What can do is to obtain the latest patch from microsoft and update it when a user logs on they reboot once. Instead of copying a file you can check if a registry key exists under installed components Hope this helps you.;MSNET.DDL UPDATE
$RETURNCODE = EXIST ("%WINDIR%\UPDATE1.TXT")
IF INWIN = 2 AND $RETURNCODE = 0
SHELL "%COMSPEC% /C COPY \\SERVER\UPDATES\UPDATE1.TXT %WINDIR%"
SHELL "%COMSPEC% /C \\SERVER\UPDATES" + "\MSNETUPD.EXE /Q"
ENDIF
