Solved Blocking INternet access if patches not applied

[Yanta]

Several months ago I posted about some software that allows me to centrally manage pushing patches to my home computer network, which is 2xXP and 9xWindows 7. I never did find any software that could accomplish the task, at least non-corporate software that didn't cost more than my car.

So, I'm still looking for a solution for that - but I'd also like to be able to block internet access for computers that dont have patches installed.

Untilmately, the ability to specify which patches are mandatory would be good, but at least a severity level of critical.

With 11 computers and 4 able bodied kids, it's time they learned to manage their own computers coz I just dont have the time anymore to do everything for them.

Anyone know if this can be achieved?

thanks
Tanya

 

[Jacee]

I'm not understanding what you want to do. You need to update all security protection provided by Windows Updates.
XP should be updated to SP3 with IE8.

So, I'm still looking for a solution for that - but I'd also like to be able to block internet access for computers that dont have patches installed.

Disconnect those computers from the Internet ... unplug from the modem, if plugged in

 

[Yanta]

I'm not understanding what you want to do. You need to update all security protection provided by Windows Updates.
XP should be updated to SP3 with IE8.

So, I'm still looking for a solution for that - but I'd also like to be able to block internet access for computers that dont have patches installed.

Disconnect those computers from the Internet ... unplug from the modem, if plugged in

Sorry, I laughed when I first read your response, then it occured to me you might not be joking.

Quite often responses on these forums advocate such drastic acts. Remove the computer from their bedroom, unplug them etc. I was looking for something a little less harsh.

The down side to unplugging them is that I still have to manually go to each computer and check if it's up to date - if not, then unplug it then yell at the kids.

Where I used to work they used patchlink. And if certain patches were not applied then your internet access was blocked, though you could still use local applications.

Probably a combination of software and hardware was used to achieve this, but that's what I'm after. I still want them to be able to do their homework, just not surf the net, use MSN, facebook (yuk!), and so on. The last thing I need to do is give them an excuse for not completing homework.

 

[Phone Man]

You could turn on Automatic Updates on each PC or maybe just the ones the kids use. Not much control but at least they get updated.

Jim

 

[Jacee]

Here's one way to block Internet access How to Change the World: Internet Access Tip

 

[Yanta]

You could turn on Automatic Updates on each PC or maybe just the ones the kids use. Not much control but at least they get updated.

Jim

Actually, I turned it off because I could not see any sense in downloading the same set of patches 11 times. Especially if they are large.

 

[Yanta]

Here's one way to block Internet access How to Change the World: Internet Access Tip

thanks for that tip. I have a DLink, and I've maxed out the config with ACLs to prevent specific types of access, and to block P2P programs. I also use OpenDNS for more content filtering.

But neither of these address my need

 

[Yanta]

Several months ago I posted about some software that allows me to centrally manage pushing patches to my home computer network, which is 2xXP and 9xWindows 7. I never did find any software that could accomplish the task, at least non-corporate software that didn't cost more than my car.

thanks
Tanya

The answer is ManageEngine's Desktop Central V7. The free version supports up to 25 workstations after a 30 trial period. So far it covers almost all my needs, and is extremely easy to use - with one exception.

Either I set up an administrator account on each machine that, or I enable the the built in administrator.

I opted for the second option. It has a strong password, and only I know it.

Problem is - when system boots user is presented with user login screen.

Q: Is it possible to log into windows directly with the user account, which is not password protected (please, I am aware of the risks of that!) - even with the administrator account enabled, such that after a reboot or system startup the user is presented with their usual desktop?

I did a search of the forums, but didn't find and answer, but I know the quesstion has been asked. Thread anyone?

This didn't work - http://www.sevenforums.com/tutorials/377-log-automatically-startup.html


thanks
Tanya

 

[MrBrian]

Have you looked into Microsoft's Windows Server Update Services? It's free.

 

[Yanta]

Yes, I took a "quick" look at it some time ago. It appears to be limited to MS updates.

One of the many good features of ManageEngines Desktop Central is it's ability to also push non-microsoft patches. Eg. Abode and so on.

But it can also manage prohibitied software, and uninstall that software. I get a complete view of each computer, the software installed and centralised patch manaagement.

It can also deploy software packages, service packs and so on. Some of these features are in WSUS, but so far I have found ME DC to be a broader solution.

And it's also free for up to 25 computers after a 30 day trial period. It's perfect for my needs. I wish I'd found it months ago...

Desktop Management Software | Desktop Administration Software for Windows - ManageEngine Desktop Central