Microsoft KB Archive/814124

= How to Install MSDE 2000 Security Patch MS02-061 or SP3 with Host Integration Server 2000 =

Article ID: 814124

Article Last Modified on 11/7/2007

-

APPLIES TO


 * Microsoft Host Integration Server 2000 Standard Edition
 * Microsoft Host Integration Server 2000 Service Pack 1

-



SUMMARY
This article describes how to install updates to SQL Server 2000 Desktop Engine (also known as MSDE 2000) to help protect against the Slammer worm when you are using Host Integration Server 2000. The version of MSDE 2000 that is included on the Host Integration Server 2000 CD-ROM is vulnerable to the W32.Slammer worm.

You need MSDE 2000 to install the SNA Host Account Cache service only when you use host security integration features that are included in Host Integration Server 2000.



MORE INFORMATION
To help protect MSDE 2000 against the Slammer worm when you are using Host Integration Server 2000, use one of the following methods:
 * METHOD A: Install post-SP2 security patch MS02-061 on Microsoft SQL Server 2000 Desktop Engine (MSDE).
 * METHOD B: Install SP3 on MSDE 2000.
 * METHOD C: Run the SQL Critical Update utility to update the affected files.
 * METHOD D: Install MSDE 2000 SP3 (new install).

METHOD A: Install Post-SP2 Security Patch MS02-061 on MSDE 2000
To install security patch MS02-061 on SQL Server 2000, visit the following Microsoft Web site:

http://www.microsoft.com/technet/security/bulletin/MS02-061.mspx

For additional information, click the following article number to view the article in the Microsoft Knowledge Base:

316333 INFO: SQL Server 2000 Security Update for Service Pack 2

You can use the following syntax to apply MSDE 2000 SP2 to the MSDE 2000 version that is included with Host Integration Server 2000:

setup /p /upgradesp SQLRUN INSTANCENAME=ms_hi_server_db

METHOD B: Install SP3 on MSDE 2000
To install SP3 on MSDE, visit the following Microsoft Web site:

http://www.microsoft.com/downloads/details.aspx?FamilyID=90dcd52c-0488-4e46-afbf-acace5369fa3&DisplayLang=en

 To update MSDE, download the Sql2kdesksp3.exe file. Extract Sql2kdesksp3.exe into a local folder. To set the SA password if the password is blank, use OSQL to run the stored proc sp_password. Use the following syntax to change the password at the OSQL command prompt:

exec sp_password @old=NULL, @new=' ', @loginname='sa'

After you enter this command, run the go command to submit the change password stored procedure. At a command prompt, run the following command:

setup.exe /upgradesp SQLRUN INSTANCENAME=MS_HI_Server_DB



METHOD C: Run the SQL Critical Update Utility
To obtain the SQL Critical Update utility, visit the following Microsoft Web site:

http://www.microsoft.com/downloads/details.aspx?FamilyId=689832DB-297B-489F-9E87-8FD78AEEE64F

METHOD D: Install MSDE 2000 SP3
You can use MSDE 2000 SP3 for new installations of MSDE 2000 without having to first install a vulnerable version of MSDE 2000. You can use the following syntax for new installations of MSDE 2000 SP3 that you will use with Host Integration Server 2000:  Download Sql2kdesksp3.exe. Extract Sql2kdesksp3.exe into a local folder.</li> At a command prompt, run the following command:

setup [TARGETDIR=&quot; &quot;] [DATADIR=&quot; &quot; ] INSTANCENAME=&quot;MS_HI_Server_DB&quot; SAPWD=<SA password>

</li></ol>

After you update MSDE 2000, you may have to stop and restart the following Host Integration Server 2000 host security services:
 * SNA Host Account Cache service
 * SNA WinNT Account Synchronization service

Additional query words:

Keywords: kbhowto KB814124

-

[mailto:TECHNET@MICROSOFT.COM Send feedback to Microsoft]

© Microsoft Corporation. All rights reserved.