So Joe…

A huge number of hotfixes have been released since Windows XP Service Pack 2 became available. When you do unattended installs, you need to add these hotfixes to your deployment so they can be installed as well. Over time, some of the hotfixes replace others, so not every hotfix ever released is needed at this point. In an effort to clean up my hotfix installation, I decided to find out which hotfixes are currently required so I can toss the rest.

To do this, I simply ran my scripted installation without installing any hotfixes. I then went to Windows Update to get a list of everything it thought I needed (high priority updates only). Note that I’m running the english version of the 32-bit Windows XP SP2.

The first thing you have to do when you get there is install three pieces that allow Windows Update to run properly:

Microsoft Windows Installer 3.1

Download size: 2.5 MB

The Microsoft Windows Installer 3.1 is the application installation and configuration service for Windows. The additional features in version 3.1 help make creating, distributing, and managing updates to applications easier and more efficient.

Update for Windows XP (KB898461)

Download size: 477 KB

This update installs a permanent copy of Package Installer for Windows to enable software updates to have a significantly smaller download size. The Package Installer facilitates the install of software updates for Microsoft Windows operating systems and other Microsoft products. After you install this update, you may have to restart your system.

Windows Genuine Advantage Validation Tool (KB892130)

Download size: 734 KB

The Windows Genuine Advantage Validation Tool enables you to verify that your copy of Microsoft Windows is genuine. The tool validates your Windows installation by checking Windows Product Identification and Product Activation status.

Once those are installed, a reboot is required. I then again proceeded to Windows Update where I was told I needed 65 hotfixes to be ‘up-to-date’. One of those updates is Internet Explorer 7. I’m not ready to unleash that on my users yet, so I left that one out, but with all of the rest downloaded and ready for installation, the directory takes up 83MB. Their are so many that I can no longer include them in the i386 folder of my unattended install or the initial copy fails due to lack of disk space. Instead, I need to run them from the GuiRunOnce section of the unattend.txt file, so it can grab them all from a file server.

So, here is the list of required hotfixes for Windows XP SP2 as of 2:00pm CST on December 12th (in KB order with IE7 last), you can of course get them through Windows Update, or they can be downloaded at www.microsoft.com/downloads/, just type the KB number in the search box:

Security Update for Windows XP (KB885835)

Typical download size: 393 KB

A security issue has been identified that could allow an attacker to compromise your Windows-based system and gain control over it. You can help protect your computer by installing this update from Microsoft. After you install this item, you may have to restart your computer.

Security Update for Windows XP (KB885836)

Typical download size: 342 KB

A security issue has been identified that could allow an attacker to compromise your Windows-based system and gain control over it. You can help protect your computer by installing this update from Microsoft. After you install this item, you may have to restart your computer.

Critical Update for Windows XP (KB886185)

Download size: 384 KB

This update helps narrow the definition of the My network, or local subnet, restriction option in the Windows Firewall. This is helpful in situations where the Windows Firewall would consider a large network to be on the local subnet because of how the dial-up software configured the route tables. After you install this item, you may have to restart your computer.

Security Update for Windows Messenger (KB887472)

Typical download size: 330 KB

A security issue has been identified that could allow an attacker to compromise your Windows-based system and gain control over it. You can help protect your computer by installing this update from Microsoft. After you install this item, you may have to restart your computer.

Security Update for Windows XP (KB888302)

Typical download size: 330 KB

A security issue has been identified that could allow an attacker to remotely read information about your Windows-based system. You can help protect your computer by installing this update from Microsoft. After you install this item, you may have to restart your computer.

Windows Malicious Software Removal Tool – November 2006 (KB890830)

Download size: 4.5 MB

After the download, this tool runs once to check your computer for infection by specific, prevalent malicious software (including Blaster, Sasser, and Mydoom) and helps to remove any infection found. If an infection is found, the tool will display a status report the next time you start your computer. A new version of the tool will be offered every month. If you want to manually run the tool on your computer, you can download a copy from the Microsoft Download Center or run an online version from microsoft.com. This tool is not a replacement for an anti-virus product. To help protect your computer, you should use an anti-virus product.

Security Update for Windows XP (KB890859)

Typical download size: 1.3 MB

A security issue has been identified that could allow an attacker to remotely compromise your Windows-based system and gain control over it. You can help protect your computer by installing this update from Microsoft. After you install this item, you may have to restart your computer.

Security Update for Windows XP (KB891781)

Typical download size: 333 KB

A security issue has been identified that could allow an attacker to compromise your Windows-based system and gain control over it. You can help protect your computer by installing this update from Microsoft. After you install this item, you may have to restart your computer.

Security Update for Windows XP (KB893756)

Typical download size: 491 KB

A security issue has been identified in the Telephony Application Programming Interface (TAPI) that could allow an attacker to compromise your Microsoft Windows-based system and gain control over it. You can help protect your computer by installing this update from Microsoft. After you install this item, you may have to restart your computer.

Update for Windows XP (KB894391)

Typical download size: 706 KB

Install this update to address an issue that may cause a “Generic Host Process” error message to be displayed after you install security update MS05-012, or cause attachment file names not to be displayed in Rich Text e-mail messages. After you install this update, you may have to restart your computer.

Security Update for Windows XP (KB896358)

Typical download size: 685 KB

A security issue has been identified in the HTML Help component that could allow an attacker to compromise your Windows-based system and gain control over it. You can help protect your computer by installing this update from Microsoft. After you install this item, you may have to restart your computer.

Security Update for Windows XP (KB896423)

Typical download size: 494 KB

A security issue has been identified in the Print Spooler service that could allow an attacker to compromise your Microsoft Windows-based system and gain control over it. You can help protect your computer by installing this update from Microsoft. After you install this item, you may have to restart your computer.

Security Update for Windows XP (KB896424)

Typical download size: 958 KB

A remote code execution security issue has been identified in the Graphics Rendering Engine that could allow an attacker to remotely compromise your Windows-based system and gain control over it. You can help protect your computer by installing this update from Microsoft. After you install this item, you may have to restart your computer.

Security Update for Windows XP (KB896428)

Typical download size: 470 KB

A security issue in Telnet has been identified that could allow an attacker to learn information about your Windows-based system. You can help protect your computer by installing this update from Microsoft. After you install this item, you may have to restart your computer.

Security Update for Windows XP (KB899587)

Typical download size: 560 KB

A security issue has been identified that could allow an attacker to gain access to sensitive data transmitted through your Microsoft Windows-based system in a domain environment, and to perform denial of service attacks against domain controllers. You can help protect your computer by installing this update from Microsoft. After you install this item, you may have to restart your computer.

Security Update for Windows XP (KB899591)

Typical download size: 482 KB

A security issue has been identified in the Remote Desktop Protocol (RDP) that could allow an attacker to remotely cause your Microsoft Windows-based system to stop responding. You can help protect your computer by installing this update from Microsoft. After you install this item, you may have to restart your computer.

Update for Windows XP (KB900485)

Typical download size: 149 KB

Install this update to prevent an issue in which you may receive a “stop 0×7e in AEC.SYSâ€? error message on a computer that is running Windows XP Service Pack 2. The error may occur during startup, or after the system has started. AEC.SYS is the acoustic echo canceling driver. After you install this item, you may have to restart your computer.

Security Update for Windows XP (KB900725)

Typical download size: 1.5 MB

A security issue has been identified that could allow an authenticated attacker to gain access and potentially compromise your Microsoft Windows-based system. You can help protect your computer by installing this update from Microsoft. After you install this item, you may have to restart your computer.

Security Update for Windows XP (KB901017)

Typical download size: 600 KB

A security issue has been identified that could allow an attacker to remotely compromise your Windows-based system using Collaboration Data Objects (CDO) and gain control over it. You can help protect your computer by installing this update from Microsoft. After you install this item, you may have to restart your computer.

Security Update for Windows XP (KB901214)

Typical download size: 470 KB

A security issue has been identified in the Color Management Module that could allow an attacker to compromise your Microsoft Windows-based system and gain control over it. You can help protect your computer by installing this update from Microsoft. After you install this item, you may have to restart your computer.

Security Update for Windows XP (KB902400)

Typical download size: 1.8 MB

A remote code execution security issue has been identified that could allow an attacker to remotely compromise your Windows-based system and gain control over it. You can help protect your computer by installing this update from Microsoft. After you install this item, you may have to restart your computer.

Security Update for Windows XP (KB904706)

Typical download size: 151 KB

A security issue has been identified that could allow an attacker to remotely compromise your Windows-based system using DirectShow and gain control over it. You can help protect your computer by installing this update from Microsoft. After you install this item, you may have to restart your computer.

Security Update for Windows XP (KB905414)

Typical download size: 53 KB

A denial of service security issue has been identified that could cause the Network Manager service to stop responding on your Windows-based system. You can help protect your computer by installing this update from Microsoft. After you install this item, you may have to restart your computer.

Security Update for Windows XP (KB905749)

Typical download size: 480 KB

A security issue has been identified in the Plug and Play service that could allow an authenticated attacker to compromise your Microsoft Windows-based system and gain control over it. You can help protect your computer by installing this update from Microsoft. After you install this item, you may have to restart your computer.

Security Update for Windows XP (KB908519)

Typical download size: 182 KB

A security issue has been identified that could allow an attacker to compromise your Microsoft Windows-based system and gain control over it. You can help protect your computer by installing this update from Microsoft. After you install this item, you may have to restart your computer.

Security Update for Windows XP (KB908531)

Typical download size: 789 KB

A security issue has been identified in Windows Explorer that could allow an attacker to compromise your Windows-based system and gain control over it. You can help protect your computer by installing this update from Microsoft. After you install this item, you may have to restart your computer.

Update for Windows XP (KB910437)

Download size: 1.1 MB

Install this update to prevent or resolve an issue in which Windows Update and Automatic Updates can no longer download updates after an Access Violation error occurs when using the Automatic Updates service. After you install this item, you may have to restart your computer.

Security Update for Windows XP (KB911280)

Typical download size: 301 KB

A remote code execution security issue has been identified in the Routing and Remote Access service that could allow an attacker to remotely compromise your Windows-based system and gain control over it. You can help protect your computer by installing this update from Microsoft. After you install this item, you may have to restart your computer.

Security Update for Windows XP (KB911562)

Typical download size: 197 KB

A security issue has been identified that could allow an attacker to remotely compromise your Windows-based system using Microsoft Data Access Components and gain control over it. You can help protect your computer by installing this update from Microsoft. After you install this item, you may have to restart your computer.

Security Update for Windows Media Player Plug-in (KB911564)

Download size: 597 KB

A security issue has been identified that could allow an attacker to remotely compromise your Windows-based system using the Windows Media Player Plug-in and gain control over it. You can help protect your computer by installing this update from Microsoft. After you install this item, you may have to restart your computer.

Security Update for Windows XP (KB911927)

Typical download size: 181 KB

A security issue has been identified that could allow an attacker to remotely compromise your Windows-based system and gain control over it. You can help protect your computer by installing this update from Microsoft. After you install this item, you may have to restart your computer.

Security Update for Windows XP (KB912919)

Typical download size: 196 KB

A remote code execution security issue has been identified in the Graphics Rendering Engine that could allow an attacker to remotely compromise your Windows-based system and gain control over it. You can help protect your computer by installing this update from Microsoft. After you install this item, you may have to restart your computer.

Security Update for Windows XP (KB913580)

Typical download size: 615 KB

A security issue has been identified in Windows-based systems that could cause the Microsoft Distributed Transaction Coordinator (MSDTC) to stop responding. You can help protect your computer by installing this update from Microsoft. After you install this item, you may have to restart your computer.

Security Update for Windows XP (KB914388)

Typical download size: 366 KB

A remote code execution security issue has been identified in the DHCP Client service that could allow an attacker to remotely compromise your Windows-based system and gain control over it. You can help protect your computer by installing this update from Microsoft. After you install this item, you may have to restart your computer.

Security Update for Windows XP (KB914389)

Typical download size: 324 KB

A local elevation of privilege security issue has been identified in the Server Message Block that could allow an attacker to compromise your Windows-based system and gain control over it. You can help protect your computer by installing this update from Microsoft. After you install this item, you may have to restart your computer.

Update for Windows XP (KB916595)

Typical download size: 157 KB

This is a reliability update for Windows XP machines. Install this update to prevent an issue in which you may receive a “Stop 0xD” error message on a computer that is running Windows XP Service Pack 2. The error may occur during startup, or after the system has started. After you install this item, you may have to restart your computer.

Security Update for Windows XP (KB917344)

Typical download size: 424 KB

A security issue has been identified in the Windows Script Host that could allow an attacker to compromise your Windows-based system and gain control over it. You can help protect your computer by installing this update from Microsoft. After you install this item, you may have to restart your computer.

Security Update for Windows XP (KB917422)

Typical download size: 264 KB

A security issue has been identified in the Windows Kernel that could allow an attacker to compromise your Windows-based system and gain control over it. You can help protect your computer by installing this update from Microsoft. After you install this item, you may have to restart your computer.

Security Update for Windows Media Player 9 (KB917734)

Download size: 2.2 MB

A security issue has been identified that could allow an attacker to remotely compromise your Windows-based system using Windows Media Player and gain control over it. You can help protect your computer by installing this update from Microsoft. After you install this item, you may have to restart your computer.

Security Update for Windows XP (KB917953)

Typical download size: 189 KB

A security issue has been identified that could allow an attacker to compromise your Microsoft Windows-based system and gain control over it. You can help protect your computer by installing this update from Microsoft. After you install this item, you may have to restart your computer.

Security Update for Windows XP (KB918439)

Typical download size: 234 KB

A security issue has been identified in the way ART images are handled that could allow an attacker to compromise a computer running Microsoft Windows and gain control over it. You can help protect your computer by installing this update from Microsoft. After you install this item, you may have to restart your computer.

Security Update for Windows XP (KB919007)

Typical download size: 203 KB

A security issue has been identified in Reliable Multicast Program (PGM) for Microsoft Windows XP-based systems that could result in a denial of service. You can help protect your computer by installing this update from Microsoft. After you install this item, you may have to restart your computer.

Security Update for Windows XP (KB920213)

Typical download size: 248 KB

A security issue has been identified in MSAgent that could allow an attacker to compromise your Windows-based system and gain control over it. You can help protect your computer by installing this update from Microsoft. After you install this item, you may have to restart your computer.

Security Update for Windows XP (KB920670)

Typical download size: 201 KB

A security issue has been identified that could allow an attacker to compromise your Windows-based system and gain control over it. You can help protect your computer by installing this update from Microsoft. After you install this item, you may have to restart your computer.

Security Update for Windows XP (KB920683)

Typical download size: 196 KB

A security issue has been identified in DNS Resolution that could allow an attacker to compromise your Windows-based system and gain control over it. You can help protect your computer by installing this update from Microsoft. After you install this item, you may have to restart your computer.

Security Update for Windows XP (KB920685)

Typical download size: 196 KB

A security issue has been identified that could allow an attacker to compromise your Windows-based system and gain access to restricted data. You can help protect your computer by installing this update from Microsoft. After you install this item, you may have to restart your computer.

Update for Windows XP (KB920872)

Typical download size: 191 KB

This is a reliability update for Windows XP machines. Install this audio component update to prevent memory corruption issues which may cause an unstable state on a computer that is running Windows XP Service Pack 2. After you install this item, you may have to restart your computer.

Security Update for Windows XP (KB921398)

Typical download size: 1.2 MB

A security issue has been identified that could allow an attacker to compromise your Windows-based system and gain control over it. You can help protect your computer by installing this update from Microsoft. After you install this item, you may have to restart your computer.

Update for Windows XP (KB922582)

Download size: 550 KB

A problem has been identified in Filter Manager that can prevent you from installing updates from Windows update. You can help protect your computer by installing this update from Microsoft. After you install this item, you may have to restart your computer.

Security Update for Windows XP (KB922616)

Typical download size: 250 KB

A security issue has been identified that could allow an attacker to remotely compromise your Windows-based system using a vulnerability in HTML Help and gain control over it. You can help protect your computer by installing this update from Microsoft. After you install this item, you may have to restart your computer.

Security Update for Windows XP (KB922819)

Typical download size: 290 KB

A security issue has been identified that could allow an attacker to cause Denial of Service conditions on Windows-based systems. You can help protect your computer by installing this update from Microsoft. After you install this item, you may have to restart your computer.

Security Update for Windows XP (KB923191)

Typical download size: 1.1 MB

A security issue has been identified that could allow an attacker to compromise your Windows-based system and gain control over it. You can help protect your computer by installing this update from Microsoft. After you install this item, you may have to restart your computer.

Security Update for Windows XP (KB923414)

Typical download size: 185 KB

A security issue has been identified in the Server service that could allow a remote user to cause an affected Windows-based system to stop responding. You can help protect your computer by installing this update from Microsoft. After you install this item, you may have to restart your computer.

Security Update for Windows XP (KB923689)

Download size: 2.3 MB

A security issue has been identified that could allow an attacker to remotely compromise your Windows-based system using Windows Media file formats and gain control over it. You can help protect your computer by installing this update from Microsoft. After you install this item, you may have to restart your computer.

Cumulative Security Update for Outlook Express for Windows XP (KB923694)

Typical download size: 433 KB

A security issue has been identified that could allow an attacker to remotely compromise your Windows-based system using Outlook Express. You can help protect your computer by installing this update from Microsoft. After you install this item, you may have to restart your computer.

Security Update for Flash Player (KB923789)

Download size: 542 KB

Security issues have been identified in Macromedia Flash Player from Adobe that could allow an attacker to compromise a Windows-based system and gain control over it. You can help protect your system by installing this update from Microsoft. After you install this item, you may have to restart your computer.

Security Update for Windows XP (KB923980)

Typical download size: 208 KB

A security issue has been identified that could allow an attacker to compromise your Windows-based system and gain control over it. You can help protect your computer by installing this update from Microsoft. After you install this item, you may have to restart your computer.

Security Update for Windows XP (KB924191)

Typical download size: 842 KB

A security issue has been identified in the way Microsoft XML Core Services (MSXML) is handled that could allow an attacker to compromise a Windows-based system and gain control over it. You can help protect your computer by installing this update from Microsoft. After you install this item, you may have to restart your computer.

Security Update for Windows XP (KB924270)

Typical download size: 234 KB

A security issue has been identified that could allow an attacker to compromise your Windows-based system and gain control over it. You can help protect your computer by installing this update from Microsoft. After you install this item, you may have to restart your computer.

Security Update for Windows XP (KB924496)

Typical download size: 495 KB

A security issue has been identified that could allow an attacker to compromise your Windows-based system and gain control over it. You can help protect your computer by installing this update from Microsoft. After you install this item, you may have to restart your computer.

Security Update for Windows Media Player 6.4 (KB925398)

Download size: 773 KB

A security issue has been identified that could allow an attacker to remotely compromise your Windows-based system using Windows Media Player and gain control over it. You can help protect your computer by installing this update from Microsoft. After you install this item, you may have to restart your computer.

Cumulative Security Update for Internet Explorer for Windows XP (KB925454)

Typical download size: 1.4 MB

Security issues have been identified that could allow an attacker to compromise a system running Microsoft Internet Explorer and gain control over it. You can help protect your system by installing this update from Microsoft. After you install this item, you may have to restart your computer.

Security Update for Windows XP (KB925486)

Typical download size: 250 KB

A security issue has been identified in the way Vector Markup Language (VML) is handled that could allow an attacker to compromise a computer running Microsoft Windows and gain control over it. You can help protect your computer by installing this update from Microsoft. After you install this item, you may have to restart your computer.

Security Update for Windows XP (KB926255)

Typical download size: 197 KB

A security issue has been identified that could allow an attacker to compromise your Windows-based system and gain control over it. You can help protect your computer by installing this update from Microsoft. After you install this item, you may have to restart your computer.

Windows Internet Explorer 7.0 for Windows XP

Download size: 14.8 MB

This free upgrade to Internet Explorer for genuine Windows customers offers improvements such as: enhanced security to help protect you from malicious software and fraudulent websites; a cleaner look, including tabs for browsing multiple pages in one window; features to make everyday tasks such as printing and searching the web easier. This upgrade preserves your current home page, search settings, favorites, and compatible toolbars, and can be uninstalled if you decide to do so.