Re: XP SP 2 via Windows Update

From: Torgeir Bakken (MVP) (Torgeir.Bakken-spam_at_hydro.com)
Date: 02/27/04 

Date: Fri, 27 Feb 2004 01:42:41 +0100

Charlie wrote:

> I know it's a long way off, but what options are we going
> to have when it comes to XP SP2 being deployed by Windows
> Update? Unless we're using SUS we aren't going to be able
> to stop the installation. I am not too concerned about
> that, but what about the Internet Firewall being enabled
> by default? This would be a disaster in enterprise
> environments. I'm also guessing that IE will be locked
> down the same way it is in W2K3 Server, where it's
> practically unusable for a typical user.

Hi

Yes, the firewall will be enabled by default, and no, I doubt very much
that IE will be locked down the same way it is in W2K3 Server.

More here:

Changes to Functionality in Microsoft Windows XP Service Pack 2
http://www.microsoft.com/downloads/details.aspx?familyid=7bd948d7-b791-40b6-8364-685b84158c78&displaylang=en

(disregard the OS part of the System Requirements in the link above)

Also, a lot of information about how to manage WinXP SP2 ICF is already
released to the public.

Using GPO settings when you have Active Directory is of course the best
option, but WinXP SP2 will also implement command line support for ICF
to e.g. turn it on or off, or configure it (alternatively you can disable
the ICF service, that will really stop it ;-)

See "Appendix B" in the document in the link below for more on this new
command line netsh interface in SP2.

This white paper describes the methods that can be used to deploy WinXP SP2
ICF settings in a managed environment:

Deploying Internet Connection Firewall Settings for Microsoft® Windows XP
with Service Pack 2
http://www.microsoft.com/downloads/details.aspx?familyid=4454e0e1-61fa-447a-bdcd-499f73a637d1&displaylang=en

and here is more released information:

Group Policy Settings Reference for Windows XP Professional Service
Pack 2 Beta *Pre-Release Documentation*
Download details: Group Policy Settings Spread*** (Pre-Release):
http://www.microsoft.com/downloads/details.aspx?familyid=ef3a35c0-19b9-4acc-b5be-9b7dab13108e&displaylang=en

and

Windows XP Service Pack 2: A Developer's View
http://msdn.microsoft.com/library/en-us/dnwxp/html/securityinxpsp2.asp 

--
torgeir
Microsoft MVP Scripting and WMI, Porsgrunn Norway
Administration scripting examples and an ONLINE version of the 1328 page
Scripting Guide: http://www.microsoft.com/technet/scriptcenter
Loading