True, Jens..
I have posted this before... I use the registry keys under active setup for this:

code:
$IEVersion = READVALUE("HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer","Version")
If $IEVersion <= 5.50.0
$Selection = Messagebox("Your current version of Internet Explorer is not supported. Please update to the latest version:
Microsoft Internet Explorer 5.5 found on the Intranet.","Old Internet Explorer Detected", 16)
Return
Endif

$MsJavaVersion = GETFILEVERSION(@LANROOT + "\msjava.dll")
If $MsJavaVersion < 5.00.3805
	$selection = Messagebox('*****************************************************************************************************************
*****************************************************************************************************************
*****************************************************************************************************************
Please wait while the "Microsoft VM" security update patch to your Internet Explorer software is being installed.
DO NOT INTERRUPT THIS PROCESS. It may take a few minutes to complete.
*****************************************************************************************************************
*****************************************************************************************************************
*****************************************************************************************************************',"<<<<[[[[Internet Explorer Patch]]]]>>>>",48)
	If GetFileSize ("C:\msjavx86.exe") = 5473872 else
		COPY @LDRIVE + "\MSJAVX86.EXE" "C:\"
	endif
	SHELL "c:\MSJAVX86.EXE /Q:A /R:N /N:V"
endif

If $IEVersion < 5.50.4800 Goto IE55SP1Patches Endif
If $IEVersion = "5.50.4807.2300"
	$PatchInstalled = READVALUE("HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{D7B44F3E-77D3-44C5-8E03-4222D9A18B7B}","IsInstalled")	
	If $PatchInstalled < 1
		$RUNONCEKEY = "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Runonce"
		$ok = WriteValue ($RUNONCEKEY,"Patch", @LSERVER + "\NETLOGON\Q321232\55SP2\Q321232.exe /Q:A /R:N /N:V","REG_SZ")
	Endif	

Endif	
Return

:IE55SP1Patches
$Patch2Installed = READVALUE("HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{D7B44F3E-77D3-44C5-8E03-4222D9A18B7B}","IsInstalled")
	If $Patch2Installed < 1
		$RUNONCEKEY = "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Runonce"
		$ok = WriteValue ($RUNONCEKEY,"Patch3", @LSERVER + "\NETLOGON\Q321232\55SP1\Q321232.exe /Q:A /R:N /N:V","REG_SZ")
	Endif	
Return
This is a section of code we use... It's a subroutine, so you may have to modify to get the code you want. This also updates the javavm... i hate that i had to put in that huge messagebox, but.. ah well.. management decision!

Brian

P.S. sorry for the long lines.. I was just pasting out of a script I use.

[ 10 June 2002, 18:37: Message edited by: BrianTX ]