UPDATE .MSI PACKS

  • Thread starter Thread starter ebranch
  • Start date Start date
E

ebranch

Can anyone out in IT land answer me this?
I'm trying to figure out the best way to push Windows
updates and service packs out through Group Policy. What
would be the best way to get a .msi pack for updates and
security packs? Surely the downloads already have them but
I can't figure out how to get them. Any thoughts?
 
Hi there,

I would suppose that there are several ways to do that,
but this is how I do it here.

I have a batch file that runs as a startup script. What
this file does is checks the OS version, and then run a
silent install of the service pack.

On a server i have the hotfix/service pack shared like
this:

Server\OS VERSION\Patch

I.E Server\XP\QXXXXXX

When the batch file finds the correct OS version, it will
direct the command prompt to that folder on the server and
run the correct version of the patch. Also, it will write
a .TXT file to the systeroot after the patch has been
installed. When the batch file runs again, it will check
for that .TXT file first. If it is found then the batch
will exit, causing the patch not to be installed again. My
batch looks like this.
**********************************************************
@echo off
c:\
cd..
cd..
cd..
cls
echo.

if exist %systemroot%\KB824146.txt goto end

echo The file KB824146 was not found.
Echo File not found. Installing service pack.

CLS
::
ver | find "Windows XP" >nul
if not errorlevel 1 goto XP
::
ver | find "Windows 2000" >nul
if not errorlevel 1 goto 2K
::
ver | find "Windows NT" >nul
if not errorlevel 1 goto NT
::
ver | find "Windows ME" >nul
if not errorlevel 1 goto ME
::
ver | find "Windows 98" >nul
if not errorlevel 1 goto 98
::
ver | find "Windows 95" >nul
if not errorlevel 1 goto 95
::
ver | find "OEM Service Release" >nul
if not errorlevel 1 goto OEM
::
ver | find "MS-DOS" >nul
if not errorlevel 1 goto DOS
::
echo OS version not found...
goto end


:XP

echo OS is Windows XP ...
echo -------------------------------------------------
Echo Installing Security Patch KB824146 for Windows XP
Echo -------------------------------------------------
Echo DO NOT CLOSE THIS WINDOW
\\server\Patch\KB824146\xp.exe -q -z
copy \\server\patch\KB824146\KB824146.txt %systemroot%
CLS
Echo **********************
ECho Patch Install Complete
Echo **********************
goto end

:2K
echo OS is Windows 2K ...
echo -------------------------------------------------
Echo Installing Security Patch KB824146 for Windows 2000
Echo -------------------------------------------------
Echo DO NOT CLOSE THIS WINDOW
\\server\Patch\KB824146\2000.exe -q -z
copy \\server\patch\KB824146\KB824146.txt %systemroot%
CLS
Echo **********************
ECho Patch Install Complete
Echo **********************
goto end

:NT
echo OS is Windows NT ...
echo -------------------------------------------------
Echo Installing Security Patch KB824146 for Windows NT
ECho -------------------------------------------------
Echo DO NOT CLOSE THIS WINDOW
\\server\Patch\KB824146\nt.exe -q -z
copy \\server\patch\KB824146\KB824146.txt %systemroot%
CLS
Echo **********************
ECho Patch Install Complete
Echo **********************
goto end

:ME
echo OS is Windows ME ...
goto end

:98
echo OS is Windows 98 ...
goto end

:95
echo OS is Windows 95 ...
goto end

:OEM
echo OS is Windows OSR ...
goto end

:DOS
echo OS is MS-DOS mode ...


:end
exit
end

::
**********************************************************

If you modify the \\server\OS VERSION\PATCH to your needs,
this should work for you.
You will have a different batch for each patch you
install.

Hope this help!

D.J.
A+, Net+, MCP, MCSA
Northrop Grumman IT
 
Try taking a look at the "Software Update Service (SUS) it's a free product
from MS to push out updates.
If you are really serious about pushing out updates look at patchlink
(www.patchlink.com) call and talk to Spencer (X129) tell him Johnny sent
you.
A policy will work but will be a lot of work. Service packs include thee MSI
file in a sub directory. I forget the exact location. Extract it and do a
search. For staying on top of updates PatchLink will be the best. For a
cheep high maintenance solution SUS is good. a GPO really isn't a good
solution when there are free solutions that give you more control.
 
Back
Top