[THIN] Re: Windows Update SP3 Disable Information
- From: "TheThin" <TheThin@xxxxxxxxxxxxxxxxxxxxx>
- To: <thin@xxxxxxxxxxxxx>
- Date: Fri, 22 Nov 2002 10:42:28 -0500
Check out the MS Software Update Services (SUS) whitepaper for lots of
details about this.
http://www.microsoft.com/windows2000/windowsupdate/sus/susdeployment.asp
Our customers with fat clients use this to centrally manage windows
updates.
This gives almost every reg key that controls auto update. The other
ones that appear (from what I remember off the top of my head) are
related to scheduling of the next job (install and checking for
updates).
Bill
-----Original Message-----
From: Ziots, Edward [mailto:EZiots@xxxxxxxxxxxx]=20
Posted At: Thursday, November 21, 2002 8:53 PM
Posted To: TheThin
Conversation: [THIN] Windows Update SP3 Disable Information
Subject: [THIN] Windows Update SP3 Disable Information
To the list,=20
In my spare time I have found out what Windows Update does in the
registry when it installs with SP3 for Win2k and XP (Standard, SP1). I
think this will come in very handy for those that do server/workstation
administration with Win2k and have gone to SP3. ( One reason I am
staying at SP2, for stability sakes, plus I dont like M$ dictating which
hotfixes I need to install on our workstations and so forth, and put it
in the hands of a user, GOOD night, I hope you like re-ghosting machines
alot, because they will destroy em)=20
Here is the information:=20
Probably easiest way of doing away with this is hiding the control-panel
applet via GPO or Script ( Reg.exe comes to mind) here is all
information on the settings in the registry that control it.=20
Also another good way to stop this bugger is deny via Script Access to
wuauclt.exe CACLS C:\Winnt\System32\wuauclt.exe /E /C /P Everyone:N
then hide wuaucpl.cpl.=20
Here are the rest of the settings.=20
The registry key that controls the options is the following:
HKLM\Software\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update
The executable that runs the windows update is wuauclt.exe its in the
System32 directory. The control Panel ICON is wuaucpl.cpl.=20
The 3 selections on the screen are the following:
Notify me before downloading any updates and notify me again before
installing them on my computer Registry Values: AUOPTIONS
TYPE: REG_DWORD
Value: 0X2 (Hex)
AUSTATE
TYPE: REG_DWORD
Value: 0X2
DetectionStartTime
Type: REG_SZ
Value: 2002.11.21 20:12:34 ( year.month.day military time)
LastWaitTimeout
Type: REG_SZ
Value 2002.11.22 01:17:34
Download the updates Automatically and notify me when they are ready to
be installed
AUOPTIONS
TYPE: REG_DWORD
Value: 0X3 (Hex)
AUSTATE
TYPE: REG_DWORD
Value: 0X3 (Hex)
Automatically Download the updates and install them on the schedule I
specify
AUOPTIONS
TYPE: REG_DWORD
Value: 0X4 (Hex)
AUSTATE
TYPE: REG_DWORD
Value: 0X3 (Hex)
ScheduledInstallDay
Type: REG_DWORD
Value:0 ( Every Day setting)
Value: 1 (Sunday) 2(Monday) 3(Tuesday) 4(Wednesday) 5(Thrusday) 6
(Friday)
7(Saturday)
ScheduledInstallTime
Tyoe: REG_DWORD
Value: 0(12:00am) 1(1:00am) 2(2:00am) ......... 13(1:00pm)
Enjoy,=20
Ed
***********************************************=20
This Weeks Sponsor: Wyse Technologies
Get a free whitepaper on how to secure
your corporate data from Wyse. Click Below.=20
http://thethin.net/wyse.cfm=20
***********************************************=20
For Archives, to Unsubscribe, Subscribe or=20
set Digest or Vacation mode use the below link.
http://thethin.net/citrixlist.cfm
***********************************************
This Weeks Sponsor: Wyse Technologies
Get a free whitepaper on how to secure
your corporate data from Wyse. Click Below.
http://thethin.net/wyse.cfm
***********************************************
For Archives, to Unsubscribe, Subscribe or
set Digest or Vacation mode use the below link.
http://thethin.net/citrixlist.cfm
Other related posts: