only download the languages you want or you will need over a terabyte of disk to hold everything.


3

The official way is to use Adobes Customization Wizard - it will help you deploy Reader properly and can do this for you easily. While you're at it, get the msi packaged version of Reader 9.1 and the 9.1.3 patch. For the manual "hacker" the FeatureLockdown registry key seems to be working still in 9, check this article out. REG ADD ...


3

Just have your current cron script do it for you when it's done. echo "cat /tmp/new.cron.sh > /usr/local/bin/current.cron.sh" >> /usr/local/bin/current.cron.sh


3

The standard solution is to write the new version of the script to a new file with a temporary name in the same directory as the target. Once the script has been written it is renamed on top of the old version. Any running instance will still be using the old version. If the script is called /usr/local/bin/script.sh the temporary name could be ...


3

No. You'd need to download the .ISO package... In this case, you'd need: VMware-VIMSetup-all-5.5.0-2105955-20140901-update02.iso Since you're on the Windows platform, you'd load the .ISO and run the installer on top of your existing installation.


3

Yes it is correct. Ubuntu repositories receive upgrades quite often, so you are likely to see pending security upgrades around once a week or more, depending on the packages you've installed. You are doing the right thing, but as you have guessed you can automate this. You are looking for "unattended upgrades" ...


3

There are 4 registry keys that will let you know if there are pending updates. HopelessN00b was on the right track, though you have to go up one level to see the keys. HKLM\Software\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update The keys you want are: UpdatesAvailableForDownloadLogon - Updates pending download(important updates) ...


2

See Adobe Flash Player Administration Guide for Flash Player 10 , chapter 3 From: http://www.asvguy.com/2004/04/configuring_the.html


2

Server 2003 is more reliable. Download from Microsoft. You will also need to download latest .NET Framework and MS Report Viewer 2008. Your WSUS server should be set as intranet update site GPO and updates should be set enabled - there are many other options, but those are required.


2

For some strange reason reboots started by Windows Update have a nasty track record of causing problems. The solution I've been using for years is to script the install and then reboot separately via a scheduled task. I've had no reboot problems since doing this. I use version 2.4 of this script (because it just works and I see no reason to upgrade it), ...


2

In a larger network you will want to use WSUS as DanBig pointed out. However, if you owant to block an individual hot fix you can do so with the hot fix ID using this script: If Wscript.Arguments.Count = 0 Then WScript.Echo "Syntax: HideWindowsUpdate.vbs [Hotfix Article ID]" & vbCRLF & _ "Examples:" & vbCRLF & _ ...


2

In most of my environments, it's usually a kickstart and post-install script to get the main system up and current with updates at that moment. I'll usually have a local repo that syncs with a CentOS mirror daily or weekly. I tend to freeze the kernel package at whatever's current as of the installation time and update packages individually or as necessary. ...


2

The hard part is figuring out how to perform unattended installs / uninstalls / patches for each and every 3rd party app. Frameworks like Active Directory Group Policy, wpgk, etc, solve the easy part of the problem-- running code on the client computers. You "pay the piper" one way or another. Either you subscribe to a service (KACE, etc) that has people ...


2

There is no such way in autounattend.xml. Use GPO to disable the Action Center (which displays those messages): User Configuration\Administrative Templates\Start Menu and Taskbar Item: Remove the Action Center icon


1

On the server itself, from a command prompt, I'd recommend running gpresult (with a /v for Verbose output or a /z for the uber-detailed version) and see of you can locate a policy that is incorrectly applied (or alternative, not applied as it should be for some reason). Also, I'd recommend the >result.txt (or whatever you want to name it) with the /v and /z ...


1

There are many tools that can help with this! It general the package system and which packages go where is handled by configuration management. These tools usually cover more than just yum and the rpms though, and will save you time and prevent many many headaches! The tool I'm most familiar with is puppet which I use to manage virtually every config in ...



Only top voted, non community-wiki answers of a minimum length are eligible