Re: Push SASSER patch to 85 workstations?

From: Oli Restorick [MVP] (oli_at_mvps.org)
Date: 05/05/04 

Date: Wed, 5 May 2004 22:12:04 +0100

As Torgeir says, a RunAs wrapper could be used.

http://groups.google.com/groups?selm=3FE0B42C.773CA875%40hydro.com

The other alternative is to give your users admin rights to the machines.
Or, you could use a computer startup script within Active Directory if you
are using it.

One issue, though. How are you going to stop the patch setup running again
and again, even when the patch is installed?

I know you need to get this patch deployed now, but SUS really is the best
all round solution for future patches. SUS is available now, WUS will be
even better when it's released.

Another alternative is the excellent GFI LANguard Network Security Scanner,
which can push patches over the network. There's a 60-day eval version
which then reverts to the Freeware version, which in itself is worth having
just for network scanning. See www.gfi.com. It's fairly intuitive, but I
will add that clicking Tools | Security Scanner is the way you select the
results window, from which you can right-click the a computer having
completed a scan.

Hope this helps

Oli

"Tsuru" <anonymous@discussions.microsoft.com> wrote in message
news:8de101c432df$fd9283f0$a601280a@phx.gbl...
> What I really need is to get around the 'admin'
> permissions issue on installing the patch. I have written
> a script that maps a drive and copies the patch exe file
> to the client then runs it, BUT, it stops installing when
> it realizes the user has no local admin rights.
>
> How can I get around this?
>
> Thx in advance.
>
>
>>-----Original Message-----
>>anonymous@discussions.microsoft.com wrote:
>>
>>> Oli,
>>> Thx for the reply. The MS site talks about the update
>>> capability coming out later this year (not much help
> now)
>>
>>SUS 1.0 is available now and has been for a long time.
> The upcoming
>>version MS is talking about is SUS 2.0 (or WUS as it is
> renamed to).
>>
>>> I've already tested a login script that works up to the
>>> point of requiring Admin permissions to install the
>>> patch. It maps a drive, copies the patch, then
> executes
>>> it but the Admin requirement comes up.
>>>
>>> Any help with overcoming the Admin issue would be most
>>> helpful.
>>
>>You might get something to work using a Runas wrapper
> utility or similar,
>>take a look here:
>>
>>http://groups.google.com/groups?selm=3FE0B42C.773CA875%
> 40hydro.com
>>
>>
>>--
>>torgeir, Microsoft MVP Scripting and WMI, Porsgrunn Norway
>>Administration scripting examples and an ONLINE version of
>>the 1328 page Scripting Guide:
>>http://www.microsoft.com/technet/community/scriptcenter/de
> fault.mspx
>>.
>>

Relevant Pages

  • Re: [PATCH x86] [5/16] Replace hard coded reservations in x86-64 early boot code with dynamic ta
    ... Can't you just convert them using a script on new if you care so much about those? ... i'm not sure how you manage patches - if you have some 'refresh patch' ... improve clean _looking_ code than messy looking code. ...
    (Linux-Kernel)
  • IFC 7.1 GenuineIntel check: workaround
    ... to modify this script to do that. ... # A short program to patch the 'libirc.a' file from the Intel Fortran Compiler ... Some versions of the Intel Fortran Compiler produce code which checks whether ...
    (comp.lang.fortran)
  • Re: SMS Installer Open File Security Warning
    ... I'm simply doing an execute program script item on just the patch ... Installer scripting is the one I'm using right now. ...
    (microsoft.public.sms.installer)
  • IE dot bug - Sandblad advisory #7
    ... Initially reported to Microsoft about the dot bug vulnerability. ... Microsoft released patch: ... Files in the cookie directory are not treated as beeing in the ... Remote webpage can script in local zone" ...
    (Bugtraq)
  • Re: Explorer error
    ... Get the Blaster removal script from MVP Kelly Theriot's web site: ... Get the Microsoft patch from ... Activate the Internet Connection Firewall in Windows XP ... > When ever I go online, explorer flashes up a message ...
    (microsoft.public.windows.inetexplorer.ie6.browser)
Loading