SUS is basically WindowsUpdate (or more specifically, Automatic Updates from XP SP1 or 2000 SP3), but you control what updates go out. You still use the GPO to dictate how they get the updates, but instead you point them at one of your servers (with IIS and the SUS server component) for their patches. You can either just host the 'list' of updates they should get, and then the clients download them from Microsoft as normal; or you can 'synchronize' your SUS server with MS and have ALL of the updates local (this would be most useful in the firewalled environment).
I hope this helps, Chris --------------------------------------------------------- Christopher England Server Administrator MCSA, Server+, Network+, A+ College Information Technology Office Indiana University -----Original Message----- From: John Parker [mailto:[EMAIL PROTECTED] Sent: Wednesday, September 10, 2003 8:08 AM To: [EMAIL PROTECTED] Subject: RE: [ActiveDir] What is SUS? Please forgive my naievity... How is this different from the windows update component in my Group policy? And, is this a seperate piece of software? Or is it included with Server? John Parker, MCSE IS Admin. Senior Technical Specialist Digital Display Systems. Alpha Video 7711 Computer Ave. Edina, MN. 55435 952-896-9898 Local 800-388-0008 Watts 952-896-9899 Fax 612-804-8769 Cell 952-841-3327 Direct [EMAIL PROTECTED] "Be excellent to each other" ---End of Line--- -----Original Message----- From: Tim Hines [mailto:[EMAIL PROTECTED] Sent: Wednesday, September 10, 2003 7:26 AM To: [EMAIL PROTECTED] Subject: Re: [ActiveDir] What is SUS? It stands for Software Update Services. You can use it to deploy updates to your clients. You can setup an internal server that stores updates that you download from the web. Your clients will then use this server to obtain their updates. You can find more info about it at http://www.microsoft.com/windows2000/windowsupdate/sus/ -- Tim Hines, MCSE, MCSA ----- Original Message ----- From: "John Parker" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Wednesday, September 10, 2003 8:17 AM Subject: [ActiveDir] What is SUS? Hey all.. No flames ok? I'm covered in jet fuel. Could someone explain what SUS is? I thik it is for windows updates, but I am not sure, and if it is something that would streamline my updates, then I would like to know more. Thank you John Parker, MCSE IS Admin. Senior Technical Specialist Digital Display Systems. Alpha Video 7711 Computer Ave. Edina, MN. 55435 952-896-9898 Local 800-388-0008 Watts 952-896-9899 Fax 612-804-8769 Cell 952-841-3327 Direct [EMAIL PROTECTED] "Be excellent to each other" ---End of Line--- -----Original Message----- From: Rick Kingslan [mailto:[EMAIL PROTECTED] Sent: Tuesday, September 09, 2003 8:35 PM To: [EMAIL PROTECTED] Subject: RE: [ActiveDir] SUS Feedback... William, We, too, run SUS with great success - much of the warts have already been mentioned so I won't elaborate. However, we knew that ther was an issue with users not shutting of their systems. What we implemented to resolve this and to insure that updates did get applied - especially in the case of vulns like MS03-07 and MS03-26 - we have a script that will do a rolling 'restart' of systems. Granted, our systems are named in a logical manner for our production seats, but our staff seats are on their own subnet - so we just reboot anything between specific IP ranges - and have it spaced out (by minutes, hours, or days = depending on criticallity) so that the systems don't overload the DCs and SUS systems, oh yeah - and the network <g>. It's been effective for us for a fair amount of time (10 - 12 mos.) and we are running this in 14 of our remote locations as well as our local campus WAN with 8 buildings. Rick Kingslan MCSE, MCSA, MCT Microsoft MVP - Active Directory Associate Expert Expert Zone - www.microsoft.com/windowsxp/expertzone -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of William Lefkovics Sent: Tuesday, September 09, 2003 3:33 PM To: [EMAIL PROTECTED] Subject: Re: [ActiveDir] SUS Feedback... We share the same issues. But we have laptops that have traveled the country or just get taken home each night, but haven't been rebooted in weeks. They just hibernate on battery power til next time they are opened. Essentially, we have chosen to not shut off workstations at days' end. They remain running 24/7. Updates for antivirus, patches for applications or OS all happen after hours for desktops. William ----- Original Message ----- From: "Roger Seielstad" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Tuesday, September 09, 2003 11:59 AM Subject: RE: [ActiveDir] SUS Feedback... > I've been running SUS SP1 for a week or two now - finally got time to > implement it. > > I'd second a lot of the basic limitations of the product - its not perfect, > but it does do a good job with the basics. If you're aware of the limits, > it's a good way to push the more critical OS layer stuff. > > The biggest issue I've got is dealing with the automatic reboots - a lot of > MS patches (as you know) require restarts to take effect. The decision as to > whether or not to force reboot isn't easy, and I wish there was some form of > recurring reminder to reboot. > > In my environment, that can be an issue - I have a heavily laptop oriented > client base, so I have to schedule the updates to happen when they're here > (I chose Noon), but that's a busy time for people, so forcing a reboot then > isn't a great option. Fortunately, most laptops get shut down and taken home > at night. My desktops, however, probably won't get rebooted, so that's a > problem. And more often than not, the desktops are on the desks of people > who are going to cause me pain (development and customer support). > > I'd like to be able to do some form of filtering (WMI?) for client type and > have different settings for different boxes, and I *think* that's on the > books for 2.0, but I don't know. > > -------------------------------------------------------------- > Roger D. Seielstad - MTS MCSE MS-MVP > Sr. Systems Administrator > Inovis Inc. > > > > -----Original Message----- > > From: Myrick, Todd (NIH/CIT) [mailto:[EMAIL PROTECTED] > > Sent: Tuesday, September 09, 2003 1:12 PM > > To: '[EMAIL PROTECTED]' > > Subject: [ActiveDir] SUS Feedback... > > > > > > Is anyone out there running Software Update Service? I want > > to gage what > > the general opinion of the service is. I personally think that there > > probably needs to be two approaches when it comes to a > > service like this. > > One is a pull service based on GPO agent configuration, the > > other is a push > > service based on a need to force workstation updates on > > down-level clients, > > and those that seem to ride outside the SUS zone. > > > > Any comments? > > > > Thanks, > > > > Todd Myrick > > List info : http://www.activedir.org/mail_list.htm > > List FAQ : http://www.activedir.org/list_faq.htm > > List archive: > > http://www.mail-archive.com/activedir%> 40mail.activedir.org/ > > > List info : http://www.activedir.org/mail_list.htm > List FAQ : http://www.activedir.org/list_faq.htm > List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ > List info : http://www.activedir.org/mail_list.htm List FAQ : http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/mail_list.htm List FAQ : http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/mail_list.htm List FAQ : http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/mail_list.htm List FAQ : http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/mail_list.htm List FAQ : http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/mail_list.htm List FAQ : http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
