RE: IIS 5 Patches

From: Michael Laing (mdonlinelaing@microsoft.com)
Date: 07/18/02


From: mdonlinelaing@microsoft.com (Michael Laing)
Date: Thu, 18 Jul 2002 17:44:52 GMT


Hi Connie,

The IIS April Security Rollup is one of the most important packages to have
installed (if not the most important, some may argue). A quick and easy
way to check whether you have all available patches is to install and run
the Microsoft Baseline Security Analyzer. Not only will it check for
patches installed, it will also dynamically check for the most up-to-date
patches available from Microsoft, and will check for a multitude of other
security related settings and options. I recommend running this tool on a
regular basis, as it will do a check online every time you run in for newly
available downloads.

You can find out more about the MBSA here:

http://support.microsoft.com/default.aspx?scid=kb;EN-US;q320454

Thanks,

Michael Laing
Microsoft Developer Support
Internet Information Server

***********************
>>Please do not send email directly to this alias. This is an online
account name for newsgroup participation only.<<

This posting is provided "AS IS" with no warranties, and confers no rights.
You assume all risk for your use.
© 2002 Microsoft Corporation. All rights reserved.
***********************
--------------------
| Content-Class: urn:content-classes:message
| From: "Connie" <conniek@astound.net>
| Sender: "Connie" <conniek@astound.net>
| Subject: IIS 5 Patches
| Date: Thu, 18 Jul 2002 10:07:13 -0700
| Lines: 12
| Message-ID: <1762401c22e7d$8f5383c0$9ee62ecf@tkmsftngxa05>
| MIME-Version: 1.0
| Content-Type: text/plain;
| charset="iso-8859-1"
| Content-Transfer-Encoding: 7bit
| X-Newsreader: Microsoft CDO for Windows 2000
| X-MimeOLE: Produced By Microsoft MimeOLE V5.50.4910.0300
| Thread-Index: AcIufY9TGG/8kUpxRcieRozV2jnaew==
| Newsgroups: microsoft.public.inetserver.iis.security
| NNTP-Posting-Host: TKMSFTNGXA05 10.201.232.164
| Path: cpmsftngxa08!cpmsftngxa07
| Xref: cpmsftngxa08 microsoft.public.inetserver.iis.security:8529
| X-Tomcat-NG: microsoft.public.inetserver.iis.security
|
| I'm in the planning stages of setting up an intranet for
| our company, and am wondering if I have all the patches
| covered for securing IIS 5. I'm using a Win 2000 Pro
| machine,SP2 and I will be converting from FAT to NTFS
| first thing.
|
| My most current patch is from June '02 and I have the
| April '02 cumulative patch for IIS installed also along
| with 8 other misc. win2000 patches.
|
| Have I missed any critical patches?
| thanks!
|



Relevant Pages

  • Re: << Small Biz Server news the week of May 2, 2004>>
    ... I would like to personally ask all IIS administrators to ... >take the time to test and install MS04-011. ... The security package Microsoft Unified Security Protocol ...
    (microsoft.public.windows.server.sbs)
  • Re: Sun Solaris login bug patches out
    ... >> A UNIX box with a high uptime is indicative of that box not being ... >> maintained with the latest security patches. ... > At work we only had to install the patch onto one Solaris 8 machine. ...
    (Focus-SUN)
  • Re: IE patches killed internet connection
    ... If you have Microsoft Update (vs. Windows Update) installed, a shortcut to it will be found in the Start menu. ... I attempted to install 3 of those 4 patches, ... Later, Auto Update reoffered the security update, but I ...
    (microsoft.public.windows.inetexplorer.ie6.browser)
  • Re: Search Options from Search Explorer Bar in IE6 Missing on Win2
    ... I could't find any security update info sheets mentioning Ie search so it ... and then click Install. ... patches that I did choose to download and install, ... do tell about this "IE7 ...
    (microsoft.public.windows.inetexplorer.ie6.setup)
  • Windows XP/2000/2003 users protect yourself.
    ... Checklist for Securing a Windows XP IIS 5.1 Webserver ... install it as an optiontal extra. ... Regardless of the mechanism a hacker uses to break into your machine, ... This tool logs Application, System, and Security Events. ...
    (microsoft.public.windowsxp.security_admin)

Loading