Operating System Upgrade
2000.4.6 (win-OS-Upgrade-K9.2000-4-6.exe)
Release
date: 08-SEP-2008
Readme last
updated: 08-SEP-2008
Information about This Service Release
The upgrade supports
the following Cisco IP Telephony Applications that run on Windows 2000 Server
or Advanced Server:
Cisco
CallManager
Minimum OS Requirements:
(Fresh Install or Upgrade Versions of) - 2000.2.7, 2000.2.7a, 2000.4.1,
2000.4.1b, 2000.4.1c, 2000.4.2, 2000.4.3, 2000.4.3a, 2000.4.4, 2000.4.4a,
2000.4.5a, 2000.4.5b
Supported Servers:
All of the following Cisco Media Convergence Servers (MCS)
·
Cisco MCS 7825-I2
(2.8GHz CPU and 3.4 GHz CPU)
· Cisco MCS 7825-H2
(2.8GHz CPU and 3.4 GHz CPU)
· Cisco MCS 7835H-3000
(2.4GHz CPU and 3.0 GHz CPU)
· Cisco MCS 7835I-3000
(2.4GHz CPU and 3.0 GHz CPU)
· Cisco MCS 7845H-3000
(2.4GHz CPU and 3.0 GHz CPU)
·
Cisco MCS
7845I-3000 (2.4GHz CPU and 3.0 GHz CPU)
Servers without Software
maintenance support: You can install the OS Upgrade on the following Cisco Media
Convergence Servers (MCS)
· Cisco 7835 Media
Convergence Server
· Cisco 7835-1266 Media Convergence
Server
· Cisco 7835I-2400 Media Convergence
Server
· Cisco 7820 Media Convergence Server
· Cisco 7830 Media
Convergence Server
· Cisco 7825 Media
Convergence Server
·
Cisco
7825-1133 Media Convergence Server
See the End-of-Life
Policy for more details.
Contents
This
document contains the following sections.
Click the hyperlink to go directly to the section.
·
Locating
Related Documentation
·
Upgrading
the Operating System via CD-ROM or the Web
Locating Related Documentation
Cisco strongly recommends that you
review the following documents before you perform the installation:
· Cisco IP Telephony Operating System, SQL Server, Security Updates
This document provides information for tracking operating
system (OS)
http://www.cisco.com/univercd/cc/td/doc/product/voice/c_callmg/osbios.htm
· Installing the Operating System on
the Cisco IP Telephony Applications Server
This document provides descriptive information
· Cisco IP telephony application
documentation
Click the following URL to obtain documentation for your
application:
http://www.cisco.com/univercd/cc/td/doc/product/voice/index.htm
Cisco
CallManager Notification Tool: Cisco has replaced the current
Cisco CallManager notification tool with a
new, more robust notification tool
that is based on your
Cisco.com profiles. This new tool
delivers e-mail notifications for individual Cisco voice products that you select . Use the following steps to sign up for the
Cisco Voice Technology Group Subscription Tool:
·
Log in with your Cisco.com account information at this link: http://www.cisco.com/cgi-bin/Software/Newsbuilder/Builder/VOICE.cgi
·
Select "CallManager Cryptographic Software including OS
updates" to receive notification when new operating system updates are
posted.
·
Select any other products updates that you want to receive.
·
Click update at the bottom of the page.
·
Confirm your selections.
You may see this message at the bottom of the page:
"Your Profile Currently Indicates that you do not wish to receive e-mail
from Cisco."
To be able to receive information updates, you must
update your e-mail preferences. Click
the link to update your e-mail preferences (located in the Other Information section). Click submit when you are done.
If you have enabled e-mail notification, you may
exit now. If you have not enabled e-mail
notification, you will need to repeat the preceding steps.
This new software notification tool requires a valid
Cisco.com log in. If you do not currently have a Cisco.com password, register
with Cisco.com at: http://tools.cisco.com/RPF/register/register.do
Cisco
PSIRT Advisory Notification Tool: This e-mail service provides
automatic notification of all Cisco Security Advisories that the Cisco Product
Security Incident Response Team (PSIRT) releases. Security Advisories, which describe security
issues that directly impact Cisco products, provide a set of required actions
to repair these products. To subscribe, click the following URL
Upgrading the Operating System via CD-ROM or the Web
Cisco
manufactures a CD-ROM for operating system upgrades. Use this CD-ROM only for upgrading your
operating system. The upgrade CD-ROM
contains the same executable that is posted to http://www.cisco.com/,
so you will perform the same procedure.
If you are
installing the operating system for the first time, you must use the Cisco IP
Telephony Operating System disks that ship with your Cisco IP telephony
application
Before performing an
upgrade, be aware of the following considerations:
· The minimum supported Cisco MCS OS version(Fresh
Install or Upgrade) to install this upgrade is 2000.2.7, 2000.2.7a, 2000.4.1,
2000.4.1b, 2000.4.1c, 2000.4.2, 2000.4.3, 2000.4.3a, 2000.4.4, 2000.4.4a,
2000.4.5a or 2000.4.5b. Any server that has another Cisco MCS OS version will
not be supported in this upgrade.
· Depending on the current operating
system version that runs on the server, the operating system upgrade performs
either an Express (2 phases) or a Regular (3 phases) Installation. If the
server is running OS version 2000.4.2, 2000.4.3, 2000.4.3a, 2000.4.4,
2000.4.4a, 2000.4.5a or 2000.4.5b including with if any Service Releases that
goes with those releases an Express Installation is performed. This includes two phases
·
This version of MCS OS
Upgrade, 2000.4.6, does not support an upgrade from a Fresh Install version of
MCS operating system version 2000.4.6
· Before you upgrade, run Start > Cisco OS Version, C:\Utils\MCSver.exe
to identify the OS Image
· You must log in as same User with
Administrative Privileges after each reboot.
· Before starting this upgrade, you
must disable (from Windows Service Control Manager) all Cisco-approved antivirus/intrusion
detection services (HIDS); for example, Entercept,
McAfee, Norton, Cisco Security Agent, Prognosis,
· Apply this upgrade to all supported
servers in your IP telephony solution.
· Cisco recommends that you upgrade
the Cisco CallManager publisher database server first
· This installation causes Cisco IP telephony application interruptions.
· Due to “CSCsi31474 – Missing IBM Director
5.10.3PF1 fix on Windows 2000” we uninstall the IBM Director 5.10.3
·
Close all programs
before proceeding.
·
Cisco installs
Terminal Services for Cisco Technical Assistance Center (TAC) remote
administration
·
Cisco supports remote
upgrades with Virtual Network Computing (VNC). Although VNC is optional
·
Perform a backup of
your data before starting your upgrade.
Refer to the backup documentation for your Cisco IP telephony
application. Make sure that you back up
the data to a network directory or tape device, so that the upgrade does not
erase the data.
·
Make sure that you
have about 1.5 GB of free disk space before you copy the upgrade executable to
the server. Delete any unnecessary files; for example, remove old log files,
CDP records, old installation files,
·
Before you run this upgrade, review the “Known
Caveats” section below.
Note: When you log in after each reboot, make sure
that you see the next phase of the OS upgrade start. After the final phase of
the upgrade, a batch file runs to clean up the folders. If you do not see the final phase start
(Phase 2 of 2 or Phase 3 of 3), see the “Troubleshooting
Tips” section.
Perform
the following steps to upgrade OS:
1. Download the executable to a location that you will
remember or insert the CD-ROM into the CD-ROM drive.
2. If you are upgrading via the web, double-click the
executable.
3. Files extract to your server,
4. Log in to the server by using your Administrator
account
5. Click Yes to acknowledge that you disabled
antivirus
6. Click OK.
7. Click OK.
8. Phase 1 runs,
9. Phase 2 runs,
10. For
a Regular Installation, Phase 3 runs,
11. The
first time that you log in after the upgrade is complete, you may see a message
that new hardware was detected
12. Customers
who are using Cisco CallManager can install the Cisco CallManager OS Optional
Security settings. Find installation
instructions in the
C:\Utils\SecurityTemplates\CCM-OS-OptionalSecurity-Readme.htm document.
13. An
optional IP Security filter can be installed to block fixed Windows 2000
Notes:
· If you see any New Hardware found
messages, click Finish.
· If you see any messages to restart
the server, click No.
· IBM x346 series servers may have an
extra reboot into DOS to upgrade the ISMP Processor firmware. After this update is finished, the server
will boot back into Windows 2000.
· If you see either of the following
messages near the start of the OS Upgrade, click OK to terminate the program. A
couple of services have a known problem when stopping.
1. The Instruction at "0X0xxxxxxxx" referenced memory at "0X0xxxxxxxx ". The memory could not be read. Click OK to terminate the program (CSCeb31088). Where 0x0xxxxxxxx can be any memory address.
2.
The Instruction at
"0X000000000" referenced memory at "0X000000000". The
memory could not be read. Click OK to terminate the program (CSCed45218)
Note: During the final phase of the OS upgrade, the status bar may indicate that the OS upgrade is either complete or is close to completion. In some cases, it may take an additional 5-10 minutes for the final phase of OS upgrade to complete
Note: During the OS upgrade process, you must log in after
each reboot to continue the upgrade process.
Log in as same user with Administrative Privileges each time.
Note: In some instances, the second or the final phase of
the OS upgrade may not run automatically.
If this occurs, follow the Troubleshooting Tips to manually run Phase 2 or 3.
Perform the following tasks:
·
Enable Cisco-approved
antivirus
·
Run Start > Cisco
OS Version (c:\utils\MCSver.exe) and verify that the OS Upgrade = 2000.4.6
Note: If you do not see the correct OS Upgrade
version, Phase 2 of 2 or Phase 3 of 3 did not finish as expected. See the Troubleshooting
Tips section for corrective action.
·
The OS Upgrade
extracts to C:\Mcsosupg
·
If you think that the
services should have started but did not, you can check the OS Upgrade log file
for the original setting. See Troubleshooting
Tips for the details.
·
Run the latest OS
Service Release that is available on the web.
This service release provides security hotfixes.
·
If you want to do so,
you can install or upgrade Virtual Network Computing (VNC) to version
4.1.2. Find the installation files in
c:\Utils\VNC. Documentation is posted on
CCO at http://www.cisco.com/univercd/cc/td/doc/product/voice/iptel_os/index.htm. Cisco recommends that you open the Windows
Task Manager open while using VNC to monitor CPU utilization.
·
If your server runs
Cisco CallManager, verify that you have the latest SQL service pack installed
on the server; if necessary, apply the latest pack from the web. Verify that
you have the latest SQL hotfixes on the server. If necessary, apply the latest hotfixes from the web.
·
If your server runs
Cisco CallManager
1. Copy any files that you do not want to lose to the
C: drive or a file server. All files on
the Trace partition will be permanently deleted when the partition is
formatted. The folder structure on the
Trace partition will be re-created to match the existing folders.
2. Double click C:\utils\FormatTracePart.exe.
3. Read the warning message
4. Click Next.
5. The server will automatically reboot when the
FormatTracePart.exe is finished.
6. Log on to the server.
7. Return the files to the Trace partition that you
saved in step 1.
·
To run QFEcheck, which identifies the hotfixes that are installed on the server, open a comm
Windows 2000 Hotfix Validation Report for
\\SE002B-CM4
Report Date: 9/4/2008
4:44pm
Current Service Pack Level: Service Pack 4
Hotfixes Identified:
KB904706:
Current on system.
KB923689:
Current on system.
Q282784:
Current on system.
KB941569:
Current on system.
Q327194:
Current on system.
KB324446:
Current on system.
KB329115:
Current on system.
KB820361:
Current on system.
KB820888:
Current on system.
KB822720:
Current on system.
KB822831:
Current on system.
KB823182:
Current on system.
KB823559:
Current on system.
KB823818:
Current on system.
KB824105:
Current on system.
KB824151:
Current on system.
KB825119:
Current on system.
KB826232:
Current on system.
KB828035:
Current on system.
KB828741: Current
on system.
KB828749:
Current on system.
KB829246:
Current on system.
KB831576:
Current on system.
KB831577:
Current on system.
KB831877:
Current on system.
KB833227:
Current on system.
KB834010:
Current on system.
KB834938:
Current on system.
KB835732:
Current on system.
KB837001:
Current on system.
KB837060:
Current on system.
KB839161:
Current on system.
KB839264:
Current on system.
KB839645:
Current on system.
KB840110:
Current on system.
KB840315: Current
on system.
KB840987:
Current on system.
KB841356:
Current on system.
KB841533:
Current on system.
KB841873:
Current on system.
KB842526:
Current on system.
KB872765:
Current on system.
KB890046:
Current on system.
KB891069: Current
on system.
KB891071:
Current on system.
KB892393:
Current on system.
KB892929:
Current on system.
KB893756:
Current on system.
KB893803v2:
Current on system.
KB896358:
Current on system.
KB896422:
Current on system.
KB896423:
Current on system.
KB899587:
Current on system.
KB899589:
Current on system.
KB899591:
Current on system.
KB900725:
Current on system.
KB901017:
Current on system.
KB901214:
Current on system.
KB902400:
Current on system.
KB905414: Current
on system.
KB905749:
Current on system.
KB908519:
Current on system.
KB908523:
Current on system.
KB908531:
Current on system.
KB911280:
Current on system.
KB913580:
Current on system.
KB914388:
Current on system.
KB914389:
Current on system.
KB917008:
Current on system.
KB917422:
Current on system.
KB917537:
Current on system.
KB917736:
Current on system.
KB917953:
Current on system.
KB918118:
Current on system.
KB920213:
Current on system.
KB920670: Current
on system.
KB920683:
Current on system.
KB920685:
Current on system.
KB921398:
Current on system.
KB921883:
Current on system.
KB922616:
Current on system.
KB923191:
Current on system.
KB923414:
Current on system.
KB923810:
Current on system.
KB923980:
Current on system.
KB924191:
Current on system.
KB924270:
Current on system.
KB924667:
Current on system.
KB925902:
Current on system.
KB926122:
Current on system.
KB926247:
Current on system.
KB926436: Current
on system.
KB928843:
Current on system.
KB930178:
Current on system.
KB931784:
Current on system.
KB932168:
Current on system.
KB933729:
Current on system.
KB935839:
Current on system.
KB935840:
Current on system.
KB935843:
Current on system.
KB935966:
Current on system.
KB936021:
Current on system.
KB937894:
Current on system.
KB938827:
Current on system.
KB941644:
Current on system.
KB941672:
Current on system.
KB941693:
Current on system.
KB942831: Current
on system.
KB943055:
Current on system.
KB943485:
Current on system.
KB944338:
Current on system.
KB945553:
Current on system.
KB948590:
Current on system.
KB950749:
Current on system.
KB950760:
Current on system.
KB950974:
Current on system.
KB951746:
Current on system.
KB951748:
Current on system.
KB952954:
Current on system.
Update Rollup 1:
Current on system.
Note: Depending on the operating system
upgrades that you have applied in the past, you may see additional hotfixes display in the window.
Note: If you do not see Update Rollup 1, Phase 2 of
3 did not finish.
·
To review the log file for a Regular Installation, browse to C:\Program Files\Common
Files\Cisco\Logs\mscosupg.log on the server where the
upgrade occurred. The last lines of the log file should read:
01:35:34-MCSOSUP| Phase 3 of 3
upgrade complete. Attempting shutdown
01:35:34-MCSOSUP|
Upgrade complete. Shutting down..
01:35:34-MCSOSUP|
Closing MCSOsUpg.log on 08/21/2008
01:35:34-MCSOSUP|
__________________________________________
................................................................................................
Starting the clean.cmd file on Thu 08/21/2008 1:38:10.04
1:38:10.04 - Clean up for old hotfix
1:38:10.04 - Delete Startup shortcut for clean.cmd
1:38:10.07 - Delete MCSOSUpg
folder
1:38:14.59 - Run Qfecheck.exe to find the
latest Service Pack
Windows 2000
Hotfix Validation Report for \\ServerName
Report Date:
08/21/2008 1:38pm
Current
Service Pack Level: Service Pack 4
A list of hotfixes followed by……………
1:38:34.70 -
Finished running Qfecheck.exe on Thu 08/21/2008
1:38:34.71 -
Finished running checkNICDuplex.exe on Thu 08/21/2008
1:38:34.71 -
Finished running clean.cmd on Thu 05/21/2007
=======================================================
END OF OS
UPGRADE
=======================================================
· To review
the log file for an Express Installation, browse to C:\Program Files\Common
Files\Cisco\Logs\mcsosupg.log on the server where the
upgrade occurred. The last lines of the log file should read:
01:35:34-MCSOSUP| Express
Installation : Phase 2 of 2 upgrade complete. Attempting shutdown
01:35:34-MCSOSUP|
Upgrade complete. Shutting down..
01:35:34-MCSOSUP|
Closing MCSOsUpg.log on 08/21/2008
01:35:34-MCSOSUP|
__________________________________________
................................................................................................
Starting the clean.cmd file on Mon 08/21/2008 1:38:10.04
1:38:10.04 - Clean up for old hotfix
1:38:10.04 - Delete Startup shortcut for clean.cmd
1:38:10.07 - Delete MCSOSUpg
folder
1:38:14.59 - Run Qfecheck.exe to find the
latest Service Pack
Windows 2000
Hotfix Validation Report for \\ServerName
Report Date:
08/21/2008 1:38pm
Current Service
Pack Level: Service Pack 4
A list of hotfixes followed by……………
1:38:34.70 -
Finished running Qfecheck.exe on Thu 08/21/2008
1:38:34.71 -
Finished running checkNICDuplex.exe on Thu 08/21/2008
1:38:34.71 -
Finished running clean.cmd on Thu 08/21/2008
=======================================================
END OF OS UPGRADE
=======================================================
Note:
If the last lines of the log file are substantially different, the final
phase, did not complete as expected. Look for Troubleshooting
Tips section for more information.
· To verify
the Hotfix installed on the server besides C:\Qfecheck.exe you can also use
Microsoft Baseline Security Analyzer Utility (run c:\utils\mbsa_scan.cmd) from
Microsoft.
Microsoft Baseline Security Analyzer (MBSA)
Make sure that you review the
Reason column of the MBSA report to identify whether the hotfix
should be installed. The following table shows expected results from MBSA
on a fully patched system.
Scanned with MBSA version:
2.0.6706.0
Security update catalog: Microsoft
Update (offline)
Catalog synchronization date:
2008-07-08T11:53:18Z
Security assessment: Potential Risk
Security Updates Scan Results
Issue:
SDK Components Security Updates
Score:
Check passed
Result: No security updates are missing.
Current
Update Compliance
|
MS07-028 | Installed | Security Update for CAPICOM (KB931906) | Critical |
Issue:
Windows Security Updates
Score:
Check failed (non-critical)
Result: 1 service packs or update rollups
are missing.
Update
Rollups and Service Packs
|
890830 | Missing | Windows Malicious Software Removal Tool - July 2008
(KB890830) | |
Current
Update Compliance
|
MS03-008 | Installed | 814078: Security Update (Microsoft Jscript version 5.5,
Windows 2000) | |
|
MS02-050 | Installed | Q329115: Security Update (Windows 2000) | |
|
MS03-033 | Installed | Security Update for Microsoft Data Access Components
(KB823718) | |
| MS03-011 | Installed | 816093: Security Update Microsoft Virtual
Machine (Microsoft VM) | Critical |
|
MS04-016 | Installed | Security Update for DirectX 9.0 (KB839643) | Moderate |
|
MS04-016 | Installed | Security Update for DirectX 8.0 (KB839643) | Moderate |
|
MS04-016 | Installed | Security Update for DirectX 8.1 (KB839643) | Moderate |
|
MS04-008 | Installed | Security Update for Windows Media Services (KB832359) |
Moderate |
|
MS05-036 | Installed | Security Update for Windows 2000 (KB901214) | Critical |
|
MS05-040 | Installed | Security Update for Windows 2000 (KB893756) | Important
|
|
MS05-041 | Installed | Security Update for Windows 2000 (KB899591) | Moderate |
|
MS05-042 | Installed | Security Update for Windows 2000 (KB899587) | Moderate |
|
MS05-043 | Installed | Security Update for Windows 2000 (KB896423) | Critical |
|
MS04-016 | Installed | Security Update for DirectX 8.2 (KB839643) | Moderate |
|
MS05-045 | Installed | Security Update for Windows 2000 (KB905414) | Moderate |
|
MS05-046 | Installed | Security Update for Windows 2000 (KB899589) | Important
|
|
MS05-048 | Installed | Security Update for Windows 2000 (KB901017) | Important
|
|
MS05-050 | Installed | Security Update for DirectX 8 for Windows 2000
(KB904706) | Critical |
|
MS05-027 | Installed | Security Update for Windows 2000 (KB896422) | Important
|
|
MS05-026 | Installed | Security Update for Windows 2000 (KB896358) | Important
|
|
MS05-049 | Installed | Security Update for Windows 2000 (KB900725) | Important
|
|
MS05-047 | Installed | Security Update for Windows 2000 (KB905749) | Important
|
|
MS05-044 | Installed | Security Update for Internet Explorer 6 Service Pack 1
for Windows 2000 (KB905495) | Moderate |
|
MS06-002 | Installed | Security Update for Windows 2000 (KB908519) | Critical |
|
MS06-006 | Installed | Security Update for Windows Media Player Plug-in (KB911564)
| Important |
|
MS06-005 | Installed | Security Update for Windows Media Player 7.1 for Windows
2000 (KB911565) | Important |
|
MS06-015 | Installed | Security Update for Windows 2000 (KB908531) | Critical |
|
MS06-030 | Installed | Security Update for Windows 2000 (KB914389) | Important
|
|
MS06-022 | Installed | Security Update for Internet Explorer 6 Service Pack 1
(KB918439) | Critical |
|
MS06-018 | Installed | Security Update for Windows 2000 (KB913580) | Moderate |
|
MS06-025 | Installed | Security Update for Windows 2000 (KB911280) | Critical |
|
MS06-036 | Installed | Security Update for Windows 2000 (KB914388) | Critical |
|
MS06-044 | Installed | Security Update for Windows 2000 (KB917008) | Critical |
|
MS06-050 | Installed | Security Update for Windows 2000 (KB920670) | Important
|
|
MS06-041 | Installed | Security Update for Windows 2000 (KB920683) | Critical |
|
MS06-045 | Installed | Security Update for Windows 2000 (KB921398) | Moderate |
|
MS06-034 | Installed | Security Update for Windows 2000 (KB917537) | Important
|
|
MS06-053 | Installed | Security Update for Windows 2000 (KB920685) | Moderate |
|
MS06-063 | Installed | Security Update for Windows 2000 (KB923414) | Important
|
|
MS06-057 | Installed | Security Update for Windows 2000 (KB923191) | Critical |
|
MS06-066 | Installed | Security Update for Windows 2000 (KB923980) | Important
|
|
MS06-070 | Installed | Security Update for Windows 2000 (KB924270) | Critical |
|
MS06-074 | Installed | Security Update for Windows 2000 (KB926247) | Important
|
|
MS07-008 | Installed | Security Update for Windows 2000 (KB928843) | Critical |
|
MS07-012 | Installed | Security Update for Windows 2000 (KB924667) | Important
|
| MS07-013 | Installed | Security Update for
Windows 2000 (KB918118) | Important |
|
MS07-011 | Installed | Security Update for Windows 2000 (KB926436) | Important
|
|
MS07-017 | Installed | Security Update for Windows 2000 (KB925902) | Critical |
|
MS07-021 | Installed | Security Update for Windows 2000 (KB930178) | Critical |
|
MS06-068 | Installed | Security Update for Windows 2000 (KB920213) | Critical |
|
MS07-009 | Installed | Security Update for Microsoft Data Access Components 2.7
Service Pack 1 (KB927779) | Critical |
|
MS07-031 | Installed | Security Update for Windows 2000 (KB935840) | Moderate |
|
MS07-035 | Installed | Security Update for Windows 2000 (KB935839) | Critical |
|
MS07-022 | Installed | Security Update for Windows 2000 (KB931784) | Important
|
|
MS06-078 | Installed | Security Update for Windows Media Player 6.4 (KB925398)
| Critical |
|
MS07-039 | Installed | Security Update for Windows 2000 (KB926122) | Critical |
|
MS07-047 | Installed | Security Update for Windows Media Player 9 (KB936782) |
Important |
|
MS07-050 | Installed | Security Update for Internet Explorer 6 Service Pack 1
(KB938127) | Critical |
|
MS07-042 | Installed | Security Update for Windows 2000 (KB936021) | Critical |
|
MS07-051 | Installed | Security Update for Windows 2000 (KB938827) | Critical |
|
891861 | Installed | Update Rollup 1 for Windows 2000 Service Pack 4 (KB891861)
| |
|
MS07-058 | Installed | Security Update for Windows 2000 (KB933729) | Low |
|
MS07-055 | Installed | Security Update for Windows 2000 (KB923810) | Critical |
|
MS07-056 | Installed | Security Update for Outlook Express 6 Service Pack 1
(KB941202) | Critical |
|
MS07-068 | Installed | Security Update for Windows 2000 (KB941569) | Critical |
|
MS07-065 | Installed | Security Update for Windows 2000 (KB937894) | Important
|
|
MS08-002 | Installed | Security Update for Windows 2000 (KB943485) | Important
|
|
MS08-005 | Installed | Security Update for Windows 2000 (KB942831) | Important
|
|
MS08-008 | Installed | Security Update for Windows 2000 (KB943055) | Critical |
|
MS08-025 | Installed | Security Update for Windows 2000 (KB941693) | Important
|
|
MS08-020 | Installed | Security Update for Windows 2000 (KB945553) | Important
|
|
MS08-021 | Installed | Security Update for Windows 2000 (KB948590) | Critical |
|
MS08-022 | Installed | Security Update for Windows 2000 (KB944338) | Critical |
|
MS08-028 | Installed | Security Update for Windows 2000 (KB950749) | Critical |
|
MS08-032 | Installed | Cumulative Security Update for ActiveX Killbits for Windows 2000 (KB950760) | Moderate |
|
MS08-031 | Installed | Cumulative Security Update for Internet Explorer 6
Service Pack 1 (KB950759) | Critical |
|
MS07-042 | Installed | Security Update for Microsoft XML Core Services 4.0
Service Pack 2 (KB936181) | Critical |
|
MS08-033 | Installed | Security Update for DirectX 9 for Windows 2000
(KB951698) | Critical |
|
MS08-033 | Installed | Security Update for Windows 2000 (KB951698) | Critical |
|
MS08-037 | Installed | Security Update for Windows 2000 (KB951746) | Important
|
|
MS08-037 | Installed | Security Update for Windows 2000 (KB951748) | Important
|
2008-09-04 16:46:38 : MBSA_Scan successfully executed
2008-09-04 16:46:38 : Successfully
stopped wuauserv
[SC] ChangeServiceConfig
SUCCESS
2008-09-04 16:46:39 : Success
detected disabling wuauserv
2008-09-04 16:46:39 :
2008-09-04 16:46:39 : End MBSA Scan
If you had a
problem during the upgrade, consider the following information:
·
Disable Cisco-approved Antivirus, HIDS/HIPS software; for example, Entercept, MacAfee, Cisco Security Agent, Prognosis,
·
Disable all Cisco-approved, third-party applications.
·
If you had a problem
with the upgrade
·
Verify that you have Administrative privileges on the server.
·
Make sure that you
logged in to the server each time by using the same administrator account
·
Verify that the server
has enough disk space. Cisco recommends that you have 1.5 GB free disk space
before you copy the upgrade file to the server.
o win-OS-Upgrade.2000-4-6.exe is
about 1.02 GB.
o The working directory c:\mcsosupg
is about 1.10 GB.
o SP4 Rollup Update can take up to 33
MB of space.
·
If the Local Security
Policy
·
If you see the Found New Hardware Wizard dialog box,
just click Finish.
·
You can safely ignore
the following Could not delete
o MCSOSUP| Could not delete
C:\inetpub\wwwroot\_private
o MCSOSUP| Error code was: 2
o MCSOSUP| Could not delete:
C:\inetpub\wwwroot\_vti_cnf
o MCSOSUP| Error code was: 2
o MCSOSUP| Could not delete:
C:\inetpub\wwwroot\_vti_log
o MCSOSUP| Error code was: 2
o MCSOSUP| Could not delete:
C:\inetpub\wwwroot\_vti_pvt
o MCSOSUP| Error code was: 2
o MCSOSUP| Could not delete:
C:\inetpub\wwwroot\_vti_script
o MCSOSUP| Error code was: 2
o MCSOSUP| Could not delete:
C:\inetpub\wwwroot\_vti_txt
o MCSOSUP| Error code was: 2
o MCSOSUP| Could not delete:
C:\inetpub\wwwroot\images
o MCSOSUP| Error code was: 2
o MCSOSUP| Could not delete:
C:\WINNT\web\printers
o MCSOSUP| Error code was: 2
o MCSOSUP| Deleting virtual
directories from metabase
o MCSOSUP| Failed to delete
IIS://LocalHost/w3svc/1/Root/iissamples
o MCSOSUP| Failed to delete
IIS://LocalHost/w3svc/1/Root/iishelp
o MCSOSUP| Failed to delete
IIS://LocalHost/w3svc/1/Root/samples
o MCSOSUP| Failed to delete
IIS://LocalHost/w3svc/1/Root/iisadmpwd
o MCSOSUP| Failed to delete
IIS://LocalHost/w3svc/1/Root/msadc
o MCSOSUP| Failed to delete
IIS://LocalHost/w3svc/1/Root/Printers
o MCSOSUP| Failed to delete
IIS://LM/w3svc/1/Root/Printers
·
The OS Upgrade
automatically disables a list of services at the start
o Open the OS Upgrade log file by
choosing Start > Cisco Install Logs > MCSOsUpg.log (or browse to C:\Program Files\Common
Files\Cisco\Logs\MCSOsUpg.log)
o Locate Startup Type.
o The list of services displays below
Startup Type in the log file.
o Open the Services
o Confirm that Automatic displays as
the Startup Type for all “SERVICE_
·
Manually run the second phase, Phase 2, in a Regular Installation
If the second phase did not automatically start or did not
successfully complete as expected, review the following information.
1.
Review the items
listed in “Troubleshooting
Tips” to see if one of them might have caused the problem with Phase 2 or Phase
3.
2.
Start the OS upgrade
again by executing the following file:
C:\Mcsosupg\Mcsosupg.exe. This action restarts the OS
Upgrade from Phase 1. It should proceed as described under the Upgrade Procedures.
3.
If the second phase,
Phase 2, did not run after running the OS Upgrade twice, look at the log file
that is listed above under Post-Upgrade
Considerations. Review the log file for the following information:
11:48:00-MCSOSUP|Adding new registry entries
11:48:00-MCSOSUP|Finished adding new registry entries
11:48:00-MCSOSUP|Phase 1 of 3 upgrade complete. Attempting
shutdown
If you see the preceding information, you may manually
start Phase 2 by executing the following comm
·
Manually run the final phase
Regular Installation
If the final phase did not automatically start or did not
successfully complete as expected, review the following information:
1. Review the items listed in “Troubleshooting
Tips” to see if one of them might have caused the problem with Phase 2 or
Phase 3.
2. Start the OS Upgrade again by
executing the following file: C:\Mcsosupg\Mcsosupg.exe. This action restarts the OS Upgrade from
Phase 1. It should proceed as described
under the Upgrade Procedures.
3. If the final phase, phase 3, did
not run after running the OS Upgrade twice, look at the log file that is listed
above under Post-Upgrade Considerations. Review the log file for the following
information:
11:48:00-MCSOSUP|End modSP4
11:48:00-MCSOSUP|Phase 2 of 3 upgrade complete. Attempting
shutdown
If you see the preceding information, you may manually
start Phase 3 by executing the following comm
Express Installation
If the final phase did not automatically start or did not
successfully complete as expected, review the following information:
1. Review the items listed in “Troubleshooting
Tips” to see if one of them might have caused the problem with Phase 2.
2. Start the OS Upgrade again by
executing the following file: C:\Mcsosupg\Mcsosupg.exe. This action restarts the OS Upgrade from
Phase 1. It should proceed as described
under the Upgrade Procedures.
3. If the final phase, phase 3, did
not run after running the OS Upgrade twice, look at the log file that is listed
above under Post-Upgrade Considerations. Review the log file for the following
information:
11:48:00-MCSOSUP|Finished adding new registry entries
11:48:00-MCSOSUP|Express Installation : Phase 1 of 2
upgrade complete. Attempting shutdown
If you see the preceding information, you may manually
start Phase 2 by executing the following comm
The following information pertains to this upgrade:
Highlights
- [New in
2000.4.6]
· Roll up
of post-Windows 2000 Service Pack 4 Rollup Update 1 security updates. The security hotfixes
in 2000.4.6 are current through July 2008, http://www.microsoft.com/technet/security/bulletin/ms08-jul.mspx
. When available, also install OS Service Release 2000-4-6 SR1 or later to get
the latest security updates.
· HP Drivers upgrades based on SmartStart 7.60A and higher Windows 2000 supported individual driver versions.
·
HP BIOS/Firmware upgrades based on SmartStart
7.91A versions.
·
HP Insight Management Agents based on version 7.60.
· HP Insight Management MIB’s upgraded to version SmartStart 7.91A.
·
IBM Driver/BIOS/Firmware upgrades based on UpdateXpress
4.07 and higher versions.
Microsoft
Service Packs
·
Microsoft
Windows 2000 Service Pack 4 Rollup Update 1
·
Microsoft Windows
Internet Explorer 6.0 Service Pack 1
·
Microsoft XML 3.0
Service Pack 5 (Reference 8.1.11)
Windows
Components
This upgrade adjusts the Windows Components
|
Components |
Subcomponents |
|
Accessories
|
Paint CD Player Sound
Recorder |
|
Internet Information
Services (IIS) |
Common
Files |
|
Management
|
Network
Monitor Tools Simple
Network Management Protocol |
|
Networking
Services |
Domain
Name System (DNS) |
|
Terminal
Services |
Client
Creator Files Enable
Terminal Services |
Services
Microsoft recommends disabling any services that the server
does not use. The following list provides the service “Startup Type” after this
upgrade. Cisco changed the security on the services to Administrators
|
Service Name |
Startup Type |
|
|
Alerter |
Disabled |
|
|
Application
Management |
Disabled |
|
|
Application
Quiesce Agent [IBM based servers only] |
Automatic |
|
|
ASF Agent
[IBM based servers only] |
Automatic |
|
|
Automatic
Updates |
Disabled |
|
|
Background
Intelligent Transfer Service |
Disabled |
|
|
ClipBook |
Disabled |
|
|
COM+
Event System |
Automatic |
|
|
Computer
Browser |
Automatic |
|
|
DHCP
Client |
Automatic in new install.
Unchanged by Upgrade. |
|
|
DHCP
Server |
Disabled in new install.
Unchanged by Upgrade. |
|
|
Distributed
File System |
Disabled |
|
|
Distributed
Link Tracking Client |
Disabled |
|
|
Distributed
Link Tracking Server |
Disabled |
|
|
Distributed
Transaction Coordinator |
Automatic |
|
|
DNS
Client |
Automatic |
|
|
DNS
Server |
Disabled in new install.
Unchanged by Upgrade. |
|
|
Event Log |
Automatic |
|
|
Fax
Service |
Disabled |
|
|
File
Replication |
Disabled |
|
|
HP
Insight Event Notifier [HP-based servers only] |
Disabled |
|
|
HP
Insight Foundation Agent [HP-based servers only] |
Automatic |
|
|
HP
Insight NIC Agent [HP-based servers only] |
Automatic |
|
|
HP Insight
Server Agents [HP-based servers only] |
Automatic |
|
|
HP
Insight Storage Agents [HP-based servers only] |
Automatic |
|
|
HP
Proliant System Shutdown Service [HP-based servers only] |
Automatic |
|
|
HP
Storage Manager [HP based SATA raid servers only] |
Disabled |
|
|
HP
Storage Manager Alerts [HP based SATA servers only] |
Automatic |
|
|
HP System
Management Homepage [HP based servers only] |
Manual |
|
|
HP
Version Control Agent [HP based servers only] |
Automatic |
|
|
IBM Automatic
Server Restart Service for IPMI [IBM-based server only] |
Automatic |
|
|
IBM
Automatic Server Restart Executable [IBM-based servers only] |
Automatic |
|
|
IBM
Director Agent WMI CIM Server [IBM-based servers only] |
Disabled |
|
|
IBM Director
Support Program [IBM-based servers only] |
Automatic |
|
|
IBM
Director Agent SLP Attributes [IBM-based servers only] |
Automatic |
|
|
IBM
Director CIM Listener [IBM-based servers only] |
Disabled |
|
|
IBM Remote
Supervisor Adapter II [IBM-based servers only] |
Automatic |
|
|
IBM ServeRAID Manager Agent [IBM-based servers only] |
Automatic |
|
|
IBM SLP
SA |
Automatic |
|
|
IIS Admin
Service |
Automatic in new install.
Unchanged by Upgrade. |
|
|
Indexing
Service |
Disabled |
|
|
Internet
Connection Sharing |
Disabled |
|
|
Intersite Messaging |
Disabled |
|
|
IPSEC
Policy Agent |
Automatic |
|
|
Kerberos
Key Distribution Center |
Disabled |
|
|
License
Logging Service |
Disabled in new installs. |
|
|
Logical
Disk Manager |
Automatic |
|
|
Logical
Disk Manager Administrative Service |
Manual |
|
|
Message
Queuing [ICS-7750 only] |
Disabled |
|
|
Messenger |
Disabled |
|
|
MyStorage Remote HBA |
Automatic |
|
|
Net Logon |
Manual in Workgroup Automatic in Domain |
|
|
Network
Connections |
Manual |
|
|
Network
DDE |
Disabled |
|
|
Network
DDE DSDM |
Disabled |
|
|
NT LM
Security Support Provider |
Disabled in new install.
Unchanged by Upgrade. |
|
|
Performance Logs |
Manual |
|
|
Plug |
Automatic |
|
|
Portable
Media Serial Number Service |
Disabled |
|
|
PowerQuest Virtual Disk Installer Service [IBM-based servers only] |
Manual |
|
|
Print
Spooler |
Manual |
|
|
Protected
Storage |
Automatic |
|
|
QoS RSVP |
Disabled in new install.
Unchanged by Upgrade. |
|
|
Remote
Access Auto Connection Manager |
Disabled |
|
|
Remote
Access Connection Manager |
Manual |
|
|
Remote
Procedure Call (RPC) |
Automatic |
|
|
Remote
Procedure Call (RPC) Locator |
Disabled |
|
|
Remote
Registry Service |
Automatic |
|
|
Removable
Storage |
Disabled |
|
|
Routing |
Disabled |
|
|
RunAs Service |
Disabled |
|
|
Security
Accounts Manager |
Automatic |
|
|
Server |
Automatic |
|
|
Smart
Card |
Disabled in new install.
Unchanged by Upgrade. |
|
|
Smart
Card Helper |
Disabled in new install.
Unchanged by Upgrade. |
|
|
SMBus Upgrade Service for Windows 2000 |
Disabled |
|
|
SNMP
Service |
Automatic |
|
|
SNMP Trap
Service |
Manual |
|
|
System
Event Notification |
Automatic |
|
|
Task Scheduler |
Disabled in new install.
Unchanged by Upgrade. |
|
|
TCP/IP
NetBIOS Helper Service |
Automatic |
|
|
Telephony |
Manual |
|
|
Terminal
Services |
Disabled in new install.
Unchanged by Upgrade. |
|
Uninterruptible
Power Supply |
Disabled in new install.
Unchanged by Upgrade. |
|
|
Utility
Manager |
Disabled |
|
|
Windows
Installer |
Manual |
|
|
Windows
Internet Name Service (WINS) [ICS-7750
only] |
Disabled |
|
|
Windows
Management Instrumentation |
Automatic |
|
|
Windows Management
Instrumentation Driver Extensions |
Manual |
|
|
Windows
Time |
Disabled in new install. Unchanged by Upgrade. |
|
|
Wireless
Configuration |
Disabled in new install.
Unchanged by Upgrade. |
|
|
Workstation |
Automatic |
|
|
World Wide
Web Publishing Service |
Automatic in new install.
Unchanged by Upgrade. |
|
Microsoft
Windows 2000 Hotfixes
This OS upgrade includes the following hotfixes. Download
|
Bulletin |
Knowledge Base Article or Cisco Defect |
Description |
|
|
Q282784 |
QFEcheck |
|
|
KB831877 CSCeb59434 |
Multiple Memory Leaks in Remote Registry Service |
|
MS03-011 |
KB816093 |
Flaw in the Microsoft VM Could Enable System
Compromise |
|
|
KB831576 |
The PdhEnumObjects function with bRefresh=TRUE
fails repeatedly |
|
|
KB829246 |
Event
Logs Are Corrupted |
|
|
KB325666 |
Access
Violation Error Message in Mmc.exe After You Apply Internet Explorer Privacy Update
from Q316116 or After You Apply Internet Explorer 6 SP1 |
|
|
Q828026 |
Update
for Windows Media Player URL Script Comm |
|
|
KB820888 |
Computer
Stops Responding (Hangs) When It Tries to Mount an NTFS Volume After You Restart
the Computer |
|
|
KB822831 |
BUG:
Driver Installation Program Does Not Install Device Drivers |
|
|
Q831167 |
Wininet retries POST requests with a blank header |
|
MS04-003 |
Q832483 |
Buffer
Overrun in MDAC Function Could Allow Code Execution |
|
|
KB870669 |
Disable ADODB.Stream object
from Internet Explorer |
|
MS04-028 |
KB833989 |
Buffer Overrun
in JPEG Processing (GDI+) Could Allow Code Execution |
|
|
CSCeg00585 |
Registry value being replaced by
a blank for first char |
|
|
KB833227 |
Performance
monitoring tools may experience a memory leak if Terminal Services is
disabled |
|
MS05-009 |
KB885492 |
Vulnerability
in PNG Processing Could Allow Remote Code Execution |
|
|
CSCeh03711 |
Un-install JRE 1.4.2_04 in OS Upgrade
2000.2.7 Enables JRE Auto Update |
|
|
KB839161 CSCsa67078 |
Multiple Terminal Server sessions
remain in the connectQuery state |
|
|
CSCec21319 |
Updating HP Management Agents to
7.2 in order to resolve cqmghost.exe crash issue. |
|
|
CSCsa77836 |
Updating the Network
configuration utility to 7.86 |
|
MS05-024 |
KB894320 |
Vulnerability in web view could
allow remote code execution Note: This is replace with
MS05-049 |
|
|
CSCsa99879 |
Shutdown.exe does not work in
2000.2.7sr4 |
|
MS05-026 |
KB896358 |
Vulnerability in HTML Help Could
allow Remote Code Execution |
|
MS05-027 |
KB896422 |
Vulnerability in Server Message
Block Could Allow Remote Code Execution |
|
MS05-030 |
KB897715 |
Cumulative Security Update in
Outlook Express |
|
MS05-032 |
KB890046 |
Vulnerability in Microsoft Agent
Could Allow Spoofing |
|
MS05-036 |
KB901214 |
Vulnerability in Microsoft Color
Management Module Could Allow Remote Code Execution |
|
MS05-038 |
KB896727 |
Cumulative Security Update for
Internet Explorer Note: This is replace with
MS05-052 |
|
MS05-039 |
KB899588 |
Vulnerability in Plug Note: This is replace with
MS05-047 |
|
MS05-040 |
KB893756 |
Vulnerability in Telephony Service
Could Allow Remote Code Execution |
|
MS05-041 |
KB899591 |
Vulnerability in Remote Desktop
Protocol Could Allow Denial of Service |
|
MS05-042 |
KB899587 |
Vulnerabilities in Kerberos Could
Allow Denial of Service, Information Disclosure, |
|
MS05-043 |
KB896423 |
Vulnerability in Print Spooler
Could Allow Remote Code Execution |
|
MS05-044 |
KB905495 |
Vulnerability in Windows FTP
Client Could Allow File Transfer Location Tampering |
|
MS05-045 |
KB905414 |
Vulnerability in Network Connection
Manager Could Allow Denial Of Service |
|
MS05-046 |
KB899589 |
Vulnerability in Client Services
for Netware Could Allow Remote Code Execution |
|
MS05-047 |
KB905749 |
Vulnerability in Plug |
|
MS05-048 |
KB901017 |
Vulnerability in Microsoft
Collaboration Objects Could Allow Remote Code Execution |
|
MS05-049 |
KB900725 |
Vulnerability in Windows Shell
Could Allow Remote Control Execution |
|
MS05-050 |
KB904706 |
Vulnerability in DirectShow Could
Allow Remote Code Execution |
|
MS05-051 |
KB902400 |
Vulnerability in MSDTC |
|
MS05-052 |
KB896688 |
Cumulative Security Update for
Internet Explorer |
|
MS05-053 |
KB896424 |
Vulnerabilities in Graphics
Rendering Engine Could Allow Code Execution |
|
MS05-055 |
KB908523 |
Vulnerability in Windows Kernel
Could Allow Elevation of Privilege |
|
|
KB831577 CSCsc78649 |
IIS Memory Leak when HTTP
Compression Used |
|
|
KB834010 CSCsc76627 |
DeadLock Occurs when Program Uses Certain
WMI Calls |
|
MS06-001 |
KB912919 |
Vulnerabilities in Graphics
Rendering Engine Could Allow Code Execution |
|
MS06-002 |
KB908519 |
Vulnerability in Embedded Web
Fonts Could Allow Remote Code Execution |
|
|
CSCsc56152 |
CCM 4.2(0.795) Install Fails on
New MCS 7825 HP Servers |
|
|
KB891069 CSCsc28210 |
USBAudio support updated to prevent bluescreen |
|
|
KB823818 CSCsd14924 |
MPWeb IIS stop responding due to ASP
buffering leading to out of memory |
|
MS06-005 |
KB911565 |
Vulnerability in Windows Media
Player Could Allow Remote Code Execution |
|
MS06-006 |
KB911564 |
Vulnerability in Windows Media
Player Plug-in with Non-Microsoft Internet Browsers Could Allow Remote Code
Execution |
|
|
CSCsd18255 |
SQL remains in |
|
MS06-013 |
KB912812 |
Cumulative Security Update for
Internet Explorer (912812) (Replaces
MS05-054) |
|
MS06-014 |
KB911562 |
Vulnerability in the Microsoft Data
Access Components (MDAC) Function Could Allow Code Execution (911562) |
|
MS06-015 |
KB908531 |
Vulnerability in Windows Explorer
Could Allow Remote Code Execution (908531) |
|
MS06-016 |
KB911567 |
Cumulative Security Update for Outlook
Express (911567) (Replaces MS05-030) |
|
|
CSCsd81242 KB822720 |
The computer stops responding
(hangs) when boot into Windows 2000 |
|
|
KB893803 |
Windows Installer update to 3.1
version 2 |
|
MS06-018 |
KB913580 |
Vulnerability in Microsoft Distributed
Transaction Coordinator Could Allow Denial of Service (replaces MS05-051
KB902400) |
|
|
CSCse04719 |
With 2 g RAM or more installed Memory.dmp file will be incomplete |
|
|
CSCsd53918 |
MCS server rebooted with bugcheck |
|
|
CSCsd95726 |
CD ROM icon
missing after SR upgrade |
|
MS06-021 |
KB916281 |
Cumulative Security Update for
Internet Explorer (replaces MS06-013) |
|
MS06-023 |
KB917344 |
Vulnerability in Microsoft
JScript Could Allow Remote Code Execution |
|
MS06-024 |
KB917344 |
Vulnerability in Windows Media
Player Could Allow Remote Code Execution |
|
MS06-025 |
KB911280 |
Vulnerability in Routing |
|
|
CSCse32811 |
RealVNC allows remote access to Win2k
server console without password |
|
MS06-030 |
KB914389 |
Vulnerability in Server Message
Block Could Allow Elevation of Privilege |
|
MS06-031 |
KB917736 |
Vulnerability in RPC Mutual
Authentication Could Allow Spoofing |
|
MS06-032 |
KB917953 |
Vulnerability in TCP/IP Could
Allow Remote Code Execution |
|
|
CSCse54942 |
Undefined device on 7815I2 with
OS 2000.4.3 |
|
MS06-025 |
KB911280
v2 |
Vulnerability in Routing |
|
|
CSCse61586 |
OS 2000.4.2 |
|
MS06-034 |
KB917537 |
Vulnerability in Microsoft
Internet Information Services using Active Server Pages Could Allow Remote
Code Execution (917537) |
|
MS06-035 |
KB917159 |
Vulnerability in Server Service
Could Allow Remote Code Execution (917159) |
|
MS06-036 |
KB914388 |
Vulnerability in DHCP Client
Service Could Allow Remote Code Execution (914388) |
|
|
CSCse79354 |
Remove fix for CSCsd62235 in
2000.4.3aSR2 |
|
MS06-040 |
KB921883 |
Vulnerability in server service
could allow remote code execution(921883) |
|
MS06-041 |
KB920683 |
Vulnerability in DNS resolution
could allow remote code execution.(920683) |
|
MS06-042 |
KB918899 |
Cumulative Security Update for
Internet Explorer (918899) |
|
MS06-044 |
KB917008 |
Vulnerability in Microsoft
Management Console Could Allow Remote Code Execution (917008) |
|
MS06-046 |
KB922616 |
Vulnerability in HTML Help Could Allow
Remote Code Execution (922616) |
|
MS06-051 |
KB917422 |
Vulnerability in Windows Kernel
Could Result in Remote Code Execution (917422) |
|
MS06-045 |
KB921398 |
Vulnerability in Windows Explorer
Could Allow Remote Code Execution (921398) |
|
MS06-049 |
KB920958-v2 |
Vulnerability in Windows Kernel
Could Result in Elevation of Privilege (920958) |
|
MS06-050 |
KB920670 |
Vulnerabilities in Microsoft
Windows Hyperlink Object Library Could Allow Remote Code Execution (920670) |
|
MS06-053 |
KB920685 |
Vulnerability in Indexing Service
Could Allow Cross-Site Scripting |
|
|
CSCse76137 |
Upgrade version registry key is
missing on Fresh Installs |
|
MS06-055 |
KB925486 |
Vulnerability
in Vector Markup Language Could Allow Remote Code Execution (925486) |
|
MS06-057 |
KB923191 |
Vulnerability
in Windows Explorer Could Allow Remote Execution (923191) |
|
MS06-061 |
KB924191 |
Vulnerabilities
in Microsoft XML Core Services Could Allow Remote Code Execution (924191) |
|
MS06-063 |
KB923414 |
Vulnerability
in Server Service Could Allow Denial of Service (923414) |
|
MS06-061 |
KB922819v2 |
Vulnerabilities
in Microsoft XML Core Services Could Allow Remote Code Execution (924191) |
|
MS06-067 |
KB922760 |
Cumulative
Security Update for Internet Explorer (922760) |
|
MS06-068 |
KB920213 |
Vulnerability
in Microsoft Agent Could Allow Remote Code Execution (920213) |
|
MS06-070 |
KB924270 |
Vulnerability
in Workstation Service Could Allow Remote Code Execution (924270) |
|
|
CSCsg81424 |
Fail to
uninstall 3.3.7 |
|
|
CSCsf07541 |
MCS-OS
Update needed N America DST changes in 2007 |
|
|
CSCsd57985 |
DayLight
savings working wrongly for 26-03-2006 without DayLight
Patch. |
|
|
CSCse15694 |
Daylight
savings incorrect for GMT+2 |
|
MS06-072 |
KB925454 |
Cumulative
Security Update for Internet Explorer (925454) |
|
MS06-076 |
KB923694 |
Cumulative
Security Update for Outlook Express (923694) |
|
MS06-074 |
KB926247 |
Vulnerability
in SNMP Could Allow Remote Code Execution (926247) |
|
MS06-078 |
KB923689 |
Vulnerability
in Windows Media Format Could Allow Remote Code Execution (923689) |
|
MS07-004 |
KB929969 |
Vulnerability in Vector Markup Language Could
Allow Remote Code Execution (929969) |
|
MS07-008 |
KB928843 |
Vulnerability in HTML Help ActiveX Control Could
Allow Remote Code Execution (928843) |
|
MS07-009 |
KB927779 |
Vulnerability in Microsoft Data Access Components
Could Allow Remote Code Execution (927779) |
|
MS07-016 |
KB928090 |
Cumulative Security Update for Internet Explorer
(928090) Replaces: the above KB922760 |
|
MS07-011 |
KB926436 |
Vulnerability in Microsoft OLE Dialog Could Allow
Remote Code Execution (926436) |
|
MS07-012 |
KB924667 |
Vulnerability in Microsoft MFC Could Allow Remote
Code Execution (924667) |
|
MS07-013 |
KB918118 |
Vulnerability in Microsoft RichEdit
Could Allow Remote Code Execution (918118) |
|
|
CSCsh20360 KB928388 |
Looping in System Date & Time due to Daylight saving
correction. |
|
|
CSCsh79447 |
MS07-009 hotfix does not
install on CCM 4.2.3 |
|
|
CSCsh91439 |
MBSA Upgrade to 2.0.1 required |
|
|
CSCsh91735 KB931836 |
February 2007 cumulative time zone update for Microsoft
Windows operating sytems (this is the replacement
for CSCsh20360, CSCse15694, CSCsd57985, CSCsf07541) |
|
MS06-066 |
KB923980 |
Vulnerabilities in Client Service for NetWare
Could Allow Remote Code Execution |
|
MS06-078 |
KB925398 |
Security Update for Windows Media Player 6.4 for
Windows (KB925398) |
|
MS07-017 |
KB925902 |
Vulnerabilities in GDI Could Allow Remote Code
Execution (925902) |
|
MS07-020 |
KB932168 |
Vulnerability in Microsoft Agent Could Allow Remote
Code Execution (932168) |
|
MS07-021 |
KB930178 |
Vulnerabilities in CSRSS Could Allow Remote Code
Execution (930178) |
|
MS07-022 |
KB931784 |
Vulnerability in Windows Kernel Could Allow
Elevation of Privilege (931784) |
|
MS07-027 |
KB931768 |
Cumulative Security Update for Internet Explorer
(931768) |
|
MS07-029 |
KB935966 |
Vulnerability in Windows DNS RPC Interface Could
Allow Remote Code Execution (935966) |
|
|
KB935845 |
Stop 0x0000007F error when you print from Windows XP
or Windows 2000 with GDI security update 925902 installed |
|
|
CSCsi79685 KB891071 |
A memory leak may occur in the Winmgmt process in
Windows 2000 |
|
|
CSCsj00318 |
FIX: IIS 6.0 may send an "HTTP 100
Continue" response in the middle of the response stream when you send a
POST request |
|
MS07-031 |
KB935840 |
Vulnerability in the Windows Schannel
Security Package Could Allow Remote Code Execution |
|
MS07-033 |
KB933566 |
Cumulative
Security Update for Internet Explorer |
|
MS07-034 |
KB929123 |
Cumulative
Security Update for Outlook Express and Windows Mail |
|
MS07-035 |
KB935839 |
Vulnerability
in Win 32 API Could Allow Remote Code Execution |
|
MS07-039 |
KB926122 |
Vulnerability
in Windows Active Directory Could Allow Remote Code Execution |
|
MS07-040 |
KB933854 |
Vulnerabilities
in .NET Framework Could Allow Remote Code Execution |
|
MS07-042 |
KB936021 |
Vulnerability
in Microsoft XML Core Services Could Allow Remote Code Execution |
|
MS07-043 |
KB921503 |
Vulnerability
in OLE Automation Could Allow Remote Code Execution |
|
MS07-045 |
KB937143 |
Cumulative
Security Update for Internet Explorer Note: This
replaces KB933566 |
|
MS07-046 |
KB938829 |
Vulnerability
in GDI Could Allow Remote Code Execution |
|
MS07-047 |
KB936782 |
Vulnerabilities
in Windows Media Player Could Allow Remote Code Execution |
|
MS07-050 |
KB938127 |
Vulnerability
in Vector Markup Language Could Allow Remote Code Execution |
|
|
CSCsj56317 (KB933360) |
August 2007 cumulative time zone update for Microsoft
Windows operating systems MCS-OS Update needed for New Zealand DST changes in 2007 Note: This replaces KB931836 |
|
|
CSCsk67094 (KB931633) |
Error
message when Reg.exe tool is used to
query a registry subkey |
|
|
CSCsk63114 (KB837060) |
The
Taskmgr.exe or the Tsadmin.exe program may stop responding when you open Task
Manager on a computer that is running Terminal Services in remote
administration mode |
|
|
CSCsl17246 (KB925336) |
FIX:
Error message when you try to install a large Windows Installer package or a large
Windows Installer patch package in Windows Server 2003 |
|
MS07-057 |
KB939653 |
Cumulative
Security Update for Internet Explorer 6 |
|
MS07-056 |
KB941202 |
Security
Update for Outlook Express |
|
|
KB938977 |
Venezuela (GMT-4:30) Time Zone Update |
|
MS07-058 |
KB933729 |
Vulnerability
in RPC Could Allow Denial of Service |
|
|
CSCsl18866 (KB943000) |
MCS-OS
update needed for 2008 Brazil Summertime change |
|
MS07-061 |
KB943460 |
Vulnerability
in Windows URI Handling Could Allow Remote Code Execution |
|
MS07-062 |
KB941672 |
Vulnerability
in DNS Could Allow Spoofing |
|
MS07-051 |
KB938827 |
Vulnerability
in Microsoft Agent Could Allow Remote Code Execution |
|
MS07-055 |
KB923810 |
Vulnerability
in Kodak Image Viewer Could Allow Remote Code Execution |
|
MS07-028 |
KB931906 |
Vulnerability
in CAPICOM Could Allow Remote Code Execution (931906) |
|
|
KB942763 |
December
2007 cumulative time zone update for Microsoft Windows operating systems |
|
MS07-064 |
KB941568 |
Vulnerabilities
in DirectX Could Allow Remote Code Execution (941568) |
|
MS07-067 |
KB944653 |
Vulnerability
in Macrovision Driver Could Allow Local Elevation
of Privilege (944653) |
|
MS07-068 |
KB941569 |
Vulnerability
in Windows Media File Format Could Allow Remote Code Execution (941569 and
944275) |
|
MS07-069 |
KB942615 |
Cumulative
Security Update for Internet Explorer (942615) |
|
MS07-065 |
KB937894 |
Vulnerability in Message Queuing
Could Allow Remote Code Execution (937894) |
|
|
CSCsl17246 KB925336 |
Error
1718: <file> was rejected by digital signature policy |
|
MS08-002 |
943485 |
Vulnerability
in LSASS Could Allow Local Elevation of Privilege (943485) |
|
MS08-007 |
946026 |
Vulnerability
in WebDAV Mini-Redirector Could Allow Remote Code
Execution (946026) |
|
MS08-008 |
947890 |
Vulnerability
in OLE Automation Could Allow Remote Code Execution (947890) |
|
MS08-010 |
944533 |
Cumulative
Security Update for Internet Explorer (944533) |
|
MS08-003 |
946538 |
Vulnerability
in Active Directory Could Allow Denial of Service (946538) |
|
MS08-005 |
942831 |
Vulnerability
in Internet Information Services Could Allow Elevation of Privilege (942831) |
|
MS08-006 |
942830 |
Vulnerability
in Internet Information Services Could Allow Remote Code Execution (942830) |
|
|
CSCsm74155 |
MCS-OS:
c:\utils\kill.exe out of date on 2003.1.2a |
|
MS08-020 |
945553 |
Vulnerability
in DNS Client Could Allow Spoofing (945553) |
|
MS08-021 |
948590 |
Vulnerabilities
in GDI Could Allow Remote Code Execution (948590) |
|
MS08-022 |
944338 |
Vulnerability
in VBScript and JScript Scripting Engines Could Allow Remote Code Execution
(944338) |
|
MS08-023 |
948881 |
Security
Update of ActiveX Kill Bits (948881) |
|
MS08-024 |
947864 |
Cumulative
Security Update for Internet Explorer (947864) |
|
MS08-025 |
941693 |
Vulnerability
in Windows Kernel Could Allow Elevation of Privilege (941693) |
|
|
CSCso26082 |
Add
tzupdate.exe to OS fresh installs and upgrades |
|
|
CSCso13134 |
DST: MCS
OS update needed for 2008 Iraq Daylight Time removal (replaces CSCsl16516/KB942673) |
|
|
CSCso63866 |
MCS
OS2000 for Australian DST does not update timezone
information |
|
|
CSCso13145 |
DST: MCS
IBM Director update needed for 2008 Iraq Daylight Time removal |
|
MS08-031 |
950759 |
Cumulative
Security Update for Internet Explorer (950759) |
|
MS08-033 |
951698 |
Vulnerabilities
in DirectX Could Allow Remote Code Execution (951698) |
|
MS08-034 |
948745 |
Vulnerability
in WINS Could Allow Elevation of Privilege (948745) |
|
MS08-035 |
953235 |
Vulnerability
in Active Directory Could Allow Denial of Service (953235) |
|
MS08-036 |
950762 |
Vulnerabilities
in Pragmatic General Multicast (PGM) Could Allow Denial of Service (950762) |
|
MS08-032 |
950760 |
Cumulative
Security Update of ActiveX Kill Bits (950760) |
|
MS08-037 |
951746,951748 |
Vulnerabilities
in DNS Could Allow Spoofing (953230) |
|
MS08-040 |
948110 |
Vulnerabilities
in Microsoft SQL Server Could Allow Elevation of Privilege (948110) |
Other
Windows software upgrades
·
Microsoft Windows
Installer 3.1 version 2
·
Virtual Network
Computing (VNC) 4.1.2 (just copies install files, doesn’t install but upgrades
if already installed)
· HP SmartStart 7.60 and higher individual Windows 2000 supported driver updates
·
HP SmartStart
7.91A BIOS/Firmware Updates
·
IBM UpdateXpress 4.07 and higher Updates
Compaq/HP
Drivers
During the upgrade, the following Compaq/HP drivers automatically
install on the appropriate servers.
|
Version |
Description |
|
5.41.0.0 |
HP ProLiant iLO Advanced |
|
1.1.0.0 |
HP ProLiant iLO 2 Management
Controller Driver for Windows 2000/Windows Server 2003 |
|
5.37.0.0C |
HP ProLiant Advanced System Management Controller Driver for
Windows 2000 |
|
5.24.0.0B |
HP ProLiant 32-Bit SCSI Controller Driver for Windows 2000 |
|
5.20.0.32C |
HP ProLiant Drive Array Driver for Windows 2000 |
|
5.14.0.0E |
HP ProLiant Smart Array-2 Controllers Driver for Windows
2000 |
|
5.74.0.32 |
HP ProLiant Smart Array 5x |
|
5.2.3790.1433
|
HP Embedded
SATA RAID Controller Driver for Windows 2000 for DL320 G3 servers |
|
1.2.5567 |
HP
Embedded SATA RAID Controller Driver for Windows 2000 for DL320 G4, G5
servers. |
|
2.0.6.0J |
HP ProLiant CMD 0649 IDE Ultra DMA Controller Driver for
Windows 2000 |
|
2.5.2003.613
B |
HP ProLiant Integrated Ultra ATA-100 Dual Channel Driver For
Windows 2000 |
|
5.28.0.32
B |
HP ProLiant Drive Array Notification for Windows 2000 |
|
6.3.2.1 C |
HP ProLiant PCI Hot Plug Controller Driver for Windows 2000 |
|
1.9.2195.0 |
HP ProLiant Integrated Lights-Out Management Interface
Driver for Windows 2000 |
|
1.5.1.0 C |
HP
Lights-Out Online Configuration Utility for Windows 2000/Windows Server 2003 |
|
5.0.2195.3249E |
HP ProLiant ATI RAGE IIC Video Controller Driver for Windows
2000 |
|
5.0.2195.5024 |
HP ProLiant ATI RAGE XL Video Controller Driver for Windows
2000 |
|
1.8.2195.0
C |
HP |
|
7.61.2.0 |
HP ProLiant Array Configuration Utility for Windows 2000 |
|
5.10.0.32
B |
HP ProLiant Smart Array Device Manager Extension for Windows
2000 |
|
4.10-4590 |
HP
Embedded SATA RAID Controller Manager for Windows |
|
5.0.1.18F |
HP ProLiant NetFlex/Netelligent
Adapter Driver for Windows 2000 |
|
8.0.27.0 |
HP ProLiant NC31xx Fast Ethernet NIC Driver for Windows |
|
10.31.0.0 |
HP
NC10xx/67xx/77xx/150x/320x/325x/326x Gigabit Ethernet NIC Driver for Windows
2000 |
|
2.8.15.0
B |
HP NC-Series Multifunction Driver for Windows 2000
(contains the driver
for the HP NC370x/371x/373x/374x/380x) |
|
7.60.0.0 |
HP ProLiant Insight Management Agents for Windows 2000/2003 |
|
2.56.8.0 |
HP survey
utility for Windows 2000 |
|
8.40.0.0 |
HP ProLiant Network Configuration Utility for Windows 2000 |
|
2.1.10.186
C |
HP System
Management Homepage for Windows |
|
7.6.0.1984 |
HP
Insight Diagnostics Online Edition for Windows |
|
2.1.10.800 |
HP
version control agent for Windows |
|
1.5.3.1 |
HP StorageWorks DAT 72 USB TapeDrive
|
HP Network Configuration Utility (Teaming
driver) is installed by default on applicable servers. Use this utility to provide fault-tolerant
network connectivity only. Starting with
OS 2000.2.7, you can set the speed
· Find instructions to configure fault-tolerant network connectivity on CCO at this location: http://www.cisco.com/univercd/cc/td/doc/product/voice/iptel_os/driver/index.htm
·
If the HP Network Configuration Utility is uninstalled, you can reinstall
it by using the installation file are located in this folder:
C:\Utils\DualNIC\.
Compaq/HP
Software
The HP Diagnostics for Windows software provides a detailed
list of all hardware installed on the server.
It can also run diagnostic tests on the hardware. This processor-intensive intensive software
should be used during a maintenance cycle.
|
Version |
Description |
|
7.6.0.1984 |
HP
Insight Online Diagnostics for Windows |
|
4.13B |
HP
Diagnostics for Windows (Only for servers not supported by Online Diag, Prosigna 720, Proliant
1600, DL320-800/1133) |
Compaq/HP
BIOS, Array Firmware
This upgrade updates the following BIOS
|
Date/Version |
Server |
|
P08 –
2000.11.08B |
MCS-7830
BIOS |
|
D05
- 2002.11.15 |
MCS-7825H-800/1133
BIOS |
|
D13 –
2004.09.15 |
MCS-7825H-2.2/3.0 BIOS |
|
D18 –
2007.07.16 |
MCS-7825H1 BIOS |
|
D20 –
2007.07.18 |
MCS-7825H2 BIOS |
|
W04 – 2008.04.10 |
MCS-7825H3
BIOS |
|
P17 – 2002.12.18B |
MCS-7835H-733/1000
BIOS |
|
P24 – 2004.05.01 |
MCS-7835-1266
or MCS7845-1400 BIOS |
|
P29 – 2004.09.15 |
MCS-7835H-2.4/3.0 or
MCS-7845-2.4/3.0 BIOS |
|
P51 –
2007.07.19 |
MCS-7835H1
or MCS-7845H1 BIOS |
|
P56 – 2008.01.24 |
MCS-7835H2
or MCS-7845H2 BIOS |
|
1.91B |
MCS-7835H-2.4/3.0, MCS-7845H-2.4/3.0, MCS-7835-H1
and MCS7845-H1 iLO firmware |
|
1.91B |
MCS-7825-H1
iLO firmware |
|
1.43 |
MCS-7835H2, MCS-7845-H2, MCS-7825-H2, MCS-7825-H3
iLO 2 firmware |
|
2.74A |
MCS-7835(1266/2400/3000)
|
|
2.80B |
MCS-7835-H1
|
|
4.12B |
MCS-7835-H2
|
|
1.0.0.13 |
NIC
firmware for DL320-G2, DL320-G3, DL380-G2, DL380-G3, DL380-G4 |
IBM
Drivers
During the upgrade, the following IBM drivers automatically
install on the appropriate servers.
|
Version |
Description |
|
5.0.2195 |
X200,
MCS-7815-1000 |
|
6.13.10.8013-13.95.13 |
X330-800/866/933/1000/1266,
X340, X342 Video Driver |
|
6.14.10.6422 |
X206/x306
Video driver |
|
8.24.3.0 |
X206m/X306m/x346/x3650/x3250
Video driver |
|
7.12.11 |
X340/X342/X345/X346
|
|
5.2.0.12913 |
X3650 ServeRAID Driver |
|
1.27.03.00 |
X3250 ServeRAID driver |
|
1.2.0.5561 |
X306m ServeRAID driver |
|
12.3 |
X200/x330-800/866/933/1000/1266/x342
NIC driver |
|
10.62 |
X205,
x206m, x306m, x346, x3250 NIC driver |
|
12.3 |
X206/x306/x306-3.4/x345-2.4/x345-3.0
NIC driver |
|
3.7.19.0 |
X3650 NIC
Driver |
|
10.7b.3 |
X346,
x3250 Teaming Driver |
|
T3.4.6b |
X3650
Teaming Driver |
|
5.4 |
X3650 RSA
Driver |
|
9.00 |
ServeRAID manager |
|
1.07 |
ASR for
IPMI Application |
|
Package: 1.15 File:
2.2.1.2 |
OSA IPMI
Device Driver for Microsoft Windows |
|
1.15 |
IBM
Mapping Layer Software for OSA IPMI on Microsoft Windows |
IBM
BIOS
This upgrade updates the following BIOS
|
Version |
Server |
|
1.53A |
MCS-7815I-2.0
BIOS |
|
1.40 |
X206/x306-3.0/x306-3.4
BIOS |
|
1.21 |
X345 |
|
1.43A |
X206m,
x306m BIOS |
|
1.17 |
X346,
MCS-7835-I1 |
|
1.09 |
X3650
BIOS |
|
1.39A |
X3250
BIOS |
|
7.12.13 |
X340, X342,
X345, MCS7835I-2.4/3.0, X346, MCS-7835-I1 |
|
5.2-0-15418 |
X3650
RAID |
|
1.09 |
X342 ASM
Firmware Update |
|
1.20 |
X346,
MCS-7835-I1 |
|
2.16 |
X306m BMC
Firmware update |
|
1.16 |
X206m BMC
Firmware Update |
|
1.42 |
X3650 BMC
firmware update |
|
1.07 |
X3250 BMC
firmware update |
|
1.09 |
X345,
MCS7835I-2.4/3.0 |
|
1.08 |
X346,
MCS-7835-I1 |
|
1.06 |
X345,
MCS-7835I-2.4/3.0 |
|
1.05 |
X3650
Diagnostic Firmware |
|
1.07 |
X3650 RSA
II firmware |
|
2.0.6 |
X205, x206m, x306m, x346, x3250 NIC firmware |
This fairly complete list gives
the security settings in OS version 2000.4.6.
The list of file/folder permissions that are included from the ocfiless.inf are not included. The list includes settings that have been in
place for several OS versions as well as the new settings in 2000.4.6. This
list does not include the changes as part of the Optional Security Settings.
Refer Optional Security settings readme in C:\Utils Folder for the list of
changes in Optional Security Settings Script.