From: "Rich Gauszka" 


"Geo."  wrote in message
news:45940bf2$1{at}w3.nls.net...
> Ok so I've disabled every service I can find that might autoupdate my
> system and I'm still getting messages like this in event viewer:
>
> Successful auto update of third-party root certificate:: Subject:  CyberTrust Global Root, OU="GTE CyberTrust Solutions, Inc.", O=GTE
> Corporation, C=US> Sha1 thumbprint:
> .
>
> what the hell is doing this?
>
> Geo.
certificate update is turned on by default in Vista

http://technet2.microsoft.com/WindowsVista/en/library/5b350eae-8b08-4f2c-a09e-a
17b1c93f3d01033.mspx?mfr=true

The Update Root Certificates feature in Windows Vista is designed to
automatically check the list of trusted authorities on the Windows Update
Web site when this check is needed by a user's application. Specifically,
if the application is presented with a certificate issued by a
certification authority in a PKI that is not directly trusted, the Update
Root Certificates feature (if it is not turned off) will contact the
Windows Update Web site to see if Microsoft has added the certificate of
the root CA to its list of trusted root certificates. If the CA has been
added to the Microsoft list of trusted authorities, its certificate will
automatically be added to the set of trusted root certificates on the
user's computer.

The Update Root Certificates feature can be turned off in Windows Vista by
using Group Policy. For more information, see "Procedures for Viewing
or Changing Group Policy Settings that Affect Certificates in Windows
Vista," later in this section.

....

To Turn Off the Update Root Certificates Feature by Using Group Policy
      1.
     As needed, see Appendix B: Resources for Learning About Group Policy
for Windows Vista, and then edit an appropriate Group Policy object (GPO).

      2.
     Expand Computer Configuration, expand Administrative Templates, expand
System, expand Internet Communication Management, and then click Internet
Communication settings.

      3.
     In the details pane, double-click Turn off Automatic Root Certificates
Update, and then click Enabled.

      Important   You can also restrict Internet access for this and a
number of other features by applying the Restrict Internet communication
policy setting, which is located in Computer Configuration\Administrative
Templates\System\Internet Communication Management. For more information
about this Group Policy and the policies that it controls, see Appendix C:
Group Policy Settings Listed Under the Internet Communication Management
Category in Windows Vista.

--- BBBS/NT v4.01 Flag-5