What solutions are available to automate updates of non-Microsoft applications for Windows?

Question

Windows

Good afternoon. Is there a solution to automate or simplify the patch management of applications for an organization with ~1000 PS for a Windows environment that can work with Microsoft WSUS? Principal for PS (Windows 7) are Chrome, IE, Java, Flash, Acrobat Reader; for servers (Windows Server 2008) - Framework .NET, Apache, SQL, Tomcat, JBoss.

Answer 1

In addition to Microsoft applications, you can use VMware ThinApp. However, I must say that it was initially more sharpened to create portable versions of other programs and work inside virtual machines, which left its strong imprint. The main value is the ability to automatically update the assembled package together with VMware Horizon: when building the package, you specify the path to the repository and then it will grab a new one from there.
Additionally, some of the security problems are solved, because in fact ThinApp is a typical Sandbox with certain settings. The most important thing is that it is not necessary to give the application administrator rights with it, since the application, although it can write to system folders, they are virtual, isolated from the real system, it helps a lot with many old applications. Cons: requires licensing, is expensive and is designed for complex use.
Finding free solutions other than WSUS is problematic. If unification in the enterprise, auto-updating is really valuable to you, and so that all applications work the same way and cannot interfere with the system, that is, infection through the browser is excluded due to sandbox protection, then it may be suitable. Creating a program package is not difficult, you install as usual, click done and one EXE file will appear with which you can work.

Answer 2

Wsus Package Publisher
Not perfect, but it works. Distribute the certificate through policy in AD. Uses vus as transport.
IE, .NET, MSSQL - it's all good.

Answer 3

IE is part of Windows and it is updated via wsus
and for the rest there is an installation / update toolkit via AD and msi

Answer 4

In the general case, the problem is not solved, since each developer has his own bike for updates.

Answer 5

pack patches in msi

Answer 6

That's what System Center Configuration Manager is for.

Answer 7

Yes hospadi, advised here. Everything has long been invented for us. Installing any tool software... and Installing any tool software...