Stopping Deployments in Visual C#

Generation QR-Code in Visual C# Stopping Deployments

If you decide to halt the deployment of a software update already in process, you must log on to the SUS server and cancel the approval of the appropriate software update by clearing the check box next to the update on the Approve Updates page. Then perform a manual synchronization on all child SUS servers to ensure that they receive the latest version of the approval list. If there are any client computers that have already downloaded the update but have not yet installed it, or if Automatic Updates is not configured to automatically install updates, you can log on to the client computer and choose not to install the update. To do so, you must use an account with local administrator credentials. If the update is already installed, use the Add/Remove Programs tool in Control Panel to uninstall the update. If the update does not appear in Add or Remove Programs, you must use Windows XP System Restore to roll the system state back to a previous time or restore from backup to remove the update from the computer.

If you are using a software update management application that does not provide reporting on failed or missing updates, use the Microsoft Baseline Security Analyzer (MBSA) program to check for computers that did not properly install the updates. MBSA is a free program that scans one or more computers on a local network for missing software updates and other security vulnerabilities. You can download MBSA from the Microsoft Web site at http://www.microsoft.com/technet/security/tools/mbsahome.mspx You can use MBSA to scan computers using either its graphical interface or via a commandline interface.

15:

To use MBSA to scan computers across a routed connection or through a firewall, open the following ports in the firewall: TCP ports 139 and 445, and UDP ports 137 and 138.

After downloading and installing MBSA, you can use the MBSA graphical interface to scan computers for missing updates by using the following steps: 1. Log on to a computer with MBSA installed. 2. Right-click Microsoft Baseline Security Analyzer 1.2 on the Start menu or Desktop, click Run As, and then use the Run As dialog box to start the program using an account with administrator user credentials on all computers that you want to scan. Typically, this is an account that belongs to the Domain Admins group. 3. Click Scan a computer to scan a single computer, or click Scan more than one computer to scan a group of computers. 4. Specify which computers to scan:

To scan a single computer, type its name in the Computer name box or type its IP address in the IP address boxes. To scan an entire domain, type the domain name in the Domain name box. To scan a range of IP addresses, type the first and last IP addresses in the address range in the IP address range boxes.

5. Type a name for the security report in the Security report name box, or accept the default name. 6. Select the security settings for which you want to scan. To scan only for missing security updates, clear all check boxes except Check for security updates. 7. If you use a SUS server and want to compare the list of installed updates on the target computers with the list of approved updates on the SUS server, select the Use SUS Server check box, and then type the URL of the SUS server for example, http://servername. If you do not type a SUS server name, MBSA will compare the installed updates on the target computer with the full list of updates available from Microsoft. 8. Click Start scan to begin scanning the computers for missing updates. 9. After the scan is complete, review the list of computers MBSA could not scan, click Pick a security report to view, and then click a computer name to view its security report (shown in Figure 15-4).

Part II: