Create win2003 automatic installation disk - integrated patch /Raid and hardware driver four (integrated system latest patch package)

four. integrated system latest patch package

1.Using MBCA to scan system vulnerabilities and download patches

Use Microsoft Baseline Security Analyzer V2.1 (MBSA) to scan for system vulnerabilities, which can get the most up-to-date patches based on scan results.

Microsoft Baseline Security Analyzer V2.1 Download:

http://www.microsoft.com/downloads/details.aspx?FamilyID=F32921AF-9DBE-4DCE-889E-ECF997EB18E9&displaylang=en

Click Scan a computer

The default is this machine, click Start Scan

After the scan results, click on the Result details (blue on the map)

< Br>

Next click download below to download the logo

and then download all the patches to the E:\\dell\\hotfix directory.

2. Integrate the patch with the /integral switch

The next step is to integrate the latest system patch onto the system CD. You can use the /integrator switch or the Update.exe utility, here you can use /integrate .

/integrate command format is ----- >patch name/integrate: system disk directory

to windowsmedia6-kb925398-v2-x86-chs_003a779ff2e5d8968ccd00df1dfe5f1

332597c9e. Exe this patch to do an integration example, as shown below

This way we will patch the I386 below the svcpack folder, this folder is automatically generated, want to understand this reason, we use WRAR Open the svcpack.in_ file under I386, as shown below:

Next, how do we integrate all the patches into the target path, copy the following command, and change the suffix to .bat format. . Directly double-click to run ok

FOR /F usebackq %%i IN (`dir E:\\dell\\hotfix\\*.exe /b`) DO start /wait E:\\dell \\hotfix\\%%i /integrate: E:\\dell\\cn_win_srv_2003_r2_enterprise_with_sp2_vl_cd1\\ /passive

In order to explain the specific meaning

FOR.......DO—— Each file in the group file executes a specific command.

/F—— means that the processing object is a set of files with a carriage return as a separator

usebackq——handling a pair of `` commands

% i—— is the parameter

IN—— contained in

dir *.exe /b—— get the file name of all exe files in the directory, each A

start /wait is used to start a command, and wait for it to finish before executing the subsequent command. If it is not added, there will be n patches trying to integrate at the same time, which will cause the integration to fail.

/passive Installation in Quiet Mode

I386 directory before integration patch:

I386 directory after integration patch

Compare results: three more folders update, svcpack, SP2QFE, svcpack.in_ file becomes svcpack.inf, The svcpack.inf file adds the corresponding number of the installation patch.