RE: Win2k Vulnerability Hotfix Issues

From: Damien Adams (dadams@scientech.com)
Date: 10/25/01 

From: "Damien Adams" <dadams@scientech.com>
To: "'Jason M. Jaszewski'" <jmjaszew@facstaff.wisc.edu>, <focus-ms@securityfocus.com>
Subject: RE: Win2k Vulnerability Hotfix Issues
Date: Thu, 25 Oct 2001 12:04:06 -0400
Message-ID: <001601c15d6e$ad203780$84200a0a@lzv539>

I have had this problem when copying profiles on a Win2K box. If the new
user account doesnt have local admin rights on the box (may only need
poweruser rights), as soon as login takes place, exlporer.exe errors
repeatedly. It sounds like something is trying to install/change when they
login. If you cant leave them with local admin rights to the box, try
giving them the rights, logging them in so changes can take place, and then
logging them out and taking the local admin rights away?

-----Original Message-----
From: Jason M. Jaszewski [mailto:jmjaszew@facstaff.wisc.edu]
Sent: Wednesday, October 24, 2001 1:34 AM
To: focus-ms@securityfocus.com
Subject: Win2k Vulnerability Hotfix Issues

I upgraded Windows 2000 (SP2) clients with the newest Application
Compatibility Upgrade, and with 9 Hotfixes (namely those referenced in
articles Q252795, Q276471, Q285156, Q285851, Q296185, Q298012, Q299553,
Q299796, Q302755 of the MS Knowledge Base). I'm running a Windows NT 4.0
(SP6) domain, and after upgrading, users will log in and get
what seems to
be an "infinite loop" of explorer.exe errors (when one gets canceled,
another pops up). Also, after uninstalling all of the hotfixes and the
compatibility upgrade, I'm still getting the same issues. These hotfixes
were done without any other changes made to the machines. I've
found 2 ways
to eliminate this, either change every username to a completely
different
name (i.e. instead of "smith," making it "asmith") or giving
everyone Domain
Admin rights. Anyone know of an alternative to either of these changes?
Anyone seen this as well? Thanks!

Jason Jaszewski
jmjaszew@facstaff.wisc.edu