On 2010-04-17 3:52 a.m., Jordan wrote:
> I use RIS server to deploy Windows XP workstations. I use Group Policies
> and Active Directory to deploy almost all my software including Office,
> Visual Studio, etc. I also use WSUS 3.0 to update the workstations and I
> use Group Policies to set the schedule to download the updates and install
> them at 3:00 AM which works well.
>
> When I setup a new computer using RIS and deploy all the software using AD
> GPOs it takes about 4 or 5 nights to fully patch XP, Office, Visual Studio,
> and the patches to upgrade to IE 8. If I want it done quicker I can just
> login and run wuauclt.exe /detectnow and apply the patches faster.
>
> Is there some script or something that I can run where Windows XP will
> automatically check for the updates after it finishes booting (without
> logging in) and check for and install all the updates and reboot if needed?
> I would like to add this to Windows' startup script so when I build a new
> computer it will just keep patching away until complete.
My script may be of use here:
<http://www.scms.waikato.ac.nz/~harry/wsusupdate.vbs>
http://www.scms.waikato.ac.nz/~harry/wsusupdate.vbs
It is designed to be run from the command line, i.e., cscript rather than
wscript, and to be wrapped in a command (or other) script which reboots the
system if necessary and handles error conditions. Obviously you could modify it
to suit your preferences.
Note that it may not be wise to run this in a startup script for production
computers, as it could overload your WSUS server if many computers are switched
on at roughly the same time in the morning. If applied only to computers that
are being built - either as a startup script in a separate OU, or as part of the
build process - it should be OK.
Harry.
--
Harry Johnston
http://harryjohnston.wordpress.com