Bilou_Gateux

Thanks for sharing your tweak and script. I will keep it to avoid this annoying icon appearing in QuickLaunch bar on W2K installs. For Registry Console Tool addicts REG DELETE "HKLM\SOFTWARE\Microsoft\Active Setup\Installed Components\{44BBA840-CC51-11CF-AAFA-00AA00B6015C}" /v StubPath /f

KB823353.INF [Version] Signature="$Chicago$" AdvancedINF=2.5,%BadAdvpackVer% [DefaultInstall] AddReg=Uninstinfo.reg,Uninst.Reg,Actsetup.Reg RunPreSetupCommands= CheckAdminRights=1 [Uninstinfo.reg] HKLM,"SOFTWARE\Microsoft\Advanced INF Setup\%COMPNAME%" [Uninst.Reg] HKLM,"Software\Microsoft\Internet Explorer","UpdateInf",,"%17%\%COMPID%.inf" [Actsetup.Reg] HKLM,"Software\Microsoft\Active Setup\Installed Components\%GUID%",,,"%COMPID%" HKLM,"Software\Microsoft\Active Setup\Installed Components\%GUID%","IsInstalled",0x10001,01,00,00,00 HKLM,"Software\Microsoft\Active Setup\Installed Components\%GUID%","Version",,"%VERSION%" HKLM,"Software\Microsoft\Active Setup\Installed Components\%GUID%","ComponentID",,"%COMPID%" [Strings] BadAdvpackVer="Incorrect version of advpack.dll. Please get new version from [URL=http://www.microsoft.com"]http://www.microsoft.com"[/URL] COMPNAME = oeupdate Compversion = 28001450 Compid = Q823353 Version = "6,0,2800,1450" Guid = {f5173cf0-1dfb-4978-8e50-a90169ee7ca9} We must add data here [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings] "MinorVersion"=";SP1;Q823353;" The missing part to add = Q823353; MINORVER.INF [Version] Signature="$Chicago$" AdvancedINF=2.5,%BadAdvpackVer% [DefaultInstall] AddReg=IESettings.AddReg RunPreSetupCommands= CheckAdminRights=1 [IESettings.AddReg] HKLM,%IESettingsRegKey%,MinorVersion,,"%MINORVER%" [Strings] IESettingsRegKey = "SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings" MINORVER=";SP1;Q823353;" the command is rundll32.exe advpack.dll,LaunchINFSection <path><INF-Data> ,<Section> ie rundll32.exe advpack.dll,LaunchINFSection MINORVER.INF ,DefaultInstall

infos related to IE6SP1 slipstream into W2K source moved Microsoft Internet Explorer 6 Service Pack 1 (SP1) Version 6.0.2800.1106

infos related to IE6SP1 slipstream into W2K source moved Microsoft Internet Explorer 6 Service Pack 1 (SP1) Version 6.0.2800.1106

infos related to IE6SP1 slipstream into W2K source moved Microsoft Internet Explorer 6 Service Pack 1 (SP1) Version 6.0.2800.1106

See here. try to add reference to your sys driver in dosnet.inf under section [FloppyFiles.2] and better follow instructions by TBone2

Windows 2003 Server w/ Service Pack 1 Bilou Gateux list of [security] Updates with instructions to download them [un]attended.

About 818043 update, I've noticed that it's not necessary to slipstream the 56BIT subfolder and add this line to DOSNET.INF : d1,56BIT\ipsec.sys There are severe restrictions on the export of "strong" cryptography. the strength of the authentication (e.g. 128 bits) is reduced to that of encryption (e.g., 56 bits) for particular countries. 818043\ipsec.sys IPSEC Driver (US/Canada Only, Not for Export) 818043\56BIT\ipsec.sys IPSEC Driver (Export Version) Copy and paste content of file below to %PREPDIR%_818043.cmd and launch it: _818043.txt

It's one of my next purpose to integrates IE and MDAC in my 2K source. At the moment, i'm on the study of MDAC_TYP.EXE 2.71 Service Pack 1 Refresh (2.71.9040.2) and IE6SP1 IE6SETUP.EXE and CAB's to compare the content with the previous versions IE5.01 and MDAC2.53 included in W2K. Your idea to use the XP versions of the inf's files is interesting because that's the same versions i want to slipstream. If you start a new thread, i will be one of the first to experiment further. Just want not to loose time with problems already solved by others. About XPCreate and latest W2K HotFixes, i achieve a working 2K CD with some little modifications. See here.

Self Extraction Directive file to create an iexpress package. KB873374.SED [Version] Class=IEXPRESS SEDVersion=3 [Options] PackagePurpose=InstallApp ShowInstallProgramWindow=0 HideExtractAnimation=1 UseLongFileName=0 InsideCompressed=0 CAB_FixedSize=0 CAB_ResvCodeSigning=0 RebootMode=I InstallPrompt=%InstallPrompt% DisplayLicense=%DisplayLicense% FinishMessage=%FinishMessage% TargetName=%TargetName% FriendlyName=%FriendlyName% AppLaunched=%AppLaunched% PostInstallCmd=%PostInstallCmd% AdminQuietInstCmd=%AdminQuietInstCmd% UserQuietInstCmd=%UserQuietInstCmd% SourceFiles=SourceFiles [Strings] InstallPrompt= DisplayLicense=C:\TEMP\KB873374\EULA.TXT FinishMessage=L'outil logiciel n'a détecté aucune application Microsoft Office, Microsoft Picture It! ou Microsoft .NET Framework susceptible d'être affectée par la vulnérabilité relative à la sécurité du composant graphique GDI+ sur votre ordinateur. TargetName=C:\TEMP\BUILD\KB873374.EXE FriendlyName=Microsoft GDI+ Detection Tool AppLaunched=gditool.inf PostInstallCmd=<None> AdminQuietInstCmd= UserQuietInstCmd= FILE0="ADVPACK.DLL" FILE1="gdidet.cif" FILE2="gdidet.xml" FILE3="gditool.inf" FILE4="msiutil2.exe" FILE5="oudetect.dll" FILE6="W95INF16.DLL" FILE7="W95INF32.DLL" [SourceFiles] SourceFiles0=C:\TEMP\KB873374\ [SourceFiles0] %FILE0%= %FILE1%= %FILE2%= %FILE3%= %FILE4%= %FILE5%= %FILE6%= %FILE7%= Don't forget to create an EULA.TXT file before and edit GDIDET.XML To launch silently KB873374.EXe /Q:A /R:N To check the installation status: regjump HKLM\SOFTWARE\Microsoft\GdiDetectionTool GDITool set to 1 = completed for ENU versions of Windows, replace the French string with : FinishMessage=The software tool did not detect any Microsoft Office, Microsoft Picture It! or Microsoft .NET Framework software on your computer that is vulnerable to the GDI+ Graphics Component security vulnerability. Link to understand what this tool is intended for GDI+ security updates

Details about REG.EXE Win2k unattended problems Topic I have "slipstreamed" reg.exe in my 2KCreate (awesome tool from GM) source CD : copy a compressed version REG.EX_ in the i386 folder. edit both files and add the line in the relevant section DOSNET.INF [Files] d1,reg.exe TXTSETUP.SIF [SourceDisksFiles] reg.exe = 1,,,,,,,2,0,0 The file names are sorted in both files, insert the reg.exe line after redir.exe line. I just take exemplar from a XP CD source with built-in reg.exe version 3.0 @vcBlackBox I have downloaded AutoPatcher 2000 UltraLite to have a look inside. It's probably the perfect solution for newbies and users installing only ENU Windows. But annoying problem, the program try to replace 3 files which are protected by WFP : scrrun.dll, msxml.dll & msxmlr.dll. I believe that most members of msfn forum like to discover by themselves the incredible complexity of keeping a Windows box running without problems. @IncroyableHULK There is another method described here to install GDI+ Detection Tool

@urgan My last build includes "Windows Script 5.6 for Windows 2000 and XP" scriptfr.exe version 5.6.0.8825 and i have deleted "JScript 5.6 Security Patch for Windows 2000 and XP (814078)" js56nfr.exe in SVC-HF2 folder. no critical updates in windowsupdate after installation on my test box. GreenMachine Until GM make his own check, i will wait before editing XPCTHLST.TXT HotFixes List but it's a good replacement. I should also ADD the last "Cumulative Security Update for Internet Explorer (834707)" or better "873377 An update rollup is available for Internet Explorer 6 Service Pack 1" to the list but maybe should i wait the release of the new XPCreate version.

I don't find the post where another user give the solution to use local XPCTHLST.TXT file. In XPCREATE.INI the variable DLURL= should be set to something like file:///C|/HFLISTS but wget don't like this kind of URL... File URLs

Examining the log, i can says that the FINDVERSION routine of XPCREATE run without problem. SP4 is slipstreamed to your 2K source and value SP5 is assigned to variable. Something strange in CHECKAUTO routine of XPCREATE, the path for downloading hotfix list looks like Download_url/sourcever/winlang/XPCTHLST.TXT Yours is strange ?

@tommyp Could you describe how you achieve that ?

We can use the Windows findstr.exe utility rather than grep.exe devcon hwids =display | findstr Name: |findstr /i NVidia search for the Vendor ID (Display class device installed with default NVidia Windows CD outdated drivers) set VEN=VEN_10DE set class=Display devcon listclass %class% | findstr /i /c:%VEN% search for the Vendor ID (Display class device with no drivers found under "Other devices" --> "Video controller" in device manager) set VEN=VEN_8086 set class=Unknown devcon listclass %class% | findstr /i "Video Controller" | findstr /i /c:%VEN% How to find the Vendor ID: PCI Vendor and Device Lists A variety of tools are provided in \Tools of the Windows 2000 System Preparation Tool, Version 1.1 package, including: Sysprep.exe (v1.1) Setupcl.exe Pnpids.exe that assists in identifying the Plug and Play ID used by Windows to install the proper device.

Current Hotfixes Windows 2000 Professional / Server List by GreenMachine Last update date and list of changes posted 19 September 2004 updated 28 September 2004 updated 7 November 2004 updated 9 November 2004 DEL Critical Update for Windows Media Player (All Versions) for Windows 2000, Windows XP, and Windows Server 2003 (KB828026) ADD 832353 FIX: Some URL script commands do not work after you apply the Windows Media update from Knowledge Base article 828026 DEL Vulnerability in Windows Shell Could Allow Remote Code Execution (839645) 841356 updates both shell32.dll & sp3res.dll with newer versions Credits to urgan for these suggestions and changes

Date Published: September 18, 2004 Version: 5.6.0.8825 Windows Script 5.6 for Windows 2000 and XP (1) Can be used instead of 814078 Critical update download details This download installs Microsoft® Windows® Script containing Visual Basic® Script Edition (VBScript.) Version 5.6, JScript® Version 5.6, Windows Script Components, Windows Script Host 5.6, and Windows Script Runtime Version 5.6. scripten.exe scriptde.exe scriptfr.exe @urgan After extraction, i have found the jscript.dll and vbscript.dll are both version 5.6.0.8825 (same as scriptxx.exe package version). Currently, the 814078 hotfix install jscript.dll version 5.6.0.8513 I'm going to replace 814078 hotfix with this package which is newer. In your installation, scripten.exe is not applied correctly i believe or the WFP has restored the IE6SP1 jscript.dll version 5.6.0.6626. Try to extract scripten.exe to temp folder, right click jscript.dll to verify the version. path\scripten.exe /c /t:path\tmp\scriptfr

*** moved ***

Windows Server 2003 Post SP1 HotFixes Security Updates moved in HFSLIP here

Last Review: April 30, 2004 Revision: 1.0 Microsoft Windows Media Player (all versions) for Microsoft Windows 2000 FIX: Some URL script commands do not work after you apply the Windows Media update from Knowledge Base article 828026 WindowsMedia-KB832353-ENU.EXE WindowsMedia-KB832353-DEU.EXE WindowsMedia-KB832353-FRA.EXE Add the new hotfix in SVC-HF1, silent switch: /Q /U /O /N /Z Thanks urgan for your tests & comments. 1/ can you give me the name of the last IE update that updates 814078 jscript.dll. Do you mean scripten.exe ? 2/ i will try to build a new 2KCreate without 839645. Both sp3res.dll version 5.0.2195.6928 and shell32.dll version 5.0.3900.6922 are newer in 841356 sp3res.dll version 5.0.2195.6970 and shell32.dll version 5.0.3900.6975 3/ i will try to build a new 2KCreate replacing 828026 by 832353 newer versions of msdxm.ocx old version 6.4.9.1128 new 6.4.9.1129, wmp.dll old version 9.0.0.3075 new 9.0.0.3093, wmpcore7.dll old version 7.10.0.3075 new 7.10.0.3076, wmpcore8.dll old version 8.0.0.4491 new 8.0.0.4492

MS03-008: Flaw in Windows Script Engine may allow code to run (814078) probably because the M$ Security Bulletin has not been updated to add Windows 2000 SP4.

About 841356 with the current version of XPCreate, 841356 HotFix type 1 is not slipstreamed correctly. before creating the iso and burning the CD, some minor modifications should be made: delete unused files and dir edit dosnet.inf and remove last two lines last two lines in DOSNET.INF d1,XPCLNT_QFE_BINARYDROP\shlwapi.dll d1,XPSP2_BINARYDROP\shlwapi.dll Download change.exe Text Search and Replace Utility and save it to %PREPDIR% Copy and paste content of file below to %PREPDIR%_841356.cmd and launch it: _841356.txt

for use with GreenMachine XPCreate nice project, i'm currently maintaining a 2K hotFix list for both English and French version. Windows 2K Security Updates

Thanks ixion ! In corporate environment with branded computers, you could also use ENGL Zcnc Lite 1.3. Zcnc Lite 1.3 is the only ZENworks computer name changer that can extract the serial number or any other WMI property. Using the /wmi switch, any WMI class and property can be specified, i.e. the Dell asset tag can be extracted. works even if you're not in a Novell Network Environment. You must complete an englNet registration form before downloading this freeware.