Warning: Systems with encrypted SAM may hang after removing Post- Windows NT 4.0 Service Pack 6a Security Rollup Package (SRP)

From: Kuster_G (Kuster_G@BLS.GOV)
Date: 08/22/01


Message-ID:  <200E2FA22B2AD2119AC000104B6A0A8603C3CB4B@PSBMAIL1>
Date:         Wed, 22 Aug 2001 11:10:35 -0400
From: Kuster_G <Kuster_G@BLS.GOV>
Subject:      Warning: Systems with encrypted SAM may hang after removing Post- Windows NT 4.0 Service Pack 6a Security Rollup Package (SRP)
To: NTBUGTRAQ@LISTSERV.NTBUGTRAQ.COM

If your system's SAM database is encrypted (syskey) and you apply the SRP
then remove it, your system may hang before receiving the log on prompt.
Microsoft was informed of the problem on 8/10/01 the current method to
prevent this from happening is to do the following:
Before uninstalling the SRP, edit the \winnt\$NtUninstallQ299444$\uninst.inf
file. Remove LSASRV.DLL and SAMSRV.DLL from the
[systemroot\system32.restore.nodely.files] section of that uninst.inf file:

============================================================================
Delivery co-sponsored by Trend Micro, Inc.
============================================================================
TREND MICRO SCANMAIL FOR EXCHANGE 2000 -- SECOND to NONE

If you are worried about email viruses, you need Trend Micro ScanMail for
Exchange. ScanMail is the first antivirus solution that seamlessly
integrates with the Microsoft Exchange 2000 virus-scanning API 2.0. ScanMail
ensures 100% inbound and outbound email virus scanning and provides remote
software management. Download a FREE 30-day trial copy of ScanMail and find
out why it is the best:
http://www.antivirus.com/banners/tracking.asp?si=8&BI;=240&UL;=/smex2000
============================================================================