security patch ms03-026

[Phil Roth]

I am a domain administrator and I have a Windows 2000 SP3
server. I recently installed two of the security patches
for the SoBig and Blaster worms (MS03-026 & MS03-039) on
this server. Now, when I install certian applications, it
locks the local users as well as domain users out of the
machine. (pop up window that says "You do not have
authority to logon to this computer, please contact your
system administrator")In other words, you have to be a
local administrator or domain administrator to logon to
that server after the application (Websphere Application
Server, Changeman DS, etc.) is installed. I have
identified that MS03-026 is the culprit in my lab
environment. Does anyone know why this is happening and
how to fix it? It sounds to me like this patch is
modifying the security template, but I can't identify what
it is modifying in the security template. Thanks! Phil

 

[Marina Roos]

Your server really should be at SP4.
The ms03-039 supercedes the ms03-026. Whatever you do, don't uninstall the
ms03-039!
Make sure all W2K/XP's servers and clients are patched with the ms03-039
patch.

 

[Guest]

-----Original Message-----
Your server really should be at SP4.
The ms03-039 supercedes the ms03-026. Whatever you do, don't uninstall the
ms03-039!
Make sure all W2K/XP's servers and clients are patched with the ms03-039
patch.

In the past, SP4 has fixed the issue on a workstation

that had Windows 2000 pro SP3 installed, however, it
didn't fix the issue on my server (I installed it then
backed off it (I had a ghost image of the server before
the application was installed)). Are you saying I should
remove MS03-026, and reinstall SP4? Please let me know.
Thanks!

 

[Marina Roos]

Just install SP4, and ms03-039. You shouldn't need to remove the ms03-026.
Anything in the eventlogs?

 

[Phil Roth]

I had MS03-039 with SP3 when I installed the application
that caused the issue. I tried to fix it by installing
SP4. When SP4 finished installing, The server would not
come back up, it went in to a reboot loop. I couldn't get
to the event logs. So, I backed it off with a ghost image
I had before installing the application.
Should I upgrade to SP4 (With MS03-039 installed) and then
try to install the application? Please let me know. Thanks!

 

[Marina Roos]

Yup. Make sure you stop all 3rd party services before installing SP4 and
make sure it is not connected to the internet before ms03-039 is installed.