Hello everyone! Thanks for your support for the last basic IT security post. I have got more comment about it and seems like it is a right thing to adjust the topic and content. After I shared this topic for the patch management with my friend, they almost have the same question on me that “what if I have to update the patch on multiple computer systems?”
大家好！感謝各位在上一個資訊保安帖子中的支持，我收到了不少的回應。相信我當初調整題目跟內容的決定是對的。我也跟我的朋友分享了相關的資訊，但他們都向我反映要是他們要管理多台電腦系統的話要怎麼辦呢?總不台每一台都用我的那個方法去檢查補丁吧?這好像會花挺多的時間。
Well, that could be an easy thing if you have held a domain and let all your system join the same domain. Then, you may just simply use the Windows Server Update Services(“WSUS”) to help you to manage all the system. You may have a look on the screen below:
我說，這個其實不難辦到。首先，要是你的電腦都加入了同一個域名裏面的話，你可以用Windows Server Update Services(“WSUS”)去幫助你統一管理你所有的電腦系統的補丁更新。大家可以參考一下下面的圖片：
You can see above that the application help you to classify all your system under the domain according to your OS version. And you can have a full list on the host name, IP address, status time, etc. And you can also set the update rules according to the severity level of the released patch, and even the time for your patch update for all your machine. You can have a look on the screen below:
你可以看到這個軟件它把你域名中的電腦都跟據操作系統分類好了，而且，你可以點擊去去看你所有電腦的一個列表。它會顯示你的系統名稱、IP地址、狀況時間之類的資料。而你也可以透過這個軟件去更據補丁的嚴重性級別而去決定是否更新；它可更設定你想要更新的時間跟時間的循環。
And I always got a feedback that it is not an easy job to maintain a domain in a small computer or even in a home network. So, my suggestion above is kind of too ideal for them. And I will say, no worry, there is always solution for small group user (well, I admitted that sometimes it is about to pay or not XD). An I would like to introduce you Microsoft Baseline Security Analyzer(“MBSA”).
但朋友都在麻怨總不是每個人都會架構域名的啊，對普通人來說這挺復雜，也不適合小公司或是個人網絡啊，所以我以上的建議並不適合他們啊。而我有一句口頭禪，就是總會有方法的啊(雖然好多時候最大的問題是要不要付錢XD)。之後我跟他們推介了Microsoft Baseline Security Analyzer(“MBSA”).
You can free download the MBSA on the official Microsoft website, so don’t worry which is a suspicious application and will be blocked by the anti-virus. The MBSA provides a streamlined method for you to identify missing security updates and common security misconfigurations. And please reference the below interface to have a concept of it:
你可以在微軟網站免費下載MBSA, 所以不用擔心這會是什麼駭客軟件或是什麼的。MBSA提供一個很方便的方案去把你系統中缺少的補丁或是一點錯誤的設定掃描出來。你可以參考一下下面的圖片：
You can select scan multiple computers and then you can input the target group of computer by input the domain name or the range of IP to scan as below:
你可以選擇掃描多台電腦，然後就把想要掃描的電腦域名或是IP地址的範圍輸入，請參考下圖：
And you can see from the above that you can even select the option of your scan, to include which area you would like to focus. After you decided your scan configuration, you can just press “Start Scan”, after a while, you will get the related result, as please take a reference as below:
你可以從上看到你什至可以在這個軟件中選擇不同的掃描選項，你可以根據你所關注的方向去設定你的掃描。然後你就可以得到下圖中的掃描結果：
So, you can than configure your computers according to the result you’ve got. And the MBSA now have established up to 2.3 version, and it runs on Windows 8.1, Windows Server 2012, and Windows Server 2012 R2, Windows Server 2008 R2, Windows 7, Windows Server 2008, Windows Vista, Windows Server 2003 and Windows XP systems. So, it should be feasible for most of your need.
最後，你可以跟據你得出的結果去幫你不同的電腦去更新補丁，或是重新設定。MBSA現在出到了2.3版本，它可以在Windows 8.1, Windows Server 2012, and Windows Server 2012 R2, Windows Server 2008 R2, Windows 7, Windows Server 2008, Windows Vista, Windows Server 2003 and Windows XP 系統上運行，我相信這應該可以滿足大部份的用戶了。
Thanks for reading, I hope you enjoy it!
And please follow me and see my other post if you like it: 
感謝你的閱讀，希望你會喜歡!
如果你覺得不錯的話請你追蹤我，也可以看我其他的文章: