Project Server users with MSDE 2000 installed may be vulnerable to the Slammer worm (814046)

MORE INFORMATION

To help protect your computer from the Slammer worm in the scenario where MSDE 2000 was installed during the Microsoft Project Server 2002 setup , use one of the following methods.

NOTE: If Microsoft Project Server 2002 is configured to use SQL, or if MSDE 2000 is installed on your computer, but Microsoft Project Server 2002 is not configured to use MSDE 2000, do not use the steps in Method 2. Instead, use the steps in Method 1, or see the "General Information About SQL Service Packs and Updates" section of this article for information about how to apply Microsoft SQL Server 2000 Service Pack 3 (SP3) to your installation of MSDE 2000 or Microsoft SQL Server 2000.

Method 1: Install SQL 2000 Critical Update Wizard

For more information, click the following article number to view the article in the Microsoft Knowledge Base:

Method 2: Install SQL Server 2000 SP3

Detach your Microsoft Project Server 2002 database from MSDE 2000, remove Microsoft Project Server 2002, install SQL Server 2000 SP3, and then re-install Microsoft Project Server 2002.

Use the following steps to install SQL Server 2000 SP3 when Microsoft Project Server 2002 is configured to use MSDE 2000:

1. Detach your Microsoft Project Server 2002 database from MSDE
   
   To do this:
   1. Click Start, click Run, type osql -U sa in the Open box, and then click OK.
      
      This connects you to the local, default instance of MSDE 2000 by using the System Administrator (SA) account.
   2. At the Password prompt, enter the SA password, and then press ENTER.
   3. Retrieve the names of the database (.MDF) and log (.LDF) files for the Microsoft Project Server 2002 database by typing the following text on separate lines, and then pressing ENTER after each line of text:
      
      select a.filename as Filename from sysaltfiles a, sysdatabases b where a.dbid = b.dbid and b.name = N'ProjectServer'
      go
      
      This will return two rows, one that ends in ".MDF" (without quotation marks) indicating the full path of the database file, and one that ends in ".LDF" (without quotation marks) indicating the full path of the log file.
   4. Close any running transactions, detach the database, and then detach the log files by typing the following text on separate lines and pressing ENTER after each line:
      
      EXEC sp_detach_db N'ProjectServer', N'true'
      go
      
      NOTE: There may be a long delay after running this command.
   5. After the database has been detached, move the .MDF file and the .LDF file from the directories that were identified in step 1c to an alternate directory.
2. Remove Microsoft Project Server 2002
   
   IMPORTANT: Before you follow these steps, verify that you have followed the proceeding steps and backed up your .MDF file and .LDF file to a safe location.
   
   To do this:
   1. Click Start, click Control Panel, and then click Add or Remove Programs.
   2. In the Add or Remove Programs box, click Microsoft Project Server 2002, and then click Remove.
   3. Follow the onscreen prompts to remove Microsoft Project Server 2002.
   4. Restart your computer regardless of whether or not you are prompted to do so.
3. Install SQL Server 2000 Service Pack 3.
   
   To do this:
   1. Visit the following Microsoft Web site:

      http://www.microsoft.com/sql/downloads/2000/sp3.asp

   2. Select the language that matches your version of Microsoft Project Server 2002 from the Full Download box on the right side of your screen, and then click Go.
   3. Locate the download link to the SQL2KDeskSP3.exe file , and then click the download link to start the download.
      
      NOTE: Non-English versions of the download will be listed as language_SQL2KDeskSP3.exe.
      
      Where language represents language version of the download.
   4. When prompted, save the file to your Windows Desktop.
   5. In Windows Explorer, double click the file that you previously saved to your desktop.
   6. Click I Agree, to accept the License Agreement.
   7. In the Installation Folder box, type C:\sql2ksp3, and then click Continue.
   8. Click Start, click Run, and then type the following command in the Open box
      
      C:\sql2ksp3\msde\setup.exe sapwd="strong_pwd" securitymode=sql
      
      where strong_pwd is your System Administrator (SA) password.
   9. Click OK.
4. Attach your Microsoft Project Server 2002 databases to the MSDE 2000 that you previously updated with SQL Server 2000 Service Pack 3.
   
   To do this:
   1. Click Start, click Run, type osql -U sa in the Open box, and then click OK.
      
      This connects you to the local, default instance of MSDE 2000 by using the SA account.
   2. At the Password prompt, enter the SA password that you previously set in step 3h, and then press ENTER.
   3. Attach the Project Server .MDF and .LDF files by typing the following text on separate lines, and then pressing ENTER after each line
      
      EXEC sp_attach_db @dbname=N'ProjectServer', @filename1=N' mdf_path',@filename2=N'ldf_path'
      go
      
      where mdf_path and ldf_path are the paths to the MDF file and the LDF file that you previously backed up to a safe location in step 1e.
      
      NOTE: There may be a long delay after running this command.
5. Create the MSProjectUser and MSProjectServerUser SQL logins. To do this, type the following text on separate lines, and then press ENTER after each line
   
   EXEC sp_addlogin N'MSProjectServerUser', N'newpassword1', N'ProjectServer'
   EXEC sp_addlogin N'MSProjectUser', N'newpassword2', N'ProjectServer'
   go
   
   where newpassword1 is the new password for the MSProjectServerUser account, and where newpassword2 is the new password for the MSProjectUser account.
6. Add the MSProjectServerUser account and the MSProjectUser account to the MSProjectRole role and MSProjectServerRole role by typing the following text on separate lines, and then pressing ENTER after each line:
   
   USE ProjectServer
   go
   EXEC sp_dropuser N'MSProjectServerUser'
   EXEC sp_dropuser N'MSProjectUser'
   go
   EXEC sp_adduser N'MSProjectServerUser', N'MSProjectServerUser', N'MSProjectServerRole'
   EXEC sp_adduser N'MSProjectUser', N'MSProjectUser', N'MSProjectRole'
   go
   quit
7. Install Microsoft Project Server 2002, and then connect to the existing MSDE 2000 database.
   
   NOTE: The following steps will set the server up exactly as you had configured it so long as you click the Enter this information later option when prompted during installation. If you customized server settings in the Administration pages of Project Web Access, those settings will be persisted.
   1. Insert your Microsoft Project Server 2002 CD-ROM in your CD-ROM drive, and let Setup autorun to start the setup process.
   2. In the Microsoft Project Server 2002 Setup dialog box, click Server installation.
   3. In the Type of installation dialog box, click Custom, and then click Next.
   4. In the Enter Database server information dialog box, click Connect to an existing database.
   5. In the Database server box, enter the name of your computer.
   6. In the Database name box, type ProjectServer, and then click Next.
      
      This will open the Enter database account information dialog box.
   7. In the first Logon name box, enter MSProjectServerUser. The MSProjectServerUser account is the account that you previously specified to be a member of the MSProjectServerRole role.
   8. In the Password box, enter the password for the MSProjectServerUser account.
      
      NOTE: This would be the password previously listed in Step 5 as newpassword1.
   9. In the second Logon name box, enter MSProjectUser. The MSProjectUser account is the account that you previously specified to be a member of the MSProjectRole role.
   10. In the Password box, enter the password for the MSProjectUser account.
       
       NOTE: This would be the password previously listed in Step 5 as newpassword2.
   11. Click Next.
   12. In the Enter Analysis Services connect information dialog box, click Enter this information later, and then click Next.
   13. In the Select a Web site dialog box, click Default Web Site, and then click Next.
   14. In the Enter Web server information dialog box, click Enter this information later, and then click Next.
   15. In the Enter SMTP mail server information dialog box, click Enter this information later, and then click Next.
   16. In the Connect to a Web server running SharePoint Team Services dialog box, click Enter this information later, and then click Next.
   17. In the Choose a version of Microsoft Project dialog box , click Microsoft Project Standard 2002 and/or Microsoft Project 2000, and then click Next. This will take you to the Enter administrator password information dialog box.
   18. In the Password box, enter an administrator password. In the Confirm Password text box, re-enter your administrator password, and then click Next.
   19. In the Begin installation dialog box, click install.
       
       This will start the installation process.

General Information About SQL Service Packs and Updates

How to Obtain the SQL Server 2000 Service Pack 3 (SP3)

SQL Server 2000 Service Pack 3 (SP3) is available from the following Microsoft Web site:

List of Bugs Fixed by SQL Server 2000 Service Packs

For more information, click the following article number to view the article in the Microsoft Knowledge Base:

The SQL Server 2000 Service Pack 3 (SP3) ReadMe

The SQL Server 2000 Service Pack 3 (SP3) ReadMe Addendum

For more information, click the following article number to view the article in the Microsoft Knowledge Base: