Systems Management Server deployment packages are available for MS04-038 security updates for Internet Explorer 6 SP1 (887437)


The information in this article applies to:

  • Microsoft Systems Management Server 2.0
  • Microsoft Systems Management Server 2003
  • Microsoft Internet Explorer 6.0 SP1, when used with:
    • the operating system: Microsoft Windows XP
    • the operating system: Microsoft Windows 2000
    • the operating system: Microsoft Windows NT 4.0 SP6

SUMMARY

Microsoft Systems Management Server (SMS) deployment packages are available that include the security update for Microsoft Internet Explorer 6 SP1 for Microsoft Windows NT 4.0 and the MS04-038 security update for Internet Explorer 6 SP1 for Microsoft Windows 2000 and Windows XP. The SMS deployment package also includes a script to enable the SMS 2.0 Software Update Services (SUS) Feature Pack or SMS 2003 Software Update feature to deploy the appropriate security updates to Windows NT 4.0, Windows 2000, and Windows XP-based computers. You can download the SMS deployment package from the Microsoft Download Center. You must download a language-specific version of the deployment package if you authorize the MS04-038 security updates for languages other than English, French, German, or Japanese. To use the SMS deployment package, specify /q:a /r:n for the command-line switches in the Distribute Software Update Wizard.

SYMPTOMS

Microsoft Baseline Security Analyzer (MBSA) is the scanning tool that is used by SMS. MBSA can detect computers that require the security updates documented in Microsoft security bulletin MS04-038. However, MBSA cannot provide SMS with the information needed to download and deploy the appropriate MS04-038 security update packages for Internet Explorer 6 SP1 for Windows NT 4.0 and Internet Explorer 6 SP1 for Windows 2000 and Windows XP.

Note The MS04-038 security update package for Windows NT 4.0 is named IE6.0sp1-KB834707-Windows-NT4sp6a-98-ME-x86-ENU.exe. The MS04-038 security update package for Windows 2000 and Windows XP is named IE6.0sp1-KB834707-Windows-2000-XP-x86-ENU.exe.

For additional information about the MS04-038 security updates, visit the following Microsoft Web site: http://www.microsoft.com/technet/security/bulletin/MS04-038.mspx

RESOLUTION

To resolve this problem, we have released an SMS deployment package to the Microsoft Download Center. The SMS deployment package includes the following:

  • IE6.0sp1-KB834707-Windows-2000-XP-x86-ENU.exe
  • IE6.0sp1-KB834707-Windows-NT4sp6a-98-ME-x86-ENU.exe
  • A script to detect the operating system for SMS client computers and to install the appropriate security update.
After the MS04-038 security update is approved in the Distribute Software Update Wizard (DSUW), SMS will download the SMS deployment package instead of the specified security updates that are documented in Microsoft security bulletin MS04-038.

Important If you authorize the MS04-038 security update for languages other than English, French, German, or Japanese, you must manually download the SMS deployment package for the appropriate language. Additionally, if both the following conditions are true, you also must manually download the SMS deployment packages for the appropriate languages:
  • You are using the English version of the security catalog.
  • You are scanning French, German, or Japanese client computers.

Download information

T The following files are available for download from the Microsoft Download Center:
DownloadDownload the English (US) KB887437 package now.

DownloadDownload the Arabic KB887437 package now.

DownloadDownload the Portuguese (Brazil) KB887437 package now.

DownloadDownload the Chinese (Simplified) KB887437 package now.

DownloadDownload the Czech KB887437 package now.

DownloadDownload the Danish KB887437 package now.

DownloadDownload the German KB887437 package now.

DownloadDownload the Greek KB887437 package now.

DownloadDownload the Spanish KB887437 package now.

DownloadDownload the Finnish KB887437 package now.

DownloadDownload the French KB887437 package now.

DownloadDownload the Hebrew KB887437 package now.

DownloadDownload the Hungarian KB887437 package now.

DownloadDownload the Italian KB887437 package now.

DownloadDownload the Japanese KB887437 package now.

DownloadDownload the Korean KB887437 package now.

DownloadDownload the Dutch KB887437 package now.

DownloadDownload the Norwegian KB887437 package now.

DownloadDownload the Polish KB887437 package now.

DownloadDownload the Portuguese (Portugal) KB887437 package now.

DownloadDownload the Russian KB887437 package now.

DownloadDownload the Swedish KB887437 package now.

DownloadDownload the Turkish KB887437 package now.

DownloadDownload the Chinese (Traditional) KB887437 package now.

Release Date: October 12, 2004

For additional information about how to download Microsoft Support files, click the following article number to view the article in the Microsoft Knowledge Base:

119591 How to obtain Microsoft support files from online services

Microsoft scanned this file for viruses. Microsoft used the most current virus-detection software that was available on the date that the file was posted. The file is stored on security-enhanced servers that help to prevent any unauthorized changes to the file.

Prerequisites

The SMS deployment package requires the SMS 2.0 Software Update Services (SUS) Feature Pack or the SMS 2003 Software Update feature.

Usage information

To use the SMS deployment package, specify the following command line in DSUW:

IE6.0sp1-KB834707-SMS-Deploy-KB887437-x86-ENU.exe /q:a /r:n

The SMS deployment package uses the recommended command-line switches for SMS deployment to install the security updates silently without restarting client computers. For the Windows 2000 and Windows XP security update, the /quiet /norestart command-line switches are used. For the Windows NT 4.0 security update, the /q:a /r:n command-line switches are used. These command-line switches are part of the script logic in the SMS deployment package. These command-line switches cannot be changed.

MORE INFORMATION

Frequently asked questions


What is the difference between the security updates that are included in the SMS deployment package and the security updates that are documented in Microsoft security bulletin MS04-038?

There is no difference in the security updates in the SMS deployment package and the security updates that are documented in Microsoft security bulletin MS04-038.

I received a hotfix from Microsoft or from my support provider after the release of Microsoft security bulletin MS04-004. Is that hotfix included in the SMS deployment package?

No. The SMS deployment package includes the same security updates that are documented in Microsoft security bulletin MS04-038. For all operating systems besides Microsoft Windows Server 2003, Microsoft Windows 64-Bit Edition Version 2003, or Microsoft Windows XP Service Pack 2, Internet Explorer hotfixes that were created after MS04-004 or MS04-025 are not included in the MS04-038 security updates. Therefore, hotfixes that were released after MS04-004 may be removed when you install the MS04-038 security updates. An update rollup is available that contains Internet Explorer hotfixes that were released after MS04-004. The update rollup also includes all the security fixes that are included in the MS04-038 security updates. For additional information about the update rollup, click the following article number to view the article in the Microsoft Knowledge Base:

873377 An update rollup is available for Internet Explorer versions 5.x and 6.0

Note Microsoft does not support SMS deployment of the 8733377 update rollup. There is no SMS deployment package for the 8733377 update rollup. The 8733377 update rollup is available for download from the Microsoft Download Center only.

Does the SMS deployment package support MS04-038 security updates for other versions of Internet Explorer?

No. The problem that is described in this article occurs only with the MS04-038 security updates for Internet Explorer 6 SP1 for Windows NT 4.0, for Windows 2000, and for Windows XP. The MS04-038 security updates for other versions of Internet Explorer can be detected and deployed by using SMS. There is no need for a separate SMS deployment package for other MS04-038 security updates.

I have Internet Explorer 6 SP1 running in a homogenous environment with only one type of operating system. For example, my SMS client computers run only Windows 2000. Do I have to use the SMS deployment package? Or can I deploy the security updates that are documented in Microsoft security bulletin MS04-038?

Either you can use the SMS deployment package, or you can manually download and deploy the specific operating system update that is documented in the MS04-038 security bulletin.
Modification Type:MajorLast Reviewed:10/12/2004
Keywords:kbSecurity ATdownload KB887437
©2004 Microsoft Corporation. All rights reserved.