[prev in list] [next in list] [prev in thread] [next in thread]
List: patchmanagement
Subject: RE: MS05-024 (Q894320) and mapped network drives
From: Michael DeGuzman <Michael.DeGuzman () reuters ! com>
Date: 2005-05-31 20:32:09
Message-ID: T7140dd2d2c0a0135234cd8 () lonsmime03 ! rit ! reuters ! com
[Download RAW message or body]
I think I have experienced something similar for the case of the DC not
being able to be seen (NETLOGON share missing!!)-->hence AD startup
login scripts can not be seen-->hence no drive mappings intended by the
startup scripts.
I just did a registry change suggested by MS and it fixed it! This
happened around 2-3 months back.
Whoever wants to get the registry change on the Windows 2003 dc please
email me as I am yet to search from it from my tons of mail 8-)
My guess is that we are talking of completely different issues here
which should not all be blamed 100% to MS05-024. I tested MS05-024 on
test/live workstations and w2k/w2k3 servers without any problems so far.
Mike--
-----Original Message-----
From: Reg [mailto:reg@nwc.ca]
Sent: Wednesday, June 01, 2005 1:46 AM
To: Patch Management Mailing List
Cc: Susan Bradley, CPA aka Ebitz - SBS Rocks [MVP]
Subject: Re: MS05-024 (Q894320) and mapped network drives
We are continuing to investigate. Slow-Login problem has re-occured as
of this morning. Problem is, however, sporadic at best. Right now we're
investigating WINS/DNS. Errors in primary file server (Win2K, but
member of NT4 domain) log indicate it's having a problem doing dynamic
DNS registration to the Win2K3 DC. Since the login script references
the file server, we think this may be a cause. If so, rest assured
we'll contact MS when/if we can reproduce or isolate the problem. We've
created a static DNS entry for the server, and if it works, we'll try to
see why it won't register in dynamic DNS.
I agree it's not MS05-024.
Reg
Susan Bradley, CPA aka Ebitz - SBS Rocks [MVP] wrote:
> And I hope you guys are calling PSS [product support services] on this
> as issues caused by a patch are a free call... and rebooting certainly
> isn't the answer.
> Get to the bottom of the problem..run netmon or other diagnostic
tools.
>
> It's my opinion that we don't do enough to diagnose what's going on
> [including myself]
>
> If this started happening 6 weeks ago...that's not 05-024... 05-024 is
> a May 10th patch. Look back to what exactly was installed 6 weeks
> ago..and if you don't do your "Patch Tuesday" until later, look back
> in your patch log book/database to see what got installed 6 weeks ago
> and don't rule out hardware/nic/ and other issues.
> Stop rebooting and start properly diagnosing IMHO.
>
> Susan
>
> Greg Shields wrote:
>
>> This is interesting, because we're seeing something similar (but not
>> completely similar). Rebooting fixes the issue -- but only for a few
>> days.
>> We started with reboots every 3-4 days, but now are getting to nearly
>> every day.
>>
>> /Greggo
>>
>> -----Original Message-----
>> From: Reg [mailto:reg@nwc.ca] Sent: Thursday, May 26, 2005 9:39 PM
>> Subject: Re: MS05-024 (Q894320) and mapped network drives
>>
>> We had the following experience, don't know what patch or what broke
it:
>> - approximately 6 weeks ago first report of mapped drives failing.\
>> - two weeks later slow logins from sites with no local DC reported
>> (15-30 minutes to log in)
>> - both problems slowly spread over the next 4 weeks
>> - this week some users could map drives, but not see contents of
>> folders
>>
>> Here's the environment:
>> - win2k3 domain (not sp1 yet - Dell servers)
>> - file server is windows 2000 (fully patched)
>> - win xp desktops (in various patch states - we're working on that)
>>
>> We found that we had issues mapping drives to only ONE server ONLY
>> from sites with no local DC on their LAN. We "thought" that maybe
>> there was a wins problem with our main office DC, but local clients
>> had no problems. Started looking at MTU settings on wan, etc...
>> Found that from the file server in question, we could not map drives
>> OUT to affected client machines either. File server seemed to be
>> registered in WINS, but for the heck of it we restarted it. All
>> problems went away. I can't explain it, but that's what happened.
>>
>> Reg
>>
>>
>> Greg Shields wrote:
>>
>>
>>
>>> Hi -
>>>
>>> We are experiencing some issues with SAMBA disconnections on
>>> Terminal Servers -- strangely enough when we see the SAMBA problems
>>> we also see the login time take an incredibly long time to complete.
>>> Citrix shows it hanging at the "Checking your Credentials" phase in
>>> their login banner.
>>>
>>> Does anyone know if this might be related? We're tearing our hair
>>> out on this one. The only fix right now is a reboot, which we're
>>> having to do about every 24 hours.
>>>
>>> Please help!
>>>
>>> /Greg Shields,
>>> MCSE: Security, CCEA
>>> Sr. Systems Engineer, NPOESS Common Environments Raytheon Company,
>>> Aurora
>>>
>>> -----Original Message-----
>>> From: Sec List [mailto:Bio-SecList@bristol.ac.uk] Sent: Tuesday, May
>>> 24, 2005 2:21 AM
>>> Subject: RE: MS05-024 (Q894320) and mapped network drives
>>>
>>> Just on the off chance, are you connecting to a samba host. If so,
>>> see if there is an upgraded client.
>>>
>>> J
>>>
>>> --On 19 May 2005 11:35 -0700 "Bott, Bruce - SICA"
>>> <bbott@simpson.com>
>>>
>>
>> wrote:
>>
>>
>>>
>>>
>>>
>>>
>>>> We use an informal hierarchy of 'guinea pigs' on our network for
>>>> patch testing.
>>>>
>>>> We start with a few IS 'mule' PC's and apply patches...
>>>> poke around... does anything break?
>>>>
>>>> Then we push the patches to a group of non-critical PC's that can
>>>> tolerate an interruption without hurting the business and listen
>>>> for any trouble reports.
>>>>
>>>> If those pass muster do we move to patching a few mainstream
>>>> PC's... and then, if they're happy, we will push onto the full
>>>> network.
>>>>
>>>> At all points in the process, an 'ear' is kept to the web for any
>>>> trouble reports.
>>>>
>>>> This reduces risk without developing/maintaining a formal patch
>>>> test script (we run with very few staff now). The downside is that
>>>> it delays full rollout by a day or two while you push/look for
>>>> trouble at each level of deployment.
>>>>
>>>> -- bb
>>>>
>>>> -----Original Message-----
>>>> From: Todd Towles [mailto:toddtowles@brookshires.com]
>>>> Sent: Thursday, May 19, 2005 9:22 AM
>>>> To: Patch Management Mailing List
>>>> Subject: RE: MS05-024 (Q894320) and mapped network drives
>>>>
>>>> Colin, you are about to deploy a patch you haven't tested in your
>>>> environment? You shouldn't deploy th patch if you don't know what
>>>> is going to do to the core operating of your business.
>>>>
>>>> Take a image of a normal computer on their current patch level and
>>>> get to testing. =)
>>>>
>>>>
>>>>
>>>>
>>>>> -----Original Message-----
>>>>> From: Colin [mailto:colweb@gmail.com]
>>>>> Sent: Thursday, May 19, 2005 7:53 AM
>>>>> To: Patch Management Mailing List
>>>>> Subject: Re: MS05-024 (Q894320) and mapped network drives
>>>>>
>>>>> I am on the verge of clicking "Authorise" on this patch.
>>>>>
>>>>> Should I wait in light of these problems? All my users
>>>>> (3000+) use mapped drives to work so I can see this spreading
>>>>> brown stuff off the fans. We run Lotus Notes and the data files
>>>>> are on their
>>>>>
>>>>> home drives so this could hurt us bad.
>>>>>
>>>>> Diane, how many machines did you deploy to?
>>>>>
>>>>> Also the original poster didnt mention Office, so is KB897853
>>>>> related atall?
>>>>>
>>>>> Cheers,
>>>>>
>>>>> Colin.
>>>>>
>>>>>
>>>>>
>>>>> On 5/18/05, Richard Davis <ddavis@jifpak.com> wrote:
>>>>>
>>>>>
>>>>>
>>>>>> Check out KB897853. It might help.
>>>>>>
>>>>>> Dick Davis
>>>>>> Information Systems
>>>>>> Jif-Pak Manufacturing, Inc.
>>>>>> 760-597-2665 x107 Phone
>>>>>> 760-597-2667 Fax
>>>>>>
>>>>>>
>>>>>> -----Original Message-----
>>>>>> From: Diane Bunyan [mailto:dbunyan@book.com]
>>>>>> Sent: Wednesday, May 18, 2005 11:19 AM
>>>>>> To: Patch Management Mailing List
>>>>>> Subject: RE: MS05-024 (Q894320) and mapped network drives
>>>>>>
>>>>>>
>>>>>> Hello,
>>>>>>
>>>>>> I have deployed this patch and thus far had 1 user complain of
>>>>>> this problem. Has there been any further information regarding a
>>>>>> fix for this?
>>>>>>
>>>>>> Thank you for your help,
>>>>>>
>>>>>> _______________
>>>>>> Diane C. Bunyan
>>>>>>
>>>>>> -----Original Message-----
>>>>>> From: James O'Gorman [mailto:James.OGorman@hesa.ac.uk]
>>>>>> Sent: Tuesday, May 17, 2005 4:57 AM
>>>>>> To: Patch Management Mailing List
>>>>>> Subject: MS05-024 (Q894320) and mapped network drives
>>>>>>
>>>>>> After applying the patch for MS05-024 (Web View Script Injection
>>>>>> Vulnerability) on Thursday night to client workstations
>>>>>>
>>>>>>
>>>>>
>>>>> (Windows 2000
>>>>>
>>>>>
>>>>>
>>>>>> SP4) an increasing number of our users are experiencing
>>>>>>
>>>>>>
>>>>>
>>>>> sporadic and
>>>>>
>>>>>
>>>>>
>>>>>> persistent disconnect notifications for mapped network
>>>>>>
>>>>>>
>>>>>
>>>>> drives. I have
>>>>>
>>>>>
>>>>>
>>>>>> tried the obvious NET USE * /d and then remap the drives with
>>>>>> /PERSISTENT:YES and within a few minutes the disconnections
>>>>>>
>>>>>>
>>>>>
>>>>> resume.
>>>>>
>>>>>
>>>>>
>>>>>> Any operations for reading or writing will result in the error;
>>>>>>
>>>>>> An error occurred while reconnecting (SOME DRIVE LETTER):
>>>>>>
>>>>>>
>>>>>
>>>>> to (SOME UNC
>>>>>
>>>>>
>>>>>
>>>>>> NETWORK PATH) Microsoft Windows Network: the local device name is
>>>>>> already in use. The connection has not been restored.
>>>>>>
>>>>>> ... although the drive is still usable it will display the usual
>>>>>> disconnected drive red cross icon and randomly throw the
>>>>>>
>>>>>>
>>>>>
>>>>> error above
>>>>>
>>>>>
>>>>>
>>>>>> during drive access. This was the ONLY change to the
>>>>>>
>>>>>>
>>>>>
>>>>> domain prior to
>>>>>
>>>>>
>>>>>
>>>>>> the issue and removal of the patch is proving difficult for
>>>>>>
>>>>>>
>>>>>
>>>>> users who
>>>>>
>>>>>
>>>>>
>>>>>> received the patch via HFNetChk Pro. Is anyone else experiencing
>>>>>> similar issues?
>>>>>>
>>>>>> TIA
>>>>>> James
>>>>>>
>>>>>> James O'Gorman, Support Analyst, Higher Education Statistics
>>>>>> Agency (HESA), UK.
>>>>>>
>>>>>> ---
>>>>>> PatchManagement.org is hosted by Shavlik Technologies
>>>>>>
>>>>>> To unsubscribe send a blank email to
>>>>>> leave-patchmanagement@patchmanagement.org.
>>>>>> If you are unable to use this unsubscribe address (because you've
>>>>>> changed mail accounts or your from address doesn't match
>>>>>>
>>>>>>
>>>>>
>>>>> the address
>>>>>
>>>>>
>>>>>
>>>>>> known by the
>>>>>> listserver)
>>>>>> you can still unsubscribe by sending an email to the unique
>>>>>> 'List-Unsubscribe' address listed in the header of each email.
>>>>>>
>>>>>> This electronic mail message contains information that (a)
>>>>>>
>>>>>>
>>>>>
>>>>> is or may
>>>>>
>>>>>
>>>>>
>>>>>> be CONFIDENTIAL, PROPRIETARY IN NATURE, OR OTHERWISE
>>>>>>
>>>>>>
>>>>>
>>>>> PROTECTED BY LAW
>>>>>
>>>>>
>>>>>> FROM DISCLOSURE, and (b) is intended only for the use of the
>>>>>
>>>>>
>>>>>
>>>>>> addressee(s) named herein. If you are not an intended recipient,
>>>>>> please contact the sender immediately and take the steps
>>>>>>
>>>>>>
>>>>>
>>>>> necessary to
>>>>>
>>>>>
>>>>>
>>>>>> delete the message completely from your computer system.
>>>>>>
>>>>>> Not Intended as a Substitute for a Writing: Notwithstanding the
>>>>>> Uniform Electronic Transaction Act or any other law of
>>>>>>
>>>>>>
>>>>>
>>>>> similar effect,
>>>>>
>>>>>
>>>>>
>>>>>> absent an express statement to the contrary, this e-mail
>>>>>>
>>>>>>
>>>>>
>>>>> message, its
>>>>>
>>>>>
>>>>>
>>>>>> contents, and any attachments hereto are not intended to
>>>>>>
>>>>>>
>>>>>
>>>>> represent an
>>>>>
>>>>>
>>>>>
>>>>>> offer or acceptance to enter into a contract and are not
>>>>>> otherwise intended to bind this sender, barnesandnoble.com llc,
>>>>>> barnesandnoble.com inc. or any other person or entity.
>>>>>>
>>>>>> ---
>>>>>> PatchManagement.org is hosted by Shavlik Technologies
>>>>>>
>>>>>> To unsubscribe send a blank email to
>>>>>> leave-patchmanagement@patchmanagement.org.
>>>>>> If you are unable to use this unsubscribe address (because you've
>>>>>> changed mail accounts or your from address doesn't match
>>>>>>
>>>>>>
>>>>>
>>>>> the address
>>>>>
>>>>>
>>>>>
>>>>>> known by the listserver) you can still unsubscribe by
>>>>>>
>>>>>>
>>>>>
>>>>> sending an email
>>>>>
>>>>>
>>>>>
>>>>>> to the unique 'List-Unsubscribe'
>>>>>> address listed in the header of each email.
>>>>>>
>>>>>> ---
>>>>>> PatchManagement.org is hosted by Shavlik Technologies
>>>>>>
>>>>>> To unsubscribe send a blank email to
>>>>>>
>>>>>>
>>>>>
>>>>> leave-patchmanagement@patchmanagement.org.
>>>>>
>>>>>
>>>>>
>>>>>> If you are unable to use this unsubscribe address (because you've
>>>>>> changed mail accounts or your from address doesn't match
>>>>>>
>>>>>>
>>>>>
>>>>> the address
>>>>>
>>>>>
>>>>>
>>>>>> known by the listserver) you can still unsubscribe by
>>>>>>
>>>>>>
>>>>>
>>>>> sending an email to the unique 'List-Unsubscribe'
>>>>>
>>>>>
>>>>>
>>>>>> address listed in the header of each email.
>>>>>>
>>>>>>
>>>>>>
>>>>>
>>>>> ---
>>>>> PatchManagement.org is hosted by Shavlik Technologies
>>>>>
>>>>> To unsubscribe send a blank email to
>>>>> leave-patchmanagement@patchmanagement.org.
>>>>> If you are unable to use this unsubscribe address (because you've
>>>>> changed mail accounts or your from address doesn't match the
>>>>> address known by the listserver) you can still unsubscribe by
>>>>> sending an email
>>>>>
>>>>> to the unique 'List-Unsubscribe'
>>>>> address listed in the header of each email.
>>>>>
>>>>>
>>>>>
>>>>
>>>> ---
>>>> PatchManagement.org is hosted by Shavlik Technologies
>>>>
>>>> To unsubscribe send a blank email to
>>>> leave-patchmanagement@patchmanagement.org.
>>>> If you are unable to use this unsubscribe address (because you've
>>>> changed mail accounts or your from address doesn't match the
>>>> address known by the listserver) you can still unsubscribe by
>>>> sending an email to the unique 'List-Unsubscribe'
>>>> address listed in the header of each email.
>>>>
>>>>
>>>>
>>>> ---
>>>> PatchManagement.org is hosted by Shavlik Technologies
>>>>
>>>> To unsubscribe send a blank email to
>>>> leave-patchmanagement@patchmanagement.org. If you are unable to use
>>>> this unsubscribe address (because you've changed mail accounts or
>>>> your from address doesn't match the address known by the
>>>> listserver) you can still unsubscribe by sending an email to the
>>>> unique 'List-Unsubscribe'
>>>> address
>>>> listed in the header of each email.
>>>>
>>>>
>>>
>>>
>>>
>>> Julian Simpson
>>>
>>> ----------------------
>>> Information Systems Manager
>>> CD4, School Biological Sciences
>>> Tel: 0117 (95) 45932
>>> Julian.Simpson@bristol.ac.uk
>>>
>>>
>>>
>>> ---
>>> PatchManagement.org is hosted by Shavlik Technologies
>>>
>>> To unsubscribe send a blank email to
>>>
>>
>> leave-patchmanagement@patchmanagement.org.
>>
>>
>>> If you are unable to use this unsubscribe address (because you've
>>> changed
>>>
>>
>> mail
>>
>>
>>> accounts or your from address doesn't match the address known by the
>>>
>>
>> listserver)
>>
>>
>>> you can still unsubscribe by sending an email to the unique
>>>
>>
>> 'List-Unsubscribe'
>>
>>> address listed in the header of each email.
>>>
>>>
>>>
>>>
>>>
>>>
>>
>>
>>
>>
>> ---
>> PatchManagement.org is hosted by Shavlik Technologies
>>
>> To unsubscribe send a blank email to
>> leave-patchmanagement@patchmanagement.org.
>> If you are unable to use this unsubscribe address (because you've
>> changed mail accounts or your from address doesn't match the address
>> known by the
>> listserver)
>> you can still unsubscribe by sending an email to the unique
>> 'List-Unsubscribe' address listed in the header of each email.
>>
>>
>>
>
---
PatchManagement.org is hosted by Shavlik Technologies
To unsubscribe send a blank email to
leave-patchmanagement@patchmanagement.org.
If you are unable to use this unsubscribe address (because you've
changed mail accounts or your from address doesn't match the address
known by the listserver) you can still unsubscribe by sending an email
to the unique 'List-Unsubscribe'
address listed in the header of each email.
-----------------------------------------------------------------
Visit our Internet site at http://www.reuters.com
To find out more about Reuters Products and Services visit http://www.reuters.com/productinfo
Any views expressed in this message are those of the individual
sender, except where the sender specifically states them to be
the views of Reuters Ltd.
---
PatchManagement.org is hosted by Shavlik Technologies
To unsubscribe send a blank email to leave-patchmanagement@patchmanagement.org.
If you are unable to use this unsubscribe address (because you've changed mail
accounts or your from address doesn't match the address known by the listserver)
you can still unsubscribe by sending an email to the unique 'List-Unsubscribe'
address listed in the header of each email.
[prev in list] [next in list] [prev in thread] [next in thread]
Configure |
About |
News |
Add a list |
Sponsored by KoreLogic