[gptalk] Re: How to: Installing hotfix with GPO's?

  • From: "Omar Droubi" <omar@xxxxxxxxxxxxxxxxxxxxx>
  • To: <gptalk@xxxxxxxxxxxxx>
  • Date: Wed, 18 Oct 2006 14:38:28 -0700

Correct me if I am wrong - but if the hotfix is assigned to the computer and
not the user- it should run as system and not require any elevation. All you
would need to do is create the logic for running the hotfix silently and
dealing with a reboot as necessary.
What do you have against SUS? Actually you should look at WSUS which will do
the Office updates as well and give you a centralized console so you can
view the status of the update installation.  I think this product is great
for the price and I would suggest it to any org that does not want to pay
for another software solution and does not believe in setting up the
workstations to do auto update with auto install. 
Even if you can get the HF to work in the GPO your reporting is very poor as
you would need to run a post script to check or you would need to comb the
event logs.

If I was you- and you are against WSUS- I would suggest you spend your time
trying to figure out how to upgrade all of your workstations to support
Microsoft Update and then you can just use a GPO to configure AutoUpdate
settings and your done- the Outlook Junk mail filter will be installed
My 2 cents,


From: gptalk-bounce@xxxxxxxxxxxxx [mailto:gptalk-bounce@xxxxxxxxxxxxx] On
Behalf Of Mills, Mark
Sent: Wednesday, October 18, 2006 2:27 PM
To: gptalk@xxxxxxxxxxxxx
Subject: [gptalk] How to: Installing hotfix with GPO's? 

OK, I've assigned and published a few few apps with .MSI files with no
problems to different OU's.  My question today is "what do I need to install
a hotfix (without SUS) when creating a GPO to apply it by OU?"


I reviewed some of Darren's past posts and all I see is that the users may
need to be admins of their local machine (because with MSI's you can tell GP
to elevate privileges during the install, and other files such as zap/exe,
you cannot tell it to elevate privileges).  I think I have that correct.


The hotfix is an exe file in the download from MS, if you use Winzip to
extract it, you have an .msp file along with some others (such as
ohotfix.dll, ohotfix.exe, ohotfix.ini)

Can I just point to the .exe file to do the install?  Do I need to change
the extension to a .zap file?  Or is there anything special I can do with
the .msp file? 


The file I'm wanting to install is the newest version of Outlook Junk Email
filter located at: 

-AAD0-CE95375D48CB&displaylang=en> &displaylang=en 


If there is already a good web page that details this, just send me the
link.  Thanks




Other related posts: