Microsoft Baseline Security Analyzer (MBSA) is the scanning tool that is used by SMS. MBSA can detect computers that require the security updates documented in Microsoft security bulletin MS04-040. However, MBSA cannot provide SMS with the information that it must have to download and deploy the appropriate MS04-040 security update packages for Internet Explorer 6 SP1 for Windows NT 4.0 and Internet Explorer 6 SP1 for Windows 2000 and Windows XP.

Note The MS04-040 security update package for Windows NT 4.0 is named IE6.0sp1-KB889293-Windows-NT4sp6a-98-ME-x86-ENU.exe. The MS04-040 security update package for Windows 2000 and Windows XP is named IE6.0sp1-KB889293-Windows-2000-XP-x86-ENU.exe.

For additional information about the MS04-040 security updates, visit the following Microsoft Web site: http://www.microsoft.com/technet/security/bulletin/MS04-040.mspx (http://www.microsoft.com/technet/security/bulletin/MS04-040.mspx)

Back to the top

To resolve this problem, we have released an SMS deployment package to the Microsoft Download Center. The SMS deployment package includes the following:

•	IE6.0sp1-KB889293-Windows-2000-XP-x86-ENU.exe
•	IE6.0sp1-KB889293-Windows-NT4sp6a-98-ME-x86-ENU.exe
•	A script to detect the operating system for SMS client computers and to install the appropriate security update

After the MS04-040 security update is approved in the DSUW, SMS will download the SMS deployment package instead of the specified security updates that are documented in Microsoft security bulletin MS04-040.

Important If you authorize the MS04-040 security update for languages other than English, French, German, or Japanese, you must manually download the SMS deployment package for the appropriate language. Additionally, if the following conditions are true, you also must manually download the SMS deployment packages for the appropriate languages:

•	You are using the English version of the security catalog
•	You are scanning French, German, or Japanese client computers

Back to the top

Download information

The following files are available for download from the Microsoft Download Center:
Release Date: December 1, 2004

For additional information about how to download Microsoft Support files, click the following article number to view the article in the Microsoft Knowledge Base: Microsoft scanned this file for viruses. Microsoft used the most current virus-detection software that was available on the date that the file was posted. The file is stored on security-enhanced servers that help to prevent any unauthorized changes to the file.

Back to the top

Prerequisites

The SMS deployment package requires the SMS 2.0 SUS Feature Pack or the SMS 2003 Software Update feature.

Back to the top

Usage information

To use the SMS deployment package, specify the following command-line command in DSUW:The SMS deployment package uses the recommended command-line switches for SMS deployment to install the security updates silently without restarting client computers. For the Windows 2000 and Windows XP security updates, the /quiet /norestart command-line switches are used. For the Windows NT 4.0 security update, the /q:a /r:n command-line switches are used. These command-line switches are part of the script logic in the SMS deployment package. These command-line switches cannot be changed.

Back to the top

Frequently asked questions

What is the difference between the security updates that are included in the SMS deployment package and the security updates that are documented in Microsoft security bulletin MS04-040?

There is no difference in the security updates in the SMS deployment package and the security updates that are documented in Microsoft security bulletin MS04-040.

I received a hotfix from Microsoft or from my support provider after the release of Microsoft security bulletin MS04-004. Is that hotfix included in the SMS deployment package?

No. The SMS deployment package includes the same security updates that are documented in Microsoft security bulletin MS04-040. For all operating systems besides Microsoft Windows Server 2003, Microsoft Windows 64-Bit Edition Version 2003, or Microsoft Windows XP Service Pack 2, Internet Explorer hotfixes that were created after MS04-004 or after MS04-025 are not included in the MS04-040 security updates. Therefore, hotfixes that were released after MS04-004 may be removed when you install the MS04-040 security updates. An update rollup is available that contains Internet Explorer hotfixes that were released after MS04-004. The update rollup also includes all the security fixes that are included in the MS04-040 security updates. For additional information about the update rollup, click the following article number to view the article in the Microsoft Knowledge Base: Note Microsoft does not support SMS deployment of the 889669 update rollup. There is no SMS deployment package for the 889669 update rollup. The 889669 update rollup is available for download from the Microsoft Download Center only.

Does the SMS deployment package support MS04-040 security updates for other versions of Internet Explorer?

No. The problem that is described in this article occurs only with the MS04-040 security updates for Internet Explorer 6 SP1 for Windows NT 4.0, for Windows 2000, and for Windows XP. The MS04-040 security updates for other versions of Internet Explorer can be detected and deployed by using SMS. There is no need for a separate SMS deployment package for other MS04-040 security updates.

I have Internet Explorer 6 SP1 running in a homogenous environment with only one type of operating system. For example, my SMS client computers run only on Windows 2000. Must I use the SMS deployment package, or can I deploy the security updates that are documented in Microsoft security bulletin MS04-040?

You can use the SMS deployment package, or you can manually download and deploy the specific operating system update that is documented in the MS04-040 security bulletin.

Back to the top