reating the .MSI package file:
1.) Create a file share on the “deployment server” and set appropriate permissions.
2.) Download the hot fix/security rollup patch that you are wishing to deploy, and place it in the created file share.
3.) Extract the file from the command prompt by using the filename with the –x switch. (IE: c:\patches\w2ksp2srp1.exe –x)
4.) Verify the location of Update.exe from the extracted patch file (typically in the I386\update directory).
5.) Select a test workstation that does not have the hot fix/rollup patch installed on it already, and install WinInstall LE (located on the Windows 2000 server CD or downloadable from LSP Services).
6.) Start the Veritas Discover utility for WinInstall LE.
7.) Click Next to begin the discovery process.
8.) Type the name of the hot fix/rollup patch that you are installing (IE: Windows 2000 Security Rollup Patch).
9.) Type or Browse to the share where the Update.exe file is located and name the .MSI file to be created. Please not that the MSI file does not actually exist, WinInstall LE will create the package file, then click Next.
10.)Select the Drive Letter that Veritas Discover will store its temp files C: is the default, then click Next.
11.)Add the Drive Letter that you will be installing the update to for Discovery to scan for the changes to the Operating System, then click Next.
12.)Accept the defaults for the file extension changes and click Next. Veritas Discover will then do a “pre-scan” of the workstation and take a snapshot before the hot fix/rollup patch is installed.
13.)Once the pre-scan has completed run the Update.exe file from the deployment share and install the hot fix/rollup patch, upon completion of the installation DO NOT REBOOT.
14.)Re-run the Veritas Discovery and choose the After Snapshot option, let WinInstall scan for the updates that were made by the installation. Once the After Snapshot has run it will create the .MSI package file in the share that you indicated earlier.
Creating the GPO to deploy the update:
1.) Start the Active Directory Users and Computers Utility.
2.) Select the Organizational Unit you will apply the GPO to (preferably a test OU), and right click the OU and go to properties.
3.) Select the Group Policy tab, and click the New button to create a new Group Policy.
4.) Name the policy according to the Departmental ADS naming convention strategy. (IE: IN-UITS-W2KSRPUpdate), then click Edit to modify the policy settings.
5.) Expand the Computer Configuration Settings, then expand Administrative Templates, then System, then Group Policy. Double Click on the User Group Policy Loop Back Processing mode, set the policy for Enable, then select the Merge setting.
6.) Expand the User Configuration Settings, then expand Software Settings, then click on Software Installation. Right click on Software Installation and Choose New -> Package.
7.) In the Open Dialogue box, select the UNC path share to the .MSI file you created earlier and select the MSI package file then click Open.
8.) Select Assigned then click OK.
9.) Right Click on the newly created Software Installation GPO and select properties.
10.)Click the Deployment tab, and verify that Assigned is selected and that Auto install this application by file extension activation is checked. Then click ok.
11.)Move a test workstation that does not have the update into the OU that the GPO is applied to and restart then logon to ADS on the workstation the GPO should apply then. Installation can be verified by going to the event viewer and checking the Application Logs.,