The problem with applying them post-installation is that if the fix is for a network-related vulnerability, your machine will be open to compromise from the time it starts the network to the time it finishes the post-install tasks and does a reboot. This is a good few minutes, and in the case of stuff like MS03-039 it's plenty of time for the machine to be done over.
 
I now do installs with the machine disconnected from the network, and make sure that the machine is patched to a reasonable level before plugging it into anything that I cannot absolutely trust.
 
Trustworthy Computing indeed...
 
Steve Bennett, Lancaster University, UK.


From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Network Administrator
Sent: 13 January 2004 19:30
To: [EMAIL PROTECTED]
Subject: RE: [ActiveDir] OT: slipstreaming Win2K

Unfortunately, you can’t slipstream most (any?) hotfixes into installation media, though I seem to remember reading somewhere that Microsoft intends to make all critical updates slipstreamable.

 

In the meantime, though, you can use a workaround to install hotfixes in an unattended install.  Though not quite as smooth as slipstreaming, it works just as well in the end.  You can find a well-written article about that at the following URL:

 

http://www.cheese.org/~scott/useful/Slipstreaming%20Builds.doc

 

If I remember correctly, you simply have to rename the hotfixes, throw them in a particular directory on the installation media, and write a CMDLINES.TXT file that executes after the installation has completed.

 

-James R. Rogers, MCSE

 

 


From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Creamer, Mark
Sent: Tuesday, January 13, 2004 11:06 AM
To: [EMAIL PROTECTED]
Subject: [ActiveDir] OT: slipstreaming Win2K

 

I’ve successfully slipstreamed service packs into a Win2K install media before, but never looked into adding any hotfixes to it. So I started looking into how to do it, and was surprised to find dialog from one of Microsoft’s online tech chats, in which the rep said you can’t do that. Did I misunderstand, or can I really not add hotfixes to a slipstream image?

 

Thanks…oh, and Tony – thanks also from me for a great list!

 

Mark Creamer

Systems Engineer

Cintas Corporation

Honesty and Integrity in Everything We Do

 

Reply via email to