Page 3 of 3 <123
Topic Options
#124571 - 2004-08-11 12:25 AM Re: Automatic updates and XP SP2
Chris S. Offline
MM club member
*****

Registered: 2002-03-18
Posts: 2368
Loc: Earth
Ok, looks like the interview might be on after all. Here are some of the questions that I'll be answering.

If you guys have something to say, speak up, here is your chance to be heard...


Here are some questions:

Seems Microsoft has adopted a controlled roll out attitude after first saying turn on AU and get updated. Has this message been confusing to your company? Has the waffling been irresponsible by MS as they juggle the "get secure" push with the "may break applications" warning?

Is your company taking the controlled roll out approach? Why?

How much testing have you done to date?

How long will it take for you roll this out? How many desktops do you have? How many apps do you have to test?

Do you think if MS had delivered its new patching tools in May like promised that this roll out would be any easier?

Are you using any third party tools to help in the deployment? Which ones? Or SMS and a combo or MS tools?

Any best practices or practical guidelines you have developed in planning this rollout?

What do you think of the advice that MS is providing on its web site for controlled roll outs? The AD templates, the scripts. Do those tools and that advice look valid to you? Is it coming a little late in the game? Maybe it should have been more part of the prep before the release?

Any other thoughts or issues?

I'm sure I will have more questions based on your answers. If this is quicker for you on the phone we can do it that way.

thanks
john

Top
#124572 - 2004-08-11 02:16 AM Re: Automatic updates and XP SP2
NTDOC Administrator Offline
Administrator
*****

Registered: 2000-07-28
Posts: 11625
Loc: CA
From some internal testing so far.


At this time, the embedded firewall's default ruleset is known to break the functionality of AT&T's remote-access VPN client (AGNS/ATVS), which can be resolved if an administrator deploys a corrected firewall ruleset along with the service pack. The service pack is also known to break Citrix remote desktop and remote application access through the web: an updated version of the Citrix client has been released that purports to resolve this issue, but this has not been verified at this time.

Top
#124573 - 2004-08-11 06:20 PM Re: Automatic updates and XP SP2
kholm Offline
Korg Regular
*****

Registered: 2000-06-19
Posts: 714
Loc: Randers, Denmark
Have any of you tryed downloading the temporary disabling off SP2 Temporarely disabling dilivery of SP2 on XP
This will downlod: XPSP2BlockerTools.EXE, executing this will unpack the needed files and samples.
This gives a way of disabling install of SP2 via e-mail, and even gives the regchange to enforce it:

To disable automatic updateCode:

$RC = WriteValue('HKLM\Software\Policies\Microsoft\Windows\WindowsUpdate','DoNotAllowXPSP2','1','REG_DWORD')



Delete the value: DoNotAllowXPSP2 to enable it again.

This would give you 120 days to think of another solution.

It also contains an adm-template: NoXPSP2Update.adm
I will exlopre this later, because i'm currently on vacation.

And i will have some more time than most of you, because we only use danish versions of XP

-Erik


Edited by kholm (2004-08-11 06:51 PM)

Top
#124574 - 2004-08-11 08:53 PM Re: Automatic updates and XP SP2
Chris S. Offline
MM club member
*****

Registered: 2002-03-18
Posts: 2368
Loc: Earth
Thanks, Erik. Yes, these tools just became available late last night/early this morning.

I'm glad to see them.

Top
#124575 - 2004-08-11 09:30 PM Re: Automatic updates and XP SP2
NTDOC Administrator Offline
Administrator
*****

Registered: 2000-07-28
Posts: 11625
Loc: CA
Just got approval to modify our workstation to delay.
Top
#124576 - 2004-08-11 10:57 PM Re: Automatic updates and XP SP2
Chris S. Offline
MM club member
*****

Registered: 2002-03-18
Posts: 2368
Loc: Earth
I just finished my interview with Network World magazine. The reporter is looking for more input. If anyone wants to talk to him he said it was OK to contact him. In fact, he asked me to forward his e-mail address. You can reach him at JFontana@nww.com
Top
#124577 - 2004-08-11 11:12 PM Re: Automatic updates and XP SP2
Bryce Offline
KiX Supporter
*****

Registered: 2000-02-29
Posts: 3167
Loc: Houston TX
this is causing me ulcers

ok, going ahead with pointing all 28 remote sites at our sus server here at corporate..... hmm good by bandwidth.


Top
#124578 - 2004-08-11 11:18 PM Re: Automatic updates and XP SP2
Les Offline
KiX Master
*****

Registered: 2001-06-11
Posts: 12734
Loc: fortfrances.on.ca
Point them to your SUS server but then don't approve the SP2 update. Hello bandwidth.
_________________________
Give a man a fish and he will be back for more. Slap him with a fish and he will go away forever.

Top
#124579 - 2004-08-12 12:07 PM Re: Automatic updates and XP SP2
masken Offline
MM club member
*****

Registered: 2000-11-27
Posts: 1222
Loc: Gothenburg, Sweden
I don't think v4 of WU will push the service pack. But v5 will. I think the release of the new WU version will be activated with SP2. You can use it today already if u wish.... http://v5.windowsupdate.microsoft.com/v5consumer/default.aspx?ln=en
_________________________
The tart is out there

Top
#124580 - 2004-08-12 03:04 PM Re: Automatic updates and XP SP2
masken Offline
MM club member
*****

Registered: 2000-11-27
Posts: 1222
Loc: Gothenburg, Sweden
btw; MS has now released a tool to block automatic SP2 installations. A tool used internally by MS while testing SP2.

http://www.microsoft.com/technet/prodtechnol/winxppro/maintain/sp2aumng.mspx
_________________________
The tart is out there

Top
#124581 - 2004-08-13 02:18 AM Re: Automatic updates and XP SP2
NTDOC Administrator Offline
Administrator
*****

Registered: 2000-07-28
Posts: 11625
Loc: CA
If you really wanted to make sure your computers don't update to XP SP2 you could add a software restriction policy by adding the hash for the UPDATE.EXE and UPDATE.MSI files from the IT download and then later adding the other hash to the one from the Windows Update site when it is available for download in a smaller size.

So you can stop or delay AU from getting it, and from a user that downloads it from running it.

Granted a user with Admin rights and a little knowledge could bypass your restrictions and get it installed, but this should stop most casual users.

Top
#124582 - 2004-08-17 01:15 AM Re: Automatic updates and XP SP2
Chris S. Offline
MM club member
*****

Registered: 2002-03-18
Posts: 2368
Loc: Earth
Just to end this thread, I thought I'd post the link to the article that was published today...

Windows Users Put On Defensive by SP2
By John Fontana
Network World, 08/16/04

Top
Page 3 of 3 <123


Moderator:  Arend_, Allen, Jochen, Radimus, Glenn Barnas, ShaneEP, Ruud van Velsen, Mart 
Hop to:
Shout Box

Who's Online
0 registered and 1455 anonymous users online.
Newest Members
BeeEm, min_seow, Audio, Hoschi, Comet
17882 Registered Users

Generated in 0.061 seconds in which 0.028 seconds were spent on a total of 11 queries. Zlib compression enabled.

Search the board with:
superb Board Search
or try with google:
Google
Web kixtart.org