Sunday, December 9, 2007

Windows Service Pack Blocker Tool Kit

Muchísimos usuarios de Windows Vista claman (o clamaban) por la llegada del Service pack que les ayudara a que su aplicación o pieza de hardware funcionara de una **/-#$*** vez con este sistema operativo, pero no todos los responsables de sistemas o los encargados de IT por alguna razón están de buenas con la inminente actualización de sistemas operativos, a todos nos ha pasado que nuestro periférico , aplicación o juego favorito deja de funcionar del modo adecuado cuando actualizamos a la más nueva versión del sistema operativo y en algunas ocasiones las aplicaciones internas o propietarias de la empresa (que no tienen a quien echarle la culpa cuando dejan de trabajar) que no pueden detenerse son las que ya funciona de milagro y también están los usuarios que de todo se quejan y a los que todos les falla, entonces para que los pobres hombres encargados de sistemas puedan hacer pruebas y estar seguros de que todo va a funcionar antes de liberar los parches tienen esta herramienta de Microsoft para evitar la actualización vía Internet por algún momento.

Overview

A blocking tool is available for organizations that would like to temporarily prevent installation of Service Pack updates through Windows Update. This tool can be used with:
  • Windows Server 2003 Service Pack 2 (valid through March, 2008)
  • Windows XP Service Pack 3 (valid for 12 months following general availability)
  • Windows Vista Service Pack 1 (valid for 12 months following general availability)


This toolkit contains three components. All of them function primarily to set or clear a specific registry key that is used to detect and block download of Service Packs from Windows Update. You only need to use the component which best serves your organization’s computer management infrastructure.
  • A Microsoft-signed executable
  • A script
  • An ADM template
  1. The executable creates a registry key on the computer on which it is run that blocks or unblocks (depending on the command-line option used) the delivery of a Service Pack to that computer through Windows Update. The key used is HKLM\Software\Policies\Microsoft\Windows\WindowsUpdate.

    When the '/B' command line option is used, the key value name 'DoNotAllowSP' is created and its value set to 1. This value blocks delivery of a Service Pack to the computer through Automatic Update or Windows Update.

    When the '/U' command line option is used, the previously created registry value that temporarily blocked the delivery of a Service Pack to the computer through Automatic Update or Windows Update is removed. If the value does not exist on the computer on which it is run, no action is taken.


  2. The script does the same thing as the executable, but allows you to specify the remote machine name on which to block or unblock delivery of Service Packs.


  3. Note that the executable and script have been tested only as a command-line tool and not in conjunction with other systems management tools or remote execution mechanisms.

  4. The ADM template allows administrators to import group policy settings to block or unblock delivery of Service Packs into their Group Policy environment. Administrators can then use Group Policy to centrally execute the action across systems in their environment.


Please note that this toolkit will not prevent the installation of the service pack from CD/DVD, or from the stand-alone download package. This simply prevents the service pack from being delivered over Windows Update.


No comments:

Post a Comment

Cuando esto es una conversación, todos ganamos