Windows XP SP2 question

[Link19]

Does Windows XP SP2 contain all the critical and important security updates that were released up to the day before SP2 final was released for both Windows XP and IE6 SP1? Can I turn off the firewall and the other annoying new security wanrnings that MS included with SP2? To put it in simple terms, I just want to slipstream Windows XP SP2 on the Windows XP installation CD so I can have all the latest security updates installed on a clean installation of Windows XP without having to visit Windows update everytime I do a clean installation of Windows XP. So does SP2 include all the important and critical security updates and bug fixes for Windows XP? That is the only reason I really want to slipstream SP2 on the installation CD. Is there a way for sure I can turn off or disable all the new firewall and security restricting features SP2 comes and anything else it comes with that may be of annoyance that aren't included in WIndows XP original or XP SP1?

 

[MrChad]

1. Yes, SP2 includes all of the critical security updates released prior to it.
2. Yes, you can slipstream SP2 into your Windows setup CD so that you don't need to download pre-SP2 updates after installing.
3. Yes, you can disable Windows firewall, however I would not recommend doing this unless you are planning to run a third-party firewall.

 

[Link19]

Originally posted by: MrChad
1. Yes, SP2 includes all of the critical security updates released prior to it.
2. Yes, you can slipstream SP2 into your Windows setup CD so that you don't need to download pre-SP2 updates after installing.
3. Yes, you can disable Windows firewall, however I would not recommend doing this unless you are planning to run a third-party firewall.

I already do have a third party hardware firewall being a NAT/router. Ok, so it includes all critical security updates. Does it include important security updates as well? And if it doesn't, are security updates rated as important by Microsoft very important for you to have in addition to critical security updates? ARe important security updates even downloaded by default with Windows Update, or is it only critical updates that are downloaded by default from Windows Update?

And can I disable the features in SP2 that nag you to turn the firewall on or visit WIndows update all the time?

 

[MrChad]

Anything labelled "critical" in Windows Update has been rolled into SP2. Generally, any windows update that is security-related is labelled as "critical". You will be covered.

The new Security Center will nag you if you disable the built-in firewall and/or turn off Automatic Updates. I'm sure there are ways to disable these nags, but I've found both the firewall and automatic updates to be pretty unintrusive, so I leave them on (I'm behind a NAT router as well).

 

[Link19]

Originally posted by: MrChad
Anything labelled "critical" in Windows Update has been rolled into SP2. Generally, any windows update that is security-related is labelled as "critical". You will be covered.

The new Security Center will nag you if you disable the built-in firewall and/or turn off Automatic Updates. I'm sure there are ways to disable these nags, but I've found both the firewall and automatic updates to be pretty unintrusive, so I leave them on (I'm behind a NAT router as well).

Look at this site here which is Microsoft's security bulletin. http://www.microsoft.com/technet/security/current.aspx


Not all updates say critcal next to them. Some say moderate and some say important next to them. But most hoever say critical.

 

[MrChad]

You will be covered. SP2 should include all security-related updates to Windows released prior to it.

 

[bsobel]

Originally posted by: MrChad
You will be covered. SP2 should include all security-related updates to Windows released prior to it.

No. You will have most, but to say that all, up to the day that SP2 was released is not true. You should still run WU after the install to get any missing updates.

Bill

 

[MrChad]

Originally posted by: bsobel

Originally posted by: MrChad
You will be covered. SP2 should include all security-related updates to Windows released prior to it.

No. You will have most, but to say that all, up to the day that SP2 was released is not true. You should still run WU after the install to get any missing updates.

Bill

I thought running Windows Update was a given.

Thanks for correcting me, and sorry to the OP for spreading misinformation.

 

[bsobel]

I thought running Windows Update was a given.

It should be! The original poster did ask "so I can have all the latest security updates installed on a clean installation of Windows XP without having to visit Windows update everytime I do a clean installation of Windows XP" But even if the answer would be 'yes' today, we all know there will be additional updates that will be required soon.

Bill

 

[nihl8tor88]

yes you can disable these nags.
go to control panel and open up the security center.
choose firewall or updates , Recommendations.
there should be a checkbox in there where you tell the sec center
that you will monitor it yourself

 

[VirtualLarry]

Apparently, if you use a Symantec product that is XP SP2-aware, it will reset those registry settings controlling the checking/alerting for AV/firewall/etc components in the new Security Center. The only workaround is to remove "SYSTEM"'s permission to write to those registry keys, or disable the entire Security Center service.

 

[bsobel]

Originally posted by: VirtualLarry
Apparently, if you use a Symantec product that is XP SP2-aware, it will reset those registry settings controlling the checking/alerting for AV/firewall/etc components in the new Security Center. The only workaround is to remove "SYSTEM"'s permission to write to those registry keys, or disable the entire Security Center service.

VL, do you have a link? I'd like to send it over to consumer dev in the morning and see if that is intentional.

Best,
Bill

 

[VirtualLarry]

Yep, it has it's own thread on the Security forum on DSLR -
http://www.dslreports.com/foru...ark,11213428~mode=flat

I'm guessing that it's by-design, perhaps as a forceable workaround to prevent that S.C. spoofing issue that we've heard so much about lately.
The problem comes about, when someone only wants to have the S.C. monitor a subset of security features, and disable monitoring of the others. (Which is obvious, reading the linked thread.)