Solved

Prohibit Installation of .NET via Windows Updates

Posted on 2010-11-12
3
363 Views
Last Modified: 2012-05-10
How can I prohibit windows updates from installing Microsoft .NET 3.0 and 3.5? (I am assuming they were  automatically installed since all PC's curently show in Add/REmoce Programs.  Although I did not think it was part of the 'critical' automatic updates.  I have managed the network for quite a while and have not manually installed either of these versions)

History: Our organization does not currently use a tool such as Microsoft SMS to manage PC updates.  All are Windows XP Pro workstations configured to run windows updates at the default weekly interval.  

Dilemma: A new application set to 'go-live' in two weeks does NOT work with .NET 3.0 or 3.5.  I have scripted the uninstall of the application and, in testing, appears to remove both .NET's listed above.  I am concerned that when Windows Updates runs next, it will automatically install the 3.0 and 3.5 versions again.  

What is the best approach to keep these .NET versions off the Windows XP PRO workstations?

Thanks for your insight!
0
Comment
Question by:davis
3 Comments
 
LVL 9

Assisted Solution

by:tsaico
tsaico earned 100 total points
ID: 34125379
If you want to keep these out, you will have to manage them via WSUS or similar tool, then in the console disprove of the hot fixes in question.

Two weeks sound a little short for your environment, but spend the weekend trying to figure out the WSUS so you can change the GPO now to at least get your deployment off.  You may also want to check out any current workstation deployment scenarios you have in the GPO already, it might have been pushed out like that to your workstations.

As for desktop management, when I was first starting to play with larger networks and getting some expereince, I had used ScriptLogic's solution and it was pretty good for what I needed at the time.  It was really good for me, since at the time I really hadn't had much real world experience with working with AD, GPO, and dealing with 300 devices at once.  
0
 
LVL 7

Accepted Solution

by:
BobintheNoc earned 400 total points
ID: 34125565
If you can figure out the installer's actual executable name, you could try a Software Restriction Policy from Group Policy to list the executables that shouldn't be allowed to run.
0
 
LVL 1

Author Closing Comment

by:davis
ID: 34219157
Without having to deploy another utility like WSUS, Software Restriction Policy via GPO should work well for keeping this version of .NET off the netwok systems.  I need to use this for prohibiting IE 8 installs, since the app is incompatible with it as well! thanks for the assistance
0

Featured Post

Zoho SalesIQ

Hassle-free live chat software re-imagined for business growth. 2 users, always free.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Installing a printer using group policy preferences is not that hard let’s take a look at it. First lets open up your group policy console and edit the policy you want to add it to. I recommend creating a new policy for each printer makes it a l…
This script can help you clean up your user profile database by comparing profiles to Active Directory users in a particular OU, and removing the profiles that don't match.
This tutorial will walk an individual through the steps necessary to join and promote the first Windows Server 2012 domain controller into an Active Directory environment running on Windows Server 2008. Determine the location of the FSMO roles by lo…
This Micro Tutorial hows how you can integrate  Mac OSX to a Windows Active Directory Domain. Apple has made it easy to allow users to bind their macs to a windows domain with relative ease. The following video show how to bind OSX Mavericks to …

863 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

25 Experts available now in Live!

Get 1:1 Help Now