Up-to-date Windows 2000 universal install media creation guide

[Kurt_Aust]

August updates

Deletions:

Hotfix\360-OE6.0sp1-KB941202-Windows2000-x86-ENU.exe

Hotfix\500-Windows2000-KB950760-x86-ENU.EXE

Hotfix\510-IE6.0sp1-KB950759-Windows2000-x86-ENU.exe

Additions:

Hotfix\530-OE6.0sp1-KB951066-Windows2000-x86-ENU.exe [2,426,944]

Hotfix\540-Windows2000-KB950974-x86-ENU.EXE [578,272]

Hotfix\550-Windows2000-KB953839-x86-ENU.EXE [496,352]

Hotfix\560-Windows2000-KB952954-x86-ENU.EXE [524,000]

Hotfix\570-IE6.0sp1-KB953838-Windows2000-x86-ENU.exe [4,208,712]

Also there are new versions of:

RunOnce\WindowsUpdateAgent30-x86.exe [7,048,216] updated 7 Aug 08

EXTRACT the latest (Aug 08) DirectX redistributable to \DirectX_9c (you can get back 33MB by deleting the x64.cab files).

MD5: 3FA04CDE0808ED0AB035AB56735FA86B

SHA1: 44B175AD7E2A2614AA91BFB816EAB0279BCAC61E

Edited August 17, 2008 by Kurt_Aust

[Kurt_Aust]

Added support for automated install of Virtual Machine drivers and details on multi-CD installs. Changes to main post below:

[Run2_W2Ksp5.bat]

rem startup delay to allow disk thrashing to subside before proceeding
ping -n 121 127.0.0.1>nul

rem remove second pass from scheduled tasks
SchTasks /delete /tn Run2 /f

rem support Bashrat the Sneaky's Driver Packs
%SystemDrive%\DPsFnshr.exe

Set DocuSett=%SystemDrive%\Documents and Settings

rem install & configure Open Office, requires 7-Zip for configuration options
"%ProgramFiles%\7-Zip\7z" X AddOns\OOo_2.4.1_Win32Intel_install_en-US.exe -O%Temp%\OpenOffice
If exist %Temp%\OpenOffice\openofficeorg24.msi msiexec /I %Temp%\OpenOffice\openofficeorg24.msi ALLUSERS=1 SELECT_WORD=1 SELECT_EXCEL=1 SELECT_POWERPOINT=1 ADDLOCAL=ALL /Qr
RmDir /S /Q %Temp%\OpenOffice
If Not exist "%ProgramFiles%\7-Zip\7z.exe" AddOns\OOo_2.4.1_Win32Intel_install_en-US.exe /S

rem silent installers go here

rem extract virtual machine drivers
"%ProgramFiles%\7-Zip\7z" X AddOns\Windows.iso -O%Temp%\VMware
"%ProgramFiles%\7-Zip\7z" X AddOns\VMAdditions.iso -O%Temp%\VirtualPC
"%ProgramFiles%\7-Zip\7z" X AddOns\VBoxGuestAdditions.iso -O%Temp%\VirtualBox

rem second pass of updates
RunOnce\Windows2000-KB951698-v2-DX9-ENU.exe /Passive /NoRestart
RunOnce\WMP09-Setup-98Me2000.exe /Q
RunOnce\WindowsMedia9-KB936782-x86-ENU.exe /Passive /NoRestart
RunOnce\WindowsUpdateAgent30-x86.exe /Q /WUforce
If exist "%Temp%\VMware\VMware Tools.msi" RunOnce\Windows2000-KB941569-x86-ENU.EXE /Passive /NoRestart
If exist "%Temp%\VirtualPC\Windows\VirtualMachineAdditions.msi" RunOnce\Windows2000-KB941569-x86-ENU.EXE /Passive /NoRestart

rem install virtual machine drivers
"%Temp%\VirtualBox\VBoxGuestAdditions.exe" /S
msiexec /I "%Temp%\VMware\VMware Tools.msi" ADDLOCAL=ALL /Passive /ForceRestart
msiexec /I "%Temp%\VirtualPC\Windows\VirtualMachineAdditions.msi" ADDLOCAL=ALL /Passive /ForceRestart

RunOnce\Windows2000-KB941569-x86-ENU.EXE /Passive /ForceRestart

Part 5: Multi-media installations

Sometimes you won't be able to fit everything you want onto one CD and a DVD can't be used. In that case skip step 7 and instead burn the files & folders you would have copied to another CD. You will also have to do one of the following:

A ) If you have multiple CD drives just put one CD in each, too easy.

B ) Set a system boot password in BIOS and then change CDs on the second reboot.

C ) Insert a Pause command as the first line of the RunOnce file (step 5), change CDs on the pause.

If you find that you've added too many AddOns and your image is over CD size, you can just delete the appropriate executables from \I386\svcpack and recreate the image. Most of the executables will be switchless installers so you could instead add them to Run2_W2Ksp5.bat (open the original .cab file and read the Entries*.ini file to be sure). For instance you could do a base W2K CD with all the DriverPacks (except Graphics A) and another CD with 560MB of application installs (113MB already reserved).

Part 7: Testing

There are 3 free Virtualization programs that you can use to test your creation, VMware Server, Sun VirtualBox and Microsoft VirtualPC 2007.

Automatic installation of Virtual Machine drivers is supported, just place the appropriate .iso file at \AddOns (you MUST use a 7-Zip AddOn for this to work, from either Rado354 or JohnDoe74).

VMware Server

Pros: Can virtualize just about anything, including x64 guest OS's (x64 guest requires recent CPU)

Cons: 5 times the size of the others, registration required

ISO: %ProgramFiles%\VMware\VMware Server\Windows.iso

Sun VirtualBox (last version to run on a Win2000 host here)

Pros: Nice seemless mode, also good for virtualizing Linux

Cons: Will not virtualize Win9x properly, do NOT install Comodo Firewall on the guest

ISO: %ProgramFiles%\Sun xVM VirtualBox\VBoxGuestAdditions.iso

Microsoft VirtualPc 2007 (Host OS XP or later)

Pros: Good for virtualizing Win9x, guest usuable even without VM drivers

Cons: Will not virtualize non Microsoft Os's properly

ISO: %ProgramFiles%\Microsoft Virtual PC\Virtual Machine Additions\VMAdditions.iso

[Kurt_Aust]

September updates

Deletions:

Hotfix\300-IE6.0sp1-KB938127-Windows2000-x86-ENU.exe

RunOnce\dotNET11sp1a.exe

Additions:

Hotfix\580-IE6.0sp1-KB938464-Windows2000-x86-ENU.exe [1,530,952]

RunOnce\NDP20SP1-KB947748-x86.exe [1,295,384]

RunOnce\dotNET11sp1b.exe [12,424,654]

[Kurt_Aust]

October updates

Deletions(from \Hotfix):

100-Windows2000-KB923414-x86-ENU.EXE

370-Windows2000-KB937894-x86-ENU.EXE

430-Windows2000-KB941693-x86-ENU.EXE

550-Windows2000-KB953839-x86-ENU.EXE

570-IE6.0sp1-KB953838-Windows2000-x86-ENU.exe

Additions (to \Hotfix):

590-Windows2000-KB954211-x86-ENU.EXE [1,315,040]

600-Windows2000-KB951071-x86-ENU.EXE [1,382,624]

610-Windows2000-KB953155-x86-ENU.EXE [563,936]

620-Windows2000-KB956391-x86-ENU.EXE [493,608]

630-Windows2000-KB957095-x86-ENU.EXE [620,256]

640-IE6.0sp1-KB956390-Windows2000-x86-ENU.exe [4,210,760]

[Kurt_Aust]

November updates

Deletions(from \Hotfix):

310-Windows2000-KB936021-x86-ENU.EXE

315-msxml4-KB936181-enu.exe

320-msxml6-KB933579-enu-x86.exe

Additions (to \Hotfix):

650-Windows2000-KB958644-x86-ENU.EXE [618,024]

660-Windows2000-KB955069-x86-ENU.EXE [926,944]

670-msxml4-KB954430-enu.exe [5,687,304] Optional, Microsoft XML Core Services 4.0 Service Pack 2

680-msxml6-KB954459-enu-x86.exe [952,840] Optional, Microsoft XML Core Services 6.0 Service Pack 1

690-Windows2000-KB957097-x86-ENU.EXE [1,453,792]

Also a new version of the Windows update agent was released:

RunOnce\WindowsUpdateAgent30-x86.exe [6,216,032] updated 31 Oct 08

[Kurt_Aust]

Added support for automatic installation of Comodo Firewall:

I recommend using Comodo Firewall (older 2.4.18.184 version), small, top-rated and free, unfortunately their installer doesn't allow for an unattended installation. However I've written an AutoIt script (my 1st) that will silently install it, available at my eSnips page, rename it to "Comodo2.exe" and place it at \AddOns along with the actual firewall installer.

[Kurt_Aust]

December updates

Deletions:

Hotfix\460-Windows2000-KB948590-x86-ENU.EXE

Hotfix\640-IE6.0sp1-KB956390-Windows2000-x86-ENU.exe

Additions:

Hotfix\

700-WindowsMedia64-KB954600-x86-ENU.exe [1,373,584]

710-Windows2000-KB956802-x86-ENU.EXE [618,024]

720-IE6.0sp1-KB958215-Windows2000-x86-ENU.exe [4,207,504]

RunOnce\

Windows2000-WindowsMedia-KB952069-x86-ENU.exe [3,564,944]

[Kurt_Aust]

January updates

Deletions:

Hotfix\024-Windows2000-KB914389-x86-ENU.EXE (only for users of old version of USP5)

Hotfix\630-Windows2000-KB957095-x86-ENU.EXE

RunOnce\dotNET11sp1b.exe

Additions:

Hotfix\740-Windows2000-KB958687-x86-ENU.EXE [617,512]

Download from eSnips the 990-dotNET11sp1b.7z file save it to \Hotfix (see notes part 4 for other options).

MD5: F02CBBB4F6B72257B0A7B456F5502193

SHA-1: AE2FEA8ADA2544362070C4D2B7BA80E27EE82DD0

Changed .Net11sp1 from a silent installer to an AddOn created using Tomcat76/Strel's script. The old silent installer is still supported.

Also added support for last version of QuickTime Alternative Lite (with directshow filters) to Run2_W2Ksp5.bat.

Edited January 20, 2009 by Kurt_Aust

[Targaff]

Many thanks as always!

[Kurt_Aust]

.Net 2.0 SP2 standalone installer has been released, so you can now install .Net 2.0 SP2 rather than .Net 2.0 SP1.

From Microsoft you want (▼ is a direct link to the executable):

▼ .Net framework 2.0 service pack 2, save it to \RunOnce.

MD5: C64FD1F972822ED84378C7058FEA0744

SHA-1: 22D776D4D204863105A5DB99E8B8888BE23C61A7

▼ NDP20SP2-KB958481-x86.exe (.Net 2.0 SP2 compatibility update) save it to \RunOnce

MD5: CCD59228523CC8720452625FE04EE14A

SHA-1: 04FCDE4B28DD4F6DB7548831D35D1C6BF38E1335

You will no longer need:

RunOnce\NetFx20SP1_x86.exe

RunOnce\NDP20SP1-KB947748-x86.exe

Hopefully by patch Tuesday, Strel will have updated the "Build your own .Net" script and I'll be able to offer a .Net 2.0 SP2 AddOn that should save about 8MB on your install media.

Lastly, a housekeeping note, I'm on vacation from 24 Jan to 2 Feb, so the tracker will be down.

[Kurt_Aust]

February updates:

Deletion

Hotfix\620-Windows2000-KB956391-x86-ENU.EXE

Addition

Hotfix\750-Windows2000-KB960715-x86-ENU.EXE [493,608]

Also added a screenshot archive to my eSnips page.

[Kurt_Aust]

March updates

Deletions:

Hotfix\230-Windows2000-KB935840-x86-ENU.EXE

Hotfix\590-Windows2000-KB954211-x86-ENU.EXE

Hotfix\670-msxml4-KB954430-enu.exe

Additions:

Hotfix\760-Windows2000-KB960225-x86-ENU.EXE [561,192]

Hotfix\770-Windows2000-KB958690-x86-ENU.EXE [1,312,296]

Hotfix\780-Windows2000-KB967715-x86-ENU.EXE [1,243,704]

RunOnce\msxml.msi [2,434,048] Optional, Microsoft XML Core Services 4.0 Service Pack 3

[donald7777]

is there a way to auto remove the administrator password when the install is done? cause going to each an every workstation would kill me. (60 weekly)

also this guide is the best. i like having things explained to me so i understand and pass on the knowledge.

[Kurt_Aust]

If you (for security reasons?) prefer not to have an account called "Administrator" then I think the easiest way would be to deactivate the account in nLite.

Obviously you will need at least one Administrator class account, so set the install to auto-login to that account twice and modify the SchTasks command in Run1_W2Ksp5.bat to match the new account name and password.

This is just a suggestion, I haven't tested the described scenario

[Kurt_Aust]

The method of launching Run2_W2Ksp5.bat has been changed from SchTasks to GuiRunOnce, this has the advantage of no longer requiring the use of the Administrator account with a password of "giberish". Instead one now only has to set it to auto logon twice to an administrator CLASS account. It also allows for additional install passes to be easily set up. You will have to place the file ShutDown.exe from XP sp3 at \RunOnce (attached to first post) and move SchTasks to \AddOns.

Altered sections of the main post follow, also please note that this month's patch Tuesday update will be about a week late.

================================================================

From this post's attachments, the Config2000sp5_date.zip file and extract it, this will also setup the necessary directory structure. The archive contains:

\Misc\Run*_W2ksp5.bat (optional additional install passes)

================================================================

At \RunOnce for installation via nLite's RunOnce / batch files

ShutDown.exe [19,456] - From %SystemRoot%\System32 on Win XP sp3 Not yet in archive, attached below

At \AddOns

SchTasks.exe [121,856] - if you have Win XP sp2 then you already have this file at %SystemRoot%\System32, but you would need to change hex offset E3F8 from 75 to EB for it to work with Windows 2000. SchTasks.exe is also available separately from this post's attachments.

================================================================

5. Unattended settings, this is the most important one. Your RunOnce file should look like this:

Ping -n 11 127.0.0.1 > nul
For %%I in (Z Y X W V U T S R Q P O N M L K J I H G F E D) do CMD /R "%%I:\Run1_W2Ksp5.bat %%I"
rem should not see me
Pause

You must also set it to autologon twice to an administrator class account, fully automated mode would be an excellent idea Smithers.

================================================================

Note that because %Source% does not work with Windows 2000, the RunOnce file has to search for Run1_W2Ksp5.bat, this means having unusual file names is important. Here we install .Net 2.0 sp2, DirectX 9.0c and the hotfix that fails under nLite to integrate into the source. The order is important because KB923191 will force a system reboot, but in this case that helps us as a reboot is recommended between the installation of DirectX 9.0c and Windows Media Player 9 anyway.

Run1_W2Ksp5.bat

rem you must use either %1:\ or %Source% when referring to files on the install media
Set Source=%1:\

rem copy optional files, these make running as a limited user feasible and use no system resources
Copy %Source%AddOns\SubinACL.* %SystemRoot%
Copy %Source%AddOns\ChOwn*.bat %SystemRoot%
Copy %Source%AddOns\Grant_Access.txt %SystemRoot%
If exist %SystemRoot%\SubinACL.exe MkDir "%AllUsersProfile%\Start Menu\Programs\Grant Access\"
Copy %Source%AddOns\Access*.lnk "%AllUsersProfile%\Start Menu\Programs\Grant Access\"

rem add advanced command line task scheduling ability to Windows 2000
Copy %Source%AddOns\SchTasks.exe %SystemRoot%

rem add command line shutdown ability to Windows 2000
Copy %Source%RunOnce\ShutDown.exe %SystemRoot%

rem first pass of updates
%Source%RunOnce\rootsupd_fe44934fd80dd11fec2f0f9b24431658a4f6d589.exe
msiexec /I %Source%RunOnce\msxml.msi /Passive /NoRestart
%Source%RunOnce\vcredist_x86.exe /Q
%Source%RunOnce\NetFx20SP2_x86.exe /Passive /NoRestart
%Source%RunOnce\dotnetfx.exe /Q /C:"Install /Qb"
%Source%RunOnce\NDP1.1sp1-KB867460-X86.exe /Q
%Source%RunOnce\NDP1.1sp1-KB928366-X86.exe /Q
%Source%RunOnce\NDP1.1sp1-KB947742-X86.exe /Q
%Source%DirectX_9c\DXsetup.exe /Silent
%Source%RunOnce\WindowsUpdateAgent30-x86.exe /Q /WUforce

rem silent installers go here

rem support JohnDoe74's Daemon Tools addon (older 4.10 version only)
%SystemRoot%\daemon\dt410x86.exe
RmDir /S /Q %SystemRoot%\daemon

rem support JohnDoe74's Windows Defender addon (RunOnce version only)
If exist %SystemRoot%\windefender\windefender.cmd Copy %SystemRoot%\Microsoft.NET\Framework\v2.0.50727\gdiplus.dll %SystemRoot%\System32\
%SystemRoot%\windefender\hidec.exe /w %SystemRoot%\windefender\windefender.cmd
RmDir /S /Q %SystemRoot%\windefender

rem all GUI run once commands go here

rem definition updates for Spybot, Defender & Avast
%Source%AddOns\mpas-fe.exe /Q
%Source%AddOns\spybotsd_includes.exe /S
"%ProgramFiles%\Spybot - Search & Destroy\SpybotSD.exe" /taskbarhide /autoimmunize /autoclose
%Source%AddOns\vpsupd.exe /Silent

rem setup for second pass
Echo Windows Registry Editor Version 5.00 > %Temp%\2ndPass.reg
Echo. >> %Temp%\2ndPass.reg
Echo [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\RunOnce] >> %Temp%\2ndPass.reg
Echo "command0"="%1:\\Run2_W2Ksp5.bat %1 " >> %Temp%\2ndPass.reg
RegEdit /S %Temp%\2ndPass.reg
Del %Temp%\2ndPass.reg

rem this patch will force reboot
%Source%RunOnce\Windows2000-KB923191-x86-ENU.exe /Passive

On the second attempt to logon the desktop will actually appear, but don't try to use it just yet, as we still have to install Media Player 9 and it's updates, which is done by Run2_W2Ksp5.bat. The batch file gets run by GuiRunOnce which was setup by the RegEdit command in Run1_W2Ksp5.bat.

Run2_W2Ksp5.bat

rem startup delay to allow disk thrashing to subside before proceeding
Ping -n 121 127.0.0.1 > nul

rem you must use either %1:\ or %Source% when referring to files on the install media
Set Source=%1:\

rem second pass of updates
%Source%RunOnce\NDP20SP2-KB958481-x86.exe /Passive /NoRestart
%Source%RunOnce\Windows2000-KB951698-v2-DX9-ENU.exe /Passive /NoRestart
%Source%RunOnce\WMP09-Setup-98Me2000.exe /Q
%Source%RunOnce\WindowsMedia9-KB936782-x86-ENU.exe /Passive /NoRestart
%Source%RunOnce\Windows2000-KB941569-x86-ENU.EXE /Passive /NoRestart
%Source%RunOnce\Windows2000-WindowsMedia-KB952069-x86-ENU.exe /Passive /NoRestart

rem support Bashrat the Sneaky's Driver Packs
%SystemDrive%\DPsFnshr.exe

rem install & configure Open Office, requires 7-Zip for configuration options (defaults shown)
"%ProgramFiles%\7-Zip\7z" X %Source%AddOns\OOo_3.0.1_Win32Intel_install_en-US.exe -O%Temp%\OpenOffice
If exist %Temp%\OpenOffice\openofficeorg30.msi msiexec /I %Temp%\OpenOffice\openofficeorg30.msi ALLUSERS=1 ADDLOCAL=ALL SELECT_WORD=1 SELECT_EXCEL=1 SELECT_POWERPOINT=1 /Qr /NoRestart
RmDir /S /Q %Temp%\OpenOffice
If Not exist "%ProgramFiles%\7-Zip\7z.exe" %Source%AddOns\OOo_3.0.1_Win32Intel_install_en-US.exe /S
Copy %SystemRoot%\Microsoft.NET\Framework\v2.0.50727\gdiplus.dll "%ProgramFiles%\OpenOffice.org 3\Basis\program\"

rem support QuicktimeAltLite for Win 2000
%Source%AddOns\quicktimealt181lite.exe /Silent /NoRestart /LoadInf=".\qtalt.ini"

rem silent installers go here

rem optional defrag
rem Defrag %SystemDrive%

rem setup for the next pass
Set NextBatch=Run3_W2Ksp5.bat
Echo Windows Registry Editor Version 5.00 > %Temp%\NextPass.reg
Echo. >> %Temp%\NextPass.reg
Echo [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\RunOnce] >> %Temp%\NextPass.reg
Echo "command0"="%1:\\%NextBatch% %1 " >> %Temp%\NextPass.reg
If exist %1:\%NextBatch% RegEdit /S %Temp%\NextPass.reg
Del %Temp%\NextPass.reg

rem support Comodo Firewall
%Source%AddOns\Comodo2.exe

rem VirtualBox Drivers
"%ProgramFiles%\7-Zip\7z" X %Source%AddOns\VBoxGuestAdditions.iso -O%Temp%\VirtualBox
%Temp%\VirtualBox\VBoxGuestAdditions.exe /S
%Temp%\VirtualBox\VBoxWindowsAdditions-x86.exe /S
RmDir /S /Q %Temp%\VirtualBox

rem VMware drivers
"%ProgramFiles%\7-Zip\7z" X %Source%AddOns\Windows.iso -O%Temp%\VMware
msiexec /I "%Temp%\VMware\VMware Tools.msi" ADDLOCAL=ALL /Passive /NoRestart
RmDir /S /Q %Temp%\VMware

rem VirtualPC drivers (ejects CD, must be the last command of the last batch file)
"%ProgramFiles%\7-Zip\7z" X %Source%AddOns\VMAdditions.iso -O%Temp%\VirtualPC
msiexec /I %Temp%\VirtualPC\Windows\VirtualMachineAdditions.msi ADDLOCAL=ALL /Passive /ForceRestart

ShutDown /R /F /T 20

You can have as many application install reboot passes as desired. To do this simply set the system to auto-logon (in step 5) as many times as required and place the appropriate number of batch files in the root directory of your install media. The first 5 batch files are already written (at \Misc) with the needed handover command, but if you need more they are fairly self explanatory. If using VirtualPC be sure to install its drivers last.

Run3_W2Ksp5.bat

rem startup delay to allow disk thrashing to subside before proceeding
Ping -n 121 127.0.0.1 > nul

rem you must use either %Source% or %1:\ when referring to files on the install media
Set Source=%1:\

rem silent installers go here

rem setup for the next pass
Set NextBatch=Run4_W2Ksp5.bat
Echo Windows Registry Editor Version 5.00 > %Temp%\NextPass.reg
Echo. >> %Temp%\NextPass.reg
Echo [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\RunOnce] >> %Temp%\NextPass.reg
Echo "command0"="%1:\\%NextBatch% %1 " >> %Temp%\NextPass.reg
If exist %1:\%NextBatch% RegEdit /S %Temp%\NextPass.reg
Del %Temp%\NextPass.reg

ShutDown /R /F /T 20

================================================================

Part 3: Optional components (currently SubInACL/ChOwn & SchTasks)

Any small (<2MB) but useful optional components will be placed in the \AddOns directory. The batch files will be written to support their installation if \AddOns is copied to the nLite working directory.

SchTasks.exe from XP sp2 (modified to work with Windows 2000) was originally used to launch Run2_W2Ksp5.bat, so it's inclusion is a legacy item, none the less it does add advanced command line task scheduling abilities to Windows 2000.