From: Harry Johnston on
Gerry Hickman wrote:

>> I need stand-alone patches so I have to do it this way. It takes
>> perhaps an hour or two a month, maybe less. Not all that big a deal.
>
> I also need stand-alone patches, but when I pay tens of thousands to
> Microsoft every year, I don't see why I should waste time on their badly
> designed web pages that require WGA, the ActiveX version of which forces
> users to adopt bad security by having to log onto the internet as an
> Administrator.

I download the updates using Firefox and the stand-alone version of WGA, which
is only a minor inconvenience. Certainly I don't need admin rights. The only
real hassle is downloading Office updates because we support multiple versions
of Office which means I need to run the Office genuine advantage tool on
multiple computers. I've recently moved to using WSUS to deploy all Office
updates, even old ones, so I don't bother downloading them any more.

Regarding Windows - I seem to recall Microsoft produces an .ISO CD image for
download each month which contains all of that month's patches? Perhaps that
would be more convenient for you?

I'm not trying to defend WGA here; it's certainly a PITA. All I'm suggesting is
that as we're stuck with it it may be best to put in the extra work to get the
supported packages rather than hacking WUA.

Harry.
From: Gerry Hickman on
Hi Harry,

> I download the updates using Firefox and the stand-alone version of WGA,

Yup, that's what I'm using too. Mozilla browsers are faster, more
standards compliant; have better developer tools, and are more secure
than Microsoft's bungling Internet Explorer.

> which is only a minor inconvenience.

For me, it's a MAJOR inconvenience! How can I get all FullFile patches
downloaded automatically overnight?

> Certainly I don't need admin
> rights.

Not with the stand-alone tool, but if you want WGA to be
"semi-automatic" you have to enable the download and instantiation of
the ActiveX control which needs Admin rights.

> The only real hassle is downloading Office updates because we
> support multiple versions of Office which means I need to run the Office
> genuine advantage tool on multiple computers.

Exactly, this is even more stupid! They assume you're sitting in front
of the exact stand-alone computer on which you're about to install the
udpates!

> Regarding Windows - I seem to recall Microsoft produces an .ISO CD image
> for download each month which contains all of that month's patches?
> Perhaps that would be more convenient for you?

I don't know about this, but there are two major problems with it:

1. I need the patches right away, the day of release.

2. It would be messy to sync all the superseded udpates.

It's because of #2 I'm looking at creating an Auto Downloader. In my new
system it would simply check for "updates that are not already in the
cache". I could run it at midnight, and it will only download the new
stuff, security and non-security. I could install WSUS, but it's
overkill for what I want, and I think it relies on IIS. It's another
bloated mess to look after on all my networks, which I'd rather do without.

> I'm not trying to defend WGA here; it's certainly a PITA. All I'm
> suggesting is that as we're stuck with it it may be best to put in the
> extra work to get the supported packages rather than hacking WUA.

Yup, I need to think of something, that's for sure.

Thanks for the help.

--
Gerry Hickman (London UK)