MS patches changing registry entries

  • Thread starter Thread starter wjr
  • Start date Start date
W

wjr

Guest
Is there a way to prevent MS updates from changing a specified registry

setting? For one of the text converters, we point to a specific one we

install, but for some reason, MS recently has started to set that entry

back to the default setting. I don't want to see that setting changed

from our custom setting.



FYI, we are a vendor at the site and the site is responsible for admin

of their AD. We have little/no say over what can happened in their AD.

So any AD solution will have to run to the Admin group get approved

then go through an executive committee and the security group before it

can be deployed. Individual users do not get admin rights.
 
Which specific registry setting are you referring to ?



Is it related to the registry settings that resulted from installing

KB973904 ?



MS09-073: Description of the security update for Windows XP, Windows

2000, and Windows Server 2003: December 8, 2009

http://support.microsoft.com/kb/973904/





MowGreen

================

*-343-* FDNY

Never Forgotten

================



banthecheck.com

"Security updates should *never* have *non-security content* prechecked





wjr wrote:

> Is there a way to prevent MS updates from changing a specified registry

> setting? For one of the text converters, we point to a specific one we

> install, but for some reason, MS recently has started to set that entry

> back to the default setting. I don't want to see that setting changed

> from our custom setting.

>

> FYI, we are a vendor at the site and the site is responsible for admin

> of their AD. We have little/no say over what can happened in their AD.

> So any AD solution will have to run to the Admin group get approved then

> go through an executive committee and the security group before it can

> be deployed. Individual users do not get admin rights.
 
"wjr" said this in news item

news:uNlMV2AsKHA.728@TK2MSFTNGP04.phx.gbl...

> Is there a way to prevent MS updates from changing a specified registry

> setting? For one of the text converters, we point to a specific one we

> install, but for some reason, MS recently has started to set that entry

> back to the default setting. I don't want to see that setting changed

> from our custom setting.

>

> FYI, we are a vendor at the site and the site is responsible for admin of

> their AD. We have little/no say over what can happened in their AD. So

> any AD solution will have to run to the Admin group get approved then go

> through an executive committee and the security group before it can be

> deployed. Individual users do not get admin rights.



You could right-click that key, then click Security. Now make yourself the

owner and give everyone else nothing but read-access. Best to test your

modification - some MS Automatic Updates might fail when they cannot do

their usual job.
 
Which updates?



Most updates change all sorts of things in the Registry by default.





wjr wrote:

> Is there a way to prevent MS updates from changing a specified registry

> setting? For one of the text converters, we point to a specific one we

> install, but for some reason, MS recently has started to set that entry

> back to the default setting. I don't want to see that setting changed

> from our custom setting.

>

> FYI, we are a vendor at the site and the site is responsible for admin

> of their AD. We have little/no say over what can happened in their AD.

> So any AD solution will have to run to the Admin group get approved

> then go through an executive committee and the security group before it

> can be deployed. Individual users do not get admin rights.
 
PA Bear [MS MVP] wrote:

> Which updates?

>

> Most updates change all sorts of things in the Registry by default.

>

>

> wjr wrote:

>> Is there a way to prevent MS updates from changing a specified registry

>> setting? For one of the text converters, we point to a specific one we

>> install, but for some reason, MS recently has started to set that entry

>> back to the default setting. I don't want to see that setting changed

>> from our custom setting.

>>

>> FYI, we are a vendor at the site and the site is responsible for admin

>> of their AD. We have little/no say over what can happened in their AD.

>> So any AD solution will have to run to the Admin group get approved

>> then go through an executive committee and the security group before it

>> can be deployed. Individual users do not get admin rights.

I don't know the specific key as I am waiting for details from the

on-site engineer. But the specific key really doesn't answer the basic

question which I have asked. Which was "Is there a way to prevent MS

patch updates from changing a registry entry?". They way I see it,

someone doesn't need the specific reg entry to answer the general

question, assuming they know an answer.
 
wjr wrote:



> PA Bear [MS MVP] wrote:

>

>> Which updates?

>>

>> Most updates change all sorts of things in the Registry by default.

>>

>>

>> wjr wrote:

>>

>>> Is there a way to prevent MS updates from changing a specified registry

>>> setting? For one of the text converters, we point to a specific one we

>>> install, but for some reason, MS recently has started to set that entry

>>> back to the default setting. I don't want to see that setting changed

>>> from our custom setting.

>>>

>>> FYI, we are a vendor at the site and the site is responsible for admin

>>> of their AD. We have little/no say over what can happened in their AD.

>>> So any AD solution will have to run to the Admin group get approved

>>> then go through an executive committee and the security group before it

>>> can be deployed. Individual users do not get admin rights.

>

> I don't know the specific key as I am waiting for details from the

> on-site engineer. But the specific key really doesn't answer the basic

> question which I have asked. Which was "Is there a way to prevent MS

> patch updates from changing a registry entry?". They way I see it,

> someone doesn't need the specific reg entry to answer the general

> question, assuming they know an answer.



Patches WILL change registry entries. So the answer is no, not if you

want patches installed.
 
Bob I wrote:

> wjr wrote:

>

>> PA Bear [MS MVP] wrote:

>>

>>> Which updates?

>>>

>>> Most updates change all sorts of things in the Registry by default.

>>>

>>>

>>> wjr wrote:

>>>

>>>> Is there a way to prevent MS updates from changing a specified

>>>> registry setting? For one of the text converters, we point to a

>>>> specific one we install, but for some reason, MS recently has

>>>> started to set that entry back to the default setting. I don't

>>>> want to see that setting changed from our custom setting.

>>>>

>>>> FYI, we are a vendor at the site and the site is responsible for

>>>> admin of their AD. We have little/no say over what can happened

>>>> in their AD. So any AD solution will have to run to the Admin

>>>> group get approved then go through an executive committee and the

>>>> security group before it can be deployed. Individual users do not

>>>> get admin rights.

>>

>> I don't know the specific key as I am waiting for details from the

>> on-site engineer. But the specific key really doesn't answer the

>> basic question which I have asked. Which was "Is there a way to

>> prevent MS patch updates from changing a registry entry?". They way

>> I see it, someone doesn't need the specific reg entry to answer the

>> general question, assuming they know an answer.

>

> Patches WILL change registry entries. So the answer is no, not if you

> want patches installed.



Exactly.



The only other option is that once the update is applied -- and assuming

that this update is indeed responsible for the changing of the specific

registry entry (which is unknown!) -- , change the registry setting to

what one wishes it to be (and hope that it won't compromise one's

security!).
 
wjr wrote:

>>> Is there a way to prevent MS updates from changing a specified registry

>>> setting? For one of the text converters, we point to a specific one we

>>> install, but for some reason, MS recently has started to set that entry

>>> back to the default setting. I don't want to see that setting changed

>>> from our custom setting.

>>>

>>> FYI, we are a vendor at the site and the site is responsible for admin

>>> of their AD. We have little/no say over what can happened in their AD.

>>> So any AD solution will have to run to the Admin group get approved

>>> then go through an executive committee and the security group before it

>>> can be deployed. Individual users do not get admin rights.

>>

>> Which updates?

>>

>> Most updates change all sorts of things in the Registry by default.

>

> I don't know the specific key as I am waiting for details from the

> on-site engineer. But the specific key really doesn't answer the basic

> question which I have asked. Which was "Is there a way to prevent MS

> patch updates from changing a registry entry?". They way I see it,

> someone doesn't need the specific reg entry to answer the general

> question, assuming they know an answer.



[OK, we'll bottompost...]



Then the answer is No, nor can you have your hair cut without cutting your

hair.
 
PA Bear [MS MVP] wrote:

> wjr wrote:

>>>> Is there a way to prevent MS updates from changing a specified registry

>>>> setting? For one of the text converters, we point to a specific one we

>>>> install, but for some reason, MS recently has started to set that entry

>>>> back to the default setting. I don't want to see that setting changed

>>>> from our custom setting.

>>>>

>>>> FYI, we are a vendor at the site and the site is responsible for admin

>>>> of their AD. We have little/no say over what can happened in their AD.

>>>> So any AD solution will have to run to the Admin group get approved

>>>> then go through an executive committee and the security group before it

>>>> can be deployed. Individual users do not get admin rights.

>>>

>>> Which updates?

>>>

>>> Most updates change all sorts of things in the Registry by default.

>>

>> I don't know the specific key as I am waiting for details from the

>> on-site engineer. But the specific key really doesn't answer the basic

>> question which I have asked. Which was "Is there a way to prevent MS

>> patch updates from changing a registry entry?". They way I see it,

>> someone doesn't need the specific reg entry to answer the general

>> question, assuming they know an answer.

>

> [OK, we'll bottompost...]

>

> Then the answer is No, nor can you have your hair cut without cutting

> your hair.

Nice try but fail. It's more can I get my hair but don't touch the

cowlick. Still, I will give you a C- for effort.
 
wjr wrote:

> Is there a way to prevent MS updates from changing a specified

> registry setting? For one of the text converters, we point to a

> specific one we install, but for some reason, MS recently has

> started to set that entry back to the default setting. I don't

> want to see that setting changed from our custom setting.

>

> FYI, we are a vendor at the site and the site is responsible for

> admin of their AD. We have little/no say over what can happened in

> their AD. So any AD solution will have to run to the Admin group

> get approved then go through an executive committee and the

> security group before it can be deployed. Individual users do not

> get admin rights.



First off - if the entry is being changed to default by a patch - it must be

in some place the patch writers deems it important to change. Which patch?

All patches?



You say you are a vendor and this is a 'text converter' and a 'specific one

we install'
 
You must log in or register to reply here.
Back
Top