@oxide54 - I'm talking about me doing this manually on each machine - I just wanted to check the thought process that a fully Windows Updated machine == to a fully patched machine and that there is no need to check to see if individual patches have been installed.
And I did think I didn't need to agree that I needed av as well :)
My basic driving force on this one is that either the 'f*cker can spotaneously re-combust on its own and therefore I'm doomed
It can't do that then I haven't cleaned and the machines sufficiently and I need shooting
They is another mode of re-infection involving another sort of f*cker of the person variety that doesn't understand what is going to happen to them when I find them! :)
At the moment we've only been running with the classroom teacher machines and 6 laptops and the library computer - all others have had their network cables and mains leads removed and the other (older) laptops are in a cupboard wired with 11KV on the handles. :)