Knowledge Base

Systems Management Server deployment packages are available for MS04-038 security updates for Internet Explorer 6 SP1

Article ID: 887437

Article Last Modified on 2/6/2007

APPLIES TO

Microsoft Systems Management Server 2.0 Standard Edition
Microsoft Systems Management Server 2003
Microsoft Internet Explorer 6.0 Service Pack 1, when used with:
- Microsoft Windows XP Professional
- Microsoft Windows 2000 Standard Edition
- Microsoft Windows NT 4.0 Service Pack 6

SUMMARY

Microsoft Systems Management Server (SMS) deployment packages are available that include the MS04-038 security update for Microsoft Internet Explorer 6 SP1 for Microsoft Windows NT 4.0 and the MS04-038 security update for Internet Explorer 6 SP1 for Microsoft Windows 2000 and Windows XP. The SMS deployment package also includes a script to enable the SMS 2.0 Software Update Services (SUS) Feature Pack or SMS 2003 Software Update feature to deploy the appropriate security updates to Windows NT 4.0, Windows 2000, and Windows XP-based computers. You can download the SMS deployment package from the Microsoft Download Center. You must download a language-specific version of the deployment package if you authorize the MS04-038 security updates for languages other than English, French, German, or Japanese. To use the SMS deployment package, specify /q:a /r:n for the command-line switches in the Distribute Software Update Wizard.

SYMPTOMS

Microsoft Baseline Security Analyzer (MBSA) is the scanning tool that is used by SMS. MBSA can detect computers that require the security updates documented in Microsoft security bulletin MS04-038. However, MBSA cannot provide SMS with the information needed to download and deploy the appropriate MS04-038 security update packages for Internet Explorer 6 SP1 for Windows NT 4.0 and Internet Explorer 6 SP1 for Windows 2000 and Windows XP.

Note The MS04-038 security update package for Windows NT 4.0 is named IE6.0sp1-KB834707-Windows-NT4sp6a-98-ME-x86-ENU.exe. The MS04-038 security update package for Windows 2000 and Windows XP is named IE6.0sp1-KB834707-Windows-2000-XP-x86-ENU.exe.

For additional information about the MS04-038 security updates, visit the following Microsoft Web site: http://www.microsoft.com/technet/security/bulletin/MS04-038.mspx

RESOLUTION

To resolve this problem, we have released an SMS deployment package to the Microsoft Download Center. The SMS deployment package includes the following:

IE6.0sp1-KB834707-Windows-2000-XP-x86-ENU.exe
IE6.0sp1-KB834707-Windows-NT4sp6a-98-ME-x86-ENU.exe
A script to detect the operating system for SMS client computers and to install the appropriate security update.

After the MS04-038 security update is approved in the Distribute Software Update Wizard (DSUW), SMS will download the SMS deployment package instead of the specified security updates that are documented in Microsoft security bulletin MS04-038.

Important If you authorize the MS04-038 security update for languages other than English, French, German, or Japanese, you must manually download the SMS deployment package for the appropriate language. Additionally, if both the following conditions are true, you also must manually download the SMS deployment packages for the appropriate languages:

You are using the English version of the security catalog.
You are scanning French, German, or Japanese client computers.

Download information

119591 How to obtain Microsoft support files from online services

Microsoft scanned this file for viruses. Microsoft used the most current virus-detection software that was available on the date that the file was posted. The file is stored on security-enhanced servers that help to prevent any unauthorized changes to the file.

Prerequisites

The SMS deployment package requires the SMS 2.0 Software Update Services (SUS) Feature Pack or the SMS 2003 Software Update feature.

Usage information

To use the SMS deployment package, specify the following command line in DSUW:

IE6.0sp1-KB834707-SMS-Deploy-KB887437-x86-ENU.exe /q:a /r:n

The SMS deployment package uses the recommended command-line switches for SMS deployment to install the security updates silently without restarting client computers. For the Windows 2000 and Windows XP security update, the /quiet /norestart command-line switches are used. For the Windows NT 4.0 security update, the /q:a /r:n command-line switches are used. These command-line switches are part of the script logic in the SMS deployment package. These command-line switches cannot be changed.

MORE INFORMATION

Frequently asked questions

What is the difference between the security updates that are included in the SMS deployment package and the security updates that are documented in Microsoft security bulletin MS04-038?

There is no difference in the security updates in the SMS deployment package and the security updates that are documented in Microsoft security bulletin MS04-038.

I received a hotfix from Microsoft or from my support provider after the release of Microsoft security bulletin MS04-004. Is that hotfix included in the SMS deployment package?

No. The SMS deployment package includes the same security updates that are documented in Microsoft security bulletin MS04-038. For all operating systems besides Microsoft Windows Server 2003, Microsoft Windows 64-Bit Edition Version 2003, or Microsoft Windows XP Service Pack 2, Internet Explorer hotfixes that were created after MS04-004 or MS04-025 are not included in the MS04-038 security updates. Therefore, hotfixes that were released after MS04-004 may be removed when you install the MS04-038 security updates. An update rollup is available that contains Internet Explorer hotfixes that were released after MS04-004. The update rollup also includes all the security fixes that are included in the MS04-038 security updates. For additional information about the update rollup, click the following article number to view the article in the Microsoft Knowledge Base:

873377 An update rollup is available for Internet Explorer versions 5.x and 6.0

Note Microsoft does not support SMS deployment of the 8733377 update rollup. There is no SMS deployment package for the 8733377 update rollup. The 8733377 update rollup is available for download from the Microsoft Download Center only.

Does the SMS deployment package support MS04-038 security updates for other versions of Internet Explorer?

No. The problem that is described in this article occurs only with the MS04-038 security updates for Internet Explorer 6 SP1 for Windows NT 4.0, for Windows 2000, and for Windows XP. The MS04-038 security updates for other versions of Internet Explorer can be detected and deployed by using SMS. There is no need for a separate SMS deployment package for other MS04-038 security updates.

I have Internet Explorer 6 SP1 running in a homogenous environment with only one type of operating system. For example, my SMS client computers run only Windows 2000. Do I have to use the SMS deployment package? Or can I deploy the security updates that are documented in Microsoft security bulletin MS04-038?

Either you can use the SMS deployment package, or you can manually download and deploy the specific operating system update that is documented in the MS04-038 security bulletin.

Additional query words: security patch patches

Keywords: kbsecurity atdownload KB887437

Microsoft KB Archive/887437

Contents