Jump to content

urgan

Member
  • Posts

    39
  • Joined

  • Last visited

  • Donations

    0.00 USD 
  • Country

    Portugal

Everything posted by urgan

  1. Actually, not quite true. You need an editor (notepad will do), a windows cd, and a way to create the hives. I've managed to do this, a bootable pe, with about 30mb. I've used perl to parse the infs and create the hives. Then I modified them (set a shell) with reg.exe. Using cdrtools, i created an iso wich booted. Just to prove it was possible to do without the OPK or BartPE. I've also modified the txtsetup.sif to lower ram requirements, ignore acpi and not load scsi drivers.
  2. Can't you use the bultin Administrator to auto logon and add the user as a standard one, running other installs and finally sysprep it ?
  3. @sintaxasn I'm a little late on this thread, but facing the same problem of the hdd controller drivers, we just added this: [Sysprep] BuildMassStorageSection= Yes to sysprep.inf, just before [sysprepMassStorage] section Before rebooting, sysprep adds the known drivers to the [sysprepMassStorage] section. Doesn't anyone else tried this, or had you ant issues with it ?
  4. Sorry, my bad, I just pasted the wrong name on my reply, I meant Incroyable HULK, of course.
  5. @gbmacman I've made two CD with SP2 with no issues (i've seen this error though) . Have you tried the integration switches ? I'm just curious, not sure if it helps at all. I remembered, Bilou_Gateaux provided a way to get it working, look it up on the 2k updates thread..
  6. Here you go, I think I got it in one of those sites that have all the resource kits tools. My understanding is if you have a legitimate license you can grab it from the net. Edit: Sorry, uploading doesn't seem to be working for me. Edit 2: where i got it cusrmgr.zip
  7. @army20 That's the list I was thinking, but now you got me curious. Does it work from a CD, how does it knows which have been used, by scanning the network ?
  8. @Incroyable HULK That's easy Where can I download the Windows 2000 Resource Kit tools? As for the updates, of course your method is valid, and easier to maintain. I just wanted to show in a more visible way (since it as in a subforum) what GreenMachine, Bilou_Gateux and me have found so far regarding 2000 updates, not that you modified the list just because we say it works better. Good work, the forum lacked this sticky long time now. The list windowsupdate gives can be optimized and improved upon, so the updates can be applied in "one shot" whithout getting any issues. It just takes a LOT of work reading and testing. I consider it a minimal security reference, and not the "ultimate state" of a windows instalation. If the thread doesn't grow too much, I can post here any relevant further improvement. take care,
  9. I think it's possible to use a list of names, and installs will use one at a time, but it requires a floppy. Why not a batch, using batpize.exe, that checks for a file on a network share, to change it afterwards ?
  10. Change to DefaultHide instead of FullUnattended in UnattendMode, and manually correct the name at instal time. it works for me.
  11. @vcBlackBox A few remarks on your 2000SP4 list. 1 - KB834707 can be replaced by KB873377 with success. Update rollup 873377 includes the cumulative security fixes in MS04-038 as well as hotfixes released since MS04-004. See KB 2 - KB839645 is superceded by KB841356 (in both XP too), see KB. 3 - KB828026 behaviour is fixed by KB832353 (all versions up to 9, in XP too) 4 - KB814078 should be replaced by "Windows Script 5.6 for Windows 2000 and XP" available here since it replaces the problematic jscript.dll 5.6.0.8513 by 5.6.0.8825. (Not tested with XP yet, where it gave me more problems) These are the findings on a problem myself, Bilou_Gateux and others have been working here These replacements work, I've tested a slipstreamed 2000SP4 today with 0 critical updates and verified it with hfnetchk, only got warning of version bigger than expected. It also works within svcpack, with a few tricks devised by the grat Bilou_Gateux. I'm replying here, so this info reaches more people who needs this info just in case you don't want to do these changes.
  12. Hi Bilou_Gateux, I feel a bit stupid, I somehow saw 5.6.0.6626 yesterday (maybe I had too many properties windows opened, or unpacked the wrong update). So do you think it's a good replacement then ? I know it sure makes sense, that's why brought the question earlier in this thread. I've Built a CD (by hand, not XPCreated) and it worked. no issues on hfnetchk, no critical updates in windowsupdate. Got two IE icons in quick launch bar, though. @GM Anything changed in IE packer, I mean should I drop IEGO.EXE as I think it runned twice ? If everything is working now, couldn't you do a sticky with this list of updates, svcpack, etc. At least untill you updates you site ? Great work, Bilou_Gateux (sorry i was calling you Bilou). I only want to solve the problem with 841356 without modifing the SP4 slipstreamed I386 source now. I was thinking, how about adding "d1=\I386\SVCPACK", putting correct "SHLWAPI.DL_" there, it should work ?
  13. n2it I suggest you also read thread too, where we discussed this same error. Like tguy said, post replys/questions where you think it's more relevant and easier to find for someone to find.
  14. On the other hand, most articles I found say the version installed by IE6 is the one vulnerable, and there was even a discussion here about jscript.dll. Also found out - an exploit here saying that 5.6.0.8513 is also vulnerable (another one ,since it's posterior to MS03-008?) - a post in microsoft.public.scripting.jscript here saying 5..6.8515 is the last build - and a clean 2000 sliptreamed with SP4 has 5.1.0.8513 So I guess if using IE6 one should apply the update anyway, since it changes it to a vulnerable version (unless it was patched by MS).
  15. @Bilou Sorry for the long answer. Regarding 814078 I'm guessing here: in IE6 SP1 (scripten.cab) the jscript.dll is 5.6.0.6626 with 589.874 bytes in KB814078 the jscript.dll is 5.6.0.8513 with 589.881 bytes On MS03-008, on "Additional information about this patch" says: "The fix for this issue will be included in Windows 2000 Service Pack 4 and Windows XP Service Pack 2.", even if it doesn't appear on SP4 fixes list. But, in the "Windows Script 5.6 for Windows 2000 and XP", available here: http://www.microsoft.com/downloads/details...&displaylang=en from September 2004, (a year later), with a package version 5.6.0.8825, jscript.dll is also 5.6.0.6626, like IE. Searching Microsoft Security Bulletins, for IE6 SP1,IE6 gold, 2000 SP4 or even Windows Script 5.1 doesn't bring this update. I know hfnetchk did mention it on vanilla 2000SP4 workstations, that's why I've used to include it in our "apply all critical updates" batch files, but since it brought us nothing but problems (hotmail, windowsupdate - sometimes having to reapply) i'm dropping it. On the other updates, I'm also checking what works for me, with a difference: since I like to have this "vaccine" batches, I don't really want to mess with the i386 source, just have a "plug-it" svcpack that can be adapted to be applied on live systems too. I'll keep you informed if I find out anything useful, but you are the one doing a great job.
  16. @Bilou Some 1 - I don't apply 814078 anymore and I get no indication of hfnetchk that is needed. I think (i'm not at my PC) the latest IE update installs a newer jscript.dll, and i'm still convinced the fact it appeared on windows update was a bug. 2 - Since you provided a fix for the 841356, I don't see the point in still applying the 839645, since MS04-037 replaces MS04-024 on all windows versions. 3 - I use 832353 instead of 828026, which is supposed to replace it, because we had some issues with it. @GreenMachine, RayM, anyone: I've it's possible to install IE6SP2 on XPSP1. Have any of you tried it ? Do you think it's possible to do it for 2000 ?
  17. @bilou Please clarify, are you still applying the js56nen update ? According to Microsoft Security Bulletin MS03-008, this update is already on SP4, that why it never get's applied. Do you know if using 839645 with 873377 causes the folder tree in explorer to stop working (I think I must regsvr32 some dll to fix this) ?
  18. Since wa are having the same problems with 2K, I ask: anyone used this update instead of 814078 and 318089 on windows 2000 ? It contains both updates, although jscript.dll is lower. Replys appreciated.
  19. Hi all, I looking for way to apply a set of commands to the context menu of a removable drive. I know how to do this to all drives, but there is probably a way to do this only to removable drives (DriveMask on HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Drive\shellex\FolderExtensions ) ? The objective ? Just use sysinternals sync and c'net deveject to flush ad eject usb pens whitout using the braindead "safely remove hardware - please keep clicking buttons and don't forget to close the windows when you're done" Something like: [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Drive\shell\myeject\command] @="cmd /k "sync -e -r %1"" But probably a batch since this way it uses the drive as the working dir. Anyone knows how to apply this only to removable drives, or even better, usb ones, whithout using a fancy vbscript ?
  20. I've seen this happen when identification was "outside" networking, as pthomas suggested, which is not your original case. leaving off the installdefaultcomponents, and mannualy specifying protocols, bindings and services. works for me, hope it helps [Networking] [Identification] JoinWorkgroup="Home" [NetAdapters] Adapter1=params.Adapter1 [Homenet] InternetConnectionFirewall = Adapter1 ShowTrayIcon = Yes [params.Adapter1] INFID=* [NetClients] MS_MSClient=params.MS_MSClient [NetBindings] Disable = "MS_PSched , Adapter1" ;Disable Qos [NetServices] ;MS_SERVER=params.MS_SERVER [NetProtocols] MS_TCPIP=params.MS_TCPIP params.MS_TCPIP] UseDomainNameDevolution=No EnableLMHosts=No AdapterSections=params.MS_TCPIP.Adapter1 DeadGWDetectDefault = No ;DNSDomain = "Your domain" ;DNSSuffixSearchOrder = "Your domain" DontAddDefaultGatewayDefault = No EnableICMPRedirect = No EnableSecurity = Yes [params.MS_TCPIP.Adapter1] SpecificTo=Adapter1 DHCP=No DisableDynamicUpdate = yes EnableAdapterDomainNameRegistration = No DefaultGateway = 192.168.200.2 DNSServerSearchOrder = 192.168.200.2 IPAddress = 192.168.200.4 NetBIOSOptions = 2 SubnetMask = 255.255.0.0 WINS = No ;WINSServerList = 192.168.200.2
  21. could it be the fact windows it's not installed directly on root folder and that brakes some code ? is your "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion" -> "SystemRoot" correctly set ?
  22. Seen something similar, not with 2003, and it had to do with the paths without drive letter. Suggest you try putting "C:\sys\whatever" instead. With the commas.
  23. [Branding] BrandIEUsingUnattended=Yes Do you have this ?
  24. urgan

    WGET & MD5

    Found a md5 checker under 6kb here if you still need one.
  25. urgan

    WGET & MD5

    Too late i guess, but found a "httpget" under 18k here Also has a tiny sha-160 checker.
×
×
  • Create New...