Re: Downloading critical updates.

From: . (bogwitch_at_hotmial.co.uk)
Date: 12/10/04 

Date: Fri, 10 Dec 2004 14:30:47 -0000

Roger,

Many thanks for your reply.

> At MS Downloads, for example, if you select as product Internet Explorer
> and for the search criterion type in service pack you will get

Specifically, I was asking if there is a downloadable SP for IE6, rather
than the full package. If the full package was available as a 'network
install', that would be fine but as there is not, I was hoping for a patch I
could apply to IE6.

> This next link is example where selecting product Windows XP
> and entering search string of security
>
http://www.microsoft.com/downloads/results.aspx?productID=4C937A02-BAE0-4317
-A1A9-0C56CD979D05&freetext=security&DisplayLang=en
>
> Here, notice that you will find things most simple if you know the
> KB numbers of the patches (and if you do, you could use them as
> the search string to get directly to something).

That looks as though it will have to be the only way to go. I was hoping to
find a definitive list that I could pick the KB fixes and download them.
Unfortunately, this gives many other hits of little relevance to my project.
:-(

> This is also true if you were to use the Windows Update Catalog

WU has been useful to identify many of the fixes I will require for the
workstations but I'm assuming the requirements for server will be different.

> So, how do you know the KBs of what you do not have on the
> system ? Perhaps the most simple is to use MBSA on a reference
> system. This can be done in an offline environment by getting
> the msssecure.xml file and transferring this into the disconnected
> environment and then running the patch checking with (run while
> cmd is cd'd into the install dir of MBSA)
> mbsacli -hf -v -x <path_filename_of_mssecure.xml>

This is EXACTLY what I was looking for!

> Now, the way I would go about your task is to set up a SUS

I had considered SUS, but it would not run on a workstation and I did not
want to connect an unprotected server to the Internet. If I could use my
already up-to-date workstation, life would be a lot easier!

Many thanks Roger, it would appear the MBSA is the perfect solution for my
particular needs.

Yours,

Paul.

> --
> Roger Abell
> Microsoft MVP (Windows Security)
> MCSE (W2k3,W2k,Nt4) MCDBA
> "." <bogwitch@hotmial.co.uk> wrote in message
> news:cp972s$91m$1$830fa7a5@news.demon.co.uk...
> > Hi Group,
> >
> > I am building an Internet access LAN for work. This will be connected to
a
> > 2MBit feed.
> >
> > I would like to download and install all the relevant security updates
for
> > the servers and workstations BEFORE I connect them to ANYTHING.
> >
> > Is there somewhere you could point me to that would have a comprehensive
> > list of patches, etc that should be installed?
> >
> > I'd also like to install IE6SP1 but there does not appear to be a
network
> > install for that! I have IE6 installed, is there a separate service pack
> > that can be applied?
> >
> > Many thanks for any replies,
> >
> > Paul.
> >
> >
> >
>
>

Relevant Pages

  • Re: Running MBSA for report generation only
    ... MBSA does not download and install patches. ... All MS security updates are installed manually only on my system. ...
    (microsoft.public.windowsxp.security_admin)
  • Re: Patch Management GPO Question
    ... There may be a few workstations that we shouldn't allow to restart automatically so I need to have those download and notify. ... I know with SBS if I wanted all the workstations to install and reboot, I could apply a GPO to the SBSComputers under MyBusiness\Computers, but in my scenario this wouldn't work. ...
    (microsoft.public.windows.server.sbs)
  • .NET Framework 1.1 SP1 for SBS2003
    ... I installed and used Shavlik on a SBS2003 Standard. ... this download seems to be for everything else but Server2003. ... MBSA does not show this mistake. ... However, MBSA wants me to install MSXML 4.0 SP2, which does not show up ...
    (microsoft.public.windows.server.sbs)
  • Re: Security baseline analyser
    ... This unfortunately will not help you, but I had MBSA 1.2 installed prior ... Post SP2 I started MBSA 1.2 and at the bottom of its first ... > it the install hung. ... > I had a corrupted download but no change from before. ...
    (microsoft.public.windowsxp.general)
  • Re: delete SoftwareDistribution?
    ... For details on exactly how MBSA works: ... all data and settings intact but all updates beyond those on the Windows CD ... > on there did indeed download and install on the dates it says. ...
    (microsoft.public.windowsupdate)