Patch Mgmt > Command Line

This function defines the command line switches used to silently install the specified patch. Occasionally a patch is released that does not utilize the normal switch settings or the patch database has not been updated with the new switches. If you find a patch can not successfully install with the current patch settings, you can change them with this function.

Locate patch switches by clicking on the Q Number link and reading through the knowledge base article.

Patches and service packs for all machines (both missing and installed) that match the Machine ID/Group ID filter are listed here. To keep the amount of displayed data to a reasonable amount, the patches that are displayed are dependent on the filter drop down list.

WARNING: Changes to the switches effect all administrators.

Note: Because changes to the command line switch settings effect all administrators that deploy this patch, only a Master Administrator can access this function.

Usually you want to load a patch without requiring any user interaction at all. The system support batch installs of multiple patches at the same time and reboots once at the end of all patch installations. Therefore, try to suppress automatic reboot wherever possible.

Typical patch file switch settings for silent, unattended installs without reboot:

/u /q /z - Typical switch settings to silently install most new Microsoft Operating System patches. This is the default used by the system for any new patch.

/quite /norestart - 2003 and very recent patches have begun using this command line.

/m /q /z - Typical switch settings used by older patches released for Windows NT4.

/q:a /r:n - Internet Explorer and other application switch settings to install in quiet administrator mode (q:a) and not automatically reset (r:n) when the install completes.

Other switch settings found with Microsoft patch installations include:

/?: Display the list of installation switches.

/u: Use Unattended mode.

/m: Unattended mode in older patches.

/f: Force other programs to quit when the computer shuts down.

/n: Do not back up files for removal.

/o: Overwrite OEM files without prompting.

/z: Do not restart when the installation is complete.

/q: Use Quiet mode (no user interaction).

/l: List the installed hotfixes.

/x: Extract the files without running Setup.

Microsoft Office command line switches

The only switch permitted for use with Microsoft Office related patches (Patch ID starts with "ODT-") is "/Q". If "/Q" is not specified, Microsoft Office 2000 switches will be automatically reset to blank (no switch), and Microsoft Office XP and 2003 switches will be automatically reset to " /INSTALL-AS-USER". Microsoft Office 2003 patches may also include the " /MSOCACHE" switch used to attempt a silent install if the MSOCache exists on the machine. These settings are enforced by the application.

NOTE: The " /MSOCACHE" switch only applies to Office 2003. When the patch database is updated, this switch is automatically added to all Office 2003 patches where an administrator has never modified a particular patch's command line switches. It is not automatically added to Office 2003 service packs. When this switch is used, the system determines if the MSOCache exists on the target machine. If the MSOCache does exist and this switch is used, the system will automatically use the run silently switch ("/Q") thereby relying on the MSOCache rather than requiring the actual installation media. If the MSOCache does not exist on the target machine, the existing switch will be used. If a patch installation fails that uses the "/MSOCACHE" switch, it typically means that the MSOCache could not be used by the patch. In this case, you must clear out all command line switches for this patch. This will result in the "/INSTALL-AS-USER" switch to be automatically added. Re-running the patch installation should now succeed. Unfortunately, this will require user intervention and also probably require the Office 2003 installation media.

Special server side command line switches

Special server side switches exist that may be used to direct the system to deploy a patch in a particular way.

/INSTALL-AS-USER - Tells the system to only install this patch as a user. Some (rare) patches do not install successfully unless someone is logged onto the machine. Add this switch if you find a patch is failing to install if no one is logged in. WARNING: This setting conflicts with the Skip update if user logged in setting found in Reboot Action. /INSTALL-AS-USER requires that a user be logged in to install.

/DELAY-AFTER=xxx - After the install wait xxx seconds before performing the reboot step. The reboot step starts after the install package completes. Some (rare)  installers spawn additional programs that must also complete before rebooting. Add this switch to give other processes time to complete after the main installer is done.