Integrating IE 6 SP1 and Updates

[Guest]

Is there a way that I can integrate IE 6 SP1 as well as critical updates into a Windows 2000 installation point?

 

[Oli Restorick [MVP]]

No, they can't be slipstreamed.

You can install IE6SP1 straight over Windows 2000 SP4 during GUIRunOnce.
One reboot later, you can install the MS04-004 critical update using the
command-line switches documented in the associated article.

Regards

Oli

Is there a way that I can integrate IE 6 SP1 as well as critical updates

into a Windows 2000 installation point?

 

[NIC Student]

Or you can use the free SUS to deploy the fixes.

http://www.microsoft.com/windowsserversystem/sus/default.mspx

 

[Oli Restorick [MVP]]

That, too. SUS is great.

Or you can use the free SUS to deploy the fixes.

http://www.microsoft.com/windowsserversystem/sus/default.mspx

 

[NIC Student]

Hi Oli,

Just a further FYI for the original poster ..

I haven't tried the IE6 SP's this way, but I sometimes deploy hotfixes using
the cmdlines.txt method. There is an advantage to this in that the
GUIRunOnce executes then the user logs on and the user must have admin
rights to install the fix. The machine may sit idle and unpatched until
this happens. The cmdlines.txt method executes during final setup during
the "saving settings section" of the GUI install so the fixes are installed
under the System account and protect the OS when the final reboot takes
place (we include the Blaster/Welchia fixes this way).

My site has a little blurb on this (click the Installing Hotfixes in RIS
link):

http://www.mvps.org/serverstuff/

Oli are you coming to Seattle in April?

 

[Oli Restorick [MVP]]

Hi Scott

I use autoadminlogon to log in the required number of times as admin. I've
never tried installing IE6SP1 during cmdlines.txt, but obviously you need to
do that before you can install any cumulative patches for IE. Also, my
build does some other stuff that requires a reboot (like renaming the PC)
during cmdlines.txt.

I do, however, install the patch for MS03-039 during cmdlines.txt. It does
leave the PC vulnerable for a short period of time during the installation,
though.

That's why I'd like to see Microsoft provide a way of leaving the network
disabled (or heavily firewalled so that only outbound connections can be
made) during setup. Secure by default and all that.

Yes, Scott, I'll be in Seattle in April. I'll keep an eye out for you.

Cheers

Oli

 

[NIC Student]

That's why I'd like to see Microsoft provide a way of leaving the network

disabled (or heavily firewalled so that only outbound connections can be
made) during setup. Secure by default and all that.

============
Amen, brother.

I use autoadminlogon to log in the required number of times as admin

build does some other stuff that requires a reboot (like renaming the PC)

during cmdlines.txt
============
I'd love to see your setup on this, can you email it to me at
(e-mail address removed) ?? - remove part in caps Are you using RIS to
deploy, and if so, do you have any trouble getting the RIPREP images to obey
your command.txt?

 

[Gerry Hickman]

Is there a way that I can integrate IE 6 SP1 as well as critical updates into a Windows 2000 installation point?

I currently use the IEAK for IE6SP1 and any IE patches. This means IE is
a one click install (or you can probably chain it in CMDLINES, but I
have not tried this). The IE6 patches are currently considered
"separate" to the operating system patches (a bit like MDAC, MSXML etc).

One thing to look out for. I recently had to put IE6SP1 on a fully
patched server that previously had IE5.5, and it wiped out dozens of
patches. I don't know if reinstallling IE6SP1 over itself would also
wipe out the patches...