Rolling out updates on multiple computers in AD

[Warren G]

I have a setup of a group of computers in Active Directory, all with roaming profiles and folder redirection. Everyone has limited account access so I was wondering what would be the best way to install software/patches/update all the computers at once?

[smokie mcpott]

SMS

[SMTP]

You could try setting up WSUS.

[=ACID RAIN=]

You could try setting up WSUS.

This. We used it at my old job. Worked great too :)

[cw823]

You could try setting up WSUS.

+1

[Gunlance]

WSUS 3.0 should handle everything you want.

[Warren G]

cool thanks everyone. Will try Wsus out.

[gangaskan]

couple q's

a.) this free?

b.) dose it have to go on 1 server and it will deploy updates? or is it have to go on every mahcine?


sorry for the thread jack warren ;)

[=ACID RAIN=]

I believe there was a free version, I don't know now.

It goes on one server, and every machine in AD added to the list is updated how you want it to be updated. Might not even need AD, I can't remember now.

[sandrock]

WSUS is free. IIRC, it doesn't NEED Active Directory (you can setup groups manually), however it is infinitely more convenient if you have it integrate with AD.

[redwraith94]

Sandrock is right, Wsus can be configured via group policy to obtain updates from the WSUS host computer.

[smokie mcpott]

well, the OP included in his question, the ability to install software as well.

[Gunlance]

If the software is an MSI package you can configure group policy to install it on all computers or when computers log in etc etc.