Microsoft KB Archive/889410

= Systems Management Server deployment packages are available for MS04-040 security updates for Internet Explorer 6 SP1 =

Article ID: 889410

Article Last Modified on 2/6/2007

-

APPLIES TO

 Microsoft Systems Management Server 2.0 Standard Edition Microsoft Systems Management Server 2003 Microsoft Internet Explorer 6.0 Service Pack 1, when used with:  Microsoft Windows XP Professional

 Microsoft Windows 2000 Standard Edition

 Microsoft Windows NT 4.0 Service Pack 6</li></ul> </li></ul>

-

<div class="summary_section">

SUMMARY
''Microsoft Systems Management Server (SMS) deployment packages are available that include the MS04-040 security update for Microsoft Internet Explorer 6 SP1 for Microsoft Windows NT 4.0 and the MS04-040 security update for Internet Explorer 6 SP1 for Microsoft Windows 2000 and Microsoft Windows XP. The SMS deployment package also includes a script to enable the SMS 2.0 Software Update Services (SUS) Feature Pack or SMS 2003 Software Update feature to deploy the appropriate security updates to Microsoft Windows NT 4.0, Windows 2000, and Windows XP-based computers. You can download the SMS deployment package from the Microsoft Download Center. You must download a language-specific version of the deployment package if you authorize the MS04-040 security updates for languages other than English, French, German, or Japanese. To use the SMS deployment package, specify /q:a /r:n for the command-line switches in the Distribute Software Updates Wizard (DSUW).''

<div class="symptoms_section">

SYMPTOMS
Microsoft Baseline Security Analyzer (MBSA) is the scanning tool that is used by SMS. MBSA can detect computers that require the security updates documented in Microsoft security bulletin MS04-040. However, MBSA cannot provide SMS with the information that it must have to download and deploy the appropriate MS04-040 security update packages for Internet Explorer 6 SP1 for Windows NT 4.0 and Internet Explorer 6 SP1 for Windows 2000 and Windows XP.

Note The MS04-040 security update package for Windows NT 4.0 is named IE6.0sp1-KB889293-Windows-NT4sp6a-98-ME-x86-ENU.exe. The MS04-040 security update package for Windows 2000 and Windows XP is named IE6.0sp1-KB889293-Windows-2000-XP-x86-ENU.exe.

For additional information about the MS04-040 security updates, visit the following Microsoft Web site: http://www.microsoft.com/technet/security/bulletin/MS04-040.mspx

<div class="resolution_section">

RESOLUTION
To resolve this problem, we have released an SMS deployment package to the Microsoft Download Center. The SMS deployment package includes the following:
 * IE6.0sp1-KB889293-Windows-2000-XP-x86-ENU.exe
 * IE6.0sp1-KB889293-Windows-NT4sp6a-98-ME-x86-ENU.exe
 * A script to detect the operating system for SMS client computers and to install the appropriate security update

After the MS04-040 security update is approved in the DSUW, SMS will download the SMS deployment package instead of the specified security updates that are documented in Microsoft security bulletin MS04-040.

Important If you authorize the MS04-040 security update for languages other than English, French, German, or Japanese, you must manually download the SMS deployment package for the appropriate language. Additionally, if the following conditions are true, you also must manually download the SMS deployment packages for the appropriate languages:
 * You are using the English version of the security catalog
 * You are scanning French, German, or Japanese client computers

Download information
The following files are available for download from the Microsoft Download Center:

Download the English (U.S.) KB889410 package now.

Download the Arabic KB889410 package now.

Download the Portuguese (Brazil) KB889410 package now.

Download the Chinese (Simplified) KB889410 package now.

Download the Czech KB889410 package now.

Download the Danish KB889410 package now.

Download the German KB889410 package now.

Download the Greek KB889410 package now.

Download the Spanish KB889410 package now.

Download the Finnish KB889410 package now.

Download the French KB889410 package now.

Download the Hebrew KB889410 package now.

Download the Hungarian KB889410 package now.

Download the Italian KB889410 package now.

Download the Japanese KB889410 package now.

Download the Korean KB889410 package now.

Download the Dutch KB889410 package now.

Download the Norwegian KB889410 package now.

Download the Polish KB889410 package now.

Download the Portuguese (Portugal) KB889410 package now.

Download the Russian KB889410 package now.

Download the Swedish KB889410 package now.

Download the Turkish KB889410 package now.

Download the Chinese (Traditional) KB889410 package now.

Release Date: December 1, 2004

For additional information about how to download Microsoft Support files, click the following article number to view the article in the Microsoft Knowledge Base:

119591 How to obtain Microsoft support files from online services

Microsoft scanned this file for viruses. Microsoft used the most current virus-detection software that was available on the date that the file was posted. The file is stored on security-enhanced servers that help to prevent any unauthorized changes to the file.

Prerequisites
The SMS deployment package requires the SMS 2.0 SUS Feature Pack or the SMS 2003 Software Update feature.

Usage information
To use the SMS deployment package, specify the following command-line command in DSUW:

IE6.0sp1-KB889293-SMS-Deploy-KB889410-x86-ENU.exe /q:a /r:n

The SMS deployment package uses the recommended command-line switches for SMS deployment to install the security updates silently without restarting client computers. For the Windows 2000 and Windows XP security updates, the /quiet /norestart command-line switches are used. For the Windows NT 4.0 security update, the /q:a /r:n command-line switches are used. These command-line switches are part of the script logic in the SMS deployment package. These command-line switches cannot be changed.

<div class="moreinformation_section">

Frequently asked questions
What is the difference between the security updates that are included in the SMS deployment package and the security updates that are documented in Microsoft security bulletin MS04-040?

There is no difference in the security updates in the SMS deployment package and the security updates that are documented in Microsoft security bulletin MS04-040.

'''I received a hotfix from Microsoft or from my support provider after the release of Microsoft security bulletin MS04-004. Is that hotfix included in the SMS deployment package?'''

No. The SMS deployment package includes the same security updates that are documented in Microsoft security bulletin MS04-040. For all operating systems besides Microsoft Windows Server 2003, Microsoft Windows 64-Bit Edition Version 2003, or Microsoft Windows XP Service Pack 2, Internet Explorer hotfixes that were created after MS04-004 or after MS04-025 are not included in the MS04-040 security updates. Therefore, hotfixes that were released after MS04-004 may be removed when you install the MS04-040 security updates. An update rollup is available that contains Internet Explorer hotfixes that were released after MS04-004. The update rollup also includes all the security fixes that are included in the MS04-040 security updates. For additional information about the update rollup, click the following article number to view the article in the Microsoft Knowledge Base:

889669 An update rollup is available for Internet Explorer 6 Service Pack 1

Note Microsoft does not support SMS deployment of the 889669 update rollup. There is no SMS deployment package for the 889669 update rollup. The 889669 update rollup is available for download from the Microsoft Download Center only.

Does the SMS deployment package support MS04-040 security updates for other versions of Internet Explorer?

No. The problem that is described in this article occurs only with the MS04-040 security updates for Internet Explorer 6 SP1 for Windows NT 4.0, for Windows 2000, and for Windows XP. The MS04-040 security updates for other versions of Internet Explorer can be detected and deployed by using SMS. There is no need for a separate SMS deployment package for other MS04-040 security updates.

'''I have Internet Explorer 6 SP1 running in a homogenous environment with only one type of operating system. For example, my SMS client computers run only on Windows 2000. Must I use the SMS deployment package, or can I deploy the security updates that are documented in Microsoft security bulletin MS04-040?'''

You can use the SMS deployment package, or you can manually download and deploy the specific operating system update that is documented in the MS04-040 security bulletin.

Additional query words: security patch patches

<div class="references_section">