?
Solved

Prohibit Installation of .NET via Windows Updates

Posted on 2010-11-12
3
Medium Priority
?
369 Views
Last Modified: 2012-05-10
How can I prohibit windows updates from installing Microsoft .NET 3.0 and 3.5? (I am assuming they were  automatically installed since all PC's curently show in Add/REmoce Programs.  Although I did not think it was part of the 'critical' automatic updates.  I have managed the network for quite a while and have not manually installed either of these versions)

History: Our organization does not currently use a tool such as Microsoft SMS to manage PC updates.  All are Windows XP Pro workstations configured to run windows updates at the default weekly interval.  

Dilemma: A new application set to 'go-live' in two weeks does NOT work with .NET 3.0 or 3.5.  I have scripted the uninstall of the application and, in testing, appears to remove both .NET's listed above.  I am concerned that when Windows Updates runs next, it will automatically install the 3.0 and 3.5 versions again.  

What is the best approach to keep these .NET versions off the Windows XP PRO workstations?

Thanks for your insight!
0
Comment
Question by:davis
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
3 Comments
 
LVL 9

Assisted Solution

by:tsaico
tsaico earned 400 total points
ID: 34125379
If you want to keep these out, you will have to manage them via WSUS or similar tool, then in the console disprove of the hot fixes in question.

Two weeks sound a little short for your environment, but spend the weekend trying to figure out the WSUS so you can change the GPO now to at least get your deployment off.  You may also want to check out any current workstation deployment scenarios you have in the GPO already, it might have been pushed out like that to your workstations.

As for desktop management, when I was first starting to play with larger networks and getting some expereince, I had used ScriptLogic's solution and it was pretty good for what I needed at the time.  It was really good for me, since at the time I really hadn't had much real world experience with working with AD, GPO, and dealing with 300 devices at once.  
0
 
LVL 7

Accepted Solution

by:
BobintheNoc earned 1600 total points
ID: 34125565
If you can figure out the installer's actual executable name, you could try a Software Restriction Policy from Group Policy to list the executables that shouldn't be allowed to run.
0
 
LVL 1

Author Closing Comment

by:davis
ID: 34219157
Without having to deploy another utility like WSUS, Software Restriction Policy via GPO should work well for keeping this version of .NET off the netwok systems.  I need to use this for prohibiting IE 8 installs, since the app is incompatible with it as well! thanks for the assistance
0

Featured Post

Free Tool: Path Explorer

An intuitive utility to help find the CSS path to UI elements on a webpage. These paths are used frequently in a variety of front-end development and QA automation tasks.

One of a set of tools we're offering as a way of saying thank you for being a part of the community.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

This process allows computer passwords to be managed and secured without using LAPS. This is an improvement on an existing process, enhanced to store password encrypted, instead of clear-text files within SQL
Compliance and data security require steps be taken to prevent unauthorized users from copying data.  Here's one method to prevent data theft via USB drives (and writable optical media).
This video shows how to use Hyena, from SystemTools Software, to bulk import 100 user accounts from an external text file. View in 1080p for best video quality.
There are cases when e.g. an IT administrator wants to have full access and view into selected mailboxes on Exchange server, directly from his own email account in Outlook or Outlook Web Access. This proves useful when for example administrator want…
Suggested Courses

752 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question