Deployment Template: Office Tab

Office patches are handled differently from other patches.  Many Office patches require access to the original installation media.  This is because the patches do not contain complete files. Rather, the patch represents only the differences required to modify the original file with the patched code.


Synchronize clients with a patched Administrative Office Installation Point

Administrators can create an Office Administrative Install Point (AIP), and then install Office on client machines from this location.  Hotfixes can then be installed to the AIP, and the remote client machines can then be told to 'update' their installations from the AIP.  The update process really means re-installing all of Office on each machine— everything on the AIP will then get copied down to the remote machine.  The install point is technically nothing more than a network share of the requisite files, with special setup commands.

If you specify an AIP for Office patches, then when you choose to install any Office patches using this deployment template the machine being patched will synchronize with the specified Office AIP.

Push patches to each machine

Alternatively, you can choose to directly deploy patches to the remote Office clients.

Push full-file patches when possible

For many Office patches, Microsoft provides two different patch files. A full-file patch contains entire copies of updated files, while binary or client patches contain only the differences between the original file and the updated file. The full-file patches are generally much larger files than the binary patches. The full-file patches, however, are less likely to require access to the original media. Shavlik Protect allows you to choose which type of patch to deploy when both types are available.

Note: Only full-file patches are supported by Shavlik Protect Agent. Binary Office patches cannot be deployed by Shavlik Protect Agent.

Original Media Locations and Installation Point Locations

For each version of Office that you intend to patch, you need to provide the location of the Original Office installation media to push individual patches, or the location of the appropriate Administrative Installation Point (AIP) if synchronizing with a network Installation Point. To specify a path, double-click on an Office version in the list, or select a version from the list and click Edit.

If you need to specify the Original Media path for pushing Office patches to machines, the path should be the full path name of the folder that contains the original media image. If you are specifying the location of an Administrative Installation Point, type the full path and file name of the .msi file (for example: \\install\office11aip\pro11.msi). After defining the path name, specify the credential that the job on the target machine can use to access the share that you specified. If you need to define a new credential, see Defining Credentials.