full-disclosure - Windows Update

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

From: mvp at joeware.net (joe)
Subject: Windows Update

Yep, this is how it works now.

You control whether Windows Update is updating or not via the security panel
in the control panel applets (wscui.cpl). 

Of course if you aren't using automatic update you could always disable the
service and just reenable when you go to do the update, or don't use windows
update at all and just pull the downloads separately. We are talking about a
single command line to reenable that service

If you like it disabled

To enable 
Sc config wuauserv start= demand & net start wuauserv

To redisable
Sc config wuauserv start= disable & net stop wuauserv

If you can live with it not being autostart
To enable 
net start wuauserv

To redisable
net stop wuauserv

You could even make a batch file to launch windows update and if it make the
changes for you. If you want to get really fancy writing an app to do that
wouldn't be overly involved either and then you can just replace what is
fired by the icon for Windows Update. 

Is it a pain? Yes, for those who like to run minimal services. Is it a
security issue or life threatening, probably not. 

As for SP2 not being available for Pro on WU yet, that is also correct.
Corporations asked for a hold on the launch so they can get some testing
done and if necessary get a registry change in place to block WU auto
updates of SP2 until later. You obviously still can manually go download it.
It will not be available for Pro on WU until at least 8/25/2004. 

  joe

-----Original Message-----
From: full-disclosure-admin@...ts.netsys.com
[mailto:full-disclosure-admin@...ts.netsys.com] On Behalf Of ISNYC
Sent: Friday, August 20, 2004 1:31 PM
To: 'Security List'; full-disclosure@...sys.com
Subject: RE: [Full-Disclosure] Windows Update

I have had that same issue.

Check to see if your BITS Service is on.
I had mine disabled. It didn't like that.

Try enabling the BITS service, then try again.

I have Automatic Updates disabled now, and I can update manually.

Ez.

-----Original Message-----
From: full-disclosure-admin@...ts.netsys.com
[mailto:full-disclosure-admin@...ts.netsys.com] On Behalf Of Security List
Sent: Friday, August 20, 2004 11:51 AM
To: full-disclosure@...sys.com
Subject: [Full-Disclosure] Windows Update

Went to windows update last night w/ XP Pro. 
Redirected to the v5 version.  I was asked to install the new Windows Update
software...downloaded the WU software...copied the files...then saw
registering...kinda thinking that it was checking for a valid registration
or license.  No updates needed according to WU.  XP SP2 is not available via
WU for XP Pro yet.

Now, I checked the Automatic Update service to see if it was turned back
start automatic as I always have it disabled.  Yup, it was set to automatic
and it was started.  I stop and disable automatic update service, and try
WU.  Get error stating that the automatic update service must be enable to
use WU now.  Has anybody else head of this?  Once again, we must have
services that we do not want enable.  I can not believe that they are
forcing user to turn on the service to use WU.

__________________________________
Do you Yahoo!?
Yahoo! Mail - 50x more storage than other providers!
http://promotions.yahoo.com/new_mail

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html