RE: Windows 2000 Patch Order

go and grab the command line hfnetchk from http://www.shavlik.com as well as qchain.exe and qfecheck.exe from microsoft- making sure you get the windows 2000 versions.

setup a batch file with all the hotfixes using the /z /m switches to avoid prompts and do "silent" installs.

at the end of your batch file execute qchain. it will go through the list of files in queue waiting to be copied into the filesystem upon reboot, and leave only the latest version of each dll. then the installed order doesn't matter.

for example, say you install a hotfix with a dll version of 2, then another hotfix with a dll version of 1.7. v1.7 will be later in the queue and will overwrite v2 when you reboot. qchain will remove the v1.7 and leave only the v2 for install.

then, after a reboot, run qfecheck, and then hfnetchk /v /z /s 2 . qfecheck should come back and tell you each hotfix installed, and if it is installed properly. hfnetchk should do the same.

this is the best method, sanctioned my microsoft. I still run across some hotfixes which hfnetchk reports as having greater file versions and invalid checksums, etc. using qfecheck in concert with hfnetchk gives me some mental relief.

also, if you're doing this just after a hotfix has been released, make sure to check the date on the XML file, it often doesn't get updated until later that day or a day or two later.

email me off-list if you want more help.

Do you need help?

In addition to our free technical library, Pantek provides professional IT services to companies who utilize Open Source software: Learn more about Pantek's Technical Support offerings Place an order for 24/7/365 Technical Support here Learn more about Pantek, who we are, and what we do Chat with a Live Operator Related securityfocus.com Links bugtraq certification focus-bsd focus-ids focus-ih focus-linux focus-ms focus-sun focus-unix-other focus-virus forensics incidents libnet linux-secnews ms-secnews pen-test secpapers secprog sectools secureshell security-basics securityjobs sf-news vuln-dev webappsec Request more information about Pantek

-d

> -----Original Message-----
> From: Kallio, Steve J. [mailto:Steve.Kallio@rfets.gov]
> Sent: Thursday, June 12, 2003 7:37 AM
> To: focus-ms@securityfocus.com
> Subject: Windows 2000 Patch Order
>
>
> This may be an old topic, but I'm new to the list: