barrowhill wrote:
> Friend having trouble with updates not installing. Updates got to 75%
> install then errors, reverts and restarts (twice). Diagnosed to being
> KB2345886 - All other updates installed this only one outstanding.
>
> She's using a Toshiba Laptop running Win 7 Home premium 64bit edition and
> would appreciate help resolving
>
>
From:
http://support.microsoft.com/kb/2345886
" This article describes a nonsecurity update that implements Extended
Protection for Authentication in the Server service.
For more information, click the following article number to view the
article in the Microsoft Knowledge Base:
968389 (
http://support.microsoft.com/kb/968389/ ) Extended Protection
for Authentication "
BTW, I *hate* checking either of those KB articles since Microsoft has
decided to run a script on them that freezes almost all browsers.
From:
http://support.microsoft.com/kb/968389/
" After you install this security update, you must implement the
following registry subkey settings to enable Extended Protection: "
which leads one to a Fixit that can be run to implement the Extended
Protection that may *never* even be used by web sites.
Nowhere does the KB article state that the Fixit does *not* have to be
run if the OS is Windows 7.
One has to read the Security Advisory to learn that :
http://www.microsoft.com/technet/sec...ry/973811.mspx
" Is this a security vulnerability that requires Microsoft to issue a
security update?
No, this is not a security vulnerability that requires Microsoft to
issue a security update. This feature requires optional configuration
that some customers may choose to deploy. Enabling this feature is not
appropriate for all customers. For more information about this feature
and how to appropriately configure it, see Microsoft Knowledge Base
Article 973811. This feature is already included in Windows 7 and
Windows Server 2008 R2. "
So, in conclusion
1. Either Hide the update as it's causing more problems than it's worth
and it is not classified as a security update although it is
security-related.
2. Configure the system to Clean boot. If a 3rd party firewall was being
used previously, open Control Panel > Windows Firewall to confirm that
the native Windows 7 firewall is now On.
Then manually download the update and *save* it to ensure that you have
a viable copy of it -
Update for Windows 7 for x64-based Systems (KB2345886)
http://www.microsoft.com/downloads/e...9-1bc5839515f9
Once the download completes close all open browsers and programs, then
install Windows6.1-KB2345886-x64.msu, and restart whether prompted to or
not.
Undo the Clean boot steps, restart once more.
MowGreen
================
*-343-* FDNY
Never Forgotten
================
"Security updates should *never* have *non-security content* prechecked
Linear Mode
