XPSP2 Push

[Nicholas Edivan]

Using Landesk to push XPSP2 via the HKLM runonce. When the user boots down/up and logs in XPSP2 starts to install but takes up to a hour to install. Prior to Landesk XPSP2 was being installed via cd in about 20mins. Not sure if this could be the reason but when installing via cd we disable McAfee's On Demand Scan. If that is the case then how would I disable it when using HKLM runonce to install xpsp2?

 

[David H. Lipman]

From: "Nicholas Edivan" <[email protected]>

| Using Landesk to push XPSP2 via the HKLM runonce. When the user boots down/up and logs in
| XPSP2 starts to install but takes up to a hour to install. Prior to Landesk XPSP2 was
| being installed via cd in about 20mins. Not sure if this could be the reason but when
| installing via cd we disable McAfee's On Demand Scan. If that is the case then how would I
| disable it when using HKLM runonce to install xpsp2?

Going over the LAN ?

It's a 256MB file. Are you running it across the LAN or copying it local ? Are many nodes
doing the same thing at the same time ?

I found it easier to put Service Packs on a CDROM with a Kixtart Script that installs the
patches automatically and not put a burdeon on the LAN.

Yes, if you have many coomputers it takes time. However, all you need is a multiple CDs and
a team. since it it scripted, there is nor user intervention and the end, the PC is
auto-rebooted. Put the CDROM in, run the scrript, go to next PC. At the end, go to the
reboted PCs and remove the CD.

BTW: Part of the script copies the SP2 installer from the CD to the hard disk, stops the
McAfee VirusScan NT Services and then runs the SP2 installer.

 

[Nicholas Edivan]

Landesk is able to: push the package/unpack and add the reg entry to HKLM runonce. The actual pushing of the package seems not to be the issue rather the On Demand McAfee Scan when booting up......How were you able to stop/disable the McAfee Scan?
From: "Nicholas Edivan" <[email protected]>

| Using Landesk to push XPSP2 via the HKLM runonce. When the user boots down/up and logs in
| XPSP2 starts to install but takes up to a hour to install. Prior to Landesk XPSP2 was
| being installed via cd in about 20mins. Not sure if this could be the reason but when
| installing via cd we disable McAfee's On Demand Scan. If that is the case then how would I
| disable it when using HKLM runonce to install xpsp2?

Going over the LAN ?

It's a 256MB file. Are you running it across the LAN or copying it local ? Are many nodes
doing the same thing at the same time ?

I found it easier to put Service Packs on a CDROM with a Kixtart Script that installs the
patches automatically and not put a burdeon on the LAN.

Yes, if you have many coomputers it takes time. However, all you need is a multiple CDs and
a team. since it it scripted, there is nor user intervention and the end, the PC is
auto-rebooted. Put the CDROM in, run the scrript, go to next PC. At the end, go to the
reboted PCs and remove the CD.

BTW: Part of the script copies the SP2 installer from the CD to the hard disk, stops the
McAfee VirusScan NT Services and then runs the SP2 installer.

 

[David H. Lipman]

From: "Nicholas Edivan" <[email protected]>

| Landesk is able to: push the package/unpack and add the reg entry to HKLM runonce. The
| actual pushing of the package seems not to be the issue rather the On Demand McAfee Scan
| when booting up......How were you able to stop/disable the McAfee Scan?
|

I think yoy mean "Om Access" scanning. McAfee should NOT perform a "On Demand" scan at boot
up.

I inserted the following KiXtart script snippet to turn off the the McAfee "On Access"
scanner.

;McAfee v4.5 SP1
;-----------------------------------------------------------
if exist ("c:\Program Files\Network Associates\VirusScan\*.*")=1
shell "%comspec% /c net stop mcshield >nul"
shell "%comspec% /c net stop AVSynMgr >nul"
endif

;Mcafee v7.1E and v8.0i
;-----------------------------------------------------------
if exist ("C:\Program Files\Network Associates\Common Framework\*.*")=1
shell "%comspec% /c net stop McAfeeFramework >nul"
shell "%comspec% /c net stop McTaskManager >nul"
shell "%comspec% /c net stop McShield >nul"
endif

At the end of the script the PC would be rebooted.

Note that in the script not only was SP2 installed but the c:\i386 folder was slip-streamed
to SP2 level as well.

 

[Nicholas Edivan]

Very Cool.....is there way to convert the kixtart script to a vbs or js....I really don't want
to deploy kixtart to all my users....
From: "Nicholas Edivan" <[email protected]>

| Landesk is able to: push the package/unpack and add the reg entry to HKLM runonce. The
| actual pushing of the package seems not to be the issue rather the On Demand McAfee Scan
| when booting up......How were you able to stop/disable the McAfee Scan?
|

I think yoy mean "Om Access" scanning. McAfee should NOT perform a "On Demand" scan at boot
up.

I inserted the following KiXtart script snippet to turn off the the McAfee "On Access"
scanner.

;McAfee v4.5 SP1
;-----------------------------------------------------------
if exist ("c:\Program Files\Network Associates\VirusScan\*.*")=1
shell "%comspec% /c net stop mcshield >nul"
shell "%comspec% /c net stop AVSynMgr >nul"
endif

;Mcafee v7.1E and v8.0i
;-----------------------------------------------------------
if exist ("C:\Program Files\Network Associates\Common Framework\*.*")=1
shell "%comspec% /c net stop McAfeeFramework >nul"
shell "%comspec% /c net stop McTaskManager >nul"
shell "%comspec% /c net stop McShield >nul"
endif

At the end of the script the PC would be rebooted.

Note that in the script not only was SP2 installed but the c:\i386 folder was slip-streamed
to SP2 level as well.

 

[David H. Lipman]

From: "Nicholas Edivan" <[email protected]>

| Very Cool.....is there way to convert the kixtart script to a vbs or js....I really don't
| want to deploy kixtart to all my users....
|

Well, KiXtart can be executed from a centralized location. However, the script can be
converted to VBS.

I prefer KiX Scripts

 

[Torgeir Bakken \(MVP\)]

Hi,

Converted to VBScript:

'--------------------8<----------------------
Set oFSO = CreateObject("Scripting.FileSystemObject")
Set oShell = CreateObject("WScript.Shell")

sPFDir = oShell.RegRead _
("HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\ProgramFilesDir")

' McAfee v4.5 SP1
If oFSO.FolderExists(sPFDir & "\Network Associates\VirusScan") Then
oShell.Run "%SystemRoot%\system32\net.exe stop mcshield /y", 0, True
oShell.Run "%SystemRoot%\system32\net.exe stop AVSynMgr /y", 0, True
End If

' Mcafee v7.1E and v8.0i
If oFSO.FolderExists(sPFDir & "\Network Associates\Common Framework") Then
oShell.Run "%SystemRoot%\system32\net.exe stop McAfeeFramework /y", 0, True
oShell.Run "%SystemRoot%\system32\net.exe stop McTaskManager /y", 0, True
oShell.Run "%SystemRoot%\system32\net.exe stop McShield /y", 0, True
End If

'--------------------8<----------------------

 

[Nicholas Edivan]

That works like a champ!!!.....Thanks for your post.....
Hi,

Converted to VBScript:

'--------------------8<----------------------
Set oFSO = CreateObject("Scripting.FileSystemObject")
Set oShell = CreateObject("WScript.Shell")

sPFDir = oShell.RegRead _
("HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\ProgramFilesDir")

' McAfee v4.5 SP1
If oFSO.FolderExists(sPFDir & "\Network Associates\VirusScan") Then
oShell.Run "%SystemRoot%\system32\net.exe stop mcshield /y", 0, True
oShell.Run "%SystemRoot%\system32\net.exe stop AVSynMgr /y", 0, True
End If

' Mcafee v7.1E and v8.0i
If oFSO.FolderExists(sPFDir & "\Network Associates\Common Framework") Then
oShell.Run "%SystemRoot%\system32\net.exe stop McAfeeFramework /y", 0, True
oShell.Run "%SystemRoot%\system32\net.exe stop McTaskManager /y", 0, True
oShell.Run "%SystemRoot%\system32\net.exe stop McShield /y", 0, True
End If

'--------------------8<----------------------