Best way to deploy security patches via a GPO would be to create an .MSI
package. Somewhat time consuming, but certainly possible. You should
seriously consider deploying SUS on your network. It's a breeze, really. All
you need is an existing 2K server, IIS, and the free SUS software from
Msoft. You can then configure your group policy to have your clients poll
the SUS server at specific times to obtain all the latest security
patches(computer config/admin templates/windows components/windows update)
that you approve. It took us about 3-4 hours to get SUS online and
activated.
Creating an .msi file is really not a good idea. You really want to stay
away from this sort of thing. There have been several recent posts about
this recently.
Now, the idea of SUS is an excellent idea. I would really focus on this.
Want to reply to this thread or ask your own question?
You'll need to choose a username for the site, which only take a couple of moments. After that, you can post your question and our members will help you out.
