Proxy Server for Windows 2K Updates 2

[PinkLips]

I have a private network that contains 50 PC's (Win2k Pro) and 1 server (Win2k Server). This network is "isolated" meaning no internet or e-mail connectivity to the outside world.

On occassion, I need to update these PC's with the latest MS hotfixes and security patches. Presently, I'm forced to download all hotfixed\patches from a PC on a different network that has internet service. Next, I have to burn the patches\hotfixes to a CD and "sneaker-net" them over to the private network. Here are my requirements:

1. I would like to configure a proxy server on the private network to download all the patched\hotfixes from MS's website. After downloading the patches, I would disable the NIC card to prevent outside connectivity.

2. I want all 50 PC to have the capabliabty to connect to the proxy server and download the patches\hotfixes.

3. I need the update process on the PC's to be dynamic, meaning the proxy server will scan the PC and determine what patches\hotfixes are need and igonre the rest (just like MS Update site).

4. Can this been done and is there a Technote that explains the steps invloved?

Thanks,
Nicole

 

[karlisi]

I think Microsoft SUS server will be best for you.

http://www.susserver.com/

===
Karlis
ECDL; MCSA

 

[markdmac]

I'd suggest going with WSUS instead of the older SUS server.

WSUS will allow you to patch Microsoft Office as well as the OS.

http://www.microsoft.com/windowsserversystem/updateservices/evaluation/trial/default.mspx

WSUS is now in RC (Release Candidate). The RTM (Released to Manufacturing) version will also be free.

I hope you find this post helpful.

Regards,

Mark

 

[RLEE5]

We have a Proxy (Microsoft ISA) hooked full time to the Web. It does a great job of storing updates, such that, after I've run a new update for a given OS, any future updates load from the proxy cache (23MB .NET in about 2 seconds)

We are also running the beta of WSUS. Let me tell you, this is SLICK. The initial download, (or synchronization as MS calls it) can take a long time, but after that it's painless. Takes several gig of disk space too.

R.Lee

 

[bofhrevenge2]

When is WSUS due to be RTM?

Anyone running WSUS RC?

"Sometimes, a cigar is just a cigar." - Sigmund Freud

 

[RLEE5]

We're running the RC of WSUS. Very nice. I've got 10 branch offices over a wide area (300 miles end-to-end). It has a decent reporting feature to let you see which machines need which updates. The new version of the MBSA (not out yet) shuold integrate with WSUS.

 

[markdmac]

I was in a training class for WSUS yesterday and found out that with WSUS you can actually burn hotfixes to CD and drop them into the folder for WSUS. Can't do that with SUS.

That would be perfect for places with limited connectivity. FedEx is faster than 19.2 modems!

I hope you find this post helpful.

Regards,

Mark

 

[bofhrevenge2]

That sounds like a very handy feature, it seems like MS have put an awful lot off effort into this product. It's good to see that it has remained free this may encourage more people to keep their desktops up to date.

"Sometimes, a cigar is just a cigar." - Sigmund Freud

 

[markdmac]

Yes, it is all part of the trustworthy computing initiative. Microsoft is taking this VERY seriously.



I hope you find this post helpful.

Regards,

Mark