fdv

i replace both, yes. i guess this is correct. crypto only appears in the services in xp or higher, not in win2k. it is moderated by svchost though so i think... it's not possible to disable it completely. From documentation: The public key enabled applications and services. These are IIS, IPSec, smart card logon, EFS, Internet Explorer, Outlook, and Outlook Express. These components interact with each other, and they make use of the cryptographic security services. Some of them also perform key management. They are all standards-based and can interoperate with non-Microsoft entities. They obtain the keys or certificates they need from their own user's or host's store, Active Directory, and Exchange. The thing is, how come there seems to be no crypto problems on an FDV install... my files eliminate IIS, smart card logon (IIRC, maybe not, I don't remember), IE, Outlook, and OE. IPSec and EFS are left alone I think.. right? well, anyway... I see that the way to adjust settings and import certificates is with IE. I have never had a problem and I haven't used IE in Windows 2000 since 2001. when i double click on certmgr.msc, i get "the certificate stores could not be enumerated. the system cannot find the file specified." i click OK and the "certificates" box comes up, with nothing in it. selecting Action then Find Certificates results in the same error.

okay, no photoshop necessary. BDANT.cab - same file contents in both old and new. dxnt.cab - same file contents in both old and new. New DX9 Redistributable the notes do NOT include windows 2000, but the INF installer has a win2000 section. the "new" dxsetup.exe also runs fine on win2k. WOW... Tomcat76, yeah, this is a MESS. Wow. this is in the december redistributable. so, you guys are saying that this really is necessary for some games? the release notes make it sound like very little is to be gained anyway...

absolutely. it works primarily in conjunction with the protected files list in SFCFILES. i routinely do this on installs and it works perfectly. apparently it will not influcence SFC. But here is what happens (supposedly!) when you disable the Crypto Services: http://support.microsoft.com/default.aspx?...kb;EN-US;822798 what i can't figure out is that this service does not appear in my list so i guess i am not looking hard enough. i am attaching my auto services, where is it? i dont have it in my list at all by default (it is not in the inactive services either). i think so... SFC checks all the time to see if a file gets replaced. crypto services is called on when an installer wants to make sure a file is signed. once a file is installed, can you delete the CAT file? and leave crypto alone? i am going to rename my SP4.CAT right now and see what sort of things occur in the next few days.

based on what i see, correct me tomcat crash and oleg, but all we HFSLIPpers need to do is re-download the redistributable (and put the same CABs into the folder they're already in). i am not clear that HFSLIP needs to change, we all just need to update our DX9 source files.

i will do a VM test of disabling the crypto services. i wonder if it will matter if i disable and then install software, or if i have software installed already and then disable it. i'll also look for a regkey to shut it off at installation and see what that does at some point. more later.

this is good info. i agree that if it's just wasted space, 5 megs is good to recover. what about the driver checking setting? DriverSigningPolicy=Ignore in WINNT.SIF? if that's off, are CAT entries in INF files not references? anyone know? also, there is no INF for SP4.CAB. what do you make of that? okay here is another weird thing. i keep a folder of all of the INF files, expanded, on my HDD so i can do fast searches without having to expand them all the time. i did a search for "CatalogFile" and only one hit came up... and it was commented out in the file. <digs deeper> okay. here is the list of CAT files from SYSSETUP. NT5INF.CAT, 1 NT5.CAT NT5PRTX.CAT NT5IIS.CAT MAPIMIG.CAT CJIME.CAT DTCSETUP.CAT FP4.CAT IMS.CAT MQEXCHNG.CAT PHIME.CAT PYIME.CAT SCRDBCAT.CAT HPCRDP.CAT MW770.CAT IASNT4.CAT SP4.CAT just playing around, i took one, PYIME.CAT, and Googled. I got the following CLSID (thought I could have from the CAT directory, but anyway, stay with me here) I got F750E6C3-38EE-11D1-85E5-00C04FC295EE so i opened the registry and this was at: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography\Providers\Trust\CertCheck\ which i guess is known, probably, but i find no other use for this IME file on my system. so, what happens if i delete all of the keys under CertCheck? why is it that Trusted Root Certification Authorities was only accessable via IE? and if IE is gone... the DLLs like WINTRUST are still there, but i am wondering, are they junk without IE? or might they be used by something else? i think it's time to find DEPENDS.EXE and see if any ofthe crypto DLLs are referenced in the kernel files like NTOSKRNL and others...

Microsoft's attitude on fixing IE in Windows 2000 Ahhh, Microsoft. always looking forward to new customers and never looking backward to assuaging angry users. they post an entry in the ie blog that they're going to use firefox's rss icon. whoopadeedoo! i asked them to fix PNG transparency in 6. some id*** tells me they've promised that (they haven't). Why not head over to the ie blog now and then and ask them to "Fix Six!" you'll be marked offtopic, but maybe enough yelling will snap them out of their "Wow! We Picked A NEW ICON!!! OMG !!1!!11ELEVEN" attitude. Oleg_II - http://www.vorck.com/data/sp5files.zip the last beta became the new set Squeeto - only one open with, sorry man... don't know... Defrag - don't know what you mean by 'link to this,' but the files for defrag can be removed by commenting out dfrg.inf under the [infs.Always] section in SYSSETUP.IN_. to clarify what i did was move all of the files from TXTSETUP into the dfrg.inf file so that it no longer installs automatically. before, if you commented it out, it would still install. now, if it's commented out, it won't. Ohhhh yeah. WWWeb, you guys employ a tech writer as an admin? isn't that asking for trouble when this person has to reboot her HOUSE to fix a problem!?

the kernel fills those keys, not explorer. in any case, explorexp is not an explorer replacement. you'd have to use an entirely new shell. which is pretty severe IMHO just to delete the windows tracking data and not even guaranteed these data collection keys are not really widely publicized and i don't think anyone has tried a new shell and reported / posted the results on the internet of what happens to the data collection regkeys. mru_kill is a kludge definately. if anyone know C++ or some way to make an EXE to just delete these keys, that would be a lot better -- mru_kill is 62kb, way too much for what it does! a targeted EXE would probably be about 1kb. i'll see if john howell of datafreak is interested, he created the fake IEXPLORE for us. as for two open withs -- odd because my system does not have two (i assume you mean the INF file?) or do you mean the defrag MSC file? (i can't check, i am at work and i use perfect disk here and uninstalled the windows default defragger, which i was always hesitant to do but finally convinced after everyone in this forum pretty much convinced me that the default windows defrag program really is not very good.

Allrightie, the guest list is small! That's okay, we'll raise a glass and toast Oleg and os2fan2 TommyP, saugatak - Tuesday, December 28th TommyP, you post the location

dirtwarrior, I don't really understand your post. My fileset is drag and drop into i386 and you're done. anyway, the last test set is now the sp5 set. i will update documentation later in it, but if you grabbed the last test set you have the latest ver. my thanks to all who contributed in this thread. as always, the goal is to make windows 2000 less foolish looking and less of a resource hog while taking out IE. the goal is not necessarily to add tweaks (there are other ways to accomplish that) nor is the goal to shrink windows down to 1 megabyte (because removing too much would make it useless -- the fileset has a HUGE international audience, and it has to be useful to ALL of these folks from lots of countries). changes / fixes in this fileset, listed no matter how minor: - APCOMPAT.INF removed. No longer used at all. - ACCESSOR.INF removed. No longer used at all. - Help files removed - wordpad and converters removed - POSIX subsystem removed - OS/2 is gone by default now. I have not created an OS/2 INF installer. - Added my own SHELL.INF to replace all of that garbage MS put in the start menu. - Reference to hticons commented out of HIVECLS.INF - DFRG.INF has been rewritten to install the Defragger separately (not installed by TXTSETUP any more) so it's easy to remove - MSHTML.INF has been rewritten to install MS HTML and Help system - AU.INF has been rewritten to install auto update, but you have to install MSHTML.INF - Add/remove windows components, IExpress, and RASPhone have all been added to Start menu. - A new util that deletes the contents of two data storage reg keys, MRU_KILL.EXE, is added to the startup group*. - QuickLaunch has been restored, and so has "Show Desktop." - Paint and Calc and Sound volume are all installed by default, with no user choice (this was the popular consensus for these.) Wallpaper bitmaps, mouse pointers, clipboard, packager and other such things are not installed anymore. - DTC and COM are removed. Use ADD_COM.BAT to add them back. - The dummy IEXPLORE.EXE is copied into Program Files\Internet Explorer. A shortcut to it is now created in the Quick Launch directory. This program will launch the browser of your choice. To reset the browser path for this dummy program, find and delete the value in the following key: HKEY_CURRENT_USER\Software\datafreak\dummy\path IEXPLORE.EXE dummy file is Copyright Johnathan Howell of datafreak.org. * mru_kill.exe is simply an INF that deletes registry keys that store a bunch of data on you. See more info on this at http://www.velasco.com.br/explorer_spy.txt

hi guys, sorry, redownload the test set (url on previous page i think) it should fix this file not found bug. also i put 'show desktop' in the quicklaunch. if it works i might as well take the blue "e" out... anyway, still want to optionalize the defragger and html subsystems. thanks squeeto and oleg for checking this test set out. i know its taking forever but glad everyone's been patient

Oleg_II, as Mr. TP points out, I can't CAB the files. I am not sure what the solution is to the problem / situation you mention, as running EXPAND on any file ending in _ will still work. In other words, my files as far as Windows thinks are compressed (at 0%). Also, I'll look into placing mru into startup. How is this, at the end of SHELL.INF? [mru_killer] Name ="MRU Eraser" CmdLine =11,,mru_kill.exe SubDir ="StartupCommon" IconPath =11,,mru_kill.exe InfoTip ="Deletes Most Recently Used items and empties data collection Reg keys." Did not ultimately use Gosh's version. tweakui has a 'delete ALL histories' function, set it once and you're all set. Also, hers included settings for programs that with the exception of winrar and media player are somewhat rare. So, mine uses pretty much the stuff not covered already by either tweakui or Gosh's file. Squeeto, give me that reg in INF format and I'll put it in, but commented... it would confuse n00bs and veterans alike, so I will add it in but you'd have to uncomment it. test set updated ( www.vorck.com/data/test-set.zip ). Some registry bugs fixed in IE.IN_, notepad added to QL, mru_kill added to startup (I think).

Oleg_II, thanks, added the edits to shell Squeeto, logo contest is for HFSLIP somewhere around here there's an URL with the Photoshop elements, such as Exroydal the Wizard, etc. I am just waiting on optionalizing defragger and html subsystem and then i'll issue the new fileset, which had maybe 4 fixes. BTW yes indeed the IE shortcut is needed to create the QL dir, Oleg_ii... i will put in another shortcut in addition but i am tempted to leave the ie shortcut which i can probably be talked out of.

kalo, as Oleg_II points out and I just wanted to confirm, many* of the hotfixes do not really need to be slipstreamed if you use my fileset. * I did an analysis before the Post SP4 Rollup came out of the hotfixes that existed to that point. I found IIRC that about 6 or 7 of about 25 were really necessary. The rest were in place to address problems related to exploits when the Microsoft HTML subsystem allowed malicious code to cross from the Internet Zone to the Local Zone. I do recommend getting all of the files: 1. just to make your life easy 2. in case you ever want to make a fully patched Win2k with IE because you have no choice (say, for a cousin who wants/needs to run sh*tware that requires IE, like Symanton's ViruSpyware Popup SuperProtect 2006, with a new "Make A Pentium 4 Run Like a 286!" feature. And although I say it elsewhere, if you run with my fileset, do NOT bother with IE6. You could, it is possible, but then again so is eating pennies, robbing a bank with a written note, or dating three women at the same time. The shell is less responsive with IE6 when using my fileset, and has a bug where "Open Containing Folder" in a set of Search results does nothing (sounds trivial, but after one week you'll be ready to reinstall).

CATfile installation (AFAIK, CAT files are simply installed) does not in my findings take all that long. They are not registered, just dumped into a directory. If SFC is off, CAT checking / referencing is off. I tried an install once without ANY and it bombed. I put back NT5INF.CAT, 1 and SP4 and it seemed to go okay but did not appreciably faster. What does take so long is the long list of DLLs in SYSSETUP.IN_. You know, Windows will attempt to register a file for up to 60 seconds and only then give up if it fails (not counting when it can't find a file). BTW, the site linked to in Oleg_II's post has a post in it by someone who removes components after installation and he has occasionally shown up in the nLite forum. Although he was late to the party by several years, he wants Windows component removal to be his "own." He is anti-nLite and poormouths people like us in this forum for a variety of reasons (including alleging in some forums at one point that a certain prominent MSFN'er is a plagiarist -- hopefully he took all that down). I won't get into who he is or great details because I obey MSFN rules, but his info is misleading and I advise people to steer clear of him and his forums.

New ver up. I'll let tommy explain what's what, but this feature has been implemented pretty much as you read in this thread (xpsp1, 2k3 no sp)

Hey folks, HFSLIP holiday party in New Jersey... So far we've got FDV, tommyp and saugatak coming. We know most folks are international, but we wanted to announce it so everyone could see it -- if you'll be in northern NJ from the 26th -30th, somewhere in there we'll be meeting (where, we don't know yet) probably in a low-key setting like a bar for a few eggnogs and whatnot. (Then, I go to my in-laws, Saug visits his family, and tommyp goes back to finishing his antimatter device.)

hey oleg_ii, what i want to do is to optionalize defrag and mshtml INF installers. they would be called from SYSOC and Add/Remove Windows Components would have them. i know how to do it, i am just busy... maybe it's not as easy as i think? anyway, after that, i'm replacing the old set with the new set, and want to thank everyone for contributing so much debugging and know-how...

saugatak - actually, although i joke a lot, this is for real we'll be doing this between xmas and new years, some night 26th through 30th, what is best for everyone? three so far -- tommyp, fdv and saugatak, who else B) (although it will probably be a low-key affair in a pub, i will admit) squeeto - thanks, that was FAST! p.s. to everyone 2,248 downloads of hfslip last month.

saugatak - yes, this is to add defragger to Add/Remove Windows Components. crash & burn - yeah, you're right about the 99 pages thing, i think its time to start a new thread. about the autologon thing. squeeto - i have to admit, i never noticed the scrollbars on the CMD being gone. i do miss them. anyone know why they went away <LOL> i should know but i have no idea... okay anyone up for an hfslip holiday party? probably in northern new jersey. late december. this should give you all notice to buy your plane tickets

This week's challenge. Ok gents, try this one on for size. It's pretty easy I just want help doing it as I got roped into designing a new website for a local business and have been really devoting time to that. (Aside: you know one of the biggest reasons I hate IE? It can't display the alpha channel in a PNG file. All I need is transparency dam*it) One of my Italian readers, and I think a non-MSFN'er, rewrote one of his own adaptations of my defrag INF to an optional component for SYSOC. Seems such an obvious thing to do, but I never thought of it. Add/Remove Windows Components would have it -- a nice feature I think. I think it would be great for not only the DFRG.IN_, but also the winhtml.inf. I will codebox this contributor's defrag INF that he adapted. It's Italian and I'd like mine adapted the same way (don't worry about commenting things). Thanks for having a look gentlemen (and os2fan2) [Version] signature="$Windows NT$" ClassGUID={00000000-0000-0000-0000-000000000000} SetupClass=Base LayoutFile=layout.inf [DestinationDirs] DefragCopyFilesSys = 11 [Optional Components] Defrag [Defrag] OptionDesc = %DEFRAG_SNAPIN% Tip = %DEFRAG_Infotip% IconIndex = 33 ;where are the icons? Parent = AccessUtil CopyFiles = DefragCopyFilesSys AddReg = DF.AddReg ;RegisterDlls = DefragRegister ;not working? ProfileItems = DefragUninstallItems,DefragInstallItems Uninstall = DefragUninstall Modes = 0,1,2,3 SizeApproximation = 419392 [DefragUninstall] DelFiles = DefragCopyFilesSys DelReg = DF.AddReg ;UnregisterDlls = DefragRegister ;not working? ProfileItems = DefragUninstallItems,DefragUninstallItemsCommon [DefragCopyFilesSys] dfrg.msc dfrgfat.exe dfrgntfs.exe dfrgres.dll dfrgsnap.dll dfrgui.dll [DefragRegister] 11,,dfrgsnap.dll,1 11,,dfrgui.dll,1 [DF.AddReg] HKLM,"SOFTWARE\Microsoft\Dfrg","FreeSpaceErrorLevel",0x00000000,"15" HKLM,"SOFTWARE\Microsoft\Dfrg","PathName",0x00020000,"%systemroot%\system32" HKLM,"SOFTWARE\Microsoft\Dfrg","ResourceDllName",0x00020000,"%systemroot%\system32\DfrgRes.dll" HKCR,"CLSID\{80EE4901-33A8-11d1-A213-0080C88593A5}","",0x00000000,"%DEFRAG_NTFS_CLASS%" HKCR,"CLSID\{80EE4901-33A8-11d1-A213-0080C88593A5}\LocalServer32","",0x00000000,"DfrgNtfs.exe" HKCR,"CLSID\{80EE4902-33A8-11d1-A213-0080C88593A5}","",0x00000000,"%DEFRAG_FAT_CLASS%" HKCR,"CLSID\{80EE4902-33A8-11d1-A213-0080C88593A5}\LocalServer32","",0x00000000,"DfrgFat.exe" HKLM,"SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MyComputer\DefragPath",,0x00000010 HKLM,"SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MyComputer\DefragPath","",0x00020000,"%systemroot%\system32\dfrg.msc %c:" [DefragInstallItems] Name = %DEFRAG_SNAPIN% CmdLine = 11,, dfrg.msc SubDir = %SystemTools_GROUP% WorkingDir = 11 InfoTip = %DEFRAG_Infotip% IconPath = 11,,DfrgRes.dll IconIndex = 0 [DefragUninstallItems] Name = %DEFRAG_SNAPIN% SubDir = %SystemTools_GROUP%,0x00000003 [DefragUninstallItemsCommon] Name = %DEFRAG_SNAPIN% SubDir = %SystemTools_GROUP%,0x00000002 [Strings] DEFRAG_SNAPIN="Utilità di deframmentazione dischi" DEFRAG_PROVIDER="Microsoft Corp., Executive Software International" DEFRAG_Infotip = "Deframmenta i volumi per rendere il computer più veloce ed efficiente." SystemTools_GROUP = "Accessori\Utilità di sistema" DEFRAG_NTFS_CLASS="Modulo Defrag NTFS" DEFRAG_FAT_CLASS="Modulo Defrag FAT"

as far as anyone has been able to tell, x-pert is the only one who ever gets those errors! thanks tommyp for the suggested fix btw. i'll look at hfslipwu.inf to check on how best to register files.

Alternate -- would this work for you oleg_ii? HKLM,Software\Microsoft\Windows\CurrentVersion\RunOnceRunOnce","01",,"%11%\regsvr32 /s %11%\txfaux.dll" HKLM,Software\Microsoft\Windows\CurrentVersion\RunOnceRunOnce","02",,"%11%\regsvr32 /s %11%\es.dll" HKLM,Software\Microsoft\Windows\CurrentVersion\RunOnceRunOnce","03",,"%11%\regsvr32 /s %11%\wbem\msiprov.dll" HKLM,Software\Microsoft\Windows\CurrentVersion\RunOnceRunOnce","04",,"%11%\regsvr32 /s %10%\apppatch\slayerui.dll"

ah dang it, always some hitch, huh. allright i will move file registration elsewhere and see if i get any issues, thanks for reporting on this one. thought i had it fixed. okay someone check mister fred vorck here please. according to this and this, the following should be valid: [file.reg] 11,txfaux.dll,1 11,es.dll,1 11,wbem\msiprov.dll,1 10,apppatch\slayerui.dll,1 yes? no? file attachment on msfn not working, for whatever reason. so i updated the test set. the only file change was IE.IN_ (another file has a new date too but that has no new edits). This file is here www.vorck.com/data/IE.IN_

i had nt4 transaction server which had sp3 built in. i manually copied over files from hotfixes. oh my. see, i had no choice. i had old hardware that nt worked on, but not win2k / xp / whatever. after one month of twiddling, i had a very unstable winnt 4 with many sp5 and sp6a and hotfix files that i immediately had to apply sp6a and the hotfixes to anyway to achieve stability. my own personal feeling: i agree with you, too much trouble.