XP SP2 Blocker

Sue · 19th January 2005

Can you tell me if this script will block XP sp2 permenantly or will it expire in April? We are having some issue with SP2 and want to block it permenantly.
I found this on the Microsoft site.

' Copyright (c) Microsoft Corporation 2004
' File: BlockXPSP2.vbs
' Contents: Remotely blocks or unblocks the delivery of
' Windows XP SP2 from Windows Update web site or via Automatic
' Updates.
' History: 8/20/2004 Peter Costantini Created
' Version: 1.0

On Error Resume Next

' Define constants and global variables.
Const HKEY_LOCAL_MACHINE = &H80000002
strComputer = "." ' Can be changed to name of remote computer.
strKeyPath = "Software\Policies\Microsoft\Windows\WindowsUpdate"
strEntryName = "DoNotAllowXPSP2"
dwValue = 1

' Handle command-line arguments.
Set colArgs = WScript.Arguments
If colArgs.Count = 0 Then
ShowUsage
Else
If colArgs.Count = 2 Then
strComputer = colArgs(1)
End If
' Connect with WMI service and StdRegProv class.
Set objReg = GetObject _
("winmgmts:{impersonationLevel=impersonate}!\\" & _
strComputer & "\root\default:StdRegProv")
If Err = 0 Then
If (LCase(colArgs(0)) = "/b") Or _
(LCase(colArgs(0)) = "-b" ) Then
AddBlock
ElseIf (LCase(colArgs(0)) = "/u") Or _
(LCase(colArgs(0)) = "-u") Then
RemoveBlock
Else
ShowUsage
End If
Else
WScript.Echo "Unable to connect to WMI service on " _
& strComputer & "."
End If
Err.Clear
End If

'*************************************************************

Sub AddBlock

'Check whether WindowsUpdate subkey exists.
strParentPath = "SOFTWARE\Policies\Microsoft\Windows"
strTargetSubKey = "WindowsUpdate"
intCount = 0
intReturn1 = objReg.EnumKey(HKEY_LOCAL_MACHINE, _
strParentPath, arrSubKeys)
If intReturn1 = 0 Then
For Each strSubKey In arrSubKeys
If strSubKey = strTargetSubKey Then
intCount = 1
End If
Next
If intCount = 1 Then
SetValue
Else
WScript.Echo "Unable to find registry subkey " & _
strTargetSubKey & ". Creating ..."
intReturn2 = objReg.CreateKey(HKEY_LOCAL_MACHINE, _
strKeyPath)
If intReturn2 = 0 Then
SetValue
Else
WScript.Echo "ERROR: Unable to create registry " & _
"subkey " & strTargetSubKey & "."
End If
End If
Else
WScript.Echo "ERROR: Unable to find registry path " & _
strParentPath & "."
End If

End Sub

'*************************************************************

Sub SetValue

intReturn = objReg.SetDWORDValue(HKEY_LOCAL_MACHINE, _
strKeyPath, strEntryName, dwValue)
If intReturn = 0 Then
WScript.Echo "Added registry entry to block Windows XP " & _
"SP2 deployment via Windows Update or Automatic Update."
Else
WScript.Echo "ERROR: Unable to add registry entry to " & _
"block Windows XP SP2 deployment via Windows Update " & _
"or Automatic Update."
End If

End Sub

'*************************************************************

Sub RemoveBlock

intReturn = objReg.DeleteValue(HKEY_LOCAL_MACHINE, _
strKeyPath, strEntryName)
If intReturn = 0 Then
WScript.Echo "Deleted registry entry " & strEntryName & _
". Unblocked Windows XP SP2 deployment via Windows " & _
"Update or Automatic Update."
Else
WScript.Echo "Unable to delete registry entry " & _
strEntryName & ". Windows XP SP2 deployment via " & _
"Windows Update or Automatic Update is not blocked."
End If

End Sub

'*************************************************************

Sub ShowUsage

WScript.Echo "Usage:" & VbCrLf & _
" BlockXPSP2.vbs { /b | /u | /? } [hostname]" & VbCrLf & _
" /b = Block (deny) Windows XP Service Pack 2 " & _
"deployment" & VbCrLf & _
" /u = Unblock (allow) Windows XP Service Pack 2 " & _
"deployment" & VbCrLf & _
" /? = Show usage" & VbCrLf & _
" hostname = Optional. Name of remote computer. " & _
"Default is local computer" & VbCrLf & _
"Example:" & VbCrLf & _
" BlockXPSP2.vbs /b client1"

End Sub

Thanks

Welshjim · 20th January 2005

Sue--Have you read
http://www.microsoft.com/technet/pro.../sp2aumng.mspx ?
Even after April 12, I would assume that at worst you will still have the options in Automatic Update to no longer notify you or download but not install in addition to automatic download/install. It is hard to believe that MS would force you to install SP2.

You could also call MS at 1-866-PCSAFETY to ask them what will happen.
Or (888) SP2-HELP
Both calls are free.

Sue · 20th January 2005

The problem is: we are a college with over 500 laptops. I would like windows updates to install, just not sp2. We are having some compability problems with sp 2. Certain applications that faculty requries them to install will not work. So I need to disable sp2 until atleast this summer when we can build a custom image, with sp2 and all the changes necessary for the applications to run.

I will call the numbers you listed.

Thanks

Welshjim · 20th January 2005

Sue--So set Automatic Updates to "Turn Off Automatic Updates" but visit the Windows Update site every week or so manually and ignore the offer for SP2.
http://v5.windowsupdate.microsoft.co....aspx?ln=en-us

Sue · 20th January 2005

We are talking over 500 students. Asking them to do updates is not a possibility. Let alone asking them to omit sp2.

**Rockster2U** · 20th January 2005

From another perspective - two potential solutions.
1. Upgrade the faculty and hopefully, those problem apps become a non-issue.
2. Start Spring Break early and extend it into next fall.

edit after reading Sue's post below: Must have been my ambiguity - wasn't talking about upgrading Staff to SP2, was suggesting a new staff.

Sue · 20th January 2005

Staff cannot have the sp2. Our software vendor will not approve it. They will not provide us support if we install it. But they still only support sql 7.0.

In a few short words....we are in a fix.