Deploy Patch MS03-026 Via Group Policy

[MesaMarshall]

Hello, I am trying to find out if there is a way to deploy the new Microsoft patch Via Group Policy. There is no MSI files in the patch only .EXE’s which to my knowledge are un-assignable through group policy.

Currently I am trying to get SUS to run on a server so I can automate patching of our desktop systems, but the road to getting that running seems to be very hairy indeed, running into all sorts of problems.

So, is there anyone who has had success or implementing a deployment of this patch through group policy so I can patch the systems while I also fight with SUS?

Thank you very much,


-Mesa

 

[lbreimyer]

I think you can accomplish your goal with Pedestal Software SecurityExpressions. It's agentless and offers comprehensive patch management. It also supports Group Policy. I would check out their web site...I pasted the link below. I hope this helps!

http://www.pedestalsoftware.com/products/se/index.asp

 

[Stiddy]

Wish I had the answer for you, I had to do it via scripts. You can run it with arguments like:

executable /u /q /z

meaning run it in unnattended mode, quietly, and dont reboot

 

[ashpp]

This looks like a promising script.

http://groups.google.co.uk/groups?q...=eD79gfEWDHA.2344@TK2MSFTNGP09.phx.gbl&rnum=1

 

[amorielljr]

SUS should not be difficult to deploy. I did it in less than a day. What problems are you having??

 

[MesaMarshall]

I would like to thank everyone for their help.

the issues I was having with SUS was Servers incorrectly setup. Missing Windows packages, IIS not fully installed, or half installed, previous website (undocumented!!!) *growl* on the server not working after the IIS lock down tool (Imagine my suprise!)

So now, it is on one of our servers and getting every desktop that is W2k Sp3 and XP sp1, I do notice though after I approve an update it sometimes takes three days for everyone to get it, but hey, I am not complaining it beats doing it by hand!!!

Again, thank you everyone!

-Mesa