Testing patches virtually saves money and space

Testing patches virtually saves money and space


As a value-added reseller (VAR) or security consultant offering patch management services, you'll likely find that your customers have a tight IT budget and/or your facilities lack the space to dedicate a standalone Windows machine to each of your customers' patch testing needs. This tip, reposted from our sister site SearchWindowsSecurity.com, explains how to solve these problems with virtual computing.

Patch Management Project Guide
Value-added resellers and security consultants can learn more best practices for offering patch management services in our Patch Management Project Guide.

To continue reading for free, register below or login

Requires Membership to View

To gain access to this and all member only content, please provide the following information:

By submitting your registration information to SearchSecurityChannel.com you agree to receive email communications from the TechTarget network of sites, and/or third party content providers that have relationships with TechTarget, based on your topic interests and activity, including updates on new content, event notifications, new site launches and market research surveys. Please verify all information and selections above. You may unsubscribe at any time from one or more of the services you have selected by editing your profile, unsubscribing via email or by contacting us here

  • Your use of SearchSecurityChannel.com is governed by our Terms of Use
  • We designed our Privacy Policy to provide you with important disclosures about how we collect and use your registration and other information. We encourage you to read the Privacy Policy, and to use it to help make informed decisions.
  • If you reside outside of the United States, by submitting this registration information you consent to having your personal data transferred to and processed in the United States.

One of a system administrator's many responsibilities is to ensure that newly published system patches, including full service packs, work as intended -- and if they don't, to find out how they fail to interact with an existing setup. So what's the best way to test such patches in a controlled environment?

The generic recommendation is to reserve a standalone Windows machine to be used as a guinea pig and to set it up to resemble a standard workstation as closely as possible. However, given how tight IT budgets are nowadays and the fact that some shops simply don't have the physical space for a test machine, this isn't always a practical suggestion.

One alternative is virtual computing. Programs like Microsoft Virtual PC and VMware make it possible to emulate a PC's entire operation (hard drive, operating system, network, etc.) on another PC's desktop. With this type of tool, an administrator can create a virtual test machine with the same software loaded onto the average user's computer. It also makes testing substantially easier: If the administrator wants to back up the test system before determining how a particular patch behaves, all he has to do is copy a file instead of re-image an entire computer.

Often, the emulated machine can run at approximately 75% of its host's speed, and speed isn't typically a primary concern when testing for compatibility and proper patch behavior.

Note that if you use a specific hardware configuration that cannot be emulated in a Virtual PC (for instance, a biometric identification device), this type of tool may be less useful, depending on which one you use. VMware supports the near-transparent emulation of most USB hardware, while Virtual PC does not.

About the author
Serdar Yegulalp offers his expertise in Windows NT, Windows 2000, Windows 2003 and Windows XP as publisher of the Windows Power Users Newsletter.

This tip originally appeared on SearchWindowsSecurity.com.


This was first published in October 2006

Disclaimer: Our Tips Exchange is a forum for you to share technical advice and expertise with your peers and to learn from other enterprise IT professionals. TechTarget provides the infrastructure to facilitate this sharing of information. However, we cannot guarantee the accuracy or validity of the material submitted. You agree that your use of the Ask The Expert services and your reliance on any questions, answers, information or other materials received through this Web site is at your own risk.