Removing GPO Settings
- Login to the XP machine. The Username for the image is "Renamed_Admin" and the password is P@ssw0rd123456.
- Right-click the following link and select 'Save As' to download the "Microsoft Fixit" (./downloads/MicrosoftFixit50198.msi). Run the FixIt to reset the GPO settings. Reboot when done.
- Open a command prompt and issue the following commands:
C:\>secedit /configure /db reset /cfg "c:\windows\security\templates\compatws.inf" /overwrite
C:\>del c:\windows\system32\grouppolicy\machine\registry.pol - Reboot the VM for your changes to take effect.
Uninstalling Patches
- Go into the Control Panel and select 'Switch to Classic View' on the left-hand side.
- Open 'Windows Firewall' and turn it 'Off'.
- Open 'Automatic Updates' and select 'Turn off Automatic Updates' so Windows doesn't undo our changes for us.
- Open 'Security Center', select 'Change the way Security Center alerts me' on the left-hand side and de-select all of the checkboxes. This will disable the annoying system tray pop-up notifications.
- Back in the Control Panel, open 'Add or Remove Programs'. Select the 'Show updates' checkbox at the top. This will display all of the software and security updates that have been installed.
- Still in the Control Panel, from the toolbar, select 'Tools', then 'Folder Options'. Select the 'View' tab and scroll all the way to the bottom. Make sure you un-check the box next to 'Use simple file sharing' and click 'OK'.
- From the command line run the following command to uninstall all patches and reboot :
C:\>dir /a /b c:\windows\$ntuninstallkb* > kbs.txt && for /f %i in (kbs.txt) do cd c:\windows\%i\spuninst && spuninst.exe /passive /norestart && ping -n 15 localhost > nul - Reboot the VM to complete the un-installation process.
© Offensive Security 2009