Deploy Patches and Hotfixes quickly using Login Script

[Philip Wang]

Hi guys,

My question may have been published a thousand times, but
just wondering if there is anyway to quickly deploy
security patches using login script without the
followings:

1) User is not a Administrator
2) No luxury of SMS or other 3rd party software like
HFnetchk or TQCRunas.

My target are Windows NT 4.0 Workstation, Windows 2000
Pro and Windows XP Pro PCs / laptops.

Any idea?

Regards.

 

[Shenan Stanley]

My question may have been published a thousand times, but
just wondering if there is anyway to quickly deploy
security patches using login script without the
followings:

1) User is not a Administrator
2) No luxury of SMS or other 3rd party software like
HFnetchk or TQCRunas.

My target are Windows NT 4.0 Workstation, Windows 2000
Pro and Windows XP Pro PCs / laptops.

Can you not use a SUS server?
(You cannot with Windows NT workstation.. But the other workstations/laptops
could use SUS - whether or not you have a domain.)

Assuming you have a domain, startup scripts could be used..

Distributing via Group Policy would also be an option in a domain
environment.

Logon scripts would only be an option *if* the users logging in have the
rights needed to install the patches or you have written a script to run and
install as an admin/system level user to go along with this method.
However, the first three are your best options.

 

[Philip Wang]

Hi Shenan,
Thanks for your feedback. Here are some thoughts :

1) Management do not wish to use SUS even though its free.
2) To distribute via GPO means I will need to repackage
the EXE to MSI. Any good tools? So far a free tool I know
of is Wininstall 2003 LE.
3) Scripting. Good tool as all users will definitely get
to update but will require Administrative rights.

What I have thought of is to use Task Scheduler by
providing a script and assigning a Doamin Admin User
account to run the task at startup everytime. What do you
think?

Philip