[Samba] Make Samba 3.0.4 PDC server as Windows update server

[rruegner]

Hi ,
you can make any win2k, winxp prof workstation make a
sus server , you only have to fix a few parameters ( lines )in the 
downloaded
sus package vom ms ( the line which check the install to the version
of windows cause normaly you can only install it on server versions )
Then you install iis ( ms-webserver ) from your win cd (included on 
win2k, winxp),
install the modified package , setup the sus server ( language, download 
rotation time ) download your updates , aprove them.
Make a ntconfig.pol in your netlogon at smb pdc, and
configure daily internal check to the ip of the sus server.
You can also outroll a tool forcesus.exe and start it
with psexec on every domain computer to force the sus update anytime.
The only problem is the win sus station has to be up the whole time. ( 
or at last the update time )
A duron/celeron 800 or so with 128MB  Ram will do the job nicly.
There are a few other possiblities ( some with linux via wget and so on 
  ), but this is i found the best way.
YOu will found all information about that at
http://www.susserver.com/ in the forums.
It is no hard job to do and works 100 %
Regards Robert

cep welly schrieb:
> hi, guys... I'm a noobie around here and.... first come first ask  ;-)
> well, I have successfully made my linux box ( debian sid kernel 2.426 ) 
> as a PDC
> ( I can connect my winxp box to this pdc --> that's what i mean success 
> )....
> I'm using Samba 3.0.4. I wonder if I can make my pdc to be a windows 
> update server.
> As we know, updating windows always goes through the internet, which in my
> consideration is not good internet bandwidth management ( assume if there's
> a hundred or even thousand windows clients in a network ... )
> So, if one machine can provide that need, it would be a great improvement.
> I've heard about SUS which can provide this, but since it need a windows 
> server
> I guess I should ignore that ( I'd experienced a bad time when one of 
> our server
> being compromised several months ago --- that's why I turn to Linux 
> platform )
> Maybe providing a script to execute the update files is not enough, 
> since users
> have to involved to the installation, answering some questions, etc which
> might be boring them ( in case there'll not just only one update ). And 
> there will
> be a chance where users will give a wrong answer.
> Updating windows without asking anything, after user log in just : go 
> copying files,
> changin' registry, etc ( restart after the whole process defenetely 
> can't be avoided,
> isn't it ?  :D )
> Or I just to much to hope .....
> 
> cheers,
> 
> --me--
>