abbodi1406

Scroll towards the end of the archived ryanvm link he posted above, and you will find link for BuildEnviroment.7z

How would have skipped Spectre/Meltdown patches when all Security Only Updates include ntoskrnl.exe?

UpdRoots process the files based on the parameters not filename, e.g. if you run updroots.exe delroots.sst it will add the certificates not delete them Usage: UpdRoots [options] <SrcStoreFilename> Options are: -h - This message -d - Delete (default is to add) -l - Local Machine (default is Third Party) -u - Add to disallowed root store based on some checking, updroots.sst contain certificates that can be downloaded separately from WU (manually or using CertUtil –generateSSTFromWU), e.g. http://ctldl.windowsupdate.com/msdownload/update/v3/static/trustedr/en/8F43288AD272F3103B6FB1428485EA3014C0BCFE.crt authroots.sst certificates are not downloadable separately from WU

KB930916 does not exist for XP x64 there are many updates that replace KB930627 and take place, e.g. KB2876331 or KB3069392 you can find all windowsupdate (public and custom support) links for Windows XP x64 Edition here https://msfn.org/board/index.php?showtopic=182599

Usually for Vista and Win7, it's enough to change wuauserv ServiceDll registry to point to modified file (e.g. wuaueng2.dll)

This page now provide the SHA-2 signed dotnetfx35.exe (it's signed since July 2021, but the server timestamp for the file is February 2022) https://dotnet.microsoft.com/en-us/download/dotnet-framework/net35-sp1 they also signed the inner installers (exe, msi, msp..), but the content is still the same old dotnetfx35.exe

Adding g_sconsumersite manually to fe2.update url (to open MU site) prevent the redirection loop with www.update url http://fe2.update.microsoft.com/microsoftupdate/v6/default.aspx?ln=en&g_sconsumersite=1 the site opens in Win 7 / 8.1 too (not that it would work)

What files are missing from the full .Net 3.5 offline installer? you can build .NET 3.0 SP2 installer manually from dotnetfx35.exe https://docs.microsoft.com/en-us/archive/blogs/astebner/creating-an-administrative-install-point-for-the-net-framework-2-0-sp1 https://docs.microsoft.com/en-us/archive/blogs/astebner/creating-an-administrative-install-point-for-the-net-framework-3-0-sp1 those guide are for SP1, but works the same for SP2 similar guide https://docs.bmc.com/docs/ServerAutomation/89/deploying-net-653397308.html FYI, standalone installer for .NET 3.0 SP2 actually exist, but it's not directly acquirable you can find it within the VS 2008 bootstrapper packages https://docs.microsoft.com/en-us/archive/blogs/astebner/vs-bootstrapper-packages-for-net-framework-2-0-sp2-and-3-0-sp2-available-for-download click on Download location to get packages_setup.exe then extract adtbs_sp2oob.cab/adtbs_sp2oob.msi then use lessmsi to extract adtbs_sp2oob.msi or install the whole package and find the installers under C:\Program Files\BootstrapperPackages

https://msfn.org/board/topic/182599-nt-5x-windows-update-urls-dump-inc-custom-support-updates/

@Boss Did you verify the new certificate is properly trusted? i.e. check authroot.stl signature and you may need to redo steps in https://support.microsoft.com/en-us/topic/3acf0348-0f81-7c79-7029-a7c6c861cdfc

@Boss based on picture 6, parent "Microsoft Root Certificate Authority 2010" is not properly trusted in your os http://www.microsoft.com/pki/certs/MicRooCerAut_2010-06-23.crt CertUtil -addstore Root MicRooCerAut_2010-06-23.crt

@mockingbird Are you sure the msp files from the corresponding loc updates did not replace KB4504738/KB4504702/KB4493218 files in Updates folder? i mean these updates, you should only extract the language msp file from them: msoloc2010-kb2956076-fullfile-x86-glb.exe powerpointloc2010-kb4092435-fullfile-x86-glb.exe wordloc2010-kb4461625-fullfile-x86-glb.exe KB4011610 is provided as text file that contain the download links you should choose and download the right file per Office language (e.g. eqnedt322010-kb4011610-fullfile-x86-en-us.exe) KB3001652 is VC runtime (similar to VC++ redists), it's not actual update for Office 2010 itself

https://aka.ms/framework-sha1-retirement

Hence the description "Custom Support Updates", AKA internally for paid companies it had been known for years that XP SP3 got those custom unpublished updates, but now we know that W2k and W2k3 got them too custom updates for W2k started in 2014-06, at the same time when the custom support program started for XP SP3 the links are public, the updates are not blocked for installation, what would be suspicious?

Might be another bummer for XP Microsoft to use SHA-2 exclusively starting May 9, 2021 KB5003341: Issues you might encounter when SHA-1 Trusted Root Certificate Authority expires

Quick observation: - Some of Window 2000 custom updates were included in the discontinued Security Release ISO Images - Windows Server 2003 custom updates are not blocked for Windows XP x64 (i didn't check all) even the known blocked update KB2926765 has a custom variant which is not blocked - IE for Server 2003 x86 got only two custom updates, but for Server 2003 x64 it got many (latest is 2019-09 KB4516046) - Windows XP SP3 x86 last custom updates were for 2019-02 (not taking public KB4500331 into account) there are none for 2019-03/2019-04 (they didn't create them or i could not get them) - Windows XP SP3 x86 custom updates eventually are the same as the equivalent embedded updates, with few exceptions: custom KB3092627 is not available for embedded (replaced by KB4493790 anyway) custom KB4025409 is equivalent to the first embedded KB4025409 (2017/06), which contain WLDAP32.dll 5.1.2600.7294 and adamdsa.dll/adambsrv_xp.dll custom KB4035382 is equivalent to the second embedded KB4025409 (2017/07), which contain only WLDAP32.dll 5.1.2600.7313 * some embedded updates have no custom equivalent: few IE updates, including the latest for IE6/7/8 DST and Timezones updates RDP KB3020338 IME KB2991963 v2 of KB4089453 and KB4487085 TLS 1.2 updates KB4019276, KB4459091, KB4467770 2019-03/2019-04 updates * embedded-custom updates are ment for XP Embedded (XPe), but they work the same as other embedded updates: IE7 updates, up to the latest KB4480965 (2019-01) JScript/VBScript 5.7 updates, up to the latest KB3169659

- Windows NT 5.x family windowsupdate.com links for available languages, including all (any?) Custom Support Updates - The updates links are grouped for each build, slightly sorted, and ordered lexicographically per update number or file name as possible - Superseded (replaced) updates are not filtered or excluded - The dump is available as csv files containing updates name and url, or plain text files containing updates url - It's recommended to use CSVFileView to check the csv files https://www.nirsoft.net/utils/csv_file_view.html - You can filter or extract updates for certain language using findstr (Vista or 7) e.g. findstr /i \-enu NT_5.2.3790-x64-Custom.csv > NT_5.2.3790-x64-Custom-enu.csv however, few update have different language identifier or none, so it's best to review the whole file first - NT_5.1.2600-x86-SP2-Custom and NT_5.1.2600-x86-SP2-Custom-IE are ment for the EOS Windows XP SP2 x86 only - NT5-ia64 is for Itanium-based Server 2003 / Windows XP - .NET Framework packs and updates for NT 5.1/5.2 are in a separate list files, likewise Windows Media Player and some eXtra updates # P.S. Maybe it's best not to post the links explicitly in the forum replies or text sites (pastebin, txtuploader..), and share them in the txt/csv files # Download https://gitlab.com/stdout12/adns/uploads/9ca06a12dd08c06edd889e65afa637fa/NT5_WU_URLs_csv.7z https://gitlab.com/stdout12/adns/uploads/33fcfd0b0f6c1a0cb74472cb8407800d/NT5_WU_URLs_txt.7z

Updates with name KB24286772010* are special and not applicable for all, KB2428677 is a private paid hotfix related to some enterrise Add-ins

No, it only download latest applicable updates, none of them is superseded Updates folder containing osetup.dll/ose.exe + SP2 files + post SP2 files for 32-bit en-us will be ~ 1 GB SP2 + updates files for Project/Visio ~ 255 MB

I wish i saw this topic eariler, i would have recommended to try WHDownloader program (you can find at majorgeeks or softpedia) a downloader for Windows and Office updates, including 2010 it require .NET 4.x after running it, press on the upper left blue arrow to download update lists, then choose Office2010-x86 all updates are post SP2 if you don't want to use the program, you can check this text file which contain download links for the updates https://dl.dropboxusercontent.com/s/ryxbk6ef9cfimd5/Office2010-x86.txt https://dl.dropboxusercontent.com/s/cq3k8prbzd9pnus/Office2010-x64.txt most are exe files format, and the rest are in cab files format (because they removed old exe links from download center) for some multilingual updates, the links are for other text files that contain detailed links for each language to update or create Office 2010 ISO with SP2 + post-SP2 updates: - you don't need any SP1 files, so you can remove them from Updates folder if exist - download SP2, and extract the file pointing to Updates folder, example: officesp2010-kb2687455-fullfile-x86-en-us.exe /extract:"C:\Office2010\Updates" /quiet - optional: delete the extracted xml files, not needed you can also delete most proof-xx-xx.msp files for language you don't have, leaving only main lang + companion proofing langs - mandatory: rename all SP2 files adding pre_ prefix, example: pre_clientshared64mui-en-us.msp pre_clientshared64ww-x-none.msp pre_clientsharedmui-en-us.msp pre_officesuitemui-en-us.msp pre_officesuiteww-x-none.msp pre_osamui-en-us.msp pre_proof-en-us.msp pre_proof-es-es.msp pre_proof-fr-fr.msp pre_proofing-en-us.msp pre_projectmui-en-us.msp pre_projectww-x-none.msp pre_visiomui-en-us.msp pre_visioww-x-none.msp - mandatory: add updated osetup.dll and ose.exe to Updates folder updated osetup.dll can be found inside: SP2 officesuiteww-x-none.msp or kb4022208 osetup-x-none.msp (newest) updated ose.exe can be found inside: SP2 officesuiteww-x-none.msp or kb4022206 ose-x-none.msp (newest) you can use 7-zip to extract the files - then, add post SP2 updates to Updates folder - Important note: for some products that have 2 updates each, one is neutral and the other is multilingual (Localizations) you only need the language msp file from multilingual update, the main msp file take it from neutral update example: wordloc2010-kb4461625-fullfile-x86-glb.exe word2010-kb4486740-fullfile-x86-glb.exe you need: wordintl-en-us.msp from wordloc2010-kb4461625 word-x-none.msp from word2010-kb4486740

https://www.mirrored.to/files/YMZZIJ58/

KB2990941 is the only single update that add NVMe support KB3087873 fixes issue afterwards, and KB2864202 as prerequisite Convenience Rollup KB3125574 replace them all

@max-h this installs 7.6.7600.256 for XP and Vista http://download.windowsupdate.com/windowsupdate/redist/standalone/7.6.7600.320/WindowsUpdateAgent-7.6-x64.exe http://download.windowsupdate.com/windowsupdate/redist/standalone/7.6.7600.320/WindowsUpdateAgent-7.6-x86.exe

TrustedInstaller is a service, and it own all OS components (files) the posted two tools provide a way to execute a program as System account with TrustedInstaller token = grant full permissions

https://github.com/mspaintmsi/superUser https://m2team.github.io/NSudo/