This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

all-in-one installer

Hello!

I would like to know if there is any chance I can slipstream all the patches and file encryption drivers into one msi?

We are installing safeguard with SCCM, and there is 5 different msi/msp we need to install (8.1 prerequisites/client/config/1901 rollup/encryption driver 28) and it takes a lot of cooperation from end-users (at least 2 restarts)

any way I can install these in a simpler way?

thanks

This thread was automatically locked due to age.

Parents

0 Greenie over 5 years ago

Hello,

I run a batch file on each client, depending on whether I want the disk encrypted or not. I've attached both txt files if they are any good to you?

When it comes to individual patches, I push them out via PDQ Deploy for the desktops. Laptops get brought in for regular maintenance and are secondary devices for a handful of users so it's not a major pain to deal with them individually.

Fullscreen SGN install - Disk Encryption-v3.txt Download

@echo off
setlocal
Rem Written by David Harper
Rem Moddified by Ollie Green
Rem Script to install Sophos SGN
Rem Version 2
Rem
Rem This script comes as is and has no warranty
Rem


set source="\\servername and path"
set target=C:\sophos\install
set preinstall=1_SGxClientPreinstall.msi
set x64install=2_SGNClient_x64.msi
set configinstall=3_SGNConfig.msi
set x64patch=Build28.msp
set hotfix=Hotfix1901x64.msp


Rem ------------------------- Do not change below this line ---------------------------------- Rem
cd /d C:
Rem figuring out the OS from the version number

for /f "tokens=4-5 delims=. " %%i in ('ver') do set VERSION=%%i.%%j
if "%version%" == "10.0" (
set floatos=Win10
set above7=True
)
if "%version%" == "6.3" (
set floatos=Win8.1
set above7=True
)
if "%version%" == "6.2" (
set floatos=Win8
set above7=True
)
if "%version%" == "6.1" (
set floatos=Win7
set above7=False
)
if "%version%" == "6.0" (
set floatos=WinVista
set above7=False
)
if "%version%" == "5.2" (
set floatos=WinXp
set above7="False"
)
if "%version%" == "5.1" (
set floatos=WinXp
set above7=False
)

rem Checking OS bitness
IF EXIST "%ProgramFiles(x86)%" (
set floatbit=64
echo 64
) ELSE (
set floatbit=32
echo 32
)

rem Exiting if WinXP or Vista
if "floatos"=="winxp" goto:eof
if "Floatos"=="winvista" goto:eof

Rem copying the files locally
mkdir %target%

copy %source%\%preinstall% %target% /Y
cd %target%

Rem Pre-Install can now go and run
Start /wait C:\windows\system32\msiexec.exe -i %preinstall% /qn

If "%above7%"=="True" (
If "%floatbit%"=="64" (
goto:install64-win8
))

If "%above7%"=="True" (
If "%floatbit%"=="32" (
goto:install32-win8
))

If "%above7%"=="False" (
If "%floatbit%"=="64" (
goto:install64-win7
))

If "%above7%"=="False" (
If "%floatbit%"=="32" (
goto:install32-win7
))

goto:eof

:Install64-Win7
rem 64 BIT 7
copy %source%\%x64install% %target% /Y
Start /wait C:\windows\system32\msiexec.exe -i %x64install% ADDLOCAL=Client,CredentialProvider,BaseEncryption,SectorBasedEncryption,SecureDataExchange,FileShare,CloudStorage OPALMODDE=2 /L* c:\sgnclient_%computername%.txt /qn /norestart
copy %source%\%hotfix% %target% /Y
Start /wait C:\windows\system32\msiexec.exe /update "%target%\Hotfix1901x64.msp" /qn /norestart
copy %source%\%x64patch% %target% /Y
Start /wait C:\windows\system32\msiexec.exe /update "%target%\Build28.msp" /qn /norestart
echo Win7x64
goto:register

:Install64-Win8
rem 64 WIN 8+
copy %source%\%x64install% %target% /Y
Start /wait C:\windows\system32\msiexec.exe -i %x64install% ADDLOCAL=Client,CredentialProvider,BitLockerSupport,SecureDataExchange,FileShare,CloudStorage /L* c:\sgnclient_%computername%.txt /qn /norestart
copy %source%\%hotfix% %target% /Y
Start /wait C:\windows\system32\msiexec.exe /update "%target%\Hotfix1901x64.msp" /qn /norestart
copy %source%\%x64patch% %target% /Y
Start /wait C:\windows\system32\msiexec.exe /update "%target%\Build28.msp" /qn /norestart
echo win8x64
goto:register

:Install32-Win7
rem 32 BIT 7
copy %source%\%x86install% %target%\%x86install% /Y
Start /wait C:\windows\system32\msiexec.exe -i %x86install% PATCH=%x86patch% ADDLOCAL=Client,CredentialProvider,BaseEncryption,SectorBasedEncryption,SecureDataExchange,FileShare,CloudStorage OPALMODDE=2 /L* c:\sgnclient_%computername%.txt /qn /norestart
copy %source%\%hotfix% %target% /Y
Start /wait C:\windows\system32\msiexec.exe /update "%target%\Hotfix1901x64.msp" /qn /norestart
copy %source%\%x64patch% %target% /Y
Start /wait C:\windows\system32\msiexec.exe /update "%target%\Build28x86.msp" /qn /norestart
echo win7x86
goto:register

:install32-win8
rem 32 WIN 8+
copy %source%\%x86install% %target% /Y
Start /wait C:\windows\system32\msiexec.exe -i %x86install% ADDLOCAL=Client,CredentialProvider,BitLockerSupport,SecureDataExchange,FileShare,CloudStorage /L* c:\sgnclient_%computername%.txt /qn /norestart

copy %source%\%hotfix% %target% /Y
Start /wait C:\windows\system32\msiexec.exe /update "%target%\Hotfix1901x64.msp" /qn /norestart
copy %source%\%x64patch% %target% /Y
Start /wait C:\windows\system32\msiexec.exe /update "%target%\Build28x86.msp" /qn /norestart
echo win8x86
goto:register

:Register
copy %source%\%configinstall% %target% /Y
Start /wait C:\windows\system32\msiexec.exe -i %configinstall% /qn /norestart

Rem Delete local Sophos folder
Rem RD /S /Q C:\Sophos

Rem Restart computer
shutdown.exe /r /t 00

:eof
endlocal

Fullscreen SGN install - NO Disk Encryption-v3.txt Download

@echo off
setlocal
Rem Written by David Harper
Rem Moddified by Ollie Green
Rem Script to install Sophos SGN
Rem Version 2
Rem
Rem This script comes as is and has no warranty
Rem

set source="\\servername and path"
set target=C:\sophos\install
set preinstall=1_SGxClientPreinstall.msi
set x64install=2_SGNClient_x64.msi
set configinstall=3_SGNConfig.msi
set x64patch=Build28.msp
set hotfix=Hotfix1901x64.msp

Rem ------------------------- Do not change below this line ---------------------------------- Rem
cd /d C:
Rem figuring out the OS from the version number

for /f "tokens=4-5 delims=. " %%i in ('ver') do set VERSION=%%i.%%j
if "%version%" == "10.0" (
set floatos=Win10
set above7=True
)
if "%version%" == "6.3" (
set floatos=Win8.1
set above7=True
)
if "%version%" == "6.2" (
set floatos=Win8
set above7=True
)
if "%version%" == "6.1" (
set floatos=Win7
set above7=False
)
if "%version%" == "6.0" (
set floatos=WinVista
set above7=False
)
if "%version%" == "5.2" (
set floatos=WinXp
set above7="False"
)
if "%version%" == "5.1" (
set floatos=WinXp
set above7=False
)

rem Checking OS bitness
IF EXIST "%ProgramFiles(x86)%" (
set floatbit=64
echo 64
) ELSE (
set floatbit=32
echo 32
)

rem Exiting if WinXP or Vista
if "floatos"=="winxp" goto:eof
if "Floatos"=="winvista" goto:eof

Rem copying the files locally
mkdir %target%

copy %source%\%preinstall% %target% /Y
cd %target%

Rem Pre-Install can now go and run
Start /wait C:\windows\system32\msiexec.exe -i %preinstall% /qn

If "%above7%"=="True" (
If "%floatbit%"=="64" (
goto:install64-win8
))

If "%above7%"=="True" (
If "%floatbit%"=="32" (
goto:install32-win8
))

If "%above7%"=="False" (
If "%floatbit%"=="64" (
goto:install64-win7
))

If "%above7%"=="False" (
If "%floatbit%"=="32" (
goto:install32-win7
))

goto:eof

:Install64-Win7
rem 64 BIT 7
copy %source%\%x64install% %target% /Y
Start /wait C:\windows\system32\msiexec.exe -i %x64install% ADDLOCAL=Client,CredentialProvider,SecureDataExchange,FileShare,CloudStorage /L* c:\sgnclient_%computername%.txt /qn /norestart
copy %source%\%hotfix% %target% /Y
Start /wait C:\windows\system32\msiexec.exe /update "%target%\Hotfix1901x64.msp" /qn /norestart
copy %source%\%x64patch% %target% /Y
Start /wait C:\windows\system32\msiexec.exe /update "%target%\Build28.msp" /qn /norestart
echo Win7x64
goto:register

:Install64-Win8
rem 64 WIN 8+
copy %source%\%x64install% %target% /Y
Start /wait C:\windows\system32\msiexec.exe -i %x64install% ADDLOCAL=Client,CredentialProvider,SecureDataExchange,FileShare,CloudStorage /L* c:\sgnclient_%computername%.txt /qn /norestart
copy %source%\%hotfix% %target% /Y
Start /wait C:\windows\system32\msiexec.exe /update "%target%\Hotfix1901x64.msp" /qn /norestart
copy %source%\%x64patch% %target% /Y
Start /wait C:\windows\system32\msiexec.exe /update "%target%\Build28.msp" /qn /norestart
echo win8x64
goto:register

:Install32-Win7
rem 32 BIT 7
copy %source%\%x86install% %target%\%x86install% /Y
Start /wait C:\windows\system32\msiexec.exe -i %x86install% ADDLOCAL=Client,CredentialProvider,SecureDataExchange,FileShare,CloudStorage /L* c:\sgnclient_%computername%.txt /qn /norestart
copy %source%\%hotfix% %target% /Y
Start /wait C:\windows\system32\msiexec.exe /update "%target%\Hotfix1901x64.msp" /qn /norestart
copy %source%\%x64patch% %target% /Y
Start /wait C:\windows\system32\msiexec.exe /update "%target%\Build28x86.msp" /qn /norestart
echo win7x86
goto:register

:install32-win8
rem 32 WIN 8+
copy %source%\%x86install% %target% /Y
Start /wait C:\windows\system32\msiexec.exe -i %x86install% ADDLOCAL=Client,CredentialProvider,SecureDataExchange,FileShare,CloudStorage /L* c:\sgnclient_%computername%.txt /qn /norestart
copy %source%\%hotfix% %target% /Y
Start /wait C:\windows\system32\msiexec.exe /update "%target%\Hotfix1901x64.msp" /qn /norestart
copy %source%\%x64patch% %target% /Y
Start /wait C:\windows\system32\msiexec.exe /update "%target%\Build28x86.msp" /qn /norestart
echo win8x86
goto:register

:Register
copy %source%\%configinstall% %target% /Y
Start /wait C:\windows\system32\msiexec.exe -i %configinstall% /qn /norestart

Rem Delete local Sophos folder
Rem RD /S /Q C:\Sophos

Rem Restart computer
shutdown.exe /r /t 00

:eof
endlocal

Reply

0 Greenie over 5 years ago

Hello,

I run a batch file on each client, depending on whether I want the disk encrypted or not. I've attached both txt files if they are any good to you?

Fullscreen SGN install - Disk Encryption-v3.txt Download

@echo off
setlocal
Rem Written by David Harper
Rem Moddified by Ollie Green
Rem Script to install Sophos SGN
Rem Version 2
Rem
Rem This script comes as is and has no warranty
Rem


set source="\\servername and path"
set target=C:\sophos\install
set preinstall=1_SGxClientPreinstall.msi
set x64install=2_SGNClient_x64.msi
set configinstall=3_SGNConfig.msi
set x64patch=Build28.msp
set hotfix=Hotfix1901x64.msp


Rem ------------------------- Do not change below this line ---------------------------------- Rem
cd /d C:
Rem figuring out the OS from the version number

for /f "tokens=4-5 delims=. " %%i in ('ver') do set VERSION=%%i.%%j
if "%version%" == "10.0" (
set floatos=Win10
set above7=True
)
if "%version%" == "6.3" (
set floatos=Win8.1
set above7=True
)
if "%version%" == "6.2" (
set floatos=Win8
set above7=True
)
if "%version%" == "6.1" (
set floatos=Win7
set above7=False
)
if "%version%" == "6.0" (
set floatos=WinVista
set above7=False
)
if "%version%" == "5.2" (
set floatos=WinXp
set above7="False"
)
if "%version%" == "5.1" (
set floatos=WinXp
set above7=False
)

rem Checking OS bitness
IF EXIST "%ProgramFiles(x86)%" (
set floatbit=64
echo 64
) ELSE (
set floatbit=32
echo 32
)

rem Exiting if WinXP or Vista
if "floatos"=="winxp" goto:eof
if "Floatos"=="winvista" goto:eof

Rem copying the files locally
mkdir %target%

copy %source%\%preinstall% %target% /Y
cd %target%

Rem Pre-Install can now go and run
Start /wait C:\windows\system32\msiexec.exe -i %preinstall% /qn

If "%above7%"=="True" (
If "%floatbit%"=="64" (
goto:install64-win8
))

If "%above7%"=="True" (
If "%floatbit%"=="32" (
goto:install32-win8
))

If "%above7%"=="False" (
If "%floatbit%"=="64" (
goto:install64-win7
))

If "%above7%"=="False" (
If "%floatbit%"=="32" (
goto:install32-win7
))

goto:eof

:Install64-Win7
rem 64 BIT 7
copy %source%\%x64install% %target% /Y
Start /wait C:\windows\system32\msiexec.exe -i %x64install% ADDLOCAL=Client,CredentialProvider,BaseEncryption,SectorBasedEncryption,SecureDataExchange,FileShare,CloudStorage OPALMODDE=2 /L* c:\sgnclient_%computername%.txt /qn /norestart
copy %source%\%hotfix% %target% /Y
Start /wait C:\windows\system32\msiexec.exe /update "%target%\Hotfix1901x64.msp" /qn /norestart
copy %source%\%x64patch% %target% /Y
Start /wait C:\windows\system32\msiexec.exe /update "%target%\Build28.msp" /qn /norestart
echo Win7x64
goto:register

:Install64-Win8
rem 64 WIN 8+
copy %source%\%x64install% %target% /Y
Start /wait C:\windows\system32\msiexec.exe -i %x64install% ADDLOCAL=Client,CredentialProvider,BitLockerSupport,SecureDataExchange,FileShare,CloudStorage /L* c:\sgnclient_%computername%.txt /qn /norestart
copy %source%\%hotfix% %target% /Y
Start /wait C:\windows\system32\msiexec.exe /update "%target%\Hotfix1901x64.msp" /qn /norestart
copy %source%\%x64patch% %target% /Y
Start /wait C:\windows\system32\msiexec.exe /update "%target%\Build28.msp" /qn /norestart
echo win8x64
goto:register

:Install32-Win7
rem 32 BIT 7
copy %source%\%x86install% %target%\%x86install% /Y
Start /wait C:\windows\system32\msiexec.exe -i %x86install% PATCH=%x86patch% ADDLOCAL=Client,CredentialProvider,BaseEncryption,SectorBasedEncryption,SecureDataExchange,FileShare,CloudStorage OPALMODDE=2 /L* c:\sgnclient_%computername%.txt /qn /norestart
copy %source%\%hotfix% %target% /Y
Start /wait C:\windows\system32\msiexec.exe /update "%target%\Hotfix1901x64.msp" /qn /norestart
copy %source%\%x64patch% %target% /Y
Start /wait C:\windows\system32\msiexec.exe /update "%target%\Build28x86.msp" /qn /norestart
echo win7x86
goto:register

:install32-win8
rem 32 WIN 8+
copy %source%\%x86install% %target% /Y
Start /wait C:\windows\system32\msiexec.exe -i %x86install% ADDLOCAL=Client,CredentialProvider,BitLockerSupport,SecureDataExchange,FileShare,CloudStorage /L* c:\sgnclient_%computername%.txt /qn /norestart

copy %source%\%hotfix% %target% /Y
Start /wait C:\windows\system32\msiexec.exe /update "%target%\Hotfix1901x64.msp" /qn /norestart
copy %source%\%x64patch% %target% /Y
Start /wait C:\windows\system32\msiexec.exe /update "%target%\Build28x86.msp" /qn /norestart
echo win8x86
goto:register

:Register
copy %source%\%configinstall% %target% /Y
Start /wait C:\windows\system32\msiexec.exe -i %configinstall% /qn /norestart

Rem Delete local Sophos folder
Rem RD /S /Q C:\Sophos

Rem Restart computer
shutdown.exe /r /t 00

:eof
endlocal

Fullscreen SGN install - NO Disk Encryption-v3.txt Download

@echo off
setlocal
Rem Written by David Harper
Rem Moddified by Ollie Green
Rem Script to install Sophos SGN
Rem Version 2
Rem
Rem This script comes as is and has no warranty
Rem

set source="\\servername and path"
set target=C:\sophos\install
set preinstall=1_SGxClientPreinstall.msi
set x64install=2_SGNClient_x64.msi
set configinstall=3_SGNConfig.msi
set x64patch=Build28.msp
set hotfix=Hotfix1901x64.msp

Rem ------------------------- Do not change below this line ---------------------------------- Rem
cd /d C:
Rem figuring out the OS from the version number

for /f "tokens=4-5 delims=. " %%i in ('ver') do set VERSION=%%i.%%j
if "%version%" == "10.0" (
set floatos=Win10
set above7=True
)
if "%version%" == "6.3" (
set floatos=Win8.1
set above7=True
)
if "%version%" == "6.2" (
set floatos=Win8
set above7=True
)
if "%version%" == "6.1" (
set floatos=Win7
set above7=False
)
if "%version%" == "6.0" (
set floatos=WinVista
set above7=False
)
if "%version%" == "5.2" (
set floatos=WinXp
set above7="False"
)
if "%version%" == "5.1" (
set floatos=WinXp
set above7=False
)

rem Checking OS bitness
IF EXIST "%ProgramFiles(x86)%" (
set floatbit=64
echo 64
) ELSE (
set floatbit=32
echo 32
)

rem Exiting if WinXP or Vista
if "floatos"=="winxp" goto:eof
if "Floatos"=="winvista" goto:eof

Rem copying the files locally
mkdir %target%

copy %source%\%preinstall% %target% /Y
cd %target%

Rem Pre-Install can now go and run
Start /wait C:\windows\system32\msiexec.exe -i %preinstall% /qn

If "%above7%"=="True" (
If "%floatbit%"=="64" (
goto:install64-win8
))

If "%above7%"=="True" (
If "%floatbit%"=="32" (
goto:install32-win8
))

If "%above7%"=="False" (
If "%floatbit%"=="64" (
goto:install64-win7
))

If "%above7%"=="False" (
If "%floatbit%"=="32" (
goto:install32-win7
))

goto:eof

:Install64-Win7
rem 64 BIT 7
copy %source%\%x64install% %target% /Y
Start /wait C:\windows\system32\msiexec.exe -i %x64install% ADDLOCAL=Client,CredentialProvider,SecureDataExchange,FileShare,CloudStorage /L* c:\sgnclient_%computername%.txt /qn /norestart
copy %source%\%hotfix% %target% /Y
Start /wait C:\windows\system32\msiexec.exe /update "%target%\Hotfix1901x64.msp" /qn /norestart
copy %source%\%x64patch% %target% /Y
Start /wait C:\windows\system32\msiexec.exe /update "%target%\Build28.msp" /qn /norestart
echo Win7x64
goto:register

:Install64-Win8
rem 64 WIN 8+
copy %source%\%x64install% %target% /Y
Start /wait C:\windows\system32\msiexec.exe -i %x64install% ADDLOCAL=Client,CredentialProvider,SecureDataExchange,FileShare,CloudStorage /L* c:\sgnclient_%computername%.txt /qn /norestart
copy %source%\%hotfix% %target% /Y
Start /wait C:\windows\system32\msiexec.exe /update "%target%\Hotfix1901x64.msp" /qn /norestart
copy %source%\%x64patch% %target% /Y
Start /wait C:\windows\system32\msiexec.exe /update "%target%\Build28.msp" /qn /norestart
echo win8x64
goto:register

:Install32-Win7
rem 32 BIT 7
copy %source%\%x86install% %target%\%x86install% /Y
Start /wait C:\windows\system32\msiexec.exe -i %x86install% ADDLOCAL=Client,CredentialProvider,SecureDataExchange,FileShare,CloudStorage /L* c:\sgnclient_%computername%.txt /qn /norestart
copy %source%\%hotfix% %target% /Y
Start /wait C:\windows\system32\msiexec.exe /update "%target%\Hotfix1901x64.msp" /qn /norestart
copy %source%\%x64patch% %target% /Y
Start /wait C:\windows\system32\msiexec.exe /update "%target%\Build28x86.msp" /qn /norestart
echo win7x86
goto:register

:install32-win8
rem 32 WIN 8+
copy %source%\%x86install% %target% /Y
Start /wait C:\windows\system32\msiexec.exe -i %x86install% ADDLOCAL=Client,CredentialProvider,SecureDataExchange,FileShare,CloudStorage /L* c:\sgnclient_%computername%.txt /qn /norestart
copy %source%\%hotfix% %target% /Y
Start /wait C:\windows\system32\msiexec.exe /update "%target%\Hotfix1901x64.msp" /qn /norestart
copy %source%\%x64patch% %target% /Y
Start /wait C:\windows\system32\msiexec.exe /update "%target%\Build28x86.msp" /qn /norestart
echo win8x86
goto:register

:Register
copy %source%\%configinstall% %target% /Y
Start /wait C:\windows\system32\msiexec.exe -i %configinstall% /qn /norestart

Rem Delete local Sophos folder
Rem RD /S /Q C:\Sophos

Rem Restart computer
shutdown.exe /r /t 00

:eof
endlocal

Children

0 KekesiV over 5 years ago in reply to Greenie

Thanks for the scripts, I'll try them! We manage more than 700 computers so regular manual maintenance is out of the question.
Cancel
Vote Up 0 Vote Down

Cancel