;************************************ XP HotFix Updates *****************************************
		$arrkey = arrEnumKey('HKLM\SOFTWARE\Microsoft\Updates\Windows XP\SP3')
		$arrdir = FileList($setup+'\Hotfixes\WinXP','.exe',1)
		$MaxSize= 500000
		if not @error
			$reboot = 0
			for each $dir in $arrdir
				$installed = 0
				$parsed = split($dir,'-')[1]
				for each $key in $arrkey
					if $key = $parsed	$installed = 1		endif
					next
				if not $installed
					if (@ras and GETFILESIZE($dir) < $MaxSize) or not @ras
						$=sendmessage(@wksta,"A CRTICAL upgrade is now starting.  "+
						"Your computer will restart on it's own in about 2-3 minutes. Please do not open any programs.  "+
						"There is no need to click the OK button.")
						? color c+/n ' Installing Security Update '+$parsed
						shell '%comspec% /c ' + $dir + ' /passive /norestart'
						$reboot = 1
						endif
					endif
				next
			if $reboot 	
				ShutDown ('', 'Updates have been applied that require your computer to restart', 5, 1, 1)
				quit
				endif
			endif

Quote:

---

So installing those things just for WSUS is overkill. I only want to keep these windows machines updated easily. Has microsoft made this updating so incredibly difficult it cant even be scripted then?

---

Quote:

---

....
updated your client machines (via GPO) to look at it
....

---

Quote:

---

(asuming local admin)

---

Quote:

---

Well, I sure do apreciate the help from you guys. But WSUS is definitely something I do now want to go for. I have no IIS server in my network, no Database servers and don't need one either.

So installing those things just for WSUS is overkill. I only want to keep these windows machines updated easily. Has microsoft made this updating so incredibly difficult it cant even be scripted then?

Thanks,
Mark

---

Quote:

---

have you just ignored my post? I keep 2000 laptops and desktops updated with that (all XP), but the code is only a little different for 2k

Just dump the patch in the folder and at next logon the user will install it (asuming local admin)

---

Quote:

---

So installing those things just for WSUS is overkill.

---

Quote:

---

I find this script: Mcafee update script

Enormously useful in keeping our virus scanners up to date. It's even easier then the whole Enterprise management thingie.

Anyway I'd like to know if there are no kix-scripts around that do the same for automagic Windows patching? I could donwload the individual 2k ande XP patches from SoftwarePatch.com

Put them in a directory, and have the scripts install them from there. This way, the user won't get a nasty surprise if microsoft deems an update so important to automaticly reboot the system. Not saving the users work... (Downside of automatic windows updates).

Thx,
Mark

---

Quote:

---

....
except to turn it on in the first place and maybe get them the latest version of BITS
....

---

Quote:

---

"No workstation will log onto our enterprise network without being fully patched. Ever. Period."

---