Re: Automatically patching machine with hotfix KB824146 using mbsafu.
From: Paavola, Tad (tad.paavola_at_EQUITABLEBANK.NET)
Date: Thu, 18 Sep 2003 09:38:04 -0500 To: NTBUGTRAQ@LISTSERV.NTBUGTRAQ.COM
The flaw in this suggestion for some of us is that it seems that you have to be running File and Print Sharing on all of your workstations to be able to run the mbsacli scan, or the scan will never find a workstation. Microsoft has an article in Technet (#827227) that describes how to use a Visual Basic Script to Install the 824146 (MS03-039) or 823980 (MS03-026) security patches, but this also requires having File and Print sharing enabled, which is a security risk in itself just by it's nature. I don't believe that there is a Microsoft solution to do multiple machine patching without enabling the File and Print Sharing option; and in my opinion, opening one security hole on your network to install a patch to a different security hole just doesn't seem to be correct. Any ideas?
The Equitable Bank, S.S.B.
---- Are You "Certifiable"? Summer's Hottest Certification Just Got HOTTER! With a growth rate exceeding 110%, the TICSA security practitioner certification is one of the hottest IT credentials available. And now, for a limited time, you can save 33% off of the TICSA certification exam! To learn more about the TICSA certification, and to register as a TICSA candidate online, just go to http://www.trusecure.com/offer/s0100/ ----