security updates

[Reed Wiedower]

I'm running a win2k sp4 box and have had trouble recently installing two
separate security patches:

- Security Update for Windows 2000 (KB885836)
- Security Update for Windows 2000 (KB885835)

Each time I've attempted to apply them, the installation has simply failed
without any descriptive error messages at all save for a note in the system
log. Any ideas?

end of line,

Reed Wiedower

 

[Jason Tan]

Hi Reed,

Thanks for posting!

I understand that two security update patches failed to install on the
machine based on Windows 2000 SP4.

Before we go further, please help me to confirm some information.

Step 1: Please help me know if you use Automatic Updates via Windows Update
website to download and install the Security Update. How does the
problematic machine access internet? Does any other computer experience
this issue? Please help me take an error screen shot.

Taking a screen shot:
===================
a. Press the Pr Scrn key once on the keyboard when the error message
appears.
b. Click Start, go to Run, enter MSPAINT in the open dialog box, and then
Click OK.
c. Use Ctrl + V to paste the screenshot to the canvas.
d. From the File menu, go to Save and save it as a JPG file.
e. Send the JPG file to me as an attachment.

Step 2: Can the issue be reproduced in Clean Boot environment?
=================================================

1. Click the "Start" and select "Run".
2. Type msconfig in the open box, and then click "OK".
3. On the "Services" tab, click to choose "Hide All Microsoft Services" and
click to choose Disable All.
4. On the Startup page, click Disable All.
5. Click "OK" to reboot your computer.
6. When you see the message, choose "Don't show this message or launch the
System Configuration Utility when Windows starts" and click OK.

Note: A Clean Boot will allow us to isolate any device drivers or programs
that are loading at startup that may be causing a conflict.

Step 3: Can you download the Security Update from Website and install them
locally?

- Security Update for Windows 2000 (KB885836)
http://www.microsoft.com/downloads/details.aspx?FamilyID=C4B9D079-13F0-4E1E-
834B-D2077838B9E1&displaylang=en

- Security Update for Windows 2000 (KB885835)
http://www.microsoft.com/downloads/details.aspx?FamilyID=EFDEA122-DDA4-40B8-
A7AF-9DDCC3870C38&displaylang=en

If there is anything that is unclear, please feel free to let me know.

Thanks & Regards,

Jason Tan

Microsoft Online Partner Support
Get Secure! - www.microsoft.com/security

=====================================================

When responding to posts, please "Reply to Group" via your newsreader so
that others may learn and benefit from your issue.

=====================================================
This posting is provided "AS IS" with no warranties, and confers no rights.

 

[Jason Tan]

Hi Reed,

Thanks for reply soon!

Based on the problem description, we need to check group policy to ensure
users have sufficient right.

Step 1: Check User Rights Assignment
======================================

1. Logging on system as administrator account.

2. Click Start and click Run, type gpedit.msc in the open box and hit OK.

3. In the left pane, expand [Computer Configuration]\[Windows
Settings]\[Security Settings]\[Local Policies] and highlight [User Rights
Assignment].

4. In the right pane, double click the item [Backup files and directories].

5. Click Add, drop down the box in top after "Look in" and select your
computer name, and add the following users. (where Computer_name refers to
your actual computer name, your_username refers to your actual log in name)

Computer_name\Administrator (local administrator)
Computer_name\your_username (your log in name, such as ACTTODAY\mhelton)
Administrators (administrators group, if you find more than one
administrators in the list, please add them all)
Everyone
System

6. Repeat the similar steps for the following user rights
- Restore files and directory
- Manage auditing and security logs
- Backup files and directories
- Take ownership of files and folders.

7. Make sure the "Effective Policy Settings" is checked actually instead of
grayed out with no checks.

8. Exist policy editor and ensue you log on computer_name (this computer)
as Administrator. Try to install the update again.

If you found although you have checked the box for "Local Policy Settings",
the "Effective Policy Settings" is still grayed out with no checks, this
indicates the current Effective Policy settings could have been inherited
from policies within the domain. If this is the case, those domain policies
have to be changed. For your comparison, I am sending you my "Effective
Policy Settings" screenshot. You can see the "Effective Policy Settings"
boxes are checked.

Step 2: Please create a new account with administrator permissions and test
the issue with the new account.

Step 3: If the issue persists, please help me to collect MPS_Setup report.
========================================================
Here are the steps:

Download the MPSRPT_SETUPPerf.EXE from the following link and then run this
tool to gather some information from the problematic computer:

http://download.microsoft.com/download/b/b/1/bb139fcb-4aac-4fe5-a579-30b0bd9
15706/MPSRPT_SETUPPerf.EXE

To run this tool:

1. Double-click on the MPSRPT_SETUPPerf.EXE file.

I understand this process may take some time, however it will not have a
negative effect on the performance.

2. A CAB file will be generated in the
%systemroot%\MPSReports\Setup\Reports\Cab directory called
%COMPUTERNAME%_MPSReports.CAB. The CAB file will contain the reports
generated by the MPS Reporting Tool.

3. Send the CAB file to me as an attachment.

Note: please send the attachment to (e-mail address removed)

If there is anything that is unclear, please feel free to let me know.
Thanks for your time!

Thanks & Regards,

Jason Tan

Microsoft Online Partner Support
Get Secure! - www.microsoft.com/security

=====================================================

When responding to posts, please "Reply to Group" via your newsreader so
that others may learn and benefit from your issue.

=====================================================
This posting is provided "AS IS" with no warranties, and confers no rights.

 

[Guest]

Hi Reed,
Try to install the updates in the safe mode. Also, check for errors in the
windowsupdate.log. You can also check out the following:
http://support.microsoft.com/default.aspx?scid=kb;en-us;822798

Lukesh

 

[Reed Wiedower]

The user rights assignment didn't work...so I went and performed the cab
file creation, sending that to your address over e-mail.

What's up next?

end of line,

Reed Wiedower

Hi Reed,

Thanks for reply soon!

Based on the problem description, we need to check group policy to ensure
users have sufficient right.

Step 1: Check User Rights Assignment
======================================

1. Logging on system as administrator account.

2. Click Start and click Run, type gpedit.msc in the open box and hit OK.

3. In the left pane, expand [Computer Configuration]\[Windows
Settings]\[Security Settings]\[Local Policies] and highlight [User Rights
Assignment].

4. In the right pane, double click the item [Backup files and
directories].

5. Click Add, drop down the box in top after "Look in" and select your
computer name, and add the following users. (where Computer_name refers to
your actual computer name, your_username refers to your actual log in
name)

Computer_name\Administrator (local administrator)
Computer_name\your_username (your log in name, such as ACTTODAY\mhelton)
Administrators (administrators group, if you find more than one
administrators in the list, please add them all)
Everyone
System

6. Repeat the similar steps for the following user rights
- Restore files and directory
- Manage auditing and security logs
- Backup files and directories
- Take ownership of files and folders.

7. Make sure the "Effective Policy Settings" is checked actually instead
of
grayed out with no checks.

8. Exist policy editor and ensue you log on computer_name (this computer)
as Administrator. Try to install the update again.

If you found although you have checked the box for "Local Policy
Settings",
the "Effective Policy Settings" is still grayed out with no checks, this
indicates the current Effective Policy settings could have been inherited
from policies within the domain. If this is the case, those domain
policies
have to be changed. For your comparison, I am sending you my "Effective
Policy Settings" screenshot. You can see the "Effective Policy Settings"
boxes are checked.

Step 2: Please create a new account with administrator permissions and
test
the issue with the new account.

Step 3: If the issue persists, please help me to collect MPS_Setup report.
========================================================
Here are the steps:

Download the MPSRPT_SETUPPerf.EXE from the following link and then run
this
tool to gather some information from the problematic computer:

http://download.microsoft.com/download/b/b/1/bb139fcb-4aac-4fe5-a579-30b0bd9
15706/MPSRPT_SETUPPerf.EXE

To run this tool:

1. Double-click on the MPSRPT_SETUPPerf.EXE file.

I understand this process may take some time, however it will not have a
negative effect on the performance.

2. A CAB file will be generated in the
%systemroot%\MPSReports\Setup\Reports\Cab directory called
%COMPUTERNAME%_MPSReports.CAB. The CAB file will contain the reports
generated by the MPS Reporting Tool.

3. Send the CAB file to me as an attachment.

Note: please send the attachment to (e-mail address removed)

If there is anything that is unclear, please feel free to let me know.
Thanks for your time!

Thanks & Regards,

Jason Tan

Microsoft Online Partner Support
Get Secure! - www.microsoft.com/security

=====================================================

When responding to posts, please "Reply to Group" via your newsreader so
that others may learn and benefit from your issue.

=====================================================
This posting is provided "AS IS" with no warranties, and confers no
rights.

 

[Jason Tan]

Hi Reed,

Thanks for reply!

Based on the current situation, I would like to provide you with the
following suggestion for your reference:

1. Please refer the following article:

You cannot install some updates or programs
http://support.microsoft.com/default.aspx?scid=kb;en-us;822798

2. Verify System and administrator have full control to the full path of
windows\inf.

3. I would like to suggest renaming oem0.pnf located in
%systemdrive%\WINDOWS\INF

In addition, for unknown reason, I have not received the MPS_Setup report
so far. Please send it again if the issue still persists. Thanks for your
time.

If there is anything that is unclear, please feel free to let me know.

Thanks & Regards,

Jason Tan

Microsoft Online Partner Support
Get Secure! - www.microsoft.com/security

=====================================================

When responding to posts, please "Reply to Group" via your newsreader so
that others may learn and benefit from your issue.

=====================================================
This posting is provided "AS IS" with no warranties, and confers no rights.

 

[Reed Wiedower]

1. The above article refers to a cryptographic services error...that's not
what's happening herer.

2. Both system and administrator have full rights to the \inf subfolder.

3. I've renamed oem0.pnf and attempted to run the installers. It still
failed.

I just re-emailed you the MPS_Setup reports...I assume the e-mail address
you listed earlier is correct.

end of line,

Reed

 

[Jason Tan]

Hi Reed,

Thanks for your time!

Based on my further research, some third party application could interrupt
the installation of the update. I would double confirm if you can install
the update file locally in Safe Mode environment.

=========================================
Safe Mode

1. Restart your computer and start pressing the F8 key on your keyboard. On
a computer that is configured for booting to multiple operating systems,
you can press the F8 key when you see the Boot Menu.

2. In "Windows Advanced Option Menu", use the arrow keys to select Safe
Mode, and then press ENTER.

3. If you are running other operating systems on the computer, click
Microsoft Windows on the list that is displayed and then press ENTER.

I am looking for your response. If there is anything that is unclear,
please feel free to let me know.

Thanks & Regards,

Jason Tan

Microsoft Online Partner Support
Get Secure! - www.microsoft.com/security

=====================================================

When responding to posts, please "Reply to Group" via your newsreader so
that others may learn and benefit from your issue.

=====================================================
This posting is provided "AS IS" with no warranties, and confers no rights.

 

[Reed Wiedower]

I attempted to install the files locally in Safe Mode. They all failed with
the same errors. Did you get the cab file? Did it show anything out of the
ordinary?

end of line,

Reed

 

[Jason Tan]

Hi Reed,

Thanks for your prompt reply!

I have received the MPS_Setup report over E-mail. Unfortunately, I cannot
find anything helpful to the issue. Now I would like to provide you with
two methods for your reference:

As a workaround, I suggest you attempt to rename the
c:\winnt\system32\dllcache\wordpad.exe and install the update file again.

Note: It would not affect the use of Wordpad.

Hope the method helps. If there is anything that is unclear, please feel
free to let me know.

Thanks & Regards,

Jason Tan

Microsoft Online Partner Support
Get Secure! - www.microsoft.com/security

=====================================================

When responding to posts, please "Reply to Group" via your newsreader so
that others may learn and benefit from your issue.

=====================================================
This posting is provided "AS IS" with no warranties, and confers no rights.

 

[Reed Wiedower]

I actually tried this solution first....each time I attempt to rename
wordpad.exe in the dllcache folder it says that the file is use. I noticed
that the entire dllcache folder is compressed...is this normal?

end of line,

Reed Wiedower

 

[Jason Tan]

Hi Reed,

Thanks for reply soon!

Based on current situation, I would suggest we delete the dllcache folder
directly in Recovery Console by Del command if it cannot be deleted in
normal mode. Please backup the dllcache folder for security purpose.
Actually, this folder is used only for backup. Additionally, I think the
status of the dllcache folder on your side is abnormal. I noticed, by
default, the dllcache folder is not compressed. It is a hide folder
including many DLL and EXE files.

318752 How To Install and Use the Recovery Console in Windows 2000
http://support.microsoft.com/?id=318752

293314 How to use the Windows 2000 Recovery Console on a computer with
Windows
http://support.microsoft.com/?id=293314

240831 HOW TO: Copy Files from Recovery Console to Removable Media
http://support.microsoft.com/?id=240831

229716 Description of the Windows 2000 Recovery Console
http://support.microsoft.com/?id=229716

If there is anything that is unclear, please feel free to let me know.

Thanks & Regards,

Jason Tan

Microsoft Online Partner Support
Get Secure! - www.microsoft.com/security

=====================================================

When responding to posts, please "Reply to Group" via your newsreader so
that others may learn and benefit from your issue.

=====================================================
This posting is provided "AS IS" with no warranties, and confers no rights.

 

[Reed Wiedower]

That did the trick. I renamed the dllcache folder, booted back up, and
installed the new patches with no problem. Thanks for your help!

end of line,

Reed