Article ID: 309601
This article was previously published under Q309601
This article has been archived. It is offered "as is" and will no longer be updated.
This issue does not affect any Windows 2000 hotfixes that are available from the Microsoft Download Center or on the Windows Update Web site, including Windows 2000 Security Updates. This issue affects only a small number of post-Service Pack 3 (SP3) hotfixes, which were created between April 2, 2002, and July 29, 2002, and which are available only from Microsoft Product Support Services. These hotfixes are listed in the "Resolution" and the "More Information" sections of this article.
If this issue affects your system, the Windows 2000 SP3 Installer will pause during Setup and alert you to the fixes that are in conflict. If you do not receive this alert message, you do not have to worry about this issue. If you choose to continue Setup without taking action, you can still finish the SP3 installation and then apply the updated fix afterward.
If you install a post-SP3 version of any of the Windows 2000 hotfixes that are listed in the "More Information" section of this article on a computer on which SP3 for Windows 2000 is installed, or if you install SP3 for Windows 2000 on a computer on which these post-SP3 hotfixes are installed, you may experience either of the following symptoms:
This issue occurs because of the testing process that is performed before the release of a service pack.
Before SP3 for Windows 2000 was released, extensive testing was performed to make sure that all of the included fixes and updates worked correctly. During the time before SP3 was released, during testing, new customer-requested updates were not incorporated into SP3. Instead, Microsoft scheduled the new customer-requested updates into a future service pack for Windows 2000. To provide solutions to customer requests as quickly as possible, these updates were created as post-SP3 versions of hotfixes, and then released to the customers who needed them. These post-SP3 hotfixes are not included in SP3, but may be included in later service packs for Windows 2000.
Additionally, during further tests of these post-SP3 hotfixes, updates or fixes for problems that were found were incorporated into SP3 for Windows 2000. These updates and fixes will also be included in later service packs. However, it was not possible to include these updates or fixes in the post-SP3 hotfixes because they had already been distributed to the customers who requested them.
With the release of SP3 for Windows 2000, the post-SP3 hotfixes have now been re-created to include all necessary improvements and updates. These updated hotfixes are available to customers to upgrade post-SP3 hotfix versions so that customers do not lose functionality and have no conflicts when they install SP3 for Windows 2000 or when they install updates on a computer with SP3 for Windows 2000.
To resolve this issue, obtain and install the updated versions of the hotfixes that are listed in the section of this article.
NOTE: You can install the updated versions of these hotfixes either before or after you install SP3 for Windows 2000.
Microsoft has confirmed that this is a problem in the hotfixes that are identified in this article.
The following post-SP3 hotfixes are known to cause the behavior described in the Symptoms section of this article.
(http://support.microsoft.com/kb/316803/ )Earlier clients may fail to change passwords or join in a Windows 2000 domain
(http://support.microsoft.com/kb/318533/ )Windows 2000 post-Service Pack 3 Active Directory rollup hotfix
(http://support.microsoft.com/kb/320828/ )Data that is protected by user's private key can be accessed by a domain administrator who resets the user's password
(http://support.microsoft.com/kb/323661/ )The "No 'Entire Network' in My Network Place" policy is not used in the Add Network Place Wizard
(http://support.microsoft.com/kb/323538/ )IAS authentication is unsuccessful after you install the 292053 hotfix
(http://support.microsoft.com/kb/323758/ )SFM Macintosh logon audit event is not logged when you use Microsoft UAM
(http://support.microsoft.com/kb/324406/ )Printing to a redirected LPT1 from Windows XP to Windows 2000 prints multiple separator pages
(http://support.microsoft.com/kb/324574/ )Certificate does not display the ampersand (&amp;) in a company name
324612back to the "Resolution" section back to the "Resolution" section
(http://support.microsoft.com/kb/324612/ )Plug and Play devices are not detected after you restart your Windows 2000-based computer
(http://support.microsoft.com/kb/288180/ )The ExitWindowsEx() function may not log off the user or shut down the computer if the computer is locked
(http://support.microsoft.com/kb/322346/ )You cannot access protected data after you change your password
325804back to the "Resolution" section
(http://support.microsoft.com/kb/325804/ )User Context may not have sufficient access rights when you use the LogonUser property
(http://support.microsoft.com/kb/312827/ )An incorrect authentication package name may appear in audit event 529
(http://support.microsoft.com/kb/319672/ )Directory Service access audits for a SAM Object Server have incomplete object names
(http://support.microsoft.com/kb/319709/ )An access violation occurs in Lsass because of a stack overflow
(http://support.microsoft.com/kb/320099/ )A security policy does not process restricted groups correctly
(http://support.microsoft.com/kb/320670/ )Event ID 528 may not be logged if LsaLogonUser() is called
(http://support.microsoft.com/kb/320711/ )Accessing Active Directory with LDAP by using Sun JNDI calls may not work
320903back to the "Resolution" section
(http://support.microsoft.com/kb/320903/ )Clients cannot log on by using Kerberos over TCP
(http://support.microsoft.com/kb/321217/ )You receive an "Action Could Not Be Completed" error message when you select many recipients in the global address list
(http://support.microsoft.com/kb/321933/ )Services are not listed in the Security Configuration and Analysis snap-in
(http://support.microsoft.com/kb/322175/ )"Invalid Password" error when joining a domain with Sysprep image
322842back to the "Resolution" section
(http://support.microsoft.com/kb/322842/ )A lock occurs between two threads of system GDI in Windows 2000
324184back to the "Resolution" section
(http://support.microsoft.com/kb/324184/ )Access violation in Lsass.exe because of LDAP Version 2 search with referrals
321166back to the "Resolution" section
(http://support.microsoft.com/kb/321166/ )"Your Password Is Expired" error message when you access resources from Macintosh on Windows 2000 Server running AppleTalk Network Integration
321854back to the "Resolution" section
(http://support.microsoft.com/kb/321854/ )Only members of the Administrators group can retrieve the ntSecurityDescriptor attribute from an IDirectorySearch result set
322042back to the "Resolution" section
(http://support.microsoft.com/kb/322042/ )Input language of Terminal Server client does not match that of Terminal Server session
(http://support.microsoft.com/kb/324120/ )Cannot log on to domain after adding a computer to a domain
(http://support.microsoft.com/kb/325641/ )Cannot connect in the Active Directory Users and Computers Tool
(http://support.microsoft.com/kb/326109/ )EMF print jobs that contain Type 1 fonts may not print
(http://support.microsoft.com/kb/324377/ )Cannot use domain Local Groups for Active Directory certificate mapping
(http://support.microsoft.com/kb/318815/ )Cannot connect to Web sites that require SSL 3.0
(http://support.microsoft.com/kb/264959/ )Redirector does not inform Cache Manager of memory extends
(http://support.microsoft.com/kb/318789/ )Redirector does not cache files when the SPARSE attribute is set
(http://support.microsoft.com/kb/319967/ )You cannot open a file that you moved to a DFS share
(http://support.microsoft.com/kb/322019/ )Data loss occurs when you copy files over the network
(http://support.microsoft.com/kb/265396/ )Slow network performance occurs when you select a file on a share that uses NTFS
(http://support.microsoft.com/kb/321126/ )The "Look In" and "Save As" boxes in common dialog boxes are slow
(http://support.microsoft.com/kb/322820/ )"Hide Specified Control Panel Applets" policy does not work in Windows 2000
(http://support.microsoft.com/kb/323045/ )Access violation error message in Explorer.exe
(http://support.microsoft.com/kb/321787/ )Access violation when you run Windows Installer in a Terminal Services session
(http://support.microsoft.com/kb/321788/ )STDIN/STDOUT redirection may not work if started from a file association
302510back to the "Resolution" section
(http://support.microsoft.com/kb/302510/ )Stop 0x0000001e error message in Win32k.sys when users log off from a server running Terminal Services