MS04-037 Causes Blue Screen on Boot NT4

From: cd (chad.duffey_at_eds.com)
Date: 10/29/04


Date: 28 Oct 2004 22:54:02 -0700

If you have an NT4 server that is failing to boot after applying the
MS04-037 security patch chances are you have accidently deployed the
NT4TSE version of the patch.

I was almost finished patching the entire environment and had a few
machine to get round to patching manually, and of these servers
somehow (lack of sleep or whatever) i managed to patch a NT4 server
with the NT4TSE patch (i had them saved in the same directory on a
file server).

Anyway because this patch is mainly concerned with the windows shell
it causes a massive problem and the servers wont boot anymore - you
will get a bluescreen while booting up that mentions a problem loading
the winlogon.

To fix it (well initially just to figure out what was going on) i
installed a parrellel version of nt4 in a directory called \winnt2 on
the same volume, and found that the nt4 version of shell32.dll and
ntlanman.dll are differnt on a terminal server (.. of course in
hindsight) - so i just copied the correct versions from a disk,
replacing these ones and the server is all cool again.

So if you are experiencing boot up problems after installing ms04-037
chances are you might have done something silly like me. (Because
unfortunately Microsoft hasnt put idiot proofing on this one)



Relevant Pages

  • Re: 5.3-RELEASE: WARNING - WRITE_DMA interrupt timout
    ... My problem is not related to a SATA controller. ... Everything works pretty well on this server. ... the qmail MTA, an otherwise pretty powerful email program. ... I'm going to apply a patch to qmail in a few days. ...
    (freebsd-current)
  • Re: KB917537 Failing
    ... four days after the patch released. ... mature server OS, an enterprise-class messaging system, and automated ... if you hit the "Restart" button ... here as I had assumed this would be a common problem.. ...
    (microsoft.public.windows.server.sbs)
  • Re: ER problem / bug? in 11.50.UC3
    ... The engineer develops a patch and performs unit testing to verify that the patch is working. ... The staging branch is built nightly and goes through some 10 hours of automated testing daily. ... catch that you used an uppercase letter when defining the server. ... not necessarily those of the Fonterra Co-operative Group. ...
    (comp.databases.informix)
  • Re: FOLLOW UP : Forms Authentication Randomly Times Out (Windows 2003)
    ... Well there goes my theory on the patch. ... "Joe Audette" wrote in message ... > It doesn't look like we have that patch on our server. ... > had to scrap the automatic re-direction to login from the ...
    (microsoft.public.dotnet.framework.aspnet.security)
  • Re: Firewall für Web Edition 2003
    ... Natürlich ist das nicht die einzige Massnahme, ... Patch Management-Konzept ist definitiv notwendig, ... >> geht es ausschliesslich um den Betrieb als Server. ... > Die Anfrage klang aber nicht nach: Wie installier ich ISA auf Windows ...
    (microsoft.public.de.german.windows.server.networking)