Re: ie patches - deploying

From: Timboi (middlesbrough@hotmail.com)
Date: 06/04/02


From: middlesbrough@hotmail.com (Timboi)
Date: 3 Jun 2002 16:53:07 -0700


"David Dickinson [MVP]" <eis@no-spam.softhome.net> wrote in message news:<OWP3bctCCHA.2444@tkmsftngp05>...
> Timboi wrote:
> > Hi,
> > I"m trying to figure out how you are suppose to deploy the
> > ie patches in an enterprise. The windows patches are no
> > problem - we create Ghost packages which we deloy with
> > ghost (running each package in quiet mode and qchaining
> > them). However, each damn internet explorer patch demands
> > that the user clicks yes/no for a restart. There seems to
> > be no way around this (no proper quiet mode? why not?),
> > meaning that we cannot deploy these packages through ghost
> > and therefore we will have to deploy these patches
> > manually, which really isn't a good option. Any idea?
>
> These are the command line switches for IE updates, although not all
> switches work with all packages:
>
> /q - Specifies quiet mode, or suppresses prompts, when files are being
> extracted.
> /q:u - Specifies user-quiet mode, which presents some dialog boxes to the
> user.
> /q:a - Specifies administrator-quiet mode, which does not present any dialog
> boxes to the user.
> /t:path - Specifies the target folder for extracting files.
> /c - Extracts the files without installing them.
> /c:path - Specifies the path and name of the Setup .inf or .exe file.
> /r:n - Never restarts the computer after installation.
> /r:i - Restart if necessary - Automatically restarts the computer if it is
> necessary to complete installation.
> /r:a - Always restarts the computer after installation.
> /r:s - Restarts the computer after installation without prompting the user.
> /n:v - No version checking - Install the program over any previous version.
>
> See http://support.microsoft.com/default.aspx?scid=kb;en-us;Q197147
>
> Note that /n:v is not supported and may result in an unbootable system.
>
> For automatically restarting the destination computer, you would use
> /q:a /r:s
>
> Some patch distributions are setup programs that are encapsulated in other
> setup programs. "The outer setup provides a single .exe which, when run,
> extracts the contents needed for the inner setup and then invoke the setup.
> Subsequently, to control the behavior of the redistribution, you need to
> invoke it with command line switches that control both inner and outer
> setups" (see Q192009 for an example using the MDAC redistribution package).
> When used as a switch for the outer wrapper, /Q is usually passed on by
> default to the inner setup options. Some switches for the inner wrapper may
> be:
>
> /A Administrator Mode.
> /G <filename> Generate logfile of installation activity.
> /Q[0|1|T] Quiet install mode (0 shows exit, 1 hides exit, T hides
> all display).
> /QN[1|T] Quiet install mode with reboot suppressed.
> /R Reinstall application (MDAC 1.5 Redistribution only)
> /U[A] Uninstall the application but leaves shared components
> (/UA to remove all).
> /X <filename> Set network log location for tracking install instances.
> /Y Install without copying files.
>
> For these types of patches, you would put switches intended for the inner
> setup program in quotation marks on the command line for the outer package,
> e.g.
>
> Q318203_MSXML30_x86.exe /Q "/C:dahotfix /Q /N"
>
> where dahotfix is, in this case, the name of the encapsulated setup program.
> Alternatively, of course, you could use the wrapper's switches to extract
> the contents and then call the setup program directly.
>
> However, because different patches for different applications may behave
> differently and recognize different switches, it's always best to test.
> Maybe one of these days there will be a little more uniformity.

Dave - you are without doubt a legend! Thanks for this - quite
probably the most single useful reply I've ever had ona news group. I
knew there had to be an answer, but I find the switch options that are
supplied for these patches are very basic (it give you 4 options) and
I tried everthing (including extract in the package) I could find.
Perhaps MS could be a little more open with their switch options
through the "/?" command for these types of patches.

cheers,
Timboi



Relevant Pages

  • Re: ie patches - deploying
    ... > ie patches in an enterprise. ... These are the command line switches for IE updates, ... /r:n - Never restarts the computer after installation. ... where dahotfix is, in this case, the name of the encapsulated setup program. ...
    (microsoft.public.security)
  • Re: security patches vis distribute software wizard
    ... Those switches are incorrect and is most likely what caused the problem. ... > What I did is, I ran the DSUW, select the patches I need ... >>Scan always runs after patch installation. ... >>Microsoft MVP - SMS ...
    (microsoft.public.sms.swdist)
  • RE: New MS Baseline Security Analyzer 2.0
    ... This new version dropped the /hf and /v switches so I can no longer do quick ... checks for patches for SQL, OS, XML, MDAC, etc. ... needed Microsoft updates then output to a text file. ...
    (microsoft.public.windowsxp.security_admin)
  • Re: security patches vis distribute software wizard
    ... What I did is, I ran the DSUW, select the patches I need ... for XP SP1 and advertise it to a particular collection. ... The switches used were \z \q for all the selected security ...
    (microsoft.public.sms.swdist)
  • MS Office patch deployment...
    ... Here's a couple of URL's to the various Microsoft command- ... line switches for their patches. ... >installation package and deploy that in a KixTart script. ...
    (microsoft.public.security)