Re: Automatic Authorize Security patch

Tech Tip: Click here to run a free scan for Windows Errors and optimize PC performance

Matthew Hudson wrote:
On patch tuesday (with SMS) You download the cab and then select the patches to install, this is a simple proceedure. Once you step through the process then they are "authorized". You can't pre-authorize since there is no way to know what patches are coming down. Much like WSUS you must select the patches manually then that will authorize it to install. I don't think MS has any pre-authorize other than the windows update(download and install at 2am) This pre-authorizes but really isn't a best practice for patches for an enterprise enviroment.
Matthew,

I think you are not really understanding the issue.

What they want is automatically download the cab file. Which is possible.
And then automatically approve all new patches for install without user intervention.

All arguments aside, whether this is a good idea or not, I don't know of a way of doing this without scripting. If I had to solve this one, I would try and create a script that authorizes all patches that are "younger" than 45 days orso, and see whether I can authorize them in a scripted fashion. Take a look at the sms 2003 SDK to see whether this can be done.

--
"Everyone is an expert at something"
Kim Oppalfens - Sms Expert for lack of any other expertise
Windows Server System MVP - SMS
http://www.blogcastrepository.com/blogs/kim_oppalfenss_systems_management_ideas/default.aspx
.

Relevant Pages

  • Re: Patch push programs for Win2K domain world?
    ... install it on a domain controller, but you can install it on other servers ... files for patches and service packs of all kinds. ... > - Cannot find a reliable way to query a host or the controller itself for ... > - When scheduled for deployment, it sometimes took UE a few hours to push ...
    (microsoft.public.win2000.security)
  • Re: Activation problem with Office 2003
    ... necessity of those ubiquitous MS patches, patches to the patches and the ... the install and PFFFTTTT! ... into SafeMode, roll back using ERUNT, Recovery Mode, Repair Mode, etc., ... Either the conversion needs to be tweaked until ...
    (microsoft.public.office.misc)
  • Re: MS03-026 - are you patched? Windows Update isnt sure!
    ... registry checks to determine if a patch is installed on a given machine. ... Many patches install a registry key to indicate that they have been ...
    (NT-Bugtraq)
  • Re: [Full-Disclosure] MS Anti Virus?
    ... > running the firewall it shouldn't be an issue. ... you would only supposedly have new bugs in the latest revisions. ... >> had patches well in advance of the worm that impacted it, blaster, ... > If you install windows and attempt to either patch it or install firewall ...
    (Full-Disclosure)
  • Re: IE patches killed internet connection
    ... If you have Microsoft Update (vs. Windows Update) installed, a shortcut to it will be found in the Start menu. ... I attempted to install 3 of those 4 patches, ... Later, Auto Update reoffered the security update, but I ...
    (microsoft.public.windows.inetexplorer.ie6.browser)