If you have an active directory environment you can use that to deploy patches or use scripting.
I created a post-SP2 hotfix automated installer by using a combination of a batch file, qchain.exe (http://support.microsoft.com/support/kb/articles/Q296/8/61.asp), and WinZip Self-Extractor (http://www.winzip.com). This makes installing the most recent fixes a two step process - 1) Run the .exe (or script/batch file...however you choose to do it) 2) manually reboot once (or use shutdown.exe from the Windows 2000 Reskit for your remote machines). I use the -q -z -m switch on my hotfix files, i.e. w2kSP2SRP1.exe -q -z -m Q313450_W2K_SP3_X86_EN.exe -q -z -m Q313829_W2K_SP3_X86_EN.exe -q -z -m Q314147_W2K_SP3_X86_EN.exe -q -z -m More info on hotfix switches is available here: http://support.microsoft.com/support/kb/articles/Q262/8/41.ASP Although not a simple "one touch" solution, this solution has one advantage in that it is free. :) Good luck... Eric ----- Original Message ----- From: "Kip Sr." <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Tuesday, March 12, 2002 12:01 AM Subject: Best way to deploy MS security patches ?? > Hi there! > > I have 180 Win2K desktops, and am looking for an > automated solution to quickly and efficiently deploy > patches throughout the enterprise. I have used SMS > before, but find it cumbersome and time consuming to > use. Does anyone have any other suggestions? Tips? > Tricks? > > Much obliged, > Kip
