Re: script to deploy hotifx

From: Torgeir Bakken \(MVP\) (Torgeir.Bakken-spam_at_hydro.com)
Date: 07/06/04 

Date: Tue, 06 Jul 2004 16:03:01 +0200

Manoj Menon wrote:

> I have around 50 PC of win2k & 100 of winxp. I wanted to know how can
> I deploy hotfixes using scripts particular to the operating system.
Hi

Some examples/starting points if you want to handle this yourself:

http://groups.google.com/groups?selm=40083D36.5478C0A%40hydro.com
http://groups.google.com/groups?threadm=uuhE%24TCvDHA.2072%40TK2MSFTNGP10.phx.gbl
http://groups.google.com/groups?selm=u7rdEuVNEHA.4036%40TK2MSFTNGP12.phx.gbl

With 150 clients I would have considered implementing SUS (free) or
something similar (links to some 3rd party products further down)
for security patches.

Microsoft Software Update Services (SUS)
http://www.microsoft.com/windowsserversystem/sus/default.mspx

Microsoft Software Update Services: Frequently Asked Questions
http://www.microsoft.com/windowsserversystem/sus/susfaq.mspx

Patch Management Using Microsoft Software Update Services - Operations Guide
http://www.microsoft.com/technet/itsolutions/msm/swdist/pmsusog.asp

Note that the current version will only install critical updates and security
rollup packages (SRPs), as well as SP4 for Win2k and SP1 for WinXP.

A new version is in the works:
http://groups.google.com/groups?selm=ungsInEZDHA.2336%40TK2MSFTNGP09.phx.gbl
http://www.microsoft.com/windowsserversystem/sus/wusfaq.mspx
http://www.microsoft.com/windowsserversystem/sus/wusbeta.mspx

SUS needs to be installed on a IIS server. Supports Win2k, WinXP and
Win2k3 clients only. SP1 for WinXP and SP3/4 for Win2k installs the
WU/SUS client as default.

SUS supports both workgroup environments as well as NT/AD domains.

There is a separate newsgroup for SUS:
microsoft.public.softwareupdatesvcs
news://msnews.microsoft.com/microsoft.public.softwareupdatesvcs

URL to the group softwareupdatesvcs for those who uses the Web
interface to access the newsgroups:
http://www.microsoft.com/windowsserver2003/community/newsgroups/dgbrowser/en-us/default.mspx?dg=microsoft.public.softwareupdatesvcs

A Web site about SUS with a FAQ and a SUS forum:

SUSserver.com
http://www.susserver.com/

More Web sites about SUS
http://www.cites.uiuc.edu/sus/faq.html
http://www.faqshop.com/sus/default.htm
http://computing.fusion13.com/SUS/Microsoft-Software-Update-Services-SUS.shtml

When evaluating hotfix administration methods/programs,
there are also 3rd party solutions available that will
give a lot more than what SUS offer, but of course, they
are not free. It is as always a cost/benefit analyze that
needs to be done.

Below is links to a 3rd party product example that does
not need a server to run and no IIS is needed (it supports
NT4 clients as well). You can deploy mostly all types of
hotfixes and service packs from an ordinary workstation
if you want.

UpdateEXPERT from Sunbelt
http://www.sunbelt-software.com/product.cfm?id=357

UpdateEXPERT reseller with a price list
http://www.softwareshelf.com/products/display.asp?p=71

Shavlik's HFNetChkPro/HFNetChkLT
If 10 computers or less htfnetchkLT is free (http://www.shavlik.com), it can
scan and push patches. It also finds patches needed for Office as well, and it
gives a really nice graphical analysis of the patch from truesecure.

Here is a third party product that supports Win9x and WinME as well:

PatchLink's Update
http://www.patchlink.com 

-- 
torgeir, Microsoft MVP Scripting and WMI, Porsgrunn Norway
Administration scripting examples and an ONLINE version of
the 1328 page Scripting Guide:
http://www.microsoft.com/technet/community/scriptcenter/default.mspx

Relevant Pages

  • Re: Deploy patches with login script?
    ... I would have considered implementing SUS or something ... Microsoft Software Update Services: Frequently Asked Questions ... Patch Management Using Microsoft Software Update Services - Operations Guide ... -- torgeir, Microsoft MVP Scripting and WMI, Porsgrunn Norway Administration scripting examples and an ONLINE version of the 1328 page Scripting Guide: ...
    (microsoft.public.windows.server.scripting)
  • Re: what if
    ... > or do they fallback to the microsft update site? ... the clients would not fall back to Microsoft's Windows ... there is a separate newsgroup for SUS: ... torgeir, Microsoft MVP Scripting and WMI, Porsgrunn Norway ...
    (microsoft.public.windowsupdate)
  • Re: Patch Deployment
    ... Microsoft Software Update Services (SUS) is a kind of "Windows Update" ... approve what security updates is to be distributed to the clients. ... Note that the current version will only install critical updates and security ...
    (microsoft.public.windowsxp.setup_deployment)
  • Re: Windows Update Server or cache
    ... Microsoft Software Update Services (SUS) can be run on a Windows 2000 ... also links to some 3rd party solutions that does not need a Server OS ... -- torgeir, Microsoft MVP Scripting and WMI, Porsgrunn Norway Administration scripting examples and an ONLINE version of the 1328 page Scripting Guide: ...
    (microsoft.public.windowsupdate)
  • Re: Update a lot of PC
    ... You could consider implementing SUS or something similar (links to some ... NT4 clients as well). ... Here is a f third party products that supports Win9x and WinME as well: ... Microsoft MVP Scripting and WMI, ...
    (microsoft.public.windowsupdate)
Loading