Re: Group Policy and IE6 cummulative patches

From: Torgeir Bakken \(MVP\) (Torgeir.Bakken-spam_at_hydro.com)
Date: 07/27/04 

Date: Tue, 27 Jul 2004 14:39:00 +0200

Lucas wrote:

> I am trying to install the IE6 cummualtive patches onto all the
> client PC using win2k GPO method. I have tried to use wininstall
> LE software to create a MSI file and deploy to the client PC.
> But it seem the MSI file not able to install automatically.
> What have I miss? I have no problem when deplying the winzip
> or pdf reader software.
Hi

I suggest you use e.g. SUS to deploy security updates.

Microsoft Software Update Services (SUS) is a kind of "Windows Update"
server you can set up inside your own network, where you centrally
approve what security updates is to be distributed to the clients.

The clients use Automatic Update to connect to the SUS server and
download and install updates that apply to that computer (note that
there is no Windows Update GUI available).

More here:

Microsoft Software Update Services (SUS)
http://www.microsoft.com/windowsserversystem/sus/default.mspx

Patch Management Using Microsoft Software Update Services - Operations Guide
http://www.microsoft.com/technet/itsolutions/msm/swdist/pmsusog.asp

Note that the current version will only install critical updates and security
rollup packages (SRPs), as well as SP4 for Win2k and SP1 for WinXP.

A new version is in the works (SUS 2.0, renamed to WUS):
http://groups.google.com/groups?selm=ungsInEZDHA.2336%40TK2MSFTNGP09.phx.gbl

SUS needs to be installed on a IIS server. Supports Win2k, WinXP and Win2k3
clients only. SP1 for WinXP and SP3/4 for Win2k installs the WU/SUS client as
default.

Fyi, there is a separate newsgroup for SUS:

microsoft.public.softwareupdatesvcs

news://msnews.microsoft.com/microsoft.public.softwareupdatesvcs

URL to the group softwareupdatesvcs for those who uses the Web
interface to access the newsgroups:
http://www.microsoft.com/windowsserver2003/community/newsgroups/dgbrowser/en-us/default.mspx?dg=microsoft.public.softwareupdatesvcs

A Web site about SUS with a FAQ and a SUS forum:
http://www.susserver.com/

More SUS Web sites:
http://www.cites.uiuc.edu/sus/faq.html
http://www.faqshop.com/sus/default.htm 

-- 
torgeir, Microsoft MVP Scripting and WMI, Porsgrunn Norway
Administration scripting examples and an ONLINE version of
the 1328 page Scripting Guide:
http://www.microsoft.com/technet/scriptcenter/default.mspx

Relevant Pages

  • Re: Windows SUS
    ... > install, It prompt the user whether to install the downloaded patches ... Have you set the appropriate policies described in the SUS Deployment ... White Paper (section "Configuring the Automatic Updates client ... to facilitate one-on-one interaction with one of our expert instructors. ...
    (Security-Basics)
  • Re: MS SUS
    ... There is a separate newsgroup for SUS where you should ask question about SUS: ... > When I go and look for the regisrty key to add additional ... > the SUS install on a test computer thinking that it will ... > make that reg entry but when I install the client it says ...
    (microsoft.public.win2000.security)
  • RE: Incorrect SUS Client Message
    ... Subject: Incorrect SUS Client Message ... Do you have "Automatically download and schedule the install" selected? ...
    (microsoft.public.win2000.windows_update)
  • speaking of SUS
    ... Speaking of SUS... ... Will the SUS client on each client be able to download & install ... patches behind the scenes while the user is logged in as a restricted user? ...
    (Security-Basics)
  • Re: SUS10SP1 with ShrPntSrvcs on IIS60?
    ... client to attempt to connect to the SUS server to get updates. ... the Windows Update.log file. ... Maybe that is because of the .aspx that Sharepoint ...
    (microsoft.public.inetserver.iis.security)