1 of 1 people found this helpful
If you have LANDesk Patch Manager, you can scan for vulnerabilities and push out patches to your Macintosh computers just like you do on your Windows machines. Otherwise you could use a software distribution task to push out updates to the Macs.
What version of LANDesk are you currently using?
It is possible to use software distribution packages to deploy updates if you can source the installation files and appropriate installation commands, however the main overhead for you here is the amount of effort it will take to do this for X number of updates/patches, thinking realisticaly that X could be quite a large figure and will be an on-going process as new ones are released. If you need guidance on creating software distribution packages for MAC search the community for a BKM or give me a shout and I'll source one for you.
Are you aware that LANDesk patch manager allows you to download definitions to detect and remediate MAC application and OS updates? This would save you all the hassle of creating packages as LANDesk does the work for you. When it comes to deploying the associated patches for the definitions it uses the same underlying technology as software distribution so you have the Push, Policy, Peer Download & Targeted Multicast capability.
Obviously you will have to consider the undesired OSX Server against the 50 node subscription cost for Patch Manager. If you would like further information on the Patch Manager component or indicative pricing for Patch Manager licenses, feel free to contact me on firstname.lastname@example.org with your company/contact details and I will get one of our representatives to contact you to discuss.
Thanks for the 2 replies that I have received so far. This has given us somewhere to start. We will be moving to LDMS 8.8 in the new year. From a management standpoint, Patch Management seems like it may be the better LDMS option as it requires less manual intervention. We will be looking into the additional licensing cost for Patch Management for the Macs versus a Mac server to do the software/patch updates.
Geisinger Health System
Danville, Pa 17822
Just to clarify, Apple's Software Update Server service may not be what you think it is. All it provides is a local mirror for software updates and allows you to enable or disable a given update for everyone. It does not push updates, it still requires that someone run Software Update locally on each machine or by running the softwareupdate command via LANDesk or ARD. This is nothing like WSUS