This is a quick tips that I have done to deploy an security update to all workstations in my network. Below shows the basic step to deploy MS17-101.msu to Windows 8.1… The reader might need to download the *.MSU file that consists with your client’s OS.
Step 1: Create a computer list: “C:\ms170-101\pclist.txt”
DESKTOP-001
DESKTOP-002
LAPTOP-001
LAPTOP-002
Step 2: Create a cmd/batch file: “\\filesvr\softwares\ms17-101.cmd”
sc config wuauserv start=auto
net start wuauserv
wusa.exe \\filesvr\softwares\windows8.1-kb4012216-x64_cd5e0a62e602176f0078778548796e2d47cfa15b.msu /quiet /warnrestart:1200
net stop wuauserv
sc config wuauserv start=disabled
Step 3: Download hotfix:
“\\filesvr\softwares\windows8.1-kb4012216-x64_cd5e0a62e602176f0078778548796e2d47cfa15b.msu”
Step 4: Run PSEXEC.EXE
PsExec.exe @C:\ms170-101\pclist.txt -u “username” -p “P@ssW0rd” -c -f -h \\filesvr\softwares\ms17-101.cmd
Step 5: Run update for Microsoft Defender
PsExec.exe @C:\ms170-101\pclist.txt -u “username” -p “P@ssW0rd” -c -f -h “%ProgramFiles%\Windows Defender\MpCmdRun.exe” -SignatureUpdate
