Microsoft has released a Security Rollup Package (SRP) for Windows NT 4.0 that includes the functionality from all security patches released for Windows NT 4.0 since the release of Windows NT 4.0 Service Pack 6a (SP6a). This small, comprehensive rollup of post-SP6a fixes provides an easier mechanism for managing the rollout of security fixes. Applying the SRP does not change the encryption level of your computer.

Compaq Array Controller Users

If you have installed the Compaq Array Controller Driver (Cpqarray.sys) from the Compaq Web Site, Compaq FTP Site, or Compaq SmartStart, please see the following article in the Microsoft Knowledge Base regarding Compaq Array controllers and the Windows NT 4.0 SRP:

Digital Signature Issue

If you are running Internet Explorer 5.5 Service Pack 2 (SP2) or Internet Explorer 5.01 Service Pack 2 (SP2) and you access any secure website (https://) that uses Secure Sockets Layer (SSL), see the following article in the Microsoft Knowledge Base:

Microsoft IntelliPoint Users

If you use a version of Microsoft IntelliPoint earlier than 2.2, see the following article in the Microsoft Knowledge Base before you install the SRP:

HP NTLock Users

If you use HP NTLock, see the following article in the Microsoft Knowledge Base: If you add optional services, you must reapply the Windows NT 4.0 service pack and then the SRP. For additional information, click the following article number to view the article in the Microsoft Knowledge Base: If you need to add optional services, follow these steps:

1.	Install all optional services and companion services. You will be prompted for the original Window NT 4.0 media.
2.	After the files are installed from the original media, but before you restart your computer, reinstall Windows NT 4.0 SP6a. You must reinstall SP6a before you reinstall the SRP because the SRP requires SP6a.
3.	Restart your computer.
4.	Reinstall the SRP.
5.	Restart your computer.
6.	Install other post-SP6a hotfixes as necessary. For more information about the SRP, visit the following Microsoft Website: http://www.microsoft.com/technet/archive/security/news/nt4srp.mspx?mfr=true (http://www.microsoft.com/technet/archive/security/news/nt4srp.mspx?mfr=true)
7.	Restart your computer.

For additional information about how to install multiple hotfixes with only one reboot, click the following article number to view the article in the Microsoft Knowledge Base:

Back to the top

Patches are available from the following Microsoft Web site (if your language is not listed, please check back):
Note: This patch requires Windows NT 4.0 SP6a. For additional information, visit the following MIcrosoft Web site:

Release Date: July 26, 2001

For additional information about how to download Microsoft Support files, click the following article number to view the article in the Microsoft Knowledge Base: Microsoft scanned this file for viruses. Microsoft used the most current virus-detection software that was available on the date that the file was posted. The file is stored on security-enhanced servers that help to prevent any unauthorized changes to the file. Note: When you apply the Post-Windows NT 4.0 SP6a SRP (which includes the security patch mentioned in bulletin MS01-026), be aware that the Post-Windows NT 4.0 SP6a SRP may introduce new problems. To fix these new problems, install the additional patches that are described in the following articles in the Microsoft Knowledge Base:

Back to the top

Fixes Included in the SRP

The SRP includes all post-SP6a fixes that have been delivered via Microsoft Security Bulletins (http://www.microsoft.com/technet/security/default.mspx). In addition, it also includes a small number of fixes that have not been previously discussed. Because security bulletins are disruptive to customers' normal maintenance procedures, Microsoft typically issues them only when a security issue poses an immediate danger to your systems. Issues that do not meet this standard are typically addressed through other delivery vehicles such as service packs or, in this case, the SRP.

IIS Fixes Included in the SRP

The fixes listed in the May 14, 2001 section of the following article in the Microsoft Knowledge Base are included in the Post-Windows NT 4.0 SP6a SRP:

Back to the top