The deployment of MS Office patches requires some special handling. Some of the patches do not contain complete files but only the the differences required to modify the original file with the patched code. For these Office patches to be installed, they require access to the original Office installation media such as : the original Office CD or Office Administrative Installation Point (AIP).
MS Office patches can be deployed in two different ways :
By choosing this option, you can directly deploy patches to the systems that have MS Office products installed and require patching.
Specify path to original Office installation CD
In order to install individual 'binary' or 'client' patches (that contain only the differences between the original file and the updated file), it is imperative that you provide a UNC path to the original Office installation CD used to install a specific version of Office. For example “\\winserver2\office\”.
Click the icon to alter the CD path or the credentials that are required to remotely access this UNC location. Ensure that the Security Manager Plus server is able to access the original installation media using the credentials supplied here, for Office patches to be deployed without any failures.
Note : The Office CD paths for each version of Office installed in your network, should be configured as a prerequisite from the Admin tab --> Configure --> MS Office Media Location.
Deploy full-file patches when possible
A 'full-file' patch is a complete installable which contains entire copies of updated files, and is usually much larger files than the 'binary' or 'client' patches.
If this option is checked, wherever applicable, full-file Office patches will be downloaded from the Microsoft site and will be applied to the systems requiring the patch. If left unchecked, only the client or binary patches will be downloaded and deployed with the help of the installation CD.
Note : Full-file patches are less likely to require access to the original installation media.
What is an AIP ?
An AIP is nothing but an Office Administrative Install Point, which is a system that has an Office version installed and acts as a central source to synchronize the Office installations in other systems with the latest updates.
In order to achieve the synchronization, you will have to first create an AIP with a particular Office version, and then update the Office installations on target systems from this location. Ensure that the latest patches are installed on the AIP and then configure to update the remote Office installations from this AIP. This update process means re-installing all of Office on each system - everything on the AIP will get copied to the remote system. In other words, the AIP is nothing but a shared network resource of the necessary files, with special setup commands.
Refer to documents from the Microsoft site on how to setup an AIP and to install patches in the AIP.
Configuring the synchronization
In order to patch a particular version of an Office installation, you need provide the full UNC path to Office AIP MSI file. For example “\\winserverAIP\office\data.msi”.
Click the icon to alter the AIP path or the credentials that are required to remotely access this UNC location. Ensure that the Security Manager Plus server is able to access the AIP using the credentials supplied here, for Office patches to be deployed without any failures.
Note : The AIP paths for each version of Office installed in your network, should be configured as a prerequisite from the Admin tab --> Configure --> MS Office Media Location.