By the way, at work I have mostly Win2000 systems, and what I'll do is to start with the latest SP (currently SP4 for Win2000) and install IE6 w/SP1 and DirectX 9.0C. Then I can run Microsoft Baseline Security Analyzer to determine what it's still missing, and go to Windows Update, click
Personalize Windows Update, check the box for
Show Windows Update Catalog and hit the
Save settings button.
screenshot
Now I've done that, at the left there'll be a Windows Update Catalog link and I can manually hunt down allllllllll the patches, download them, and save them. I then shorten their names down to just their patch number, and make a simple batchfile that names each patch on its own line. Bingo, I can run a whole plethora of patches in one big shot, as long as I keep answering NO to the reboot prompts. As new patches come along, throw them onto the pile and add them to the batchfile. If you make a similar setup for WinXP, you can use it anywhere, even from a USB thumb drive.
For Win2000 there's a utility called QCHAIN.EXE that must run after the patches have all completed. For WinXP, beginning with SP1, that is not needed anymore. If that sounds interesting but I left out some details, LMK
