Windows Patches system

Archived from groups: microsoft.public.windowsxp.security_admin (More info?)

I am trying to do some patch management by downloading patch files from
Microsoft. I have the following questions. Please help.
1. What is Q numbers, Service Patches, Update, etc. (Bascially, I want to
understand the numbering system from Microsoft, I am confused, such as
'Security Update for Windows XP (KB810217)', '329170: Security Update')
2. In the SUS server's detail info for patch file, there is a setup
parameters, such as '-q /Z -ER', what does it mean? Where to find more info?
If I manually run the exe, do I have to give them as arguments?
3. How does Microsoft or SUS make sure the patches are in order? If I
download all the patches files, which order should I execute them?
4. In SUS server, is there a way to limited only syn on Windows XP, not
include other platforms?

Thanks in advanced
3 answers Last reply
More about windows patches system
  1. Archived from groups: microsoft.public.windowsxp.security_admin (More info?)

    There is a very good Patch Management Solution Accelerator document located
    on the Microsoft website that would answer most of these questions for you....

    CanNear

    "David Tamus" wrote:

    > I am trying to do some patch management by downloading patch files from
    > Microsoft. I have the following questions. Please help.
    > 1. What is Q numbers, Service Patches, Update, etc. (Bascially, I want to
    > understand the numbering system from Microsoft, I am confused, such as
    > 'Security Update for Windows XP (KB810217)', '329170: Security Update')
    > 2. In the SUS server's detail info for patch file, there is a setup
    > parameters, such as '-q /Z -ER', what does it mean? Where to find more info?
    > If I manually run the exe, do I have to give them as arguments?
    > 3. How does Microsoft or SUS make sure the patches are in order? If I
    > download all the patches files, which order should I execute them?
    > 4. In SUS server, is there a way to limited only syn on Windows XP, not
    > include other platforms?
    >
    > Thanks in advanced
  2. Archived from groups: microsoft.public.windowsxp.security_admin (More info?)

    I cannot find the answers for patch numering system and manual executing
    Patch parameter in the following Microsoft Doc.
    * Delopying Microsoft Software Udpate Services
    * Software Update Services Overview
    * How to Perform Patch Management Using SUS
    * Delpying Windows XP Sevice Pack 2 using Software Update Services

    Hi CanNear or others, please help in directing me specifically. Thanks in
    advanced

    "CanNear" wrote:

    > There is a very good Patch Management Solution Accelerator document located
    > on the Microsoft website that would answer most of these questions for you....
    >
    > CanNear
    >
    > "David Tamus" wrote:
    >
    > > I am trying to do some patch management by downloading patch files from
    > > Microsoft. I have the following questions. Please help.
    > > 1. What is Q numbers, Service Patches, Update, etc. (Bascially, I want to
    > > understand the numbering system from Microsoft, I am confused, such as
    > > 'Security Update for Windows XP (KB810217)', '329170: Security Update')
    > > 2. In the SUS server's detail info for patch file, there is a setup
    > > parameters, such as '-q /Z -ER', what does it mean? Where to find more info?
    > > If I manually run the exe, do I have to give them as arguments?
    > > 3. How does Microsoft or SUS make sure the patches are in order? If I
    > > download all the patches files, which order should I execute them?
    > > 4. In SUS server, is there a way to limited only syn on Windows XP, not
    > > include other platforms?
    > >
    > > Thanks in advanced
  3. Archived from groups: microsoft.public.windowsxp.security_admin (More info?)

    David Tamus wrote:

    > I am trying to do some patch management by downloading patch files from
    > Microsoft. I have the following questions. Please help.
    > 1. What is Q numbers, Service Patches, Update, etc. (Bascially, I want to
    > understand the numbering system from Microsoft, I am confused, such as
    > 'Security Update for Windows XP (KB810217)', '329170: Security Update')

    Description of the standard terminology that is used to describe
    Microsoft software updates
    http://support.microsoft.com/default.aspx?scid=kb;en-us;824684

    The number in itself is just a unique index number.


    > 2. In the SUS server's detail info for patch file, there is a setup
    > parameters, such as '-q /Z -ER', what does it mean? Where to find more info?

    The security bulletin for each security update documents the command
    line switches (expand the Security Update Information section).

    A listing of security bulletins is to be found here:
    http://www.microsoft.com/technet/security/current.aspx


    > If I manually run the exe, do I have to give them as arguments?

    No.


    > 3. How does Microsoft or SUS make sure the patches are in order? If I
    > download all the patches files, which order should I execute them?

    Service packs first (with a reboot), then any Security Rollups (with a
    reboot), then the latest cumulative Internet Explorer update (with a
    reboot), then all other updates, order of install is irrelevant (you
    may want to do a reboot for e.g. each 5th update you install).


    > 4. In SUS server, is there a way to limited only syn on Windows XP, not
    > include other platforms?

    No, you will need to wait for the new version (WUS) that is in beta now.


    --
    torgeir, Microsoft MVP Scripting and WMI, Porsgrunn Norway
    Administration scripting examples and an ONLINE version of
    the 1328 page Scripting Guide:
    http://www.microsoft.com/technet/scriptcenter/default.mspx
Ask a new question

Read More

Security Microsoft Windows XP