MBSA in Corporate environment

How would mbsa be used to detect the missing patch in a corporate enviornment?

Typically an administrator would run MBSA against a group of computers on the network. You can specify the WSUS server in the MSBA configuration to check the list of updates that should be on a machine.
After MBSA completes its scan of the computers, the administrator will review the report looking for any computers that are missing updates.
Jason Warren
@jaspnwarren
jasonwarren.ca
habaneroconsulting.com/Insights

Similar Messages

Installing QuickTime in a Corporate Environment

I apologize if this has already been asked, but I searched and couldn't find anything related. Hopefully someone can point me in the right direction.
I need to deploy the latest version of QT in a corporate environment. Our users are locked down and cannot download or perform automatic updates. Since they cannot upgrade to Pro, I'd also like to remove the Pro-related menu times. I'd also like to prevent the Help-->Check for Existing Updates menu from being displayed.
I've extracted the Windows Installer (.msi) files and created a transform for some minor changes. Other than the items above, the install works and runs great. I've poked at the registry and nothing jumps out at me. I've also gone through Edit->Preferences, but there are no options that match my requirements.
Any help would be appreciated.

You may be right, but I thought it was worth a shot. Previous versions have been a little bit more friendly in this regard.
I appreciate your reply. Thanks!

Linksys in Corporate Environment

I've got a WRT54G. I've also got a cable at my corporate client's office that I can plug directly into my PC, and when I do so, (Win XP, DHCP enabled), I get an IP address for my machine of 192.168.1.x, and I am able to access the internet, mail etc.
Now, I plug the same cable into my Linksys router, set up as DHCP. I get a connection IP according to router status, although gateway is 0.0.0.0 but I cannot actually access the internet using the router.
I cannot access the internet either by wireless or wired connection to the router.
Am I missing a setting somewhere? Is it possible that a network connection that gives a DHCP ID to my computer will not do so for my router?
Thanks.
Message Edited by StrongEagle on 10-08-200611:01 PM

Yikes! I bet the I.T. staff at your corporate clients are going crazy when you plug in your router. Your router is serving as a DHCP client that may not only be responding to your DHCP requests, but also other people's DHCP requests - in addition it sounds like your client is utilizing a 192.168.1.x address scheme (which is fine per RFC 1918), but your Linksys router is also using the same scheme (by default). Your router may be trying to do Natting (Network Address Translation), but with the same IP scheme on both sides things could get sticky. Your Linksys router isn't getting (nor is it designed to) get any routing protocols so it doesn't know which "next hop" to forward things to and as such things are getting nowhere. The 0.0.0.0 IP address is generally called a "gateway of last resort" meaning if your router doesn't have a known "route" to get to the destination - then forward it on to some other location, in a corporate environment this is generally a firewall, in your case though I suspect that it just simply didn't receive the next hop or gateway information. Now why your router isn't getting the correct DHCP information could be a number of reason's, likely though it's a security parameter your client has setup on their network to avoid uncontrolled network growth (such as the addition of wireless Access Points or Routers). So the question then becomes "why" are you doing this? If it's more ports (and the I.T. dept can't give you any), then you would be better off using a Linksys switch such as the EZXS55W (EtherFast® 10/100 5-port Auto-Sensing Switch). If it's for wireless capability then that's a whole other set of issues, as a unsecured / non I.T. controlled wireless connection could not open your clients network up to unauthorized persons (i.e. hackers), but also fail compliancy audits they may have to undertake such as SOX or HIPPA. If wireless is truly necessary it is EXRTREEMLY important to talk to the I.T. department prior to this installation.

Using Time Machine in Corporate Environment

Hi, I have a question regarding time machine in a corporate environment. Instead of purchasing a time capsule, I thought it would be straight forward to share a large drive and have our ten Mac Pro computers share that drive for a time machine. This seemed to work for my test computer.
I then went to install it on one of our Mac Pros. I was able to map the shared drive but Time Machine did not recognize it. This made me take a step back and wonder if this use is even a good way to set it up. I read online where others were sucessfully setting up time machine using shared drives. Do I need to purchase a time capsule to use time machine on these ten computers? If so, will that configuration work over a wired network.
Thanks for any input.
-Stephen

soliveto wrote:
Hi, I have a question regarding time machine in a corporate environment. Instead of purchasing a time capsule, I thought it would be straight forward to share a large drive and have our ten Mac Pro computers share that drive for a time machine. This seemed to work for my test computer.
I then went to install it on one of our Mac Pros. I was able to map the shared drive but Time Machine did not recognize it. This made me take a step back and wonder if this use is even a good way to set it up. I read online where others were sucessfully setting up time machine using shared drives. Do I need to purchase a time capsule to use time machine on these ten computers?
No, not necessarily. You can connect one (or more) drives to one Mac. That Mac would back-up directly, of course; others on the same network can back up to the same drive(s) either via WIFI or Ethernet. See #22 in the Frequently Asked Questions *User Tip,* also at the top of the +Time Machine+ forum. In this case, the Mac being backed-up directly should have it's own partition on the backup drive; the others could each have one, or could all share one.
You could back them all up to a Time Capsule (although with that many Macs, you'd almost certainly have to connect one or more USB drives to it for some of them to back up to). See #Q1 and Q2 in the Using TIME MACHINE with a TIME CAPSULE *User Tip,* also at the top of this forum.

TC and corporate environment.

We are looking to use TC in a corporate environment. We would like to house the TC units in our server room, do Mac's have to be directly connected to the TC in order to backup, or are the discoverable via Bonjour or TCP/IP? If this does not work, what solutions have you found to be useful?

c.baker wrote:
We are looking to use TC in a corporate environment. We would like to house the TC units in our server room, do Mac's have to be directly connected to the TC in order to backup, or are the discoverable via Bonjour or TCP/IP? If this does not work, what solutions have you found to be useful?
A TC will work either wirelessly or via Ethernet cable, although it's recommended to connect via Ethernet for the first backup (which copies everything); it will be much faster that way.
To avoid having to buy multiple TCs, you could connect a USB drive to the TC, and back some of the Macs up to it, rather than the TC's internal HD. Keep in mind that to keep a reasonable "depth" of backups, TM usually needs 2-3 times the space of the data it's backing-up. See #1 in the Frequently Asked Questions *User Tip,* also at the top of the +Time Machine+ forum.
You can also back up wirelessly to a shared drive on another Mac on the same local network. You could get, say, a Mac Mini and connect a drive (or drives) to it, and use it as a server to back up several Macs. See #22 in the FAQ Tip.
Or, you could get a Mac for your server room, and install +OSX Server+ on it, and all the other Macs could back up to it that way. I'm not really familiar with OSX Server; you might find more in the Server forums at: http://discussions.apple.com/category.jspa?categoryID=96

ITunes 11 - how to disable iCloud Control panel download prompt (Corporate environment)

we dont want iCloud running in our corporate environment. are there any new Adminflags to disable this feature?
thanks

Any news on this?
I'm currently involved in trying to get this solved for our company installations.
Any AdminFlag or other setting to disable this prompt?

Skype on corporate environment

Hi, I want to know if it is okay to use Skype freely on corporate environment? Kind regards,Aljo

Yes, Skype is free for personal and business use. And not only are you freely allowed to use it in a corporate environment, instead, Microsoft actively encourage you to do so, and provide free tools for businesses such as "Skype Manager" for personal and managed (business) accounts, and "Skype Connect", which they encourage businesses to adopt for free to replace their phone system with Skype instead. I believe the reason Microsoft push for growth is because perhaps personal/businesses might decide to purchase Skype credits for calling landlines.But more importantly, as we learnt from Snowden's revelations about the CIA, that Microsoft store all video, voice, and messages over skype to sell or distribute freely to governments - similar to how Google also make money.And I believe Microsoft may also sell this data to third-parties for profit and analyse to display targeted ads within Skype. This is the reason why Microsoft has changed Skype radically since buying it - they now actively store everything you do on Skype in their cloud servers, which of course, individuals have no control over. So this includes sending video messages and pictures, which are automatically stored by Microsoft without permission from the user or even informing the user of their dubious tactics. Microsoft's Skype Privacy Policy briefly explains how they utilise our data.However, like all businesses, and like Google, they convenient leave out most details, including how Microsoft store all skype text, voice, pictures, and video data in their cloud system.

ICloud in the corporate environment

I work for a large financial institution and part of my job is to support the MAC environment. We are ordering new laptops and desktops, which now come with Lion. After configuring them with the standard network settings including DNS Search Domains, an automatic Proxy Configuration script, bypass proxy settings for specific Host and Domains and applying all the recommended updates from the Apple site, upon first login and subsequent logins, without any specific programs running, a warning box pops up asking for the ID and password to our proxy. Our company requires access is granted to the Internet through the use of AD credential from the Windows domain. It has cause some grief and wasn't a problem in Snow Leopard. I suspect the iCloud client. Since we are a financial institution, we will never use iCloud and would like to remove this totally from the OS. We don't want to take the chance of a user may use his/her personal account to sync corporate information to any external location that is not directly controlled by Information Security Systems. I have searched the net and can't find and resolution. Please advise.
Alan

You say you are getting a popup when you first boot up the computer. I doubt this could be iCloud because that would have to be specifically configured with a login in order to do anthing. There are however various things which might try to connect to the internet on boot up - the clock for example, though this is something you would normally set - evidently something expects to be able to connect but is falling over your proxy server.
I would suggest you ask in the Leopard forum (if that indeed is what you are using) and specifically ask if anyone knows what applications might automatically try to connect on boot-up.

Cannot install any apps from Creative Cloud in corporate environment. Suspsected Firewall issues.

Hello all.
I subscribed successfully and easily to CC on my home PC (iMac) and downloaded a few apps. All is fine.
I wanted to download those same few apps on a remove machine I use several times a week (Win 7).
After many many attempts of trying to download CC and getting a generic error message, I learned it could be a firewall issue here at this work/office. I found this in Adobe's forums:
Many organizations use a hardware firewall and proxy server that can prevent software from accessing an FTP server. A hardware solution applies to all computers within the corporate network. Most home networks do not use hardware firewall or proxy technology.
Contact your company's IT department to obtain firewall or proxy information.
Configure your browser with proxy or firewall information.
Configure your corporate firewall to by-pass the servers. The following servers are accessed:
ccmdl.adobe.com:80
swupmf.adobe.com:80
swupdl.adobe.com:80
Having nothing to loose, I put in a request and had these addresses/ports opened up in our firewall. That seems to partially fix the problem.
Now the problem is the speed and traffic is so terribly slow with CC that nothing installs with out failing and giving error. For example, I am trying to install PhotoShop CC and it will take a couple of HOURS to even get to 10% and then it fails. Usually, it doesn't get that far. CC just gives me the generic message:
"Installation Failed - Learn More."
Download error. Press Retry to try again or contact customer support.(-7).
Our network admins swear that there is nothing wrong with the ports/firewall and yet all this works fine at my home. Can anyone offer any suggestions or advice? My internet connection here is fine. All other sites load and work fine. I simply cannot download any of the CC aps here with any reasonable speed.
Help!
PS - The URLs and ports ping just fine.

Hi RedBirdOBX1,
I'd recommend checking out the two pdf documents in the
Adobe Creative Cloud Service Access Documentation for IT section on this page:
http://www.adobe.com/devnet/creativesuite/enterprisedeployment.html
Adobe Creative Cloud Network Endpoints
Adobe Creative Cloud Controlling Service Access
and if you're still struggling this might be another alternative:
http://prodesigntools.com/adobe-cc-direct-download-links.html
Hope that helps,
-Dave

Using Lightroom in a group/corporate environment

I've been excited in hopes that Lightroom would solve my department's problems with photo organization, but I didn't initially realize that it was not at all designed with multiple users in mind. So here are my questions:
- Has anybody successfully set up or been using LR in a group environment? (Or unsuccesfully?) What have you tried that worked or didn't work?
- Our photos are all stored on a shared network drive. My first thought was that if one person got all of the keywords, etc. set up for the photos we have, that information could be exported and then imported on everyone else's LR. I'm now not sure that's possible, but I'm still a bit confused by what's stored within the photo file and what's written to the database.
- I had thought that at the very least, everyone could set up their own keywords and use Lightroom independently. But since we're all accessing the same set of photos, we're going to get in trouble there, aren't we?
Suggestions? I've been trying to read some of the LR FAQs and sites, but I haven't had a lot of luck on this topic.

Jay is right, of course. The problem is that even if you use it independently (by each user NOT writing to XMP)how do you then ever update the files themselves on the common network drive? Or, maybe that is not an issue with the way you work.
On the other hand, the keywording is not the real problem--obviously if you are not all following the same keywording convention, then some images may have a lot of keywords associated with them, but that is livable in some senses. But, who does the image developing work--if several people are doing that and you are writing to XMP, then that might produce a lot of problems.
I, of course, do not know your specific workflow, so these are simply speculations, but at the very least if you do not use LR independently on each machine, then you have a workflow assignment and organization challenge.

Remote Assistance in Corporate Environment - OfferRA not working

Can anyone help me resolve a long running issue regarding Remote Assistance on Windows 7?
We have recently upgraded many of our PCs from XP to Win7 but our Helpdesk are no longer able to use Remote Assistance on the Win7 PCs so I've been trying to get it fixed. I’ve read dozens of articles
on various forums (including this one) and tried a wide range of suggested solutions - I’ve dug into the registry, tweaked DCOM settings, modified GPOs, messed around with Teredo and PNRP settings, amended firewalls and changed permissions – all to no
avail!
This is my test setup:
Windows 2003 corporate domain
Helper and target PCs both running Windows 7 Professional 32-bit. Both PCs on same subnet (actually on adjacent desks)
Offer Remote Assistance GPO setting enabled and helper is a member of the listed group
Firewalls on both PCs have default Remote Assistance rules enabled
Target PC has Remote Assistance enabled and the Offer Remote Assistance Helpers local group is populated as per the group policy
So far, so good.
Now, Remote Assistance works fine when the target PC user solicits help through an invitation file or email (Easy Connect option not available though). However,
offering remote assistance has never worked.
This is the scenario:
Helper runs MSRA.EXE /OFFERRA and is prompted for the name or IP address of the target PC
On entering the address and clicking OK receives the message “Offering Remote Assistance: Connecting to the remote computer to get the logged in users…”
At this stage Event Viewer on the
target PC shows raserver.exe as running (which I thought a little odd as Windows 7 uses msra.exe for remote assistance). Nothing else appears on the target PC, i.e. no RA prompts
After 15secs or so an error message is displayed on the Helper PC “Your offer to help could not be sent. Check the following: Do you have the correct permissions on the remote computer
[I have]. Is the remote computer turned on and is it connected to the network [Yes and Yes]. Is there a network problem [No]. “
In the event viewer of the Helper PC the following events are logged:
Event id 9 - There was a problem interacting with COM object 833E4010-AFF7-4AC3-AAC2-9F24C1457BCE. An outdated version might be installed, or the component might not be installed at all.
Event id 13 - Remote Assistance started with: /offerRA as the command line parameters
Event id 41 - Diagnosis Repro Attempt resulted in a failure.
Event id 44 - Remote Assistance troubleshooting has confirmed the problem: Remote Assistance Easy Connect isn't available.
Event id 30 - Remote Assistance has ended.
This has been driving me crazy. Why is a supposedly simple admin tool so difficult to implement?
Anyone found a solution for this yet?

Hi,
Based on my knowledge, To offer remote assistance to a remote computer, you must belong to the Offer Remote Assistance group on the remote computer.
To resolve this issue, please check and add your account to this group.
For Offer Remote Assistance to work, a certain amount of configuration is necessary, and the computers must be within a domain. This means that you (the system administrator) can determine who can offer remote assistance within the domain.
Note If your computer is In a domain and you enable the Windows Firewall exception for Remote Assistance, Please make sure port 135 TCP is opened.
Thanks!
Andy Altmann
TechNet Community Support

Locking down firefox in a corporate environment

Hello all, I would like to set a default webpage and set a proxy setting globally for Our Firefox users. I tried a couple of the firefox group policy add-on. One worked then stopped working (buggy) The other one worked well but ff was just a small part of the program so they would not sell just the ff gpo add on. so I am thinking is there a script or another program or something you firefox gurus can recommended and use something that can be used in a enterprise environment?

You can use a mozilla.cfg file in the Firefox program folder to lock prefs or specify new (default) values.
Place a file local-settings.js in the defaults\pref folder where you also find the file channel-prefs.js to specify using mozilla.cfg.
pref("general.config.filename", "mozilla.cfg");
pref("general.config.obscure_value", 0); // use this to disable the byte-shift
See:
*http://kb.mozillazine.org/Locking_preferences
You can use these functions in mozilla.cfg:
defaultPref(); // set new default value
pref(); // set pref, but allow changes in current session
lockPref(); // lock pref, disallow changes
*http://kb.mozillazine.org/network.proxy.type
*http://kb.mozillazine.org/network.proxy.%28protocol%29
*http://kb.mozillazine.org/network.proxy.%28protocol%29_port
*http://kb.mozillazine.org/browser.startup.homepage

Deploying iPhone 5 in a Corporate Environment

Recently I have purchased several iPhone 5c's to deploy to my end users. I am experimenting with the features that Apple boasts with iOS 7; which are nice, especially the VPN functionality.
I wanted to ask a few questions and to get feedback from other administrators. Any tips that you have found to work please let me know.
Question 1: Since these are corporate devices and not BYOD's, how do I setup app store for 50+ users? I don't want users downloading apps or having it associated with their corporate emails. I would prefer one corporate email address be associated with all devices in which I retain the credentials.
Question 2: What are some helpful hints that others have found in locking down iPhones?

Turn the phone in to the police and give them all the information you have on the person you bought it from.
Be grateful all you got was ripped off. It could have been much much worse.
Google "Craigslist murders" some time.

Installation issues in corporate environment

Hi all.
I´m a system administrator in a large enterprise with aprox. 12.000 windows clients. Amongst others, I´m responable for the distribution of software updates (Operating System, MS Office and the Adobe products Acrobat and Flash). Since yesterday we have a massive problem with the latest security update for flash player activeX. As usual we pull all available adobe updates via SCUP (System Center Updates Publisher) and publish them in SCCM (System Center Configuration Manager). After that, I create an update group in SCCM, create a deployment package and deploy the package.
Unfortunately the update fails on about 50 - 60 % of the windows clients. The situation is very strange on those machines where the update fails, because the software center tells that the package is installed and in "programs and features" the new 13.0.0.182 flash player is listed. But the Flash control panel applet tells that there is no activeX version installed
There is also no Flash64_13_0_0_182.ocx in C:\Windows\System32\Macromed\Flash (and no Flash32_13_0_0_182.ocx in C:\Windows\SysWOW64\Macromed\Flash) and no other flash ocx at all.
We also distribute the new flash player plugin update in the same deployment package. It installs flawlessly.
Because of this issue I have stopped the distribution of the activeX update until I have a solution. In my opinion it is a bug in the installation package.
Our clients use MS Windows 7 64-bit EN SP1 with MS SCCM 2012 installed

Tom Etterler wrote:
You cannot just reinstall version 12, because the OS thinks the flashplayer is installed successfully, although it isn´t. You have to completely wipe all current versions of the flashplayer. Just download the Flash Player Uninstaller here -> http://download.macromedia.com/get/flashplayer/current/support/uninstall_flash_player.exe
WARNING! This uninstalls both the plugin and the activeX FlashPlayer. After that, download and install both the plugin and the activeX FlashPlayer 13.
As a side note, the uninstaller does remove both versions by default, but if for some reason you only want to target one of them you can do so. You just append "activex" or "plugin" at the end of the command line. Ex: uninstall_flash_player.exe -uninstall activex will remove the activex component while leaving the plugin untouched.
I'm still having the corrupted install problem as of the .214 release. Hoping that Adobe will address this soon.

I cannot connect after upgrading Firefox. I work in corporate environment and cannot change security settings. Why this feature was not tested before upgrading to current version?

I cannot connect to ANY web sites (for example, yahoo, google, etc.

[https://support.mozilla.org/en-US/kb/Cannot%20connect%20after%20upgrading%20Firefox Cannot connect after upgrading Firefox]
see also [https://support.mozilla.org/en-US/kb/Firewalls Firewalls]
thank you
Please mark "Solved" the answer that really solve the problem, to help others with a similar problem.

MBSA in Corporate environment

Similar Messages

Maybe you are looking for