RE: MS02-042 Patch on win2k pro kills capability to map to defaul t sh ares

From: Mitchel Chapman (mchapman@citadel.com)
Date: 08/26/02 

From: Mitchel Chapman <mchapman@citadel.com>
To: 'Jason Bramley' <jbramley@emarket2.com>, focus-ms@securityfocus.com
Date: Mon, 26 Aug 2002 14:25:33 -0500

The hotfix was installed to this machine using windows update. The only
other apps on the machine are backupexec 8.6 and etherpeek nx.

-----Original Message-----
From: Jason Bramley [mailto:jbramley@emarket2.com]
Sent: Friday, August 23, 2002 1:55 AM
To: focus-ms@securityfocus.com
Subject: Re: MS02-042 Patch on win2k pro kills capability to map to default
sh ares

Hi,

I tried browsing and mapping to \\machine\c$ from a XP Pro box to a 2k
Server (SP3 + patch), no problems found.

I also tried mapping & browsing from a 2k server to a 2k pro (both SP3 +
patch), no problems.

Browsing from a 2k pro (SP3 + patch) to 2k server (SP3 + patch) also works.

I can't find the problem you suggest, however my "Add/Remove Programs" all
display the typical "Windows 2000 Hotfix (Pre-SP4) [See Q326886 for more
details]" entry.

How did you deploy the hotfix?

Jason

At 08:25 PM 22/08/2002, Mitchel Chapman wrote:
>All,
>
>After recently installing ms02-042 patch from windows update to a
>win2kPro machine I was unable to map to any default shares on the
>system (c$,admin$). The message I received said "\\*******\c$ is not
>accessible. You might not have permission to use this network resource.
>Contact the administrator of this server to find out if you have access
>permissions. Not enough server storage is available to process this
>command."
>
>The machine has sp3 on it along with all other available patches. In
>the system event log the following error message is displayed: "The
>server's configuration parameter "irpstacksize" is too small for the
>server to use a local device. Please increase the value of this
>parameter."
>
>After searching on MS for that error I came up with
>http://support.microsoft.com/default.aspx?scid=kb;en-us;Q198386 which
>doesn't show to apply to win2k. Digging around more in the event log
>showed that the error begin occurring immediately after installing the
>ms02-042 patch and subsequently after each time I attempted to map to
>the default shares or tried to install a Hercules client to the machine
>(www.citadel.com/hercules.asp). In addition, the system event log
>showed "Windows XP Hotfix Q326886 was installed." This is obviously
>weird as the system the patch was installed to is win2kpro as I said
>previously.
>
>After uninstalling the patch original access was restored. Has anyone
>else experienced this behavior?
>
>Mitchel Chapman
>Network Security Engineer
>Citadel Security
>www.citadel.com
>mchapman@citadel.com

Relevant Pages