full-disclosure - Windows Update

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [day] [month] [year] [list]

From: toddtowles at brookshires.com (Todd Towles)
Subject: Windows Update

You are correct, I look into this deeper this morning and found the same
results. It doesn't matter if it is running or not. It can be running
and set to manual, WindowsUpdate will still fail.

Therefore you have to set the service to autotmaic for WindowsUpdate to
work. It is Microsoft's attempt to force all users to have automatic
updates on by default. This is fine for your everyday normal at home
user but it is a pain for corporations. People that use SUS need it
anyways, so it isn't a big deal. But we use SMS and I had the service
all to save resources. It was a service that was going to never work
correctly anyways (due to corporate proxy). Therefore to make company
turn on a unneeded service after telling everyone to turn off all
unneeded services for security is pretty lame.

Once again, I see a need to have a separate OS base for corporations and
home customers. But I am glad to see the death of the Win9x kernel.

-----Original Message-----
From: full-disclosure-admin@...ts.netsys.com
[mailto:full-disclosure-admin@...ts.netsys.com] On Behalf Of Michael
Schaefer
Sent: Monday, August 23, 2004 2:17 PM
To: full-disclosure@...sys.com
Subject: Re: [Full-Disclosure] Windows Update

It looks like windows update requires Automated Updates to be set to
automatic startup, but does not require the process to actually be
running...

So the statement that they are "required" is obviously false.

As a work around, I can manually change the startup status, do the
windows update, then change the startup status back to manual.

Seriously annoying, but doable.

<

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html