[Updates]
* 2009/10/11: Items 10 and 12 resolved, solution added below.
* 2009/10/13: Item 07 obsolete. Other topics that changed during the last days (due to new hfslip versions available) will be updated in the post below soon.
* 2009/10/14: Item 11 solved, instructions added how to handle that. Now obsolete items 7, 10 and 12 greyed out.
[/Updates]
Hello all,
Answering myself... As announced above, I did some more tests with current hfslip and the mandatory security patches as well as several optional updates. The goal was to have MU/WU completely satisfied at the end (which I did not accomplish, read on for the details). Here are my findings, in the hope that they might be of help for some of you.
Good news first:
1) In general most updates get treated correctly. Even those who do not really contain files and are mostly designed to change registry settings are processed correctly. This includes the time zone updates (most recent one:
KB970653 (v3)) and the ActiveX killbits updates (most recent one:
KB973525, showing a "0 files" message during the hfslip run which is okay). So just include them in HF, nothing special to consider here.
Then there are, for the interested amongst you, some general notes on a few particular updates:
2) KB892130 did not pose a problem, including it in HF gave no complaint afterwards from MU/WU. The file contained ('legitcheckcontrol.dll' in version 1.7.69.2) is outdated so theoretically this update is not required, however for some reason it has be included...
3) 'legitcheckcontrol.cab' is not required in HFCABS. The version available
here is 1.9.9.1 whereas the most recent one is 1.9.40.0 (this comes with KB905474, see also below the section with problematic updates).
4) KB967715 (autorun correction) contains only an outdated file ('shell32.dll' version 6.0.2900.5622) which is replaced by
KB971029 ('shell32.dll' version 6.0.2900.5853), but it is still required as it sets an important registry setting for the autorun feature to be actually disabled. Thus omitting it from the HF folder results in an appropriate entry in MU/WU - just include both updates and everything is fine.
5) Renaming the file 'SmartCard_XP_x86.exe' of optional update
KB952013, available
here to 'WindowsXP-KB952013-x86-xxx.exe' is enough to make it work in HF.
6) On the contrary this does not hold true for file 'IMAPI_XP_SRV2003_x86.exe' of optional update
KB952011, also available
here. Renaming it to 'WindowsXP-KB952011-x86-xxx.exe' and putting it to HF has no effect: there is a "0 files" message during the hfslip run, and afterwards the three files 'cdrom.sys', 'imapi2.dll' and 'imapi2fs.dll' still all have version 5.1.2600.5593 (at least if
KB932716 (v2) is included which is the case for me).
So I put this update to HFSVCPACK_SW1 (there you can also store it with its non-standard original name). Now the following happens: 'imapi2.dll' and 'imapi2fs.dll' (directory 'system32\drivers') are updated to version 6.0.6001.18164, and 'cdrom.sys' is still the one mentioned above from KB932716. But in directory 'system32\dllcache' you'll find 'cdrom.sys' in the very old version 5.1.2600.3126 (SP3 comes with 5.1.2600.5512!). No difference if put to HFGUIRUNONCE, so this does not matter.
It's up to you whether you want to have this included. Anyway, it's a very strange update, with two files being current ones with high version numbers, and on the other side one file being completely outdated. Maybe just Microsoft knows the purpose of this (although I seriously doubt that).
tommyp, is it possible to deal with this exception in hfslip?
7) If you want to include KB958911 (more stable version of 'gdiplus.dll'), do _not_ put it into HF! This results in a critical error, see attached image, and will abort the installation. Putting it in HFSVCPACK_SW1 is fine.
tommyp, any chance to have a look on this? This is not really important, I know, but it may to indicate a flaw within hfslip.
Update 2009/10/13: Irrelevant now. Most recent 'gdiplus.dll', version 5.2.6001.22319, is now contained in KB958869 (MS09-062). Attachment with screenshot has been removed.
8) If you include
KB968389 and want it to be effective, do no forget to include the appropriate registry file in HFSVCPACK (mentioned and available
here under item 5). This is not set by the update itself (another Microsoft caprice, by the way)!
9) The strange 'tweakui.exe' issue, described as item 2
here is still valid. I have to use the escape key to skip the message, but the file is present later on. This one really puzzles me, but I guess I just have to live with the fact that I have to press one additional key during the textmode copy phase for no apparent reason...
And finally there are some really problematic updates where I'd like to see a solution. There are workarounds for them, but they fill up the list of installed software, and I do not consider that as "clean"):
10) MU still does not work when running it the first time in a new installation, for some reason I have to do that manually. This is the same issue as described in my initial post above as item no 1. If even included a newer 'muauth.cab' (will mention that in the respective sticky thread as well so MuppetHunter can update his link), but to no avail.
tommyp, is it possible to investigate? This worked in the past, but for some reason MU is nowdays again quite touchy. I think others described this as well, but I cannot find the appropriate thread now.
Update 2009/10/11: Problem solved by using updated 'muweb_site.cab' (see list maintained by Mupper Hunter). No other corrections necessary.
11) Even more annyoing (in my eyes): the stubborn update
KB905474 (German version, don't know the direct URL of the English one). I know, many consider WGA notifications as unnecessary and will avoid it, but for completeness' sake I want to have it included. As I own a legitimate Windows version I do not have a problem including it. But it refuses to cooperate...
Putting the original file in HF or HFSVCPCK_SW1 was useless. After analyzing the update I discovered it has an unusual format - you can extract it and then you get a file called 'wganotifypackageinner.exe' which is the actual update in the standard format. I renamed it accordingly (also described by fz500
here) and tried it both in HF and in HFSVCPACK_SW1, but again without success.
In HFGUIRUNONCE it works of course, but it's ugly. And tricking Windows to consider it as installed with
this registry file by Acheron is a hack only.
tommyp, again my plea to have a look on that and to fix it if possible. I know I'm nasty
Update 2009/10/14: More or less solved now. Procedure to integrate KB905474 properly (with some drawbacks, see below):
- Download the Microsoft package for KB905474 for your language, the German one is deep linked above. Could be identified by just searching for it in case this information has already been published for your language, or by having a look at "WindowsUpdate.log" after KB905474 has been installed once via MU/WU. Maybe some friendly folks here could provide the download locations for other languages also?
- As already described above: extract this package and get the file "wganotifypackageinner.exe" from it. This is the actual update, in the usual format with standard structure which is expected by hfslip.
- Rename that to "WindowsXP-KB905474-x86-<LANG>.exe" and put it to HF. Thereby all contained files ("wgatray.exe", "wgalogon.dll" and, most important, the current version 1.9.40.0 of "legitcheckcontrol.dll") can be found at the correct locations in your installation after Windows setup.
- Put the attached registry file to HFSVCPACK. This one entry makes MU/WU believe you have KB905474 installed properly and it won't complain any longer.
That's it. Note that this may not be totally the same as putting the patch to HFGUIRUNONCE in the first place which apparently does more, e.g.
- adding some more registry entries, some of them visible from Acherons post
- storing "wganotify.cat" in Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}, don't know how important that is
But it is sufficient to have the most recent "legitcheckcontrol.dll" in your system, enabling WGA protected downloads from MU/WU, and at the same time keeping MU/WU silent. What more do we want?
12) Last issue: MSI installer 4.5 (KB942288) won't integrate.
When put to HF, exactly nothing happens, after Windows installation still version 3.1 is present in the system.
When put to HFSVCPACK_SW1 only some of the files are updated to version 4.5.6001.22159 (namely 'msiexec.exe', 'msimsg.dll' and 'msimsg.dll.mui') while others remain in version 3.1.4001.5512 ('msi.dll', 'msihnd.dll' and 'msisip.dll'). This results in a broken installer, so do _not_ do that!
With HFGUIRUNONCE it works, but again this is the possibility I dislike (although the registry file mentioned by Lions here is then not necessary).
Anyway, if you additionally include the optional KB958655 (v2) which contains an improved 'msi.dll', you have to put it also in HFGUIRUNONCE instead of HF or HFSVCPACK_SW1 as long as the problem above is not solved. Otherwise - I've tried it
- you'll understandably run in all kind of problems with this mixed up installer, e.g. broken GUI elements in IE8, as some components are not installed cleanly during Windows setup...
tommyp, last question today
: solving this would be really nice. Any intention to tackle it in near future? I'll try to support and test as far as my time permits...
Update 2009/10/11: To be solved as follows
- Extract the update 'WindowsXP-KB942288-v3-x86.exe' to some temporary folder (parameter "/X:<PATH>") and get the file 'msimsg.dll.<YOURLANGUAGE>.mui' from sub directory 'SP3QFE'. Rename it to 'msimsg.dll.mui' (no language!) and put it to 'HFEXPERT\WIN\system32\mui\<LANGUAGECODE>' (list of valid language codes). Get rid of the tempory folder again, the other files are not needed.
- Put 'WindowsXP-KB942288-v3-x86.exe' to HF as usually.
- Remove the string '942288' from the definition of variable 'DefExcHF' in hfslip. This is valid as of version 1.7.9_beta_m (2009/06/06), line to be modified is 1473.
- Optionally put update KB958655(v2) into HF as well.
- Run hfslip. No issues experienced, should result in a working MSI installer 4.5 including display of help box.
Update 2009/10/14: Solved with hfslip version 'o' (beta 20091012a) which implements the steps above.
Wow, long post. Let's finish here for now.
Kind regards,
Tomalak
This post has been edited by Tomalak: 14 October 2009 - 08:09 AM