lists.openwall.net   lists  /  announce  owl-users  owl-dev  john-users  john-dev  passwdqc-users  yescrypt  popa3d-users  /  oss-security  kernel-hardening  musl  sabotage  tlsify  passwords  /  crypt-dev  xvendor  /  Bugtraq  Full-Disclosure  linux-kernel  linux-netdev  linux-ext4  linux-hardening  linux-cve-announce  PHC 
Open Source and information security mailing list archives
 
Hash Suite: Windows password security audit tool. GUI, reports in PDF.
[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]
Message-ID: <200408201909.i7KJ9H306226@pop-5.dnv.wideopenwest.com>
From: mvp at joeware.net (joe)
Subject: Windows Update

Yep, this is how it works now.

You control whether Windows Update is updating or not via the security panel
in the control panel applets (wscui.cpl). 

Of course if you aren't using automatic update you could always disable the
service and just reenable when you go to do the update, or don't use windows
update at all and just pull the downloads separately. We are talking about a
single command line to reenable that service

If you like it disabled

To enable 
Sc config wuauserv start= demand & net start wuauserv

To redisable
Sc config wuauserv start= disable & net stop wuauserv


If you can live with it not being autostart
To enable 
net start wuauserv

To redisable
net stop wuauserv


You could even make a batch file to launch windows update and if it make the
changes for you. If you want to get really fancy writing an app to do that
wouldn't be overly involved either and then you can just replace what is
fired by the icon for Windows Update. 



Is it a pain? Yes, for those who like to run minimal services. Is it a
security issue or life threatening, probably not. 


As for SP2 not being available for Pro on WU yet, that is also correct.
Corporations asked for a hold on the launch so they can get some testing
done and if necessary get a registry change in place to block WU auto
updates of SP2 until later. You obviously still can manually go download it.
It will not be available for Pro on WU until at least 8/25/2004. 



  joe
 

-----Original Message-----
From: full-disclosure-admin@...ts.netsys.com
[mailto:full-disclosure-admin@...ts.netsys.com] On Behalf Of ISNYC
Sent: Friday, August 20, 2004 1:31 PM
To: 'Security List'; full-disclosure@...sys.com
Subject: RE: [Full-Disclosure] Windows Update

I have had that same issue.

Check to see if your BITS Service is on.
I had mine disabled. It didn't like that.

Try enabling the BITS service, then try again.

I have Automatic Updates disabled now, and I can update manually.

Ez.





-----Original Message-----
From: full-disclosure-admin@...ts.netsys.com
[mailto:full-disclosure-admin@...ts.netsys.com] On Behalf Of Security List
Sent: Friday, August 20, 2004 11:51 AM
To: full-disclosure@...sys.com
Subject: [Full-Disclosure] Windows Update


Went to windows update last night w/ XP Pro. 
Redirected to the v5 version.  I was asked to install the new Windows Update
software...downloaded the WU software...copied the files...then saw
registering...kinda thinking that it was checking for a valid registration
or license.  No updates needed according to WU.  XP SP2 is not available via
WU for XP Pro yet.

Now, I checked the Automatic Update service to see if it was turned back
start automatic as I always have it disabled.  Yup, it was set to automatic
and it was started.  I stop and disable automatic update service, and try
WU.  Get error stating that the automatic update service must be enable to
use WU now.  Has anybody else head of this?  Once again, we must have
services that we do not want enable.  I can not believe that they are
forcing user to turn on the service to use WU.



		
__________________________________
Do you Yahoo!?
Yahoo! Mail - 50x more storage than other providers!
http://promotions.yahoo.com/new_mail

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html


Powered by blists - more mailing lists

Powered by Openwall GNU/*/Linux Powered by OpenVZ