How to install XPsp2 with sms. 1

[tbrennans]

Instructions for both sms2.0 and sms 2003

http://support.microsoft.com/default.aspx?kbid=842844&product=windowsxpsp2

seems easy enough....

Tim B


check this out to.

http://support.microsoft.com/default.aspx?scid=fh;ln;windowsxpsp2it

 

[tiefight]

One thing though, once installed, SP2 turns on it's firewall by default, which will block you out of remote tools, software pushing, and a few other things.

I'm playing with an .inf file (see below) to open up remote tools and WMI, and there a couple hot fixes for the other problems if you search the MS knowledge base.

Thread on myitforum about the .inf file:

http://myitforum.techtarget.com/forums/tm.asp?m=72782&p=1&tmode=1

 

[tbrennans]

and a bit more.....

http://myitforum.techtarget.com/forums/tm.asp?m=72680&p=1&tmode=1

 

[Mich]

I've test XPSP2 on several clients in the office now it's time to test on the population via SMS. Does anyone have any "Watch out for"s?

tiefight, I hadn't heard that XPSP2 will prevent SMS(?) software pushes. Are you sure about that one? Please tell me MS didn't do that.

-If it ain't broke, break it and make it better.

 

[mstarrett]

Yes XPSP2 will prevent SMS rollout and remote access. Unless you add the following ports to your netfw.in_ file on the two directories it is located on SP2.
Here is what I did.
[ICF.AddReg.DomainProfile]
HKLM,"SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\AuthorizedApplications\List","%windir%\system32\sessmgr.exe",0x00000000,"%windir%\system32\sessmgr.exe:*:enabledxpsp2res.dll,-22019"
HKLM,"SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\IcmpSettings","ICMP Message Type",0x00010001,1
HKLM,"SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\GloballyOpenPorts\List","2701:TCP",0x00000000,"2701:TCP:*:enabled:SMS-TCP-2701"
HKLM,"SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\GloballyOpenPorts\List","2701:UDP",0x00000000,"2701:UDP:*:enabled:SMS-UDP-2701"
HKLM,"SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\GloballyOpenPorts\List","2702:TCP",0x00000000,"2702:TCP:*:enabled:SMS-TCP-2702"
HKLM,"SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\GloballyOpenPorts\List","2702:UDP",0x00000000,"2702:UDP:*:enabled:SMS-UDP-2702"
HKLM,"SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\GloballyOpenPorts\List","2703:TCP",0x00000000,"2703:TCP:*:enabled:SMS-TCP-2703"
HKLM,"SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\GloballyOpenPorts\List","2703:UDP",0x00000000,"2703:UDP:*:enabled:SMS-UDP-2703"
HKLM,"SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\GloballyOpenPorts\List","2704:TCP",0x00000000,"2704:TCP:*:enabled:SMS-TCP-2704"
HKLM,"SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\GloballyOpenPorts\List","2704:UDP",0x00000000,"2704:UDP:*:enabled:SMS-UDP-2704"
HKLM,"SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\GloballyOpenPorts\List","6129:TCP",0x00000000,"6129:tcp:*:enabledameware"
HKLM,"SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\GloballyOpenPorts\List","137:UDP",0x00000000,"137:UDP:LocalSubNet:Enabledxpsp2res.dll,-22001"
HKLM,"SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\GloballyOpenPorts\List","138:UDP",0x00000000,"138:UDP:LocalSubNet:Enabledxpsp2res.dll,-22002"
HKLM,"SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\GloballyOpenPorts\List","139:TCP",0x00000000,"139:TCP:LocalSubNet:Enabledxpsp2res.dll,-22004"
HKLM,"SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\GloballyOpenPorts\List","445:TCP",0x00000000,"445:TCP:LocalSubNet:Enabledxpsp2res.dll,-22005"
HKLM,"SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\GloballyOpenPorts\List","3389:TCP",0x00000000,"3389:TCP:*:Enabledxpsp2res.dll,-22009"

It will work fine if you add these ports. I included Dameware ports as well and ICMP.

Mike

 

[Mich]

What am I doing wrong?

Post XPSP2 installation.

This is what I did,

1) Opened netfw.inf.

2) Added the ports I want opened. The ones listed in mstarrett's post plus a few others.

3) Saved netfw.inf.

4) Ran 'netsh firewall reset' and got a 'OK' confirmation.

Still these ports haven't been opened up for me. When I check the firewall config GUI they aren't there. I have tried a reboot, but these ports still don't show up as open.

Any clues?

-If it ain't broke, break it and make it better.

 

[Mich]

Hmm, I just read some information that claims 'netsh firewall reset' resets the firewall to default config. Now why would MS want me to make changes then run 'netsh firewall reset'?? Anyway, I made my changes, rebooted, DID NOT run the netsh command, and my ports still aren't open.

-If it ain't broke, break it and make it better.