We (and some others on the list) use Shavlik for patch management here. It's been phenomenal. We patch all Microsoft products, Firefox, Adobe Reader, Java, and VMware Workstation with it. (It can do Quicktime, iTunes, RealPlayer, etc. but we banished them from our network a while ago due to the amount of patching required vs. the amount of business benefit.) It can now also patch any product because you can write your own patch detection rules and installation packages - I'm currently working on packages for Notepad++, Foxit Reader, and VLC Player.
As far as the side-by-side installs of Java, I have a simple batch file that I update as new versions come out and it just runs through and uninstalls any previous versions using the uninstall strings. You can use psexec or some similar tool to run it on your workstations remotely. - Andy O. >-----Original Message----- >From: Anthony [mailto:[EMAIL PROTECTED] >Sent: Thursday, August 28, 2008 10:52 AM >To: NT System Admin Issues >Subject: Re: Local admins? > >This getting rid of local admin track sounds great from all the feedback. > >Doesn't updates need local admin, like: > >Windows Updates? > >Java Updates? > >Antivirus Updates (say stand alone version of AVG or Norton)? > >Those seem to be the main 3 I can think of offhand. Do most of you figure >out ways around these with permissions and such, or just periodically do >these updates with an admin account? ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~
