Windows Service Pack Blocker Tool Kit Download Available

[javajolt]

Microsoft has released the Windows Service Pack Blocker Tool Kit yesterday. It can be used to block the deployment of Windows 7 Service Pack 1 and Windows Server 2008 R2 Service Pack 1 for 12 months following general availability of the service packs.
 
The toolkit contains three components which all set or clear a Registry key that blocks or allows the installation of the service pack 1 via Windows Update. Why three and not one component? Because different computer infrastructures may required different means of blocking the service packs from being installed.
 
Included in the bundle are the following three components:

► A Microsoft-signed executable
 
► A script

► An ADM template

Note that the executable and script have been tested only as a command-line tool and not in conjunction with other systems management tools or remote execution mechanisms.

A Microsoft-signed executable

The executable creates a registry key on the computer on which it is run that blocks or unblocks (depending on the command-line option used) the delivery of a Service Pack to that computer through Windows Update. The key used is HKLM\Software\Policies\Microsoft\Windows\WindowsUpdate.

When the ‘/B’ command line option is used, the key value name ‘DoNotAllowSP’ is created and its value set to 1. This value blocks delivery of a Service Pack to the computer through Automatic Update or Windows Update.

When the ‘/U’ command line option is used, the previously created registry value that temporarily blocked the delivery of a Service Pack to the computer through Automatic Update or Windows Update is removed. If the value does not exist on the computer on which it is run, no action is taken.

A script

The script does the same thing as the executable, but allows you to specify the remote machine name on which to block or unblock delivery of Service Packs.

An ADM template

The ADM template allows administrators to import group policy settings to block or unblock delivery of Service Packs into their Group Policy environment. Administrators can then use Group Policy to centrally execute the action across systems in their environment.

The Windows Service Pack Blocker Tool Kit prevents only the installation of a service pack via Windows Update. It is still possible to update the system by downloading the service pack separately or by applying the patch from CD/DVD or other media.
 
The Windows Service Pack Blocker Tool Kit can be downloaded from directly from Microsoft’s Download Center.

[Snuffy]

Just wondering why did you not also include the IE9 Blocker....
 

[javajolt]

I was rushing this morning to get to temple and just forgot, so here it is!

To Prevent Automatic Internet Explorer 9 Distribution

A final release of Microsoft’s newest Internet browser Internet Explorer 9 is just around the corner. Microsoft plans to deliver the browser as an important update via Windows Update which are set to be automatically downloaded and installed by default.

This can be problematic in computer networks, organizations and businesses that do not want to update to Internet Explorer 9 right away.

The Internet Explorer 9 blocker Toolkit has been created to change the update class of IE9 from important to optional. This ensures that the web browser will not be installed automatically when it is made available by Microsoft.

To help our customers become more secure and up-to-date, Microsoft will distribute Windows Internet Explorer 9 as an important update through Automatic Updates for Windows Vista SP2 for x64 and x86, Windows Server 2008 SP2 for x64 and x86, Windows 7 x86 RTM and higher and Windows Server 2008 R2 RTM and higher for x64. This Blocker Toolkit is intended for organizations that would like to block automatic delivery of Internet Explorer 9 to machines in environments where Automatic Updates is enabled. The Blocker Toolkit will not expire.

It has to be noted that the Blocker Toolkit prevents only the automatic delivery of Internet Explorer 9 via Windows Update. It does not prevent users from installing the new version on the computer system, for instance by download it from Microsoft’s Download Center or selecting the optional update for installation in Windows Updates. Administrators need to make sure that those options are blocked to prevent the installation of the new browser version.

The Blocker Toolkit is not needed in environments where update management solutions are installed. This includes Windows Server Update Services or System Management Server 2003. These products can be used to fully manage the deployment of the update.

The IE9 Blocker Toolkit can be downloaded from Microsoft’s Download Center.