problems with MS04-007

[Tony]

After installing the latest security patch MS04-007

We had a Problem on one of our Domain Controllers running
Windows 2000
server. The system came to a crawl after the reboot.
Login took 15
minutes, normally 30 seconds, and the hard drive LED would
not stop
blinking. We finally uninstalled the patch, which took
another 20 minutes,
and rebooted the server. It's running just fine now, w/o
the patch. We run
the following on this DC server:

IIS 5
Websense
MSDE for Websense
Print Server

 

[Bob Miller]

We had a Problem on one of our Domain Controllers running
Windows 2000
server. The system came to a crawl after the reboot.
Login took 15
minutes, normally 30 seconds, and the hard drive LED would
not stop
blinking. We finally uninstalled the patch, which took
another 20 minutes,
and rebooted the server. It's running just fine now, w/o
the patch.

<SNIP>

We have had a significant number of serious problems - several PCs (both
win2k and XP) including mine have been having problems. My win2k PC was
rebooting continuously (I couldn't even get safe mode and doing a manual
uninstall from boot floppies didn't work) - I have now reinstalled from a
format c:. Other PCs have also been rebooting, or very slow to boot, had
printer problems, and my other machine left empty windows all over the
place. Most machines have been cured by uninstalling, or rolling back on
XP. We have now stopped any further updates and are uninstalling the 828028
update on any machine which is less than 100%. From odd things I have heard
we are certainly not alone, although there is less fuss than I would have
expected.

Now that the flaw is announced there is already code available which can
exploit the vulnerability and therefore we are now relying on the firewall
and anti-virus. Is MS actively persuing an updated fix to remove the
vulnerability whilst reliably installing. This is particularly
dissapointing as it is the first time I have had problems with critical
updates.

Bob Miller

 

[R Dunn]

We also had a similar issue with some PCs (and as a result, I've stopped
deploying immediately).

Windows 2000, SP3 - I'm deploying 820828 and 832894 together using qchain -
PC will just come up to the de-facto Windows 2000 background "teal screen"
and not go any further. Every one of them was a laptop. Can't do anything
in safe mode, can't do a 'last known configuration' - it makes no
difference.

Were any of your PCs seeing this problem?

Rob

 

[Bob Miller]

My PC never got as far as the Teal Screen - it gave a fatal exception at the
end of the windows start-up "thermometer" (as opposed to the DOS one which
appears first). We have a couple of machines that appeared to freeze at the
Teal Screen, but eventually started. All the PCs were desktops, but my
laptop suffered with the frozen windows bit. Also I'm sure it's just
co-incidence but my wireless PMCIA network card is playing up ever since I
installed the update.

Oh Joy!

Bob