Select the product you need help with

MS10-024: Description of the security update for Windows SMTP Service: April 13, 2010 and July 13, 2010

Article ID: 976323 - View products that this article applies to.

INTRODUCTION

Microsoft has released security bulletin MS10-024. To view the complete security bulletin, visit one of the following Microsoft Web sites:

Home users:
http://www.microsoft.com/security/updates/bulletins/201004.aspx
(http://www.microsoft.com/security/updates/bulletins/201004.aspx)
Skip the details: Download the updates for your home computer or laptop from the Microsoft Update Web site now:
http://update.microsoft.com/microsoftupdate/
(http://update.microsoft.com/microsoftupdate/)
IT professionals:
http://www.microsoft.com/technet/security/bulletin/MS10-024.mspx
(http://www.microsoft.com/technet/security/bulletin/MS10-024.mspx)

How to obtain help and support for this security update

Help installing updates: Support for Microsoft Update

(http://support.microsoft.com/ph/6527)

Security solutions for IT professionals: TechNet Security Troubleshooting and Support

(http://technet.microsoft.com/security/bb980617.aspx)

Help protect your computer that is running Windows from viruses and malware: Virus Solution and Security Center

(http://support.microsoft.com/contactus/cu_sc_virsec_master)

Local support according to your country: International Support

(http://support.microsoft.com/common/international.aspx)

Back to the top | Give Feedback

Known Issues

This security update may be reported as Installed by Microsoft Baseline Security Analyzer (MBSA) scans or by Microsoft Windows Server Update Services (WSUS) server reports for some Windows XP or Windows Server 2003-based systems that do not have the SMTP service enabled. This problem occurs because of an error in the Windows update detection logic metadata. The MBSA scan or WSUS report should report Not Applicable when the SMTP service is not installed on these platforms. This is a reporting issue only. Customers who have successfully installed this update do not have to take action.
If you install a version of the security update for the Windows SMTP Service that was released before July 13, 2010, on a Windows Server 2008-based system that has Internet Information Services (IIS) installed, the SMTP configuration options are reset. Any SMTP configuration options that were set before you install the version of the update that was released before July 13, 2010 are lost. Any necessary SMTP configuration options must be manually reapplied after you install the version of the security update that was released before July 13, 2010.

This problem is resolved in the version of this security update that is released on July 13, 2010. After you install the version of the security update that is released on July 13, 2010, all the previous SMTP configuration options are preserved.

If you uninstall this security update MS10-024, the following SMTP settings under the IIS 6.0 configuration (%windir%\system32\inetsrv\MetaBase.xml) will not be preserved. This problem occurs because Smtpsetup.exe uses an older code logic to uninstall the security update. Before you uninstall this security update, please backup your customized SMTP settings for restoration after uninstall.

<IIsSmtpService           Location ="/LM/SmtpSvc"
                            AdminACL

                            AuthFlags

                            ConnectionTimeout

                            EnableReverseDnsLookup

                            HopCount

                            LocalRetryAttempts

                            LocalRetryInterval

                            LogFileTruncateSize

                            LogType

                            MaxBatchedMessages

                            MaxConnections

                            MaxMessageSize

                            MaxOutConnections

                            MaxOutConnectionsPerDomain

                            MaxRecipients

                             MaxSessionSize

                            MaxSmtpErrors

                            RelayForAuth

                            RemoteRetryAttempts

                            RemoteRetryInterval

                            RemoteTimeout

                            ShouldDeliver

                            SmartHost

                            SmartHostType

                            SmtpDSNOptions

                            SmtpInboundCommandSupportOptions

                            SmtpLocalDelayExpireMinutes

                            SmtpLocalNDRExpireMinutes

                            SmtpOutboundCommandSupportOptions

                            SmtpRemoteDelayExpireMinutes

                            SmtpRemoteNDRExpireMinutes

/>

<IIsSmtpServer Location ="/LM/SmtpSvc/1"
                            AdminACL

                            ConnectionTimeout

                            LogFileTruncateSize

                            LogType

                            MasqueradeDomain

                            MaxBatchedMessages

                            MaxOutConnectionsPerDomain

                            SendNdrTo

                            ServerBindings

                            ServerComment


/>

To back up and restore your customized SMTP settings, follow these steps:

Click Start, point to Administrative Tools, and then click Internet Information Services (IIS) 6.0 Manager.
In the console tree, right-click the server, and then click Backup/Restore Configuration in the All Tasks dropdown menu.
Click Create Backup in the Backup/Restore Configuration dialog box.
In the configuration backup name field, type a descriptive name to make the entry easily identifiable. For example, type "MS10-024 Backup."
Uninstall security update 976323, and then restart the computer.
After the computer restarts, reopen the Backup/Restore Configuration utility in Internet Information Services (IIS) 6.0 Manager.
Select the configuration backup name that was created in step 4, and then click Restore.
You receive a message that resembles the following:
Restoring a metabase backup is a lengthy procedure that deletes all your current settings and causes all Internet services to be stopped. When the procedure completes, IIS then restarts these services.

Are you sure you want to continue?
Click Yes to continue with the restore.

For more information about how to configure SMTP, visit the following Microsoft webpage:

http://technet.microsoft.com/en-us/library/cc784968(WS.10).aspx

(http://technet.microsoft.com/en-us/library/cc784968(WS.10).aspx)

Back to the top | Give Feedback

FILE INFORMATION

The English (United States) version of this software update installs files that have the attributes that are listed in the following tables. The dates and times for these files are listed in Coordinated Universal Time (UTC). The dates and times for these files on your local computer are displayed in your local time and with your current daylight saving time (DST) bias. Additionally, the dates and times may change when you perform certain operations on the files.