running a script or batch file to apply a patch for msblaster worm

[vaughn9]

I have a svchost.exe error on machines connected to a windows 2000 server. I found a Microsoft patch to fix athe error and I want to run this patch as a batch file to all the computers in the domain. I don't want to have to run the patch on individual computers.

I was thinking if I put all the computers in a Group, then I can attach a policy which runs the patch at start up. But I am not quite sure how to do this.

any ideas.