There are two principal Microsoft technologies available for enterprise patch management of Windows-based systems.
- Software Update Services 1.0 with Service Pack 1
- Systems Management Server 2003
Software Update Services 1.0 with Service Pack 1
SUS is a free tool that allows you to install a service to download all critical updates, security updates, and service packs as they are posted to the Microsoft Windows Update Web site.
Systems Management Server 2003
Microsoft Systems Management Server (SMS) 2003 is the preferred mechanism for deploying and managing the distribution of software updates to a large number of clients. It provides the following functionality, which is essential for successful deployment:
- Inventory functions to determine how many computers have been deployed and to identify their locations and roles.
- Inventory functions to identify which software applications and software updates have been installed and which need to be installed on the deployed computers.
- Scheduling functions that allow an organization to deploy software updates outside regular working hours, or at a time that has the least impact on business operations.
- Status reporting that allows administrators to monitor installation progress.
More information on SMS 2003 can be found at http://www.microsoft.com/smserver.
|