RE: Windows Update v5 and XPSP2RC2

From: Terwelp, Jeff (JTerwelp_at_rwbaird.com)
Date: 07/27/04

  • Next message: Jordan Wiseman: "RE: Windows Update v5 and XPSP2RC2"
    To: Jordan Wiseman <Jordan_Wiseman@Valleymed.org>, focus-ms@securityfocus.com
    Date: Tue, 27 Jul 2004 15:47:25 -0500
    
    

    Reg.exe, not regedit.exe. It can be scripted in a single for loop just like
    psexec.

    Jeff

    -----Original Message-----
    From: Jordan Wiseman [mailto:Jordan_Wiseman@Valleymed.org]
    Sent: Monday, July 26, 2004 3:54 PM
    To: focus-ms@securityfocus.com
    Subject: RE: Windows Update v5 and XPSP2RC2

    Yes...but not easily scripted like you can with psexec....with a list of
    computer names (from new view maybe) a single "for" loop could hit all the
    machines with psexec automatically.

    ie:

    for /F %i in (computers.txt) do psexec -i -u domain\user -p password -d \\%i
    "regedit" "/s \\server\share\file.reg"

    IMHO, this is much easier than manually hitting several machines with the
    regedit GUI.

    __________
    Jordan Wiseman - TSA
    Valley Medical Center
    425-228-3440 x1444

    -----Original Message-----
    From: Ansgar -59cobalt- Wiechers [mailto:bugtraq@planetcobalt.net]
    Sent: Monday, July 26, 2004 10:36 AM
    To: focus-ms@securityfocus.com
    Subject: Re: Windows Update v5 and XPSP2RC2

    On 2004-07-23 blake.securityfocus@andromedia.ca wrote:
    > In the (regrettable) absence of group policy, one could probably use
    > something like PSExec (from the PSTools package:
    > http://www.sysinternals.com/ntw2k/freeware/psexec.shtml) to load a
    > .REG file remotely.

    No need for that. reg.exe can be used against remote computers.

    Regards
    Ansgar Wiechers

    --
    "Those who would give up liberty for a little temporary safety deserve
    neither liberty nor safety, and will lose both."
    --Benjamin Franklin
    ------------------------------------------------------------------------
    ---
    ------------------------------------------------------------------------
    ---
    ---------------------------------------------------------------------------
    ---------------------------------------------------------------------------
    **********************************************************************
    Robert W. Baird & Co. is required by regulation to review and store 
    both outgoing  and incoming electronic correspondence.  Baird 
    may be required to produce e-mail records for the SEC or other regulators in a criminal investigation.  E-mail transmission cannot 
    be guaranteed to be secure, timely or error-free.  Baird therefore 
    recommends that you do not send confidential information to us via 
    electronic mail, including account numbers, social security 
    numbers or any personal identification numbers. This is not an 
    offer, or solicitation of an offer to buy or sell any security 
    investment or other product. Any information regarding specific 
    investment products is subject to change without notice. Any review, 
    forwarding, dissemination or other use of, or taking of any action in 
    reliance upon this information by persons or entities other than the 
    intended recipient is prohibited.  If you received this in error, please contact the sender and delete the material from any computer 
    on which it exists. 
    ---------------------------------------------------------------------------
    ---------------------------------------------------------------------------
    

  • Next message: Jordan Wiseman: "RE: Windows Update v5 and XPSP2RC2"