Text 9075, 100 rader
Skriven 2006-01-12 20:25:52 av Mark (1:379/45)
   Kommentar till text 9074 av Mike '/m' (1:379/45)
Ärende: Re: How To Disable Reboot After Windows Automatic Update
================================================================
From: "Mark" <nomail@hotmail.com>

I went to Windows update to get the .wmf update that first night (rather than
wait for the auto-update to grab it) and got my usual "re-boot now" message
afterward. Today auto-update got two more updates, but didn't require a reboot
for them to take effect, so I assume the alleged bug didn't affect me. <just a
FYI>

"Mike '/m'" <mike@barkto.com> wrote in message
news:v4sds150cd9hhmcquj6sh42irfb86di7tn@4ax.com...
>
> http://www.emailbattles.com/archive/battles/vuln_aacgjahfig_ib/
>
> ===
> The Microsoft WMF Exploit unleashed a lot more than worms.
>
> A couple of days ago Email Battles reported that a few users suspect
> that their Windows Automatic Update settings may have been overridden,
> [http://www.emailbattles.com/archive/battles/vuln_aacfhddccc_de/]
> resulting in an unauthorized system reboot. Since then we received a
> number of comments from users and admins, at Email Battles and on other
> forums, concurring with those perceptions.
>
> Undoubtedly, many are simply mistaken. Perception, after all, is among
> the greatest of human frailties. Others, however, are quite likely
> managers and users with long experience in updating Windows. In the rush
> to push out a fix, did Microsoft override admin settings? Is there a bug
> that was triggered by unique software clashes? Or have folks simply
> misconfigured their systems in a way that allowed automatic reboots to
> happen?
>
> Microsoft's Security Response Team quickly brushed aside the notion that
> Redmond overrode administrative settings. As they're in a position to
> know what they did, and we're not, we'll concede the point. But the
> claim by some that Windows Auto Update's rebooting behavior is a feature
> instead of a bug? Sorry. Can't agree.
>
> The web has long been alive with complaints about the rebooting
> behavior, along with nostrums for correcting it, from Microsoft as well
> as others. Simple features don't usually command the amount of
> corrective copy that Windows Automatic Update has warranted. A walk
> through the Email Battles Backgrounder links at the foot of this article
> will help confirm this notion. Meanwhile, this article will tell you how
> to disable Windows Auto Update rebooting for most recent versions.
>
> Running any version of XP prior to Service Pack 2? Back up your
> registry, then add or change this key:
> HKEY_LOCAL_MACHINE\ Software\ Policies\ Microsoft\ Windows\
> WindowsUpdate\AU
>
> If it doesn't already exist, create the DWord value
> "NoAutoRebootWithLoggedOnUsers". Set it to 0 if you want Windows to
> automatically restart, or 1 to prevent automatic restart. Then exit and
> reboot your computer. The result: As long as users are logged on the
> system, it won't take matters into its own hands.
>
> Post-XP SP2, one user reports success at disabling automatic restarting
> after updates on XP Home by:
> Disabling Windows Automatic Updates;
> Opening Task Manager (by pressing Ctrl-Alt-Del);
> Ending all instances of wuauclt.exe, then;
> Making the registry changes noted above.
>
>
> Once Service Pack 2 is installed, XP Pro, 2000 and 2003 users can stop
> automatic reboots by editing Group Policy. Start the Group Policy
> editor, select Windows Update in the Windows Components portion of the
> Administrative Template, and choose No auto-restart for scheduled
> Automatic Updates installations. You can also completely disable Windows
> Update at the Group Policy or User level.
>
> Beyond that, Microsoft provides exhaustive instructions for managing
> Windows Updates on networks. Its old program, Software Update Services
> (SUS) was replaced as of 6 December 2006 by WSUS (Windows Server Update
> Services). Adding a letter to the acronym gave SUS more oomph, don't you
> think?
>
> If you haven't yet upgraded from SUS you have some prep work ahead.
> Before installing WSUS server, make sure you've downloaded BITS
> (Background Intelligent Transfer Services 2.0) for Windows 2000 or
> Windows Server 2003. BITS does a P2P-like thing, downloading updates in
> the background and sucking up all the network bandwidth it can get.
> Also, at a minimum, you'll need MSDE 2000a for Windows 2000, WMSDE for
> Windows Server 2003, or SQL Server 2000 with SP3. WMSDE comes in the
> WSUS download. Microsoft has step-by-step guides for deploying,
> migrating to and running WSUS.
>
> And if, after all these gyrations, it still doesn't work, remember: Just
> because it's Microsoft's product, doesn't mean they have to take
> responsibility for it. As so many of our contributors like to say, "Read
> your EULA."
>
> Have you come across a better solution for the Windows Automatic Update
> rebooting bug feature? Let the rest of us in on it here. We're all ears.
> ===
>
>  /m

--- BBBS/NT v4.01 Flag-5
 * Origin: Barktopia BBS Site http://HarborWebs.com:8081 (1:379/45)