Dinny

Hiya, I haven't tried it myself yet but the following info is in a Microsoft doc called "Post-Setup Security Updates" If you do new installations of a version of Windows Server 2003 that includes a service pack by using an unattended-setup script and you want to suppress Post-Setup Security Updates, you can do one of the following: 1) Explicitly enable or disable Windows Firewall in your script. This change automatically suppresses Post-Setup Security Updates. 2) Allow the installation process to automatically enable Windows Firewall, but suppress Post-Setup Security Updates by adding the following entry to your cmdlines.txt file: "reg import <Test.reg>" where <Test.Reg> contains: Windows Registry Editor Version 5.00 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ServerOOBE] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ServerOOBE\SecurityOOBE] "DontLaunchSecurityOOBE"=dword:00000000 Hope this helps Dinny