• Announcements

    • xper

      MSFN Sponsorship and AdBlockers!   07/10/2016

      Dear members, MSFN is made available via subscriptions, donations and advertising revenue. The use of ad-blocking software hurts the site. Please disable ad-blocking software or set an exception for MSFN. Alternatively, become a site sponsor and ads will be disabled automatically and by subscribing you get other sponsor benefits.
tommyp

Windows Updates

776 posts in this topic

great! thanks for the clarification Mim0 ... this list will truly help me get back on track. :D

btw, is mdac 2.8 not needed (& if so where does it reside)?

MDAC 2.8 is not needed as separate setup because MDAC 2.8 SP1 is included in SP2 and SP3 for XP (I think MDAC 2.8 SP2 is not available for XP). You can use this Component Checker to verífy what MDAC is installed (of course it should be 2.8 SP1).

Regards, Mimo

0

Share this post


Link to post
Share on other sites

Hey Mimo. You have Windows Genuine "Annoyance" Notifications listed under "Required to access Windows Update". It isn't needed (and concerning the controversal nature of this update, the less people accidentally install the update, the better).

0

Share this post


Link to post
Share on other sites

RE: Mimo's Windows XP Service Pack 3 update-list

Last Check: 2009, November, 11; Last Update: 2009, November, 11; HFSLIP 1.7.9 (final)

Table 2.

QUESTION: I downloaded file WindowsXP-KB968389-x86-ENU.exe to include in HFSLIP. I checked and found that it is currently installed on my computer; this was done by Windows Updates.

But, should I: 1) use WindowsXP_KB968389_x86.reg, or 2) should I modify it to match my current reg entries, or 3) don't include a .reg file at all? I am a home user.

WindowsXP_KB968389_x86.reg (linked to by MiMo)

Windows Registry Editor Version 5.00

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa]

"LmCompatibilityLevel"=dword:00000003

"SuppressExtendedProtection"=dword:00000000

My current registry entries:

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa]

"LmCompatibilityLevel"=dword:00000000

<the Suppress... entry is not listed>

Table 6. There is no download link for CDIMAGE.exe. I read that CDIMAGE is an internal Microsoft Tool. In any event, I was able to download CDIMAGE v2.52 from http://elitezoom.com/8-step-to-make-bootab...-vista-dvd.html

Table 11. MuCatalogWebControl.cab is listed twice. Once with description Microsoft Update Engine, and again with description Office Update Engine. Is this as intended?

Thank you very much for all of your hard work! I think you did an amazing job of organizing and linking all of these updates. I really appreciate it. I'm pretty technical, but figuring out these updates and what replaces what is beyond me. I've been using HFSLIP for several years now to use on family/friend installs. I love HFSLIP.

Lilla

Edited by Lilla
0

Share this post


Link to post
Share on other sites
Table 2.

QUESTION: I downloaded file WindowsXP-KB968389-x86-ENU.exe to include in HFSLIP. I checked and found that it is currently installed on my computer; this was done by Windows Updates.

But, should I: 1) use WindowsXP_KB968389_x86.reg, or 2) should I modify it to match my current reg entries, or 3) don't include a .reg file at all? I am a home user.

I don't no :) I read the KB-article and think it cannot be wrong to have it activated. But I'm not sure if it's really necessary... And how to set the registry-entries? You find the info in the KB-article. I have a batch which I start manually after installation to set many registry-values for my personal needs. Sorry, that I can't give you a better hint.
Table 6. There is no download link for CDIMAGE.exe. I read that CDIMAGE is an internal Microsoft Tool. In any event, I was able to download CDIMAGE v2.52 from http://elitezoom.com/8-step-to-make-bootab...-vista-dvd.html
Cool! THX for the link!!! :)
Table 11. MuCatalogWebControl.cab is listed twice. Once with description Microsoft Update Engine, and again with description Office Update Engine. Is this as intended?
I took these lists from the Windows XP Service Pack 3 Hotfixes. I don't use these updates, I haven't verified them. Hopefully someone other can answer you.

Regards, Mimo

(page-upload will follow this evening.)

Edited by Mim0
0

Share this post


Link to post
Share on other sites
QUESTION: I downloaded file WindowsXP-KB968389-x86-ENU.exe to include in HFSLIP. I checked and found that it is currently installed on my computer; this was done by Windows Updates.

But, should I: 1) use WindowsXP_KB968389_x86.reg, or 2) should I modify it to match my current reg entries, or 3) don't include a .reg file at all?

Since you don't have an entry for SuppressExtendedProtection then you need to apply the regfile if you want to enable Extended Protection for Authentication; your LmCompatibilityLevel should be 3 anyway from a security perspective, regardless of whether you enable Extended Protection.

This update looks like it was backported from Windows 7 and to me looks like it's worth installing as it's strongly recommended.

http://blogs.technet.com/msrc/pages/monthl...ugust-2009.aspx

Q: KB968389 was listed as a critical update from within Windows Server Update Service (WSUS). However, the article states that it is a "security update". Just wondering if there are any vulnerabilities if this update is NOT applied?

A: This is a non-security update which does not directly address any vulnerabilities. Not installing this update does not leave your system unprotected against a specific vulnerability. However, this update will allow applications to make use of Extended Protection for Authentication, which is a new functionality that offers more robust protection of authentication credentials. While there is no immediate difference after installing the update, we strongly recommend installing this update so third party applications and Windows components will be able to make use of this strengthened authentication technology. To learn more about Extended Protection for Authentication, we recommend reviewing Security Advisory 973811 for more information on this technology.

0

Share this post


Link to post
Share on other sites
QUESTION: I downloaded file WindowsXP-KB968389-x86-ENU.exe to include in HFSLIP. I checked and found that it is currently installed on my computer; this was done by Windows Updates.

But, should I: 1) use WindowsXP_KB968389_x86.reg, or 2) should I modify it to match my current reg entries, or 3) don't include a .reg file at all?

Since you don't have an entry for SuppressExtendedProtection then you need to apply the regfile if you want to enable Extended Protection for Authentication; your LmCompatibilityLevel should be 3 anyway from a security perspective, regardless of whether you enable Extended Protection.

This update looks like it was backported from Windows 7 and to me looks like it's worth installing as it's strongly recommended.

It sounds then like the .reg file is good for home users like me. So I will install the .reg along with the .exe

Thanks BUNCHES for the clarification.

Lilla

P.S.

MiMo. Consider, add a link to Muppet Hunter's post #280 (at link below) if you think it might help others.

http://www.msfn.org/board/index.php?s=&amp...st&p=894020

Edited by Lilla
0

Share this post


Link to post
Share on other sites

MiMo,

Here's an easy way to get boot.bin ...

1. Download boot.img from the link below...

http://unattended.msfn.org/unattended.xp/view/web/15

2. Then rename boot.img to boot.bin

FYI, CDIMAGE.exe at the link above is v2.47; the link I provided in my earlier post is for CDIMAGE 2.52

Thanks you,

Lilla

Edited by Lilla
0

Share this post


Link to post
Share on other sites

Tommyp.

Great job on your list for Win2000.

1. I believe your link for "WindowsUpdateAgent30-x86.exe" is wrong as it points to v7.2.6001.788. You can find v7.4.7600.226 here. I was prompted to "Update Windows" on my first visit to Microsoft Updates.

2. You have "Windows2000-KB937894-x86-ENU.EXE" in the deleted section but it shows as needed in Microsoft Updates.

3. You have "Windows2000-WindowsMedia-KB952069-x86-ENU.exe" in /HF but shouldn't it be put in HFSVCPACK_SW1.

4. You have "Windows2000-KB958470-x86-ENU.EXE" in /HF but shouldn't it be put in HFSVCPACK_SW1. I know you say not to use it but Microsoft Updates says it's needed.

Just my two cents for what it's worth. Thanks for all your hard work. It is appreciated.

M2GD

0

Share this post


Link to post
Share on other sites

A minor typo for the Windows 2000 Hotfix list:

"Windows2000-KB917537-x86-ENU.EXE" is listed correctly and its link works, but the corresponding value in the KB Article column has a typo. It reads "917357" where it should read "917537." The link in the KB Article column is a broken link since it has the same typo in it.

0

Share this post


Link to post
Share on other sites

New updates from MS:

- Cumulative time zone update KB976098

Hey Mimo. You have Windows Genuine "Annoyance" Notifications listed under "Required to access Windows Update". It isn't needed (and concerning the controversal nature of this update, the less people accidentally install the update, the better).
And I don't need and use anything of them (tables 10&11!) :) I just took these info from formerly update lists. WGA notifications are listet as 'optional'. Should I remove WGA Notifications ? Should I write a warning???
MiMo. Consider, add a link to Muppet Hunter's post #280 (at link below) if you think it might help others.

http://www.msfn.org/board/index.php?s=&amp...st&p=894020

Good idea. I think it will help other to decide to install it or not. THX to MH.
Here's an easy way to get boot.bin ...

1. Download boot.img from the link below...

http://unattended.msfn.org/unattended.xp/view/web/15

2. Then rename boot.img to boot.bin

FYI, CDIMAGE.exe at the link above is v2.47; the link I provided in my earlier post is for CDIMAGE 2.52

Thx for the links. Are you having experience with cdimage 2.47? I use 2.52 since years w/o problems.

Regards, Mimo

PS: I will update the list this evening!

Edited by Mim0
0

Share this post


Link to post
Share on other sites

Mimo, I see that you added links for boot.bin and cdimage.exe - nice! You are doing a great job of making your list easy to use.

Are you having experience with cdimage 2.47? I use 2.52 since years w/o problems.
MiMo, sorry but I have no experience with CDIMAGE 2.47 or 2.52. My only experience with image building is with IMGBURN.exe and I'm not an expert at using it but I'm learning.
Mimo’s Windows XP Service Pack 3 update-list

Last Check: 2009, November, 18 Last Update: 2009, November, 18 HFSLIP 1.7.9 (final)

2009-11-18 KB970653 removed (Time Zone Update Aug 2009) Optional Replaced by KB976098 (Time Zone Update Nov 2009)

Consider, possible minor mistakes?
  • "Replaced by KB976098 (Time Zone Update Nov 2009)" should say Dec 2009 instead of Nov 2009
  • on the update-list the date for KB976098 should be 2009-12 (it now reads 2009-08)
  • KB976098 was added, but KB970653 was not removed

MiMo. Consider, add a link to Muppet Hunter's post #280 (at link below) if you think it might help others.

http://www.msfn.org/board/index.php?s=&amp...st&p=894020

Good idea. I think it will help other to decide to install it or not. THX to MH.
Mimo, I don't see this on the update-list yet. Intentional?

You are doing a great job of taking something complex and making it easy! Thank you for all your hard work.

Lilla

Edited by Lilla
0

Share this post


Link to post
Share on other sites

I think it was too late last night. I upload the corrected list this evening. :blushing:

0

Share this post


Link to post
Share on other sites

hi mimo! while you're at it :), there could be a little mix up under table 2 about the article & the file:

2009-04 MS09-010: WordPad and Office Text Converters Critical KB960477 WindowsXP-KB923561-x86-ENU.exe HF
should both be included in HF? thanks!

edit: incidentally, http://support.microsoft.com/kb/960477 leads to http://www.microsoft.com/technet/security/...n/MS09-010.mspx, which offers download for KB923561. my apologies. ;)

typo on:

2009-08 Autoplay Optional KB971029 WindowsXP-KB971029-x86-DEU.exe HF
instead of WindowsXP-KB971029-x86-ENU.exe ... though it still leads to the ENU download ;) Edited by Kiki Burgh
0

Share this post


Link to post
Share on other sites
Tommyp.

Great job on your list for Win2000.

1. I believe your link for "WindowsUpdateAgent30-x86.exe" is wrong as it points to v7.2.6001.788. You can find v7.4.7600.226 here. I was prompted to "Update Windows" on my first visit to Microsoft Updates.

2. You have "Windows2000-KB937894-x86-ENU.EXE" in the deleted section but it shows as needed in Microsoft Updates.

3. You have "Windows2000-WindowsMedia-KB952069-x86-ENU.exe" in /HF but shouldn't it be put in HFSVCPACK_SW1.

4. You have "Windows2000-KB958470-x86-ENU.EXE" in /HF but shouldn't it be put in HFSVCPACK_SW1. I know you say not to use it but Microsoft Updates says it's needed.

Just my two cents for what it's worth. Thanks for all your hard work. It is appreciated.

M2GD

Thanks for the inputs M2GD. Yes, the item you bring up in #4 should probably go into sw1. I haven't tested all scenerios with item #3. It depends on what WMP version you're slipstreaming and what winnt.sif switch you have. It seems to make a difference. Are you saying that if 952069 is in HF that it does not slipstream properly? What version of WMP are you using?

Also, according to my findings, 937894 was replaced by 951071 which was further replaced by 971032. All the KB articles say that anyway. Is this a msft error?

Edited by tommyp
0

Share this post


Link to post
Share on other sites
edit: incidentally, http://support.microsoft.com/kb/960477 leads to http://www.microsoft.com/technet/security/...n/MS09-010.mspx, which offers download for KB923561. my apologies. ;)
When several components are affected, the KB-Numbers of the downloads differs from the (main-)KB-article.
instead of WindowsXP-KB971029-x86-ENU.exe ... though it still leads to the ENU download ;)
Your hints are always very welcome! :)

Regards, Mimo

0

Share this post


Link to post
Share on other sites

your welcome Mim0!

btw, it could be worth a look ... just like in your installation (under table 9), i have a hotfix/update that appears in add/remove programs automatically installed via windows update:

WindowsXP-KB961118-x86-ENU (after installation of Microsoft .NET Framework 3.5 SP1)

going back to table 9, for your KB951847 entry, kindly see below for some info:

KB951847 is an ad-hoc update (variable size depending on components included) prompted via win/ms update to complete your own installed .NET set with the parts not installed of the following set (3.5 SP1 family):

2.0 SP2 + NDP20SP2-KB958481-x86.exe + 2.0 SP2 langpack (matching OS language)

+ 3.0 SP2 + NDP30SP2-KB958483-x86.exe + 3.0 SP2 langpack (matching OS language)

+ 3.5 SP1 + NDP35SP1-KB958484-x86.exe + 3.5 SP1 langpack (matching OS language)

So actually doesn't add anything novel.

i will try putting both KB961742-v3.exe & WindowsXP-KB968930-x86-ENG.exe (in table 3) ... as well as KB943729 (together with XMLLite (KB915865)) ... in HF (under table 7) & report back if it'd be a success or otherwise.

i have some other updates that could be worth a look (& possible inclusion ... or had been replaced &/or not needed anymore):

WindowsXP-KB906569-v2-x86-ENU

WindowsXP-KB953979-x86-ENU

WindowsXP-KB959252-v2-x86-ENU.exe

thanks!

0

Share this post


Link to post
Share on other sites
i have some other updates that could be worth a look (& possible inclusion ... or had been replaced &/or not needed anymore):

WindowsXP-KB906569-v2-x86-ENU

WindowsXP-KB953979-x86-ENU

WindowsXP-KB959252-v2-x86-ENU.exe

thanks!

WindowsXP-KB906569-v2-x86-ENU: It's for XP SP2. On my SP3-system w/o this update I have the "Tools-Tab". So I think it's included in SP3.

WindowsXP-KB953979-x86-ENU is a fix to have a proper installation of SP3 while an antivirus-program is running which can avoid writing/deleting registry entries. With HFSLIP the SP3 is already included so you will never install SP3 while a AntiVirus is running. (plz don't mix "installation of SP3" with "slipstreaming SP3" :) ).

WindowsXP-KB959252-v2-x86-ENU.exe is when MS08-061 is installed (Sec Upd for NET CLR). MS08-061 is not slipstreamed. What is correct. Should MS08-061 & WindowsXP-KB959252-v2-x86-ENU.exe be included in the table 2? EDIT: I mixed 08-061 with 09-061. gloun found the correct reason why MS08-061 is not to integrate. :)

Mimo

Edited by Mim0
0

Share this post


Link to post
Share on other sites
WindowsXP-KB959252-v2-x86-ENU.exe is when MS08-061 is installed (Sec Upd for NET CLR). MS08-061 is not slipstreamed. What is correct. Should MS08-061 & WindowsXP-KB959252-v2-x86-ENU.exe be included in the table 2?

After having an agent ransacking my HF folder it seems like kb969947 MS09-065 should supersede MS08-061.

Succession line: MS09-065 replaces MS09-025 which replaces MS09-006 which replaces MS08-061.

In short, I don't think we need to slipstream MS08-61 and kb959252 since MS09-065 have the highest Win32k.sys version number (5.1.2600.5863).

On a different note Mim0, I was interested in having RDC7 in my slipstream so I tried placing KB969084 in HF folder but I only find mstsc.exe of version 6.0.6001.18000. I also tried by taking out KB956744 from HF folder but to no avail. Then I tried placing KB969084 in HFSVCPACK_SW1 which worked, resulting in mstsc.exe of version 6.1.7600.16385.

Could you please confirm that HF is the right folder to put KB969084? Any ideas why I keep failing in HF folder?

Edited by gluon
0

Share this post


Link to post
Share on other sites

969084 is very far from a critical update. If you read it, it allows someone else to remotely control your machine. If that is really what you want, and you want your OS to be open to intruders, you should put it into hfsvcpack_sw1. I can't wait for msft to dig themselves out of this gaping hole that they started digging.

0

Share this post


Link to post
Share on other sites

thanks Mim0! thanks too to gluon & tp ... i'll apply the adjustments in my run ;)

@ gluon, you mentioned you took out KB956744 & eventually settled for KB969084 in HFSVCPACK_SW1 (which seemed successful) ... did/didn't you put back KB956744 (& if you put it back, was it still to HF)? thanks!

Edited by Kiki Burgh
0

Share this post


Link to post
Share on other sites
It depends on what WMP version you're slipstreaming and what winnt.sif switch you have. It seems to make a difference. Are you saying that if 952069 is in HF that it does not slipstream properly? What version of WMP are you using?

I'm using WMP 9. I'm not sure what a"winnt.sif switch" is? It my case the 952069 did not work in HF.

Also, according to my findings, 937894 was replaced by 951071 which was further replaced by 971032. All the KB articles say that anyway. Is this a msft error?

It could be an error as Windows Updates said it was needed. Go Figure.

0

Share this post


Link to post
Share on other sites

M2 - can you do me a favor? Can you see what file versions of wmvcore.dll you have on your system? Also, can you post your KB952069.log file too? Thanks!

0

Share this post


Link to post
Share on other sites

@kiki I put back KB956744 in HF folder so I can pass MBSA scan.

0

Share this post


Link to post
Share on other sites

thanks gluon! i was actually wondering where MBSASetup-x86-EN.exe goes this time (i used to have it in HFSVCPACK ... this time i think it goes to HFSVCPACK_SW1 ... or perhaps not to slipstream any longer). mimo, i might have overlooked it but it doesn't seem to be included in the list. your thoughts? thanks!

0

Share this post


Link to post
Share on other sites

Kiki - MBSASetup is a program like MS Office, Nero or any other program. It is not a windows component.

0

Share this post


Link to post
Share on other sites

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!


Register a new account

Sign in

Already have an account? Sign in here.


Sign In Now

  • Recently Browsing   0 members

    No registered users viewing this page.