RE: XP SP2 Blind install

From: Rasmus Rønlev (rr.its_at_cbs.dk)
Date: 01/12/05

  • Next message: Ansgar -59cobalt- Wiechers: "Re: NTFS Security"
    Date: Wed, 12 Jan 2005 18:17:02 +0100
    To: 'Focus-MS' <focus-ms@securityfocus.com>
    
    

    Hey,

    Jumping in on the thread then.
    Microsoft has a pretty decent overview of deploying SP2 enterprise wide on
    the URL;
    http://www.microsoft.com/technet/prodtechnol/winxppro/deploy/spdeploy.mspx

    In principle if you've downloaded the 'redistributable' SP2 file (let's call
    it XPsp2.exe to stay with Microsoft's naming convention) you can do the
    following on a client pc;

    XPsp2.exe /quiet /passive /norestart
    (doing a restart after successful install)

    As for the group policies, I'd imagine you can play around with those
    alongside the above unattended install of the service pack, so that it all
    fits into your needs.

    Depending on your rollout on new machines you can also integrate/slipstream
    the SP2 into your source image(s) and swap out the firewall setup file so
    those settings are deployed at boot time. Rest should be possible through
    the group policies.

    Regards,
    r@smus

    .
    Rasmus Rønlev
    Copenhagen Business School, ITSu
    -----Original Message-----
    From: music2myear [mailto:tech.list@gmail.com]
    Sent: 11. januar 2005 01:53
    To: Focus-MS
    Subject: Re: XP SP2 Blind install

    Well, no let's not close the thread.

    Mike,
    Detail what you did to get it to work, where are the resources you
    used? What steps did you take? This is incredibly important
    information for all us sysadmins out here.

    Doing a roll-out to 9000 machines transparently is quite a feat, major
    Kudos on your success.

    What was the fail-rate though? Out of 9000 there's must have been a
    few failures.

    Microsoft has lots of data on this process but it's singularly poorly
    done on their support site(s). For basic installations and sysprepped
    installs I had to basically figure things out myself for the org I
    worked for but I never did learn how to do SP installs that way.

    Please enlighten the rest of us before you leave. That's the purpose
    of these forums, to increase the general knowledge.

    Sincerely,

    music2myear

    On Fri, 7 Jan 2005 18:55:39 +0100, Ansgar -59cobalt- Wiechers
    <bugtraq@planetcobalt.net> wrote:
    > On 2005-01-06 mike@genxweb.net wrote:
    > > We are planning to start upgrading to xp sp2 in the next few months
    > > but one of the biggest issues we are having is that we want it to be a
    > > blind install. Basically we do not want the users to be prompted after
    > > the reboot to configure anything ( no option to turn on auto updates,
    > > no questions about the firewall, and so on) we also want to send it
    > > out with the firewall turned off ( we think we got this covered in our
    > > GPL but will have to test it).
    > >
    > > Any ideas be much appreciated
    >
    > SP2 can be installed fully unattended (see command-line switches), so
    > installation should not be an issue. Automatic updates, firewall
    > settings et al. can be configured thru group policies (either domain or
    > local). The only issue I had with applying policies before rolling out
    > SP2 was longer strings causing warning messages, which can be fixed by a
    > separate update (though I can't remember off the top of my head which
    > one it was).
    >
    > I would apply the policies to a few (test)machines, install SP2 and see
    > what happens. That should be sufficient to detect GP related problems.
    >
    > HTH
    >
    > Regards
    > Ansgar Wiechers
    > --
    > "Those who would give up liberty for a little temporary safety
    > deserve neither liberty nor safety, and will lose both."
    > --Benjamin Franklin
    >
    >
    ---------------------------------------------------------------------------
    >
    ---------------------------------------------------------------------------
    >
    >

    -- 
    My spot on the web
    www.music2myear.com
    Eschew Obfuscation
    ---------------------------------------------------------------------------
    ---------------------------------------------------------------------------
    ---------------------------------------------------------------------------
    ---------------------------------------------------------------------------
    

  • Next message: Ansgar -59cobalt- Wiechers: "Re: NTFS Security"

    Relevant Pages

    • Re: SP2 download?
      ... > needed, install everything, before exposing the PC to the wild. ... Slipstream SP2 into the XP CD and then install from it. ... Once you make your new CD and use it to clean install the machine - clean it ... using Windows XP "prettifications". ...
      (microsoft.public.windowsxp.basics)
    • Re: Do i need SP2?
      ... > I am running XP pro with all updates EXCEPT SP2. ... many patches will begin requiring SP2 to install.. ... and some you can only download if you are registered - but it is best ...
      (microsoft.public.windowsxp.general)
    • Re: Just venting (totally OT)
      ... needs SP2 if it's ever going to be connected to the internet. ... There are very very few security ... manually download it and install it yourself. ... That's how the hackers get in these days - they get in by persuading ...
      (uk.people.support.depression)
    • Re: SP2 on MCE - An MVPs real life experience (some solutions)
      ... the initial install. ... I installed SP2, found the problems... ... MS-MVP - Windows XP Media Center Edition ...
      (microsoft.public.windows.mediacenter)
    • Re: svchost
      ... Well after doing another clean install with the computer all by itself...the ... SP2 installed, ZONE ALARM ... remaing 33% by internet explorer (which I need to connect to windows update) ... Hopefully since Automatic Updates ...
      (microsoft.public.windowsxp.help_and_support)