cross-posted from: https://lemmy.ml/post/2956502
I have 15 VM’s running for clients and I’m looking for a way to keep the tools up to date without having to connect to each server and do it manually. A few examples are WinDirStat, Firefox, SSMS, Filelocator, etc.
We have expanded recently and I’m at the limits of doing this manually. These servers are not domain joined and are in separate virtual networks.
Could use tools like ansible, chef, etc.
Why aren’t they part of a domain?
Even if they weren’t, could use something like Chocolatey to automate updates, along with ansible, chef, etc.
Yeah for sure. From a security perspective s domain acts as a boundary though and when done correctly adds protection. 15 VMs all windows based would benefit from this and would add very little overhead.
PDQ Deploy and Inventory. Simple and effective.
We are using Tanium, just put the agent on the servers and you are good to go…build your packages and set up deployment jobs.
It also handles Windows patching, and can do system inventory, among other features.
It’s also great for software deployments to you remote workforce systems that are rarely/never on the corporate network.
And seriously, you want a domain. GPOs are incredibly useful for pushing out a huge variety of Windows config changes extremely easily.