This VBScript program can be used to deploy Microsoft Security patches to computers on your network. This program is based on Microsoft Knowledge Base Article 827227, "How to use a Visual Basic Script to install the 824146 (MS03-039) or 823980 (MS03-026) Security Patch on Remote Host Computers", found at the following link:;en-us;827227

To run this script you must have administrative permissions on the remote computers. In addition, WMI (Windows Management Instrumentation) must be installed. Also, DCOM (the Distributed Component Object Model) must not be disabled. The remote computers should be joined to the domain.

The program reads a list of remote machine IP address or NetBIOS names. The program connects to each computer in turn, maps a drive letter to the C$ share, determines the operating system, copies the patch executable file appropriate for the operating system, executes the patch installation program, waits for the installation to complete, deletes the patch executable file on the remote computer, and removes the drive mapping.

The program prompts for the name and path of the text file of computer IP addresses or NetBIOS names. This file can also be specified as a parameter when the program is run. The program then prompts for the patch installation executable file for Windows 2000 clients. If none of the computers are Windows 2000 clients, you can enter a blank string. In the same manner, the program also prompts for the appropriate executable file for Windows XP clients and Windows Server 2003. Next, the program prompts for the name that the executable file should have on the clients and the command line that will initiate the patch installation on the client.

The program writes a log file in the current folder called Patch.log. The log file documents all steps taken by the program.

Because the program prompts for all patch executable files, it can be used to install any security patches on the supported clients. Other modifications made to the program in KB article 827277 include converting to standard syntax and nomenclature, explicitly declaring all variables, and restoring normal error handling except where required.

PatchInstall.txt <<-- Click here to view or download the program