Microsoft KB Archive/814906

= Feature Pack: Microsoft Network Security Hotfix Checker Replaced with Microsoft Baseline Security Analyzer =

PSS ID Number: 814906

Article Last Modified on 11/5/2003

-

The information in this article applies to:


 * Microsoft Systems Management Server 2.0

-





SUMMARY
Microsoft has updated the Security Patch feature in the Systems Management Server (SMS) Software Update Services Feature Pack to use the Microsoft Baseline Security Analyzer (MBSA) version 1.1 as its security scan tool. This updated tool integrates the scan results for the MBSA v1.1 into the inventory of the SMS client computers that are based on Windows NT and later operating systems. This update includes the latest released version of Mbsacli.exe version 1.1. Microsoft has also enabled patch detection for the following products::
 * Microsoft Exchange 2000 Server
 * Microsoft SQL Server 2000
 * Microsoft Windows Media Player

Note: If you add new software updates for additional products, for example SQL Server or Exchange server, you must perform additional pre-deployment testing.



RESOLUTION
A supported fix is now available from Microsoft, but it is only intended to correct the problem that is described in this article. Apply it only to systems that are experiencing this specific problem.

To resolve this problem, contact Microsoft Product Support Services to obtain the fix. For a complete list of Microsoft Product Support Services phone numbers and information about support costs, visit the following Microsoft Web site:

http://support.microsoft.com/default.aspx?scid=fh;EN-US;CNTACTMS

Note In special cases, charges that are ordinarily incurred for support calls may be canceled if a Microsoft Support Professional determines that a specific update will resolve your problem. The usual support costs will apply to additional support questions and issues that do not qualify for the specific update in question.

The English version of this fix has the file attributes (or later) that are listed in the following table. The dates and times for these files are listed in coordinated universal time (UTC). When you view the file information, it is converted to local time. To find the difference between UTC and local time, use the Time Zone tab in the Date and Time tool in Control Panel.

   Date         Time   Version      Size       File name                 Platform --   18-Jan-2003  01:45  1.0.200.101     2,547,712  Securitypatch_enu.exe  X86 06-Dec-2002 01:37  1.1.0.5           708,608  Mbsacli.exe            X86 09-Jan-2003 03:50                     12,134  Products.xml           X86 10-Dec-2002 00:16  1.0.200.100       167,547  S_scan.exe             X86 Note: Because of file dependencies, the most recent hotfix or feature that contains these files may also contain additional files.

How to Install the Hotfix
To upgrade to this version, you must remove the existing installation. However, you can keep the existing SMS objects that you used during that existing deployment. In this case Setup reuses these objects, and much of the setup process involves copying over the newer files. When Setup has completed, review the settings for the package, program, collections and advertisements to make sure that they are appropriate for your environment. The settings that Setup used are reasonable default settings, but they may not suit all environments. This is especially true if a previous deployment used customized settings.

To install the hotfix, run the appropriate SecurityPatch setup program, SecurityPatch_ .exe (where  is the three-digit language code).

Note: Setup detects and removes previous installations of the Security Patch. Permit Setup to remove and re-create the collections, packages, programs, and advertisements that a previous install of the Security Patch created. If you have customized any of these objects, you must re-apply those customizations to the newly created objects.



MORE INFORMATION
The Security Patch originally used the Microsoft Network Security Hotfix Checker (HFNetChk) version 3.32 as its security scan tool. Now it uses MBSA. For additional information about MBSA, click the following article number to view the article in the Microsoft Knowledge Base:

320454 Microsoft Baseline Security Analyzer (MBSA) Version 1.1 Is Available

Keywords: KB814906

Technology: kbSMS200 kbSMSSearch

-

[mailto:TECHNET@MICROSOFT.COM Send feedback to Microsoft]

© 2004 Microsoft Corporation. All rights reserved.