Description of the security update for Windows SharePoint Services 3.0: October 9, 2007

View products that this article applies to.

INTRODUCTION

Important For computers that are running Microsoft Windows SharePoint Services 3.0, the security update that is dated October 9, 2007 supersedes and replaces the following hotfix package:

941422 (http://support.microsoft.com/kb/941422/ ) Description of the Windows SharePoint Services 3.0 hotfix package: August 24, 2007

For computers that have Windows SharePoint Services 3.0 installed but do not have Microsoft Office SharePoint Server 2007 installed, you must install security update 934525. For computers that have SharePoint Server 2007 installed, you must apply security update 934525 and the security update for SharePoint Server 2007 that is dated October 9, 2007.

For more information about the security update for SharePoint Server 2007 dated October 9, 2007, click the following article number to view the article in the Microsoft Knowledge Base:

937832 (http://support.microsoft.com/kb/937832/ ) Description of the security update for SharePoint Server 2007: October 9, 2007

Microsoft has released security bulletin MS07-059. The security bulletin contains all the relevant information about the security update for Microsoft Windows SharePoint Services 3.0. This information includes file manifest information and deployment options.

To view the complete security bulletin, visit the following Microsoft Web site:

http://www.microsoft.com/technet/security/bulletin/ms07-059.mspx (http://www.microsoft.com/technet/security/bulletin/ms07-059.mspx)

Note If you have deployed host-named site collections in Windows SharePoint Services, do not apply this security update at this point. For more information, see the "Known issues" section.

Back to the top

Update information

The following files are available for download from the Microsoft Download Center:

Security Update for Windows SharePoint Services 3.0

Collapse this imageExpand this image

Download the 934525 package now. (http://www.microsoft.com/downloads/details.aspx?FamilyID=76fc2225-2802-46e5-a294-a842e3841877&DisplayLang=en)

Security Update for Windows SharePoint Services 3.0 x64 Edition

Collapse this imageExpand this image

Download the 934525 package now. (http://www.microsoft.com/downloads/details.aspx?familyid=667335DD-DF2E-4F14-A130-5758701BE055&displaylang=en)

Release Date: October 10, 2007

For more information about how to download Microsoft support files, click the following article number to view the article in the Microsoft Knowledge Base:

119591 (http://support.microsoft.com/kb/119591/ ) How to obtain Microsoft support files from online services

Microsoft scanned this file for viruses. Microsoft used the most current virus-detection software that was available on the date that the file was posted. The file is stored on security-enhanced servers that help prevent any unauthorized changes to the file.

Back to the top

How to deploy software updates for Windows SharePoint Services 3.0

We recommend that you follow the process and procedures in the "Deploy software updates for Windows SharePoint Services 3.0" topic for most deployment scenarios, from stand-alone server deployments to very large server farms.

For more information, visit the following Microsoft Web site:

http://technet2.microsoft.com/windowsserver/WSS/en/library/91649a7e-6b5a-4e5a-9ee5-51951f4b857f1033.mspx (http://technet2.microsoft.com/windowsserver/WSS/en/library/91649a7e-6b5a-4e5a-9ee5-51951f4b857f1033.mspx)

This security update fixes the following issues:

938663 (http://support.microsoft.com/kb/938663/ ) One-time timer jobs in Windows SharePoint Services 3.0 or in SharePoint Server 2007 are delayed by at least one hour when the jobs are scheduled to occur during daylight saving time (DST)
935605 (http://support.microsoft.com/kb/935605/ ) Issues that may occur when you use the volume shadow copy service (VSS) reference writer in Windows SharePoint Services 3.0
937038 (http://support.microsoft.com/kb/937038/ ) Error message when you try to connect to a site in a Windows SharePoint Services 3.0 site collection: "HTTP 500 - Internal server error"
941422 (http://support.microsoft.com/kb/941422/ ) Description of the Windows SharePoint Services 3.0 hotfix package: August 24, 2007
939809 (http://support.microsoft.com/kb/939809/ ) Description of the update that addresses the issue in Windows SharePoint Services 3.0 in which items that use the Date and Time fields are off by one hour

This security update fixes the following issue that was not previously documented in a Microsoft Knowledge Base article:

Database creation fails after you install Windows Internal Database Engine Service Pack 2.

Back to the top

Known issues

During the last two steps of the SharePoint Products and Technologies Configuration Wizard, you may receive the following error message:
Failed to start service SPSearchServiceInstance on this server after completing upgrade. Please start it manually.
However, the SPSearchServiceInstance service was actually started after the SharePoint Products and Technologies Configuration Wizard finished. You can safely ignore this error message and the error message that is logged in the SharePoint Products and Technologies Configuration Wizard log file.
The Microsoft GroupBoard Workspace 2007 add-in template for Windows SharePoint Services 3.0 may cause the SharePoint Products and Technologies Configuration Wizard to fail during a build-to-build upgrade.

For more information, click the following article number to view the article in the Microsoft Knowledge Base:
941678 (http://support.microsoft.com/kb/941678/ ) The SharePoint Products and Technologies Configuration Wizard does not finish successfully on a computer that also has GroupBoard Workspace 2007 installed
When you run a gradual upgrade of a Windows SharePoint Services 2.0 site collection to a Windows SharePoint Services 3.0 site collection, the server may be brought down. You must allow the gradual upgrade to complete before you apply this security update.
You use quiet mode to install Windows SharePoint Services 3.0. If this security update is applied during the installation, the SharePoint Products and Technologies Configuration Wizard unexpectedly runs after the installer program has finished.

To resolve this issue, extract this security update to a folder on the computer. Then, copy the files to the Updates folder of the program's release version. After the extracted files are copied to that location, the folder is ready to be used to install the release version of the program that is updated to this security update level.
After you install this update on a computer that is running Microsoft Windows Small Business Server 2003, the Web sites may not restart within the time-out period. Therefore, you may be unable to access the Backup, CompanyWeb, Microsoft Server ActiveSync, Monitoring, Outlook Web Access, or Remote Web Workplace Web sites. To resolve this problem, use one of the following methods:
- Open Internet Information Services (IIS) Manager, and start any Web sites that are stopped.
- Restart the computer.
If you run a virus scanning program during the installation of this security update, you may experience intermittent issues during the installation. To resolve these issues, turn off the virus scanning program before you apply this security update.
You use host-named site collections in Windows SharePoint Services 3.0. If you have many host-named site collections in your deployment, you may experience severe performance issues while this security update is being applied. For example, this issue may occur when there are more than 50 host-named site collections in your deployment.

Microsoft has released hotfix 943594 to address this issue. For more information about how to obtain hotfix 943594, click the following article number to view the article in the Microsoft Knowledge Base:
943594 (http://support.microsoft.com/kb/943594/ ) You experience performance issues after you install security update 934525 (MS07-059) in a Windows SharePoint Server 3.0 environment that contains many host-named site collections
Note If you do not use host-named site collections in Windows SharePoint Services 3.0, you can safely apply this security update.
Consider the following scenario. You unprovision a Windows SharePoint Services 3.0 search service database by using one of the following methods:
- Method 1
  You run the following command-line: %ProgramFiles%\Common Files\Microsoft Shared\web server extensions\12\bin\STSADM.EXE" -O SPSEARCH -ACTION STOP -F
- Method 2
  You use the Central Administration page to stop the "Windows SharePoint Help Search" service. To do this, follow these steps:
  1. Click Start, point to Administrative Tools, and then click SharePoint 3.0 Central Administration.
  2. Click Operations, and then click Services on Server under Topology and Services.
  3. Click Stop to stop the Windows SharePoint Help Search service.
You perform a basic installation of Windows SharePoint Services 3.0 that contains the unprovisioned search service database and this security update. When you run the SharePoint Products and Technologies Configuration Wizard in this scenario, the wizard is not completed successfully.

To determine whether you are experiencing this issue, open the latest PSConfig log that is saved in the following location:
%ProgramFiles%\Common Files\Microsoft Shared\web server extensions\12\Logs
If you receive the following error message in the PSConfig log, you are experiencing this issue:
Exception: System.ArgumentException: The object with id SOME-RANDOM-GUID does not exist in the configuration store. The object may have been deleted by another operation.
at Microsoft.SharePoint.Administration.SPConfigurationDatabase.DeleteObject(Guid id)
at Microsoft.SharePoint.Administration.SPConfigurationDatabase.DeleteObject(SPPersistedObject obj)
at Microsoft.SharePoint.Administration.SPPersistedObject.Delete()
at Microsoft.SharePoint.Search.Administration.SPSearchServiceInstance.ProvisionDatabase()
at Microsoft.SharePoint.Search.Administration.SPSearchServiceInstance.Provision()
at Microsoft.SharePoint.PostSetupConfiguration.ServicesTask.InstallServiceInstanceInConfigDB(Boolean provisionTheServiceInstanceToo, String serviceInstanceRegistryKeyName, Object sharepointServiceObject)
at Microsoft.SharePoint.PostSetupConfiguration.ServicesTask.InstallServiceInstances(Boolean provisionTheServiceInstancesToo, String serviceRegistryKeyName, Object sharepointServiceObject)
at Microsoft.SharePoint.PostSetupConfiguration.ServicesTask.InstallServices(Boolean provisionTheServicesToo)
at Microsoft.SharePoint.PostSetupConfiguration.ServicesTask.Run()
at Microsoft.SharePoint.PostSetupConfiguration.TaskThread.ExecuteTask()
To work around this issue, follow these steps:
1. Do one of the following:
  - Delete the Windows SharePoint Services 3.0 search service database in the Windows SharePoint Services 3.0 SQL instance. The database name starts with "WSS_Search_" and ends with the server name.
  - Reprovision the Windows SharePoint Services 3.0 search service database by specifying a nondefault Windows SharePoint Services 3.0 search service database. To do this, use one of the following methods:
    - Method 1
      
      Run a command-line that resembles the following command-line: %ProgramFiles%\Common Files\Microsoft Shared\web server extensions\12\bin\STSADM.EXE" -O SPSEARCH -ACTION START -DATABASENAME “DBNameExample"
    - Method 2
      1. Click Start, point to Administrative Tools, and then click SharePoint 3.0 Central Administration.
      2. Click Operations, and then click Services on Server under Topology and Services.
      3. Verify that the Windows SharePoint Services Search service is stopped. If it is running, stop the service.
      4. Click Windows SharePoint Services Search under Services.
      5. Under the Search Database, change the database name to any name other than the default name, and then click OK.
      6. On the Services on Server page, click Start to start the Windows SharePoint Services Search service.
2. Run the following command-line: %ProgramFiles%\Common Files\Microsoft Shared\web server extensions\12\bin\ PSConfigUI.exe
The hotfixes for the following issues are included in this security update. However, if you install a Windows SharePoint Services 3.0 service pack after you install this security update, the following hotfixes are lost.
- You rename a Windows SharePoint Services 3.0 site collection. If you add a new user to the site collection, the welcome e-mail message that is received by the new user contains the old site name.
- You use the Application Definition Designer tool to import a database model that is included in the Business Data Catalog Definition Editor tool (BDC tool) of the software development kit (SDK) for Microsoft Office SharePoint Server 2007. After the database model is imported, the database connection string is blank.
- When you run SPWriter.exe, the program closes unexpectedly with an error message in module Oleaut32.dll. This issue was resolved by a hotfix that moved the GetTimeZoneMoveParameters() function to the end of the Owssvr.dll file.
- You migrate user accounts to a new site collection by using the Stsadmin.exe command-line tool. When the new site collection is crawled, you receive event errors 6482, 6875 and 6482 in the Application log. This issue may occur when the user's SID in Windows SharePoint Services 3.0 is invalid.
- You use a custom template in a Windows SharePoint Services 3.0 site collection. If you create a new Web page, all the standard Web parts may not be available when you click Add a Web Part.
- When you apply this security update, some third-party services may be incorrectly stopped. If this issue occurs after you apply this security update, you must restart the computer.
- You connect to a Windows SharePoint Services 3.0 site collection. If the page contains a Calendar Web part that is set to Calendar view, the page may not load completely. This issue may occur if you do not have the permission to read the Calendar list.
After you install this update, the title of the SharePoint site in Welcome e-mail messages becomes an invalid hyperlink. This hyperlink links to the relative URL of the Home page of the SharePoint site.

Note The Welcome e-mail message is sent when an account is added to a SharePoint group. For example, if the account is added to a group on the root of the site, the title of the site in the e-mail will be a hyperlink that points to "/." If the account is added to a group on a sub-site, the hyperlink will resemble the following:
/sites/sub-site

Back to the top

Prerequisites

There are no prerequisites to apply this security update.

Restart information

In certain circumstances, a restart of the computer may be required. If a restart is required, follow these steps:

Restart the computer.
Run the "SharePoint Products and Technologies Configuration Wizard."
Verify that all the SharePoint services are now running in the services console.
Verify that all the Web sites are running in the Internet Information Services (IIS) Manager.