Win2k Vulnerability Hotfix Issues

From: Jason M. Jaszewski (jmjaszew@facstaff.wisc.edu)
Date: 10/24/01 

From: "Jason M. Jaszewski" <jmjaszew@facstaff.wisc.edu>
To: <focus-ms@securityfocus.com>
Subject: Win2k Vulnerability Hotfix Issues
Date: Wed, 24 Oct 2001 00:34:25 -0500
Message-ID: <DMECICKLLPOFBHOIHLPNKENMCFAA.jmjaszew@facstaff.wisc.edu>

I upgraded Windows 2000 (SP2) clients with the newest Application
Compatibility Upgrade, and with 9 Hotfixes (namely those referenced in
articles Q252795, Q276471, Q285156, Q285851, Q296185, Q298012, Q299553,
Q299796, Q302755 of the MS Knowledge Base). I'm running a Windows NT 4.0
(SP6) domain, and after upgrading, users will log in and get what seems to
be an "infinite loop" of explorer.exe errors (when one gets canceled,
another pops up). Also, after uninstalling all of the hotfixes and the
compatibility upgrade, I'm still getting the same issues. These hotfixes
were done without any other changes made to the machines. I've found 2 ways
to eliminate this, either change every username to a completely different
name (i.e. instead of "smith," making it "asmith") or giving everyone Domain
Admin rights. Anyone know of an alternative to either of these changes?
Anyone seen this as well? Thanks!

Jason Jaszewski
jmjaszew@facstaff.wisc.edu