Bilou_Gateux

infos related to IE6SP1 slipstream into W2K source moved Microsoft Internet Explorer 6 Service Pack 1 (SP1) Version 6.0.2800.1106

See here. try to add reference to your sys driver in dosnet.inf under section [FloppyFiles.2] and better follow instructions by TBone2

Windows 2003 Server w/ Service Pack 1 Bilou Gateux list of [security] Updates with instructions to download them [un]attended.

About 818043 update, I've noticed that it's not necessary to slipstream the 56BIT subfolder and add this line to DOSNET.INF : d1,56BIT\ipsec.sys There are severe restrictions on the export of "strong" cryptography. the strength of the authentication (e.g. 128 bits) is reduced to that of encryption (e.g., 56 bits) for particular countries. 818043\ipsec.sys IPSEC Driver (US/Canada Only, Not for Export) 818043\56BIT\ipsec.sys IPSEC Driver (Export Version) Copy and paste content of file below to %PREPDIR%_818043.cmd and launch it: _818043.txt

It's one of my next purpose to integrates IE and MDAC in my 2K source. At the moment, i'm on the study of MDAC_TYP.EXE 2.71 Service Pack 1 Refresh (2.71.9040.2) and IE6SP1 IE6SETUP.EXE and CAB's to compare the content with the previous versions IE5.01 and MDAC2.53 included in W2K. Your idea to use the XP versions of the inf's files is interesting because that's the same versions i want to slipstream. If you start a new thread, i will be one of the first to experiment further. Just want not to loose time with problems already solved by others. About XPCreate and latest W2K HotFixes, i achieve a working 2K CD with some little modifications. See here.

Self Extraction Directive file to create an iexpress package. KB873374.SED [Version] Class=IEXPRESS SEDVersion=3 [Options] PackagePurpose=InstallApp ShowInstallProgramWindow=0 HideExtractAnimation=1 UseLongFileName=0 InsideCompressed=0 CAB_FixedSize=0 CAB_ResvCodeSigning=0 RebootMode=I InstallPrompt=%InstallPrompt% DisplayLicense=%DisplayLicense% FinishMessage=%FinishMessage% TargetName=%TargetName% FriendlyName=%FriendlyName% AppLaunched=%AppLaunched% PostInstallCmd=%PostInstallCmd% AdminQuietInstCmd=%AdminQuietInstCmd% UserQuietInstCmd=%UserQuietInstCmd% SourceFiles=SourceFiles [Strings] InstallPrompt= DisplayLicense=C:\TEMP\KB873374\EULA.TXT FinishMessage=L'outil logiciel n'a détecté aucune application Microsoft Office, Microsoft Picture It! ou Microsoft .NET Framework susceptible d'être affectée par la vulnérabilité relative à la sécurité du composant graphique GDI+ sur votre ordinateur. TargetName=C:\TEMP\BUILD\KB873374.EXE FriendlyName=Microsoft GDI+ Detection Tool AppLaunched=gditool.inf PostInstallCmd=<None> AdminQuietInstCmd= UserQuietInstCmd= FILE0="ADVPACK.DLL" FILE1="gdidet.cif" FILE2="gdidet.xml" FILE3="gditool.inf" FILE4="msiutil2.exe" FILE5="oudetect.dll" FILE6="W95INF16.DLL" FILE7="W95INF32.DLL" [SourceFiles] SourceFiles0=C:\TEMP\KB873374\ [SourceFiles0] %FILE0%= %FILE1%= %FILE2%= %FILE3%= %FILE4%= %FILE5%= %FILE6%= %FILE7%= Don't forget to create an EULA.TXT file before and edit GDIDET.XML To launch silently KB873374.EXe /Q:A /R:N To check the installation status: regjump HKLM\SOFTWARE\Microsoft\GdiDetectionTool GDITool set to 1 = completed for ENU versions of Windows, replace the French string with : FinishMessage=The software tool did not detect any Microsoft Office, Microsoft Picture It! or Microsoft .NET Framework software on your computer that is vulnerable to the GDI+ Graphics Component security vulnerability. Link to understand what this tool is intended for GDI+ security updates

Details about REG.EXE Win2k unattended problems Topic I have "slipstreamed" reg.exe in my 2KCreate (awesome tool from GM) source CD : copy a compressed version REG.EX_ in the i386 folder. edit both files and add the line in the relevant section DOSNET.INF [Files] d1,reg.exe TXTSETUP.SIF [SourceDisksFiles] reg.exe = 1,,,,,,,2,0,0 The file names are sorted in both files, insert the reg.exe line after redir.exe line. I just take exemplar from a XP CD source with built-in reg.exe version 3.0 @vcBlackBox I have downloaded AutoPatcher 2000 UltraLite to have a look inside. It's probably the perfect solution for newbies and users installing only ENU Windows. But annoying problem, the program try to replace 3 files which are protected by WFP : scrrun.dll, msxml.dll & msxmlr.dll. I believe that most members of msfn forum like to discover by themselves the incredible complexity of keeping a Windows box running without problems. @IncroyableHULK There is another method described here to install GDI+ Detection Tool

@urgan My last build includes "Windows Script 5.6 for Windows 2000 and XP" scriptfr.exe version 5.6.0.8825 and i have deleted "JScript 5.6 Security Patch for Windows 2000 and XP (814078)" js56nfr.exe in SVC-HF2 folder. no critical updates in windowsupdate after installation on my test box. GreenMachine Until GM make his own check, i will wait before editing XPCTHLST.TXT HotFixes List but it's a good replacement. I should also ADD the last "Cumulative Security Update for Internet Explorer (834707)" or better "873377 An update rollup is available for Internet Explorer 6 Service Pack 1" to the list but maybe should i wait the release of the new XPCreate version.

I don't find the post where another user give the solution to use local XPCTHLST.TXT file. In XPCREATE.INI the variable DLURL= should be set to something like file:///C|/HFLISTS but wget don't like this kind of URL... File URLs

Examining the log, i can says that the FINDVERSION routine of XPCREATE run without problem. SP4 is slipstreamed to your 2K source and value SP5 is assigned to variable. Something strange in CHECKAUTO routine of XPCREATE, the path for downloading hotfix list looks like Download_url/sourcever/winlang/XPCTHLST.TXT Yours is strange ?

@tommyp Could you describe how you achieve that ?

We can use the Windows findstr.exe utility rather than grep.exe devcon hwids =display | findstr Name: |findstr /i NVidia search for the Vendor ID (Display class device installed with default NVidia Windows CD outdated drivers) set VEN=VEN_10DE set class=Display devcon listclass %class% | findstr /i /c:%VEN% search for the Vendor ID (Display class device with no drivers found under "Other devices" --> "Video controller" in device manager) set VEN=VEN_8086 set class=Unknown devcon listclass %class% | findstr /i "Video Controller" | findstr /i /c:%VEN% How to find the Vendor ID: PCI Vendor and Device Lists A variety of tools are provided in \Tools of the Windows 2000 System Preparation Tool, Version 1.1 package, including: Sysprep.exe (v1.1) Setupcl.exe Pnpids.exe that assists in identifying the Plug and Play ID used by Windows to install the proper device.

Current Hotfixes Windows 2000 Professional / Server List by GreenMachine Last update date and list of changes posted 19 September 2004 updated 28 September 2004 updated 7 November 2004 updated 9 November 2004 DEL Critical Update for Windows Media Player (All Versions) for Windows 2000, Windows XP, and Windows Server 2003 (KB828026) ADD 832353 FIX: Some URL script commands do not work after you apply the Windows Media update from Knowledge Base article 828026 DEL Vulnerability in Windows Shell Could Allow Remote Code Execution (839645) 841356 updates both shell32.dll & sp3res.dll with newer versions Credits to urgan for these suggestions and changes

Date Published: September 18, 2004 Version: 5.6.0.8825 Windows Script 5.6 for Windows 2000 and XP (1) Can be used instead of 814078 Critical update download details This download installs Microsoft® Windows® Script containing Visual Basic® Script Edition (VBScript.) Version 5.6, JScript® Version 5.6, Windows Script Components, Windows Script Host 5.6, and Windows Script Runtime Version 5.6. scripten.exe scriptde.exe scriptfr.exe @urgan After extraction, i have found the jscript.dll and vbscript.dll are both version 5.6.0.8825 (same as scriptxx.exe package version). Currently, the 814078 hotfix install jscript.dll version 5.6.0.8513 I'm going to replace 814078 hotfix with this package which is newer. In your installation, scripten.exe is not applied correctly i believe or the WFP has restored the IE6SP1 jscript.dll version 5.6.0.6626. Try to extract scripten.exe to temp folder, right click jscript.dll to verify the version. path\scripten.exe /c /t:path\tmp\scriptfr

*** moved ***

Windows Server 2003 Post SP1 HotFixes Security Updates moved in HFSLIP here

Last Review: April 30, 2004 Revision: 1.0 Microsoft Windows Media Player (all versions) for Microsoft Windows 2000 FIX: Some URL script commands do not work after you apply the Windows Media update from Knowledge Base article 828026 WindowsMedia-KB832353-ENU.EXE WindowsMedia-KB832353-DEU.EXE WindowsMedia-KB832353-FRA.EXE Add the new hotfix in SVC-HF1, silent switch: /Q /U /O /N /Z Thanks urgan for your tests & comments. 1/ can you give me the name of the last IE update that updates 814078 jscript.dll. Do you mean scripten.exe ? 2/ i will try to build a new 2KCreate without 839645. Both sp3res.dll version 5.0.2195.6928 and shell32.dll version 5.0.3900.6922 are newer in 841356 sp3res.dll version 5.0.2195.6970 and shell32.dll version 5.0.3900.6975 3/ i will try to build a new 2KCreate replacing 828026 by 832353 newer versions of msdxm.ocx old version 6.4.9.1128 new 6.4.9.1129, wmp.dll old version 9.0.0.3075 new 9.0.0.3093, wmpcore7.dll old version 7.10.0.3075 new 7.10.0.3076, wmpcore8.dll old version 8.0.0.4491 new 8.0.0.4492

MS03-008: Flaw in Windows Script Engine may allow code to run (814078) probably because the M$ Security Bulletin has not been updated to add Windows 2000 SP4.

About 841356 with the current version of XPCreate, 841356 HotFix type 1 is not slipstreamed correctly. before creating the iso and burning the CD, some minor modifications should be made: delete unused files and dir edit dosnet.inf and remove last two lines last two lines in DOSNET.INF d1,XPCLNT_QFE_BINARYDROP\shlwapi.dll d1,XPSP2_BINARYDROP\shlwapi.dll Download change.exe Text Search and Replace Utility and save it to %PREPDIR% Copy and paste content of file below to %PREPDIR%_841356.cmd and launch it: _841356.txt

for use with GreenMachine XPCreate nice project, i'm currently maintaining a 2K hotFix list for both English and French version. Windows 2K Security Updates

Thanks ixion ! In corporate environment with branded computers, you could also use ENGL Zcnc Lite 1.3. Zcnc Lite 1.3 is the only ZENworks computer name changer that can extract the serial number or any other WMI property. Using the /wmi switch, any WMI class and property can be specified, i.e. the Dell asset tag can be extracted. works even if you're not in a Novell Network Environment. You must complete an englNet registration form before downloading this freeware.

MiTeC System Information Component (MSIC) FREE in compiled version.

Here the result of my last (French) build including ALL except : 1/ recommended updates .NET Framework & Journal Viewer ; 2/ Using a repackaged 834707 instead of 873377 + registry edit data "Q834707" changed to "KB834707" in value "ComponentID"; 3/ Q841356 added to svcpack.inf after XPCreation but not slipstreadmed to i386 according to GM Post: Oct 18 2004, 01:12 AM. 4/ registry edit to "kill" GDI+ Detection Tool :: KB834707 P'tit tour de.... passe-passe REG ADD "HKLM\SOFTWARE\Microsoft\Active Setup\Installed Components\{3e7bb08a-a7a3-4692-8eac-ac5e7895755b}" /v "ComponentID" /t REG_SZ /d "KB834707" /f :: GDI+ Detection Tool Kill Bit REG ADD "HKLM\SOFTWARE\Microsoft\GdiDetectionTool" /v "GDITool" /t REG_DWORD /d "00000001" Scan performed Sun Oct 31 19:45:44 2004 Shavlik Technologies Network Security Hotfix Checker, 3.85 Using XML data version = 1.1.2.227 Last modified on 10/20/2004. ---------------------------- 1A (127.0.0.1) ---------------------------- * WINDOWS 2000 SERVER SP4 Note MS02-064 Q327522 Please refer to http://hfnetchk.shavlik.com/support for a detailed explanation. Refer to the section on Note Messages. Patch NOT Installed TOOL03-039 Q833330 File C:\WINNT.1\$NtUninstallKB833330$\Blastcln\blastcln.exe cannot be located. Warning MS04-019 Q842526 File C:\WINNT.1\system32\sp3res.dll has a file version [5.0.2195.6970] that is greater than what is expected [5.0.2195.6928]. * INTERNET EXPLORER 6 SP1 Information All necessary hotfixes have been applied. * WINDOWS MEDIA PLAYER 9.0 GOLD Warning MS03-040 Q828026 File C:\WINNT.1\system32\wmp.dll has a file version [9.0.0.3128] that is greater than what is expected [9.0.0.3075].

CardMan Driver Installation For PnP devices the files are copied to the correct location, so that the operating system is able to install the device with minimal user interaction, if the device gets plugged in. cmsetupn -install -d:CardMan 8630 I have the same problem when i want to install an USB WebCam or USB printer. The only unattended solution is the first one i've described in previous post (peripheral already plugged to box before running unattended install and automatic detection an installation of drivers with preconfigured winnt.sif and PnP drivers folder).

1/ KB873374 GDI+ Detection Tool : don't bother about that. It's not a hotfix but a tool that open predefined web page to check your system for possibly programs needing updates. Value set to 1 in registry to avoid WindowsUpdate claiming not installed/run. REG ADD "HKLM\SOFTWARE\Microsoft\GdiDetectionTool" /v "GDITool" /t REG_DWORD /d "00000001" 2/ I have already build a Windows 2000 Server SP4 + IE 5.5 SP2 with XPCreate. I have set DLAUTO=NO in XPCREATE.INI and build my own IE55SP2 package. It's the same method from building IE6SP1 package except i use an older IE5OEM.EXE instead of IE5SETUP.EXE to avoid a popup windows claiming the installer is not digitallly signed. If you want more infos, let me know i can give you more details. M$ don't release anymore HotFixes for IE55SP2 for Windows 2000 but you can still use IE55SP2 for WinMe HotFixes with some modifications. 3/ My video card do not need/support latest DirectX and i replace it with DX81NTOP.EXE + 839643 DirectX HotFix in my running box. 4/ to check HotFixes installation, you can use Shavlik HFNetChk.exe