Microsoft vs. third-party tools for patching

Question: If I'm primarily supporting Windows systems (2003, XP, 2000), should I choose Microsoft or a third-party vendor for patching tools?

Jason: Microsoft Systems Management Server (SMS) will certainly do the trick, but it is not free. It is also do much more than patch management (i.e. systems management support, inventory, etc.). Windows Update Services (WUS), soon to be Windows Server Update Services (WSUS), will do a decent job with OS patches, but it cannot do third-party patching (i.e., Acrobat reader, Firefox, etc.). It is not really a full-fledged patch management system.

Assuming you want to buy a patch management tool, I would say there are a number of viable options for Windows environments -- and I wouldn't necessarily recommend sticking with a Microsoft product. On

Digg This!     StumbleUpon     Del.icio.us

RELATED CONTENT Microsoft Windows security tools Troubleshooting Microsoft WSUS connectivity issues Windows security tools for the busy desktop administrator Four Internet Explorer 8 group policy security settings Microsoft Stirling security console delayed for more integration Why should Windows shops use Microsoft Baseline Security Analyzer? Using Sysinternals tools in security management scenarios Sysinternals tools: A must-have for every Windows security toolbox Windows security tools roundup Top Windows client security tools for end users Tools for virus removal and detection Microsoft Windows patches and critical updates Troubleshooting Microsoft WSUS connectivity issues Windows security tools for the busy desktop administrator Why should Windows shops use Microsoft Baseline Security Analyzer? Enhancing patch management with NAP The 10 most common Windows security vulnerabilities Windows security in the enterprise: Tutorials Microsoft will release three critical patches in May Critical patches for IE and Office released Have my Windows patches actually been installed? PatchLink Update 6.4

RELATED RESOURCES 2020software.com, trial software downloads for accounting software, ERP software, CRM software and business software systems Search Bitpipe.com for the latest white papers and business webcasts Whatis.com, the online computer dictionary

the free side, though, combining Microsoft Baseline Security Analyzer (MBSA) with WUS would be one of the better free solutions.

Question: Will a tool dedicated to scanning find more holes than a complete patch management tool?

Jason: Vulnerability scanning tools tend to find more overall security issues than patch management tools. The scanners look for problems with the password policy, enabled services, file permissions, etc. -- basically all vulnerabilities unrelated to patching. On the other hand, patch management tools (as you would expect) will typically focus on missing patches.

Do you have a question for Jason Chan? Ask him today!

More information from SearchWindowsSecurity.com