SafeGuard Enterprise - How to apply a patch to an administrative Installation or change a previously installed patch

Issue
How to apply a patch to an installation or change a previously installed patch.

Sophos product and version
SafeGuard Enterprise

Operating system
Windows Server 2000, 2003, 2008

What to do

To use Windows Installer which uses Group Policy (GPO) to distribute software with .msi files, do one of the following:

• To automatically apply the patch to a new or previous installation, use the following command:
  msiexec /p <.msp file and location> /a 
• To slipstream .msp files to an installation point, run through the installation wizard, which will create a silent install version of the original package.msi to
  <location> \newpackage.msi

To update a previous patch via Group Policy (GPO), perform the following steps:

1. Start the Active Directory Users and Computers snap-in. To do this, click Start, point to Administrative Tools, and then click Active Directory Users and Computers.
2. In the console tree, right-click your domain, and then click Properties.
3. Click the Group Policy tab, select the group policy object that you want, and then click Edit.
4. Under Computer Configuration, expand Software Settings.
5. Right-click Software installation, point to New, and then click Package.
6. In the Open dialog box, type the full Universal Naming Convention (UNC) path of the shared installer package that you want.
   Important: Do not use the Browse button to access the location. Make sure that you use the UNC path to the shared installer package.
7. Click Open.
8. Click Assigned, and then click OK. The package is listed in the right pane of the Group Policy window.
9. Close the Group Policy snap-in, click OK, and then quit the Active Directory Users and Computers snap-in.
10. When the client computer starts, the managed software package is automatically installed.

For more detailed information: refer to http://support.microsoft.com/kb/816102/en-us