Search results

  1. bseklecki_ge

    Trying to Boot Win 10 1607 LTSC on USB, but multiple failures

    FYI may want to change the title. When Win10 v1607 was long-term-support, it was LTSB.
  2. bseklecki_ge

    Disable password expiration?

    What is the equivalent XML in the config?
  3. bseklecki_ge

    SSL Medium Strength Cipher Suites (SWEET32)

    It would be great if we could include the latest "best practices" registry patch to schannel for Cipher Suites from Nartac IISCrypto https://www.tenable.com/plugins/nessus/42873...
  4. bseklecki_ge

    WinSvr2016 / DotNet 3.5 / Nessus 139598+138464 / CVE-2020-1476+CVE-2020-1476/ Sequence Question

    ntlite dev team: What do you think about my original sequence-of-events question?: If NTLite applies CU KBs before adding components, and those components fail to receive updates from the CU, would that be considered a bug or a Caveat/Errata? Additionally, just for hypothetical discussion...
  5. bseklecki_ge

    Direct Link KB4052623

    I've yet to successfully integrate KB4052623 ; It just silently fails to run. Need to debug parse CBS.log etc., see what is causing failure. And obviously, it cannot be merged via NTLite, as its an .exe and not .msi.
  6. bseklecki_ge

    WinSvr2016 / DotNet 3.5 / Nessus 139598+138464 / CVE-2020-1476+CVE-2020-1476/ Sequence Question

    Found it: Removing WinNAT will break WinSvr2016 v1607 Cumulative Update. Remove removing it, everything builds fine. The hint here was HyperV; and a shot-in-the-dark-guess (HyperV relies on WinNAT for NAT Mode networking) <RemoveComponents> <!-- <c>winnat 'Windows NAT...
  7. bseklecki_ge

    WinSvr2016 / DotNet 3.5 / Nessus 139598+138464 / CVE-2020-1476+CVE-2020-1476/ Sequence Question

    Hi all. Something else in my Preset is causing the problem with CU rollback on first boot. ( Something other than DotNet3.5 feature addition/activation.) If I run the two-step process: 1) Load the image and add DotNet3.5, save close 2) Strip my preset down to <updates> section only, apply...
  8. bseklecki_ge

    WinSvr2016 / DotNet 3.5 / Nessus 139598+138464 / CVE-2020-1476+CVE-2020-1476/ Sequence Question

    Confirmation immediately after install. The CU fails with 0x8007371b:
  9. bseklecki_ge

    WinSvr2016 / DotNet 3.5 / Nessus 139598+138464 / CVE-2020-1476+CVE-2020-1476/ Sequence Question

    Hi all: A quick update. I've been trying to get you test results on this to determine if I've found a bug in NTLite or not. I'm now building my WinSvr2016 Image in two phases ( as described above ). However, the resulting images, built with either of the most recent Svr2106/v1607 cumulative...
  10. bseklecki_ge

    WinSvr2016 / DotNet 3.5 / Nessus 139598+138464 / CVE-2020-1476+CVE-2020-1476/ Sequence Question

    A quick status update before C.O.B. (Manual testing in VMWare env finished faster than I expected): I dont have this problem if I build/patch manually: -> Add DotNet3.5 Manually (dism/windows server mgr) -> kb5001402 - SSU - Latest -> kb5005043 - CU - Latest (The DLLs Nessus wants are patched...
  11. bseklecki_ge

    WinSvr2016 / DotNet 3.5 / Nessus 139598+138464 / CVE-2020-1476+CVE-2020-1476/ Sequence Question

    All: I've been chasing down some vulnerabilities found by Nessus scans of my NTLite resultant image. Nessus Plugins 139598 & 138464 keep firing, complaining that the version of "system.web.dll" in [C:\windows\microsoft.net\platform\v2.xxx\] is not patched, and the remediation recommendation...
  12. bseklecki_ge

    Backporting Drivers from Windows 10 to 7?

    Backporting sort of implies having access to the original Source Code....
  13. bseklecki_ge

    KB5005394 (CU Out-of-Band for PrintNightmare)

    Yes. Rockwell Automation - FactoryTalk environment. OT/IOT/Industrial Automation. etc. etc.
  14. bseklecki_ge

    KB5005394 (CU Out-of-Band for PrintNightmare)

    I can see now that Microsoft is in the process of releasing cumulative updates for August. The official announcement is not there, but I an see they're uploading them to the catalog server index now. So this may be resolved soon...
  15. bseklecki_ge

    KB5005394 (CU Out-of-Band for PrintNightmare)

    Has anyone else had difficulty integrating KB5005394 (or the equivalent for non-1809 builds?) This is: KB5005394 July 27, 2021—KB5005394 (OS Build 17763.2091) Out-of-band ---- NOTE: This is the final hotfix for PrintNightmare Even if I just run with KB5004422 (Latest SSU for 1809) and...
  16. bseklecki_ge

    FTDI Driver Integration Failure (USB Serial Adapter)

    Hi all. I'm trying to integrate FTDI v2.12.28 (direct from FTDIChip.com). It fails during integration of both the main image, and the WinRE image, with error 0x80070002. Exact same files work fine on a system built w/o the integration, but installed manually. Moreover, FTDIPort.inf/cat loads...
  17. bseklecki_ge

    One or several parent features are disabled so the feature can not be enabled

    I'm seeing this for KB5005394 (The latest out-of-band Cumulative Update for LTSC/1809, the one that finally addresses PrintNightmare correctly) Any ideas how to debug?
  18. bseklecki_ge

    ISO Auto Checksum Calculation (MD5/SHA1/2/128/256/512 etc)

    It would be nice to automatically build a crypto checksum for ISO files; encouraging best practices on redistribution for security conscious environments.
  19. bseklecki_ge

    Two-Pass Driver Integration Mode / Boot.wim Bloating / Error 0xc000017

    Right, if I didn't have a work-around, I'm beginning to think that, strategically, its better to handle drivers (and firmware) as a series of post-install scripts. For offline/air-gapped environments, without WSUS or Windows Update, its 50/50 where to do it. I'm thinking to write a series of...
  20. bseklecki_ge

    Two-Pass Driver Integration Mode / Boot.wim Bloating / Error 0xc000017

    Setup; I'm deleting PE per the previous threads. FYI I'm observing this in NT Lite Version [v2.0.0.7797] With v1809 LTSC Ent 64bit environment, and winsvr 2018/entLTSC v1809 target OS (as per XLS)
Back
Top