How to push Windows updates/Software?

[modem]

Hello all,

I help manage several small businesses all of which that have Windows 2000 or Windows 2003 Servers with Active Directory, a dozen or so users, and such. Their needs are not that great overall, however they seem to have alot of PC turnover at times and rather than me having to be on site to get all the antivirus software, and other such items install each time, I need to find a better scripted way of doing this.

My goal would be that for either an admin or a user to logon for the first time, they sit and wait while the domain pushes software updates. It could be Service Pack 3 with all the latest stuff for XP or could be a Java update. Maybe an AVG update or such.

Is there anyway to do this? The amount of time on the road driving to customers is really adding up and taking it's toll on me so if I could script this in advance and update the servers via remote desktop this would help.. ALOT!!!

Bradley

[Linkinfamous]

You can use group policy to distribute software.

[Grogi]

For windows updates you can deploy WSUS.

As for software installations there is GPO as Mio said.

[modem]

Thanks for the information on that, especially on the group policy part. However my question is, is GPO restricted to using MSI files only or can I use EXE or even ZIP files for distribution???

[.Kompressor]

Yep WSUS is your best option.

There was another third party software that used to do the same thing... called Ecora.

[Joel]

What are your need exactly? Can you script your AV install? Can you use MSIs for the software that use them? Windows Updates are distributed by WSUS and Group Policy.

[SamNeeds]

WSUS 3.0 if you want to mass push. But if you want to force the workstation manually, type into Run wuauclt.exe /forcenow

[modem]

Thanks for that information. I'm looking to do two things, first is a mass push when major updates come out like SP3. But then as other smaller programs release updates such as say... AVG goes from 7.5 to 8.0, that when the user logs on that there is a script or something ready to install that the server is forcing the client to install. My goal is to have a repository on the server full of approved and tested software packages that will work so either a mass roll out can be done quickly, or smaller updates can be done without all the extra footwork.

[SamNeeds]

Ah, ok then. In that case just handle the software via GP and the updates via WSUS and the command I mentioned.

[Joel]

AVG? In a real environment? Jesus, pay for a real enterprise solution and be done with the worry. I recommend NOD32, but there are surely others if you don't want NOD that could serve you better than worrying about testing every point release by AVG.

[modem]

Actually I was mentioning AVG because it's something used by one small business... first piece of software that came to mmind.

[majortom1981]

AVG? In a real environment? Jesus, pay for a real enterprise solution and be done with the worry. I recommend NOD32, but there are surely others if you don't want NOD that could serve you better than worrying about testing every point release by AVG.

Come on avg has business versions also.

[Joel]

Come on avg has business versions also.

Sure, but based on what was said, he wasn't using one. They have remote updates from an administration console. No need to push program updates with a script or GPO.

[modem]

You totally missed the picture. AVG is just the first thing that came to mind because some smaller business clients use that. No need to run around criticising the software and or example I used.

[betasp]

Patchlink can do it all.

[Zoom7000]

For Windows Updates we use WSUS, but for other software we use SCCM 2007 which interestingly enough also integrates with WSUS.

[bobbba]

Patchlink can do it all.

For Windows Updates we use WSUS, but for other software we use SCCM 2007 which interestingly enough also integrates with WSUS.

Both are good but have costs and complexity. WSUS and Group Policy software deployment are free, easy to use and cover most scenarios.