Re: Confirm SP2 installed



Ron, there are many ways you can get this information.

From the command line:

C:\>systeminfo | find "Service Pack"
or
c:\>wmic OS GET CSDVersion


or using WMI from a script:

Win32_OperatingSystem
http://windowssdk.msdn.microsoft.com/en-us/library/aa394239.aspx

From the Registry:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion CSDVersion

You could even check to see if certain files exist:
C:\windows\System32\Driver Cache\i386\Sp2.cab
C:\Windows\System32\dllcache\SP2.cat
C:\windows\system32\xpsp2res.dll


Mark Burnett





"Ron" <Ron@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message news:BFC0AC77-82A5-4A02-B28A-91D3E93158ED@xxxxxxxxxxxxx:

Hi Michael,

Sadly, I am net admins, not a programmer :) At the time of connection there
is a piece of software that is downloaded to the client. I am able to use
command line inputs to get this program to return a TRUE or FALSE result to
the specific check being done.

Unless anyone knows of the registry keys or files to check, I will have to
throw it back to the developers of our endpoint who might find your linked
article helpful.

Thank you for your assistance Michael. Have a good day!

Anyone else???

"Michael Chambers" wrote:

> >
> > Before esatblishing a remote connection into our office network, we are
> > able
> > to carry out client integrity checks of clients PCs in our users homes.
> >
> > The checks are pretty basic - We can check if a file exists in a
> > particular
> > location, we can check if a registry key exists and has the correct
> > information and we can MD5 hash files to check for integrity.
> > lockdown
> > I want to ensure that our users are running XP with SP2 installed.
> > 1. What registry key/data will confirm this to me?
> > 2. Is there a particular executable that will be the same (XP home and
> > Pro)
> > that I could check integrity with a hash?
> > 3. Is there a better newsgroup to post this in? :)
>
> Can you write your own software to do this? If so then see
> http://windowssdk.msdn.microsoft.com/en-us/library/ms724451.aspx .There are
> references here for doing it remotely as well though I've never tried it
> outside of the local intranet. Note that doing it by checking some registry
> key or a file may be possible (protected Windows files in particular) but
> it's not really a good idea unless you have no choice. I'm not sure what
> MSFT would have to say about it (you can try contacting them) but I
> seriously doubt they would recommend it. Using an official function from the
> Windows API is normally the proper way to do it (note that I'm a very
> experienced software developer)
> Windows Hardening
>
>

.



Relevant Pages

  • Re: Cain shows DefaultPassword in plain text - LASS writes it
    ... Windows should have no need to decrypt the credentials of other users, ... Without physical security, there is no security. ... > I found that LSASS writes the following registry keys whenever I change ... > Removing DefaultPassword and serveral other registry keys under ...
    (microsoft.public.security)
  • Re: Symantec Acknowledges XP SP3, Vista SP1 Registry Corruption
    ... Problems occur after installing Windows XP Service Pack 3 or Windows Vista Service Pack 1 with a Norton 2008 product installed ... Numerous registry keys are added when you upgrade to Windows XP Service Pack 3 or Windows Vista Service Pack 1 with a Norton product installed. ... During the upgrade to Windows XP Service Pack 3 or Windows Vista Service Pack 1, a tool called Fixccs.exe creates a series of registry keys in many locations (some of them within the Symantec registry keys) but is unable to remove them. ...
    (microsoft.public.windowsupdate)
  • RE: Registry Recovery message when booting windows
    ... To restore registry keys, the best way is to reinstall Windows XP ... to let your computer boot from the Windows XP CD. ...
    (microsoft.public.windowsxp.help_and_support)
  • RE: SP3 and Norton on new computer
    ... Numerous registry keys are added when you upgrade to Windows XP Service Pack ... Steps to take before you install Windows XP Service Pack 3 ...
    (microsoft.public.windowsupdate)
  • Re: AutoUpdates
    ... up permissions on several registry keys, and finding them is an even ... all it is doing is replacing the Windows files. ... "undoing" all tracks of your Windows Updates. ... Then the installer did a backup to prepare for an uninstall. ...
    (microsoft.public.windowsxp.help_and_support)