Dave
Wed Jan 14 09:32:14 CST 2004
I'm not sure if the Baseline Security Analyzer will prompt you to install
service packs or not. You could give it a try - if it tells you to upgrade
the win2k servers to SP4, the answer's yes. Otherwise, you'll probably have
to go into the individual apps to check SP's. The MBSA is a good idea in
any case - it'll point out configuration errors and other problems in
addition to letting you know of missing patches. That's something you won't
get from windows update.
I would use SUS rather than GP to roll out the service packs, for two
reasons: first of all, you'll have SUS available for all future patches as
well. Secondly, deploying SP's using GP as you describe, you'll want to
move your computers into different OUs based on their operating system (or
create security groups based on OS). You won't want a win98 workstation to
try to install win2k SP4 every time it boots. SUS eliminates this by only
attempting to install OS-appropriate upgrades.
I only use SUS for workstations. For servers, I use WU or apply the patches
manually. If you're not already signed up, you should subscribe to the MS
security bulletins so you know when patches are released. This is
particularly necessary for patches that don't deploy through WU.
"antony.catella@kingleaplants.co.uk" <anonymous@discussions.microsoft.com>
wrote in message news:085801c3da98$40c51d90$a601280a@phx.gbl...
> We have a SBS 2000 server and a Win 2000 TS server.
>
> Is there a quick way to determine what service packs are
> installed for each of the applications that come with SBS
> 2000 ?. I tried looking under the SBS Admin console. I
> know I have got SBS 2000 SP1 and Win 2000 SP3 on the SBS
> and SP3 on the TS.
>
> Are there any issues in using either express or network
> installation when downloading the latest service packs ?
> We have only got the 2 win 2000 servers and all our 25 WS
> are either 98 (soon to be upgraded) or XP.
>
> Is it better to use SUS or Group Policy to update all the
> WS with the latest service packs, patches etc ?
>
> Thanking you in advance.
>
> Best Regards
> Antony