Xp Patch And Opinion On Network

Hello,

we still have PCs running xp sp3 on the network along with win 10 machines.

1) Is the patch for XP for ransomware legit and should it be installed?

2) We want to block the XP PCs from the outside while accessing the network locally. Does removing the DNS server solve this problem going out and coming in? What do you recommend?

 

On point 1 only, can you link to the patch you are talking about.

 

https://answers.microsoft.com/en-us...-display/cda6f85f-61f9-48d0-89b0-acb1d82d0081

 

The patches MS announced for Wannacry are here: http://www.catalog.update.microsoft.com/search.aspx?q=kb4012598
But XP was not directly affected but MS servers XP stations were connected to.

 

That doesn't happen if you BLOCK viglink using something like NoScript.

 

Thanks Max- more explanation for bper here-
https://blogs.technet.microsoft.com/msrc/2017/05/12/customer-guidance-for-wannacrypt-attacks/

 

Yes the second one down in the catalogue link is what the OP can install on all 3 XP systems. They are genuine.

 

On point 2 you may get some ideas from this thread, particularly method 4. Don't use XP myself so cannot safely recommend these methods. Proceed with caution.

 

For those using the 'unsupported' versions of Windows (Windows XP, Vista, 8 and Server 2003), here's a list with download links of the patches Microsoft released on June 13, 2017.
https://support.microsoft.com/en-za...advisory-4025685-guidance-for-older-platforms