“We don’t have the funds to buy a dedicated server to host WSUS.”
I’ve heard that concern before and I am hopeful that smaller organizations that don’t have an automated deployment solution will take heed.
You don’t need a dedicated server for WSUS. In fact, if funds are so low your company is running on memories of the good times then you are ready for a workable solution.
Don’t delay patching your systems. Even if you have to load VMWare on your workstation and then load Windows Server 2008 you can set this up to be your WSUS server.
Make sure that you allocate enough hard disk space for your data store. If you are a smaller shop with only a few dozen clients then you shouldn’t have much to worry about.
Microsoft just released an out-of-band security patch (MS10-018) for all supported versions of IE (5.1, 6, 7, and 8) on all of their platforms. The patch is rated as critical for XP, Vista, and Windows 7. (Some of the server platforms rated as important or moderate.)
It’s the delay that can really hurt some companies. When a vendor does an out of cycle release it’s usually because the exploits are public knowledge, or worse, actively being exploited.
If you don’t already have an automated WSUS solution then start on one today. If it’s going to take you a little time, you can find other methods to deploy.
If you’re in a bind and want to deploy right now you can use our software to do the deployment; but when it comes to automation of Windows security patches, we suggest that you use WSUS. You can use Admin Arsenal to push all of your other applications and patches.
in your domain.
Follow @admarsenal on Twitter