Re: MS03-026 - are you patched? Windows Update isn't sure!
From: Floyd Russell (floyd_at_NEOSPIRE.NET)
Date: Wed, 30 Jul 2003 17:23:37 -0500 To: NTBUGTRAQ@LISTSERV.NTBUGTRAQ.COM
The following is another reason to not trust Windows Update.
Because under certain circumstances it doesn't report errors
associated with installing hotfixes. Case in point: MS03-026.
Here is the scenario:
Windows 2000 Server SP4
Downloaded MS03-026 hotfix for installation. Attempted to
run the hotfix. The following error is generated:
"Insufficient system resources to start the requested service."
I then attempted to use Windows Update. Selected the patch,
it installed and said success. I scanned the server after
the reboot and the patch HAD NOT been installed.
I contact PSS and found out, through a very long call,
that the registry size limit had been met - which prevented
the hotfix from installing. After increasing the limit the
hotfix installed properly.
So this is a specific case of Windows Update mis-stating
that the hotfix had indeed installed.
On a similar strand: Does anyone else find it irratating
that MS03-031 ( the latest SQL hotfix ) will state it
completed ok, only to find out in the log that only
the client tools/connectivity were updated because the
SQL Server wasn't at the correct SP level? I sure do. :)
Are You "Certifiable"? Summer's Hottest Certification Just Got HOTTER!
With a growth rate exceeding 110%, the TICSA security practitioner
certification is one of the hottest IT credentials available. And now, for
a limited time, you can save 33% off of the TICSA certification exam! To
learn more about the TICSA certification, and to register as a TICSA
candidate online, just go to