Software Deployment

Research a product called Bigfix Enterprise. Works very well!

Create a new image with the patches, if this is possible. The lab I work in has core applicaitions updated weekly. So about once a month we create a new image.

Take a look at HP Open Radia Patch Manager. I will tell you down to the file level whether or no you are vunerable. If a dll or exe is changed it will also be reported. I have used it since it's beta form and I'm very impressed.

We use a Microsoft Update Server for our patch manage ment and I have been able to deploy patches immediatley after imaging by running these commands....


REM Force client to check in and update to latest WUS client
%SystemRoot%\System32\wuauclt.exe /InstallAUclient

REM Detect missing patches
%SystemRoot%\System32\wuauclt.exe /resetauthorization /detectnow

REM Download patches immediatley
%SystemRoot%\System32\wuauclt.exe /downloanowfast

These registry keys are also necessary to point the client to your internal WUS.
Registry Keys:
("HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\WindowsUpdate","WUServer","REG_SZ","HTTP://Admin02")
("HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\WindowsUpdate","WUStatusServer","REG_SZ","HTTP://Admi("HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\WindowsUpdate\AU","UseWUServer","REG_DWORD", "1")

Feel free to drop me an email if you need clarification. This solution is free and it works GREAT! We support 1,200+ clients like this.