SMS uses the Microsoft Baseline Security Analyzer (MBSA) scanning tool. MBSA can detect computers that require the security update that is documented in Microsoft security bulletin MS05-020. However, MBSA cannot provide SMS with information about supported operating systems for this update. For example, MBSA indicates that this update is compatible with Windows NT 4.0, even though it is not. The SMS deployment package is designed to prevent installation of this incompatible update in Windows NT 4.0. If you install the update on Windows NT 4.0-based computers without using the SMS deployment package, installation failures will occur on the client computers.

For more information about security update MS05-020, visit the following Microsoft Web site:

Back to the top

To resolve this problem, Microsoft has released an SMS deployment package to the Microsoft Download Center. The SMS deployment package includes the following items:

•	The IE6.0sp1-KB890923-SMS-Deploy-KB896162-x86-ENU.exe file.
•	A script that detects the operating system on SMS client computers and that prevents installation in Windows NT 4.0.

After security update MS05-020 is approved in the Distribute Software Updates Wizard, SMS will download the SMS deployment package instead of the specified security update that is documented in Microsoft security bulletin MS05-020.

Important If you authorize security update MS05-020 for languages other than English, French, German, or Japanese, you must manually download the SMS deployment package for the appropriate language. You must also manually download the SMS deployment packages for the appropriate languages if the following conditions are true:

•	You are using the English version of the security catalog.
•	You are scanning French, German, or Japanese client computers.

Back to the top

Download information

The following files are available for download from the Microsoft Download Center:

English (U.S.): Arabic: Portuguese (Brazil): Chinese (Traditional): Chinese (Simplified): Czech: Danish: German: Greek: Spanish: Finnish: French: Hebrew: Hungarian: Italian: Japanese: Japanese NEC: Korean: Dutch: Norwegian (Bokmål): Polish: Portuguese: Russian: Swedish: Turkish: Release Date: April 12, 2005

For more information about how to download Microsoft Support files, click the following article number to view the article in the Microsoft Knowledge Base: Microsoft scanned this file for viruses. Microsoft used the most current virus-detection software that was available on the date that the file was posted. The file is stored on security-enhanced servers that help prevent any unauthorized changes to the file.

Back to the top

Prerequisites

The SMS deployment package requires the SMS 2.0 SUS Feature Pack or the SMS 2003 Software Update feature.

Back to the top

Deployment information

To use the SMS deployment package, type the following command in the Distribute Software Updates Wizard:The SMS deployment package uses command-line options that install the security update silently without restarting client computers. These command-line options are part of the script logic in the SMS deployment package. These command-line options cannot be changed.

Back to the top

Frequently asked questions

Q1: What is the difference between the security update that is included in the SMS deployment package and the security update that is documented in Microsoft security bulletin MS05-020?

A1: There is no difference in the security update in the SMS deployment package and the security update that is documented in Microsoft security bulletin MS05-020.

Q2: Does the SMS deployment package support security update MS05-020 for other versions of Internet Explorer?

A2: No. The deployment package contains only a security update for Internet Explorer 6 SP1 when it is used with Windows 2000 or with Windows XP. Security update MS05-020 for other versions of Internet Explorer can be detected and deployed by using SMS. There is no requirement for a separate SMS deployment package.

Q3: I have Internet Explorer 6 SP1 running in a homogenous environment with only one type of operating system. For example, my SMS client computers only run Windows 2000. Must I use the SMS deployment package, or can I deploy the security update that is documented in Microsoft security bulletin MS05-020?

A3: You can use the SMS deployment package, or you can manually download and deploy the specific operating system update that is documented in security bulletin MS05-020.

Back to the top