Today's patches killed TCP/IP

[Blake]

I have a server farm of about 50 servers (2k and 2k3). On 2 of my 2K
servers, todays updates killed TCP/IP (I am assuming it is Security Bulletin
MS05-019)

Both of these servers have QLogic HBAs installed. I was able to get one
back up and running by uninstalling TCP/IP, uninstalling MS05-019, then
re-installing TCP/IP. One is still dead.

I am afraid of installing this patch on my other servers with HBAs for fear
of killing them.

Anyone?

 

[Dave Patrick]

Support for security updates is always free. Call them at 1-866-PCSAFETY

http://www.microsoft.com/technet/security/bulletin/MS05-019.mspx

--
Regards,

Dave Patrick ....Please no email replies - reply in newsgroup.
Microsoft Certified Professional
Microsoft MVP [Windows]
http://www.microsoft.com/protect

:
|I have a server farm of about 50 servers (2k and 2k3). On 2 of my 2K
| servers, todays updates killed TCP/IP (I am assuming it is Security
Bulletin
| MS05-019)
|
| Both of these servers have QLogic HBAs installed. I was able to get one
| back up and running by uninstalling TCP/IP, uninstalling MS05-019, then
| re-installing TCP/IP. One is still dead.
|
| I am afraid of installing this patch on my other servers with HBAs for
fear
| of killing them.
|
| Anyone?
|
|

 

[Dutch User]

Small detail:
the majority of Windows licences are sold outside the US-Canada.

I bought one of those licences overhere in Belgium,
at a much higher price than a US customer would pay.

The last time I needed support for a security update
I spent +30 minutes on a regular Belgian toll-line to Brussels.

MS simply does not offer toll-free support lines
for patches outside the USA/CAN

I even had some trouble convincing the Dutch speaking MS operator that I did
not
need a credit card to get help with the security patch that
made my XP unbootable.

 

[Blake]

Their support isn't free for server OSes.

We called today and their first question was ' how would you like to pay for
this call?'

 

[Dave Patrick]

It makes no difference. Did you mention the article and purpose of the call?

--
Regards,

Dave Patrick ....Please no email replies - reply in newsgroup.
Microsoft Certified Professional
Microsoft MVP [Windows]
http://www.microsoft.com/protect

:
| Their support isn't free for server OSes.
|
| We called today and their first question was ' how would you like to pay
for
| this call?'
|
|

 

[Shenan Stanley]

I have a server farm of about 50 servers (2k and 2k3). On 2 of my 2K
servers, todays updates killed TCP/IP (I am assuming it is Security
Bulletin MS05-019)

Both of these servers have QLogic HBAs installed. I was able to get
one back up and running by uninstalling TCP/IP, uninstalling
MS05-019, then re-installing TCP/IP. One is still dead.

I am afraid of installing this patch on my other servers with HBAs
for fear of killing them.

Did you read this article?
http://support.microsoft.com/kb/890345/

 

[George Hester]

The way it normally works in this regard is you pay first and if the issue is determined to be from a security update then they re-imburse. That doesn't happen very often.

 

[Richard G. Harper]

Actually, no. Calls to the security number are free, always have been and
always will be. If you call the regular support lines then what you suggest
is what happens.

--
Richard G. Harper [MVP Shell/User] (e-mail address removed)
* In fond memory ... Alex, you shall be sorely missed
* http://www.aumha.org/alex.htm



The way it normally works in this regard is you pay first and if the issue
is determined to be from a security update then they re-imburse. That
doesn't happen very often.

 

[George Hester]

The calls are free they always are. The support costs $

--
George Hester
_________________________________

Actually, no. Calls to the security number are free, always have been and
always will be. If you call the regular support lines then what you suggest
is what happens.

--
Richard G. Harper [MVP Shell/User] (e-mail address removed)
* In fond memory ... Alex, you shall be sorely missed
* http://www.aumha.org/alex.htm



The way it normally works in this regard is you pay first and if the issue
is determined to be from a security update then they re-imburse. That
doesn't happen very often.

--
George Hester
_________________________________

It makes no difference. Did you mention the article and purpose of the
call?

--
Regards,

Dave Patrick ....Please no email replies - reply in newsgroup.
Microsoft Certified Professional
Microsoft MVP [Windows]
http://www.microsoft.com/protect

:
| Their support isn't free for server OSes.
|
| We called today and their first question was ' how would you like to pay
for
| this call?'
|
|

 

[Richard G. Harper]

Sorry, you're still wrong.

--
Richard G. Harper [MVP Shell/User] (e-mail address removed)
* In fond memory ... Alex, you shall be sorely missed
* http://www.aumha.org/alex.htm



The calls are free they always are. The support costs $

--
George Hester
_________________________________

Actually, no. Calls to the security number are free, always have been and
always will be. If you call the regular support lines then what you
suggest
is what happens.

--
Richard G. Harper [MVP Shell/User] (e-mail address removed)
* In fond memory ... Alex, you shall be sorely missed
* http://www.aumha.org/alex.htm



The way it normally works in this regard is you pay first and if the issue
is determined to be from a security update then they re-imburse. That
doesn't happen very often.

--
George Hester
_________________________________

It makes no difference. Did you mention the article and purpose of the
call?

--
Regards,

Dave Patrick ....Please no email replies - reply in newsgroup.
Microsoft Certified Professional
Microsoft MVP [Windows]
http://www.microsoft.com/protect

:
| Their support isn't free for server OSes.
|
| We called today and their first question was ' how would you like to
pay
for
| this call?'
|
|

 

[Dave Patrick]

Ditto el wrongo.

--
Regards,

Dave Patrick ....Please no email replies - reply in newsgroup.
Microsoft Certified Professional
Microsoft MVP [Windows]
http://www.microsoft.com/protect

:
The calls are free they always are. The support costs $

 

[George Hester]

Microsoft has 1-800 numbers many of them. I don't think the op can access them though. So although you may think I am wrong believe it when push comes to shove what I said will happen. Microsoft has first to determine the issue is a result of a security fix and when they do that the Credit Card will be reimbursed. But note that can take months.

--
George Hester
_________________________________
The calls are free they always are. The support costs $

--
George Hester
_________________________________

Actually, no. Calls to the security number are free, always have been and
always will be. If you call the regular support lines then what you suggest
is what happens.

--
Richard G. Harper [MVP Shell/User] (e-mail address removed)
* In fond memory ... Alex, you shall be sorely missed
* http://www.aumha.org/alex.htm



The way it normally works in this regard is you pay first and if the issue
is determined to be from a security update then they re-imburse. That
doesn't happen very often.

--
George Hester
_________________________________

It makes no difference. Did you mention the article and purpose of the
call?

--
Regards,

Dave Patrick ....Please no email replies - reply in newsgroup.
Microsoft Certified Professional
Microsoft MVP [Windows]
http://www.microsoft.com/protect

:
| Their support isn't free for server OSes.
|
| We called today and their first question was ' how would you like to pay
for
| this call?'
|
|

 

[Dave Patrick]

Quoted from any security bulletin;

Support:
Customers in the U.S. and Canada can receive technical support from
Microsoft Product Support Services at 1-866-PCSAFETY. There is no charge for
support calls that are associated with security updates.

International customers can receive support from their local Microsoft
subsidiaries. There is no charge for support that is associated with
security updates. For more information about how to contact Microsoft for
support issues, visit the International Support Web site.

--
Regards,

Dave

Dave Patrick ....Please no email replies - reply in newsgroup.
Microsoft Certified Professional
Microsoft MVP [Windows]
http://www.microsoft.com/protect

:
Microsoft has 1-800 numbers many of them. I don't think the op can access
them though. So although you may think I am wrong believe it when push
comes to shove what I said will happen. Microsoft has first to determine
the issue is a result of a security fix and when they do that the Credit
Card will be reimbursed. But note that can take months.

 

[George Hester]

I understand that. But Microsoft has to first determine the issue WAS from a security update. If it wasn't do you think THEN they are going to ask you to pay for the support that was given? I doubt it. Microsoft charges first then re-imburses later. Been there done that.

There is one way to avoid these support charges and only one that I know of. But just calling their Support Center with a security update issue is not one of them.

 

[Dave Patrick]

So you're saying you don't believe what you read on the page. "There is no
charge for support calls that are associated with security updates." OK

First point. 1-866-PCSAFETY probably only nets you support for security
updates.
Second point. When you tell them you install it, it is broke. You uninstall
it, it is fixed.

You think they're going to send you to paid support? I think you have left
reality George.

--
Regards,

Dave

Dave Patrick ....Please no email replies - reply in newsgroup.
Microsoft Certified Professional
Microsoft MVP [Windows]
http://www.microsoft.com/protect

:
I understand that. But Microsoft has to first determine the issue WAS from
a security update. If it wasn't do you think THEN they are going to ask you
to pay for the support that was given? I doubt it. Microsoft charges first
then re-imburses later. Been there done that.

There is one way to avoid these support charges and only one that I know of.
But just calling their Support Center with a security update issue is not
one of them.

 

[George Hester]

Maybe so. All I can say is the proof is in the pudding.

 

[Blake]

I appreciate the time, guys, but this isn't helping.

Uninstalling didn't fix the problem. (that was the first thing I tried). I
have 50 servers, 9 of them with QLogic HBAs (for connecting to our SAN). I
ran the updates on 10 of these servers. 8 worked fine. The 2 I ran that
have HBAs had no network access after reboot. IPCONFIG reported that the
machine had no TCP/IP capability. I removed the patches - nothing. I
uninstalled/re-installed TCP/IP - nothing. I re-applied SP 4. Nothing. I
have been afraid to apply the patches to the other servers for fear of
killing them.

I called MS - they said 'how do you want to pay for this call'.

I don't think anyone disagrees, Dave, that MS says what you posted (that the
calls are free). However, actually calling them gets a different response.

I know have 40 unpatched machines.

 

[Blake]

I actually did read that - I can't say that isn't the problem but we aren't
having those symptoms. The servers where I installed the patch had NO IP
connectivity. Not decreased - none.

 

[Dave Patrick]

OK, I mis-understood. I thought removing ms05-019 was part of your fix. You
might try removing the NIC from Device Manager, restarting the machine. The
Found New Hardware wizard should start and reinstall the hardware. Seems
you've nothing to lose anyway.

--
Regards,
Dave

-------------
Dave Patrick ....Please no email replies - reply in newsgroup.
Microsoft Certified Professional
Microsoft MVP [Windows]
http://www.microsoft.com/protect

:
|I appreciate the time, guys, but this isn't helping.
|
| Uninstalling didn't fix the problem. (that was the first thing I tried).
I
| have 50 servers, 9 of them with QLogic HBAs (for connecting to our SAN).
I
| ran the updates on 10 of these servers. 8 worked fine. The 2 I ran that
| have HBAs had no network access after reboot. IPCONFIG reported that the
| machine had no TCP/IP capability. I removed the patches - nothing. I
| uninstalled/re-installed TCP/IP - nothing. I re-applied SP 4. Nothing.
I
| have been afraid to apply the patches to the other servers for fear of
| killing them.
|
| I called MS - they said 'how do you want to pay for this call'.
|
| I don't think anyone disagrees, Dave, that MS says what you posted (that
the
| calls are free). However, actually calling them gets a different
response.
|
| I know have 40 unpatched machines.

 

[Guest]

Hi Blake.

Solved your problem ???
We have same problem , and we have 100 servers.
But more lucky than you we installed the patch only on 8 servers (2 of them
DC's).
After the patch installation the AD replication did not worked anymore
between all the other servers and this 2 DC's.

We experienced TCP timeouts between or LAN servers and the servers located
on WAN connetcions. Exchange server problems etc.... was a total chaos.

Now , on some machines , uninstalling the patch fixed the problem , on some
machines not.
We have alos tried to set the registry key manually with a different
TCPWindowSize as some suggest and it did not helped.

Does anyone have any suggestion ?