MBSA 2 and other programs do not offer Windows Server 2003 SP2 as an update on a Windows Server 2003-based computer that has the Windows Server 2003 SP2 Blocker Toolkit installed

On a Microsoft Windows Server 2003-based computer, you use the Windows Server 2003 SP2 Blocker Toolkit to temporarily disable the automatic update to Windows Server 2003 Service Pack 2. However, you may find that the following programs do not offer Windows Server 2003 SP2 as an update:

• Microsoft Baseline Security Analyzer (MBSA) 2.0
• Windows Server Update Services (WSUS) 2.0
• Windows Server Update Services (WSUS) 3.0
• Microsoft Windows Update

For example, when you use MBSA 2 to scan for updates, the Security Update Scan Results table may not include Windows Server 2003 SP2.

This issue occurs because of the detection logic that is included with the Windows Server 2003 SP2 Blocker Toolkit. Windows update programs verify the value of the DoNotAllowSP registry entry in the following registry subkey:If the value of the DoNotAllowSP registry entry is set to 1, the following programs cannot deliver a Windows Server 2003 SP2 update:

• Windows Update (WU)
• Microsoft Update (MU)
• Automatic Updates (AU)

When you install Windows Server 2003 SP2 Blocker Toolkit, the DoNotAllowSP registry entry is created automatically, and the value is set to 1.

This behavior is by design.

To have us fix this problem for you, go to the “Fix it for me” section. If you would rather fix this problem yourself, go to the “Let me fix it myself” section.

To fix this problem automatically, click the Fix this problem link. Then, click Run in the File Download dialog box, and follow the steps in this wizard.

Fix this problem
Microsoft Fix it 50220

Note This wizard is temporarily in English only. However, the automatic fix also works for other language versions of Windows.

Note If you are not on the computer that has the problem, you can save the automatic fix to a flash drive or to a CD, and then you can run it on the computer that has the problem.

Now go to the "Did this fix the problem?" section.

Important This section, method, or task contains steps that tell you how to modify the registry. However, serious problems might occur if you modify the registry incorrectly. Therefore, make sure that you follow these steps carefully. For added protection, back up the registry before you modify it. Then, you can restore the registry if a problem occurs. For more information about how to back up and restore the registry, click the following article number to view the article in the Microsoft Knowledge Base: To work around this issue, follow these steps:

1. Click Start, type regedit, and then click OK.
2. In Registry Editor, locate the following registry subkey, and then click it:
   HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate
3. In the details pane, right-click DoNotAllowSP, and then click Modify.
4. Make sure that the Value data box has no data, and then click OK.
5. Exit Registry Editor.
6. Restart the computer.

Now go to the "Did this fix the problem?" section.

Check whether the problem is fixed. If the problem is fixed, you are finished with this article. If the problem is not fixed, you can contact support (http://support.microsoft.com/contactus) .

The Windows Server 2003 SP2 Blocker Toolkit includes the following:

• An ADM template that lets you configure the DoNotAllowSP registry setting by using the Active Directory directory service.
• A .cmd file that you can deploy by using a logon script to configure the DoNotAllowSP registry setting.

For more information about the Windows Server 2003 SP2 Blocker Toolkit, visit the following Microsoft Web site:To review a FAQ document about the Windows Server 2003 SP2 Blocker Toolkit, visit the following Microsoft Web site: