Guest Posted May 23, 2014 Share Posted May 23, 2014 (edited) monroe, the latest UDC is for the out-of-bound May 1st update, not May's patch tuesday since XP had no official updates released then since it was EOL. I'm not sure what I'm going to do with the UDC and site going forward except for updates like rvkroots.exe and time zone updates. Those I'll definitely add but the rest I'm thinking over as I don't want to run afoul of MS and risk losing the site. Edited May 23, 2014 by -X- Link to comment Share on other sites More sharing options...
Monroe Posted May 23, 2014 Share Posted May 23, 2014 (edited) -X- ... understand about not wanting lose the web site ... I just saw May 2014, even though it was May 1, 2014. I just compared KB numbers and they didn't match, which of course they wouldn't. I'm not even sure I will put any newer updates on my computer ... just stop with April unless there are Time Zone and rvkroots.exe updates. I will see what others are doing after April 2014. So Time Zone and rvkroots.exe might show up down the road? thanks ... Edited May 23, 2014 by monroe Link to comment Share on other sites More sharing options...
submix8c Posted May 23, 2014 Share Posted May 23, 2014 (edited) @monroe - You are misunderstanding. The "out-of-band" one still applies, thus the May 1, 2014 "updated" UDC (scoll down to bottom uf the Updates list -and- the Change Log at the bottom). This was the only one that MS has provided (thus far) after EOS specifically for XP (and others) since it was a BIIIIG issue applying to also IE6 and XP users screamed bloody murder. Use it!http://technet.microsoft.com/security/bulletin/ms14-021http://support.microsoft.com/kb/2964358 Now, as for the -others- (TZ and rvkroots), it may be up for debate. Note that 98SE had to have "Unofficial TZ Updates" and there is -no- "Unofficial RVKROOTS" at -all-. Anything else beyond what -X- has listed will undoubtedly (if ever) be "Unofficial" - AND have to be built (again!->) "on-the-fly" (as with the Windows Update Agent/WUA) and would -probably- have to be scripted as "optional" for the ease-of-comfort of the user of the UDC. HTH Note - in M$ eyes, EOS is... EOL (End-Of-Line...) so don't count on anything but "unofficial" (beyond May 1 fix). Edited May 23, 2014 by submix8c Link to comment Share on other sites More sharing options...
Guest Posted May 23, 2014 Share Posted May 23, 2014 The reason I'm absolutely sure on the rvkroots and TZ one is because they are just updates that add registry entries. Simple enough to make an add-on that adds registry entries. Link to comment Share on other sites More sharing options...
Guest Posted May 23, 2014 Share Posted May 23, 2014 (edited) Time zone updates also include updated versions of tzchange.exe. The file doesn't exist in XP sources, but the time zone updates install it to %WinDir%\system32. And a catalog file is included.from update_SP3QFE.inf of KB2935092:[ProductInstall.CopyFilesAlways] CopyFiles=CopyAlways.System32.files[DestinationDirs] CopyAlways.System32.files=11 ; %windir%\system32 (copy even if don't exist)[CopyAlways.System32.files] tzchange.exe,SP3QFE\tzchange.exe Edited May 23, 2014 by 5eraph Link to comment Share on other sites More sharing options...
submix8c Posted May 23, 2014 Share Posted May 23, 2014 (edited) ???I may buy the TZ (strictly registry), but Certs are in the Certificate Store. The RVKROOTS "INF" runs the "UpdRoots.exe" against the "DisallowedCert.sst".Maybe I don't understand Certificates as well as I should. http://www.microsoft.com/resources/documentation/windows/xp/all/proddocs/en-us/sag_cmuncertstor.mspx?mfr=trueSo... an Add-On (in either case) would probably work (anyway)... edit - never mind...https://www.ibm.com/developerworks/community/forums/html/topic?id=77777777-0000-0000-0000-000014749610#77777777-0000-0000-0000-000014749621Further, Root Certs should only be applied to non-WSUS Servers (2K3 only?) otherwise stuff "breaks".http://support.microsoft.com/kb/2801679Latest RootCerts here (only Clients listed) -http://support.microsoft.com/kb/931125Note these are not included in UDC (for whatever reason...). DOH! "Optional" (can't remember)?---- apologies for this going (semi-)off-topic ----(below is quote from above IBM link)The trusted root certificates are stored under "HKLM\SOFTWARE\Microsoft\SystemCertificates\ROOT\Certificates\". Each cert has its own unique entry under it. When adding a cert, just monitor changes to the registry using whatever method you use for this and you will see the new key appear under there. There will then be an binary value named "Blob" under the key. Export the key and write a fixlet to import that entry into the registry. I have the fixlet checking for the existence of the key (it is always the same name for each cert) in the registry and established it as a policy, so our root CA cert is always imported onto new machines. Edited May 23, 2014 by submix8c Link to comment Share on other sites More sharing options...
Tripredacus Posted May 23, 2014 Share Posted May 23, 2014 @all - We may want to note Tripredacus' warnings. However, it -appears- (so far) that the two coincide (POS2009<->2K3). Note that the comment says "crashes" when the -reverse- is done... I only mentioned it because I am unaware if the IE updates being offered to an XP with a regmod to identify it as being XPe/POSReady are for the browser actually installed in the OS, or the Embedded IE version. Since there is an actual difference between the two, it was worth mentioning. Link to comment Share on other sites More sharing options...
Guest Posted May 23, 2014 Share Posted May 23, 2014 (edited) @5eraph. Yes but it's unimportant. tzchange is just a command line utility for editing time zones.The meat is the actual changes to DST so that your clock stays accurate. Those are all just registry entries. @submix8c It's just registry data in the end. Edited May 23, 2014 by -X- Link to comment Share on other sites More sharing options...
Monroe Posted May 23, 2014 Share Posted May 23, 2014 submix8c ... sorry for the mix up ... yes I already had that last IE8 update that came out after April 8th installed. In my mind I thought that update had been released "near" the end of April ... forgot it was May 1st. So I am up to date on all "official" updates with a clean image backup.... Link to comment Share on other sites More sharing options...
Sebijk Posted May 23, 2014 Share Posted May 23, 2014 However (this is just an opinion), spoofing 2k3 x64 for XP x64 may, perhaps, be a way to go... This is more difficult. Win2003 x64 Updates checks if it is not WinNT, then it will cancel. You cannot change the value in the live system, because this would be a license violation, if you change this in ServerNT. [Prereq.XPAMDInstallBlock.Section] PresentOp=CheckReg,HKLM,"SYSTEM\CurrentControlSet\Control\ProductOptions",ProductType,0x00000000 NotEqualOp=CheckReg,HKLM,"SYSTEM\CurrentControlSet\Control\ProductOptions",ProductType,0x00000000,!=,"WinNT" Display_String="%WrongProductMessage%" Link to comment Share on other sites More sharing options...
dencorso Posted May 23, 2014 Share Posted May 23, 2014 For some reason, the Root Certificates Program KB931125 is beyond EoS. The link below always gives the most up-to-date Root Certificates, and they still install OK even on Win 98SE, as of today.Root Certificates Update (Direct Download) BTW... is there a similar permanent direct download link for rvkroots? Link to comment Share on other sites More sharing options...
Sebijk Posted May 23, 2014 Share Posted May 23, 2014 For XP x64 I published a small tutorial to install 2K3 x64 updates on XP x64, without modifying update.exe: http://www.sebijk.com/community/board15-other/board73-tutorials/2985-getting-xp-updates/ It also applies for POSReady and other updates. Link to comment Share on other sites More sharing options...
bluebolt Posted May 24, 2014 Share Posted May 24, 2014 I'm an average computer user (2K Pro and XP), and have had a particularly distasteful month setting up Windows 7 machines for a couple of family members. I just discovered this topic and read through it entirely. I had a flashback to my childhood, when my Dad took me to see the Harlem Globetrotters play. To all, bravo. Link to comment Share on other sites More sharing options...
Guest Posted May 24, 2014 Share Posted May 24, 2014 It's been getting press today.http://news.softpedia.com/news/How-to-Update-Windows-XP-after-End-of-Support-443631.shtmlhttp://www.ghacks.net/2014/05/24/get-security-updates-windows-xp-april-2019/ Link to comment Share on other sites More sharing options...
xpclient Posted May 24, 2014 Share Posted May 24, 2014 YAY XPCLIENT IS HAPPY Windows 8 can go DotMatrix itself and NT6 users can please wait while Windows configures updates and auto sorts their files. Link to comment Share on other sites More sharing options...
Recommended Posts
Create an account or sign in to comment
You need to be a member in order to leave a comment
Create an account
Sign up for a new account in our community. It's easy!
Register a new accountSign in
Already have an account? Sign in here.
Sign In Now