Update for SBS 2003 to support Vista and Outlook 2007

You can now download a fix from Microsoft (KB 926505).

Brief Description

This update adds support for the Windows SBS Client Deployment tools along with other compatibility issues for Windows Vista and Office 2007 in a Windows SBS network. For the full list of updates necessary for Windows Vista and Outlook 2007 compatibility see the Instructions section.

Overview

You can use the Client Deployment tools in Windows SBS to easily connect a client computer to your Windows SBS network. You can also use the tools to configure the correct settings to support solutions that are specific to Windows SBS (like remote access to your office computer).

This update, together with the additional updates and service packs listed later in this section, addresses compatibility issues with Windows Vista and Office 2007 in a Windows SBS network, including the following:

Support for the Business, Ultimate, and Enterprise editions of Windows Vista (including both 32-bit and 64-bit). This update does not apply to Windows Vista Home.
Updated Client Deployment tools, so you can configure the newer versions of components in Windows Vista.
Changes that make a user who is assigned to a computer that is running Windows Vista an administrator in Admin Approval Mode.
Changes to Group Policy to support configuration of the new Windows Firewall in Windows Vista.
Configuration of Microsoft Office Outlook 2007 (MAPI profile, not Outlook deployment) for client computers that are running Windows XP or Windows Vista.
A small change to the user experience when joining Windows Vista to the Windows SBS domain using http://server/ConnectComputer to address Internet Explorer 7 in Protected Mode.
Changes to Remote Desktop settings that support Windows XP and Windows Vista.
Changes to the Power Management settings to support Remote Desktop.

Why isn’t this a critical update?

Got wireless? Have you got this “patch” from Microsoft? KB917021 . If you don’t then I’d make sure that you do. You’ll also have to download it MANUALLY, yes manually it is not available from Windows download at all. Why is this “patch” important? Well …

Changes for nonbroadcast networks

In Windows XP with Service Pack 2, Wireless Auto Configuration tries to match preferred wireless networks to wireless networks that broadcast their network name. If no network matches a preferred wireless network, Wireless Auto Configuration sends probe requests to determine whether the preferred networks are nonbroadcast networks. In this manner, a Windows XP wireless client advertises its list of preferred wireless networks. An observer may monitor these probe requests and configure a wireless network by using a name that matches a preferred wireless network. If the wireless network is not secured, this network could enable unauthorized connections to the computer.

Yes, you read right. If you have Windows XP with Service Pack 2 and all the patches and a wireless adapater that you leave on even when it is not connected to a wireless acess point then without this patch Wireless Auto Config sends probe requests to determine whether the network you used to connect to are there. Bottom line Windows XP wireless client tells anyone who wants to listen its list of preferred wireless networks. This ain’t good.

Also while you are in fiddling withyour wireless setting turn off your wireless adapters ability to connect to ad hoc networks. This option is default on Windows XP and may allow someone to connect to your computer via ad hoc wireless if you leave your wireless card turn on.

Safest bet? When you aren’t using wireless on your laptop – turn the adapter off.

Exchange update 931978

Know what we hate about updates like 931978? They basically stop all the Exchange services like the Information Store, SMTP service, WWW publishing service and fail to restart them. Basically, this means you have to reboot the server immediately so the services will restart. You can however, restart all the service manually from the Services MMC but until the server is rebooted the updates won’t take effect. But you gotta remember to this immediately after the update has been installed.

It would be nice at the end of a Microsoft Update if it said something like … we tried to restart these services but couldn’t…. or … the following services are stopped… This way you’d know from the update what wasn’t working rather than from your customer who starts ringing after you have applied the update that Outlook is coming up with all these errors since Exchange server has stopped. Gotta admit we hate that, so come on Microsoft give us techies a little more information about exactly what your updates are doing in the background, especially what services are being stopped and started.

How many times do we have install this *&%@%@^& Genuine Advantage?

Come on Microsoft. We are getting sick of having to Genuine Advantage everytime we want to download something. Surely by now you’d know that we have a legitimate version of Windows XP on our machine.

It is not as though we had to register our copy of Windows XP when we installed it – Wait a moment we did!

It is not like we have installed the latest Genuine Advantage via Windows Update – Wait a minute we did!

It is not like we have never installed Genuine Advantage via a manual download before – Wait a moment we did!

We could go on ….

Geeze Microsoft if you are going to make it such a pain for LEGITIMATE users of your software to keep the stuff up to date then why would you bother?

Please, why the hell can’t we just install Genuine Advantage once and be done with it? We have no issue with it being loaded on our systems and being used to verify our software BUT we think this download and install of Genuine Advantage should only HAPPEN ONCE!

Fun with Service Packs again

Well, if you haven’t heard Microsoft have released Windows Server 2003 Service Pack 2. Better yet it appears as a critical update for Small Business Server. best of all, even for systems without SBS Service Pack 1 it appears as a critical update. Oh joy of joys. This is just like the fiasco when Windows Server 2003 Service Pack 1 appeared as a critical update. If was installed on your system then it would break a whole heap of things. You need to apply Windows Server 2003 Service Pack 1 as part of the Small Business Server 2003 Service Pack 1. So if your SBS system was set to automatically download and install the service pack, guess what? On the next reboot of your server you had a broken SBS.

So did Microsoft learn by this experience? Obviously not, because Windows Server 2003 Service Pack 2 is available as a critical update. Who knows what havoc it will reek on systems with Service Pack 1 already installed. It is our guess that Windows Server 2003 Service Pack 2 should work alright on SBS 2003 R2 or SBS 2003 with SBS Service Pack 1 but systems not meeting this criteria? Who knows? Problem is, someone out there is going to find out the hard way.

This is why we recommend that you don’t download and automatically install Windows Updates on your server. We recommend that you set it to only notify, then you apply the updates and service packs manually.

We are in the process of test Windows Server 2003 Service Pack 2 on our internal systems and we’ll provide feedback when we know more. Until then we would recommend you hang back from installing Windows Server 2003 Service Pack 2 just yet. In our books best let someone else bleed.

HP Lights-out 100c Remote Management Card

Had some fun and games getting this to work on a new HP ML110G4 server. Installing the hardware is simple enough but getting access to card via the network proved very interesting. Supposedly, the iLO card gets an IP address from a DHCP server by default according to the manual. Nope – sorry, card had a static IP address assigned, which we had to change. It also took us quite a while to locate the actual IP address settings in the server BIOS (as a hint look under the Advanced menu in the system BIOS which you get to via F10 at boot).

The biggest problem we found is that we could browse to the IP address of the iLO card but couldn’t log in? Hmmm… hours later after checking we had the right login, talking to HP ( who didn’t know ) turns out the iLO card doesn’t like IE7! Luckily it works with Mozilla ( sorry Microsoft ). HP’s response to this? “We don’t support IE7”.

Why is everything so hard?

Windows Update error 0x8DDD0001

We’ve been seeing a lot of Windows Update errors after apply Internet Explorer 7.0 to SBS 2003 servers. Typically the error tells you that you don’t have some of the Microsoft Update sites in your trusted sites. Problem is that when you look these sites are already in there. The quick fix is simply to go into you Internet Browser, then Tools | Internet Options | Security and select the button “Reset all zones to default levels”. If you restart your browser then Windows Update runs normally.

Unsure, whether this affects any browser security issues but really the only browsing on the server should be for Microsoft Updates and should only be done by someone responsible.

Windows Update Error 0x800A0007

Recently trying to use Windows Update at a customers site that has SBS 2003 Premium R2 (with ISA) and received the following Windows Update error 0x800A0007 on every machine. Hmmm…this wasn’t happening last time, what’s changed? Did some searching on the Net and found a multitude of solutions from simple clearing of the IE cache to reformatting. The common point seemed that this issue was caused by Microsoft Genuine Advantage (yuk!).

So we went to the Microsoft download site and installed Windows Genuine Advantage on the machines manually. The secret is then to reboot the machines and try Windows Update again. Worked on all the machines.

Nice isn’t it that a piece of software designed to ensure you have a legal copy of Windows stuffs up keeping the software up to date? Gotta admit with all the problems that we have had of late we are no fans of Windows Genuine Advantage. We think that perhaps Microsoft should test this sorta thing more thoroughly, but hey that’s just us.