Use Batchpatch with network segmentation / tiering

[martijnkonings]

Hi,

We are currently happy batchpatch customers/users for a few years.
We are doing some security improvements in our server network and would like to have some ideas to keep using batchpatch.

Now batchpatch is run from a workstation which has access to the server network to patch and administer all the servers.

The idea is to seperate the workstations network from server network (segmentation / tiering) and to make a new ‘jump server’ in the server network where batchpatch is installed.

The jump server is in the same tier / segement and has all the necessary network permissions to control the servers (IPC , Netbios etc.)

The workstations do no have direct IPC/Netbios/RDP etc. access to the servers.

My question how to run a remote batchpatch instance ? Meaning: the batchpatch instance is run on the jumpserver but GUI is visible on the workstation?

What do you guys use / recommend ?

PSexec to the jumpserver
Powershell invoke-command -computer jumpserver

Thanks!

Any ideas.

[doug]

Use remote desktop to connect to the jump server, and then use BatchPatch inside the remote desktop window.

[Author]

Posts