Adding hotfix to RIS image

B

Brad

Can anyone suggest how I can slipstream the latest security patches
into our XP RIS images on Win2k server? As soon as we bring new boxes
online, the become infected with the blaster worm.

Brad
 
R

Roger Abell

I do not have a KB reference for you, though there
may be one covering this. What follows is the recipe
that I use - but I do not recall who/where all credits are
due any longer - but it works.

In your source tree make a new subdir i386\svcpack
Say you have a downloaded hotfix such as
x:\tmp\Q876543_w2k_sp4_x86_en.exe
copy /b this to i386\svcpack\Q876543.exe
(notice filename change)

Now in some work/scratch space unpack the hotfix
(can usually do this by running it with the /x switch)
Now, looking at the unpacked hotfix just obtained,
you will probably see some dirs, like sp1, sp2, common
and a couple files at the top.

Go to the sp2 dir if you are adding fixes that apply on
top of XP Sp1 (fixes that will be in Sp2)
From there copy the .cat file (or files) to i386\svcpack
Copy all other files (other than those that are part of the
update installer; that is copy the dll, sys, exe etc files or
an .\uniproc if existing) into \i386 (that is not i386\svcpack)

You can compare a few unpacked hotfixes to start to get an
idea of what is the fix code (to be copied) compared to what
is the update installer files.

OK, now final step is to edit i386\svcpack.inf
Here is example with MinorVersion, BuildNumber shown for w2k

[Version]
Signature="$Windows NT$"
MajorVersion=5
MinorVersion=0
BuildNumber=219
[SetupData]
CatalogSubDir="\i386\svcpack"
[ProduactCatalogsToInstall]
Q876543.cat
[SetupHotfixesToRun]
Q876543.exe /q /n /z

To add more hotfixes, unpack, copy cat and files and
edit to add one line to each of last two sections.

Some hotfixes use different switches for unattended
install with no reboot, so check the KB article for
guidance (you will want to use /n:a syntax with some)

After you have added new fixes to the i386 tree, load
the source into SIS under a new name, adjust the sif
and commandlines.txt as usual, etc.
 
B

Brad

Roger, what I had done resulted in this error for each of the files in
the patch. Have you seen this before?
I'll try again with your recipe inthe morning.

Brad


Error:
Setup detected that the system file named
[c:\windows\system32\rpcrt4.dll] is not signed properly
by Microsoft. This file could not be restored to the correct
Microsoft version.
Use the SFC utility to verify the integrity of the file.
 
B

Brad

I do not get those, and actually am left wondering why/how you would
with signature testing at the default state during an initial install.
--ra
Roger, I'll let you know if/when I figure it out! Thanks!

Brad
 
R

Roger Abell

I do not get those, and actually am left wondering why/how you would
with signature testing at the default state during an initial install.
--ra
 
P

Pyro

Hi Brad,

I think your problem might be you didn't delete the original file in
\i386 directory.(Same file name, only different with a "_" at the end
the of suffix. Like srv.dll vs SRV.DL_)

BRs
Pyro
 

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments. After that, you can post your question and our members will help you out.

Ask a Question

Top