RE: Security Update - PatchInstall.exe - switch

From: Geenie (Geenie_at_discussions.microsoft.com)
Date: 02/10/05 

Date: Thu, 10 Feb 2005 10:57:06 -0800

Thanks for the tips. I'm checking out the scan tools now.

When you use DSUW to distribute updates, is it smart enough to know what
order to install the patches in, and keep a correct file version and not have
a future patch overwrite it?

Also, do you put /norestart on all the patch configurations? If so, what
tells the computer that a patch needs the computer to restart in order for it
to install completely?

Questions, questions, questions...

Thanks,
Geenie

"Dan-O" wrote:

> Actually we just tried the /d switch for Feb patches and I get the same
> problem. I'm on the phone right now with MS Support and he does'nt have any
> info yet. I'll keep you posted.
> We have been using the /g:<hours> without the /d and it works fine, the only
> thing is u have to calculate the hours from the time it was authorized.
> I want to use one package going forward rather than separate monthy packages
> so I wanted to use the grace period from the Time detected but it doesn't
> seem to be working.
> Also...FYI on the Feb patches (if you don't see MS05-009 in DSUW here's why:
> You need another scan tool for MS05-004, MS05-006, and MS05-009. They won't
> get detected with MBSA. Check out the link...
> http://support.microsoft.com/kb/894154
>
>
>
>
>
> "Geenie" wrote:
>
> > I'm rolling out WinXP security updates and I tried the patchinstall config
> > that Dan-O posted, and I don't get the postpone option. The button is
> > disabled. I get the 30 min countdown, at which point the install happens
> > automatically. Once the install is complete, I can't postpone the restart
> > either. I want the users' to have the ability to put off rebooting for x
> > amount of time. It just counts down 30 min and restarts the computer.
> >
> > The advertisement config is set to mandatory, recurring every hour.
> >
> > I have it set that SMS restarts the computer. Should it be set to No
> > Action? Program restarts computer?
> >
> > Help!
> > Geenie
> >
> >
> >
> > "Dan-O" wrote:
> >
> > > Prox,
> > >
> > > The /g:<hours> is how many hours to allow postpone from the time you
> > > authorized the patch (created the package in the DSUW wizard)
> > > if you use the /d switch with the /g then the <hours> will be from the time
> > > the patch was detected. So if u want to give users 8 hours from the time they
> > > get the package use /g:8 /d
> > >
> > > The /c:<minutes> and /t:<minutes> switches are what I use to allow the user
> > > to postpone for 30 min and to launch the Reminder message.
> > >
> > > Here is what we use to deploy:
> > > PatchInstall.exe /g:40 /n /c:30 /p /t:30 /m:"PatchAuthorize.xml"
> > >
> > > This will allow the user to postpone for 40 hrs after the time the patch was
> > > authorized and remind them every 30 min and allow 30 min countdown before the
> > > patches start to install
> > >
> > >
> > >
> > >
> > > "Prox" wrote:
> > >
> > > > Hi,
> > > >
> > > > The situation:
> > > > People are working on their machines.
> > > > We want as soon the advertisement is received:
> > > > - the security update have to run in a time frame of maximum 24 hours.
> > > > - during this time frame, notification appeared couple of time reminding to
> > > > the users they can run now the install of the patches.
> > > > - after the time frame of 24 hours, if patches are not installed, to force
> > > > the installation
> > > > - after the installation, a reboot is done without any possibility to
> > > > postpone.
> > > >
> > > > Actions:
> > > > I made many tests using the wizard without success.
> > > > After I red the document explaining all switches.
> > > > And, I tuned the swtiches of the pacthinstall.exe (bypassing the wizard)
> > > > without any success.
> > > > Using this code:
> > > > PatchInstall.exe /g:24 /p /d /n /f /p /c:1 /t:60 /m:"PatchAuthorize.xml"
> > > > As soon the advertisement is recieved, no grace period of 24 hours appears.
> > > > It automatically run the countdown of 1 minute without any postpone (the
> > > > buton is not available) and if required it reboots.
> > > >
> > > > Can an expert help me to reach the ideal situation.
> > > >
> > > > Thank You in advance