|
|
|
|
|
How to patch Windows manually
Securing windows has a lot to do with patching. If, for some reason you don't want to use the windows update website or automatic updates, then this is what you can do: install the latest service pack and security rollup package and install security hotfixes and keep up with these hotfixes. Some free tools are available that will assist you in this task. These tools are HFNetChk (hotfix checker), QChain (install multiple hotfixes with only one reboot), and your batch programming skills.
Ok, once you've downloaded and installed the latest service pack and security rollup package for your system. Run HFNetChk, go to this site: HotFix & Security Bulletin Service and download all MS0?-??? hotfixes HFNetChk said were "not installed". See this page for downloading windows update only patches. You could now install each patch and reboot between them, but with a little batch file and QChain, we can avoid this rebooting. Make a batch file like this:
@echo off
REM Put all the patches here, add -z (for no reboot) and -m (for no messages)
Q123456_w2k_sp2_x86.exe -z -m
Q123321_w2k_sp2_x86.exe -z -m
Q123789_w2k_sp2_x86.exe -z -m
REM Finally run qchain
qchain.exe
Download QChain and put it together with all the hotfixes and batch file in one directory. Now, run the batch file, enjoy the view and afterwards reboot your system and you're all set! Keep up with security patches (by subscribing to the Microsoft Product Security Notification, visiting their site or running HFNetChk regularly) and if you add/remove windows components or reinstall something you might want to use this tool (QFECheck) to verify the installed hotfixes are still applicable.
Patches where HFNetChk said "Note:" you should read them carefully and apply them as described in their bulletin.
| Published: 16/08/2002 | Document Type: General |
| Last modified: 11/04/2003 | Target: Administrator |
| Visibility: Public | Language: English |
[top]
|
