Q:

Best way to push out a hotfix

Possible Duplicate:
How do I deploy MS hotfix KB959628 exe/msp via a gpo easily? 

We have a hotfix that we need to put onto our windows xp machines to get Single Sign on for web apps working. I cant add the hotfix to WSUS as it wont appear in the update catalogue.
What is the best way of pushing this out, we have no other 3rd party installers, am i going to have to create a GPO software policy to do it?
EDIT - the file is WindowsXP-KB953760-v2-x86-ENU.exe
Cheers
Luke

A:

Ok so firstly you will have to extract the contents of this hotfix, open CMD, locate your hotfix, and type the following:
WindowsXP-KB953760-v2-x86-ENU.exe /t:C:\<target_dir>\ /c

This will have extracted several files, including an MSP file.
You could then build a script based around this MSP file, create a script called "KB953760.bat", then host the file on your domain controller "DC1" in a share called "Patches" (replace these details with something more fitting to your network). The contents of the .bat file should be something along the lines of:
%windir%\system32\msiexec.exe /p \\DC1\patches\KB953760-v2-x86-ENU.msp /qn

The only issue with this script is that it will attempt to run it every time, you need some way for it to check if it is installed prior to grabbing the patch. I will see if I can refine it a bit but this should get you started at least.
Now you have your script you can make a GPO and include this script in the computer configuration section.

