How is Everyone Pushing Out Software Updates and Installs?

[Jeff Zylstra]

I was just wondering what everyone was doing to update and install ancillary, non-Microsoft programs such as Adobe's reader, shockwave, flash, cute PDF, Firefox, Java, etc...   These programs need to be updated regularly or they become attack points in the system.  With 14 workstations, I'm at the point where running around after work and updating them is getting really old.  And since I've made the decision to give only restricted levels of access on the machines, having employees update them is not an option.


Just wondering if people are pushing these out through modified logon scripts, using PSTools' PSExec, or through some other method like a scheduled task.  I refuse to have several updater programs running resident in memory, so I was wondering if anyone is using scheduled tasks to go out every 2 weeks and check for updates?   I will configure WSUS on an old 2000 Server for the MS updates, but right now these updates are killing me.  What is everyone else doing?

[Bloody Jack Kidd]

you *could* do this from AD, but that involves some M$ trickery.  I have pushed out msi files from AD before with some success, just takes a bit of effort and reading to get it going.  Once setup, if you update the msi, it pushes the update out.

dunno if WSUS does anything other than M$ updates - we use WSUS, but I'm not the admin for that.  We have numerous terminal servers, so in my case, I just need to keep those up-to-date.

As for all our workstations (that aren't thin clients), I'm really not sure - so you have me thinking about that now.

[Bob]

Contact Steve Hart..  I have an update script that will update workstations after hours, reboot them in wee hours so ready when they come in.  I also use silent scripting (provided by Steve)..

Silent scripting pushes out as they work without them knowing.  Well as long as your not pushing major update.  Update flash players etc as they work without their knowledge.

Steve can get a script to do anything and no third party apps used.  I can put you in touch if you don't have his email.

[Kevin Crow]

We just purchased Shavlik NetChk Configure and NetChk Protect. Expensive, but amazing control over workstation configuration and software patch management. Also includes anti-virus and anti-malware.