http://collaborate.extension.org/wiki/Patching_and_Verifying_Patches?action=feed&mode=viewWatching: Patching and Verifying Patches2009-11-22T08:21:58ZWiki page as htmlMediaWiki 1.14.0Contributorshttp://collaborate.extension.org/wiki/Patching_and_Verifying_Patches/2546Patching and Verifying Patches2006-05-05T15:02:15Z<table id="toc" class="toc" summary="Contents"><tr><td><div id="toctitle"><h2>Contents</h2></div>
<ul>
<li class="toclevel-1"><a href="#External_Links"><span class="tocnumber">1</span> <span class="toctext">External Links</span></a></li>
<li class="toclevel-1"><a href="#Free_Windows_Patching_Solution"><span class="tocnumber">2</span> <span class="toctext">Free Windows Patching Solution</span></a>
<ul>
<li class="toclevel-2"><a href="#Description"><span class="tocnumber">2.1</span> <span class="toctext">Description</span></a></li>
<li class="toclevel-2"><a href="#Download"><span class="tocnumber">2.2</span> <span class="toctext">Download</span></a></li>
<li class="toclevel-2"><a href="#Usage"><span class="tocnumber">2.3</span> <span class="toctext">Usage</span></a></li>
</ul>
</li>
<li class="toclevel-1"><a href="#Microsoft_Baseline_Security_Analyzer"><span class="tocnumber">3</span> <span class="toctext">Microsoft Baseline Security Analyzer</span></a>
<ul>
<li class="toclevel-2"><a href="#Description_2"><span class="tocnumber">3.1</span> <span class="toctext">Description</span></a></li>
<li class="toclevel-2"><a href="#Download_2"><span class="tocnumber">3.2</span> <span class="toctext">Download</span></a></li>
<li class="toclevel-2"><a href="#Usage_2"><span class="tocnumber">3.3</span> <span class="toctext">Usage</span></a></li>
</ul>
</li>
</ul>
</td></tr></table><script type="text/javascript"> if (window.showTocToggle) { var tocShowText = "show"; var tocHideText = "hide"; showTocToggle(); } </script>
<a name="External_Links" id="External_Links"></a><h3> <span class="mw-headline">External Links</span></h3>
<a name="Free_Windows_Patching_Solution" id="Free_Windows_Patching_Solution"></a><h2> <span class="mw-headline">Free Windows Patching Solution</span></h2>
<a name="Description" id="Description"></a><h3> <span class="mw-headline"> Description </span></h3>
<p>Microsoft���s Windows Server Update Services (WSUS) will deploy patches to Windows clients. This improves the rate at which patches are successfully applied as well as reducing bandwidth usage to microsoft.com. It is extremely easy to setup and configure.
</p>
<a name="Download" id="Download"></a><h3> <span class="mw-headline"> Download </span></h3>
<p><a href="http://www.microsoft.com/windowsserversystem/updateservices/downloads/WSUS.mspx" class="external text" title="http://www.microsoft.com/windowsserversystem/updateservices/downloads/WSUS.mspx">Download Windows Server Update Services</a>
</p>
<a name="Usage" id="Usage"></a><h3> <span class="mw-headline"> Usage </span></h3>
<p>It is possible to edit the registry for non-AD machines but very simple using AD. The AD settings can be found under Computer Configuration -> Administrative Templates -> Windows Components -> Windows Update in the Group Policy Editor. <b>You'll want to set Automatic Updates even if you do not run your own WSUS server.</b>
</p><p>The two most important settings in this section are the ���Configure Automatic Updates��� and the ���Specify Intranet Microsoft Update Service Location��� settings. For best results, choose ���4- Auto download and schedule the installation,��� set the install day to ���0-Every day��� and the scheduled install time to sometime in the early morning.
</p><p>Set the service location to <a href="http://yoursusserver.yourdomain" class="external free" title="http://yoursusserver.yourdomain">http://yoursusserver.yourdomain</a> and if you use a statistics server enter that address as well.
</p><p>Use ���Allow immediate installation��� of patches and force computers to restart immediately after installation. Otherwise users will skip patching altogether.
</p><p>== Microsoft Security Center == Windows XP
The ���Security Center��� displays the status of crucial services like Firewall, Patch Updates, and Anti-Virus Software periodically during login.
</p><p>To enable the ���Security Center��� for all AD clients simply ���Enable��� the setting ���Turn On Security Center.��� This setting can be found under Computer Configuration -> Administrative Templates -> Windows Components -> Security Center in the Group Policy Editor.
</p>
<a name="Microsoft_Baseline_Security_Analyzer" id="Microsoft_Baseline_Security_Analyzer"></a><h2> <span class="mw-headline"> Microsoft Baseline Security Analyzer </span></h2>
<a name="Description_2" id="Description_2"></a><h3> <span class="mw-headline"> Description </span></h3>
<p>MBSA is an easy-to-use tool designed for the IT professional that helps small and medium businesses determine their security state in accordance with Microsoft security recommendations and offers specific remediation guidance. Improve your security management process by using MBSA to detect common security misconfigurations and missing security updates on your computer systems. Unfortunately, ver 2.0 of MBSA is troublesome to use on a large network. The older versions are much more useful without considerable tweaks.
</p>
<a name="Download_2" id="Download_2"></a><h3> <span class="mw-headline"> Download </span></h3>
<p><a href="http://www.microsoft.com/technet/security/tools/mbsahome.mspx" class="external text" title="http://www.microsoft.com/technet/security/tools/mbsahome.mspx">Microsoft Security Baseline Analyzer</a>
</p>
<a name="Usage_2" id="Usage_2"></a><h3> <span class="mw-headline"> Usage </span></h3>
<p>You'll need an account with admin privileges on the machines to be scanned.
</p><p>Use "RunAs" to start MSBA as a privileged user.
</p><p>Select a range of IP addresses under you management.
</p><p>Start...then wish you hadn't run this tool.
</p>
<!-- Saved in parser cache with key itwiki:pcache:idhash:1376-0!1!0!!en!2!edit=0 and timestamp 20091121151706 -->