Descriptif des prestations

Transcription

Descriptif des prestations
Liste de recommandations de correctifs par type de
serveur
mercredi 3 février 2010
Version 1.1
Auteurs
Support Premier
Toute utilisation ou reproduction intégrale ou partielle du présent document sans le consentement de la société
MICROSOFT est illicite. Cette représentation ou reproduction par quelque procédé que ce soit constituerait une
contrefaçon sanctionnée par les dispositions des articles L.335-1 et suivants du Code de la Propriété Intellectuelle
et, de manière générale, une atteinte aux droits de la société Microsoft.
Les descriptions des produits des autres sociétés figurant dans ce document, le cas échéant, sont fournies à titre
informatif uniquement. Toutes références à ces produits ne sauraient être considérées comme une assistance de la
part de Microsoft. Microsoft ne peut en garantir leur exactitude, et les produits pourront changer au fil du temps.
Par ailleurs, les descriptions sont conçues comme de brèves présentations permettant de faciliter la
compréhension, plutôt que comme des présentations exhaustives. Pour obtenir les descriptions officielles de ces
produits, veuillez vous mettre en relation avec les fabricants respectifs de ces produits.
Les noms des sociétés et des produits effectivement mentionnés dans les présentes peuvent être les marques de
leurs titulaires respectifs.
Microsoft et Windows sont soit des marques déposées soit des marques de Microsoft Corporation aux Etats-Unis
et/ou dans d’autres pays.
©2007 Microsoft Corporation. Tous droits réservés.
Page ii
Sommaire
INTRODUCTION.............................................................................................................................................. 2
1.
Généralités .............................................................................................................................................. 3
2.
Listes de correctifs par rôles ................................................................................................................. 4
2.1.
2.1.1.
2.1.2.
2.1.3.
2.1.4.
2.1.5.
2.1.6.
2.1.7.
2.1.8.
2.1.9.
2.1.10.
2.1.11.
2.1.12.
2.1.13.
2.2.
2.2.1.
2.2.2.
2.2.3.
2.3.
2.3.1.
2.3.2.
2.3.3.
2.4.
2.4.1.
2.4.2.
2.4.3.
2.5.
2.5.1.
2.5.2.
2.5.3.
2.5.4.
2.5.5.
2.5.6.
Windows Server 2003 SP2 RFL .................................................................................................. 4
P0 – SERVER Core OS ( BASE & STORAGE & FILE SYSTEM ) .......................................... 4
P0 – SERVER NETWORKING ................................................................................................ 4
P0 - SERVER_DOMAIN_MEMBER ......................................................................................... 5
P0 – OTHER ............................................................................................................................ 6
P1 – SERVER Core OS (BASE & STORAGE & FILE SYSTEM) ............................................ 6
P1 – SERVER NETWORKING ................................................................................................ 7
P1 DomainMember_SP2 List ................................................................................................... 8
P1- OTHER .............................................................................................................................. 8
P2 – CORE OS ........................................................................................................................ 9
P2 – SERVER NETWORKING ................................................................................................ 9
P2 DomainMember_SP2 List ................................................................................................... 9
P2- OTHER ............................................................................................................................10
ROLLUPS ...............................................................................................................................10
Windows Server 2003 SP2 PRINT SERVER ............................................................................ 11
P0 PrintServer_SP2 List ........................................................................................................11
P1 PrintServer_SP2 List ........................................................................................................11
P2 PrintServer_SP2 List ........................................................................................................12
Windows Server 2003 SP2 Terminal Server ............................................................................. 12
P0 TerminalServer_SP2 List ..................................................................................................12
P1 TerminalServer_SP2 List ..................................................................................................12
P2 TerminalServer_SP2 List ..................................................................................................13
Windows Server 2003 SP2 Cluster ............................................................................................ 13
ClusterServer_SP2_P0 List ..................................................................................................13
P1 ClusterServer SP2 List .....................................................................................................14
P2 ClusterServer SP2 List .....................................................................................................14
Windows Server 2003 SP2 DOMAINS ...................................................................................... 14
P0 DomainController_SP2 List ..............................................................................................15
P1 DomainController_SP2 List ..............................................................................................15
P2 DomainController_SP2 List ..............................................................................................16
P0 – DomainMember_SP2 List ..............................................................................................16
P1 DomainMember_SP2 List .................................................................................................17
P2 DomainMember_SP2 List .................................................................................................17
Page 1
INTRODUCTION
Le présent document a pour objectif de répondre à l’interrogation de nos clients qui viennent d’installer un
serveur Windows 2003 SP2 et qui souhaitent connaître les recommandations du support Microsoft quand à
l’installation des correctifs POST-SP2, et ce dans le but d’éviter les problèmes connus les plus critiques et/ou
les plus impactant.
Le document fourni donc une liste de correctifs recommandés sur Windows et par rôle.
La liste est divisée en 3 parties:

Correctifs P0: Ce sont les correctifs essentiels. Ils résolvent des problèmes de type Corruption
(mémoire et/ou disque), Perte de Données, Indisponibilité de serveurs.

Correctifs P1: Ce sont les correctifs importants à avoir. Ils sont déclinés par rôles de serveurs
(Fichiers, TS, Cluster, etc.), ils corrigent des problèmes de Performance et/ou ont résolu des incidents
en Sévérité A.

Correctifs P2: Ce sont les correctifs utiles à avoir. Ce sont les correctifs qui introduisent de nouvelles
fonctionnalités, ou qui ont été téléchargés un grand nombre de fois.

En rouge sont notés les correctifs nouvellement recommandés.
Qui et comment est générée cette liste ?

Par les équipes de Support Microsoft.

Les correctifs sont proposés par les ingénieurs du support en fonction des dossiers qu’ils résolvent.

Puis ces propositions sont revues par les ingénieurs CPR (Ingénieurs d’Escalade) afin de décider de
leur intégration ou non dans la liste.
Enfin, pour les correctifs P0, la liste est revue par les équipes de Développement aux US pour validation
finale.
A savoir :

Cette liste est revue tous les 3 à 4 mois.

Les correctifs intégrés à la liste sont disponibles depuis au moins 3 mois afin d’avoir un minimum de
recul sur la fiabilité du correctif (effets de bord, régression).

Bien qu’ayant un minimum de recul, nous ne pouvons garantir que les correctifs n’auront aucun effet
de bord ou qu’aucune régression ne sera introduite par leur intermédiaire. Les phases de tests et
validations sont donc indispensables et le support reste mobilisé.

Ce projet est mené conjointement par Microsoft EMEA (Allemagne, Angleterre et France) ainsi
qu’avec les équipes de Développement aux US.

Windows 2003 SP2 est le seul produit sur lesquels ces recommandations existent pour le moment.
Page 2
1. GENERALITES
La RFL (Reference Fix List) est composée de plusieurs listes, par rôle serveur :

La liste « SERVER RFL » qui est à utiliser sur tous les serveurs (ce qui correspond
actuellement à un rôle FILESERVER)

Plusieurs listes de « SERVER ROLE RFL ». Actuellement :


CLUSTERSERVER

PRINTSERVER

TERMINALSERVER

DOMAINS (DOMAIN_CONTROLLER et DOMAIN_MEMBER)
La liste générale « SERVER RFL » contient les sous-listes suivantes :

CORE OS

STORAGE & FILE SYSTEM

NETWORK

DOMAIN MEMBER
Utilisation : pour un serveur spécifique, la RFL doit être concaténé par rôles serveurs :

Pour un cluster : SERVER RFL & CLUSTERSERVER RFL

Pour un serveur d’impression : SERVER RFL & CLUSTERSERVER RFL &
PRINTSERVER RFL
A savoir : La liste fournie est une liste de recommandations. Il convient de valider les
correctifs en fonction de l’environnement client. Par exemple, la liste contient un correctif sur
StorPort.sys ; mais si ce driver n’est pas utilisé dans votre environnement, alors il n’est pas à
installer. Même chose par exemple pour un correctif concernant les services Terminal
Server : si vous n’utilisez pas TS sur le serveur alors il n’est pas nécessaire de l’installer.
Conclusion : il se peut que certains correctifs de la liste ne soient pas à installer dans votre
environnement si le service, driver ou autre n’est pas utilisé. En cas de doute, contacter le
support Microsoft.
Page 3
2. LISTES DE CORRECTIFS PAR RÔLES
2.1. Windows Server 2003 SP2 RFL
2.1.1. P0 – SERVER Core OS ( BASE & STORAGE & FILE SYSTEM )
Kernel
http://support.microsoft.com/kb/978243
A terminal server that is running Windows Server 2003 Service Pack 2 restarts unexpectedly
with various stop codes after you install hotfix 971280 or newer Windows Kernel Binaries
10-Dec-2009 dual mode (SP1,SP2) includes hal.dll for x64, ntdll.dll for Itanium
Win32k,gdi32 http://support.microsoft.com/kb/960228
You receive a Stop error when you click the arrow to scroll down an application pop-up menu
on a Windows Server 2003 SP1 or SP2-based computer
21-Nov-2008, dual mode (SP1, SP2), WS03 all platforms
Ntfs
http://support.microsoft.com/kb/959608
Error message when you run the Chkdsk.exe utility to fix a corrupted volume on a Windows
Server 2003-based computer: "Stop 0x00000024"
13-Nov-2008, (dual mode (SP1, SP2)
Storport : check with SAN provider OEM in order to use the latest storport validated by the OEM
Storport
http://support.microsoft.com/kb/950903
The system may not detect that a logical unit was replaced on a Windows Server 2003-based
computer
04-Sep-2008, dual mode (SP1, SP2), includes diskdump.sys – check with OEM
NB. This storport.sys version was built for HP, for other OEMs check their validation
list.
On HP ProLiant Server platform please check for:
 latest hpcisss2 .sys (as of today : version 6.14.0.32/64 from 7-Jan-2009)
 latest E200/E200i firmware (as of today : rev. 1.82, from 17-Apr-2009)
HP Server
http://support.microsoft.com/kb/940015
hpcisss2.sys You receive a Stop error message after you install update 932755 or 941276 on an HP
ProLiant server that is running Storport in Windows Server 2003
Ref HP: hpcisss2.sys, build date 7-Jan-2009, version 6.14.0.32/64
HP Server
E200/E200i
http://support.microsoft.com/kb/969550
Stop error messages after Memory Corruption on several HP ProLiant servers, firmware due
to a problem with firmware of E200/E200i (HP Smart Array SAS/SATA Controller)
Ref HP : E200/E200i firmware rev. 1.82, 17-Apr-2009
2.1.2. P0 – SERVER NETWORKING
Page 4
WS03 SP2 enables the Scalable Network Pack (SNP), by default. We have seen unexpected side effects due
to this setting, therefore we suggest to disable SNP immediately after upgrading to SP2, and enable it at a
later tim, if required. When re-enabling SNP, tcpip should be at least at KB 950224 level (10-Jul-2008). All
previous tcpip versions should be used without enabling SNP.
Disable SNP
http://support.microsoft.com/kb/948496
An update to turn off default SNP features is available for Windows Server 2003- based and
Small Business Server 2003-based computers (after aplying KB 912222 on SP1, or after
upgrade to SP2)
05-Feb-2008, SP2 only, registry setting no tcpip.sys included
Tcpip
http://support.microsoft.com/kb/950224
A Scalable Networking Pack (SNP) hotfix rollup package is available for Windows Server
2003
10-Jul-2008, SP2 only, contains: netbt.sys, smb.sys
DNS all
http://support.microsoft.com/kb/962238
MS09-008 : Vulnerabilities in DNS and WINS Server could allow spoofing Includes :
afd.sys, dnsapi.dll, mswsock.dll, tcpip.sys, tcpip6.sys
16-Feb-2009, dual mode (SP1,SP2) W2K, WS08, WinXP
DNS client
http://support.microsoft.com/kb/951748
MS08-037 : Description of the security update for DNS in Windows Server 2008, in Windows
Server 2003, and in Windows 2000 Server (client-side): Jul 8, 2008 Includes : afd.sys,
dnsapi.dll, mswsock.dll, tcpip.sys, tcpip6.sys
20-Jun-2008, dual mode (SP1,SP2) W2K, WS08, WinXP
DNS server
http://support.microsoft.com/kb/951746
MS08-037: Description of the security update for DNS in Windows Server 2008, in Windows
Server 2003, and in Windows 2000 Server (DNS server-side) Jul 8, 2008 Includes : afd.sys,
dns.exe, dnsperf.dll, mswsock.dll, tcpip.sys, tcpip6.sys
20-Jun-2008, dual mode (SP1,SP2) W2K, WS08, WinXP
Dnsapi
http://support.microsoft.com/kb/945553
MS08-020: Vulnerability in DNS client could allow spoofing
18-19-Feb-2008, dual mode (SP1,SP2), includes dnsrslvr.dll
2.1.3. P0 - SERVER_DOMAIN_MEMBER
Kerberos
http://support.microsoft.com/kb/940925
A Windows Server 2003-based domain controller restarts unexpectedly after you install
hotfix 918442 or Windows Server 2003 Service Pack 2
27-Sep-2007, dual mode (SP1, SP2)
Lsasrv
http://support.microsoft.com/kb/955575
The InitializeSecurityContext function fails with a status of
"STATUS_INSUFFICIENT_RESOURCES (0xC000009A)" when the token size of a security
principal is greater than 20,000 bytes in Windows Server 2003
18-Jul-2008, dual mode (SP1, SP2)
http://support.microsoft.com/kb/939268
Msv1_0.dll
Page 5
A Windows Server 2003 Service Pack 1 or Service Pack 2-based computer seems to stop
responding when the Lsass.exe process consumes lots of memory and uses 100% of the
CPU
1-May-2007, dual mode (SP1,SP2)
2.1.4. P0 – OTHER
Mfc42u.dll
http://support.microsoft.com/kb/924667
MS07-012: Vulnerability in Microsoft Foundation Classes could allow for remote code
execution
dual mode (SP1,SP2) , date 01-May-2007
2.1.5. P1 – SERVER Core OS (BASE & STORAGE & FILE SYSTEM)
Hal.dll
x86,x64
http://support.microsoft.com/kb/954429
A multiprocessor computer that is running Windows Server 2003, Windows Vista, or Windows
Server 2008 stops responding on a black screen after you resume the computer from
hibernation
10-Jul-2008, dual mode (SP1,SP2), WS03 & Win XP and WS08 & VISTA
Hal.dll
ia64
http://support.microsoft.com/kb/955516
A computer that is running an Itanium-based version of Windows Server 2003 SP1 or SP2
stops responding during startup while a local machine check event occurs in the bootstrap
processor
11-Jul-2008, dual mode (SP1,SP2), WS03 ia64 only
Mountmgr.sys http://support.microsoft.com/kb/940307
“A Microsoft Windows Server 2003-based computer may stop responding if an application
frequently uses the mount manager to query volume information”
20-Jul-2007, dual mode (SP1,SP2), mandatory for SP1
Disk.sys
http://support.microsoft.com/kb/929161
“You receive a Stop error message on a Windows Server 2003 SP1-based computer when a
device is suddenly disconnected from a host bus adapter”
16-Jan-2007, dual mode (SP1,SP2)
ScsiPort.sys
http://support.microsoft.com/kb/934848
“If you load the Intel iSCSI Setup driver for an iSCSI disk during Windows Server 2003
installation, the installation program reports that no disk is detected, and the installation
process fails”
2-Jul-2007, dual mode (SP1, SP2)
Dmadmin.exe http://support.microsoft.com/kb/957271
“The Logical Disk Manager Administrative Service process may stop unexpectedly on a
Windows Server 2003-based computer”
15-Dec-2008, dual mode (SP1,SP2) all platforms
Vds.exe
http://support.microsoft.com/kb/960831
Page 6
“Drivers or hardware providers that use the Virtual Disk Service to manage hardware LUN IDs
encounter exceptions after a disk is physically removed from a computer that is running
Windows Server 2003 “
Contains : vdsbas.dll, vdsdyndr.dll, vdsldr.exe, vdsutil.exe
12-Nov-2008 dual mode (SP1,SP2)
2.1.6. P1 – SERVER NETWORKING
Afd.sys
(DNS all)
http://support.microsoft.com/kb/962238
MS09-008: Vulnerabilities in DNS and WINS Server could allow spoofing
Includes : afd.sys, dns.exe, dnsapi.dll, mswsock.dll, tcpip.sys, tcpip6.sys
16-Feb-2009, dual mode (SP1,SP2) W2K, WS08, WinXP
Netbt.sys
http://support.microsoft.com/kb/955860
High CPU usage occurs for six seconds on a Windows Server 2003-based computer that has
multiple network adapters
18-Aug-2008, dual mode (SP1, SP2)
Rpcrt4.dll
http://support.microsoft.com/kb/952145
An application exits unexpectedly when an application that uses remote procedure call (RPC)
runtime tries to enter a critical section on a Window Server 2003-based computer
15-May-2008, dual mode (SP1,SP2)
Rdbss.sys
http://support.microsoft.com/kb/952185
A Windows Server 2003-based computer restarts unexpectedly, and a Stop error
"0x00000027" occurs
25-Apr-2008, dual mode (SP1,SP2)
Mrxsmb.sys
http://support.microsoft.com/kb/960882
Error message when a Windows Server 2003-based computer is shutting down: "Stop
0x000000CE" or "Stop 0x00000050"
07-Jan-2009, dual mode (SP1, SP2)
Srv.sys
http://support.microsoft.com/kb/958687
MS09-001: Vulnerabilities in SMB could allow remote code execution
11-Dec-2008, dual mode (SP1,SP2)
Srv.sys
1
1
http://support.microsoft.com/kb/955157
Error message when you try to delete an empty folder on a network share that is hosted on a
Windows Server 2003-based server or on a Windows XP Professional x64 Edition-based
server: "Cannot delete <DIRECTORY>"
22-Jul-2008, dual mode (SP1,SP2)
Les 2 correctifs pour srv.sys sont à installer.
Page 7
Dfssvc.exe
http://support.microsoft.com/kb/945050
The private bytes that the DFS service consumes continue to increase on a Windows Server
2003-based domain controller that hosts the PDC emulator role
11-Dec-2007 dual mode (SP1,SP2)
Dfs
http://support.microsoft.com/kb/938666
Event ID 2019 is logged in the System log when a DFS domain root server stops responding
on a Windows Server 2003-based server
19-Jun-2007, dual mode (SP1,SP2), includes dfs.sys
2.1.7. P1 DomainMember_SP2 List
Netlogon
http://support.microsoft.com/kb/947861
Authentication of trusted users fails on a Windows Server 2003-based server if the UPN
format is used and if the value of the LmCompatibilityLevel entry is equal to or larger than 3
24-Mar-2008, dual mode (SP1, SP2)
Dfsr.exe
http://support.microsoft.com/kb/958876
When you try to update a file that has a newer version on a Windows Server 2003 R2-based
DFSR server, the operation fails, the original file is deleted from the replication partners, and
event 4412 and event 4502 are logged
31-Oct-2008, dual mode (SP1,SP2), requires ntfs.sys post 7-Nov-2007
Quota.sys
(for Dfsr)
http://support.microsoft.com/kb/954968
Subfolder file content on an upstream member does not match subfolder file content on
downstream members in a DFSR configuration in Windows Server 2003 R2
10-Nov-2008, dual mode (SP1,SP2), ( x86, x64) only, no ia64
2.1.8. P1- OTHER
Comsvcs
http://support.microsoft.com/kb/965230
FIX: The COM+ Event System does not deliver timely or reliable statistics to subscribers of
the IComTrackingInfoEvents event interface in Windows Server 2003
30-Jan-2008, dual mode (SP1,SP2)
Browser
http://support.microsoft.com/kb/932762
The Service Host process may stop unexpectedly in Windows Server 2003
15-Mar-2007, dual mode (SP1,SP2)
WMI
http://support.microsoft.com/kb/933061
An update is available that improves the stability of the Windows Management
Instrumentation repository in Windows Server 2003
15-May-2007, dual mode (SP1,SP2), contains repdrvfs.dll
All Security Updates available from Windows Update
Page 8
2.1.9. P2 – CORE OS
Volsnap.sys
http://support.microsoft.com/kb/967327
Shadow copies that you create in Windows Server 2008 cannot be detected in Windows
Server 2003
23-Feb-2009, dual mode (SP1,SP2), for SP2 contains volsnap.sys only
Dmio.sys
http://support.microsoft.com/kb/955543
All snapshots may be deleted unexpectedly in Windows Server 2003 and in Windows XP
Professional x64 Edition when the snapshot protection mode is enabled, and the system is
under memory stress
08-Jan--2009, dual mode (SP1,SP2), for SP2 contains dmio.sys only
VSSvc.exe
Swprv.dll
http://support.microsoft.com/kb/957778
VSS requestor instances fail when you start multiple VSS requestor instances with a VSS
hardware provider to delete snapshots in Windows Server 2003
15-Sep--2008, dual mode (SP1,SP2) contains : eventcls.dll, ftdisk.sys, partmgr.sys,
swprv.dll, volsnap.sys, vssadmin.exe, vssapi.dll, vssui.dl,l vssvc.exe, vss_ps.dll
VSSapi.dll
http://support.microsoft.com/kb/952826
When you call the "IVssBackupComponents::SetFileRestoreStatus" method by specifying the
value of the status parameter as VSS_RS_FAILED, the restore status is set incorrectly on a
computer that is running Windows Server 2003
6-Jun-2008, dual mode (SP1,SP2)
2.1.10. P2 – SERVER NETWORKING
Rdbss.sys
http://support.microsoft.com/kb/960092
A Windows Server 2003-based terminal server that also runs Citrix MetaFrame Presentation
Server may stop responding every few days, and you may receive a gray screen when you
log on to the terminal server
20--Nov-2008, dual mode (SP1,SP2), P2 for TS too
2.1.11. P2 DomainMember_SP2 List
ReadOnly DC http://support.microsoft.com/kb/944043
Rollup
Description of the Windows Server 2008 read-only domain controller compatibility pack for
Windows Server 2003 clients and for Windows XP clients
Includes : adsldp.dll,adsmsext.dll, dsuiext.dll,gptext.dll,localspl.dll, lsasrv.dll, Mmsv1_0.dll,
netlogon.dll, ntdsa.dll, ntdsapi.dlll,policeman.dll, w32time.dll, w32tm.exe, wkssvc.dll
5-May-2008, dual mode (SP1,SP2) for WS03 clients and Win XP clients
Crypt32
http://support.microsoft.com/kb/950474
Error message when you run the SharePoint Products and Technologies Configuration
Wizard on a Windows Server 2003-based computer: "Application has generated an exception
that could not be handled"
11-Apr-2008, dual mode (SP1,SP2)
Page 9
Userenv.dll
http://support.microsoft.com/kb/958246
The logoff process may take a long time when a user makes a terminal session from a
Windows Server 2003 terminal server in a trusted domain, and the terminal service roaming
profiles are used
14-Oct-2008, dual mode (SP1, SP2)
2.1.12. P2- OTHER
Local security http://support.microsoft.com/kb/902069
policy
You may receive a "Stop 0x0000000A" error message when you shut down or restart a
computer that is running Windows Server 2003
30-Oct-2006,stop 0x0A if local policy Shutdown : Clear Virtual Memory Pagefile local policy is
enabled, x86 only
2.1.13. ROLLUPS
VSS Rollups
For VSS rollups see also per component fixes (volsnap.sys, vssvc.exe, vssapi.dll, etc…)*
under “P2 - CORE OS” (these fixes are “partial rollups”)
VSS rollup
10 files
http://support.microsoft.com/kb/943669
“When you try to restart a Windows Server 2003 R2-based computer that has both VSS and
the FSRM quota enabled, the computer stops responding”
16-Oct-2007, dual mode (SP1,SP2), x86 & x64 only (no ia64)
COM+ , MSDTC rollups
COM+ rollup
http://support.microsoft.com/kb/934016
“Availability of Windows Server 2003 Post-Service Pack 2 COM+ 1.5 Hotfix Rollup Package
12”
23-Mar-2007, dual mode (SP1,SP2)
MSDTC rollup http://support.microsoft.com/kb/952943
“List of the MS DTC bugs that are fixed in Windows Server 2003 MS DTC Hotfix Rollup
Package 14”
13-May-2008, dual mode (SP1,SP2)
All Security Updates available from Windows Update
Page 10
2.2. Windows Server 2003 SP2 PRINT SERVER
2.2.1. P0 PrintServer_SP2 List
Win32k,gdi32 http://support.microsoft.com/kb/958690
MS09-006: Vulnerabilities in Windows Kernel could allow remote code execution
09-Feb-2009, dual mode (SP1, SP2), WS03 all platforms
2
Win32k,gdi32 http://support.microsoft.com/kb/960228
You receive a Stop error when you click the arrow to scroll down an application pop-up menu
on a Windows Server 2003 SP1 or SP2-based computer
Win32k.sys (ver. 5.2.3790.4415, 21-Nov-2008), dual mode (SP1, SP2), Gdi32.dll (ver.
5.2.3790.3091,21-Nov-2008), all platforms
2.2.2. P1 PrintServer_SP2 List
Localspl.dll
http://support.microsoft.com/kb/955455
The print process crashes under heavy stress on a computer that is running Windows Server
2003 or Windows XP Professional x64 Edition if the computer uses hyper-threading
technology
17-Jul-2008, dual mode (SP1, SP2) all platforms
Win32spl.dll
http://support.microsoft.com/kb/953546
The Print Spooler process (Spoolsv.exe) crashes while it is copying print driver files on a
computer that is running Windows Server 2003 or Windows XP
27-May-2008 dual mode (SP1,SP2) all platforms
If .Net Framework 3.5 SP1 is not installed:
Unidrv.dll
http://support.microsoft.com/kb/957187
Stop error if you use some OpenType fonts on a computer that is running Windows Server
2003, Windows Vista, or Windows Server 2008: "Stop 0x00000050"
01-Sep-2008, SP2 only
If .Net Framework 3.5 SP1 including XPS Essential Pack is installed:
Unidrv.dll
http://support.microsoft.com/kb/961118
All the PCL inbox printer drivers become unsigned after you install the Microsoft .NET
Framework 3.5 Service Pack 1 Contains : Ntprint.cat required to sign drivers coming from
XPS Essential Pack
01-Sep-2008, dual mode (SP1, SP2)
2
Les 2 correctifs pour Win32k et gdi32 sont à installer.
Page 11
2.2.3. P2 PrintServer_SP2 List
tcpmib
http://support.microsoft.com/kb/946198
The print queue status is displayed as "Offline" on a Windows Server 2003-based print server
if SNMP is enabled and if the printer devices do not respond to SNMP commands
31-Oct-2007, dual mode (SP1,SP2)
2.3. Windows Server 2003 SP2 Terminal Server
2.3.1. P0 TerminalServer_SP2 List
Win32k,gdi32 http://support.microsoft.com/kb/958690
MS09-006: Vulnerabilities in Windows Kernel could allow remote code execution
09-Feb-2009, dual mode (SP1, SP2), WS03 all platforms
3
Win32k,gdi32 http://support.microsoft.com/kb/960228
You receive a Stop error when you click the arrow to scroll down an application pop-up menu
on a Windows Server 2003 SP1 or SP2-based computer
Win32k.sys (ver. 5.2.3790.4415, 21-Nov-2008), dual mode (SP1, SP2), Gdi32.dll (ver.
5.2.3790.3091,21-Nov-2008), all platforms
Termdd.sys
http://support.microsoft.com/kb/956438
A Windows Server 2003-based or Windows Server 2008-based terminal server stops
accepting new connections, and existing connections stop responding
02-Feb-2009, dual mode (SP1, SP2)
Termsrv.dll
Imagehlp.dll
http://support.microsoft.com/kb/958476
RDP clients and ICA clients cannot connect to a Windows Server 2003-based terminal server
after hotfix 938759 is applied to the server
19-Nov-2008, dual mode (SP1,SP2)
Winsrv.dll
http://support.microsoft.com/kb/948928
Stop error message when multiple console applications are opened and closed within a short
time frame on a Windows Server 2003-based computer: 0x000000F4”
22-Feb-2008, dual mode (SP1, SP2)
2.3.2. P1 TerminalServer_SP2 List
Netbt.sys
3
http://support.microsoft.com/kb/961799
A Stop error occurs on a Windows Server 2003-based server when a user accesses shared
files on the server by using an SMB connection
27-Jan-2009, SP2 only
Les 2 correctifs pour Win32k et gdi32 sont à installer.
Page 12
Winlogon.exe
Win32k.sys
Gdi32.dll
Licdll.dll
http://support.microsoft.com/kb/946633
The "Font smoothing" feature has no effect in Windows Server 2003 terminal
sessions
Contains : win32k.sys, gdi32.dll, licdll.dll 22-Apr-2008, dual mode (SP1, SP2), post MS08025 19-Mar-2008
2.3.3. P2 TerminalServer_SP2 List
Userenv.dll
http://support.microsoft.com/kb/958246
The logoff process may take a long time when a user makes a terminal session from a
Windows Server 2003 terminal server in a trusted domain, and the terminal service roaming
profiles are used
14-Oct-2008, dual mode (SP1, SP2)
Rdbss.sys
http://support.microsoft.com/kb/960092
A Windows Server 2003-based terminal server that also runs Citrix MetaFrame Presentation
Server may stop responding every few days, and you may receive a gray screen when you
log on to the terminal server
20-Nov-2008, dual mode (SP1,SP2)
Winsrv.dll
http://support.microsoft.com/kb/960028
The DB2.exe Command Prompt window may hang in Windows Server 2003 when you run a
batch file to execute DB2-related tasks
14-Nov-2008, SP2 only
2.4. Windows Server 2003 SP2 Cluster
See also:
http://support.microsoft.com/kb/935640 – “Recommended hotfixes for Windows Server 2003 Service Pack
2- based server clusters”
2.4.1. ClusterServer_SP2_P0 List
Clusdisk.sys
http://support.microsoft.com/kb/957419
SCSI hardware-mirrored disks may be corrupted on a Windows Server 2003- based cluster
node
02-Sep-2008, dual mode (SP1,SP2)
Clusres.dll
Clusdisk.sys
http://support.microsoft.com/kb/944971
A Cluster node may lose an MNS quorum, and the Cluster service may stop on a Windows
Server 2003, Enterprise Edition-based computer, includes KB 943809
12/13-Nov-2007, dual mode (SP1,SP2)
Resrcmon.exe http://support.microsoft.com/kb/948701
The Resource Monitor may crash on a Windows Server 2003-based cluster node that has
Windows Server 2003 SP2 or hotfix 921181 installed
10-Mar-2008, dual mode (SP1,SP2)
Page 13
2.4.2. P1 ClusterServer SP2 List
Dfssvc.exe
http://support.microsoft.com/kb/945050
The private bytes that the DFS service consumes continue to increase on a Windows Server
2003-based domain controller that hosts the PDC emulator role
11-Dec-2007 dual mode (SP1,SP2)
Dfs.sys
http://support.microsoft.com/kb/938666
Event ID 2019 is logged in the System log when a DFS domain root server stops responding
on a Windows Server 2003-based server
19-Jun-2007, dual mode (SP1,SP2)
Localspl.dll
http://support.microsoft.com/kb/955455
The print process crashes under heavy stress on a computer that is running Windows Server
2003 or Windows XP Professional x64 Edition if the computer uses hyper-threading
technology
17-Jul-2008, dual mode (SP1, SP2) all platforms
2.4.3. P2 ClusterServer SP2 List
Use this list together with P2 SERVER_SP2 RFL (hotfixes for general use, on all Servers)
Rollup Cluster http://support.microsoft.com/kb/919117
A hotfix is available that adds support for GUID partition table (GPT) volumes that are larger
than 2 terabytes on a Windows Server 2003-based server cluster
2-Feb-2007 dual mode (SP1,SP2), rollup support GPT partitions
Local security http://support.microsoft.com/kb/902069
policy
You may receive a "Stop 0x0000000A" error message when you shut down or restart a
computer that is running Windows Server 2003
30-Oct-2006,stop 0x0A if local policy Shutdown : Clear Virtual Memory Pagefile local policy is
enabled, x86 only
2.5. Windows Server 2003 SP2 DOMAINS
The DOMAINS list is composed of two lists :
-
the Domain Controller list contains fixes for Domain Controllers
the Domain Member list contains fixes for servers which are members in a domain
Normally, the Domain Member list is a sub-list of the Domain Controllers list.
Page 14
2.5.1. P0 DomainController_SP2 List
Kerberos.dll
http://support.microsoft.com/kb/940925
A Windows Server 2003-based domain controller restarts unexpectedly after you install hotfix
918442 or Windows Server 2003 Service Pack 2
27-Sep-2007, dual mode (SP1, SP2)
Lsasrv.dll
http://support.microsoft.com/kb/955575
The InitializeSecurityContext function fails with a status of
"STATUS_INSUFFICIENT_RESOURCES (0xC000009A)" when the token size of a security
principal is greater than 20,000 bytes in Windows Server 2003
18-Jul-2008, dual mode (SP1, SP2)
Msv1_0.dll
http://support.microsoft.com/kb/939268
A Windows Server 2003 Service Pack 1 or Service Pack 2-based computer seems to stop
responding when the Lsass.exe process consumes lots of memory and uses 100% of the
CPU
16-Oct--2007, dual mode (SP1,SP2)
Ntdsa.dll
http://support.microsoft.com/kb/953235
MS08-035: Vulnerability in Active Directory could allow denial of service
05-May-2008, dual mode (SP1,SP2)
Ntdsa.dll
4
Ntdsutil.exe
http://support.microsoft.com/kb/948925
Event IDs 1173 and 1925 are logged after you perform an authoritative restore on a Windows
Server 2003-based domain controller to restore an application partition that was previously
deleted
14-Feb-2008, dual mode (SP1,SP2)
http://support.microsoft.com/kb/951320
The ntdsutil.exe utility in Windows Server 2003 writes out too many links to .ldf files during an
authoritative restore process
22-May-2008, dual mode (SP1,SP2)
2.5.2. P1 DomainController_SP2 List
Netlogon.dll
http://support.microsoft.com/kb/947861
Authentication of trusted users fails on a Windows Server 2003-based server if the UPN
format is used and if the value of the LmCompatibilityLevel entry is equal to or larger than 3
24-Mar-2008, dual mode (SP1, SP2)
Kdcsvc.dll
http://support.microsoft.com/kb/955410
A memory leak occurs every time that you use a smart card to authenticate against a
Windows Server 2003-based domain controller
11-July-2008, dual mode (SP1,SP2)
4
Les 2 correctifs pour ntdsa.dll doivent être installés.
Page 15
Dfsr.exe
http://support.microsoft.com/kb/958876
When you try to update a file that has a newer version on a Windows Server 2003 R2-based
DFSR server, the operation fails, the original file is deleted from the replication partners, and
event 4412 and event 4502 are logged
31-Oct-2008, dual mode (SP1,SP2), requires ntfs.sys post 7-Nov-2007
Quota.sys
(for Dfsr)
http://support.microsoft.com/kb/954968
Subfolder file content on an upstream member does not match subfolder file content on
downstream members in a DFSR configuration in Windows Server 2003 R2
10-Nov-2008, dual mode (SP1,SP2), ( x86, x64) only, no ia64
2.5.3. P2 DomainController_SP2 List
Crypt32.dll
http://support.microsoft.com/kb/950474
Error message when you run the SharePoint Products and Technologies Configuration
Wizard on a Windows Server 2003-based computer: "Application has generated an exception
that could not be handled"
11-Apr-2008, dual mode (SP1,SP2)
Ntdsa.dll
Ntdsperf.dll
http://support.microsoft.com/kb/941084
When you use a WMI script to query the Win32_PerfFormattedData_NTDS_NTDS class on a
Windows Server 2003-based domain controller, the script returns a 0x80041010 error
08-Jul-2008, dual mode (SP1,SP2)
Ntfrs.exe
http://support.microsoft.com/kb/939667
On a Windows Server 2003-based domain controller, the "Authentications in Error"
performance counter of the FileReplicaSet performance object and of the FileReplicaConn
performance object display incorrect values
28-Jun-2007, dual mode (SP1,SP2)
Samsrv
http://support.microsoft.com/kb/958147
The Member ID field is logged incorrectly in the audit event on a Windows Server 2003
domain controller if you add a user of a different domain to a universal group
21-Oct-2008, dual mode (SP1,SP2), all platforms
Userenv.dll
http://support.microsoft.com/kb/958246
The logoff process may take a long time when a user makes a terminal session from a
Windows Server 2003 terminal server in a trusted domain, and the terminal service roaming
profiles are used
14-Oct-2008, dual mode (SP1, SP2)
2.5.4. P0 – DomainMember_SP2 List
Kerberos
http://support.microsoft.com/kb/940925
A Windows Server 2003-based domain controller restarts unexpectedly after you install hotfix
918442 or Windows Server 2003 Service Pack
27-Sep-2007, dual mode (SP1, SP2)
Page 16
Lsasrv
http://support.microsoft.com/kb/955575
The InitializeSecurityContext function fails with a status of
"STATUS_INSUFFICIENT_RESOURCES (0xC000009A)" when the token size of a security
principal is greater than 20,000 bytes in Windows Server 2003
18-Jul-2008, dual mode (SP1, SP2)
Msv1_0.dll
http://support.microsoft.com/kb/939268
A Windows Server 2003 Service Pack 1 or Service Pack 2-based computer seems to stop
responding when the Lsass.exe process consumes lots of memory and uses 100% of the
CPU
16-Oct--2007, dual mode (SP1,SP2)
2.5.5. P1 DomainMember_SP2 List
Netlogon
http://support.microsoft.com/kb/947861
Authentication of trusted users fails on a Windows Server 2003-based server if the UPN
format is used and if the value of the LmCompatibilityLevel entry is equal to or larger than 3
24-Mar-2008, dual mode (SP1, SP2)
Dfsr.exe
http://support.microsoft.com/kb/958876
When you try to update a file that has a newer version on a Windows Server 2003 R2-based
DFSR server, the operation fails, the original file is deleted from the replication partners, and
event 4412 and event 4502 are logged
31-Oct-2008, dual mode (SP1,SP2), requires ntfs.sys post 7-Nov-2007
Quota.sys
(for Dfsr)
http://support.microsoft.com/kb/954968
Subfolder file content on an upstream member does not match subfolder file content on
downstream members in a DFSR configuration in Windows Server 2003 R2
10-Nov-2008, dual mode (SP1,SP2), ( x86, x64) only, no ia64
2.5.6. P2 DomainMember_SP2 List
ReadOnly DC http://support.microsoft.com/kb/944043
Rollup
Description of the Windows Server 2008 read-only domain controller compatibility pack for
Windows Server 2003 clients and for Windows XP clients
Includes : adsldp.dll,adsmsext.dll, dsuiext.dll,gptext.dll,localspl.dll, lsasrv.dll, Mmsv1_0.dll,
netlogon.dll, ntdsa.dll, ntdsapi.dlll,policeman.dll, w32time.dll, w32tm.exe, wkssvc.dll
5-May-2008, dual mode (SP1,SP2) for WS03 clients and Win XP clients
Crypt32
http://support.microsoft.com/kb/950474
Error message when you run the SharePoint Products and Technologies Configuration
Wizard on a Windows Server 2003-based computer: "Application has generated an exception
that could not be handled"
11-Apr-2008, dual mode (SP1,SP2)
Userenv.dll
http://support.microsoft.com/kb/958246
The logoff process may take a long time when a user makes a terminal session from a
Windows Server 2003 terminal server in a trusted domain, and the terminal service roaming
profiles are used
14-Oct-2008, dual mode (SP1, SP2)
Page 17