HOWTO create a fully up to date XP x64 DVD (EoL Feb 2016)

[Kurt_Aust]

January 2013 updates

Deletions:

Hotfix\120-WindowsServer2003.WindowsXP-KB959426-x64-ENU.exe

Hotfix\460-msxml4-KB2721691-enu.exe

Hotfix\464-msxml6-KB2721693-enu-amd64.exe

Hotfix\480-WindowsServer2003.WindowsXP-KB2719985-x64-ENU.exe

Hotfix\516-WindowsServer2003.WindowsXP-KB2753842-x64-ENU.exe

RunOnce\NDP20SP2-KB979909-x64.exe

RunOnce\NDP20SP2-KB2604092-x64.exe

RunOnce\NDP20SP2-KB2656369-v2-x64.exe

RunOnce\NDP20SP2-KB2686828-x64.exe

RunOnce\NDP30SP2-KB982168-x64.exe

RunOnce\NDP30SP2-KB982524-x64.exe if installing .Net 4.0 RtM

RunOnce\NDP35SP1-KB982306-x64.exe

RunOnce\NDP40-KB2656368-v2-x64.exe

RunOnce\NDP40-KB2686827-x64.exe

Replacements:

# ▼. RunOnce\install_flash_player_11_active_x.exe .. . . . . . . . . . . . . . . 15,739,912 . Updated 8 January

@ . . . RunOnce\rvkroots.exe .. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 164,000 . Untrusted Certificate Store Updated 2 January

Additions:

@ . . . Hotfix\540-WindowsServer2003.WindowsXP-KB2753842-v2-x64-ENU.exe . 883,232 . MS12-078 - OpenType Compact Font Format

@ ▼ Hotfix\544-WindowsServer2003.WindowsXP-KB2757638-x64-ENU.exe . . 2,785,824 . MS13-002 - Microsoft XML Core Services 3.0

@ . . . Hotfix\548-msxml4-KB2758694-enu.exe .. . . . . . . . . . . . . . . . . . . . . . . 2,066,376 . Microsoft XML Core Services 4.0 SP3

@ . . . Hotfix\552-msxml6-KB2758696-enu-amd64.exe . . . . . . . . . . . . . . . . . . 1,889,752 . Microsoft XML Core Services 6.0 SP2

# ▼. RunOnce\NDP20SP2-KB2742596-x64.exe 20,742,168 . MS13-004 - 4 Vulnerabilities fixed

# ▼. RunOnce\NDP30SP2-KB2756918-x64.exe 38,960,168 . MS13-004 - 4 Vulnerabilities fixed

@ . . . RunOnce\NDP35SP1-KB2736416-x64.exe . 1,532,952 . MS13-007 - Open Data Protocol

@ . . . RunOnce\NDP40-KB2736428-x64.exe .. . . 2,324,448 . MS13-007 - Open Data Protocol

# ▼ RunOnce\NDP40-KB2742595-x64.exe .. . 13,309,984 . MS13-004 - 4 Vulnerabilities fixed

A bit late this month, a tad busy with other things. As one can see mostly .Net related changes this month, now if only Microsoft would put out updated installers that would vastly cut down both the size of the install media and the time taken to install (as .Net patches take forever to apply).

Edited January 16, 2013 by Kurt_Aust

[Explorer09]

Deletions:

RunOnce\NDP30SP2-KB982524-x64.exe

Wait a minute, Kurt_Aust, which updates replace KB982524? I didn't get it. My data shows that there are a few files in KB982524 that are not replaced.

[Kurt_Aust]

Internet Explorer critical update

# ▼. Hotfix\916-IE8-WindowsServer2003.WindowsXP-KB2799329-x64-ENU.exe 13,877,288 . MS13-008 - Objects in Memory

Also corrected status of .Net update KB982524 in previous post, obsolete if and only if one also installs .Net 4.0 RtM.

[Guest]

Wait a minute, Kurt_Aust, which updates replace KB982524? I didn't get it. My data shows that there are a few files in KB982524 that are not replaced.

I couldn't say. But after having tested Kurt_Aust's current .NET updates list (2.0 + 3.5 + 4.0) on a fresh install with my pack, I can say with certainty that as posted it satisfies the Microsoft Update website; no .NET updates are offered.

Edited January 16, 2013 by 5eraph

[Explorer09]

I couldn't say. But after having tested Kurt_Aust's current .NET updates list (2.0 + 3.5 + 4.0) on a fresh install with my pack, I can say with certainty that as posted it satisfies the Microsoft Update website; no .NET updates are offered.

Kurt_Aust has answered this:

KB982524, obsolete if and only if one also installs .Net 4.0 RtM.

You should already have known why I asked this question. Yes I don't use .NET 4.0, that's why.

[Kurt_Aust]

February 2013 updates

Deletions:

Hotfix\492-WindowsServer2003.WindowsXP-KB2724197-x64-ENU.exe

Hotfix\528-WindowsServer2003.WindowsXP-KB2779030-x64-ENU.exe

Hotfix\536-WindowsServer2003.WindowsXP-KB2779562-x64-ENU.exe

Hotfix\908-IE8-WindowsServer2003.WindowsXP-KB2544521-x64-ENU.exe

Hotfix\916-IE8-WindowsServer2003.WindowsXP-KB2799329-x64-ENU.exe

Hotfix\920-IE8-WindowsServer2003.WindowsXP-KB2761465-x64-ENU.exe

Replace:

# ▼. install_flash_player_11_active_x.exe .. . . . . . . . . . . . . . . 15,845,744 . Updated 12 February

Additions:

@ . . . Hotfix\556-WindowsServer2003.WindowsXP-KB2794119-x64-ENU.exe .. . . 718,368 . Time Zone - Cumulative

@ ▼ Hotfix\560-WindowsServer2003.WindowsXP-KB2778344-x64-ENU.exe . . 4,380,728 . MS13-016 - Kernel-Mode Drivers

# ▼. Hotfix\564-WindowsServer2003.WindowsXP-KB2799494-x64-ENU.exe . . 7,922,208 . MS13-017 - Kernel

@ ▼ Hotfix\568-WindowsServer2003.WindowsXP-KB2780091-x64-ENU.exe . . 3,377,720 . MS13-011 - Media Decompression

@ . . . Hotfix\908-IE8-WindowsServer2003.WindowsXP-KB2797052-x64-ENU.exe . 1,328,168 . MS13-010 - Vector Markup Language

# ▼. Hotfix\920-IE8-WindowsServer2003.WindowsXP-KB2792100-x64-ENU.exe 43,864,616 . MS13-009 - Cumulative Security Update

# ▼. RunOnce\NDP20SP2-KB2789643-x64.exe 11,963,400 . MS13-015 - XAML Browser Applications (XBAPs)

@ ▼. RunOnce\NDP40-KB2789642-x64.exe . . . 4,256,248 . MS13-015 - XAML Browser Applications (XBAPs)

One application install note - uTorrent now installs to the Administrator account (%AppData%) rather than Program Files, this has necessitated granting access to that one directory for all user accounts.

EDIT: Elite has noted that the latest versions of Foxit Reader come with adware so I've added a link to the FTP site and the silent install command for the last adware free version.

Edited February 16, 2013 by Kurt_Aust

[PCBONEZ]

Internet Explorer options. Replace the \Hotfix IE8 subgroup listed above with:

For Internet Explorer 8 using the original Microsoft installer (silent install), 1 new & 5 moved files:

It only lists 4 files to move....

Also there's an update to Flash Player 11 out. - It's 1024 more bits/bytes (or whatever they are) which makes the total wrong.

.

And BTW: Thanks!

.

[Kurt_Aust]

March updates

Deletion:

Hotfix\920-IE8-WindowsServer2003.WindowsXP-KB2792100-x64-ENU.exe

Replace:

# ▼. RunOnce\install_flash_player_11_active_x.exe .. . . . . . . . . . . . . . . 15,859,416 . Updated 12 March

Additions:

@ . . . Hotfix\572-WindowsServer2003.WindowsXP-KB2807986-x64-ENU.exe .. . . 689,208 . MS13-027 - Kernel-Mode Drivers

# ▼. Hotfix\920-IE8-WindowsServer2003.WindowsXP-KB2809289-x64-ENU.exe 43,882,616 . MS13-021 - Cumulative Security Update

PCBONEZ: I've corrected number of files to move for IE8 silent install (it dropped from 5 to 4 in February), as for Adobe flash player, this guide only updates monthly so if an update is released out of cycle it won't be included, that's why FlashCheck.bat asks you to ensure you have a later version if the expected size doesn't match.

Avast anti-virus and Comodo firewall both released new versions with a "modern/metro" style UI. Personally I don't care for it but wouldn't comment except that the latest version of Comodo breaks Deamon Tools, specifically DT can't see that the SPTD driver has been installed.

[Dogway]

Only a question, are all the listed hotfixes critical?

edit: sorry, high priority onwards right?

Edited April 6, 2013 by Dogway

[Dogway]

I analyzed your list, there are 2 hotfixes not added to your list but included on 5eraph's pack, should I add them?:

KB967715 — Windows Shell (AutoRun enforcement)

KB2510581 - JScript and VBScript Scripting Engines v5.7

Then, there are a bunch you added and not present on 5eraph's list, which makes me wonder because both lists are called as high priority only:

WindowsServer2003.WindowsXP-KB982316-x64-ENU.exe - Telephony Application Programming Interface (TAPI)

WindowsServer2003.WindowsXP-KB971314-x64-ENU.exe - PCL Inbox Printer Drivers

WindowsServer2003.WindowsXP-KB971029-x64-ENU.exe - Block AutoPlay on USB media

WindowsServer2003.WindowsXP-KB967723-x64-ENU.exe - TCP/IP

WindowsServer2003.WindowsXP-KB960803-x64-ENU.exe - Windows HTTP Services

WindowsServer2003.WindowsXP-KB960680-v2-x64-ENU.exe - Currency Symbols

WindowsServer2003.WindowsXP-KB956802-x64-ENU.exe - Graphics Device Interface (GDI)

WindowsServer2003.WindowsXP-KB955704-x64-ENU.exe - exFAT file system

WindowsServer2003.WindowsXP-KB955417-x64-ENU.exe - Don't trust the French with your secrets

WindowsServer2003.WindowsXP-KB952004-x64-ENU.exe - Distributed Transaction Coordinator (MSDTC)

WindowsServer2003.WindowsXP-KB950974-x64-ENU.exe - Event System

WindowsServer2003.WindowsXP-KB950762-x64-ENU.exe - Pragmatic General Multicast (PGM)

WindowsServer2003.WindowsXP-KB944043-v5-x64-ENU.exe - Server 2008 compatibility pack

WindowsServer2003.WindowsXP-KB936357-x64-ENU.exe - Intel CPU update, no effect on AMD CPUs

WindowsServer2003.WindowsXP-KB925876-v2-x64-ENU.exe - Remote Desktop Connection (Terminal Services Client 6.0)

WindowsServer2003.WindowsXP-KB925066-x64-ENU.exe - Distributed File System (DFS)

WindowsServer2003.WindowsXP-KB2794119-x64-ENU.exe - Time Zone - Cumulative

WindowsServer2003.WindowsXP-KB2661254-x64-ENU.exe - Minimum Certificate Key Length

WindowsServer2003.WindowsXP-KB2509553-x64-ENU.exe - DNS Resolution

WindowsServer2003.WindowsXP-KB2506212-x64-ENU.exe - Fax Cover Page Editor

WindowsServer2003.WindowsXP-KB2492386-x64-ENU.exe - Application Compatibility Update

WindowsServer2003.WindowsXP-KB2478960-x64-ENU.exe - Local Security Authority Subsystem Service (LSASS)

WindowsServer2003.WindowsXP-KB2360937-x64-ENU.exe - Local Procedure Call

WindowsServer2003.WindowsXP-KB2347290-x64-ENU.exe - Print Spooler Service

WindowsServer2003.WindowsXP-KB2264107-x64-ENU.exe - External Libraries Load Control

WindowsServer2003-KB942288-v4-x64.exe - Windows Installer 4.5

Windows-KB943729-x64-ENU.exe - Group Policy Preference Client Side Extensions

msxml6-KB2758696-enu-amd64.exe - Microsoft XML Core Services 6.0 SP2

msxml4-KB2758694-enu.exe - Microsoft XML Core Services 4.0 SP3

IMAPI_SRV2003_x64.exe - Blu-Ray image mastering support

[Guest]

Only a question, are all the listed hotfixes critical?

edit: sorry, high priority onwards right?

Was giving Kurt_Aust a chance to answer this, but since you brought me into it I'll answer with the following quote.

Optional items and groups are described in green (as are their security updates)

Now onto what I can answer...

[...] both lists are called as high priority only

I never say that:

[My] Update Pack satisfies, within reason, all high priority updates on the Microsoft Update website and includes some other useful updates.

This is the reason Kurt_Aust's list and mine do not match. Some additional updates I include supersede high priority updates, so I remove those updates from my high priority list.

I analyzed [Kurt_Aust's] list, there are 2 hotfixes not added [...] but included on 5eraph's pack, should I add them?:

KB967715 — Windows Shell (AutoRun enforcement)

KB2510581 - JScript and VBScript Scripting Engines v5.7

KB2510581 is on my list due to the inclusion of additional update KB955360. Otherwise, it is not needed.

Microsoft seems to have reclassified KB967715. It is no longer high priority (as in, offered as such on the Microsoft Update website). Kurt_Aust seems to have removed it from his list for this reason. The files included with the update have most recently been replaced by those in update KB2691442. I keep KB967715 because it adds the following registry entry that the website no longer checks:

HKLM,"Software\Microsoft\Windows\CurrentVersion\Policies\Explorer","HonorAutoRunSetting",0x10001,1

The choice to use KB967715 is up to you. I suppose I should move KB967715 to the Additional Updates list. Thanks for noticing the discrepancy.

Edited April 7, 2013 by 5eraph

[Dogway]

"Optional items and groups are described in green (as are their security updates)"

ok, ok! I'm using a dark style (using stylish addon here) and didn't notice the description color, only the @ green color.

I also failed on registering your "Additional Updates" as included Updates, by some reason I just thought you had included solely the first block. So I will do the recount again, and check differences, now that I realize you have included much more updates than Kurt. What I want to ask is how are "Optional Updates" dealt, do I need to edit any file for this?

Ok, here is the summary taking into account your Optional and additional updates (in comparison to Kurt_Aust's list):

The next hotfixes are not included in the 5er_UpdatePack:

KB950974 - Event System

KB950762 - Pragmatic General Multicast (PGM)

KB952004 - Distributed Transaction Coordinator (MSDTC)

KB956802 - Graphics Device Interface (GDI)

IMAPI_SRV2003_x64.exe

KB960803 - Windows HTTP Services

KB943729 - Group Policy Preference Client Side Extensions

KB967723 - TCP/IP

KB2347290 - Print Spooler Service

KB2360937 - Local Procedure Call

KB2478960 - Local Security Authority Subsystem Service (LSASS)

KB2509553 - DNS Resolution

KB2506212 - Fax Cover Page Editor

KB2794119 - Time Zone - Cumulative

Then I would do the opposite, list the hotfixes on 5eraph's pack not included on Kurt_Aust's list, but since they are the majority, for the Optional and Additional Updates I'll list only the few that are present, the rest are lacking:

Updates on 5eraph's pack lacking on Kurt's list:

KB967715 - Windows Shell (AutoRun enforcement) (* Already explained)

KB2510581 - JScript and VBScript Scripting Engines v5.7 (* Already explained)

From Optional and Additional, only the next are present, the rest are lacking in Kurt_Aust's list:

KB925876 — Remote Desktop Connection 6.0

KB931125 — Microsoft Root Certificates (December 2012)

KB971029 — AutoPlay

KB2492386 - Application Compatibility update (April 2011)

KB925066 — Volume Shadow Copy

KB936357 — Update.sys driver

KB942288 — Windows Installer 4.5

KB944043 — Windows 2008 read-only domain controller compatibility pack

KB955417 — Protected Storage

KB955704 — exFAT File System

KB960680 — Currency symbol update

KB971314 — Spooler Setup INF

KB982316 — Windows Telephony Server

KB2264107 - NT Layer DLL and WebDAV Mini-Redirector

KB2598845 - Compatibility View list update (October 25, 2011)

KB2661254 - Crypto API32

KB2758694 - Microsoft XML Core Services 4.0 SP3

KB2758696 - Microsoft XML Core Services 6.0 SP2

Edited April 7, 2013 by Dogway

[Guest]

how are "Optional Updates" [in 5eraph's update pack] dealt, do I need to edit any file for this?

All listed updates are included. There's no easy way to remove individual updates from the pack. Kurt_Aust's list offers much greater flexibility.

The next hotfixes [from Kurt_Aust's list] are not included in the 5er_UpdatePack:

[...]

I'll explain this list in numerical order here as it applies to update pack v2013-03_2:

• 
  

KB943729 — Replaced by additional update KB982051.
KB950762 — Replaced by additional update KB2028773. Also added to the update pack is the following registry entry suggested by KB961605:

HKLM,"SYSTEM\CurrentControlSet\Services\RMCAST\Parameters","MaxpacketSize",0x10001,0x400000

KB950974 — Replaced by additional update KB968447.
KB952004 — Replaced by additional update KB979919.
KB956802 — Replaced by additional update KB2279637.
KB960803 — Replaced by high priority update KB2638806. Kurt_Aust includes KB960803 because the Microsoft Update website erroneously checks for a specific registry entry related to it.
KB967723 — Replaced by additional update KB2309312. The following registry entries from KB967723 are kept in the update pack that are not included in the newer update:

HKLM,"SYSTEM\CurrentControlSet\Services\EventLog\System\Tcpip","EventMessageFile",0x00020000,"%SystemRoot%\System32\netevent.dll;%SystemRoot%\System32\ws03res.dll;%SystemRoot%\System32\w03a3409.dll"
HKLM,"SYSTEM\CurrentControlSet\Services\EventLog\System\Tcpip6","EventMessageFile",0x00020000,"%SystemRoot%\System32\netevent.dll;%SystemRoot%\System32\ws03res.dll;%SystemRoot%\System32\w03a3409.dll"

KB2347290 — Replaced by additional update KB2480118.
KB2360937 — Replaced by additional update KB2480093.
KB2478960 — Replaced by additional update KB2539164.
KB2506212 — Replaced by additional update KB2584577.
KB2509553 — Replaced by additional update KB2669182.
KB2794119 — Replaced by additional update KB2829069.
IMAPI_SRV2003_x64.exe — Included in the update pack as additional update KB952011.

From Optional and Additional, only the next [updates] are present, the rest are lacking in Kurt_Aust's list:

If a comment is to be made on this list, Kurt_Aust should be the one to do so.

Edited April 7, 2013 by 5eraph

[Dogway]

So cool, I was already leaning towards your pack for convenience, but maybe this helps Kurt_Aust to update his list, it's always nice to have a more flexible alternative. I applause your choice to leave out a few components (Search, etc), I can't tell what else would I have liked or not until I run a VM test. Malicious Software probably couldn't be needed since there are now Microsoft Security Essentials or much many thirds AV solutions.

Thanks for all the help.

[Guest]

You're welcome, and thanks for the compliment.

For clarification, Kurt_Aust's list serves a different purpose. He avoids request-only updates that Microsoft suggests may need more testing.

A supported hotfix is available from Microsoft. However, this hotfix is intended to correct only the problem that described in this article. Apply this hotfix only to systems that are experiencing the problem described in this article. This hotfix might receive additional testing. Therefore, if you are not severely affected by this problem, we recommend that you wait for the next software update that contains this hotfix.

Given that limitation, Kurt_Aust's list is just as current as mine according to the Microsoft Update website. More so when you realize he tracks .NET and third-party applications in addition to OS updates. My pack is more like a supplement to his list.

Edited April 7, 2013 by 5eraph