Windows 2000 Post SP4 Security Rollup



Chilly
07-09-2005, 10:42 PM
Does anyone know if this has been released yet?
I've heard that this is now available, but cant find it.
Thanks

Brandon Stout
07-09-2005, 10:44 PM
Two weeks ago, there was news that it would be released this week. However,
I've heard no news since then, and I'm waiting for it as well. Anyone heard
anything new on this?

"Chilly" wrote:

> Does anyone know if this has been released yet?
> I've heard that this is now available, but cant find it.
> Thanks

Torgeir Bakken \(MVP\)
07-09-2005, 10:45 PM
Brandon Stout wrote:

> Two weeks ago, there was news that it would be released this
> week. However, I've heard no news since then, and I'm waiting
> for it as well. Anyone heard anything new on this?
Hi,

It is available now:

Update Rollup 1 for Windows 2000 SP4
http://support.microsoft.com/kb/891861

Note that if you install it from Windows Updates (or a WSUS server),
it is very likely that msxml3.dll and also msxml3r.dll is overwritten
by a 0 byte file (check after reboot). If they are, you can e.g. copy
the original files back from the DllCache folder
(C:\Winnt\System32\Dllcache\, hidden folder).

If you use the full download from the Download Center to install the
rollup, you should not experience this msxml3 problem.


--
torgeir, Microsoft MVP Scripting and WMI, Porsgrunn Norway
Administration scripting examples and an ONLINE version of
the 1328 page Scripting Guide:
http://www.microsoft.com/technet/scriptcenter/default.mspx

Tom Pepper Willett
07-09-2005, 10:45 PM
Torgeir: What issues could this cause?

Thanks,
Tom

| Note that if you install it from Windows Updates (or a WSUS server),
| it is very likely that msxml3.dll and also msxml3r.dll is overwritten
| by a 0 byte file (check after reboot)..
|
|
|

Michael Bednarek
07-09-2005, 10:45 PM
On Wed, 29 Jun 2005 19:36:42 +0200, "Torgeir Bakken \(MVP\)"
<Torgeir.Bakken-spam@hydro.com> wrote in microsoft.public.windowsupdate:

>Brandon Stout wrote:
>
>> Two weeks ago, there was news that it would be released this
>> week. However, I've heard no news since then, and I'm waiting
>> for it as well. Anyone heard anything new on this?
>Hi,
>
>It is available now:
>
>Update Rollup 1 for Windows 2000 SP4
>http://support.microsoft.com/kb/891861
[snip]

Torgeir,

I can't find any documentation on the MS web sites how to verify the
installation of the rollup. While I do keep a record of installed
patches in each machine's registry, I also check the fileversion of a
significant file from each patch in my KiXtart installation script to
avoid multiple installations.

Do you know which file would lend itself for this check and which
version string I should be looking for?

--
Michael Bednarek http://mbednarek.com/ "POST NO BILLS"

vof
07-09-2005, 10:45 PM
Torgeir

Apologies for using this thread for a related question. (I'm not very
familiar with the way Microsoft provide fixes for Windows.)

I have a W2K system at SP4. A couple of weeks ago, I applied the
recently announced set of security hotfixes (KB883939, KB890046,
KB894320, KB896358, KB896422) for W2K.

I have just applied Update Rollup 1 for W2K SP4.

Do the earlier hotfixes and the rollup interact at all? For instance,
if I uninstalled any of the earlier hotfixes, might I undo some of the
rollup changes?

Regards
--
Vince

Torgeir Bakken \(MVP\)
07-09-2005, 10:45 PM
Tom Pepper Willett wrote:

> Torgeir Bakken wrote:
>
>> Note that if you install it from Windows Updates (or a WSUS
>> server), it is very likely that msxml3.dll and also msxml3r.dll
>> is overwritten by a 0 byte file (check after reboot)..
>>
>
> Torgeir: What issues could this cause?
Hi,

Basic OS operation will continue to work fine, but applications
that uses MSXML2 will of course get problems, an example is
Windows Updates/Automatic Updates.

The thread with the Winlogon.exe issue I see you posted to is most
likely not caused by a corrupt msxml3.dll file, but then, who knows
what effects it can give...



--
torgeir, Microsoft MVP Scripting and WMI, Porsgrunn Norway
Administration scripting examples and an ONLINE version of
the 1328 page Scripting Guide:
http://www.microsoft.com/technet/scriptcenter/default.mspx

Torgeir Bakken \(MVP\)
07-09-2005, 10:45 PM
Michael Bednarek wrote:

> <Torgeir.Bakken-spam@hydro.com> wrote:
>>
>> It is available now:
>>
>> Update Rollup 1 for Windows 2000 SP4
>> http://support.microsoft.com/kb/891861
>
> [snip]
>
> Torgeir,
>
> I can't find any documentation on the MS web sites how to verify the
> installation of the rollup. While I do keep a record of installed
> patches in each machine's registry, I also check the fileversion of a
> significant file from each patch in my KiXtart installation script to
> avoid multiple installations.
>
> Do you know which file would lend itself for this check and which
> version string I should be looking for?
Hi,

I am not aware of any file you can check on.

I think the best way would be to see it the registry value "Installed"
has a value data of 2 (REG_DWORD) under the registry key

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion
\HotFix\Update Rollup 1\



--
torgeir, Microsoft MVP Scripting and WMI, Porsgrunn Norway
Administration scripting examples and an ONLINE version of
the 1328 page Scripting Guide:
http://www.microsoft.com/technet/scriptcenter/default.mspx

Torgeir Bakken \(MVP\)
07-09-2005, 10:45 PM
vof wrote:

> Torgeir
>
> Apologies for using this thread for a related question. (I'm not very
> familiar with the way Microsoft provide fixes for Windows.)
>
> I have a W2K system at SP4. A couple of weeks ago, I applied the
> recently announced set of security hotfixes (KB883939, KB890046,
> KB894320, KB896358, KB896422) for W2K.
>
> I have just applied Update Rollup 1 for W2K SP4.
>
> Do the earlier hotfixes and the rollup interact at all? For instance,
> if I uninstalled any of the earlier hotfixes, might I undo some of the
> rollup changes?
Hi,

Yes, uninstalling earlier updates may undo some of the rollup changes.


--
torgeir, Microsoft MVP Scripting and WMI, Porsgrunn Norway
Administration scripting examples and an ONLINE version of
the 1328 page Scripting Guide:
http://www.microsoft.com/technet/scriptcenter/default.mspx

vof
07-09-2005, 10:45 PM
So would it be better to apply the Update Rollup before the hotfixes?
Then, presumably, uninstalling a hotfix leaves the rollup unchanged? Do
Microsoft give any guidance on this sort of thing or do they just
assume that they are infallible and there will never be a reason to
uninstall any of their updates?

Thanks for your help.

Vince

Robert Aldwinckle
07-09-2005, 10:46 PM
"Michael Bednarek" <ROT13-zo@zorqanerx.pbz> wrote in message news:nck7c15gpq526ikbf7h575qeb0hrah1dcc@4ax.com...
> On Wed, 29 Jun 2005 19:36:42 +0200, "Torgeir Bakken \(MVP\)"
> <Torgeir.Bakken-spam@hydro.com> wrote in microsoft.public.windowsupdate:
>
>>Brandon Stout wrote:
>>
>>> Two weeks ago, there was news that it would be released this
>>> week. However, I've heard no news since then, and I'm waiting
>>> for it as well. Anyone heard anything new on this?
>>Hi,
>>
>>It is available now:
>>
>>Update Rollup 1 for Windows 2000 SP4
>>http://support.microsoft.com/kb/891861
> [snip]
>
> Torgeir,
>
> I can't find any documentation on the MS web sites how to verify the
> installation of the rollup.


Have you seen this list?

<title>Problems that are fixed in the Update Rollup 1 for
Microsoft Windows 2000 Service Pack 4 that is dated June 28, 2005</title>
http://support.microsoft.com/kb/900345/

It links to this

<title>Microsoft Security Advisory (891861): Release of Update Rollup 1
for Windows 2000 Service Pack 4 (SP4)</title>
http://www.microsoft.com/technet/security/advisory/891861.mspx

which says in the FAQ

<quote>
Update Rollup 1 contains additional important fixes in files that have not
previously been part of individual security updates
</quote>

So perhaps you could try identifying which modules change for those?

The article makes no mention of MBSA but that might be a way of checking
if it knows about the Rollup as a whole package.

Notice that further developments are planned for the Rollup (e.g. eventual
inclusion for download via AU); so perhaps the documentation will be made
clearer then too.


HTH

Robert Aldwinckle
---


> While I do keep a record of installed
> patches in each machine's registry, I also check the fileversion of a
> significant file from each patch in my KiXtart installation script to
> avoid multiple installations.
>
> Do you know which file would lend itself for this check and which
> version string I should be looking for?
>
> --
> Michael Bednarek http://mbednarek.com/ "POST NO BILLS"


Windows 2000 Post SP4 Security Rollup