Windows 2000, signed files during install.

[Malakai1911]

Well, this IS the advanced users section O_o. I hope someone can answer my question.

I want to prevent Internet Explorer from installing during Windows 2000 setup.

http://home.earthlink.net/~vorck/ <-- has instructions.

His methods are modifying various INF's, to accomplish what could be theoretically accomplished by modifying "syssetup.inf", and commenting out an IE install file.

http://support.microsoft.com/default.aspx?scid=http://support.microsoft.com:80/support/kb/articles/Q156/6/53.asp&NoWebContent=1

See how that works in NT? Well, that should apply to 2000, but with an "ie.inf" commented out instead.

Now, the problem according to vorck is that the install throws up because the inf in question is signed. Well, what happens if we were to digitally sign a new CAB containing the modified file? OR, what if we created a new CAT file that contained the INF, and signed the CAT?

Those are just two ideas I had that vorck made no mention of. Does anyone else have a better idea as to how to accomplish this?

[cpugeniusmv]

...delete all the shortcuts to internet explorer, and use mozilla?

IE is heavily integrated into windows, whether it's supposed to be or not. there's not much you can do about it.

[Malakai1911]

It's not just the shortcuts.

IE loads during bootup, and the only way around it is to get rid of it. An alternate method could be using IEradicator after killing SFC.

But I dont want to do that, I want to kill the problem earlier in the process.

[zaphodiv]

The point of a digitally signature is that whatever is being signed is
authorised by the entity whose signature it is.

If Microsoft has any send the private key needed to sign a file
as being MS-approved is buried in a vault deep under Redmond.

In theory you can sign and INF file, but unless someone screwed up you
can't produce a signature that appears to be by Microsoft.

I suspect the only way around your problem is to find a way
to disable the signature check. The only way be to crack
an exe or dll so it allways says the signature is ok.

I assume you have tried the "DriverSigningPolicy=Ignore"
suggestion of vorck's page.

On NT4 deleting iexplore.exe is all you need to do to remove IE.
IE version 2 is from before MS chopped IE into bit and jammed it
into the system DLL's.
If you can manage without USB and you don't want to play games
then running NT4 is a reasonable option.

[cpugeniusmv]

Originally posted by Malakai1911
the only way around it is to get rid of it.

i severly disagree.

explain the problem more thoroughly.

[Malakai1911]

zaphodiv - Interesting. I would have assumed that it isnt looking for a redmond signature. Just any signature would do. A signed file is a signed file.

I'm gonna burn some coasters using a few different methods early tomarrow (I dont know if I have the energy to play the windows-install-dance right now.)

cpugeniusmv -I severly disagree with you disagreeing :-P.

The problem is Internet Explorer. I want it as gone as possible. Maybe I will break down and just use vorck's guide, who knows. I am just looking for a simpler alternative to the problem.

Anyone else have any ideas?

[cpugeniusmv]

Originally posted by Malakai1911
cpugeniusmv -I severly disagree with you disagreeing :-P.

The problem is Internet Explorer. I want it as gone as possible. Maybe I will break down and just use vorck's guide, who knows. I am just looking for a simpler alternative to the problem.

Anyone else have any ideas?

well...whatever floats your boat i guess.