does this work . . .

By Who Am I Really ·
as MS will pull the pin on Win2K on Tuesday 13/July/2010

here's what I want to know if I can do?

when automatic updates is set to
- DL & notify, but don't install

the updates are stored in

waiting for approval or rejection

now basically the updates that are offered through WAU are for any system running that version of the OS
there are some which are component based such as .net framework updates or MDAC etc.
but the win security patches apply to all

here's the Q.

if I were to bomb a system Monday and do a fresh win2K install up to SP4
get the system configured and ready to receive the updates

can I just Jack the whole ...\SoftwareDistribution

folder tree and drop it on another system and have WAU recognize the updates and be able to apply them

currently I am in the middle of DL all the manual KB######*.exe files I can find but some are only available through WAU as I've found while going through the KB######*.log files

there are 127 installed on one system but so far I've found at least 5 or 6 only get installed through WAU

This conversation is currently closed to new comments.

Thread display: Collapse - | Expand +

All Answers

Collapse -


by TheChas In reply to does this work . . .

What you really need is a Windows Update Server (WSUS) to assure that you can get all of the updates.

As far as manually installing updates, you can save a little time by downloading Update Roll-up 1 for Service Pack 4.

I don't know that MS is pulling the updates next week. Just that after this cycle there will be no more updates published for Windows 2000.

And that is actually your biggest problem if you have to stick with Windows 2000. No more patches for security holes.

What we are doing is placing our Windows 2000 systems on a restricted LAN with a hardware firewall that isolates the restricted LAN from the primary LAN. Ports through the firewall will only be opened for required uses and justification is required for each port that is opened.


Collapse -

WSUS in a workgroup? . . .

by Who Am I Really In reply to WSUS

How does one set up a WSUS on a workgroup?

I have a "peer" workgroup network with no DC server. (they're too blasted expensive)

My primary Router does the DHCP and hands out the IP address for the network

all the systems are workstations and all just exist to do 1, 2 or 3 things

- mostly file & print sharing
& CD / DVD Creation
where the XP systems create, Data DVDs
and the Win2K systems create, Data CDs, CD-DA, disc image ISO files etc.

I've recently added 2 more XP-Pro SP3 workstations to take more of the file load off of the main workstation
and I've also added another P3 with Win2K to the mix
(they were almost free! so I'll use them)
the two XP systems cost me, the price of the XP CD's which I already had

the win2K P3 was completely free

free or almost free is another reason I'll use these "slightly" older systems

I already have my LAN behind a dual cascaded firewall security router setup, both providing DHCP services
the second router is a DHCP client of the first,
which is laid out as follows:

-> Modem
- -> D-Link Router ( subnet 1 )
- -> Linksys/Cisco Router ( subnet 2 )
- -> 8-port Switch
- -> PCs

I will be going into the inner Router and checking to see if I can block all the win2K systems from web access but not block network access,
I have to check the docs but I may be able to block by Name, MAC, IP address, but IP addresses are currently dynamic and I may have to set it up to hand out static permanent address.

Collapse -

Another Option

by TheChas In reply to WSUS in a workgroup? . . ...

Another option which might get you some of the missing updates would be to download the monthly Security Release ISO image files.

My personal collection only goes back to May of 2007.

The advantage of collecting the ISO image files is that you have all of the updates published that month. Should you get a different system that has a different version of Windows on it, you have the older updates on the ISO images.

I also suspect that some of the updates and KB articles you cannot find were either pulled because the update caused too many users to have problems. Or, were replaced by a newer version of the update.

In your situation, I would be tempted to build up a clean W2K system. Install SP4 and the Update roll-up for SP4.

Then, connect to Windows Update and make a list of the updates.

One other note: When I install updates manually, I always install them in the order they were released. Prevents writing over a registry key with an older setting.


Collapse -

in the middle of that . . .

by Who Am I Really In reply to Another Option

Thanks for the ideas;

I'm in the middle of gathering both sets

I contacted MS support and they gave me a link to the list of all the update DVD ISO images going back to 2006
everything before Jan 2006 is single KB or Q
the images contain all updates released for all supported OS, and they take about 3 - 6 hours each to DL from the office and about 2-3 days each on my home connection
and longer when the connection times out and I have to delete the "*.*.part" file & restart the DL

so it's going to take me about a month or so to get all DVD ISO files

over the last 3 days I have pulled all the individual KB.exe files I could find using the
KB######.log files I found by issuing the following
c:\winnt\> dir /a /s /b *.log > \updlog.txt

and compiled the list with dates as I went through the list to DL each

all the different machines have some updates that aren't in others so I'll have to make a separate list for each

now the next job is to sort them by date into the correct order and drop them onto a CD in individual folder sets by release date

I find it funny that WAU offers to DL and install more than one version of an update

ie. WAU offers and installs both


but on the MS DL center only the V2 KB*.exe is available

Related Discussions

Related Forums