Home > Security Tips > Tech Tips > Two ways to update MS Office for security
Security Tips:
EMAIL THIS
 TIPS & NEWSLETTERS TOPICS 

TECH TIPS

Two ways to update MS Office for security


Tom Lancaster
01.06.2004
Rating: --- (out of 5)


Digg This!    StumbleUpon Toolbar StumbleUpon    Bookmark with Delicious Del.icio.us   


Windows itself gets plenty of attention when it comes to stressing the importance of security updates, patches and maintenance; but sometimes Windows applications don't get all the attention (or respect) that they deserve. Nevertheless, packages like Microsoft Office need regular checks to see if they're current and up-to-date, just like the operating system does.

Today, there are at least two ways to check on the concurrency of specific Office installations:

  • From the target machine, you can access Microsoft Office Update (or start from your built-in Windows Update menu entry on the Start menu, and select Office Update from the menu bar at the top of the resulting window). Once you check there, click the Check for Update link to launch the update checker.
  • Microsoft also offers an Office Inventory Update Tool that you can use to check Office update status on one or more machines across a network (provided they can access a server share when network access is desired).

If you've got only a small number of machines to check, and it's not too inconvenient to access each machine, the MS Office Update tool works fine. But if you've got numerous machines to check, or you can't easily sit down in front of those machines, you may find the Office Inventory Update Tool a bit more convenient and helpful.

Both tools do the same thing, but deliver their results in different forms. The Office Update tool provides a nice, selectable checklist that users can easily drive to update individual systems (warning: have the install CD for the Office version in use available, or a pointer to a shared directory where those files are available, along with the corresponding Data1.msi file that the installer uses during the update process). The Office Inventory Update Tool reads a catalog of current and expired patches, fixes and service packs to determine what's current and what needs updating as it scans office packages and files on the machines where the inventory.exe program is run.

Interestingly, the Office Inventory Update Tool reads XML data to build its catalog and perform its analysis, and writes an XML output file that you can then open in a Web browser (or parse to build a batch file to drive the update process, since Microsoft's kind enough to include complete URLs for patch downloads in the results file it creates for you). Also, the tool can output CSV or TSV text files for easy import into various management consoles, and also produces files compatible with the Microsoft Baseline Security Analyzer (MBSA) and Microsoft's Software Update Services (SUS) component in Systems Management Server (SMS).

The details on the two command line programs involved—inventory.exe, which collects the data, and convert.exe, which converts it into the format of your choice (XML by default) -- are available on the Office Inventory Update Tool page. Try it out!


Thomas Alexander Lancaster IV is a consultant and author with over 10 years experience in the networking industry, focused on Internet infrastructure.


Rate this Tip
To rate tips, you must be a member of SearchSecurity.com.
Register now to start rating these tips. Log in if you are already a member.




BROWSE BY TAG
Tech Tips,   VIEW ALL TAGS

Digg This!    StumbleUpon Toolbar StumbleUpon    Bookmark with Delicious Del.icio.us   



RELATED CONTENT
Tech Tips
Video: The foundation of an email security strategy
The 5 A's of functional SAN security
Effective storage security policies
Smart options for safeguarding stored data
Outfox SOX: How to make regulations work for you
Roberta Bragg's 10 Windows hardening tips in 10 minutes
Using free network intrusion detection and prevention tools to stop hacks
Hacker techniques and exploits: Prevent system fingerprinting, probing
How to stop hacker theft: Employee awareness, risk assessment policies
Information Security Decisions Fall 2004: Speaker presentations

RELATED RESOURCES
2020software.com, trial software downloads for accounting software, ERP software, CRM software and business software systems
Search Bitpipe.com for the latest white papers and business webcasts
Whatis.com, the online computer dictionary

DISCLAIMER: Our Tips Exchange is a forum for you to share technical advice and expertise with your peers and to learn from other enterprise IT professionals. TechTarget provides the infrastructure to facilitate this sharing of information. However, we cannot guarantee the accuracy or validity of the material submitted. You agree that your use of the Ask The Expert services and your reliance on any questions, answers, information or other materials received through this Web site is at your own risk.



Research Solutions for Network Security, Access Control and Security Threats
TechTarget Security Media
Information Security View this month\\'s issue and subscribe today.
Information Security Decisions Apply online for free conference admission.
SearchSecurity.com
HomeNewsMagazineMultimediaWhite PapersLearningAdviceTopicsEventsAbout Us

About Us  |  Contact Us  |  For Advertisers  |  For Business Partners  |  Site Index  |  RSS
TechTarget provides technology professionals with the information they need to perform their jobs - from developing strategy, to making cost-effective purchase decisions and managing their organizations' technology projects - with its network of technology-specific websites, events and online magazines.

TechTarget Corporate Web Site  |  Media Kits  |  Site Map




All Rights Reserved, Copyright 2003 - 2009, TechTarget | Read our Privacy Policy
  TechTarget - The IT Media ROI Experts