Re: Patches loaded from local server

From: Stuart Garside (nope@not.intersted.com)
Date: 05/21/02


From: "Stuart Garside" <nope@not.intersted.com>
Date: Tue, 21 May 2002 02:52:26 -0700


We run the HFnetcheck on usually the oldest software
machine 1st. This Identifies the Patches Most likely need.

The we download the patches from the links in the KB
articles. We download all patches this way.

We use a batch file to install patches with / commands
accordingly and use qchain to tie them together. Some
fixes might require a y/n option and we say no..

We also install the hotfixes in order eg MS02-005 then
MS02-006.

This might not be the bestest way or correct way but I
have found it works.. so far.

Hope it helps.

Regards

Stuart Garside

>-----Original Message-----
>I've used hfnetchk on my servers and found most of the
patches required and
>installed them successfully. With 70+ machines at one
client and similar
>smaller groups at others, I thought there had to be a
better way to get
>these puppies installed than using the Windows Update and
sucking up
>bandwidth on the net. I just read InfoWorld's Brian
Livingston's article
>today and he mentioned some programs (free and pay) to do
this same thing.
>Not sure at what levels these are at nor at what costs.
I don't have the
>exact link, but it's on InfoWorld's site and just came
out today. May be of
>some interested to you.
>
>Thanks for follow-up.
>
>John
>
>"Robert Burris" <fossil24@spamcop.net> wrote in message
>news:Ox#$aiDACHA.1316@tkmsftngp05...
>> Just a few comments:
>>
>> It's pretty well known that Microsoft has a ways to go
with making this
>sort
>> of thing easier for guys like you and I.
>>
>> The current situation is kinda hairy. Patches are
usually issued in at
>> least one of three formats; hotfix, update, and setup (
or so I call it).
>> The first two vehicles have different command-line
switches, the third
>> doesn't seem to have any. If the KB article for a
patch doesn't give you
>an
>> indication of the appropriate command-line parameters,
then you'll want to
>> try to run the patch from the command-line using
the "/?" option. That
>will
>> give you a MsgBox with a list of command-line options.
>>
>> I assume that you know about the WHotfixCheck2,
hfnetchk, and MSBA tools.
>> They can be helpful but they're works-in-progress.
Microsoft is including
>> download information in the "mssecure.xml" file that
these tools use, and
>> WHotfixCheck2 has been designed to take advantage of
this, but few patches
>> can be downloaded that way at present.
>>
>> I haven't tried any of the 3rd-party tools like Htnetck
Pro or Update
>> Expert. They're outside the reach of my wallet.
>>
>> "jb" <sbormail@yahooNOSPAM.com> wrote in message
>> news:OOyPcMDACHA.2540@tkmsftngp05...
>> > Interesting. Thanks a lot. I will read up on this
solution.
>> >
>> > "Robert Burris" <fossil24@spamcop.net> wrote in
message
>> > news:OhcklwCACHA.2228@tkmsftngp02...
>> > > Go here for a script:
http://www.halo5.net/~vinny/updater/
>> > >
>> > > Go here for bulk download of some of the patches:
>> > > http://corporate.windowsupdate.microsoft.com/en/
>> > >
>> > > Visit this link for help with the rest:
>> > > http://www.zianet.com/bwd/securitybulletins.asp
>> > >
>> > >
>> > > "jb" <sbormail@yahoo.com> wrote in message
>> > > news:uagsJUCACHA.1916@tkmsftngp04...
>> > > > Hello,
>> > > >
>> > > > I am interested in downloading all (or as many as
possible) of the
>> > patches
>> > > > available for NT, 2K, IE, etc. and storing them
on a server and then
>> > > somehow
>> > > > pointing local workstations to this folder to
install the updates.
>Is
>> > > there
>> > > > a way of doing this? I know there is a link to
all the patches on
>MS'
>> > > site,
>> > > > but can you download them to a folder and then
somehow write a
>script
>> or
>> > > > something where a local workstation can point to
this folder on the
>> > local
>> > > > server and install the patches? I know the order
of installation
>can
>> > make
>> > > a
>> > > > difference and I know that MS sometimes packages
multiple patches
>into
>> > one
>> > > > download. I would like to be able to offer t
{w ii@#"\u5 he same or similar
>> options.
>> > > > Thanks a lot.
>> > > >
>> > > > John
>> > > >
>> > > >
>> > >
>> > >
>> >
>> >
>>
>>
>
>
>.
>



Relevant Pages

  • Re: Sick machine, dont know what to do
    ... The machine didn't ship with an XP install and restore disk. ... It was quite a hassle and then it seemed like it took days to download all the service packs and patches and such. ... Regarding downloading of the patches, you can save yourself some time by ignoring most of the early patches and going straight for major updates. ... They take a basic XP install CD and add a whole bunch of newer drivers and/or service packs and roll-up patches. ...
    (microsoft.public.windowsxp.help_and_support)
  • Re: WinXP SP3 Issues
    ... you can't download or run the windows update from safe mode.... ... documentation prior to clicking on a button that says "download and install ... patches prior to just throwing it out. ...
    (microsoft.public.windowsxp.general)
  • Re: This is Why Consoles are More Popular than PCs for Gaming
    ... Just remembering you needed that faithful floppy disk to install SATA ... > patch downloaded, well the patch took *forever* to install. ... You download patches every time? ... still have patches for games I have uninstalled on CD. ...
    (comp.sys.ibm.pc.games.action)
  • Re: WindowsXPSP2
    ... Microsoft is currently doing a large amount of work in making Patch ... future patches will only include information about the parts of the ... They do and they don't - it depends on the download mechanism. ... size of the Network install. ...
    (microsoft.public.windowsxp.general)
  • Re: There is no .NET in Vista Code?
    ... I might be overly harsh but it does seem to me that a group of developers who really don't intend to develop for the .NET market seize on the runtime download "problem" to rationalize their decision. ... my potential customers would have to install the runtime. ... Corporate customers, on the other hand, actively shut off Automatic Updates for a number of "reasons", but don't ever deploy the patches. ...
    (borland.public.delphi.non-technical)