Just one little trick that might provide a piece of the puzzle:
There is a Windows tool, called hfnetchk (should be in the resource kit),
that checks the system for installed patches.
Note MS03-030 819696
Warning MS04-011 835732
PATCH NOT FOUND MS99-99 999999
Note means that there is new information on the patch
Warning (usually) means that the patch has been re-released
You can guess what PATCH NOT FOUND means...
After the message comes the patch number and the associated MS Q-number
Filtering can be done with the NT command find (replacement for grep)
Ex:
@echo off
echo running update check...
hfnetchk.exe > exchange.log
type exchange.log | find "Patch NOT Found" >note.log
for /F "tokens=3 delims= " %a in (note.log) DO @echo %a
/Ex
An administrator would have to keep all patches in a repository.
Patches can then be downloaded by either MS patchnumber or Q_number
-----Oorspronkelijk bericht-----
Van: cep welly [mailto:[EMAIL PROTECTED]
Verzonden: zaterdag 17 juli 2004 3:05
Aan: Samba
Onderwerp: Re: [Samba] Make Samba 3.0.4 PDC server as Windows update server
rruegner wrote:
> Hi ,
> you can make any win2k, winxp prof workstation make a
> sus server , you only have to fix a few parameters ( lines )in the
> downloaded
> sus package vom ms ( the line which check the install to the version
> of windows cause normaly you can only install it on server versions )
> Then you install iis ( ms-webserver ) from your win cd (included on
> win2k, winxp),
> install the modified package , setup the sus server ( language,
> download rotation time ) download your updates , aprove them.
> Make a ntconfig.pol in your netlogon at smb pdc, and
> configure daily internal check to the ip of the sus server.
> You can also outroll a tool forcesus.exe and start it
> with psexec on every domain computer to force the sus update anytime.
> The only problem is the win sus station has to be up the whole time. (
> or at last the update time )
That' might be a problem. Is windows designed to be up for a long time (
without reboot or blue screen ? --- ;-) )
> A duron/celeron 800 or so with 128MB Ram will do the job nicly.
> There are a few other possiblities ( some with linux via wget and so
> on ), but this is i found the best way.
> YOu will found all information about that at
> http://www.susserver.com/ in the forums.
Thanks for your valuable information. I haven't got enough time to
google for additional info, but I think
deploying susserver behind proxy firewall won't be a problem ( isn't it
??? )
Cheers all ...
> It is no hard job to do and works 100 %
> Regards Robert
>
> cep welly schrieb:
>
>> hi, guys... I'm a noobie around here and.... first come first ask
;-)
>> well, I have successfully made my linux box ( debian sid kernel 2.426
>> ) as a PDC
>> ( I can connect my winxp box to this pdc --> that's what i mean
>> success )....
>> I'm using Samba 3.0.4. I wonder if I can make my pdc to be a windows
>> update server.
>> As we know, updating windows always goes through the internet, which
>> in my
>> consideration is not good internet bandwidth management ( assume if
>> there's
>> a hundred or even thousand windows clients in a network ... )
>> So, if one machine can provide that need, it would be a great
>> improvement.
>> I've heard about SUS which can provide this, but since it need a
>> windows server
>> I guess I should ignore that ( I'd experienced a bad time when one of
>> our server
>> being compromised several months ago --- that's why I turn to Linux
>> platform )
>> Maybe providing a script to execute the update files is not enough,
>> since users
>> have to involved to the installation, answering some questions, etc
>> which
>> might be boring them ( in case there'll not just only one update ).
>> And there will
>> be a chance where users will give a wrong answer.
>> Updating windows without asking anything, after user log in just : go
>> copying files,
>> changin' registry, etc ( restart after the whole process defenetely
>> can't be avoided,
>> isn't it ? :D )
>> Or I just to much to hope .....
>>
>> cheers,
>>
>> --me--
>>
>
--
-----BEGIN PGP PUBLIC KEY BLOCK-----
Version: GnuPG v1.2.4 (GNU/Linux)
mQGiBEDato0RBADHD8bKvVCTORppg/pot1Zuyx4Joz/IC34aZlLkG7/JNEVemqiB
jSVgnwxa9UNs9Chz9CT6vqzw1pgPXDAb1rD91kbupatgaFUlNEwAW/v2eH8LQEYz
3NicbaysYeeJLBOYlwtmbZWrV8KKoSNrHWxZRjfl4a7TGggllou6+sAQTwCg/2Q2
lLLdPjuaXGiRHqpHFuFWVT8D/Rfzi89GrGWwharBmqNlq3WNJJSK4NdZUy6yFrfY
mqaytOBUq6wWoM9OdvAciS4R1qVK2GItV2xIX9N47zeEXspsANF3PyH6PSdXBYfO
CDL6jdkL1JS/E+QQcOsqbwkJOa3IpSuJPuE0IuYj9G2pEUNFR9/QiNVq2ysqUK8I
V/8VBACmL758SPyrMSwA2sPGiRbSndr0Bc6XW/YPwvJNQsU+zzX+qtAP4K3oEX7R
z1OD6LfkJAvrCLswNJbyIlrsFSo/NxlsqnWgKU4K4qsntvMA2UiyAUCOONCn+7Uo
V8UVK/3ZKRAlnTM6YdxEWe1c09pP3k4kxGdii5E3cJu6a1a4jbYAAAAxZGViaWFu
IChKVVNUIFNJR05BVFVSRSkgPGRlYl9taWxpc3RAeWFob28uY29tLnNnPohbBBMR
AgAbBQJA2raNBgsJCAcDAgMVAgMDFgIBAh4BAheAAAoJEP6KKTciHvMpKQgAoLl1
8lYWPDqcTtRwNyPBA5UhlbHIAKDAjaZYyTgyYU2xtacqPDqsMzf/N4hJBBMRAgAJ
BQJA5AJfAgcAAAoJEAiiw5gMTBnLYAUAoKeNbaExa+6oJIz9WWYgsVUO8KW9AJ4m
oP4njy83Cl7bnbacBW7o9doj6rkBDQRA2raQEAQAqzfMQUbVLt/iFTDFcI3XSO26
v2BYQAvHdRkMGo8AFrffJCbEFfTlyCrTbhIHKB0D6Z8+lEqdsjJlwleNWDWTu3gY
hOvUeGqCiNmPRGeYjM5VatsUNMQLS6qGVbpaiHXZ75e6Vco3MjMEKN1KQDn3QdtW
JcW32LPA5XqrEbInV1MAAwYD/idygDdnBgOUNEfN+JVFr3OUuVBTxky6VZ08mYbj
VmE/tFDh+H9o0GdHAMrvXbITFau6BR3ykNXtVPRMlT+g1pCe91RovR+WwfLItFnC
eB6lfiu4tsdPWeBWPKbdQO7zb1Wj6U/yo5JcjNjQjBHpxuoTpicYYgKiFIIhHzIG
kt9MiEYEGBECAAYFAkDatpAACgkQ/oopNyIe8ykmwgCfZLcfyNlAVIpfhyhjJPDb
LYJsBc8AnRz9PqrchdlrWSonVBgsHg0VZml+
=sm88
-----END PGP PUBLIC KEY BLOCK-----
--
To unsubscribe from this list go to the following URL and read the
instructions: http://lists.samba.org/mailman/listinfo/samba
