Windows IT Pro is the authoritative and independent resource for windows nt, windows 2000, windows 2003, windows xp. Features a collection of resources and magazines for windows IT professionals.
  
  
  Advanced Search 


May 03, 2004

Update: Problems with Microsoft's Patch MS04-011

RSS
Subscribe to Windows IT Pro | See More Hotfixes Articles Here | Reprints | Or get the Monthly Online Pass—only $5.95 a month!

Microsoft released an article, 841382, on April 28th which discusses problems that have been discovered in its recently released patch, MS04-011.

According to the article problem may arise on Windows 2000 operating systems if any of three drivers (ipsecw2k.sys, imcide.sys, dlttape.sys) are loaded. People might experience lockups at boot time, the inability to log on, or 100% CPU utilization.

The article discusses a workaround for one situation that involves disabling IPSec Policy Agent. The company said it will update the article when further information becomes available.

Another article, 835732, was also released on April 28th that summaries four more articles (840997, 841384, 246507, and 224526) in addition to 841382 which also pertain to problems administrators might encounter while trying to implement the MS04-011 patch.

The problems include conditions where enhanced meta files might not be viewable, Windows NT systems might crash or not start properly, and issues with maximum partition sizes on Windows NT.

End of Article



Reader Comments
I am unable to update as your warning about worms suggests and I don't know where to look on this site to get the instructions I need. Please advice.

cassandra heard May 03, 2004


So far it appears that the 98 Editions are not in harms way with the threat of the Sasser Worm. Unless I have misread or missed any other bulletins I can see no reason to download the MS04-011 Patch. If someone knows different or has read any article pertaining to this issue please let me know so that I can download the patch also. This article is excellent and very informative not to scare the hell out of everyone who reads it. Thank You. Bill Barnett.

Bill Barnett May 03, 2004


i want to update my pc which is on lan and has been infected wirth sasser virus pl tell me how to patch with MS04-011 patch

Puneet May 04, 2004


The MS04-011 patch might also have a major impact on Server with Citrix MetaFrame installed. After the patch is applied no logon through ICA is possible and/or 1003 and 1004 events are logged.
To resolve the Problem follow the desciption in MSKB 329896
and apply it only on the Citrix Server.

Thomas Koetzing May 04, 2004


Hey guys (Cassandra and Punet), MS provides the support. Not this article.

Big Guy May 04, 2004


People with ORACLE Server 8.1.6 have problems with Services and Windows 2000 (WorkAround in Microsoft).
http://support.microsoft.com/default.aspx?kbid=841180
And ORACLE don't know that ?

Albert May 05, 2004


Having installed the MS04-011 patch my dual cpu pc is unresponsive due to the System process consuming full cpu power (the only reason I can write this is that max utilisation leaves 50% free on a dual cpu pc). I suspect the os is repeatedly trying to load a driver (.sys file) unsucsesfully. I would like to unload the MS04-011 patch but there seems to be no way of doing this. Microsoft do not publish the hotfix files for this issue. I am seemingly forced to reload the operating system as a consequence of one of Microsofts own security fixes.

nihil May 05, 2004


This is ridiculous that Microsoft continues to roll-up patches that have not been regression tested in the public domain all into one patch. They need to release patches one by one so that if there are problems then they can more easily resolved. Don't think that these are the only problems with this MS04-011 patch. Every patch cycle (second Tuesday of every month) the patches seem to be written by different groups and/or contain multiple problems. Corporations that once were able to regression test patches and newly released code are forced to put these unttested patches into their production environments immideately due to exploit code being released so fast after patches are released. It's just a matter of time before a large corporation's network is crippled by a poorly written and untested patch. This type of panic patching is totally acceptable Mr. Gates. Quit traveling the world and get back in the office and resolve these issues that is only hurting your company's credibility.

Sincerely, JMP

JohnMP May 05, 2004


This is ridiculous that Microsoft continues to roll-up patches that have not been regression tested in the public domain all into one patch. They need to release patches one by one so that if there are problems then they can more easily resolved. Don't think that these are the only problems with this MS04-011 patch. Every patch cycle (second Tuesday of every month) the patches seem to be written by different groups and/or contain multiple problems. Corporations that once were able to regression test patches and newly released code are forced to put these unttested patches into their production environments immideately due to exploit code being released so fast after patches are released. It's just a matter of time before a large corporation's network is crippled by a poorly written and untested patch. This type of panic patching is totally acceptable Mr. Gates. Quit traveling the world and get back in the office and resolve these issues that is only hurting your company's credibility.

Sincerely, JMP

JohnMP May 05, 2004


I just had one issue with a W98se box networked were the lsass.exe was enabled.

Henry May 05, 2004


 See More Comments  1   2   3   4   5 

You must log on before posting a comment.

If you don't have a username & password, please register now.




Top Viewed ArticlesView all articles
WinInfo Short Takes: Week of November 24, 2008

An often irreverent look at some of the week's other news, including a Vista Capable dismissal request, Zune price reductions, Morrow musings, Novell and Microsoft sitting in a tree ... two years later, Yahoo!, IE 6 on Windows Mobile, and so much more ...

Command Prompt Tricks

One reader shares his tip for setting up the command prompt to reflect a remote path. ...

PsExec

This freeware utility lets you execute processes on a remote system and redirect output to the local system. ...


Security Whitepapers The Impact of Messaging and Web Threats

Why SaaS is the Right Solution for Log Management

Protecting (You and) Your Data with Exchange Server 2007

Related Events Top 10 Email Security Challenges and Solutions

Introduction to Identity Lifecycle Manager "2"

SQL Server Security: How to Secure, Monitor & Audit Your Databases

Check out our list of Free Email Newsletters!

Security eBooks Spam Fighting and Email Security for the 21st Century

Understanding and Leveraging Code Signing Technologies

A Guide to Windows Certification and Public Keys

Related Security Resources Become a VIP member of the Windows IT Pro community!
Get it all with the VIP CD and VIP access. A $500+ value for only $279!

Subscribe to Windows IT Pro!
Solve your toughest technical problems with our experts and access 10,000 + articles online. 30% off

Monthly Online Pass - Only $5.95!
Get instant access to 10,000+ articles from Windows IT Pro Magazine!

TechNet Virtual Labs
Evaluate and test Microsoft's newest products.


Windows IT Pro Home Register FAQ for Windows WinInfo News
Europe Edition About Us Contact Us/Customer Service Media Kit Affiliates / Licensing  
SQL Server Magazine Office & SharePoint Pro Windows Dev Pro IT Job Hound ITTV
IT Library Technology Resource Directory Connected Home Windows Excavator Windows SuperSite 
 
 Windows IT Pro is a Division of Penton Media Inc.
 Copyright © 2008 Penton Media, Inc., All rights reserved. Terms and Use | Privacy Statement | Reprints and Licensing