A Systems Management Server deployment package is available that includes security update MS05-038 for Internet Explorer 6 Service Pack 1 (903741)



The information in this article applies to:

  • Microsoft Systems Management Server 2003
  • Microsoft Systems Management Server 2.0
  • Microsoft Internet Explorer 6.0, when used with:
    • Microsoft Windows XP Home Edition
    • Microsoft Windows XP Professional
    • Microsoft Windows 2000 Server

Content Maintenance:41390

SUMMARY

A Microsoft Systems Management Server (SMS) deployment package is available that includes security update MS05-038. Security update MS05-038 applies to Microsoft Internet Explorer 6 with Service Pack 1 (SP1) when Internet Explorer 6 with SP1 is used with Microsoft Windows 2000 or with Microsoft Windows XP.

The SMS deployment package also includes a script that enables the SMS 2.0 Software Update Services (SUS) Feature Pack and the SMS 2003 Software Update feature to deploy the appropriate security update to Windows 2000-based computers and to Windows XP-based computers. This script does not install the security update on Microsoft Windows NT 4.0-based computers. Security update MS05-038 is not compatible with Windows NT 4.0.

You can download the SMS deployment package from the Microsoft Download Center. You must download a language-specific version of the SMS deployment package if you authorize security update MS05-038 for languages other than English, French, German, or Japanese. To use the SMS deployment package, specify the /q:a /r:n command-line options in the Distribute Software Updates Wizard.

SYMPTOMS

SMS uses the Microsoft Baseline Security Analyzer (MBSA) scanning tool. MBSA can detect computers that require the security update that is documented in Microsoft security bulletin MS05-038. However, MBSA cannot provide SMS with information about supported operating systems for this update. For example, MBSA indicates that this update is compatible with Windows NT 4.0, even though this update is not compatible with Windows NT 4.0. The SMS deployment package is designed to prevent installation of this incompatible update on Windows NT 4.0. If you install security update MS05-038 on Windows NT 4.0-based computers without using the specific SMS deployment package, installation failures will occur on the client computers.

For more information about security update MS05-038, visit the following Microsoft Web site:

RESOLUTION

To resolve this problem, Microsoft has released an SMS deployment package to the Microsoft Download Center. The SMS deployment package includes the following items:
  • The IE6.0sp1-KB883939-Windows-2000-XP-x86-ENU.exe file
  • A script that detects the operating system on SMS client computers and prevents installation on Windows NT 4.0
After security update MS05-038 is approved in the Distribute Software Updates Wizard, SMS downloads the SMS deployment package instead of the specified security update that is documented in Microsoft security bulletin MS05-038.

Important If you authorize security update MS05-038 for languages other than English, French, German, or Japanese, you must manually download the SMS deployment package for the appropriate language. You must also manually download the SMS deployment packages for the appropriate languages if the following conditions are true:
  • You are using the English version of the security catalog.
  • You are scanning French, German, or Japanese client computers.

Download information

The following file is available for download from the Microsoft Download Center:

English (U.S.):Arabic: Chinese (Traditional):Chinese (Simplified):Czech:Danish:Dutch:Finnish:French:German:Greek:Hebrew:Hungarian:Italian:Japanese:Japanese NEC:Korean:Norwegian (Bokmål):Polish:Portuguese:Portuguese (Brazil):Russian:Spanish:Swedish:Turkish: Release Date: August 9, 2005

For more information about how to download Microsoft Support files, click the following article number to view the article in the Microsoft Knowledge Base:

119591 How to obtain Microsoft support files from online services

Microsoft scanned this file for viruses. Microsoft used the most current virus-detection software that was available on the date that the file was posted. The file is stored on security-enhanced servers that help prevent any unauthorized changes to the file.

Prerequisites

The SMS deployment package requires the SMS 2.0 SUS Feature Pack or the SMS 2003 Software Update feature.

Deployment information

To use the SMS deployment package, use the /q:a /r:n command-line options in the Distribute Software Updates Wizard. The SMS deployment package contains a configuration file that has the actual command-line options that are used for the security update. This file silently installs the security update without restarting client computers. These command-line options are part of the script logic in the SMS deployment package. These command-line options cannot be changed.

MORE INFORMATION

Frequently asked questions

Q1: What is the difference between the security update that is included in the SMS deployment package and the security update that is documented in Microsoft security bulletin MS05-038?

A1: The security update that is included in the SMS deployment package and the security update that is documented in Microsoft security bulletin MS05-038 are the same. SMS wraps the actual security update MS05-038 by using the SMS deployment package. However, the update that is run on the client computer is the same update that is available for download from Microsoft security bulletin MS05-038.

Q2: Does the SMS deployment package support security update MS05-038 for other versions of Internet Explorer?

A2: No. The SMS deployment package contains a security update only for Internet Explorer 6 SP1 when it is used with Windows 2000 or with Windows XP. Security update MS05-038 for other versions of Internet Explorer can be detected and deployed by using SMS. There is no requirement for a separate SMS deployment package.

Q3: I have Internet Explorer 6 with SP1 running in a homogenous environment with only one type of operating system. For example, my SMS client computers run only Windows 2000. Must I use the SMS deployment package, or can I deploy the security update that is documented in Microsoft security bulletin MS05-038?

A3: You can use the SMS deployment package, or you can manually download and deploy the specific operating system update that is documented in Microsoft security bulletin MS05-038. You can use the Distribute Software Updates Wizard to import the actual security update MS05-038 for deployment.

Modification Type:MinorLast Reviewed:8/23/2005
Keywords:kbSecurity kbSMSDeploy kbsmsAdmin kbSMSPackage kbtshoot kbprb KB903741 kbAudITPRO