HickoryShade

My customized xpsp2 has the firewall disabled, security center service disabled and I have reset all the IE zones to default. I'm using Landesk to push XPSP2 out and have it runonce. When the user boots up in the morning it takes about an hour for it to complete the install. Prior to using Landesk we would disable McAfee and perform the install via a cd within 20min's...Question: Since this is a runonce does any other service(s) start while the install is happening? And if so how would I be able to disable it prior to the install? TIA!!!

I have been unsuccessful in creating a batch file that will execute: M:\SETUP.EXE /settings "M:\FILES\SETUP\OXPNoMed.ini" I'm albe to run the above mentioned line under start/run but have been unsuccessful in creating a batch file that I can push to remote machines.....Any insight would be helpful.... TIA!!

I have created a batch file to create/add registry enteries prior to an Adobe 7 install. The batch file and application work but the registry enteries do not show up in HKEY_CURRENT_USER rather they show up in HKEY_USERS. Some of the registry tweaks are not functional but if I run the registry enteries manual it adds the correct entries to HKEY_CURRENT_USER and everything works. Do I need to make dual enteries to incorporate HKEY_USERS? TIA!!

Thank you all....Especially to Yzöwl!! Your post was the way to go This is how it looks now: @ECHO OFF :START IF EXIST C:\WINNT\Installer\kb887978.exe GOTO :EOF COPY G:\XXXXXXX\New\kb887978.exe "C:\WINNT\Installer\" START "" /w C:\WINNT\Installer\kb887978.exe /q:a GOTO :EOF Peace Out....

Thanks for your post.....The batch file copies the file over but it does not want to install the file. There is no visible sign that 1) an install is happening or 2) that it actually installed. The KB887978 does require some interaction from the user. Would this cause the batch file not to install the file? Peace...

Not really sure if this can be done. I Need to deploy the Security Update for Word 2002 KB887978 as a login batch file. This is what I have so far: @ECHO OFF :START IF EXIST C:\WINNT\Installer\kb887978.exe GOTO END COPY G:\XXXXXXX\New\kb887978.exe "C:\WINNT\Installer\kb887978.exe" /-Y START /r /w C:\WINNT\Installer\kb887978.exe ECHO :END It needs to be copied from a network drive and saved/installed and bypassed the next time the user logins. But I have not had much success running this batch file. Any insight on this matter would be greatly appreciated. Peace.....

This is an office debate that is currently being played out. It all has to do with disabling the Security Center, Firewall, Antivirus & Securing IE6 On the one side of the debate the mindset is to run only the following registry entries: [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wscsvc] "Start"=dword:00000004 [HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile] "EnableFirewall"=dword:00000000 [HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\StandardProfile] "EnableFirewall"=dword:00000000 On the other side of the coin the mindset is to run these registry entries: [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wscsvc] "Start"=dword:00000004 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center] "AntiVirusOverride"=dword:00000001 "FirewallOverride"=dword:00000001 "FirewallDisableNotify"=dword:00000001 "AntiVirusDisableNotify"=dword:00000001 "UpdatesDisableNotify"=dword:00000001 [HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile] "EnableFirewall"=dword:00000000 [HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\StandardProfile] "EnableFirewall"=dword:00000000 [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1] "CurrentLevel"=dword:00010500 [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2] "CurrentLevel"=dword:00010000 [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3] "CurrentLevel"=dword:00011000 [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4] "CurrentLevel"=dword:00012000 [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\InformationBar] "FirstTime"=dword:00000000 Are there any added benefits with running the additional registry entries? What side do you fall on if the objective is to disable the Security Center, Firewall, Antivirus & Secure IE6?

What is the difference between the default XPSP2 IE6 Security settings (which is neither "Custom Level" nor "Default Level") verses the recommended "Default Level"? Meaning, after a fresh install of IE6 or an upgrade navigate to the internet options/security tab. It is recommend that I use the "Default Level" for all the zones. After comparing a machine that was using the "Default Level" to a fresh install I could not determine the difference when navigating through all the options of Java, ActiveX so on. I guess my question really is how much additional security would you achieve by choosing the recommended "Default Level" verses just leaving it alone?

No, not on already running system and not an all in one cd with XP Pro with a customized SP2. Just a customized SP2 on a cd and nothing else. Peace Out.....

If there is no way to "deintegrate" SP2 from a slipstream cd is there another way customize SP2 prior to an install?

I have created a slipstream XP Pro with a tailored SP2 that is bootable using nlite without error. I would like to extract only the tailored SP2 from the slipstream XP Pro cd and burn to a separate cd. Meaning, at the end of the day I would like to have a customized SP2 on cd not an all in one XP Pro with a customized SP2. If there is an easier way to facilitate this please explain or list site link for further research. Any insight would be very helpful. With Peace, HickoryShade