Auto Installing MS Patches

[Igor 0]

What would be the best way to auto install all the current MS security updates on the network if we don't have AD (Novell 5.1).

Most clients are 2000, but still a few are 95/98, I suppose we can just ignore those for now.

All users have Power User rights to their local computers.

There is one Win2k server available but it is stand alone with no AD setup.

[clutch 1]

I haven't had a look at this yet, but I *think* that this will work without AD (and the server portion can't be installed on a DC anyway, so that will work out for you).

 

http://www.microsoft.com/windows2000/windowsupdate/sus/default.asp

[Igor 0]

Thanks.

[Igor 0]

Anybody actually has this setup on their network?

I tried the setup, but so far I only got it to work with option 2, which is to notify about the upgrades, and only for users with Admin rights

[DosFreak 2]

Should work fine. If it works fine with 2 it should work fine with 4.

[DosFreak 2]

Remember it uses BITS so it MIGHT take awhile. Works pretty fast on my 400+ computer network...well fast for BITS.

[Igor 0]

Any tips on the setup?

It just ain't working

Here is the sample of my reg file.

 

Windows Registry Editor Version 5.00

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\Au]

"NoAutoUpdate"=dword:00000000

"AUOptions"=dword:00000002

"ScheduledInstallDay"=dword:00000000

"ScheduledInstallTime"=dword:0000000E

"UseWUServer"=dword:00000001

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate]

"WUServer"="http://xxx.xxx.129.201"'>http://xxx.xxx.129.201"

"WUStatusServer"="http://xxx.xxx.129.201"

 

The above setup only works for users with Admin rights

But even than, if I change "AUOptions"=dword:00000002 to 3 or 4

it just stops working all together.