Best way to deploy Hotfixes

[cookie_monster]

I'm running the patch manually and it finishes installing but the lsasrv.dll file is the same and the flaw exists still.

 

Old file should be 5.1.2600.5834

New file should be 5.1.2600.5827

[Little-Miss]

Well how do i stop it messing up my mojo!?

[Michael]

WSUS 3.0 is definitely the best method to use as it uses BITS to deploy updates. As the name suggests packages are slowly sent in bits minimising network traffic. It also gives useful feedback as to what hotfixes are installed

[powdarrmonkey]

WSUS is fine if you're deploying things that are in it, but some significant hotfixes are only distributed if you ask for them, or are published but for a specific problem and so not available in WSUS. For these out-of-band patches, you need some kind of mechanism to install it only once.

[Little-Miss]

Yup, i defo wanna install WSUS, but this patch is to fix something MS broke with SP3!

[cookie_monster]

@ Little-Miss, have you tried installing this patch manually on a PC to test if it works. I haven't had any luck getting it to work, I install it and it shows in the add/remove window but the lsasrv.dll file hasn't changed and the flaw still exists. I've uninstalled and reapplied but it still fails to work, the station reboots after install as though everything should be ok.

Unfortunately the file can't be replaced manually even in safe mode I might have to look into the sysinternals tools.

[Little-Miss]

see, this is where im confused. I installed it manually, i goes through, quite quickly, no errors. But i couldnt see it in add/remove. But when i used that program on the edugeek admin bar its listed as installed.

 

I havent actually checked the dll file (will do that tomorrow). Are you having the same probs as me? SP3 buggered after forced password change?

 

I've logged on and off as, admin, staff and student and its picked up the profile each time not the default one...

[cookie_monster]

Yep same issue, if the user changes their password at logon they don't get a profile. To view the patch in add/remove you have to check the show updates box at the top.

 

 

Old file should be 5.1.2600.5834

New file should be 5.1.2600.5827

[cookie_monster]

Well I replaced the file manually and it still doesn't work.

 

http://www.buxton.derbyshire.sch.uk/grant/lsasrv.jpg

[Little-Miss]

To view the patch in add/remove you have to check the show updates box at the top.

 

Doh!!

[cookie_monster]

To view the patch in add/remove you have to check the show updates box at the top.

 

Dho!!

 

We've all had those moments

 

Where are you upto, has the patch sorted the problem for you?

[Little-Miss]

I've just checked the version of the patch on the machine i manually installed it on. (I'm getting 3 files in my search). The one in the system32 folder is ...5827.

 

Let me go logon and off as different users and i will get back to you...

[cookie_monster]

Let me go logon and off as different users and i will get back to you...

 

Don't forget to force a password change at logon.

[Little-Miss]

I have just very quickly logged on as a member of staff, an infant and administrator and they all pulled down the correct profile/wallpaper/icons etc...

 

Dont understand why its not working for you...

[cookie_monster]

Did you force a password change at logon so you had to change the password before logging on to Windows?

[Little-Miss]

yup...

[Cools]

this sounds like hard work for such a small fix..

[Little-Miss]

oh i see what you are saying....

 

My staff have already gone through the process of changing passwords....you think i should test it again?

[Cools]

take all the laptops off the staff.. and all is fixed..

And it will save you lots of problems.. yet to come..

[cookie_monster]

oh i see what you are saying....

 

My staff have already gone through the process of changing passwords....you think i should test it again?

 

Yes go into Active Directory and change a users password so they have to change it before they logon, also make sure thay they don't have a local profile in Documents and Settings then try.

 

I thought the issue had gone away after installing the patch as once they change their password it doesn't show again until next time they have to change their password. This is also why I had so much trouble replicating the issue.

[Cools]

Why not just force a profile reset?

[cookie_monster]

@- Cools

 

 

take all the laptops off the staff.. and all is fixed..

And it will save you lots of problems.. yet to come..

 

This affects Default network profiles in Netlogon, Mandatory and Roaming profiles

 

 

 

Why not just force a profile reset?

 

It's not a profile issue, see link below.

 

http://support.microsoft.com/kb/958058

Edited September 22, 2009 by cookie_monster

[Cools]

@- Cools

 

It's not a profile issue, see link below.

 

When you try to log on to a Windows XP SP3-based computer by using a roaming profile, the roaming profile cannot load.

 

 

that link says it is.. ..

 

When you try to log on to a Windows XP SP3-based computer by using a roaming profile, the roaming profile cannot load.

[powdarrmonkey]

that link says it is.. ..

 

When you try to log on to a Windows XP SP3-based computer by using a roaming profile, the roaming profile cannot load.

 

Keep reading, and you'll see this:

 

This problem occurs if you are prompted to change the password when you log on to a Windows XP SP3-based client computer.

 

That's the problem.

[cookie_monster]

Did you get around to testing that Little-Miss?

 

I've tried again earlier and still no luck. I installed as a local admin with AV turned off and I noticed the file disappear and it was replaced but as the same version. I'm wondering if it's file protection causing the issue.