Select the product you need help with
Some Windows 2000 hotfixes may cause a conflict with Service Pack 3 (SP3) for Windows 2000Article ID: 309601 - View products that this article applies to. This article was previously published under Q309601 On This PageSYMPTOMS This issue does not affect any Windows 2000 hotfixes that
are available from the Microsoft Download Center or on the Windows Update Web
site, including Windows 2000 Security Updates. This issue affects only a small
number of post-Service Pack 3 (SP3) hotfixes, which were created between April
2, 2002, and July 29, 2002, and which are available only from Microsoft Product
Support Services. These hotfixes are listed in the "Resolution" and the "More
Information" sections of this article. If this issue affects your system, the Windows 2000 SP3 Installer will pause during Setup and alert you to the fixes that are in conflict. If you do not receive this alert message, you do not have to worry about this issue. If you choose to continue Setup without taking action, you can still finish the SP3 installation and then apply the updated fix afterward. If you install a post-SP3 version of any of the Windows 2000 hotfixes that are listed in the "More Information" section of this article on a computer on which SP3 for Windows 2000 is installed, or if you install SP3 for Windows 2000 on a computer on which these post-SP3 hotfixes are installed, you may experience either of the following symptoms:
CAUSE This issue occurs because of the testing process that is
performed before the release of a service pack. Before SP3 for Windows 2000 was released, extensive testing was performed to make sure that all of the included fixes and updates worked correctly. During the time before SP3 was released, during testing, new customer-requested updates were not incorporated into SP3. Instead, Microsoft scheduled the new customer-requested updates into a future service pack for Windows 2000. To provide solutions to customer requests as quickly as possible, these updates were created as post-SP3 versions of hotfixes, and then released to the customers who needed them. These post-SP3 hotfixes are not included in SP3, but may be included in later service packs for Windows 2000. Additionally, during further tests of these post-SP3 hotfixes, updates or fixes for problems that were found were incorporated into SP3 for Windows 2000. These updates and fixes will also be included in later service packs. However, it was not possible to include these updates or fixes in the post-SP3 hotfixes because they had already been distributed to the customers who requested them. With the release of SP3 for Windows 2000, the post-SP3 hotfixes have now been re-created to include all necessary improvements and updates. These updated hotfixes are available to customers to upgrade post-SP3 hotfix versions so that customers do not lose functionality and have no conflicts when they install SP3 for Windows 2000 or when they install updates on a computer with SP3 for Windows 2000. RESOLUTION To resolve this issue, obtain and install the updated
versions of the hotfixes that are listed in the section of this article. NOTE: You can install the updated versions of these hotfixes either before or after you install SP3 for Windows 2000.
STATUSMORE INFORMATION The following post-SP3 hotfixes are known to cause the
behavior described in the Symptoms
section of this article. Windows 2000 Active Directory Hotfixes316803
(http://support.microsoft.com/kb/316803/
)
Earlier clients may fail to change passwords or join in a Windows 2000 domain
318533
(http://support.microsoft.com/kb/318533/
)
Windows 2000 post-Service Pack 3 Active Directory rollup hotfix
320828
(http://support.microsoft.com/kb/320828/
)
Data that is protected by user's private key can be accessed by a domain administrator who resets the user's password
323661
(http://support.microsoft.com/kb/323661/
)
The "No 'Entire Network' in My Network Place" policy is not used in the Add Network Place Wizard
323538
(http://support.microsoft.com/kb/323538/
)
IAS authentication is unsuccessful after you install the 292053 hotfix
323758
(http://support.microsoft.com/kb/323758/
)
SFM Macintosh logon audit event is not logged when you use Microsoft UAM
324406
(http://support.microsoft.com/kb/324406/
)
Printing to a redirected LPT1 from Windows XP to Windows 2000 prints multiple separator pages
324574
(http://support.microsoft.com/kb/324574/
)
Certificate does not display the ampersand (&) in a company name
324612
back to the "Resolution" section
back to the "Resolution" section
(http://support.microsoft.com/kb/324612/
)
Plug and Play devices are not detected after you restart your Windows 2000-based computer
Windows 2000 Shell Hotfixes288180
(http://support.microsoft.com/kb/288180/
)
The ExitWindowsEx() function may not log off the user or shut down the computer if the computer is locked
322346
(http://support.microsoft.com/kb/322346/
)
You cannot access protected data after you change your password
325804
back to the "Resolution" section
(http://support.microsoft.com/kb/325804/
)
User Context may not have sufficient access rights when you use the LogonUser property
Windows 2000 Kernel Hotfixes: 1 of 2312827
(http://support.microsoft.com/kb/312827/
)
An incorrect authentication package name may appear in audit event 529
319672
(http://support.microsoft.com/kb/319672/
)
Directory Service access audits for a SAM Object Server have incomplete object names
319709
(http://support.microsoft.com/kb/319709/
)
An access violation occurs in Lsass because of a stack overflow
320099
(http://support.microsoft.com/kb/320099/
)
A security policy does not process restricted groups correctly
320670
(http://support.microsoft.com/kb/320670/
)
Event ID 528 may not be logged if LsaLogonUser() is called
320711
(http://support.microsoft.com/kb/320711/
)
Accessing Active Directory with LDAP by using Sun JNDI calls may not work
320903
back to the "Resolution" section
(http://support.microsoft.com/kb/320903/
)
Clients cannot log on by using Kerberos over TCP
Windows 2000 Kernel Hotfixes: 2 of 2321217
(http://support.microsoft.com/kb/321217/
)
You receive an "Action Could Not Be Completed" error message when you select many recipients in the global address list
321933
(http://support.microsoft.com/kb/321933/
)
Services are not listed in the Security Configuration and Analysis snap-in
322175
(http://support.microsoft.com/kb/322175/
)
"Invalid Password" error when joining a domain with Sysprep image
322842
back to the "Resolution" section
(http://support.microsoft.com/kb/322842/
)
A lock occurs between two threads of system GDI in Windows 2000
Windows 2000 Spooler Hotfixes324184
back to the "Resolution" section
(http://support.microsoft.com/kb/324184/
)
Access violation in Lsass.exe because of LDAP Version 2 search with referrals
Windows 2000 Network Shell Hotfixes321166
back to the "Resolution" section
(http://support.microsoft.com/kb/321166/
)
"Your Password Is Expired" error message when you access resources from Macintosh on Windows 2000 Server running AppleTalk Network Integration
Windows 2000 OLE Hotfixes321854
back to the "Resolution" section
(http://support.microsoft.com/kb/321854/
)
Only members of the Administrators group can retrieve the ntSecurityDescriptor attribute from an IDirectorySearch result set
Windows 2000 Internet Information Services (IIS) Hotfixes322042
back to the "Resolution" section
(http://support.microsoft.com/kb/322042/
)
Input language of Terminal Server client does not match that of Terminal Server session
Other Hotfixes324120
(http://support.microsoft.com/kb/324120/
)
Cannot log on to domain after adding a computer to a domain
325641
(http://support.microsoft.com/kb/325641/
)
Cannot connect in the Active Directory Users and Computers Tool
326109
(http://support.microsoft.com/kb/326109/
)
EMF print jobs that contain Type 1 fonts may not print
324377
(http://support.microsoft.com/kb/324377/
)
Cannot use domain Local Groups for Active Directory certificate mapping
318815
(http://support.microsoft.com/kb/318815/
)
Cannot connect to Web sites that require SSL 3.0
264959
(http://support.microsoft.com/kb/264959/
)
Redirector does not inform Cache Manager of memory extends
318789
(http://support.microsoft.com/kb/318789/
)
Redirector does not cache files when the SPARSE attribute is set
319967
(http://support.microsoft.com/kb/319967/
)
You cannot open a file that you moved to a DFS share
322019
(http://support.microsoft.com/kb/322019/
)
Data loss occurs when you copy files over the network
265396
(http://support.microsoft.com/kb/265396/
)
Slow network performance occurs when you select a file on a share that uses NTFS
321126
(http://support.microsoft.com/kb/321126/
)
The "Look In" and "Save As" boxes in common dialog boxes are slow
322820
(http://support.microsoft.com/kb/322820/
)
"Hide Specified Control Panel Applets" policy does not work in Windows 2000
323045
(http://support.microsoft.com/kb/323045/
)
Access violation error message in Explorer.exe
321787
(http://support.microsoft.com/kb/321787/
)
Access violation when you run Windows Installer in a Terminal Services session
321788
(http://support.microsoft.com/kb/321788/
)
STDIN/STDOUT redirection may not work if started from a file association
302510
back to the "Resolution" section
(http://support.microsoft.com/kb/302510/
)
Stop 0x0000001e error message in Win32k.sys when users log off from a server running Terminal Services
Properties |
Back to the top
