(Cliffs: you've had the power to do this yourselves all along)
Anyway, this really sucks. Updating computers with XP will be much more of a challenge from now on. It would be nice if MS made it easier to apply several patches at once, without having to reboot 48 times.
They did, actually. From WinXP SP1 onwards, qchain-type functionality is built in. You should be able to run all the patches you like.
Maybe MS will see that this product was being developed for a legitimate reason and will want to help out the nerds of the world.
Qchain was initially released for WinNT 4.0, so I think they already saw about 10 years ago. I used to maintain a fleet of Win2000 computers and would use Qchain at the end of a very large stack of post-SP4 patches and stuff (I didn't have an AD domain or SUS/WSUS would've taken care of this beautifully in-house, of course). Worked fine.
Example for a fresh Win2000 SP4 box with IE5 and WMP9 installed (not current anymore):
js56nen.exe /q
msjavwu.exe /q
832483.exe /Q
823353.exe /Q
msxml3.msi
WindowsInstaller31.exe /quiet /norestart /overwriteoem /nobackup
dotnetfx.exe /Q
dotnet11SP1.exe /Q
dotnet11SP1hotfix.exe /Q
dotnet2.0.exe
dotnet2_patch1.exe
dotnet2_patch2.exe
Windows2000_Update_Rollup_1.exe /quiet /norestart /overwriteoem /nobackup
894320.exe /quiet /norestart /overwriteoem /nobackup
896358.exe /quiet /norestart /overwriteoem /nobackup
896422.exe /quiet /norestart /overwriteoem /nobackup
890046.exe /quiet /norestart /overwriteoem /nobackup
901214.exe /quiet /norestart /overwriteoem /nobackup
896727.exe /quiet /norestart /overwriteoem /nobackup
893756.exe /quiet /norestart /overwriteoem /nobackup
896423.exe /quiet /norestart /overwriteoem /nobackup
899587.exe /quiet /norestart /overwriteoem /nobackup
899588.exe /quiet /norestart /overwriteoem /nobackup
896424.EXE /quiet /norestart /overwriteoem /nobackup
899589.EXE /quiet /norestart /overwriteoem /nobackup
900725.EXE /quiet /norestart /overwriteoem /nobackup
901017.EXE /quiet /norestart /overwriteoem /nobackup
905414.EXE /quiet /norestart /overwriteoem /nobackup
905749.EXE /quiet /norestart /overwriteoem /nobackup
908519.EXE /quiet /norestart /overwriteoem /nobackup
908531.EXE /quiet /norestart /overwriteoem /nobackup
911280.EXE /quiet /norestart /overwriteoem /nobackup
911564.exe /quiet /norestart /overwriteoem /nobackup
912919.EXE /quiet /norestart /overwriteoem /nobackup
913580.EXE /quiet /norestart /overwriteoem /nobackup
914388.EXE /quiet /norestart /overwriteoem /nobackup
914389.EXE /quiet /norestart /overwriteoem /nobackup
917008.EXE /quiet /norestart /overwriteoem /nobackup
917422.EXE /quiet /norestart /overwriteoem /nobackup
917734.exe /quiet /norestart /overwriteoem /nobackup
917736.EXE /quiet /norestart /overwriteoem /nobackup
917953.EXE /quiet /norestart /overwriteoem /nobackup
920213.EXE /quiet /norestart /overwriteoem /nobackup
920670.EXE /quiet /norestart /overwriteoem /nobackup
920683.EXE /quiet /norestart /overwriteoem /nobackup
920685.EXE /quiet /norestart /overwriteoem /nobackup
920958.EXE /quiet /norestart /overwriteoem /nobackup
921398.EXE /quiet /norestart /overwriteoem /nobackup
922616.EXE /quiet /norestart /overwriteoem /nobackup
923191.EXE /quiet /norestart /overwriteoem /nobackup
923414.EXE /quiet /norestart /overwriteoem /nobackup
923980.EXE /quiet /norestart /overwriteoem /nobackup
924191.EXE /quiet /norestart /overwriteoem /nobackup
924270.EXE /quiet /norestart /overwriteoem /nobackup
IE6.0sp1-922760.exe /quiet /norestart /overwriteoem /nobackup
MDAC28.exe /quiet /norestart /overwriteoem /nobackup
MDAC281.exe /quiet /norestart /overwriteoem /nobackup
MDAC271.exe /quiet /norestart /overwriteoem /nobackup
MDAC253.exe /quiet /norestart /overwriteoem /nobackup
885492.exe /quiet /norestart /o /n
904706.exe /quiet /norestart /overwriteoem /nobackup
839643.exe /quiet /norestart /o /n
905495.exe /quiet /norestart /overwriteoem /nobackup
925486.exe /quiet /norestart /overwriteoem /nobackup
911567.exe /quiet /norestart /overwriteoem /nobackup
917344.exe /Q
MSRT.exe /F:Y /Q
MBSA121.msi /quiet
qchain.exe
Also, I guess that it would also be nice if the autopatcher guy could roll up the freeware "must-installs," like Flash, Shockwave, a PDF reader, Java, etc, as well as the various tweaks.
You might be interested in
this utility for non-commercial uses. Or simply build a batchfile that runs the installers (see the example in italics above). Personally, I don't consider Shockwave or Java "must-installs," more like superfluous attack surfaces, but whatever.
In any case, at least I have autopatcher through August 2007. That will give me a good running start when building XP machines from the ground up.
You can maintain your own stash of WinXP patches. It's very simple to do; just use a fresh WinXP SP2 installation as "bait" and run
Microsoft Baseline Security Analyzer on it after installing IE7 and WMP11 (if desired). Baseline Security Analyzer gives you a list of necessary patches, with individual patch download links. Collect the patches, run them using a batchfile (without reboots), and there you go. Every month, go get the latest ones
from here, and add them to your collection. Tada, now you're the AutoPatcher dude
If you take the time to run them with the /? switch once, you can grab the command-line options to run them in silent/unattended mode to save you hassle over the long run. The example batchfile above shows how that would look.