OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
From: M. Burnett (mburnettxato.net)
Date: Thu Nov 15 2001 - 09:58:56 CST

  • Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

    Here's a batch file that will install all hotfixes in the directory
    from which it is run (may be wrapped):

    for /R %%f in (Q*.exe) do echo Installing %%f && %%f -n -z -q -m
    qchain.exe
    REM add any other files to install here...

    This batch file will run every file matching Q*.exe in the current
    directory. Note that not every hotfix follows that naming convention
    (such as the one for MS01-022). For those, you can just add those
    manually at the end.

    So make that into a batch file, throw the hotfixes into the same dir
    and run it.

    Here's a variation:

    To verify the signature on each hotfix before installing, use
    chktrust.exe, which is found in
    http://msdn.microsoft.com/downloads/tools/authenticode/codesign.exe
    (may be wrapped):

    for /R %%f in (Q*.exe) do chktrust -q %%~nxf && (echo Installing
    %%~nxf... && %%f -n -z -q -m && echo -) || (echo %%f is corrupt
    and will not be installed)

    qchain.exe
    REM add any other files to install here...

    Hope this helps.

    Mark Burnett
    www.xato.net
    www.iis-insider.com

    On Thu, 15 Nov 2001 17:56:39 +0100, Riccardo Fontana wrote:
    >Hi all,
    >
    >I don't know if this has already been discussed.
    >
    >Is there any tool or method to create a batch to perform an
    >automatic
    >installation (i.e. w/o any user input) of MS hotfixes and patches ?
    >
    >I'm trying to automate the installation of patches on my network
    >with
    >HFNetChk and some simple command like:
    >
    >at \\computer-name 23.00 c:\localpath\batch.cmd
    >
    >Where "batch.cmd" is a script generated from HFNetChk result.
    >
    >p.s.: This method rely on the presence of both patches and scripts
    >on
    >localhost because at-launched application run as SYSTEM, and there
    >is no
    >way to have them access a network share.
    >
    >
    >Is there any better way to obtain the same results ?
    >
    >installing iis security hotfixes