Hmmmm... I should have waited for the other posts. I tested the script on a
clean build yesterday and had some problems.

The first was the fact that chktrust is not installed on Windows 2000
Advanced Server, with or without Service Pack 1, by default. Actually, I
don't know if can be installed from the W2KAS CD. After searching, I found
that you could get chktrust after downloading the 204MB SDK. Do you know of
any easier ways to get chktrust??

The second was the lack of keymigrt. It wasn't installed either, but one of
your recent posts cleared that up.

Another was with one of the service packs trying to overwrite protected
files (not sure which one). I answered yes, do it. After the reboot,
running qfecheck showed one hotfix, Q269049, as needing to be reinstalled.
I re-ran that one hotfix and then it was happy.

For me, it was a mixed bag. I liked the wget program, that's slick, I
hadn't seen that before. I'd like to expand the hotfixes.txt file for other
programs, but where did you get the information about download location from
Microsoft??

David Finehout

-----Original Message-----
From: .sozni [mailto:soznido.cked.NET]
Sent: Tuesday, April 03, 2001 23:54
To: FOCUS-MSSECURITYFOCUS.COM
Subject: Re: XATO hotfixes installation

The version of chktrust I am running (5.131.2134.1) shows these options:
C:\>chktrust /?
usage: chktrust [options] filename
     -?: this screen
     -v: verbose output
     -q: do not display any UI

I got my version from the Microsoft Platform SDK, but perhaps there is
another utility with the same name that you are using.

.sozni

-----Original Message-----
From: Focus on Microsoft Mailing List [mailto:FOCUS-MSSECURITYFOCUS.COM]On
Behalf Of Diego González
Sent: Tuesday, April 03, 2001 4:57 AM
To: FOCUS-MSSECURITYFOCUS.COM
Subject: Re: XATO hotfixes installation

Hi,

The chktrust -q in hotfixes.cmd doesn't work. Are you sure that the
parameter is -q or -i?

for %2 %%f in (Q*.exe) do chktrust -q %%f || ren %%f %%f.bad

The rest of the commands works fine. Great script.

thank you,

At 15.59 29/3/01 -0700, you wrote:

We thought we would share our instructions for getting a Windows 2000 server
up-to-date. The download URLs we have included are only for English
hotfixes and does not cover client software like Internet Explorer.

1. Download and install the high encryption pack
(http://www.microsoft.com/windows2000/downloads/recommended/encryption/defau
lt.asp)

2. Reboot (this is essential at this point or the next step will have
problems).

3. Download and install Service Pack 1
(http://www.microsoft.com/windows2000/downloads/recommended/sp1/default.asp)

4. Reboot again.

5. Download WGET for Windows
(http://www.interlog.com/~tcharron/wgetwin.html)

6. Run the attached hotfixes.cmd file.

7. Check the folder for any hotfixes that have been renamed with the .bad
extension and download and reapply those.

7. Run keymigrt.exe and follow instructions if there are any.

8. Reboot.

9. Run qfecheck.exe /v to verify that everything installed correctly

9. As new hotfixes are released, add the download URLs to hotfixes.txt.

_____________________________________

Diego González Gómez
Departamento Técnico
dggomezgenetsis.com
tecnicosgenetsis.com

GENETSIS - Internet Partners
www.genetsis.com
Tel +34 914575933 - Fax +34 914581386
Avda. Alberto Alcocer, 24 3º
28036 Madrid
_____________________________________

• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]