Microsoft KB Archive/893123

From BetaArchive Wiki
Knowledge Base


You cannot shut down the system after you install certain security updates in Server Appliance Kit (SAK) version 2.0

Article ID: 893123

Article Last Modified on 2/8/2005



APPLIES TO

  • Microsoft Server Appliance Kit 2.0



SYMPTOMS

You cannot shut down the system after you install certain security updates in Microsoft Server Appliance Kit (SAK) version 2.0. This problem occurs after you install any one of the following:

  • MS03-045
  • MS04-012
  • Newer security updates


CAUSE

The security updates modify the system shutdown behavior.

Only the following two Microsoft Windows APIs can shut down the system or restart the system:

  • ExitWindowsEx


This API requires an interactive user.

  • InitiateSystemShutdownEx


This API works with built-in accounts. However, this API requires that the user physically turn off the system.

Microsoft Windows 2000 did not always enforce the interactive user requirement of the ExitWindowsEx API.

For additional information about this issue, click the following article number to view the article in the Microsoft Knowledge Base:

824141 MS03-045: Buffer overrun in the ListBox and in the ComboBox control could allow code execution


Security update MS03-045 also causes the ExitWindowsEx API to enforce the interactive user requirement. Enforcing the interactive user requirement causes inconsistencies in the following:

  • Scheduled restarts
  • Immediate restarts
  • Software update restarts

The hotfix that is mentioned in Microsoft Knowledge Base article 835965 addresses inconsistencies that are corrected by changing to the InitiateSystemShutdownEx API. However, the API change alters the shutdown behavior of the Windows Powered Network Attached Storage (NAS) server. This now prevents you from using the WebUI to schedule a remote shutdown or a remote restart. You must now use a Terminal Services session to remotely shut down the system.

WORKAROUND

Use a Terminal Services session to remotely logon so that you can remotely shut down the system.

Keywords: kbtshoot kbprb KB893123