SMS uses the Microsoft Baseline Security Analyzer (MBSA) scanning tool. MBSA can detect computers that require the security update that is documented in Microsoft security bulletin MS05-025. However, MBSA cannot provide SMS with information about supported operating systems for this update. For example, MBSA indicates that this update is compatible with Windows NT 4.0, even though this update is not compatible with Windows NT 4.0. The SMS deployment package is designed to prevent installation of this incompatible update on Windows NT 4.0. If you install security update MS05-025 on Windows NT 4.0-based computers without using the specific SMS deployment package, installation failures will occur on the client computers.

For more information about security update MS05-025, visit the following Microsoft Web site:

Back to the top

To resolve this problem, Microsoft has released an SMS deployment package to the Microsoft Download Center. The SMS deployment package includes the following items:

•	The IE6.0sp1-KB883939-Windows-2000-XP-x86-ENU.exe file
•	A script that detects the operating system on SMS client computers and that prevents installation on Windows NT 4.0

After security update MS05-025 is approved in the Distribute Software Updates Wizard, SMS will download the SMS deployment package instead of the specified security update that is documented in Microsoft security bulletin MS05-025.

Important If you authorize security update MS05-025 for languages other than English, French, German, or Japanese, you must manually download the SMS deployment package for the appropriate language. You must also manually download the SMS deployment packages for the appropriate languages if the following conditions are true:

•	You are using the English version of the security catalog.
•	You are scanning French, German, or Japanese client computers.

Back to the top

Download information

The following file is available for download from the Microsoft Download Center:

English (U.S.):Arabic: Portuguese (Brazil):Chinese (Traditional):Chinese (Simplified):Czech:Danish:German:Greek:Spanish:Finnish:French:Hebrew:Hungarian:Italian:Japanese:Japanese NEC:Korean:Dutch:Norwegian (Bokmål):Polish:Portuguese:Russian:Swedish:Turkish: Release Date: June 14, 2005

For more information about how to download Microsoft Support files, click the following article number to view the article in the Microsoft Knowledge Base: Microsoft scanned this file for viruses. Microsoft used the most current virus-detection software that was available on the date that the file was posted. The file is stored on security-enhanced servers that help prevent any unauthorized changes to the file.

Back to the top

Prerequisites

The SMS deployment package requires the SMS 2.0 SUS Feature Pack or the SMS 2003 Software Update feature.

Back to the top

Deployment information

To use the SMS deployment package, type the /q:a /r:n command-line options in the Distribute Software Updates Wizard. The SMS deployment package contains a configuration file that has the actual command-line options that are used for the security update. This silently installs the security update without restarting client computers. These command-line options are part of the script logic in the SMS deployment package. These command-line options cannot be changed.

Back to the top

Frequently asked questions

Q1: What is the difference between the security update that is included in the SMS deployment package and the security update that is documented in Microsoft security bulletin MS05-025?

A1: There is no difference between the security update that is included in the SMS deployment package and the security update that is documented in Microsoft security bulletin MS05-025. SMS wraps the actual security update MS05-025 by using the SMS deployment package. However, the update that is run on the client computer is the same update that is available for download from Microsoft security bulletin MS05-025.

Q2: Does the SMS deployment package support security update MS05-025 for other versions of Internet Explorer?

A2: No. The SMS deployment package contains only a security update for Internet Explorer 6 SP1 when it is used with Windows 2000 or with Windows XP. Security update MS05-025 for other versions of Internet Explorer can be detected and deployed by using SMS. There is no requirement for a separate SMS deployment package.

Q3: I have Internet Explorer 6 SP1 running in a homogenous environment with only one type of operating system. For example, my SMS client computers only run Windows 2000. Must I use the SMS deployment package, or can I deploy the security update that is documented in Microsoft security bulletin MS05-025?

A3: You can use the SMS deployment package, or you can manually download and deploy the specific operating system update that is documented in Microsoft security bulletin MS05-025. You can use the Distribute Software Update Wizard to import the actual security update MS05-025 for deployment.

Back to the top