Microsoft KB Archive/899950

From BetaArchive Wiki

Article ID: 899950

Article Last Modified on 7/13/2005



APPLIES TO

  • Microsoft Systems Management Server 2003
  • Microsoft Systems Management Server 2.0 Standard Edition
  • Microsoft Internet Explorer 6.0, when used with:
    • Microsoft Windows XP Home Edition
    • Microsoft Windows XP Professional
    • Microsoft Windows 2000 Server




SUMMARY

Microsoft Systems Management Server (SMS) deployment packages are available that include security update MS05-025. Security update MS05-025 applies to Microsoft Internet Explorer 6 Service Pack 1 (SP1) when it is used with Microsoft Windows 2000 or with Microsoft Windows XP.

The SMS deployment package also includes a script that enables the SMS 2.0 Software Update Services (SUS) Feature Pack and the SMS 2003 Software Update feature to deploy the appropriate security update to Windows 2000-based computers and to Windows XP-based computers. This script does not install the security update on Microsoft Windows NT 4.0-based computers. Security update MS05-025 is not compatible with Windows NT 4.0.

You can download the SMS deployment package from the Microsoft Download Center. You must download a language-specific version of the SMS deployment package if you authorize security update MS05-025 for languages other than English, French, German, or Japanese. To use the SMS deployment package, specify the /q:a /r:n command-line options in the Distribute Software Updates Wizard.


SYMPTOMS

SMS uses the Microsoft Baseline Security Analyzer (MBSA) scanning tool. MBSA can detect computers that require the security update that is documented in Microsoft security bulletin MS05-025. However, MBSA cannot provide SMS with information about supported operating systems for this update. For example, MBSA indicates that this update is compatible with Windows NT 4.0, even though this update is not compatible with Windows NT 4.0. The SMS deployment package is designed to prevent installation of this incompatible update on Windows NT 4.0. If you install security update MS05-025 on Windows NT 4.0-based computers without using the specific SMS deployment package, installation failures will occur on the client computers.

For more information about security update MS05-025, visit the following Microsoft Web site:

RESOLUTION

To resolve this problem, Microsoft has released an SMS deployment package to the Microsoft Download Center. The SMS deployment package includes the following items:

  • The IE6.0sp1-KB883939-Windows-2000-XP-x86-ENU.exe file
  • A script that detects the operating system on SMS client computers and that prevents installation on Windows NT 4.0

After security update MS05-025 is approved in the Distribute Software Updates Wizard, SMS will download the SMS deployment package instead of the specified security update that is documented in Microsoft security bulletin MS05-025.

Important If you authorize security update MS05-025 for languages other than English, French, German, or Japanese, you must manually download the SMS deployment package for the appropriate language. You must also manually download the SMS deployment packages for the appropriate languages if the following conditions are true:

  • You are using the English version of the security catalog.
  • You are scanning French, German, or Japanese client computers.

Download information

The following file is available for download from the Microsoft Download Center:

English (U.S.):

Arabic:

Portuguese (Brazil):

Chinese (Traditional):

Chinese (Simplified):

Czech:

Danish:

German:

Greek:

Spanish:

Finnish:

French:

Hebrew:

Hungarian:

Italian:

Japanese:

Japanese NEC:

Korean:

Dutch:

Norwegian (Bokmål):

Polish:

Portuguese:

Russian:

Swedish:

Turkish:

Release Date: June 14, 2005

For more information about how to download Microsoft Support files, click the following article number to view the article in the Microsoft Knowledge Base:

119591 How to obtain Microsoft support files from online services


Microsoft scanned this file for viruses. Microsoft used the most current virus-detection software that was available on the date that the file was posted. The file is stored on security-enhanced servers that help prevent any unauthorized changes to the file.

Prerequisites

The SMS deployment package requires the SMS 2.0 SUS Feature Pack or the SMS 2003 Software Update feature.

Deployment information

To use the SMS deployment package, type the /q:a /r:n command-line options in the Distribute Software Updates Wizard. The SMS deployment package contains a configuration file that has the actual command-line options that are used for the security update. This silently installs the security update without restarting client computers. These command-line options are part of the script logic in the SMS deployment package. These command-line options cannot be changed.

MORE INFORMATION

Frequently asked questions

Q1: What is the difference between the security update that is included in the SMS deployment package and the security update that is documented in Microsoft security bulletin MS05-025?

A1: There is no difference between the security update that is included in the SMS deployment package and the security update that is documented in Microsoft security bulletin MS05-025. SMS wraps the actual security update MS05-025 by using the SMS deployment package. However, the update that is run on the client computer is the same update that is available for download from Microsoft security bulletin MS05-025.

Q2: Does the SMS deployment package support security update MS05-025 for other versions of Internet Explorer?

A2: No. The SMS deployment package contains only a security update for Internet Explorer 6 SP1 when it is used with Windows 2000 or with Windows XP. Security update MS05-025 for other versions of Internet Explorer can be detected and deployed by using SMS. There is no requirement for a separate SMS deployment package.

Q3: I have Internet Explorer 6 SP1 running in a homogenous environment with only one type of operating system. For example, my SMS client computers only run Windows 2000. Must I use the SMS deployment package, or can I deploy the security update that is documented in Microsoft security bulletin MS05-025?

A3: You can use the SMS deployment package, or you can manually download and deploy the specific operating system update that is documented in Microsoft security bulletin MS05-025. You can use the Distribute Software Update Wizard to import the actual security update MS05-025 for deployment.


Additional query words: kbtocon kbexpertiseinter kbexpertiseadvanced atdownload

Keywords: kbtshoot kbsmspackage kbsmsadmin kbsmsdeploy kbsecurity kbprb KB899950