Deploying a Microsoft Hotfix

[Daveyd123]

I am currently usung WSUS to handle all my deployments of patches. However, I have come across a hotfix that needs to be applied to 60 computers. The hotfix does not appear to be in WSUS. Any idea how I can deploy this hotfix to all the computers that need it?

The hotfix:

http://support.microsoft.com/kb/935448

 

[djtech2k]

AD gpo or SMS would work fine. What exactly do you mean it does not appear?

 

[Daveyd123]

When searching through all the updates in WSUS, KB935448 is not listed.

 

[djtech2k]

Have you done a recent synch on the wsus server? There has to be some reason that it is not finding it and downloading it or maybe it has but for some reason you are not seeing it.

 

[porkchopexpress]

I thought that patch was only released hours ago have you re synced your server?

 

[porkchopexpress]

jinx sorry dj

 

[Daveyd123]

I did a sync about an hour ago. I am synching Critical Updates, Security Updates, Service Packs, Update Rollups and Updates.

Searching through All Updates...Approval: All Updates...Synchronized: Any Time.....Contains Text: KB935448....yields nothing

 

[Daveyd123]

Here's my lat sync


Last Synchronization
Type: Manual
Started: 4/4/2007 10:30 AM
Finished: 4/4/2007 10:30 AM
Result: Success

Synchronization Summary
New updates: 0
Revised updates: 0
Expired updates: 0
Errors: 0

 

[porkchopexpress]

No it didn't appear in my last update but as it's not a security update MS will probably hold it back for additional testing before unleashing it through WSUS.

 

[Daveyd123]

Guess I should have paid more attention to the freakin "animated cursor" exploit patch...

After you install this security update on a Windows XP Service Pack 2 (SP2)-based computer, Realtek HD Audio Control Panel (Rthdcpl.exe) may not start.

 

[porkchopexpress]

Hmmm we have a few boxes with Realtek Audio is it affecting many or your clients?

 

[Daveyd123]

A bunch of them now. I think it is affecting the RealTek Control Panel is you have it installed.

The "animated cursor" patch has not yet been fully deployed via WSUS. So I am sure that it will be affecting more computers in the next day or so

 

[Davetoo]

It screwed up my home gaming PC...couldn't use my Ventrillo, nothing. I even put in a sound card and it is still hosed. <sigh> Thanks Bill.

I'm Certifiable, not cert-ified.
It just means my answers are from experience, not a book.

 

[Daveyd123]

I am going to wait a couple of days to see if MS releases the hotfix via WSUS.

If not, does anyone know an easy wasy to deploy the hotfix via GPO. I can do software deployment (.msi) with no problem but have never deployed a hotfix

 

[porkchopexpress]

I haven't used them but there are scriptable utils called Hotfix.exe and Qchain for this purpose. Take a look at this link.

http://www.microsoft.com/windows200...sp3/HFDeploy.htm#the_update_installation_semb

 

[porkchopexpress]

Oh sorry this is the 2003 version i'm not 100% certain that this will fully automate the task.

http://207.46.196.114/WindowsServer...aca7-4dad-b3e2-c94ea72bbc3d1033.mspx?mfr=true

 

[porkchopexpress]

It's worth noting that the patch covers several flaws including EMF Elevation of Privilege Vulnerability CVE-2007-1212. It seems to plug seven holes in all so it might be worth continuing to test it on different hardware and rolling it out to unaffected systems.

http://www.microsoft.com/technet/security/Bulletin/MS07-017.mspx

 

[Daveyd123]

Porkchop...you having any issues with your Realtek clients?

 

[porkchopexpress]

No i've tested three clients that have the Realtek control panel and i've not had any issues so far.

 

[porkchopexpress]

I have now come accross one PC that is showing the issue. I think MS are going to release an updated patch today as part of the monthly cycle.