Article ID: 217004
Article Last Modified on 11/1/2006
APPLIES TO
- Microsoft BackOffice Server 4.0
This article was previously published under Q217004
SYMPTOMS
When you use BackOffice Server version 4.0 to install Microsoft SQL Server, Microsoft Exchange Server, or Microsoft Transaction Server, you are required to provide a user account and password during the installation of each product. This information is stored in the Reboot.ini file to automate part of the installation process. However, upon completion, the installation tool does not delete the Reboot.ini file and the file can then be accessed if:
- A user has security permission to log on to the server locally.
- The folder containing the Reboot.ini file is shared and a user has security permissions to that shared folder.
RESOLUTION
To prevent the Reboot.ini file from being read by an unauthorized user:
- At a command prompt, change to the Program Files\Microsoft BackOffice folder on the partition where the BackOffice server was installed.
- Type del reboot.ini, and then press ENTER.
NOTE: It will not be necessary to repeat this process at any future time unless the BackOffice installation tool is used again.
MORE INFORMATION
For more information on this issue, please see the following Microsoft Security Bulletin at:
For additional security related information about Microsoft products, visit the Microsoft Security Web site at:
Keywords: kbinterop kbprb KB217004
