Descriptif des prestations
Transcription
Descriptif des prestations
Liste de recommandations de correctifs par type de serveur mercredi 3 février 2010 Version 1.1 Auteurs Support Premier Toute utilisation ou reproduction intégrale ou partielle du présent document sans le consentement de la société MICROSOFT est illicite. Cette représentation ou reproduction par quelque procédé que ce soit constituerait une contrefaçon sanctionnée par les dispositions des articles L.335-1 et suivants du Code de la Propriété Intellectuelle et, de manière générale, une atteinte aux droits de la société Microsoft. Les descriptions des produits des autres sociétés figurant dans ce document, le cas échéant, sont fournies à titre informatif uniquement. Toutes références à ces produits ne sauraient être considérées comme une assistance de la part de Microsoft. Microsoft ne peut en garantir leur exactitude, et les produits pourront changer au fil du temps. Par ailleurs, les descriptions sont conçues comme de brèves présentations permettant de faciliter la compréhension, plutôt que comme des présentations exhaustives. Pour obtenir les descriptions officielles de ces produits, veuillez vous mettre en relation avec les fabricants respectifs de ces produits. Les noms des sociétés et des produits effectivement mentionnés dans les présentes peuvent être les marques de leurs titulaires respectifs. Microsoft et Windows sont soit des marques déposées soit des marques de Microsoft Corporation aux Etats-Unis et/ou dans d’autres pays. ©2007 Microsoft Corporation. Tous droits réservés. Page ii Sommaire INTRODUCTION.............................................................................................................................................. 2 1. Généralités .............................................................................................................................................. 3 2. Listes de correctifs par rôles ................................................................................................................. 4 2.1. 2.1.1. 2.1.2. 2.1.3. 2.1.4. 2.1.5. 2.1.6. 2.1.7. 2.1.8. 2.1.9. 2.1.10. 2.1.11. 2.1.12. 2.1.13. 2.2. 2.2.1. 2.2.2. 2.2.3. 2.3. 2.3.1. 2.3.2. 2.3.3. 2.4. 2.4.1. 2.4.2. 2.4.3. 2.5. 2.5.1. 2.5.2. 2.5.3. 2.5.4. 2.5.5. 2.5.6. Windows Server 2003 SP2 RFL .................................................................................................. 4 P0 – SERVER Core OS ( BASE & STORAGE & FILE SYSTEM ) .......................................... 4 P0 – SERVER NETWORKING ................................................................................................ 4 P0 - SERVER_DOMAIN_MEMBER ......................................................................................... 5 P0 – OTHER ............................................................................................................................ 6 P1 – SERVER Core OS (BASE & STORAGE & FILE SYSTEM) ............................................ 6 P1 – SERVER NETWORKING ................................................................................................ 7 P1 DomainMember_SP2 List ................................................................................................... 8 P1- OTHER .............................................................................................................................. 8 P2 – CORE OS ........................................................................................................................ 9 P2 – SERVER NETWORKING ................................................................................................ 9 P2 DomainMember_SP2 List ................................................................................................... 9 P2- OTHER ............................................................................................................................10 ROLLUPS ...............................................................................................................................10 Windows Server 2003 SP2 PRINT SERVER ............................................................................ 11 P0 PrintServer_SP2 List ........................................................................................................11 P1 PrintServer_SP2 List ........................................................................................................11 P2 PrintServer_SP2 List ........................................................................................................12 Windows Server 2003 SP2 Terminal Server ............................................................................. 12 P0 TerminalServer_SP2 List ..................................................................................................12 P1 TerminalServer_SP2 List ..................................................................................................12 P2 TerminalServer_SP2 List ..................................................................................................13 Windows Server 2003 SP2 Cluster ............................................................................................ 13 ClusterServer_SP2_P0 List ..................................................................................................13 P1 ClusterServer SP2 List .....................................................................................................14 P2 ClusterServer SP2 List .....................................................................................................14 Windows Server 2003 SP2 DOMAINS ...................................................................................... 14 P0 DomainController_SP2 List ..............................................................................................15 P1 DomainController_SP2 List ..............................................................................................15 P2 DomainController_SP2 List ..............................................................................................16 P0 – DomainMember_SP2 List ..............................................................................................16 P1 DomainMember_SP2 List .................................................................................................17 P2 DomainMember_SP2 List .................................................................................................17 Page 1 INTRODUCTION Le présent document a pour objectif de répondre à l’interrogation de nos clients qui viennent d’installer un serveur Windows 2003 SP2 et qui souhaitent connaître les recommandations du support Microsoft quand à l’installation des correctifs POST-SP2, et ce dans le but d’éviter les problèmes connus les plus critiques et/ou les plus impactant. Le document fourni donc une liste de correctifs recommandés sur Windows et par rôle. La liste est divisée en 3 parties: Correctifs P0: Ce sont les correctifs essentiels. Ils résolvent des problèmes de type Corruption (mémoire et/ou disque), Perte de Données, Indisponibilité de serveurs. Correctifs P1: Ce sont les correctifs importants à avoir. Ils sont déclinés par rôles de serveurs (Fichiers, TS, Cluster, etc.), ils corrigent des problèmes de Performance et/ou ont résolu des incidents en Sévérité A. Correctifs P2: Ce sont les correctifs utiles à avoir. Ce sont les correctifs qui introduisent de nouvelles fonctionnalités, ou qui ont été téléchargés un grand nombre de fois. En rouge sont notés les correctifs nouvellement recommandés. Qui et comment est générée cette liste ? Par les équipes de Support Microsoft. Les correctifs sont proposés par les ingénieurs du support en fonction des dossiers qu’ils résolvent. Puis ces propositions sont revues par les ingénieurs CPR (Ingénieurs d’Escalade) afin de décider de leur intégration ou non dans la liste. Enfin, pour les correctifs P0, la liste est revue par les équipes de Développement aux US pour validation finale. A savoir : Cette liste est revue tous les 3 à 4 mois. Les correctifs intégrés à la liste sont disponibles depuis au moins 3 mois afin d’avoir un minimum de recul sur la fiabilité du correctif (effets de bord, régression). Bien qu’ayant un minimum de recul, nous ne pouvons garantir que les correctifs n’auront aucun effet de bord ou qu’aucune régression ne sera introduite par leur intermédiaire. Les phases de tests et validations sont donc indispensables et le support reste mobilisé. Ce projet est mené conjointement par Microsoft EMEA (Allemagne, Angleterre et France) ainsi qu’avec les équipes de Développement aux US. Windows 2003 SP2 est le seul produit sur lesquels ces recommandations existent pour le moment. Page 2 1. GENERALITES La RFL (Reference Fix List) est composée de plusieurs listes, par rôle serveur : La liste « SERVER RFL » qui est à utiliser sur tous les serveurs (ce qui correspond actuellement à un rôle FILESERVER) Plusieurs listes de « SERVER ROLE RFL ». Actuellement : CLUSTERSERVER PRINTSERVER TERMINALSERVER DOMAINS (DOMAIN_CONTROLLER et DOMAIN_MEMBER) La liste générale « SERVER RFL » contient les sous-listes suivantes : CORE OS STORAGE & FILE SYSTEM NETWORK DOMAIN MEMBER Utilisation : pour un serveur spécifique, la RFL doit être concaténé par rôles serveurs : Pour un cluster : SERVER RFL & CLUSTERSERVER RFL Pour un serveur d’impression : SERVER RFL & CLUSTERSERVER RFL & PRINTSERVER RFL A savoir : La liste fournie est une liste de recommandations. Il convient de valider les correctifs en fonction de l’environnement client. Par exemple, la liste contient un correctif sur StorPort.sys ; mais si ce driver n’est pas utilisé dans votre environnement, alors il n’est pas à installer. Même chose par exemple pour un correctif concernant les services Terminal Server : si vous n’utilisez pas TS sur le serveur alors il n’est pas nécessaire de l’installer. Conclusion : il se peut que certains correctifs de la liste ne soient pas à installer dans votre environnement si le service, driver ou autre n’est pas utilisé. En cas de doute, contacter le support Microsoft. Page 3 2. LISTES DE CORRECTIFS PAR RÔLES 2.1. Windows Server 2003 SP2 RFL 2.1.1. P0 – SERVER Core OS ( BASE & STORAGE & FILE SYSTEM ) Kernel http://support.microsoft.com/kb/978243 A terminal server that is running Windows Server 2003 Service Pack 2 restarts unexpectedly with various stop codes after you install hotfix 971280 or newer Windows Kernel Binaries 10-Dec-2009 dual mode (SP1,SP2) includes hal.dll for x64, ntdll.dll for Itanium Win32k,gdi32 http://support.microsoft.com/kb/960228 You receive a Stop error when you click the arrow to scroll down an application pop-up menu on a Windows Server 2003 SP1 or SP2-based computer 21-Nov-2008, dual mode (SP1, SP2), WS03 all platforms Ntfs http://support.microsoft.com/kb/959608 Error message when you run the Chkdsk.exe utility to fix a corrupted volume on a Windows Server 2003-based computer: "Stop 0x00000024" 13-Nov-2008, (dual mode (SP1, SP2) Storport : check with SAN provider OEM in order to use the latest storport validated by the OEM Storport http://support.microsoft.com/kb/950903 The system may not detect that a logical unit was replaced on a Windows Server 2003-based computer 04-Sep-2008, dual mode (SP1, SP2), includes diskdump.sys – check with OEM NB. This storport.sys version was built for HP, for other OEMs check their validation list. On HP ProLiant Server platform please check for: latest hpcisss2 .sys (as of today : version 6.14.0.32/64 from 7-Jan-2009) latest E200/E200i firmware (as of today : rev. 1.82, from 17-Apr-2009) HP Server http://support.microsoft.com/kb/940015 hpcisss2.sys You receive a Stop error message after you install update 932755 or 941276 on an HP ProLiant server that is running Storport in Windows Server 2003 Ref HP: hpcisss2.sys, build date 7-Jan-2009, version 6.14.0.32/64 HP Server E200/E200i http://support.microsoft.com/kb/969550 Stop error messages after Memory Corruption on several HP ProLiant servers, firmware due to a problem with firmware of E200/E200i (HP Smart Array SAS/SATA Controller) Ref HP : E200/E200i firmware rev. 1.82, 17-Apr-2009 2.1.2. P0 – SERVER NETWORKING Page 4 WS03 SP2 enables the Scalable Network Pack (SNP), by default. We have seen unexpected side effects due to this setting, therefore we suggest to disable SNP immediately after upgrading to SP2, and enable it at a later tim, if required. When re-enabling SNP, tcpip should be at least at KB 950224 level (10-Jul-2008). All previous tcpip versions should be used without enabling SNP. Disable SNP http://support.microsoft.com/kb/948496 An update to turn off default SNP features is available for Windows Server 2003- based and Small Business Server 2003-based computers (after aplying KB 912222 on SP1, or after upgrade to SP2) 05-Feb-2008, SP2 only, registry setting no tcpip.sys included Tcpip http://support.microsoft.com/kb/950224 A Scalable Networking Pack (SNP) hotfix rollup package is available for Windows Server 2003 10-Jul-2008, SP2 only, contains: netbt.sys, smb.sys DNS all http://support.microsoft.com/kb/962238 MS09-008 : Vulnerabilities in DNS and WINS Server could allow spoofing Includes : afd.sys, dnsapi.dll, mswsock.dll, tcpip.sys, tcpip6.sys 16-Feb-2009, dual mode (SP1,SP2) W2K, WS08, WinXP DNS client http://support.microsoft.com/kb/951748 MS08-037 : Description of the security update for DNS in Windows Server 2008, in Windows Server 2003, and in Windows 2000 Server (client-side): Jul 8, 2008 Includes : afd.sys, dnsapi.dll, mswsock.dll, tcpip.sys, tcpip6.sys 20-Jun-2008, dual mode (SP1,SP2) W2K, WS08, WinXP DNS server http://support.microsoft.com/kb/951746 MS08-037: Description of the security update for DNS in Windows Server 2008, in Windows Server 2003, and in Windows 2000 Server (DNS server-side) Jul 8, 2008 Includes : afd.sys, dns.exe, dnsperf.dll, mswsock.dll, tcpip.sys, tcpip6.sys 20-Jun-2008, dual mode (SP1,SP2) W2K, WS08, WinXP Dnsapi http://support.microsoft.com/kb/945553 MS08-020: Vulnerability in DNS client could allow spoofing 18-19-Feb-2008, dual mode (SP1,SP2), includes dnsrslvr.dll 2.1.3. P0 - SERVER_DOMAIN_MEMBER Kerberos http://support.microsoft.com/kb/940925 A Windows Server 2003-based domain controller restarts unexpectedly after you install hotfix 918442 or Windows Server 2003 Service Pack 2 27-Sep-2007, dual mode (SP1, SP2) Lsasrv http://support.microsoft.com/kb/955575 The InitializeSecurityContext function fails with a status of "STATUS_INSUFFICIENT_RESOURCES (0xC000009A)" when the token size of a security principal is greater than 20,000 bytes in Windows Server 2003 18-Jul-2008, dual mode (SP1, SP2) http://support.microsoft.com/kb/939268 Msv1_0.dll Page 5 A Windows Server 2003 Service Pack 1 or Service Pack 2-based computer seems to stop responding when the Lsass.exe process consumes lots of memory and uses 100% of the CPU 1-May-2007, dual mode (SP1,SP2) 2.1.4. P0 – OTHER Mfc42u.dll http://support.microsoft.com/kb/924667 MS07-012: Vulnerability in Microsoft Foundation Classes could allow for remote code execution dual mode (SP1,SP2) , date 01-May-2007 2.1.5. P1 – SERVER Core OS (BASE & STORAGE & FILE SYSTEM) Hal.dll x86,x64 http://support.microsoft.com/kb/954429 A multiprocessor computer that is running Windows Server 2003, Windows Vista, or Windows Server 2008 stops responding on a black screen after you resume the computer from hibernation 10-Jul-2008, dual mode (SP1,SP2), WS03 & Win XP and WS08 & VISTA Hal.dll ia64 http://support.microsoft.com/kb/955516 A computer that is running an Itanium-based version of Windows Server 2003 SP1 or SP2 stops responding during startup while a local machine check event occurs in the bootstrap processor 11-Jul-2008, dual mode (SP1,SP2), WS03 ia64 only Mountmgr.sys http://support.microsoft.com/kb/940307 “A Microsoft Windows Server 2003-based computer may stop responding if an application frequently uses the mount manager to query volume information” 20-Jul-2007, dual mode (SP1,SP2), mandatory for SP1 Disk.sys http://support.microsoft.com/kb/929161 “You receive a Stop error message on a Windows Server 2003 SP1-based computer when a device is suddenly disconnected from a host bus adapter” 16-Jan-2007, dual mode (SP1,SP2) ScsiPort.sys http://support.microsoft.com/kb/934848 “If you load the Intel iSCSI Setup driver for an iSCSI disk during Windows Server 2003 installation, the installation program reports that no disk is detected, and the installation process fails” 2-Jul-2007, dual mode (SP1, SP2) Dmadmin.exe http://support.microsoft.com/kb/957271 “The Logical Disk Manager Administrative Service process may stop unexpectedly on a Windows Server 2003-based computer” 15-Dec-2008, dual mode (SP1,SP2) all platforms Vds.exe http://support.microsoft.com/kb/960831 Page 6 “Drivers or hardware providers that use the Virtual Disk Service to manage hardware LUN IDs encounter exceptions after a disk is physically removed from a computer that is running Windows Server 2003 “ Contains : vdsbas.dll, vdsdyndr.dll, vdsldr.exe, vdsutil.exe 12-Nov-2008 dual mode (SP1,SP2) 2.1.6. P1 – SERVER NETWORKING Afd.sys (DNS all) http://support.microsoft.com/kb/962238 MS09-008: Vulnerabilities in DNS and WINS Server could allow spoofing Includes : afd.sys, dns.exe, dnsapi.dll, mswsock.dll, tcpip.sys, tcpip6.sys 16-Feb-2009, dual mode (SP1,SP2) W2K, WS08, WinXP Netbt.sys http://support.microsoft.com/kb/955860 High CPU usage occurs for six seconds on a Windows Server 2003-based computer that has multiple network adapters 18-Aug-2008, dual mode (SP1, SP2) Rpcrt4.dll http://support.microsoft.com/kb/952145 An application exits unexpectedly when an application that uses remote procedure call (RPC) runtime tries to enter a critical section on a Window Server 2003-based computer 15-May-2008, dual mode (SP1,SP2) Rdbss.sys http://support.microsoft.com/kb/952185 A Windows Server 2003-based computer restarts unexpectedly, and a Stop error "0x00000027" occurs 25-Apr-2008, dual mode (SP1,SP2) Mrxsmb.sys http://support.microsoft.com/kb/960882 Error message when a Windows Server 2003-based computer is shutting down: "Stop 0x000000CE" or "Stop 0x00000050" 07-Jan-2009, dual mode (SP1, SP2) Srv.sys http://support.microsoft.com/kb/958687 MS09-001: Vulnerabilities in SMB could allow remote code execution 11-Dec-2008, dual mode (SP1,SP2) Srv.sys 1 1 http://support.microsoft.com/kb/955157 Error message when you try to delete an empty folder on a network share that is hosted on a Windows Server 2003-based server or on a Windows XP Professional x64 Edition-based server: "Cannot delete <DIRECTORY>" 22-Jul-2008, dual mode (SP1,SP2) Les 2 correctifs pour srv.sys sont à installer. Page 7 Dfssvc.exe http://support.microsoft.com/kb/945050 The private bytes that the DFS service consumes continue to increase on a Windows Server 2003-based domain controller that hosts the PDC emulator role 11-Dec-2007 dual mode (SP1,SP2) Dfs http://support.microsoft.com/kb/938666 Event ID 2019 is logged in the System log when a DFS domain root server stops responding on a Windows Server 2003-based server 19-Jun-2007, dual mode (SP1,SP2), includes dfs.sys 2.1.7. P1 DomainMember_SP2 List Netlogon http://support.microsoft.com/kb/947861 Authentication of trusted users fails on a Windows Server 2003-based server if the UPN format is used and if the value of the LmCompatibilityLevel entry is equal to or larger than 3 24-Mar-2008, dual mode (SP1, SP2) Dfsr.exe http://support.microsoft.com/kb/958876 When you try to update a file that has a newer version on a Windows Server 2003 R2-based DFSR server, the operation fails, the original file is deleted from the replication partners, and event 4412 and event 4502 are logged 31-Oct-2008, dual mode (SP1,SP2), requires ntfs.sys post 7-Nov-2007 Quota.sys (for Dfsr) http://support.microsoft.com/kb/954968 Subfolder file content on an upstream member does not match subfolder file content on downstream members in a DFSR configuration in Windows Server 2003 R2 10-Nov-2008, dual mode (SP1,SP2), ( x86, x64) only, no ia64 2.1.8. P1- OTHER Comsvcs http://support.microsoft.com/kb/965230 FIX: The COM+ Event System does not deliver timely or reliable statistics to subscribers of the IComTrackingInfoEvents event interface in Windows Server 2003 30-Jan-2008, dual mode (SP1,SP2) Browser http://support.microsoft.com/kb/932762 The Service Host process may stop unexpectedly in Windows Server 2003 15-Mar-2007, dual mode (SP1,SP2) WMI http://support.microsoft.com/kb/933061 An update is available that improves the stability of the Windows Management Instrumentation repository in Windows Server 2003 15-May-2007, dual mode (SP1,SP2), contains repdrvfs.dll All Security Updates available from Windows Update Page 8 2.1.9. P2 – CORE OS Volsnap.sys http://support.microsoft.com/kb/967327 Shadow copies that you create in Windows Server 2008 cannot be detected in Windows Server 2003 23-Feb-2009, dual mode (SP1,SP2), for SP2 contains volsnap.sys only Dmio.sys http://support.microsoft.com/kb/955543 All snapshots may be deleted unexpectedly in Windows Server 2003 and in Windows XP Professional x64 Edition when the snapshot protection mode is enabled, and the system is under memory stress 08-Jan--2009, dual mode (SP1,SP2), for SP2 contains dmio.sys only VSSvc.exe Swprv.dll http://support.microsoft.com/kb/957778 VSS requestor instances fail when you start multiple VSS requestor instances with a VSS hardware provider to delete snapshots in Windows Server 2003 15-Sep--2008, dual mode (SP1,SP2) contains : eventcls.dll, ftdisk.sys, partmgr.sys, swprv.dll, volsnap.sys, vssadmin.exe, vssapi.dll, vssui.dl,l vssvc.exe, vss_ps.dll VSSapi.dll http://support.microsoft.com/kb/952826 When you call the "IVssBackupComponents::SetFileRestoreStatus" method by specifying the value of the status parameter as VSS_RS_FAILED, the restore status is set incorrectly on a computer that is running Windows Server 2003 6-Jun-2008, dual mode (SP1,SP2) 2.1.10. P2 – SERVER NETWORKING Rdbss.sys http://support.microsoft.com/kb/960092 A Windows Server 2003-based terminal server that also runs Citrix MetaFrame Presentation Server may stop responding every few days, and you may receive a gray screen when you log on to the terminal server 20--Nov-2008, dual mode (SP1,SP2), P2 for TS too 2.1.11. P2 DomainMember_SP2 List ReadOnly DC http://support.microsoft.com/kb/944043 Rollup Description of the Windows Server 2008 read-only domain controller compatibility pack for Windows Server 2003 clients and for Windows XP clients Includes : adsldp.dll,adsmsext.dll, dsuiext.dll,gptext.dll,localspl.dll, lsasrv.dll, Mmsv1_0.dll, netlogon.dll, ntdsa.dll, ntdsapi.dlll,policeman.dll, w32time.dll, w32tm.exe, wkssvc.dll 5-May-2008, dual mode (SP1,SP2) for WS03 clients and Win XP clients Crypt32 http://support.microsoft.com/kb/950474 Error message when you run the SharePoint Products and Technologies Configuration Wizard on a Windows Server 2003-based computer: "Application has generated an exception that could not be handled" 11-Apr-2008, dual mode (SP1,SP2) Page 9 Userenv.dll http://support.microsoft.com/kb/958246 The logoff process may take a long time when a user makes a terminal session from a Windows Server 2003 terminal server in a trusted domain, and the terminal service roaming profiles are used 14-Oct-2008, dual mode (SP1, SP2) 2.1.12. P2- OTHER Local security http://support.microsoft.com/kb/902069 policy You may receive a "Stop 0x0000000A" error message when you shut down or restart a computer that is running Windows Server 2003 30-Oct-2006,stop 0x0A if local policy Shutdown : Clear Virtual Memory Pagefile local policy is enabled, x86 only 2.1.13. ROLLUPS VSS Rollups For VSS rollups see also per component fixes (volsnap.sys, vssvc.exe, vssapi.dll, etc…)* under “P2 - CORE OS” (these fixes are “partial rollups”) VSS rollup 10 files http://support.microsoft.com/kb/943669 “When you try to restart a Windows Server 2003 R2-based computer that has both VSS and the FSRM quota enabled, the computer stops responding” 16-Oct-2007, dual mode (SP1,SP2), x86 & x64 only (no ia64) COM+ , MSDTC rollups COM+ rollup http://support.microsoft.com/kb/934016 “Availability of Windows Server 2003 Post-Service Pack 2 COM+ 1.5 Hotfix Rollup Package 12” 23-Mar-2007, dual mode (SP1,SP2) MSDTC rollup http://support.microsoft.com/kb/952943 “List of the MS DTC bugs that are fixed in Windows Server 2003 MS DTC Hotfix Rollup Package 14” 13-May-2008, dual mode (SP1,SP2) All Security Updates available from Windows Update Page 10 2.2. Windows Server 2003 SP2 PRINT SERVER 2.2.1. P0 PrintServer_SP2 List Win32k,gdi32 http://support.microsoft.com/kb/958690 MS09-006: Vulnerabilities in Windows Kernel could allow remote code execution 09-Feb-2009, dual mode (SP1, SP2), WS03 all platforms 2 Win32k,gdi32 http://support.microsoft.com/kb/960228 You receive a Stop error when you click the arrow to scroll down an application pop-up menu on a Windows Server 2003 SP1 or SP2-based computer Win32k.sys (ver. 5.2.3790.4415, 21-Nov-2008), dual mode (SP1, SP2), Gdi32.dll (ver. 5.2.3790.3091,21-Nov-2008), all platforms 2.2.2. P1 PrintServer_SP2 List Localspl.dll http://support.microsoft.com/kb/955455 The print process crashes under heavy stress on a computer that is running Windows Server 2003 or Windows XP Professional x64 Edition if the computer uses hyper-threading technology 17-Jul-2008, dual mode (SP1, SP2) all platforms Win32spl.dll http://support.microsoft.com/kb/953546 The Print Spooler process (Spoolsv.exe) crashes while it is copying print driver files on a computer that is running Windows Server 2003 or Windows XP 27-May-2008 dual mode (SP1,SP2) all platforms If .Net Framework 3.5 SP1 is not installed: Unidrv.dll http://support.microsoft.com/kb/957187 Stop error if you use some OpenType fonts on a computer that is running Windows Server 2003, Windows Vista, or Windows Server 2008: "Stop 0x00000050" 01-Sep-2008, SP2 only If .Net Framework 3.5 SP1 including XPS Essential Pack is installed: Unidrv.dll http://support.microsoft.com/kb/961118 All the PCL inbox printer drivers become unsigned after you install the Microsoft .NET Framework 3.5 Service Pack 1 Contains : Ntprint.cat required to sign drivers coming from XPS Essential Pack 01-Sep-2008, dual mode (SP1, SP2) 2 Les 2 correctifs pour Win32k et gdi32 sont à installer. Page 11 2.2.3. P2 PrintServer_SP2 List tcpmib http://support.microsoft.com/kb/946198 The print queue status is displayed as "Offline" on a Windows Server 2003-based print server if SNMP is enabled and if the printer devices do not respond to SNMP commands 31-Oct-2007, dual mode (SP1,SP2) 2.3. Windows Server 2003 SP2 Terminal Server 2.3.1. P0 TerminalServer_SP2 List Win32k,gdi32 http://support.microsoft.com/kb/958690 MS09-006: Vulnerabilities in Windows Kernel could allow remote code execution 09-Feb-2009, dual mode (SP1, SP2), WS03 all platforms 3 Win32k,gdi32 http://support.microsoft.com/kb/960228 You receive a Stop error when you click the arrow to scroll down an application pop-up menu on a Windows Server 2003 SP1 or SP2-based computer Win32k.sys (ver. 5.2.3790.4415, 21-Nov-2008), dual mode (SP1, SP2), Gdi32.dll (ver. 5.2.3790.3091,21-Nov-2008), all platforms Termdd.sys http://support.microsoft.com/kb/956438 A Windows Server 2003-based or Windows Server 2008-based terminal server stops accepting new connections, and existing connections stop responding 02-Feb-2009, dual mode (SP1, SP2) Termsrv.dll Imagehlp.dll http://support.microsoft.com/kb/958476 RDP clients and ICA clients cannot connect to a Windows Server 2003-based terminal server after hotfix 938759 is applied to the server 19-Nov-2008, dual mode (SP1,SP2) Winsrv.dll http://support.microsoft.com/kb/948928 Stop error message when multiple console applications are opened and closed within a short time frame on a Windows Server 2003-based computer: 0x000000F4” 22-Feb-2008, dual mode (SP1, SP2) 2.3.2. P1 TerminalServer_SP2 List Netbt.sys 3 http://support.microsoft.com/kb/961799 A Stop error occurs on a Windows Server 2003-based server when a user accesses shared files on the server by using an SMB connection 27-Jan-2009, SP2 only Les 2 correctifs pour Win32k et gdi32 sont à installer. Page 12 Winlogon.exe Win32k.sys Gdi32.dll Licdll.dll http://support.microsoft.com/kb/946633 The "Font smoothing" feature has no effect in Windows Server 2003 terminal sessions Contains : win32k.sys, gdi32.dll, licdll.dll 22-Apr-2008, dual mode (SP1, SP2), post MS08025 19-Mar-2008 2.3.3. P2 TerminalServer_SP2 List Userenv.dll http://support.microsoft.com/kb/958246 The logoff process may take a long time when a user makes a terminal session from a Windows Server 2003 terminal server in a trusted domain, and the terminal service roaming profiles are used 14-Oct-2008, dual mode (SP1, SP2) Rdbss.sys http://support.microsoft.com/kb/960092 A Windows Server 2003-based terminal server that also runs Citrix MetaFrame Presentation Server may stop responding every few days, and you may receive a gray screen when you log on to the terminal server 20-Nov-2008, dual mode (SP1,SP2) Winsrv.dll http://support.microsoft.com/kb/960028 The DB2.exe Command Prompt window may hang in Windows Server 2003 when you run a batch file to execute DB2-related tasks 14-Nov-2008, SP2 only 2.4. Windows Server 2003 SP2 Cluster See also: http://support.microsoft.com/kb/935640 – “Recommended hotfixes for Windows Server 2003 Service Pack 2- based server clusters” 2.4.1. ClusterServer_SP2_P0 List Clusdisk.sys http://support.microsoft.com/kb/957419 SCSI hardware-mirrored disks may be corrupted on a Windows Server 2003- based cluster node 02-Sep-2008, dual mode (SP1,SP2) Clusres.dll Clusdisk.sys http://support.microsoft.com/kb/944971 A Cluster node may lose an MNS quorum, and the Cluster service may stop on a Windows Server 2003, Enterprise Edition-based computer, includes KB 943809 12/13-Nov-2007, dual mode (SP1,SP2) Resrcmon.exe http://support.microsoft.com/kb/948701 The Resource Monitor may crash on a Windows Server 2003-based cluster node that has Windows Server 2003 SP2 or hotfix 921181 installed 10-Mar-2008, dual mode (SP1,SP2) Page 13 2.4.2. P1 ClusterServer SP2 List Dfssvc.exe http://support.microsoft.com/kb/945050 The private bytes that the DFS service consumes continue to increase on a Windows Server 2003-based domain controller that hosts the PDC emulator role 11-Dec-2007 dual mode (SP1,SP2) Dfs.sys http://support.microsoft.com/kb/938666 Event ID 2019 is logged in the System log when a DFS domain root server stops responding on a Windows Server 2003-based server 19-Jun-2007, dual mode (SP1,SP2) Localspl.dll http://support.microsoft.com/kb/955455 The print process crashes under heavy stress on a computer that is running Windows Server 2003 or Windows XP Professional x64 Edition if the computer uses hyper-threading technology 17-Jul-2008, dual mode (SP1, SP2) all platforms 2.4.3. P2 ClusterServer SP2 List Use this list together with P2 SERVER_SP2 RFL (hotfixes for general use, on all Servers) Rollup Cluster http://support.microsoft.com/kb/919117 A hotfix is available that adds support for GUID partition table (GPT) volumes that are larger than 2 terabytes on a Windows Server 2003-based server cluster 2-Feb-2007 dual mode (SP1,SP2), rollup support GPT partitions Local security http://support.microsoft.com/kb/902069 policy You may receive a "Stop 0x0000000A" error message when you shut down or restart a computer that is running Windows Server 2003 30-Oct-2006,stop 0x0A if local policy Shutdown : Clear Virtual Memory Pagefile local policy is enabled, x86 only 2.5. Windows Server 2003 SP2 DOMAINS The DOMAINS list is composed of two lists : - the Domain Controller list contains fixes for Domain Controllers the Domain Member list contains fixes for servers which are members in a domain Normally, the Domain Member list is a sub-list of the Domain Controllers list. Page 14 2.5.1. P0 DomainController_SP2 List Kerberos.dll http://support.microsoft.com/kb/940925 A Windows Server 2003-based domain controller restarts unexpectedly after you install hotfix 918442 or Windows Server 2003 Service Pack 2 27-Sep-2007, dual mode (SP1, SP2) Lsasrv.dll http://support.microsoft.com/kb/955575 The InitializeSecurityContext function fails with a status of "STATUS_INSUFFICIENT_RESOURCES (0xC000009A)" when the token size of a security principal is greater than 20,000 bytes in Windows Server 2003 18-Jul-2008, dual mode (SP1, SP2) Msv1_0.dll http://support.microsoft.com/kb/939268 A Windows Server 2003 Service Pack 1 or Service Pack 2-based computer seems to stop responding when the Lsass.exe process consumes lots of memory and uses 100% of the CPU 16-Oct--2007, dual mode (SP1,SP2) Ntdsa.dll http://support.microsoft.com/kb/953235 MS08-035: Vulnerability in Active Directory could allow denial of service 05-May-2008, dual mode (SP1,SP2) Ntdsa.dll 4 Ntdsutil.exe http://support.microsoft.com/kb/948925 Event IDs 1173 and 1925 are logged after you perform an authoritative restore on a Windows Server 2003-based domain controller to restore an application partition that was previously deleted 14-Feb-2008, dual mode (SP1,SP2) http://support.microsoft.com/kb/951320 The ntdsutil.exe utility in Windows Server 2003 writes out too many links to .ldf files during an authoritative restore process 22-May-2008, dual mode (SP1,SP2) 2.5.2. P1 DomainController_SP2 List Netlogon.dll http://support.microsoft.com/kb/947861 Authentication of trusted users fails on a Windows Server 2003-based server if the UPN format is used and if the value of the LmCompatibilityLevel entry is equal to or larger than 3 24-Mar-2008, dual mode (SP1, SP2) Kdcsvc.dll http://support.microsoft.com/kb/955410 A memory leak occurs every time that you use a smart card to authenticate against a Windows Server 2003-based domain controller 11-July-2008, dual mode (SP1,SP2) 4 Les 2 correctifs pour ntdsa.dll doivent être installés. Page 15 Dfsr.exe http://support.microsoft.com/kb/958876 When you try to update a file that has a newer version on a Windows Server 2003 R2-based DFSR server, the operation fails, the original file is deleted from the replication partners, and event 4412 and event 4502 are logged 31-Oct-2008, dual mode (SP1,SP2), requires ntfs.sys post 7-Nov-2007 Quota.sys (for Dfsr) http://support.microsoft.com/kb/954968 Subfolder file content on an upstream member does not match subfolder file content on downstream members in a DFSR configuration in Windows Server 2003 R2 10-Nov-2008, dual mode (SP1,SP2), ( x86, x64) only, no ia64 2.5.3. P2 DomainController_SP2 List Crypt32.dll http://support.microsoft.com/kb/950474 Error message when you run the SharePoint Products and Technologies Configuration Wizard on a Windows Server 2003-based computer: "Application has generated an exception that could not be handled" 11-Apr-2008, dual mode (SP1,SP2) Ntdsa.dll Ntdsperf.dll http://support.microsoft.com/kb/941084 When you use a WMI script to query the Win32_PerfFormattedData_NTDS_NTDS class on a Windows Server 2003-based domain controller, the script returns a 0x80041010 error 08-Jul-2008, dual mode (SP1,SP2) Ntfrs.exe http://support.microsoft.com/kb/939667 On a Windows Server 2003-based domain controller, the "Authentications in Error" performance counter of the FileReplicaSet performance object and of the FileReplicaConn performance object display incorrect values 28-Jun-2007, dual mode (SP1,SP2) Samsrv http://support.microsoft.com/kb/958147 The Member ID field is logged incorrectly in the audit event on a Windows Server 2003 domain controller if you add a user of a different domain to a universal group 21-Oct-2008, dual mode (SP1,SP2), all platforms Userenv.dll http://support.microsoft.com/kb/958246 The logoff process may take a long time when a user makes a terminal session from a Windows Server 2003 terminal server in a trusted domain, and the terminal service roaming profiles are used 14-Oct-2008, dual mode (SP1, SP2) 2.5.4. P0 – DomainMember_SP2 List Kerberos http://support.microsoft.com/kb/940925 A Windows Server 2003-based domain controller restarts unexpectedly after you install hotfix 918442 or Windows Server 2003 Service Pack 27-Sep-2007, dual mode (SP1, SP2) Page 16 Lsasrv http://support.microsoft.com/kb/955575 The InitializeSecurityContext function fails with a status of "STATUS_INSUFFICIENT_RESOURCES (0xC000009A)" when the token size of a security principal is greater than 20,000 bytes in Windows Server 2003 18-Jul-2008, dual mode (SP1, SP2) Msv1_0.dll http://support.microsoft.com/kb/939268 A Windows Server 2003 Service Pack 1 or Service Pack 2-based computer seems to stop responding when the Lsass.exe process consumes lots of memory and uses 100% of the CPU 16-Oct--2007, dual mode (SP1,SP2) 2.5.5. P1 DomainMember_SP2 List Netlogon http://support.microsoft.com/kb/947861 Authentication of trusted users fails on a Windows Server 2003-based server if the UPN format is used and if the value of the LmCompatibilityLevel entry is equal to or larger than 3 24-Mar-2008, dual mode (SP1, SP2) Dfsr.exe http://support.microsoft.com/kb/958876 When you try to update a file that has a newer version on a Windows Server 2003 R2-based DFSR server, the operation fails, the original file is deleted from the replication partners, and event 4412 and event 4502 are logged 31-Oct-2008, dual mode (SP1,SP2), requires ntfs.sys post 7-Nov-2007 Quota.sys (for Dfsr) http://support.microsoft.com/kb/954968 Subfolder file content on an upstream member does not match subfolder file content on downstream members in a DFSR configuration in Windows Server 2003 R2 10-Nov-2008, dual mode (SP1,SP2), ( x86, x64) only, no ia64 2.5.6. P2 DomainMember_SP2 List ReadOnly DC http://support.microsoft.com/kb/944043 Rollup Description of the Windows Server 2008 read-only domain controller compatibility pack for Windows Server 2003 clients and for Windows XP clients Includes : adsldp.dll,adsmsext.dll, dsuiext.dll,gptext.dll,localspl.dll, lsasrv.dll, Mmsv1_0.dll, netlogon.dll, ntdsa.dll, ntdsapi.dlll,policeman.dll, w32time.dll, w32tm.exe, wkssvc.dll 5-May-2008, dual mode (SP1,SP2) for WS03 clients and Win XP clients Crypt32 http://support.microsoft.com/kb/950474 Error message when you run the SharePoint Products and Technologies Configuration Wizard on a Windows Server 2003-based computer: "Application has generated an exception that could not be handled" 11-Apr-2008, dual mode (SP1,SP2) Userenv.dll http://support.microsoft.com/kb/958246 The logoff process may take a long time when a user makes a terminal session from a Windows Server 2003 terminal server in a trusted domain, and the terminal service roaming profiles are used 14-Oct-2008, dual mode (SP1, SP2) Page 17