Hi,
 I am facing challenges where my most of the desktops and laptops are vulnerable for KB958644 patch missing.Due to this my networks are vulneranle for conficker.
I am patching and cleaning the machine manually.
Now i am looking for the solution in such way that when user login to domain it should crossverfiy the KB958644 patch missing status through net user logon script and deploy the patch if the same is missing.
Kindly suggest any script and runas script to execute the same without password prrompting and in hidden manner.
Help me to recover from situation.
Thanks in advance

I think you are approaching this from the wrong angle.   I would sse MBSA to scan all workstation from a single machine for missing patches.   

http://technet.microsoft.com/en-us/security/cc184923.aspx

I already commented on your other post regarding similar concepts.  If you insist on using a script, use a Startup (not Logon) script configured through GPOs to detect the missing patch.  If you need to write the results to a central location somewhere on the Network, log your results to a temporary directory on each PC.   Then configure a separate Logon script to pickup the results and output them to a Network Share.   The Startup script will run under the SYSTEM account when the machine starts up.   The Logon script will run under a User's account (during logon) and will have access to network shares.   

You can also use some VBScript to send keys to the RunAs command.   There are plenty of google hits for this.   An example of such code is below:


It's not good idea to use the code above since it stores your password.   

You can also use the Sysinternals tools PSEXEC which will accept a password as a parameter.  Again, it's not a good idea passing a password like this to a script.

http://live.sysinternals.com/

There are a number of tools out there that serve as RunAs replacements.   Some will allow for encryption.

All of the above is much more work than using a free tool like MBSA.   

Have you looked at WSUS?

http://technet.microsoft.com/en-us/wsus/default.aspx

"Microsoft Windows Server Update Services (WSUS) enables information technology administrators to deploy the latest Microsoft product updates to computers running the Windows operating system. By using WSUS, administrators can fully manage the distribution of updates that are released through Microsoft Update to computers in their network."

Jimbob

Here is some nice command line kung fu you can use to check a computer.
http://blog.commandlinekungfu.com/2009/03/episode-16-got-that-patch.html

If your computers don't have the patch form October it sounds like there is a more systematic problem than missing one patch. I would highly suggest creating a patch management procedure and spending some money and time on something to deploy the patches.