Article ID: 903675 - Last Review: October 27, 2006 - Revision: 2.5 Detection and deployment guidance for the July 12, 2005 security releaseOn This PageSUMMARYMicrosoft is providing this detection and deployment guidance for all updates that are released as part of the security release that is dated July 12, 2005. This guidance covers environments that use the following tools to detect and to deploy security updates:
INTRODUCTIONThis article includes detection and deployment guidance
for the security release that is dated July 12, 2005. As part of an ongoing commitment to provide detection tools and deployment recommendations for security updates, Microsoft is providing this guidance for all updates that are released during a Microsoft Security Response Center (MSRC) release cycle. This guidance contains recommendations that are based on the types of scenarios that may exist in various Microsoft operating system environments. This guidance includes the use of tools such as Windows Update, Office Update, the Microsoft Baseline Security Analyzer (MBSA), the Office Detection Tool, Microsoft Systems Management Server (SMS), the Extended Security Update Inventory Tool, and the Enterprise Update Scan Tool (EST). MORE INFORMATIONDetection and deploymentEnvironments that use Microsoft Windows Update, Microsoft Update, and Office Update to detect and to deploy security updatesMost of the updates that were released on July 12, 2005 are available through the following Web sites:
Environments that use versions 1.2.1 and 2.0 of MBSA to detect security updatesIf you use versions 1.2.1 or 2.0 of the Microsoft Baseline Security Analyzer (MBSA) to detect security updates, you can detect most of the updates that were released on July 12, 2005. The following list details which version of MBSA will detect which updates:
894193
(http://support.microsoft.com/kb/894193/
)
How to obtain and use the Enterprise Update Scan Tool
Environments that use Software Update Services or Windows Server Update Services to detect and to deploy security updatesIf you use Microsoft Software Update Services (SUS) or Microsoft Windows Server Update Services (WSUS) to detect and to deploy security updates, you can detect most of the updates that were released on July 12, 2005. However, SUS and WSUS do not detect or only partially support the following updates:
Environments that use SMS together with the Software Update Services Feature Pack and with the Extended Security Update Inventory Tool to detect and to deploy security updatesIf you use Microsoft Systems Management Server (SMS) to detect and to deploy security updates, you can detect all the security updates that were released on July 12, 2005. However, you can fully detect some of the security updates only by using the latest cumulative Extended Security Update Inventory Tool. To obtain this tool, visit the following Microsoft Web site:http://www.microsoft.com/downloads/details.aspx?FamilyId=2C93DA1D-48A0-4E5C-991F-87E08954F61B&displaylang=en
(http://www.microsoft.com/downloads/details.aspx?FamilyId=2C93DA1D-48A0-4E5C-991F-87E08954F61B&displaylang=en)
Summary of detection and deployment guidanceNew security updatesThe following table summarizes the detection and deployment guidance for each new security update.Collapse this table
Rereleased security updatesThe following table summarizes the detection and deployment guidance for each re-released security update.Collapse this table
Frequently asked questionsWhat is Microsoft doing to provide guidance about how to deploy these updates?Microsoft encourages system administrators to join the monthly technical webcast to learn more about security updates. The webcast for these security update airs on July 13, 2005 at 11:00 A.M. Pacific Time. To register, visit the following Microsoft Web site: http://msevents.microsoft.com/cui/WebCastEventDetails.aspx?EventID=1032276892&EventCategory=4&culture=en-US&CountryCode=US
(http://msevents.microsoft.com/cui/WebCastEventDetails.aspx?EventID=1032276892&EventCategory=4&culture=en-US&CountryCode=US)
Is the Enterprise Update Scan Tool cumulative, as the Extended Security Update Inventory Tool is for SMS?No, the Enterprise Update Scan tool is not cumulative. There are no plans to make the Enterprise Update Scan tool cumulative. Can I use the Microsoft Baseline Security Analyzer (MBSA) tool to determine whether updates are required? You can use versions 1.2.1 and 2.0 of MBSA to detect the following security updates that were released in July, 2005:
For more information about the programs that the MBSA currently does not detect, click the following article numbers to view the articles in the Microsoft Knowledge Base: 306460
(http://support.microsoft.com/kb/306460/
)
Microsoft Baseline Security Analyzer 1.2.1(MBSA) returns note messages for some updates
895660
(http://support.microsoft.com/kb/895660/
)
Microsoft Baseline Security Analyzer 2.0 is Available
If you have installed a program that is listed
in the "Affected software" section of a security bulletin, you may have to manually determine whether you must
install the security update. For more information about MBSA,
visit the following Microsoft Web site:http://www.microsoft.com/technet/security/tools/mbsahome.mspx
(http://technet.microsoft.com/en-us/security/cc184924.aspx)
Which security updates require that I use the Enterprise Update Scan Tool together with MBSA to identify vulnerable systems on my network?The following security update is partially supported by the Enterprise Update Scan Tool together with the MBSA under certain conditions:
Can I use Systems Management Server (SMS) to determine whether these updates are required? Yes. SMS helps detect and deploy these security updates. However, because SMS uses MBSA to detect updates, SMS does not detect updates that MBSA does not detect. For more information about SMS, visit the following Microsoft Web site: http://technet.microsoft.com/en-us/security/cc184924.aspx
(http://www.microsoft.com/smserver/default.mspx)
To detect all the security updates on
Microsoft Windows and on other affected Microsoft
products, the
Security Update Inventory Tool and the Extended Security Update
Inventory Tool are both required.For more information about the limitations of the Security Update Inventory Tool, click the following article number to view the article in the Microsoft Knowledge Base: 306460
(http://support.microsoft.com/kb/306460/
)
Microsoft Baseline Security Analyzer (MBSA) returns note messages for some updates
SMS also uses the Microsoft Office Inventory
Tool to detect the required security updates for Microsoft Office programs such
as Microsoft Word.APPLIES TO
| Article Translations
|
| United States | Change | | | All Microsoft Sites |
Back to the top
|
