We use SUS too, with great success. I would like to see some of the features Edward mentioned. For #2 we have multiple OUs and one server, which seems to do the trick for now. As far as #4, they say in SUS version 2, Service Packs will be an option.
One way to push patches is to use HFNetCheck Pro by Shavlik. It can be a costly tool, but is one of the best tools out there to push patches in a controlled environment (by subnet, by OU, etc). Version 4 is really slick. Chris --------------------------------------------------------- Christopher England Server Administrator MCSA, Server+, Network+, A+ College Information Technology Office Indiana University -----Original Message----- From: Parker, Edward [mailto:[EMAIL PROTECTED] Sent: Tuesday, September 09, 2003 12:27 PM To: [EMAIL PROTECTED] Subject: RE: [ActiveDir] SUS Feedback... We use SUS. It works very effectively for us. We set up the client configuration to install and reboot. The client services connects and checks for updates. Go to a website and approve. The client usually gets updated in 24hours. Some things I wish were better. 1) Reporting needs to be better. Sure I can use the IIS logs to view it...but a simple % complete etc would be nice. 2) Setting up SUS zones for different client updates. Servers may get different patches than the workstations. Or they do not get them at the same time. So We have setup multiple SUS servers to have different approved updates. 3) It would be nice to be able to group SUS clients together and send patches. (Push) 4) Alas Service Packs. We use GPOs. You could use SMS. But that sure would be nice to do it in a single interface. -----Original Message----- From: Myrick, Todd (NIH/CIT) [mailto:[EMAIL PROTECTED] Sent: Tuesday, September 09, 2003 12:12 PM To: '[EMAIL PROTECTED]' Subject: [ActiveDir] SUS Feedback... Is anyone out there running Software Update Service? I want to gage what the general opinion of the service is. I personally think that there probably needs to be two approaches when it comes to a service like this. One is a pull service based on GPO agent configuration, the other is a push service based on a need to force workstation updates on down-level clients, and those that seem to ride outside the SUS zone. Any comments? Thanks, Todd Myrick List info : http://www.activedir.org/mail_list.htm List FAQ : http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/mail_list.htm List FAQ : http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
smime.p7s
Description: S/MIME cryptographic signature
