[Samba] Make Samba 3.0.4 PDC server as Windows update server

[cep welly]

rruegner wrote:

> Hi ,
> you can make any win2k, winxp prof workstation make a
> sus server , you only have to fix a few parameters ( lines )in the 
> downloaded
> sus package vom ms ( the line which check the install to the version
> of windows cause normaly you can only install it on server versions )
> Then you install iis ( ms-webserver ) from your win cd (included on 
> win2k, winxp),
> install the modified package , setup the sus server ( language, 
> download rotation time ) download your updates , aprove them.
> Make a ntconfig.pol in your netlogon at smb pdc, and
> configure daily internal check to the ip of the sus server.
> You can also outroll a tool forcesus.exe and start it
> with psexec on every domain computer to force the sus update anytime.
> The only problem is the win sus station has to be up the whole time. ( 
> or at last the update time )

That' might be a problem. Is windows designed to be up for a long time ( 
without reboot or blue screen ? --- ;-) )

> A duron/celeron 800 or so with 128MB  Ram will do the job nicly.
> There are a few other possiblities ( some with linux via wget and so 
> on  ), but this is i found the best way.
> YOu will found all information about that at
> http://www.susserver.com/ in the forums.

Thanks for your valuable information. I haven't got enough time to 
google for additional info, but I think
deploying susserver behind proxy firewall won't be a problem ( isn't it 
??? )
Cheers all ...

> It is no hard job to do and works 100 %
> Regards Robert
>
> cep welly schrieb:
>
>> hi, guys... I'm a noobie around here and.... first come first ask  ;-)
>> well, I have successfully made my linux box ( debian sid kernel 2.426 
>> ) as a PDC
>> ( I can connect my winxp box to this pdc --> that's what i mean 
>> success )....
>> I'm using Samba 3.0.4. I wonder if I can make my pdc to be a windows 
>> update server.
>> As we know, updating windows always goes through the internet, which 
>> in my
>> consideration is not good internet bandwidth management ( assume if 
>> there's
>> a hundred or even thousand windows clients in a network ... )
>> So, if one machine can provide that need, it would be a great 
>> improvement.
>> I've heard about SUS which can provide this, but since it need a 
>> windows server
>> I guess I should ignore that ( I'd experienced a bad time when one of 
>> our server
>> being compromised several months ago --- that's why I turn to Linux 
>> platform )
>> Maybe providing a script to execute the update files is not enough, 
>> since users
>> have to involved to the installation, answering some questions, etc 
>> which
>> might be boring them ( in case there'll not just only one update ). 
>> And there will
>> be a chance where users will give a wrong answer.
>> Updating windows without asking anything, after user log in just : go 
>> copying files,
>> changin' registry, etc ( restart after the whole process defenetely 
>> can't be avoided,
>> isn't it ?  :D )
>> Or I just to much to hope .....
>>
>> cheers,
>>
>> --me--
>>
>


-- 
-----BEGIN PGP PUBLIC KEY BLOCK-----
Version: GnuPG v1.2.4 (GNU/Linux)
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=sm88
-----END PGP PUBLIC KEY BLOCK-----