MS04-028 Software Update available 2K3 1

[Karactur]

Has anyone been able to successfully get SMS2K3 to see that MS04-028 is available and needed in their environment. I cannot get it to create a template system to allow the authorization. I know that it has the latest update xml files, (I was verified that last night). I have run the process to create a template and collected hardware inv.

My server still does not have the update available for deployment. Have I missed something?

 

[tbrennans]

I'm seeing 100's of bad things from an email list I belong to on this. :-| to say the least different forums.

one solution is

http://support.microsoft.com/?id=885885

I'd list what I'm seeing BUT like I said there are so many I wouldnt know where to start.

Probably the best sms email list on the internet can be joined at. A lot of MS sms guys and sms MVP's there along with a many of very talented sms admins. This list averages around 100 emails a day and its advanced subject matter.

http://listleague.com

go to view hosts by interest, select microsoft management, obvious from there!

Anyway once you join the list you can go through the archives on the web page

 

[Jpoandl]

MS04-028 is not detectable by SMS SUS. In fact, the patch can not really be detected by MBSA 1.2 or 1.2.1. (When MBSA is run, it will tell you that MBSA can not confirm that the patch is installed.)

So, you will have to either create a special package to detect and install the patch manually. or you will have to modify your SMS environment to detect it.

This MS article is a running article that tells you whether MBSA can detect the patch:

http://support.microsoft.com/?kbid=306460

This article shows your how to patch systems that are not detectable in SUS:

http://support.microsoft.com/?kbid=867832

-later

Joseph L. Poandl
MCSE 2003

If your company is in need of experts to examine technical problems/solutions, please check out

http://www.NJCOMPUTERNETWORKS.com

(Sales@njcomputernetworks.com)

 

[tbrennans]

hmmm I thought it was seen by office scan in sms sus?? no??

 

[tbrennans]

What I'm hearing is MS said to a guy that called pss that 6-8 of the "variable" patches that make up 028 will install from sms sus "office scan part" BUT thats out of 16 possible variables :-|

 

[tbrennans]

anyway with all this said the AV companies are already releasing dat files that prevent anything from happening on this exploit. So the patch (as difficult as they made it to install) seems trivial if you have up to date AV protection.

Example:

http://vil.nai.com/vil/content/v_128461.htm

 

[Karactur]

Microsoft has released a scan agent for this issue. It works like a charm.

http://www.microsoft.com/downloads/...85-9521-4B63-A338-0B3E2DCBF2BB&displaylang=en