OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
Re: Last Two Critical Updates (IE-828750 and Windows Media Player-828 026)

From: Knight, Jim (Jim.KnightYUM.COM)
Date: Fri Oct 10 2003 - 12:58:47 CDT


There is a setting in Windows update that defines this behavior. It was
introduced with SP1 for SUS and is included in the SP1 for WinXP and
Win2k3, but not included with Windows 2000 SP3 (might be in SP4) or the
Client for SUS for Windows 2000 (SP2). Basically the settings are as
follows:

Reschedule Automatic Updates scheduled installations
        Wait after system startup(minutes): default: 5 default:
5
No auto-restart for scheduled Automatic Updates installations

These are included in an WAUA.ADM template for Group Policy or can be
configured on the local machine via Registry Entry.

Again for whatever reason this template was not included in SP3 for
Windows 2000 or was it included in the SUS Client 1.1 install that MS
provides.

Go get the updated template go to the following URL: (may wrap)

http://www.microsoft.com/downloads/details.aspx?FamilyId=D26A0AEA-D274-4
2E6-8025-8C667B4C94E9&displaylang=en

The registry keys to set this manually are located at

HKLM\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate specifically the
AU key under that.

You can also do a search for KB828010 for more on these settings. It
appears MS's search engine is down though.

Hope this helps.

Thanks,

Jim

This communication is confidential and may be legally privileged. If you are not the intended recipient, (i) please do not read or disclose to others, (ii) please notify the sender by reply mail, and (iii) please delete this communication from your system. Failure to follow this process may be unlawful. Thank you for your cooperation.

-----
Out of Office replies to list messages cause you to be unsubscribed
automatically. Either subscribe a Public Folder, or ensure you're rules are
set to ensure list messages are filtered prior to your Out of Office reply.
Such automatic replies are a bane to posters, and cause us to have fewer
researchers post to NTBugtraq.
-----