On decommissioning of update servers for 2000, XP, (and Vista?) as of July 2019

[maile3241]

12 minutes ago, Dave-H said:

Everything is as it should be.
I checked for root certificate updates only a couple of days ago.

The page doesn't tell you what the asterisks mean!

 

Does the update catalog work?

[maile3241]

@Dave-H Try this Root Certificate Updater: http://i430vx.net/files/wsusstuff/NT5x/rootsupd.exe

[xpandvistafan]

59 minutes ago, Dave-H said:

Everything is as it should be.
I checked for root certificate updates only a couple of days ago.

 

Are you using ProxHTTPSProxy? Windows XP does not support those ciphers and the user agent is IE 9.

[VistaLover]

40 minutes ago, xpandvistafan said:

and the user agent is IE 9

... Not to mention he's got ChromeFrame installed (reporting Chromium 32 in the UA) ...

[maile3241]

Can you change the cipher suites like this?https://www.howtogeek.com/221080/how-to-update-your-windows-server-cipher-suite-for-better-security/

[XPerceniol]

Hmmm ... I followed that link and am looking on the right at my configuration and I don't even have SSL at all. But, I am now wondering what is running that shouldn't be, so thank you for the link and I will do more research. Hahaha ... just when I thought I removed all the telemetry from my system; yet another surprise. Actually, nothing surprises me anymore with m$

Edited January 14, 2022 by XPerceniol

[maile3241]

On 1/14/2022 at 5:14 PM, XPerceniol said:

Hmmm ... I followed that link and am looking on the right at my configuration and I don't even have SSL at all. But, I am now wondering what is running that shouldn't be, so thank you for the link and I will do more research. Hahaha ... just when I thought I removed all the telemetry from my system; yet another surprise. Actually, nothing surprises me anymore with m$

I also followed the link and didn't find an SSL option. But I found this in the registry editor:

Edited February 18, 2022 by maile3241

[XPerceniol]

Thank again:

Same here and all are empty undefined keys execpt for:

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Ciphers\RC4 128/128 (disabled)

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Ciphers\Triple DES 168/168 (disabled)

Otherwise they are at defaults .. so good to know this as I wasn't aware until you mentioned it. 

[maile3241]

On 1/14/2022 at 5:40 PM, XPerceniol said:

Thank again:

Same here and all are empty undefined keys execpt for:

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Ciphers\RC4 128/128 (disabled)

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Ciphers\Triple DES 168/168 (disabled)

Otherwise they are at defaults .. so good to know this as I wasn't aware until you mentioned it. 

I have now activated all ciphers. Despite this, not more appears on SSLLabs.

Edited February 25, 2022 by maile3241

[xpandvistafan]

3 hours ago, XPerceniol said:

Hmmm ... I followed that link and am looking on the right at my configuration and I don't even have SSL at all. But, I am now wondering what is running that shouldn't be, so thank you for the link and I will do more research. Hahaha ... just when I thought I removed all the telemetry from my system; yet another surprise. Actually, nothing surprises me anymore with m$

That tutorial is for Windows 7. I don't think Windows XP has that capability from the group policy editor.

[maile3241]

On 1/14/2022 at 8:16 PM, xpandvistafan said:

That tutorial is for Windows 7. I don't think Windows XP has that capability from the group policy editor.

Right. It works as of Vista.

Edited February 25, 2022 by maile3241

[maile3241]

I also found out: https://fe2.update.microsoft.com won't go. But https://fe2.ws.microsoft.com works.

Edited February 23, 2022 by maile3241

[xpandvistafan]

6 minutes ago, maile3241 said:

I also found out: https://fe2.update.microsoft.com won't go. But https://fe2.ws.microsoft.com does

What do you mean by this?

[maile3241]

6 minutes ago, xpandvistafan said:

What do you mean by this?

This is the same page. Unfortunately, this no longer works. I don't understand that https://fe2.ws.microsoft.com works and https://fe2.update.microsoft.com doesn't show the page. It's about the https. I think https://fe2.ws.microsoft.com uses other cipher suites

Edited January 14, 2022 by maile3241

[xpandvistafan]

With ProxHTTPSProxy, it gets further, but gives this error when searching for updates.