A very nice fellow from across the pond wrote me to ask whether my Remote Windows Update HTA could be modified to run on a list of machines. I told him that it was on my list of things to do, but until that project gets completed that I could come up with something that could be remotely executed with PSExec.
I started with the file that is created automatically when Remote Windows Update is run with “install all security patches”. After hacking a bit the result was InstallCriticalUpdates.vbs. Note that there are a couple of places to edit this file which are plainly marked. You can set reboot behavior and whether to set the update server to update.microsoft.com.
One of the things that I noticed when looking at the file was that I was ignoring other critical and Office updates. That is remedied here and will be ported back into the HTA.