NOTS3W

I don't want to clutter rado354's thread on Spyware Terminator 1.9.2.134 (thanks for posting that addon, though, rado), so I'll ask this here: The addon works great to get the software installed, but the Realtime Shield doesn't become active until after Spyware Terminator has been started once, even if nothing is changed. It creates a number of registry entries, but none suggest anything to do with starting the RS component. And, yes, I did manually create those entries, but nothing happened until I manually started the program for the first time. Does anyone know how to automatically turn on realtime protection as soon as Spyware Terminator gets installed (or on the next reboot)? Thanks, Ray

Autostart: HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Run\DAEMON Tools Delete this entry. Thanks for pointing me in the right direction. But I don't have a Run key under HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer. I found DAEMON Tools in HKCU\Software\Microsoft\Windows\CurrentVersion\Run, deleted it and Bob's your uncle! No more autostart. Also, if you delete %ProgramFiles%\DAEMON Tools\SetupDTSB.exe before running DAEMON Tools the first time, it won't install any When U adware. Now, if I could just get rid of that Check for updates option....... Ray

Check out this thread. I can't explain all that that code does, but it's worked flawlessly, even in Virtual PC. Ignore the last part about small icons if you don't care about that. Ray

@0d, I used the wrong code. Should work now. Ray

Thanks. I'll have to do that. I just hate having to download one utility for this and another for that. Especially when Windows has or ought to have comparable programs. But I guess I have no choice in this situation. I think the sticky on making your own add-ons is misleading, though, and ought to be updated to NOT say that makecab will work for files and folders. Ray

In the sticky topic on creating your own add-ons, step 7 says to use makecab to create a cab file of the svcpack folder and the ini file. Everytime I try that, I get an error that svcpack is not a file. So how do you use makecab to create a cab that includes both a file and a folder? I have a folder that contains the ini file and the svcpack sub-folder (which contains the installation exe). I tried using makecab on the parent folder to include everything and that's where the problem occurs. Any help? I can't find any decent explanations here or anywhere else on how to use makecab this way. Ray

Finding switches is more complicated than can be explained briefly. Basically, there are several ways to find switches: 1. Look here for some switches that have been posted. You can also just search the entire forum or Google the Internet with a term like "switches dvd shrink". 2. Use this program to find the silent switches available for some software. Just download and run USSF. When it starts, point it to the software installer you are interested in and it might give you a list of switches. I have to say that my experience with USSF has been pretty dismal. Only about one in ten times has it been able to provide the switches necessary. 3. Check the software author's web site and search in their support areas for silent switches. That doesn't always work either, though. Switches are usually based on the installer software (not the program you are trying to install, but the installer that was used to create the installer itself). So even though a given installer might accept certain switches, it doesn't mean that the program you are trying to install was set up to use all of them. It will take a bit of research, but you can probably find most switches to get the software installed. When it comes to things like entering serial numbers, that often requires registry tweaking in addition to installing the software. To give you an example, here's what I just worked out about SnagIt 8: 1. I had to start the installation manually but not do anything with it. 2. With the installer still on the screen, I went to %UserProfile%\Local Settings\Temp and found the .msi file that was extracted as part of the installation process. 3. I used that msi file with the /qn switch to install SnagIt 8. 4. Before I even started SnagIt 8 for the first time, I made a series of registry tweaks to set certain values including the serial number. Now, SnagIt starts and doesn't assume I have a trial copy, it doesn't present all of the annoying balloons, and it doesn't close to the system tray. So what you are asking doesn't have a simple answer. It takes some trial and error to figure out the switches and what changes in the registry when you install the software. Good luck. Ray

I've searched here and on Google and I'm surprised that I cannot find a program to change icons from a command line. I sure thought I'd find something, but no. Does anyone know of a program to do this? I want to use this in an unattended installation where I'm creating folders and shortcuts. Shortcut.exe lets me specify icons on shortcuts as they're created, but I also want to change the folders I'm adding to Start Menu. Anyone? Ray

Good luck. Should be interesting. I also checked out his forums to see what's out there. What struck me was that the majority of the threads and posts are by Andrew himself or members with single-digit numbers. He's in his own little world. Ray

Does this help? Ray

I'm not an expert, but I have used nLite quite a bit lately. I've observed that the only time nLite.cm_ gets created is when you have entries in the RunOnce list. If as you say, you've removed those entries, then nLite won't create an nLite.cm_ file, so having deleted it shouldn't be a problem. HOWEVER... That file is called from winnt.sif (see the GuiRunOnce section at the bottom of the file). If there were entries in the RunOnce list when you created your compilation, nLite would have added a line to winnt.sif to call nLite.cm_. If you then deleted those entries from the RunOnce list and deleted nLite.cm_ but didn't rebuild the compilation, there will still be the call in winnt.sif. During installation, Windows setup will try to run the missing nLite.cm_ and fail. In that case, just remove the call from the bottom of winnt.sif (which may be the only line under the GuiRunOnce section in winnt.sif) then recreate the ISO. nLite.cm_ is a compressed archive version of nLite.cmd. It automatically gets decompressed during installation. You can see its contents by opening the archive with 7-zip or the like. To edit it, you'd need to extract it to nLite.cmd, edit it, then optionally recompress it using something like makecab to get back to nLite.cm_. The file doesn't have to be compressed, though. You could edit or create your own nLite.cmd file, then edit or add the call to nLite.cmd (not nLite.cm_) in winnt.sif. Like I said, I'm no expert and what worked for me may not work for you. This is just to give you something to consider while waiting for a better response. Good luck. Ray

After installing XP Home from an nLite ISO, Windows' Found New Hardware Wizard pops up to install the found HP722C Deskjet printer. If I cancel the wizard, I have no printer and the wizard reappears each time I start Windows. If I follow the Wizard's steps, it offers two printers: 720C and 722C. Both drivers are digitally signed. When I select the 722C printer, it installs the printer and driver. The question is why is it even starting the wizard when everything is available? Everything I've read indicates that Windows should automatically install a local printer if teh drivers are included so I'm having trouble finding information on making it do something it's supposed to do on its own. After the installation, the files driver.cab and sp2.cab are located in C:\Windows\Driver Cache\I386 and the file ntprint.inf is in C:\Windows\inf. That should be all that's needed, I think. Is there something I'm missing in nLite to make it install the printer? I haven't removed anything related to printers that I know of. Any guidance will be greatly appreciated. Ray

NO ONE has any suggestions for this (without duplicating files)? Okay, how about this: If the driver files exist on the hard drive, shouldn't Windows be able to find them and install the printer and drivers without going through the Found New Hardware Wizard? Ray

Well, I learned something today. Thanks Yzöwl. That explains why it's in quotes, too. I understand and agree with your other points. I think some people may just insert /Q and /F on all of their DEL commands whether they're needed or not "just in case". I was trying to compare the two commands thinking that ~F might somehow be comparable to /F. So DEL /Q /F %0 is equivelent to DEL /Q /F "%~f0" (but with a full path) and DEL %0 is equivelent to DEL "%~f0". Good to know. Thanks for explaining that. Ray

Since this old thread has been resurrected (*I* didn't do it ), I hope someone can explain something to me. I've seen two lines that have been used to delete a currently running cmd file. I understand that DEL /Q /F %0 will DELete the current file (%0 referring to the 0th argument of the original cmd, or the file itself) Quietly (/Q) and Force the deletion even if it's a read-only file (/F). Then there's DEL /Q "%~f0" which appears to Quietly DELete (something). Obviously, that something is the current cmd file in this case, but how does the "%~f0" get parsed? I can see how "%0" would be better than %0 in case there are spaces in the file name. Is ~f equivelent to /F? Why is it included within the %0 argument? Does the second version do anything different from the first? I'd like to understand this for general knowledge purposes. I've written thousands of batch files in my life but I've never used the syntax of the second example. DEL /? doesn't even describe it. Ray FYI: In case anyone shares my curiosity, I just tested adding quotes to %0 in a simple cmd file. To execute a cmd file with spaces in its name, you already had to enclose the file name in quotation marks ("test this.cmd" as opposed to test this.cmd). %0 already includes the quotation marks and enclosing it in additional quotation marks in the DEL command doesn't work ("%0" expands to ""test this""). So nevermind what I said about "%0" being an improvement over %0. It's not.

I just found that site last night and I saw the HP pack, but it doesn't mention the Deskjet 720C or 722C. I wonder if I'm not over-complicating this. All of these files are on the Windows CD and most end up on the C: drive after installation. They're in driver.cab and sp2.cab in C:\Windows\Driver Cache\I386. If Windows and the wizard recognize the printer (by model) and can find everything needed to install it, shouldn't this happen automatically? I've been trying to create a set of installation files as though the printer was unknown to Windows. But this IS a known printer and the drivers are present. Maybe something's just not in the right place? Ray

I asked this over in the Unattended section but got no response. Then I realized it was probably better asked here, so here goes: This for use with XP Home SP2 with nLite'd hotfixes and addons. The printer in question is attached to LPT1: and will be connected during installation. I'm trying to install drivers for an HP722C Deskjet printer and want to avoid the Found New Hardware Wizard after my unattended installation. I know that these files from Driver.cab and SP2.cab are required: HPVDJ50.INI HPVUD50.DLL HPVUI50.DLL HPVIMG50.DLL HPVDB720.DLL HPVSCP50.DLL HPV700AL.DLL HPVDJ7XX.GPD HPVDJ200.HLP HPVDJ720.GPD <-- this is the same as 722C but the wizard lists both HPVDJ722.GPD HPVNAM50.GPD UNIDRV.DLL UNIRES.DLL UNIDRVUI.DLL STDNAMES.GPD UNIDRV.HLP I put all of them in the folder C:\Windows\Temp\HP722C along with NTPRINT.INF and srgb.icm (because the installation asks for it). Then I run this from a cmd file on the desktop (for testing): rundll32 setupapi,InstallHinfSection HPVDJ722.GPD.ICM 128 C:\Windows\Temp\HP722C\ntprint.inf The first problem is that even though everything is in the target folder, the installation keeps asking for some files. For example, it wants to copy HPVDJ50.ini from C:\Windows\Temp\HP722C\I386. When I point it to the folder C:\Windows\Temp\HP722C, it finds it and moves on. It stops again on UNIDRV.DLL. Same story. I think it's looking for an I386 folder (which I don't have) in the folder I've indicated in the rundll32 command. (All of the files evidently get copied OUT OF the folder I placed them in and INTO C:\. Very messy.) The second problem is that when it's done, I still don't have the printer in Start ~ Settings ~ Printers and Faxes nor in File ~ Print. When I reboot, the Found New Hardware Wizard pops up as always. If I run the wizard, VOILA! HP722C printer! Today, I found another rundll32 command that sounds like it might be more appropriate: rundll32 printui.dll,PrintUIEntry /if /b "hp deskjet 960c series" /f "C:\WINDOWS\DRIVERS\hpf960k.inf" /r "lpt1:" /m "hp deskjet 960c series" /z Problem is there are more tokens than I know what to do with or how to customize it for my printer. That and it appears to use a printer-specific inf (hpf960k.inf). In reading through several online references, I gather that I have to install the printer, AND install the driver, AND select the printer as default. But I'm not finding any clear tutorials on how to do all of that. I think I'm part way there. I admit I'm no expert but I was pretty proud of myself for figuring out that first command line until it didn't work! How do I do this? Are the files okay where I'm putting them? Which dll and which inf files should I be using? Thanks. Ray

delete

Everything I can find about Windows File Protection's unrecognized files warning, jumps to the conclusion that you might want to completely disable WFP. Even the Unattended Guide describes how to press Cancel or totally disable WFP. There's got to be some middle ground. I want to either temporarily suspend WFP during unattended installation, suppress or minimize the warning message until I reboot, or automate the process of pressing Cancel and responding to the next couple of confirmation prompts. I know what's causing the problem (Windows Security Configuration Editor, a Win2K program I'm installing on XP Home to get the Security tab on file properties) but I don't which file(s) WFP is barking about. If I do nothing, it doesn't come back after I reboot and the security tab does still exist. I don't want to totally disable WFP but during installation of this one program, I'd sure like to shut it up. Any way to do that? Thanks. Ray

Sorry I didn't get back here sooner. Weekend got in the way of much progress. I'll try again: I have two computers. Each is a Dell Dimension 4500 running XP Home. Each has two shared hard drives (C and D) and a single NIC. One is named Mars, the other Venus. They are attached to a 2-Wire DSL router/firewall. Those are what I meant by the "physical" computers. On Mars, I am building an unattended CD which, when everything is working as I like, will be used to reinstall XP Home on Mars. In order to test the unattended CD, I've installed Microsoft's Virtual PC on that machine (Mars) and carved off 512MB of memory, 5GB of C drive space and 5GB of D drive space for the virtual machine. Virtual PC controls sharing of other resources like the NIC, audio and video systems, keyboard, mouse, and emulates other resources like the CD drive. When I start Virtual PC, it acts like its own computer with its own hard drives, memory, CD, etc. but it's running within Mars. On the virtual computer, I can install my test unattended XP Home installation by "mounting" the ISO image of what will soon become the installation CD on the emulated CD drive of the virtual computer. When I restart Virtual PC, it boots off the virtual CD and installs XP Home just as any other computer would boot off of a real CD and install Windows. When the installation is complete, I have three computers on the network: Mars, Dell Dimension, single NIC, most of a 40GB C drive, most of a 160GB D drive, IP 192.168.1.64 Venus, Dell Dimension, single NIC, all of a 40GB C drive, all of a 160GB D drive, IP 192.168.1.66 Mars2 (creative, eh?), Virtual PC, shared NIC, 5GB C drive, 5GB D drive, IP 192.168.1.78 Mars and Venus can access one another's hard drives as before. Mars2 can access all of the shared hard drives on both Mars and Venus. All three computers can access the Internet and all three can be online simultaneously. To the network, Mars2 looks like a third computer. The router even sees Mars2 as a separate machine, assigning it its own IP address. And when I log onto the router, I can see all shared drives, including those on Mars2. This all works very well for testing my installation. If anything goes wrong, I simply close the Virtual PC window like I'd close any other application and start over. The only shortcomings of Virtual PC that I'm aware of are (1) it does not support USB which means that I cannot use or test any USB devices on Mars2, it doesn't think it has any. And (2) I'm not sure how Virtual PC handles the various hardware drivers I install with Windows since there isn't a real video card, for example, on Mars2. I'm having to trust that those drivers will work when I install Windows on the real hardware to recreate Mars. I hope that explains what I meant by two physical computers + one virtual computer = three computers. Ray

Here's an interesting complication. Does anyone know how to deal with this? The setup.inf file that rundll32 references is located INSIDE of the self extracting archive SCESP4I.exe. Since no one seems to know which of the files in that archive are truly necessary, I'll just copy the entire archive to the C drive, extract it and use the rundll32 command (above). Of course, it's not that easy. When I execute SCESP4I.exe, the extractor prompts for the destination folder. I can't find a way to make that silent and just use the default (current) folder. If I manually right-click the file and use 7-Zip to Extract Here, it works silently. SCESP4I.exe is a Microsoft downloaded file. Does anyone know of a way to extract its contents silently? I've already tried combinations of /s, /q, /silent, /quiet, even typing a full path behind the file name, all to no avail. My work around is to extract the files and re-archive them into a self-extracting 7-Zip file and include that in my unattended file set. That works, but I'd prefer to just use the Microsoft file without repackaging it. Any ideas? Thanks. Ray

I use Virtual PC for testing and that may be a key to this problem. Can anyone confirm, please? My network consists of two physical computers, Mars and Venus. On Mars, I'm building an unattended replacement installation temporarily named Mars2. Each PC has two shared drives, C and D. I use net use in cleanup.cmd (on Mars2) to map to both drives on both Mars and Venus. No problem. I use net share to share both drives on Mars2 but neither Mars nor Venus can map to either drive on Mars2. Here are the net share lines in cleanup.cmd on Mars2: :: Share local drives net share "Mars2 C"=C:\ net share "Mars2 Data 1"=D:\ After installation, the drives look like they're shared (the icons change to shared drive icons) and Mars2 appears on the networked computers list when I try to map to those drives from the other machines. When I click on Mars2 to display its drives, I get a clock for a few seconds, then nothing. The + sign next to Mars2 goes away as if there are no shared resources on that machine. I'm a little suspicious that this is a limitation of Virtual PC. Can anyone confirm that my net share commands are correct and/or that this is typical for Virtual PC? I don't want to buy VMWare but I could try VirtualBox if that would solve the problem. Thanks. Ray

Got it! "You must include 128 to set the default path of the installation to the location of the INF, otherwise a system-provided INF is assumed." (from the page Martin referred to.) @Martin: No problem and thanks for setting me in the right direction. After reading the article mentioned by Ver Greeneyes, I had a better idea of what I was looking for and found several other threads here all referring to the rundll32 setupapi method. They usually include a path in front of the setup.inf file. I assumed that if I ran that command from within the folder that contains setup.inf that it would work without requiring a path (that Windows would look in the current folder before checking in the system path). Only when I provide a complete path to setup.inf, even if rundll32 is in the same folder, does this work. As a bonus, it appears that it suppresses the invalid files error message that shows up when I right-click and install. @Ricktendo64: I tried placing the setup.inf file in the Windows\inf folder, but that didn't work, probably because the other files it looks for weren't there. Here are the files I extracted from SCESP4I.exe: Directory of C:\TestInf 05/31/2007 07:18 AM <DIR> . 05/31/2007 07:18 AM <DIR> .. 07/16/1998 02:15 PM 1,215,720 immc.exe 10/15/1998 11:04 AM 734,517 mssce.cab 10/15/1998 11:04 AM 222,976 mssce.exe 10/15/1998 11:04 AM 11,830 readme.txt 10/15/1998 11:04 AM 37,136 regsvr32.exe 10/15/1998 11:04 AM 1,462 scefiles.inf 10/15/1998 11:04 AM 267 scesetup.inf 10/15/1998 11:04 AM 8,219 setup.inf 05/31/2007 07:18 AM <DIR> symbols I doubt that all of those files are really required, but I don't know how to tell which are and which aren't. Evidently, I need to extract the archive into a folder and include the path to that folder in the rundll32 command regardless of where rundll32 is executed from: rundll32 setupapi,InstallHinfSection DefaultInstall 128 C:\testinf\setup.inf That works! I'll use system variables in the path when I actually do this. The two remaining questions are, what needs to be included in the folder and barring that, how to I extract the exe archive THEN run setup? Here's what setup looks like: [Version] Signature="$Windows NT$" AdvancedINF=2.5 ExtensionGUID = {d0e72d64-e6ab-11d1-9362-00c04fd92f7b} Title=%SCETITLE% LayoutFile=SCEFILES.INF ; Main [AppInstall] RegCheck = HKLM,Software\Microsoft\Windows NT\CurrentVersion,,CurrentVersion,>=4.0,%WrongNTVersion% RegCheck = HKLM,Software\Microsoft\Windows NT\CurrentVersion,,CSDVersion,>=Service Pack 4,%WrongNTServicePack% UserCheck = ,Administrators,%LogonAsAdmin% Switch = C,%InstallCmdLineHelp%,\ ;Help for this switch MFCCheck, \ ;Check for MFC42U.DLL InstallCmdLine,\ ;Command Line install CmdLineCheckInstall,\ ;Make sure installion succeded. SecureDirectory,\ ;Secure our directory. PostSecureDirectory,\ ;Delete SCP path item DefFinish ;Display message to user Switch = ,%DefaultInstallHelp%,\ ;Help for this switch. MFCCheck,\ ;Check for MFC42U.DLL CheckForIE,\ ;Checks to make sure IE was installed DefPromptUser,\ ;Prompt user with install message. CheckMMCVer,\ ;Install MMC DefaultInstall,\ ;Copy SCE files and register the DLLS CmdLineCheckInstall,\ DefCheckInstallation,\ ;Make sure registration completed successfuly CheckForMMC,\ ;Makes sure MMC was installed SecureDirectory,\ ;Secure our directory. PostSecureDirectory,\ ;Delete SCP path item DefFinish ;Tell the user we finished successfuly ;Alpha check the version of MFC42U.DLL [MFCCheck.NTAlpha] ; Reverse version check. FileCheck = %11%\MFC42U.DLL,==4.21.0.7022,%IncompatibleFileVersion%,FC_VERTRUE_END ; Install command line only [InstallCmdLine] PreInstallPrompt = %InstallQuestionCmd% FileCheck = %11%\WLDAP32.DLL,>=5.0,%FileNotFound% CopyFiles = CmdLineCopy,InfCopy,SceTemplatesCopy,AcluiHelpCopy Addreg = MMCReg PostRunApp = PostSetupCmdSection ; Make sure command line was installed correctly. [CmdLineCheckInstall] RegCheck = HKLM,Software\Microsoft\Windows Nt\CurrentVersion\Secedit,,,,%SetupNotComplete% FileCheck =%11%\SceDLL.dll,,%SetupNotCompleteFile% FileCheck =%11%\secedit.exe,,%SetupNotCompleteFile% ; Check for the version of the MMC file, if it's later then do nothing. [CheckMMCVer] FileCheck =if( %11%\MMC.EXE,>5.00.1713.1 ) == SETUP_NORMAL,END,RUN(InstallMMCOnly) ; Prompt user to install MMC. [InstallMMCOnly] InstallPrompt = %InstallMMCQ%,,MB_YESNOCANCEL|MB_ICONQUESTION InstallPrompt = %InstallMMCWarn%,,MB_OK|MB_ICONEXCLMATION PostRunApp = RunMMC ;Make sure IE is installed. [CheckForIE] FileCheck = %11%\WLDAP32.DLL,,%WrongIEVersion% FileCheck = %11%\SHLWAPI.DLL,,%WrongIEVersion% FileCheck = %11%\URLMON.DLL,,%WrongIEVersion% FileCheck = %11%\WININET.DLL,,%WrongIEVersion% ;Default installation prompt [DefPromptUser] PreInstallPrompt = %InstallQuestionDef% ;Make sure MMC was installed. [CheckForMMC] RegCheck = HKLM,Software\Microsoft\MMC,,,,%MMCNotInstalled% ; i386 Install everything [b][DefaultInstall] CopyFiles = CmdLineCopy, SceTemplatesCopy, WinSysCopy, InfCopy, ,AcluiHelpCopy RegisterDll = RegisterDLLSection Addreg = MMCReg[/b] ; Alpha install. ;[DefaultInstall.NTAlpha] ; CopyFiles = CmdLineCopyNTAlpha, SceTemplatesCopy, WinSysCopy, InfCopy, ,AcluiHelpCopy ; RegisterDll = RegisterDLLSection ; Addreg = MMCReg ;Make sure our reg key exists. [DefCheckInstallation] RegCheck = HKLM,Software\Microsoft\MMC\SnapIns\{803E14A0-B4FB-11D0-A0D0-00A0C90F574B},,,,%SetupNotCompleteMMC% ; Success ful message [DefFinish] PostInstallPrompt = %FinishMessage% ; Directory Creation area, and where to copy. [DestinationDirs] ; SCE stuff. SceDirCopy=25, Security SceTemplatesCopy = 25, Security\Templates WinSysCopy=11, CmdLineCopy=11 InfCopy=25, Inf AclUiHelpCopy=25,help ; Install MMC [RunMMC.NTx86] IMMC.EXE [RunMMC.NTAlpha] AMMC.EXE ; Secure out directoies and registry keys. [PostSecureDirectory] DelReg = DelRegSecEdit PostRunApp = DeleteSetupSAD [SecureDirectory] FileCheck = %11%\scedll.dll,,%FileNotFound% FileCheck = %11%\secedit.exe,,%FileNotFound% PostRunApp = RunSecureDirectory [RunSecureDirectory] secedit.exe /configure /areas FILESTORE REGKEYS /cfg .\scesetup.inf /db %25%\security\database\scesetup.sdb /overwrite [DeleteSetupSAD] del /F /Q %25%\security\database\scesetup.sdb [RegisterDLLSection] %11%\Scedll.dll %11%\wsecedit.dll ; If the register section didn't work, then we'll do this instead. [PostSetupCmdSection] regsvr32.exe %11%\scedll.dll /s regsvr32.exe %11%\wsecedit.dll /s [MMCPostSetupCmdSection] regsvr32.exe %11%\mmcndmgr.dll /s regsvr32.exe %11%\hhctrl.ocx /s regsvr32.exe %11%\itss.dll /s regsvr32.exe %11%\itircl.dll /s ; BEGIN Register section [MMCreg] HKCR,.msc,,2,mscfile HKCR,mscfile\shell\open\command,,,"%11%\MMC.EXE ""%%1""" HKCR,Clsid\%CLSID_RSHX_NTFS%,,,%DESCRIPTION% HKCR,Clsid\%CLSID_RSHX_NTFS%\InProcServer32,,,%MODULENAME% HKCR,Clsid\%CLSID_RSHX_NTFS%\InProcServer32,"ThreadingModel",,Apartment HKCR,*\%SHEXPS%\%CLSID_RSHX_NTFS%,,, HKCR,Drive\%SHEXPS%\%CLSID_RSHX_NTFS%,,, HKCR,Directory\%SHEXPS%\%CLSID_RSHX_NTFS%,,, HKCR,Clsid\%CLSID_BRIEFCASE%\%SHEXPS%\%CLSID_RSHX_NTFS%,,, [DelRegSecEdit] HKLM,Software\Microsoft\Windows Nt\CurrentVersion\Secedit,DefaultProfile HKLM,Software\Microsoft\Windows Nt\CurrentVersion\Secedit,TemplateUsed ; END Registr section ; BEGIN Copy Files sections ; Template files to %windir%\security\templates [AclUiHelpCopy] Aclui.hlp,,,32 [SceTemplatesCopy] securws4.inf,,,32 securdc4.inf,,,32 basicwk4.inf,,,32 basicsv4.inf,,,32 basicdc4.inf,,,32 compws4.inf,,,32 compdc4.inf,,,32 hisecws4.inf,,,32 hisecdc4.inf,,,32 off97sr1.inf,,,32 ; Win sys copy to %windir%\system32 [CmdLineCopy] ; Sec edit. SeCEdit.exe,,,32 scedll.dll,,,32 Aclui.dll,,,32 Rshx32_5.dll,,,32 ; Jet enjine esent.dll,,,32 esentprf.dll,,,32 esentutl.exe,,,32 ; ACL editor dlls. [CmdLineCopyNTAlpha] ; Sec edit. SeCEdit.exe,,,32 scedll.dll,,,32 ; ACL editor dlls. Aclui.dll,,,32 Rshx32_5.dll,,,32 ; Jet enjine esent.dll,,,32 esentprf.dll,,,32 esentutl.exe,,,32 mfc42u.dll,,,32 [WinSysCopy] ; Secedit Executables. wsecedit.dll,,,32 [InfCopy] SCEregvl.inf,,,32 ; String declartions [Strings] WrongNTVersion="You must install Microsoft Windows NT 4.0 or greater." WrongNTServicePack="You must install Microsoft Windows NT 4.0 Service Pack 4." WrongIEVersion="You must install Microsoft Internet Explorer 3.0 or greater." LogonAsAdmin="You must be logged on as adminitrator." SCETITLE="Microsoft Windows NT Security Configuration Manager" DISKTITLE="Microsoft Windows NT Service Pack 4 CD" FinishMessage="Setup completed successfully." InstallCmdLineHelp="Install command line tools only." InstallMMCOnlyHelp="Install MMC only." MMCNotInstalled="You must install Microsoft Management." DefaultInstallHelp="Default installation installs the UI and command line tools." MODULENAME=rshx32_5.dll DESCRIPTION=Security Shell Extension SHEXPS=shellex\PropertySheetHandlers InstallQuestionDef="Install Microsoft Windows NT Security Configuration Editor - Full install?" InstallQuestionCmd="Install Microsoft Windows NT Security Configuration Editor - Command line tool only?" CLSID_RSHX_NTFS={1f2e5c40-9550-11ce-99d2-00aa006e086c} CLSID_BRIEFCASE={85BBD920-42A0-1069-A2E4-08002B30309D} InstallMMCQ="Would you like to Install Microsoft Management Console?" InstallMMCWarn="This portion of setup may request that you reboot your computer. Please reboot the computer and run setup again if you are asked to do so." SetupNotCompleteFile="MSSCE did not complete successfully. File '%0' not found." SetupNotComplete="Setup did not complete successfully! Please run setup again" SetupNotCompleteMMC="Microsoft Management console was not found. Please run setup again and install Microsoft Manage Console." IncompatibleFileVersion="'%0' is incompatible with Security Configuration Editor. Please install a compatible version before installing Security Configuration Editor. Setup aborting" Can anyone tell from that which files from the archive are actually required? If not, I can copy the archive into a folder during unattended install and have cmdlines extract it before using the rundll command (then delete the folder). Or is there a way to include all of this in an installer or addon so that rundll32 finds setup.inf and any of the other files it needs? Thanks for the very good information. I learn something new here everyday. Ray

Rut roh. That didn't work. I can run it from a command prompt, can't I? I was experimenting to see which files it really needs. I placed all of the program's files in a folder on my desktop and wrote a one-line cmd file containing only the line posted above (with the last filename.inf replaced by SETUP.INF). It's in the same folder so paths shouldn't be a problem.The command prompt opens, the command is issued, and all I get is the very informative message "Installation failed." I even tried with a full path to setup.inf. I guess this wasn't as obvious as I thought. Ray

Martin, my friend, you seem to have all the answers. At least to my questions. Help me understand what this does, though. I assume that you somehow know to run RUNDLL32 and have it execute what's in the INSTALLHINFSECTION portion of SETUPAPI(.DLL?), right? I'll take that much as a given, but I have no idea how you determined to do that. Did you decide to use that because of something about setup.inf or is this just a generic way to install an inf? Are DEFAULTINSTALL and 128 parameters you are passing to rundll32 or are they specific to setup.inf? Then, of course, there's SETUP.INF which is the file I need to install. I can see a DefaultInstall label inside of setup.inf, so I'm guessing your command is telling runndll32 setupapi to execute the defaultinstall portion (and ONLY that portion?) of setup.inf. Does this need to be included in some kind of installer? The Microsoft exe file contains eight files and a folder, at least some of which is needed to complete the installation. I'm thinking I can make an addon including all of those files and tell Addon Maker to execute your command line. I'll have to try that this evening. Otherwise, I'm not sure what to do with all of the files that go along with setup.inf. You are certainly a wealth of information, Martin. Thanks for your help once again. Ray BTW, when I install this manually, I get an error message that unknown versions of files are present but before I can respond to that, I get another message asking to reboot the system for the change to take effect. Rebooting clears the error message and it doesn't return later. I'm sure the file error is due to the fact that these are not XP Home files and that I'm using them in a bastardized way. Is there a way to suppress or cancel that message so I can continue my unattended installation? Because it needs to be followed by a reboot, I assume it should be run from cmdlines at T-12. I can experiment with that, but if the same error shows up I expect it will interrupt my installation.