ahab

March 27, 2005

This page talks about them in OSX and this page by Symantec mentions this:

11. You cannot use the "-temphost" command-line feature to point LiveUpdate at a CD-ROM device.

I've tried /?, /h, /help, -?, -h, -help help files and googling with no results.

Anyone know of the swithces or any way to have the binary LUALL.exe tell me what it can take?

March 27, 2005

Have you thought about adding the microsoft baseline security analyzer to your cd and scripts?

Never thought about it, but I do like the idea. I'll look into this more.

what happens when a new hotfix comes out?

Yeah, I do have to edit it, but thats only once every few weeks. I'm going more for the quick & dirty approach right now, I do like your idea though. The "fancy" echos are there more for documentation than anything. Instead of REMing them I figured I'd just echo them.

As for your shutdown, in XP there is a fill called shutdown.exe, that you could use to force this, complete with a message stating it will happen and why.
e.g. shutdown.exe -r -f -t 60 -c "Windows XP will now restart in 1 minute..."

Sometimes after doing these updates I continue working on the computer for a while, i'd like something that would popup "Do you want to restart now?" The reminder at the end of the script will work for now.

Eventually I plan to have all machines on the network run this script from a mapped drive, then reboot if needed. Right now I'm lacking a server and the network still has some kinks to be worked out.

March 14, 2005

Now counts the number of updates that have been installed and tells you at the end.

The .NET framework and all updates are back in. .NET Framework Version 1.1, KB867460, KB886903

Updates to note:

- KB890830-V1.2 - This version stores its version as "F8327EEF-52AA-439A-9950-CE33CF0D4FDD". The script takes the ouput from REG QUERY and finds the "F832..." string in it. You can skip this update altogether, see this post

- I'm still not running the GDI detection tool, it does check to see if the registry value is there though.

Before I posted it here I didn't check if the update was already installed. Then I checked for a logfile of its install with "IF EXIST C:\WINDOWS\KB834707.log" Log files aren't always there, so at Takeshi's suggestion I started checking the registry.

REG EXPORT "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Updates\Windows XP\SP3\KB834707" %TEMP%check.reg
if %ERRORLEVEL% EQU 0 ( ECHO This one is installed ) ELSE (ECHO This one is not installed)

Thats not the most elegant, so again at Takeshi's suggestion I moved onto

REG QUERY "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Updates\Windows XP\SP3\KB834707" > nul 2>&1
if %ERRORLEVEL% EQU 0 ( ECHO This one is installed ) ELSE (ECHO This one is not installed)

I'd consider that nice & neat code.

Originally I turned off the System Restore Service and disabled System Restore in the registry. Didn't need to do both to prevent each update from making their own restore points. "REGEDIT /S sroff.reg" was ran before system restore service was stopped. "REGEDIT /S sron.reg" was ran before the service was started again, but after all the updates. This is sroff.reg:

Windows Registry Editor Version 5.00
;disable system restore
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRestore]
"DisableSR"=dword:00000001
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\sr]
"Start"=dword:00000004

and this is sron.reg

Windows Registry Editor Version 5.00
;enable system restore
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRestore]
"DisableSR"=dword:00000000
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\sr]
"Start"=dword:00000000

If you really want to use these .reg files (I see no reason to) you could modify the script accordingly.

Also changed the name of the restore point from "Automatic Restore Point" to "Updater Restore Point". Also, when you turn of the system restore service it does not delete the previous restore points. Good God you should see how many restore points my poor test install has.

March 11, 2005

@ECHO OFF
REG QUERY "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Updates\Windows XP\SP3\KB834707" > nul 2>&1
if %ERRORLEVEL% EQU 0 ( ECHO This one is installed ) ELSE (ECHO This one is not installed)

REG QUERY "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Updates\Windows XP\SP3\DOESNOTEXIST" > nul 2>&1
if %ERRORLEVEL% EQU 0 ( ECHO This one is installed ) ELSE (ECHO This one is not installed)

Just plain > nul would still spit out Error: The system was not able... if it was not able to find the registry key, hence the 2>&1. Seems to be the neatest way to do it. When I was working with REG EXPORT I was wanting to send it to /dev/null but didn't know of the windows equivalent.

That'll make things muuuch neater. Thanks Takeshi.

March 10, 2005

That website doesn't mention Reg query but it surely exists in Windows XP and seems to do what I have in mind.

Reg query is in WinXP... hmm... I only looked at the actual output of it, not the errorlevel that it would return, I suppose that would work. I'm thinking have it take the registry key, output it to a file. If the registry key is not there, the errorlevel is 1 and the following can be easily modified to install it

@ECHO off
REG EXPORT "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Updates\Windows XP\SP3\KB834707" %TEMP%check.reg
if %ERRORLEVEL% EQU 0 ( ECHO This one is installed ) ELSE (ECHO This one is not installed)

REG EXPORT "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Updates\Windows XP\SP3\DOESNOTEXIST" %TEMP%check.reg
if %ERRORLEVEL% EQU 0 ( ECHO This one is installed ) ELSE (ECHO This one is not installed)

course at the end of the batch file this check.reg would be deleted

I would use REG QUERY except it likes to display a lot of text that makes things ugly.

March 10, 2005

SUS or SMS would be prefered, believe me. Just not a possibility right now

WSH RegRead also does similar via VBS or JS.

I'm not too keen on getting that deep into windows scripting.

If the end-users don't delete the log files (or the Uninstall folders) then your script should do it. I'm just trying to find the best or most professional way to do it.

I wouldn't consider this really professional or anything, more or less a tool that I've found works well for what I want to do and figured I'd share. Any ideas for improving it that aren't too hard to code are welcome.

KB890830-V1.2 is now v1.3.

I'm only finding 1.2 (from March 8th) on MS's website.

After installing the last update, a restart is required.

Woo... rebooting after all this is done is something that I'd like to implement, but batch has its limitations and can't do that very pretty...

I suppose I should add

ECHO A reboot is strongly reccomended.
PAUSE

To the end of it.

Any other suggestions?

March 10, 2005

why not just use SUS or sms?
<{POST_SNAPBACK}>

with the network situation at work it probably took less time to write this script than to deploy either one of those.

March 10, 2005

I will double check that about system restore in the next few days.

I would much rather check the registry, but.... can't do that with the REG command (it can only compare what is actually in the registry) and regedit can only import or export reg keys. I could export a key, then compare it to a file but I'd rather not take that setp. (The Windows registry is not a strongpoint of mine). You might see this page.

I *could* check for uninstall information instead.

March 9, 2005

*bump* for a revision in the updates.

Anyone know how to do quiet installs of the .NET hotfixes? I know the .NET 1.0 framework takes:

dotnetfx.exe /q:a /c:"install /q

I've searched for the others and tried /? with no luck.

March 7, 2005

With a lot of help from this thread I put this together, its a bit more simplistic than some of the others.

Installing Updates From Local Disk

March 7, 2005

OK... so at work we've got a lot of computers, and not a lot of bandwidth. I've been doing various forms of this, but this is the first time that I've felt that it is publicly distributable. This is meant to be carried around on a CD and to be used on any Windows XP machine with SP2 installed.

What it does: Creates a system restore point. Turns off system restore to prevent each update from doing it individually. Checks if the updates are installed (checks for log files or an install folder) skips the update if it is installed and installs the update if it is lacking. Then it turns system restore back on.

First off we've got the main batch file. Call this whatever you want, it just has to end in .bat

@ECHO off
GOTO START

@author ahab
@version 4/15/5

:START

SET /A NUMOFUPDATES=0

ECHO Creating a System Restore point
createrestorepoint.vbs
NET STOP srservice

ECHO .NET Framework
REG QUERY "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\.NETFRAMEWORK" > nul 2>&1
IF %ERRORLEVEL% EQU 0 (
	ECHO is already installed
) ELSE (
	ECHO Installing...
	dotnetfx /q:a /c:"install /q"
	SET /A NUMOFUPDATES+=1
	ECHO Installation complete.
)

ECHO KB867460 .NET Framework 1.1 Service Pack 1
REG QUERY "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Updates\.NETFramework\1.1\S867460" > nul 2>&1
IF %ERRORLEVEL% EQU 0 (
	ECHO is already installed
) ELSE (
	ECHO Installing...
	NDP1.1sp1-KB867460-X86.exe /q
	SET /A NUMOFUPDATES+=1
	ECHO Installation complete.
)

ECHO KB886903 ASP.NET path validation vulnerability in Microsoft .NET
ECHO Framework 1.1 Service Pack 1
REG QUERY "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Updates\.NETFramework\1.1\M886903" > nul 2>&1
IF %ERRORLEVEL% EQU 0 (
	ECHO is already installed
) ELSE (
	ECHO Installing...
	NDP1.1sp1-KB886903-X86.exe /q
	SET /A NUMOFUPDATES+=1
	ECHO Installation complete.
)

ECHO KB890830-V1.3 Microsoft Windows Malicious Software Removal Tool V1.3
REG QUERY "HKLM\SOFTWARE\Microsoft\RemovalTools\MRT" /v "Version" | FIND "D89EBFD1-262C-4990-9927-5185FED1F261" > nul 2>&1
IF %ERRORLEVEL% EQU 0 (
	ECHO is already installed
) ELSE (
	ECHO Installing...
	Windows-KB890830-V1.3-ENU.exe /q
	SET /A NUMOFUPDATES+=1
	ECHO Installation complete.
)

ECHO KB873333 Vulnerability in OLE and COM could allow remote code execution
REG QUERY "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Updates\Windows XP\SP3\KB873333" > nul 2>&1
IF %ERRORLEVEL% EQU 0 (
	ECHO is already installed
) ELSE (
	ECHO Installing...
	WindowsXP-KB873333-x86-enu.exe /quiet /norestart
	SET /A NUMOFUPDATES+=1
	ECHO Installation complete.
)

ECHO KB873339 Vulnerability in HyperTerminal could allow code execution
REG QUERY "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Updates\Windows XP\SP3\KB873339" > nul 2>&1
IF %ERRORLEVEL% EQU 0 (
	ECHO is already installed
) ELSE (
	ECHO Installing...
	WindowsXP-KB873339-x86-enu.exe /quiet /norestart
	SET /A NUMOFUPDATES+=1
	ECHO Installation complete.
)

ECHO KB873374 Microsoft GDI+ Detection Tool
REM The following will just make it seem like it has been run
REG QUERY "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\GdiDetectionTool" > nul 2>&1
IF %ERRORLEVEL% EQU 0 (
	ECHO is already installed
) ELSE (
	ECHO Installing...
	REG ADD "HKLM\SOFTWARE\Microsoft\GdiDetectionTool" /v "GDITool" /t REG_DWORD /d "00000001" /f > nul 2>&1
	SET /A NUMOFUPDATES+=1
	ECHO Installation complete.
)

ECHO KB885250 Vulnerability in server message block could
ECHO allow remote code execution
REG QUERY "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Updates\Windows XP\SP3\KB885250" > nul 2>&1
IF %ERRORLEVEL% EQU 0 (
	ECHO is already installed
) ELSE (
	ECHO Installing...
	WindowsXP-KB885250-x86-enu.exe /quiet /norestart
	SET /A NUMOFUPDATES+=1
	ECHO Installation complete.
)

ECHO KB885835 Vulnerabilities in Windows Kernel and LSASS could allow
ECHO elevation of privilege
REG QUERY "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Updates\Windows XP\SP3\KB885835" > nul 2>&1
IF %ERRORLEVEL% EQU 0 (
	ECHO is already installed
) ELSE (
	ECHO Installing...
	WindowsXP-KB885835-x86-enu.exe /quiet /norestart
	SET /A NUMOFUPDATES+=1
	ECHO Installation complete.
)

ECHO KB885836 A vulnerability in WordPad could allow code execution
REG QUERY "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Updates\Windows XP\SP3\KB885836" > nul 2>&1
IF %ERRORLEVEL% EQU 0 (
	ECHO is already installed
) ELSE (
	ECHO Installing...
	WindowsXP-KB885836-x86-enu.exe /quiet /norestart
	SET /A NUMOFUPDATES+=1
	ECHO Installation complete.
)

ECHO KB886185 Critical Update for Windows XP
REG QUERY "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Updates\Windows XP\SP3\KB886185" > nul 2>&1
IF %ERRORLEVEL% EQU 0 (
	ECHO is already installed
) ELSE (
	ECHO Installing...
	WindowsXP-KB886185-x86-enu.exe /quiet /norestart
	SET /A NUMOFUPDATES+=1
	ECHO Installation complete.
)

ECHO KB887472 Security update to Microsoft Windows Messenger
REG QUERY "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Updates\Windows XP\SP3\KB887472" > nul 2>&1
IF %ERRORLEVEL% EQU 0 (
	ECHO is already installed
) ELSE (
	ECHO Installing...
	WindowsXP-KB887472-x86-enu.exe /quiet /norestart
	SET /A NUMOFUPDATES+=1
	ECHO Installation complete.
)

ECHO KB887742 Security update to Microsoft Windows Messenger
REG QUERY "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Updates\Windows XP\SP3\KB887742" > nul 2>&1
IF %ERRORLEVEL% EQU 0 (
	ECHO is already installed
) ELSE (
	ECHO Installing...
	WindowsXP-KB887742-x86-enu.exe /quiet /norestart
	SET /A NUMOFUPDATES+=1
	ECHO Installation complete.
)

ECHO KB887797 Cumulative Update for Outlook Express for Windows XP
REG QUERY "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Updates\Windows XP\SP3\KB887797" > nul 2>&1
IF %ERRORLEVEL% EQU 0 (
	ECHO is already installed
) ELSE (
	ECHO Installing...
	WindowsXP-KB887797-x86-enu.exe /quiet /norestart
	SET /A NUMOFUPDATES+=1
	ECHO Installation complete.
)

ECHO KB888113 Vulnerability in hyperlink object library could allow remote code
ECHO execution
REG QUERY "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Updates\Windows XP\SP3\KB888113" > nul 2>&1
IF %ERRORLEVEL% EQU 0 (
	ECHO is already installed
) ELSE (
	ECHO Installing...
	WindowsXP-KB888113-x86-enu.exe /quiet /norestart
	SET /A NUMOFUPDATES+=1
	ECHO Installation complete.
)

ECHO KB888302 Vulnerability in Windows could allow information disclosure
REG QUERY "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Updates\Windows XP\SP3\KB888302" > nul 2>&1
IF %ERRORLEVEL% EQU 0 (
	ECHO is already installed
) ELSE (
	ECHO Installing...
	WindowsXP-KB888302-x86-enu.exe /quiet /norestart
	SET /A NUMOFUPDATES+=1
	ECHO Installation complete.
)

ECHO KB890175 Vulnerability in HTML Help could allow code execution
REG QUERY "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Updates\Windows XP\SP3\KB890175" > nul 2>&1
IF %ERRORLEVEL% EQU 0 (
	ECHO is already installed
) ELSE (
	ECHO Installing...
	WindowsXP-KB890175-x86-enu.exe /quiet /norestart
	SET /A NUMOFUPDATES+=1
	ECHO Installation complete.
)

ECHO KB890859 Security Update for Windows XP
REG QUERY "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Updates\Windows XP\SP3\KB890859" > nul 2>&1
IF %ERRORLEVEL% EQU 0 (
	ECHO is already installed
) ELSE (
	ECHO Installing...
	WindowsXP-KB890859-x86-enu.exe /quiet /norestart
	SET /A NUMOFUPDATES+=1
	ECHO Installation complete.
)

ECHO KB890923 Cumulative Security Update for Internet Explorer
	REG QUERY "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Updates\Windows XP\SP3\KB890923" > nul 2>&1
IF %ERRORLEVEL% EQU 0 (
	ECHO is already installed
) ELSE (
	ECHO Installing...
	WindowsXP-KB890923-x86-enu.exe /quiet /norestart
	SET /A NUMOFUPDATES+=1
	ECHO Installation complete.
)

ECHO KB891781 Vulnerability in the DHTML editing component ActiveX control could
ECHO allow code execution
REG QUERY "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Updates\Windows XP\SP3\KB891781" > nul 2>&1
IF %ERRORLEVEL% EQU 0 (
	ECHO is already installed
) ELSE (
	ECHO Installing...
	WindowsXP-KB891781-x86-enu.exe /quiet /norestart
	SET /A NUMOFUPDATES+=1
	ECHO Installation complete.
)

ECHO KB893066 Security Update for Windows XP
REG QUERY "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Updates\Windows XP\SP3\KB893066" > nul 2>&1
IF %ERRORLEVEL% EQU 0 (
	ECHO is already installed
) ELSE (
	ECHO Installing...
	WindowsXP-KB893066-x86-enu.exe /quiet /norestart
	SET /A NUMOFUPDATES+=1
	ECHO Installation complete.
)

ECHO KB893086 Security Update for Windows XP
REG QUERY "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Updates\Windows XP\SP3\KB893086" > nul 2>&1
IF %ERRORLEVEL% EQU 0 (
	ECHO is already installed
) ELSE (
	ECHO Installing...
	WindowsXP-KB893086-x86-enu.exe /quiet /norestart
	SET /A NUMOFUPDATES+=1
	ECHO Installation complete.
)

ECHO KB893803 Microsoft Windows Installer 3.1
REG QUERY "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Updates\Windows XP\SP3\KB893803" > nul 2>&1
IF %ERRORLEVEL% EQU 0 (
	ECHO is already installed
) ELSE (
	ECHO Installing...
	WindowsInstaller-KB893803-x86.exe /quiet /norestart
	SET /A NUMOFUPDATES+=1
	ECHO Installation complete.
)

NET START srservice

ECHO The updater script has completed. %NUMOFUPDATES% installed.
IF %NUMOFUPDATES% GTR 0 ECHO A reboot is reccomended.
PAUSE

You probably noticed createrestorepoint.vbs. Thats a visual basic script that does what it says... the following goes into that file

'Unattended System Restore Point
'sysrestorepoint.vbs
'© Doug Knox - rev 02/11/2002
'Downloaded from www.dougknox.com 
'Extracted from original code by Bill James - www.billsway.com
'Modified even more by ahab

Set sr = getobject("winmgmts:\\.\root\default:Systemrestore")

If (sr.createrestorepoint("Updater Restore Point", 0, 100)) <> 0 Then
    MsgBox "Restore Point creation Failed!"
End If

A lot of help from HOTFIXES: Win2000 SP4 – WinXP SP1 – WinXP SP2.

And here are the links to download all the updates:

.NET Framework Version 1.1

For future refrence here are the updates that actually make a restore point: KB891781, KB890175, KB888302, KB888113, KB887797, KB887472 (last known accurate 3/8/5)

And the scripts that I have posted above are attached in a .zip file. Just Extract the .zip file and download all the updates to the directory that the scripts are in, run the .bat and you're set.

It does not include WMP 10. I know this. I might add that in the future... but not now.

Changelog:

3/6/5 - Fist major release

3/8/5 - Added malicious software removal 1.2, and removed anything that refrenced .net as anything besides the 1.1 install was broken. I'll try and add that later... but its not needed right now. The .NET package included these three:.NET Framework Version 1.1 KB867460 KB886903. I also added a bit in the malicious software detection from this post. I want that to actually run, unlike the GDI+ detection tool. You can change that by just putting REM infront of what you want to don't want to run.

3/13/5 See This post

Comments? Concerns? Sarcastic remarks?

Updates.zip

December 7, 2004

control userpasswords2 - You might remember this from Windows 2000. Easiest way to have your account be passworded, but not have to type it at startup.

sol - Solitare. Why else would you install windows?

calc - faster to type this in than to go through the start menu

June 30, 2004

A RAM disk is basically a partition stored inside your system's memory that you can use like any other disk, except its contents are erased when your computer looses power.

http://www.thetechzone.com/articles/ram_drive/

http://bugclub.org/beginners/windows/RamDrive.html

June 27, 2004

HA HA! The n52 is a beautiful thing. I am now wasting time more efficiently than ever.

June 24, 2004

FIRST. MsDosInititated="0" SHOULD read
MsDosInitiated="0"

CURSES! CURSES! GAH!!

I think it was WINNTSIF.exe 2.0 that caused this.

June 24, 2004

1 partition on basic disks

except... I do like to stick a scratch partition on one of my fast drives if i can't dedicate a drive exclusively to it. Logfiles, tempfiles, downloads, caches all go here to help alleviate fragmentation on my other partitions. It gets cleaned out every week or so.

June 23, 2004

Just gotta install the TS server on a machine that is on the network. Only trouble you might run into is if you run the server and a client on the same computer.. I had headaches with that in the TS1 days, dunno if thats a prob anymore.

At LANs I don't like TS. I always prefered sitting next to my teamates and using slaps to the back of their head to communicate.

June 23, 2004

Try resetting the BIOS?

I built a machine with an Asrock mobo... scared me quite a bit then i realized it has a feature that is skips the POST completely, so if the BIOS is not configured right it does not boot.

June 23, 2004

I've enjoyed my Microsoft Strategic commander (SC) as a second keyboard for macros, but now I'm using Win2k3 and the two don't seem to want to mix. I do the software install, and once it is supposedly complete this error pops up:

Critical files are missing or corrupted.

Please UNPLUG THE DEVICE and reinstall the Strategic Commader

wonder if MS disabled something in the sidewinder software from running on a server... or something. They never updated the drivers, and never even had them available for download on their site. I've tried my own original CD, my backup, and a downloaded copy. No matter what I do neither Windows or the SC realize that the SC is plugged in.

Anyone know:

A: Any way I could get around using MS's drivers. (doubtful... but heyyyy....)

B: Could I possibly replace the SC with something like Belkin's Nostromo n52 and will it work with Win2k3.

C: Have you used or heard of success of game controllers and Win2k3?

edit: so... using some ancient 4 button controller and AutoHotkey I got some macros going. Something like a PS2 controller sitting on my desk won't work all that well... so I do think I will go with the n52.

June 23, 2004

Yes, passoworded.

Everythings logged in automatically, all passwords are remembered (and promptly forgotten) I'm the only user. More for interoperability's sake than anything.

Now work on the other hand... just about gotta put in a 10 char passwd with 4 classes in it to open a different webpage. *grumble grumble grumble*

June 22, 2004

I've tried Diskeeper and & O&O. I liked O&O much better. More methods of defragging, and the interface seemed less kludgy, diskeeper reminded me of win3.11.

Also worthy of note that win2k3 will require the server versions of each.

June 22, 2004

So... I did some dinking, and between this:

Add device manager to , mycomputer right click context menu

Windows Registry Editor Version 5.00

;Add device manager to , mycomputer right click context menu
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{20D04FE0-3AEA-1069-A2D8-08002B30309D}\shell\DevMgr]
@="Launch Device Manager"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{20D04FE0-3AEA-1069-A2D8-08002B30309D}\shell\DevMgr\command]
@="mmc.exe D:\\WINDOWS\\SYSTEM32\\devmgmt.msc"

and these common tweaks:

Windows Registry Editor Version 5.00

;TweakUI to Control Panel
[HKEY_CLASSES_ROOT\CLSID\{D14ED2E1-C75B-443c-BD7C-FC03B2F08C17}]
@="Tweak UI"
"InfoTip"="Starts the Tweak UI program which customizes advanced options in Windows"
[HKEY_CLASSES_ROOT\CLSID\{D14ED2E1-C75B-443c-BD7C-FC03B2F08C17}\DefaultIcon]
@="%SystemRoot%\\\\System32\\\\tweakui.exe,0"
[HKEY_CLASSES_ROOT\CLSID\{D14ED2E1-C75B-443c-BD7C-FC03B2F08C17}\Shell]
[HKEY_CLASSES_ROOT\CLSID\{D14ED2E1-C75B-443c-BD7C-FC03B2F08C17}\Shell\Open]
[HKEY_CLASSES_ROOT\CLSID\{D14ED2E1-C75B-443c-BD7C-FC03B2F08C17}\Shell\Open\command]
@="tweakui.exe"
[HKEY_CLASSES_ROOT\CLSID\{D14ED2E1-C75B-443c-BD7C-FC03B2F08C17}\ShellFolder]
"Attributes"=dword:00000030

;User Accounts 2 to Control Panel
[HKEY_CLASSES_ROOT\CLSID\{98641F47-8C25-4936-BEE4-C2CE1298969D}]
@="User Accounts 2"
"InfoTip"="Starts The Windows 2000 style User Accounts dialog"
[HKEY_CLASSES_ROOT\CLSID\{98641F47-8C25-4936-BEE4-C2CE1298969D}\DefaultIcon]
@="%SystemRoot%\\\\System32\\\\netplwiz.dll,0"
[HKEY_CLASSES_ROOT\CLSID\{98641F47-8C25-4936-BEE4-C2CE1298969D}\Shell]
[HKEY_CLASSES_ROOT\CLSID\{98641F47-8C25-4936-BEE4-C2CE1298969D}\Shell\Open]
[HKEY_CLASSES_ROOT\CLSID\{98641F47-8C25-4936-BEE4-C2CE1298969D}\Shell\Open\command]
@="Control Userpasswords2"

I threw this together:

Windows Registry Editor Version 5.00

;Add Device Manager To Control Panel
[HKEY_CLASSES_ROOT\CLSID\{98641F47-8C25-4936-BEE4-C2CE1298969E}]
@="Device Manager"
"InfoTip"="Manage hardware devices."
[HKEY_CLASSES_ROOT\CLSID\{98641F47-8C25-4936-BEE4-C2CE1298969E}\DefaultIcon]
@="C:\\\\Windows\\\\System32\\\\nusrmgr.cpl,1"
[HKEY_CLASSES_ROOT\CLSID\{98641F47-8C25-4936-BEE4-C2CE1298969E}\Shell]
[HKEY_CLASSES_ROOT\CLSID\{98641F47-8C25-4936-BEE4-C2CE1298969E}\Shell\Open]
[HKEY_CLASSES_ROOT\CLSID\{98641F47-8C25-4936-BEE4-C2CE1298969E}\Shell\Open\command]
@="mmc.exe C:\\\\Windows\\\\SYSTEM32\\\\devmgmt.msc"

Probably worth mentioning this topic: Common Command Console Utilities , The hidden stuff. and Commands for control panels. And this common tweak as well:

Windows Registry Editor Version 5.00

;This will add "Services" to the right-click menu of "My Computer"
[HKEY_CLASSES_ROOT\CLSID\{20D04FE0-3AEA-1069-A2D8-08002B30309D}\shell\services]
@=hex(2):53,00,65,00,72,00,76,00,69,00,63,00,65,00,73,00,00,00
"SuppressionPolicy"=dword:4000003c
[HKEY_CLASSES_ROOT\CLSID\{20D04FE0-3AEA-1069-A2D8-08002B30309D}\shell\services\command]
@=hex(2):25,00,77,00,69,00,6e,00,64,00,69,00,72,00,25,00,5c,00,73,00,79,00,73, 00,74,00,65,00,6d,00,33,00,32,00,5c,00,6d,00,6d,00,63,00,2e,00,65,00,78,00, 65,00,20,00,2f,00,73,00,20,00,25,00,53,00,79,00,73,00,74,00,65,00,6d,00,52, 00,6f,00,6f,00,74,00,25,00,5c,00,73,00,79,00,73,00,74,00,65,00,6d,00,33,00, 32,00,5c,00,73,00,65,00,72,00,76,00,69,00,63,00,65,00,73,00,2e,00,6d,00,73, 00,63,00,20,00,2f,00,73,00,00,00

I'm sure the icons for devmngr are not correct, I can't fix them right now as all my icons are FUBARed. Wanted to get this out there before I formatted to correct that and other problems.

June 22, 2004

oooo.....

Modified keys
HKEY_CURRENT_USER\AppEvents\Schemes\@
New: String: ".None"
Old: String: ".default"

is the important output from regsnap. With a bit of dinking with regedit (aka export key so I figure out how it fits together) we get:

[HKEY_CURRENT_USER\AppEvents\Schemes]
@=".None"

Thanks MCT

Time to have some fun.

June 22, 2004

Running Regshot I flipped some settings (set sounds to "none") and Regshot turned out this line:

HKU\S-1-5-21-2411764082-2413000449-1010155179-1003\AppEvents\Schemes\: ".None"

Will the "HKU\S-1-5-21-2411764082-2413000449-1010155179-1003\" limit it to this install or is it universal?

Suggestions for guides on how to familiarize yourself with the registry would also be appreciated... I'm not sure really where to start.

June 22, 2004

http://www.infoworld.com/article/04/03/08/...ergerman_1.html

http://www.washingtonpost.com/wp-dyn/artic...logy/techpolicy

http://news.zdnet.co.uk/internet/security/...39157444,00.htm

google: german spam sober worm

Sign In

ahab

Posts

Joined

Last visited

Donations

Country

Content Type

Profiles

Forums

Events

Posts posted by ahab

Running Symantec Liveupdate Silently

Installing Updates From Local Disk

Installing Updates From Local Disk

Installing Updates From Local Disk

Installing Updates From Local Disk

Installing Updates From Local Disk

Installing Updates From Local Disk

Installing Updates From Local Disk

Installing Updates From Local Disk

HOTFIXES: Windows XP SP2 & Windows 2000 SP4

Installing Updates From Local Disk

Over-looked utilities in XP uncovered

What is a RAM Disk

Win2k3 and game controllers

Help! - Setup Error!

Harddiscs : Basic or Dynamic?

Team Speak on LAN?

Is this PC-config unstabel ?

Win2k3 and game controllers

to passWord or not to passWord?

Whats the best Defragmentation Software

Registry Tweaks, Part-1

Will this apply to other installations?

Will this apply to other installations?

German E-mail Crap

Activity

Browse