administrators scan their servers -- including remote ones -- to ensure that that they are up to
date on all security patches for Windows NT 4.0, Windows 2000, IIS 4.0, IIS 5.0, IE and SQL
Server. Detailed information on Hfnetchk, including download location, is available in
Knowledge Base article Q303215 at
http://www.microsoft.com/technet/treeview/default.asp?url=/technet/security/tools/hfnetchk.asp.
Windows NT 4.0 Patches
To achieve the highest level of Windows NT security, install Service Pack 6a and the post
Service Pack 6a hotfixes. For a complete list of available service packs and hotfixes go to
http://www.microsoft.com/ntserver/nts/downloads/recommended/SP6/.
Microsoft has provided the Security Rollup Package (SRP) as a mechanism for managing the
rollout of security related fixes. The SRP includes the functionality from many security
patches released for Windows NT 4.0 since the release of Service Pack 6a. The SRP
includes post-Service Pack 6a fixes that were delivered via Microsoft security bulletins as well
as a small number of fixes that were not addressed through this forum. For a complete listing
of all fixes in the SRP, refer to Microsoft Knowledge Base Article (Q299444), “Post-Windows
NT 4.0 Service Pack 6a Security Rollup Package (SRP),” at
http://support.microsoft.com/support/kb/articles/q299/4/44.asp.
Fixes not included in the SRP:
Fixes for newer vulnerabilities may not be included in the SRP. These must be applied
separately and may be downloaded from
|