Re: Windows Patches system

From: Torgeir Bakken \(MVP\) (Torgeir.Bakken-spam_at_hydro.com)
Date: 01/05/05


Date: Wed, 05 Jan 2005 17:27:54 +0100

David Tamus wrote:

> I am trying to do some patch management by downloading patch files from
> Microsoft. I have the following questions. Please help.
> 1. What is Q numbers, Service Patches, Update, etc. (Bascially, I want to
> understand the numbering system from Microsoft, I am confused, such as
> 'Security Update for Windows XP (KB810217)', '329170: Security Update')

Description of the standard terminology that is used to describe
Microsoft software updates
http://support.microsoft.com/default.aspx?scid=kb;en-us;824684

The number in itself is just a unique index number.

> 2. In the SUS server's detail info for patch file, there is a setup
> parameters, such as '-q /Z -ER', what does it mean? Where to find more info?

The security bulletin for each security update documents the command
line switches (expand the Security Update Information section).

A listing of security bulletins is to be found here:
http://www.microsoft.com/technet/security/current.aspx

> If I manually run the exe, do I have to give them as arguments?

No.

> 3. How does Microsoft or SUS make sure the patches are in order? If I
> download all the patches files, which order should I execute them?

Service packs first (with a reboot), then any Security Rollups (with a
reboot), then the latest cumulative Internet Explorer update (with a
reboot), then all other updates, order of install is irrelevant (you
may want to do a reboot for e.g. each 5th update you install).

> 4. In SUS server, is there a way to limited only syn on Windows XP, not
> include other platforms?

No, you will need to wait for the new version (WUS) that is in beta now.

-- 
torgeir, Microsoft MVP Scripting and WMI, Porsgrunn Norway
Administration scripting examples and an ONLINE version of
the 1328 page Scripting Guide:
http://www.microsoft.com/technet/scriptcenter/default.mspx


Relevant Pages

  • Re: Your account is configured tp prevent you from using this computer
    ... The error itself is a User Rights issue typically, ... I have implemented C2 security. ... I have read Microsoft articles on ... Refreshing the policy without the reboot will not ...
    (microsoft.public.win2000.security)
  • Re: firewall wont turn on
    ... >> from there and i get a message saying the firewall settings cant be displayed ... Follow prompts and reboot. ... > torgeir, Microsoft MVP Scripting and WMI, Porsgrunn Norway ... i went to the security center and it said ...
    (microsoft.public.windowsxp.security_admin)
  • Re: Security Center - Firewall
    ... If this setting is reset at each reboot: ... Security Center. ... Part 6: Computer Maintenance") can be downloaded from here: ... torgeir, Microsoft MVP Scripting and WMI, Porsgrunn Norway ...
    (microsoft.public.windowsxp.general)
  • Re: sp2,windows security alerts
    ... > permanent disabling ability (registry entry, ... If the "Change the Way Security Center Notifies Me" doesn't stick ... when you reboot, or you want to disable the Security Center totally, ... -- torgeir, Microsoft MVP Scripting and WMI, Porsgrunn Norway Administration scripting examples and an ONLINE version of the 1328 page Scripting Guide: ...
    (microsoft.public.windowsxp.security_admin)
  • Re: Disabling Windows Firewall Warning
    ... > does nothing, because on the next reboot, Windows has conveniently forgotten ... > Thus the question for a registry entry.. ... If the "Change the Way Security Center Notifies Me" doesn't stick ... -- torgeir, Microsoft MVP Scripting and WMI, Porsgrunn Norway Administration scripting examples and an ONLINE version of the 1328 page Scripting Guide: ...
    (microsoft.public.windowsxp.security_admin)