[Incroyable HULK]

@urgan

My method to get the list of hotfixes is under simulation with a flat installation for the 3 OS. I go to Windows Update and get the list of update from there. If Microsoft themself are not giving an accurate update list, I wonder who can...
Anyway, the goal is always the same: get all the critical updates integrated into our unattended project. I think my method is the fastest and easy for me to maintain.
I really appreciate your help & comment! Keep me updated!

[urgan]

Incroyable HULK, on Nov 10 2004, 05:05 PM, said:

I tried this method with my Win2000 install. I used the exact syntax you suggested (copy & paste) and it doesn't work. The only thing unclear is if I had to copy reg.exe to System32 to use your method... because I didn't!

Where do you get this reg.exe version 2.0 from?

@Incroyable HULK
That's easy Where can I download the Windows 2000 Resource Kit tools?

As for the updates, of course your method is valid, and easier to maintain. I just wanted to show in a more visible way (since it as in a subforum) what GreenMachine, Bilou_Gateux and me have found so far regarding 2000 updates, not that you modified the list just because we say it works better. Good work, the forum lacked this sticky long time now.

The list windowsupdate gives can be optimized and improved upon, so the updates can be applied in "one shot" whithout getting any issues. It just takes a LOT of work reading and testing. I consider it a minimal security reference, and not the "ultimate state" of a windows instalation.

If the thread doesn't grow too much, I can post here any relevant further improvement.

take care,

[ToBe]

Incroyable HULK, on Nov 10 2004, 06:05 PM, said:

Where do you get this reg.exe version 2.0 from?

It is in the deploy.cab in the support/tools folder on the Windows 2000 CD... (thanx to Bilou_Gateux for pointing that out to me earlier).

You must copy it to System32 otherwise you can't add to the registry through batch files in Win2k.

Nice work on the list, btw.

[Incroyable HULK]

@ToBe

Thanks!

[Bilou_Gateux]

Details about REG.EXE Win2k unattended problems Topic

I have "slipstreamed" reg.exe in my 2KCreate (awesome tool from GM) source CD :

• copy a compressed version REG.EX_ in the i386 folder.
  
• edit both files and add the line in the relevant section

DOSNET.INF

[Files]
d1,reg.exe

TXTSETUP.SIF

[SourceDisksFiles]
reg.exe      = 1,,,,,,,2,0,0

The file names are sorted in both files, insert the reg.exe line after redir.exe line.
I just take exemplar from a XP CD source with built-in reg.exe version 3.0

@vcBlackBox

I have downloaded AutoPatcher 2000 UltraLite to have a look inside.
It's probably the perfect solution for newbies and users installing only ENU Windows. But annoying problem, the program try to replace 3 files which are protected by WFP : scrrun.dll, msxml.dll & msxmlr.dll.
I believe that most members of msfn forum like to discover by themselves the incredible complexity of keeping a Windows box running without problems.

@IncroyableHULK

There is another method described here to install GDI+ Detection Tool

[vcBlackBox]

@urgan & Bilou_Gateux

Sorry if you mistook me as the author of Autopatcher, but I did not write it.
I only mention the program because I found it useful and convenient and thought I'll share it with everyone.

[war59312]

bilemke, on Nov 9 2004, 05:19 AM, said:

This thread is for only official hotfixes that dont require contacting MS right?

Otherwise.. here is one of many available for download if you get a hold of MS for the password for the hotfix ftp.

http://support.microsoft.com/kb/883523

BTW.. KB article only.. no download links

hehe I got it if anyone needs it.

[RyanVM]

war59312, on Nov 13 2004, 02:25 PM, said:

bilemke, on Nov 9 2004, 05:19 AM, said:

This thread is for only official hotfixes that dont require contacting MS right?

Otherwise.. here is one of many available for download if you get a hold of MS for the password for the hotfix ftp.

http://support.microsoft.com/kb/883523

BTW.. KB article only.. no download links

hehe I got it if anyone needs it.

IM me please

[war59312]

Sure.

[RyanVM]

KB883523 will be in my next release

[bilemke]

RyanVM, on Nov 14 2004, 02:13 AM, said:

KB883523 will be in my next release

Cool... I really dont need that patch myself.. Buy, I wish microsoft would stop being so secretive/protective of their non-official (or whatever you want to call them) hot fixes. Like the one that is still not on windows update but was luckily a big enough problem for people to notice and thus be posted all over the net. By "the one" i mean the one that updated tcpip.sys to solve the VPN client connection problems.

[RyanVM]

That one's publicly available for download now, just not from WindowsUpdate.
http://support.micro...om/?kbid=884020

[Alanoll]

bilemke, on Nov 14 2004, 04:37 AM, said:

RyanVM, on Nov 14 2004, 02:13 AM, said:

KB883523 will be in my next release

Cool... I really dont need that patch myself.. Buy, I wish microsoft would stop being so secretive/protective of their non-official (or whatever you want to call them) hot fixes. Like the one that is still not on windows update but was luckily a big enough problem for people to notice and thus be posted all over the net. By "the one" i mean the one that updated tcpip.sys to solve the VPN client connection problems.

well, it's not on WU simply because it doesn't fix any SECURITY flaws. It's a programmatic flaw. If you look at all the updates that Microsoft has in SP2, you won't find a good majority of them on WU. Alot of them were just workarounds for something to work, same is the case with the TCPIP.SYS patch. It's not security, and thus not EVERYONE needs it, so it's NOT on WU.

Pretty clear logic ot me. If you have the problem, you should hopefully know what ot search for to resolve said problem.


I just wish there weren't so many SP2 patches... lol. But that's Microsoft for ya. Fix one thing, break 4 others.

[war59312]

Anyone got a list of WinXP SP3 hotfixes that have not been publicly released yet?

Will try to get them all.

hehe

http://search.microsoft.com/search/results...3fix&view=en-us

23 of them...

well s*** lol

http://www.kbalertz....nology_349.aspx

and

http://jmfmvps.mvps.org/SP2.htm

[RyanVM]

war59312, on Nov 14 2004, 03:37 PM, said:

Anyone got a list of WinXP SP3 hotfixes that have not been publicly released yet?

Will try to get them all.

hehe

http://search.microsoft.com/search/results...3fix&view=en-us

23 of them...

well s*** lol

http://www.kbalertz....nology_349.aspx

and

http://jmfmvps.mvps.org/SP2.htm

Get on it

[Sgt_Strider]

How come on the first page, there are only two updates for SP2? I thought Microsoft released more patches than that after SP2?

[RyanVM]

Sgt_Strider, on Nov 15 2004, 12:31 AM, said:

How come on the first page, there are only two updates for SP2? I thought Microsoft released more patches than that after SP2?

There are more, the starter just hasn't gotten around to adding them yet.

(kind of ironic given why this thread was started )

[Sgt_Strider]

RyanVM, on Nov 14 2004, 11:53 PM, said:

Sgt_Strider, on Nov 15 2004, 12:31 AM, said:

How come on the first page, there are only two updates for SP2? I thought Microsoft released more patches than that after SP2?

There are more, the starter just hasn't gotten around to adding them yet.

(kind of ironic given why this thread was started )

lol, have you consider doing it yourself?

[bilemke]

Alanoll, on Nov 14 2004, 02:27 PM, said:

well, it's not on WU simply because it doesn't fix any SECURITY flaws. It's a programmatic flaw. If you look at all the updates that Microsoft has in SP2, you won't find a good majority of them on WU. Alot of them were just workarounds for something to work, same is the case with the TCPIP.SYS patch. It's not security, and thus not EVERYONE needs it, so it's NOT on WU.

Pretty clear logic ot me. If you have the problem, you should hopefully know what ot search for to resolve said problem.


I just wish there weren't so many SP2 patches... lol. But that's Microsoft for ya. Fix one thing, break 4 others.

True.. sorta..

TCPIP.SYS update to resolve VPN problem was a security risk to me, it prevented a customer of mine from usign their vpn all together.

Update for Highmat CD burning support is on windows update though.. I dont see that as a security risk?

Still, I would like to see their no public released updates a little more aceessable. Heck, even finding the tech article for one can be a chore to begin with. Then I have to call them and get a password to download the bugger..

[bilemke]

RyanVM, on Nov 14 2004, 11:28 AM, said:

That one's publicly available for download now, just not from WindowsUpdate.
http://support.micro...om/?kbid=884020

Thanks, but already knew the TCPIP update was available to public. Was reffering to another patch I referenced earlier in the thread.