Scripting - Installare patch su client remoti in automatico


Se abbiamo un server WSUS e vogliamo installare a nostro piacimento le patch sui client sopprimendo il relativo restart dei pc possiamo usare lo script seguente combinato con a monte psexec ed un .vbs principale che esegui il patching ad un ora stabilita su un insieme di client anche questo stabilito a priori.


Ecco la sintassi per lanciare lo script con PSEXEC (da me testata)

psexec \\nome_wks -i cscript.exe /nologo \\192.168.x.x\share\nome_script.vbs

Un prodotto similare è WuInstall:


Questo prodotto ha una sua versione gratuita ed una a pagamento.

Tale programma può essere eseguito su macchine remote con il seguente comando:

psexec \\server -c -s 
-u domain\administrator -p password \\share\path_to_wuinstall\WUInstall.exe /search
  • \\server → the remote Windows machine
  • \\share\path_to_wuinstall\ → path to WuInstall executable
  • -u domain\administrator → local admin oder domain admin user on the machine \\server
  • -p password → password of the user
  • -c → copies WuInstall on the remote system
Di seguito il relativo prezzo:
  • up to 150 points: USD 390 – WuInstall PRO Basic
  • 151 to 500 points: USD 590 – WuInstall PRO Small
  • 501 to 1000 points: USD 990 – WuInstall PRO Medium
  • 1001 to 2000 points: USD 1.790 – WuInstall PRO Large
  • more than points: USD 2.990 – WuInstall PRO Unlimited
Si tratta di cifre abbordabilissime per le realtà aziendali, con il grosso beneficio di avere tutti i client patchati.
Esiste anche una versione FREE di WuInstall 1.1 il cui link di download è il seguente:



WuInstall 1.1download


WuInstall enforces Windows updates and makes the entire updating process user friendly. The basic version WuInstall 1.1. is freeware.
Basic functions
  • Searching for updates:
    /search     → lists all update which are available. It either searches on the Windows Update Server in the Internet, or, if configured, on your WSUS. It has no impact on your system at all, it just does a search ans lists what was found.
  • download updates:
    /download → does the same search as WuInstall /search and then downloads the updates which were found. WuInstall itself does not download anything, but it triggers the Microsoft Windwos Update Engine, which downloads the updates
  • install updates:
    /install → searches the updates, downloads them (if they have not already been downloaded by a previous wuInstall /download command) and then installs them
New features in version 1.1:
  • /reboot [nseconds] possible in combination with other parameters, reboot is done after executing WuInstall with a delay of nseconds (default: 10) seconds
  • /criteria "query string" → searches for updates, which match the query string. For query strings see MSDN. The default criteria is "IsInstalled=0 and Type='Software'".
  • /match "search string" → searches for updates which match the search string (no regular expressions posible so far!)

[update 16 maggio 2012]

Esiste anche la versione di script in Power Shell:

http://blogs.technet.com/b/heyscriptingguy/archive/2009/03/11/how-can-i-search-for-download-and-install-an-update.aspx

Questa permette di installare le patch, cercarle ed installarle



Posted by
Labels: , , ,