How to obtain and use the MS04-028 Enterprise Update Scanning Tool in environments that use Systems Management Server 2003 and Systems Management Server 2.0 (885920)

Introduction

On Tuesday, September 14, 2004, Microsoft released the security updates that are documented in the Microsoft security bulletin MS04-028. These security updates affect many Microsoft products. Because many Microsoft products contain a customized version of the Gdiplus.dll file, some products require a unique update to help protect your computer.

This article describes a solution that you can use to help detect computers that require MS04-028 security updates and deploy the appropriate security updates in a Microsoft Systems Management Server (SMS) environment. For information about a tool that you can use to deploy MS04-028 security updates in a non-SMS environment, click the following article number to view the article in the Microsoft Knowledge Base:

886988 How to obtain and use the MS04-028 Enterprise Update Scanning Tool in environments that do not use Systems Management Server

For more information about MS04-028 security updates, visit the following Microsoft Web site:

http://www.microsoft.com/technet/security/bulletin/MS04-028.mspx

MORE INFORMATION

SMS 2003 and SMS version 2.0 with the Software Update Services (SUS) Feature Pack use the Microsoft Baseline Security Analyzer (MBSA) version 1.2 and the Office Inventory Scan Tools to detect security updates on SMS client computers. The security update information is returned to the SMS Site Server by using SMS Hardware Inventory. This lets SMS Administrators deploy Critical Updates by using the Distribute Software Updates Wizard. The Distribute Software Updates Wizard is included with SMS 2003 and is included in the SUS Feature Pack for SMS 2.0. Because of limitations in the products that MBSA 1.2 currently supports, SMS 2.0 and 2003 cannot perform detection for all the various MS04-028 patches that are available.

Microsoft has released the SMS Extended Security Update Inventory Tool to help to help SMS 2003 and SMS 2.0 administrators correctly detect all available updates for the MS04-028 security bulletin and then deploy the updates by using the SMS Distribute Software Updates Wizard.

Download information

To download the SMS Extended Security Update Inventory Tool visit the following Microsoft Web site:

http://www.microsoft.com/downloads/details.aspx?FamilyId=2C93DA1D-48A0-4E5C-991F-87E08954F61B&displaylang=en

A document that describes how to install the SMS Extended Security Update Inventory Tool is included as part of the download.
The SMS Extended Security Update Inventory tool detects whether computers have the required MS04-028 security bulletin installed. The SMS Extended Security Update Inventory tool identifies all affected products that are listed in the security bulletin for MS04-028 except the Microsoft Office suite of products. To identify the Microsoft Office suite of products, use the Microsoft Office Scan tools.

Important Before you install the SMS Extended Security Update Inventory tool, make sure that you have installed the latest version of the Software Update Scanning tools.

SMS 2003

To download the latest Software Update Scanning tools, visit the following Microsoft Web site:

http://www.microsoft.com/smserver/downloads/2003/featurepacks/suspack/default.asp

Note: SMS 2003 Service Pack 1 (SP1) is not required to install the updated scan tools. You can install the updated scan tools on a site that does not have SMS 2003 SP1 installed.

SMS 2.0

To download the latest Software Update Services Feature Pack, visit the following Microsoft Web site:

http://www.microsoft.com/smserver/downloads/20/featurepacks/suspack/