W2K install order

[Guest]

Archived from groups: microsoft.public.win2000.security (More info?)

Hello,

I am installing Win 2000 on my laptop.

Afterwards I will need to download the SP4, and the security fixes.

Which order should I use?

First the SP4 -- or first the hotfixes/security fixes?

Thank you.

Allan Ballard

 

[Guest]

Archived from groups: microsoft.public.win2000.security (More info?)

It really depends on the official availability of security fixes. For
example, patches such as MS04-041 was released after SP4. The readme will
typically indicate minimum requirements before patches will even install. Win
2000 SP2 is no longer supported and standardizing on SP4 is certainly worth
considering.

Note also that once you have SP4, it does not need to be reinstalled even if
system components are modified.

Hope this helps. Do let us know. Thanks.


"Greenthumb" wrote:

> Hello,
>
> I am installing Win 2000 on my laptop.
>
> Afterwards I will need to download the SP4, and the security fixes.
>
> Which order should I use?
>
> First the SP4 -- or first the hotfixes/security fixes?
>
> Thank you.
>
> Allan Ballard
>

 

[Guest]

Archived from groups: microsoft.public.win2000.security (More info?)

The general order always is install OS, install latest service
pack, install patches. To actually do this one should
install OS
install previously downloaded service pack
enable firewall if one exists (this is not built into W2k)
(get and install service pack if not previously done)
visit windows update.

If one connects to the internet with a base OS install
then one will likely have a machine destroyed before
it is patched (such as may have happened during the
download of SP4 which you noted in your second
posting).
The only safe, general recommendation for handling
a machine that has been compromised is that one needs
to format and reinstall.

--
Roger Abell
Microsoft MVP (Windows Security)
MCSE (W2k3,W2k,Nt4) MCDBA
"Greenthumb" <aballardNOSPAM@ix.netcom.com> wrote in message
news:dlkiu0t99jvte7omgio1d1q4eolg4s4lkp@4ax.com...
> Hello,
>
> I am installing Win 2000 on my laptop.
>
> Afterwards I will need to download the SP4, and the security fixes.
>
> Which order should I use?
>
> First the SP4 -- or first the hotfixes/security fixes?
>
> Thank you.
>
> Allan Ballard

 

[Guest]

Archived from groups: microsoft.public.win2000.security (More info?)

Thank you.

The reason I ask...

Late last night I started the SP4 download via a 56K modem running at
48K.

This morning, the screen displayed something about a "buffer overrun"
and the need to go to www.patch.net I think it was for software fixes.

I did not got there and don't recommend that anyone goes there, but
instead intrepreted the event as an attack.

I then reinstalled W2K again to be sure of a clean registry and so
forth. The reinstall did not give me a chance to re-format to NTFS
again, but at least the OS is clean.

Now I have a firewall, but still remain on "alarm."

Thanks again.

Allan

On Sat, 15 Jan 2005 10:11:04 -0800, "Desmond Lee"
<mcp@donotspamplease.mars> wrote:

>
>It really depends on the official availability of security fixes. For
>example, patches such as MS04-041 was released after SP4. The readme will
>typically indicate minimum requirements before patches will even install. Win
>2000 SP2 is no longer supported and standardizing on SP4 is certainly worth
>considering.
>
>Note also that once you have SP4, it does not need to be reinstalled even if
>system components are modified.
>
>Hope this helps. Do let us know. Thanks.
>
>
>"Greenthumb" wrote:
>
>> Hello,
>>
>> I am installing Win 2000 on my laptop.
>>
>> Afterwards I will need to download the SP4, and the security fixes.
>>
>> Which order should I use?
>>
>> First the SP4 -- or first the hotfixes/security fixes?
>>
>> Thank you.
>>
>> Allan Ballard
>>

 

[Guest]

Archived from groups: microsoft.public.win2000.security (More info?)

"Greenthumb" <aballardNOSPAM@ix.netcom.com> wrote in message
news:2toiu0pe7pjtu8a2q2o5dp8ccksmmnrdfj@4ax.com...
> Thank you.
>
> The reason I ask...
>
> Late last night I started the SP4 download via a 56K modem running at
> 48K.
>
> This morning, the screen displayed something about a "buffer overrun"
> and the need to go to www.patch.net I think it was for software fixes.
>
> I did not got there and don't recommend that anyone goes there, but
> instead intrepreted the event as an attack.
>
You are likely right, although it may be only a hook to try
to make money off of you, and it may be only one of many
things that may have been done.

> I then reinstalled W2K again to be sure of a clean registry and so
> forth. The reinstall did not give me a chance to re-format to NTFS
> again, but at least the OS is clean.
Then you took a wrong turn during the install.
The option to remove partitions, redefine partitions, and to format
are always available during install.

>
> Now I have a firewall, but still remain on "alarm."
>
I do not know what "remaining on alarm" might mean,
but it is good that you have a firewall now.
I am concerned whether you did a fresh install or a
repair install. You really, really should start with
a fresh install - such as can be guaranteed with a format.
Then, follow order in my other posting.

> Thanks again.
>
> Allan
>
> On Sat, 15 Jan 2005 10:11:04 -0800, "Desmond Lee"
> <mcp@donotspamplease.mars> wrote:
>
> >
> >It really depends on the official availability of security fixes. For
> >example, patches such as MS04-041 was released after SP4. The readme will
> >typically indicate minimum requirements before patches will even install.
Win
> >2000 SP2 is no longer supported and standardizing on SP4 is certainly
worth
> >considering.
> >
> >Note also that once you have SP4, it does not need to be reinstalled even
if
> >system components are modified.
> >
> >Hope this helps. Do let us know. Thanks.
> >
> >
> >"Greenthumb" wrote:
> >
> >> Hello,
> >>
> >> I am installing Win 2000 on my laptop.
> >>
> >> Afterwards I will need to download the SP4, and the security fixes.
> >>
> >> Which order should I use?
> >>
> >> First the SP4 -- or first the hotfixes/security fixes?
> >>
> >> Thank you.
> >>
> >> Allan Ballard
> >>
>

 

[Guest]

Archived from groups: microsoft.public.win2000.security (More info?)

Than you.

I'll give it another go, and watch for a chance to reformat.

I do have a fire wall software, and will put in place before
the SP 4 and lastly do the windows update.

Thanks again.

Allan

On Sat, 15 Jan 2005 12:52:20 -0700, "Roger Abell" <mvpNOSpam@asu.edu>
wrote:

>The general order always is install OS, install latest service
>pack, install patches. To actually do this one should
>install OS
>install previously downloaded service pack
>enable firewall if one exists (this is not built into W2k)
>(get and install service pack if not previously done)
>visit windows update.
>
>If one connects to the internet with a base OS install
>then one will likely have a machine destroyed before
>it is patched (such as may have happened during the
>download of SP4 which you noted in your second
>posting).
>The only safe, general recommendation for handling
>a machine that has been compromised is that one needs
>to format and reinstall.

 

[Guest]

Archived from groups: microsoft.public.win2000.security (More info?)

Good luck. Just remember to plug in the network wire
_after_ the firewall is in place.
IIRC in the W2k install there is early on a box asking if
you want to customize something or other, and you need
to check for yes there as well as having answered that you
are doing a new installation.
--
Roger
"Greenthumb" <aballardNOSPAM@ix.netcom.com> wrote in message
news:qeviu0l50bu9vemaqbu7ncf38dks0fuaf6@4ax.com...
> Than you.
>
> I'll give it another go, and watch for a chance to reformat.
>
> I do have a fire wall software, and will put in place before
> the SP 4 and lastly do the windows update.
>
> Thanks again.
>
> Allan
>
> On Sat, 15 Jan 2005 12:52:20 -0700, "Roger Abell" <mvpNOSpam@asu.edu>
> wrote:
>
> >The general order always is install OS, install latest service
> >pack, install patches. To actually do this one should
> >install OS
> >install previously downloaded service pack
> >enable firewall if one exists (this is not built into W2k)
> >(get and install service pack if not previously done)
> >visit windows update.
> >
> >If one connects to the internet with a base OS install
> >then one will likely have a machine destroyed before
> >it is patched (such as may have happened during the
> >download of SP4 which you noted in your second
> >posting).
> >The only safe, general recommendation for handling
> >a machine that has been compromised is that one needs
> >to format and reinstall.
>

 

[Guest]

Archived from groups: microsoft.public.win2000.security (More info?)

A hardware based device (with router / switch / NAT, etc. functionality) may
provide basic protection while you connect on-line for security updates e.g.
Linksys, D-link, etc.

If possible, obtain a CD for the service pack. Otherwise, break up the
download (SP first then the rest) to effectively utilize communication
bandwidth / speed / download time.

A firewall software (which you have) installed immediately after the OS
setup would add another layer of needed protection.

Good luck and do let us know if this helps. Thanks!


"Greenthumb" wrote:

> Than you.
>
> I'll give it another go, and watch for a chance to reformat.
>
> I do have a fire wall software, and will put in place before
> the SP 4 and lastly do the windows update.
>
> Thanks again.
>
> Allan
>
> On Sat, 15 Jan 2005 12:52:20 -0700, "Roger Abell" <mvpNOSpam@asu.edu>
> wrote:
>
> >The general order always is install OS, install latest service
> >pack, install patches. To actually do this one should
> >install OS
> >install previously downloaded service pack
> >enable firewall if one exists (this is not built into W2k)
> >(get and install service pack if not previously done)
> >visit windows update.
> >
> >If one connects to the internet with a base OS install
> >then one will likely have a machine destroyed before
> >it is patched (such as may have happened during the
> >download of SP4 which you noted in your second
> >posting).
> >The only safe, general recommendation for handling
> >a machine that has been compromised is that one needs
> >to format and reinstall.
>
>

 

[Guest]

Archived from groups: microsoft.public.win2000.security (More info?)

How do I obtain a Win2000pro and WinXPpro service pack CD?

When I download from the Windows update site, I don't get the option to save
the update to a file.


"Desmond Lee" wrote:

> If possible, obtain a CD for the service pack. Otherwise, break up the

"Roger Abell" wrote:

> >If one connects to the internet with a base OS install
> >then one will likely have a machine destroyed before
> >it is patched

 

[Guest]

Archived from groups: microsoft.public.win2000.security (More info?)

Service Packs can generally be obtained from TechNet, MSDN or MS Volume
Licensing to name a few.

You can also download the full 'network installation' version of Win 2000
SP4 at:
http://www.microsoft.com/Windows2000/downloads/servicepacks/sp4/download.asp

This will take longer compared to 'express installation', which is typically
offered via Windows Update.

Do let us know if this helps. Thanks.


"Bob Bosco" wrote:

> How do I obtain a Win2000pro and WinXPpro service pack CD?
>
> When I download from the Windows update site, I don't get the option to save
> the update to a file.
>

 

[Guest]

Archived from groups: microsoft.public.win2000.security (More info?)

You can order directly from the links below or download, though it could
take a real long time on dial up. Windows Update will install it on your
computer as part of the update process. --- Steve

http://www.microsoft.com/windows2000/downloads/servicepacks/sp4/default.asp
http://www.microsoft.com/athome/security/protect/windowsxp/choose.aspx

"Bob Bosco" <Bob Bosco@discussions.microsoft.com> wrote in message
news8F5A391-6E74-4A49-B325-5C7EE90A60BA@microsoft.com...
> How do I obtain a Win2000pro and WinXPpro service pack CD?
>
> When I download from the Windows update site, I don't get the option to
> save
> the update to a file.
>
>
> "Desmond Lee" wrote:
>
>> If possible, obtain a CD for the service pack. Otherwise, break up the
>
> "Roger Abell" wrote:
>
>> >If one connects to the internet with a base OS install
>> >then one will likely have a machine destroyed before
>> >it is patched