Patch Management

I was wondering if anyone has an idea of how managed service providers remotely deploy patches. I know that you can setup a WSUS server and push out patches but how would you go about scanning a machine that isn't a part of your domain?

Find more posts tagged with

Save $250 on 2025 certification boot camps from Infosec!

Book now with code EOY2025

Button

Comments

pennystrader

Well not sure what tools they are using but MBSA can scan non domain machines command line or GUI. I have patched local workstations at a company I used to work that were workgroup computers. Of course that being said you need to know the local admin account and password.

Forsaken_GA

NightShade03 wrote: »

I was wondering if anyone has an idea of how managed service providers remotely deploy patches. I know that you can setup a WSUS server and push out patches but how would you go about scanning a machine that isn't a part of your domain?

I'd ask the Russian botnet master to please let me have access to the machine so I can patch it.

dynamik

NightShade03 wrote: »

I was wondering if anyone has an idea of how managed service providers remotely deploy patches. I know that you can setup a WSUS server and push out patches but how would you go about scanning a machine that isn't a part of your domain?

They install client software on the machines.

NightShade03

dynamik wrote: »

They install client software on the machines.

That I know but those clients only install what NOC usually specifies. Therefore I would image that they need to have an idea of what patches are already install on the computer....is there a Windows Update API maybe?

dynamik

Type systeminfo in at a command prompt.