Re: MBSA, Office Update, Versions, Failures

Tech-Archive recommends: Fix windows errors by optimizing your registry

From: itsme (itsmetnREMOVETHIS_at_abc7.com)
Date: 07/22/04 

Date: Wed, 21 Jul 2004 21:00:45 -0700

So what the heck is your problem?

"Michael" <Michael@discussions.microsoft.com> wrote in message
news:455C6DA5-00FF-4941-8571-6F33EE04CAC6@microsoft.com...
> Hello (all?),
> I apologize for posting this to three groups (MBSA, Windows Update, Office
Update), I realize the risk is not getting or missing something due to a
belief that someone else will "get it". The same problem emails have with
many on the TO: list. However, these questions I have are interrelated and
may need expertise from multiple areas. Some are easy (simple) questions;
others are not and will require "more" details from me. Again, I apologize
for the length and/or wordiness. (Sigh, always the dramatic...)
>
> --------------------------------------------------------------------------
------
> First, versions:
> Micro Transport ZX laptop, Pent III, 500 MHz. 128MB Ram, 6.0GB HD.
> 2 USB (1.1) ports, one to External CD/RW drive, other Canon Image Printer.
>
> Microsoft Windows 2000 Professional, Office 2000 Professional.
> All have latest Service Packs and Patches, including recent Win 2000 July
Updates from Windows Update Web site. NOT including latest patches for
Office 2000 (problem below).
>
> "My Computer" Properties reads: Microsoft Windows 2000, 5.00.2195, Service
Pack 4.
> Word About reads: Microsoft Word 2000 (9.0.6926 SP-3).
>
> MBSA version: 1.2.3316.1
> Security Update Database version: 2004.7.13.0
> MS Office Update Database version: 11.0.0.6608
>
> --------------------------------------------------------------------------
------
> Note: About Network DOMAIN (to workgroup or not to workgroup...)
> This machine previously used on a work Domain, used almost exclusively
with Domain User account (connected or not). Now, use local machine account
or administrator account. The "Domain" still exists (cannot connect
anymore), and domain accounts still exist.
>
> My old domain account, needed to access the locally saved email and
contacts via Outlook 2000, a very LARGE (258MB) locally saved Outlook.ost
file. This is a problem actually, cannot use Outlook really for anything
else, as needs to connect to an Exchange Server to create any new Outlook
Profile. I would "love" to export my Domain/Outlook items and eliminate the
Domain (set a Workgroup). But export this to what? A local PST file? What
could Import that? Would export/import lose attachments? Outlook really
should be standard part of the Operating System (thanks that Express is much
better).
>
> This also means I do not have access to the old (network domain) folder
location where MS Office was installed and maintained from. Nor any Office
2K Install CD (with Disk1.cab file). This a problem for me below with both
MBSA and Office Update Web Site. I do have the license CD's for all else
(Win2K, Visio2K, Visual Studio 6, Oracle 8i). "We" (IT people) just forgot
an Office CD for me when I got this computer from my previously workplace
(and no going back). "We" did make sure Office SP4 installed.
>
> --------------------------------------------------------------------------
------
> Ok, sorry now the questions:
>
> MBSA version Updating
> Microsoft Baseline Security Advisor (? Administrator? I forget).
>
> MBSA seems to update the Security/Windows version (data) itself, when you
scan while connected to the Internet. (Wish the Scanning and Updating were
separate functions, btw). The "mssecure.xml" and .cab files I mean.
>
> 1. Does the actual program MBSA v1.2.3316.1 "update" automatically? How
can I tell if another (better) version exists? (Would uninstall/install be
necessary?)
>
> 2. The office database version data files (not just one xml, but a couple
and a folder?) do not (or has not for me) changed at all since I initially
got MBSA set up and working. The version 11.0.0.6608 is as above. Is this
true that Office info does not update automatically? If not, how to check
and update this?
>
> --------------------------------------------------------------------------
------
>
> 3. MBSA Results Issues - IE (Internet Explorer) Zones, Severe Red X.
>
> It says IE Zones do not have secure settings for some users and Zone is
"Restricted Sites" is "Custom" and recommended "High". It lists the User's
ID only, and turns out this is a Domain Administrator account, used
previously by my old workplace IT people). I don't know the password, nor
the effect of simply deleting this account, without eliminating the network
Domain settings also.
>
> When MBSA first setup I remember getting these types of failures for
various users (and also for the "Macro Security", see next problem #4). It
isn't possible to do "Global" settings changes? (i.e. affect all users on
machine, even one's can't access normally). This Domain Admin account not
used at all by me but gets Severe Red X and has failed every scan done by
MBSA so far...
>
> --------------------------------------------------------------------------
------
>
> 4. MBSA Results Issue - Macro Security, Yellow X.
>
> It says 4 Office Products were found and some issues are found. (Not true,
have Word, Excel, PowerPoint, Access, and Outlook. Isn't that five
products?) (I have Visio 2K, btw).
>
> For 2 Users on Two Products (four problem issues listed in MBSA report).
Two Products are MS Outlook 2000 and MS PowerPoint 2000. One User is the
above-mentioned Domain Admin account; the other user is unknown, apparently
a local account, and first parts of ID). I suspect SMS account or Backup
account? Visual Studio created two accounts for VS Analyzer
once-upon-a-time. This is unused (by me). However, identity of the second
account here is unknown so far by me.
>
> The "4" Macro Security Issues (same for both Users, both Products): Macro
Security is set to Medium which will allow you to choose whether or not to
run possibly unsafe macros. Is does list all "OK" for Word and Excel. Does
not "see" MS Access 2K, apparently.
>
> Again, a "Global" way to change this for all users would be muy bueno. I
have a lot of these error failures, and sometimes would change and would
come back (probably affected via Net Framework 1.1? or Group/Local Policy?
COM+ objects). It seems IE Zones and Office Security settings are done in
many places.
>
> How to fix this for accounts I cannot login to? (one the Domain Admin,
the other unknown). The unknown might be one of two SMS accounts that also
exist). Can't and don't login with SMS as well).
>
> --------------------------------------------------------------------------
------
>
> 5. Office 2000 Security Patches - Red X's, Severe Security Risks
>
> This a problem with Office Update Web Site and MBSA. To be fair, MBSA is
working perfectly, reporting that these Security Updates are not installed.
Installing them is what I would really like (opposed to faking or setting
MBSA to stop Red X-ing).
>
> Note: Office 2000 SP4 already installed. Only post SP4 Security Patches
have are involved. The "five" Security Patches are:
>
> 1. KB826292 - Access 2000 Snapshot Viewer Security Patch, English Version.
> 2. KB930349 - Excel 2000 Security Patch.
> 3. KB822035 - Office 2000 Security Patch.
> 4. KB824993 - Office 2000 WordPerfect 5.x Converter Security Patch,
English Version.
> 5. KB830347 - Word 2000 Security Patch.
>
> These all "fail" (and have been failing) from MS Office Update Web Site.
They download (are downloaded), look like they are installing (disk lights
flash), then near the "end", a dialog box requesting Office Install CD or
Network Location (with old Domain Shared Folder location displayed in Edit
Box by default). It is asking for "Disk1.cab" (or is it "Disk1.msi" ??). I
must press Cancel, so the whole thing fails and backs out.
>
> There is a link to "Report Problem to Microsoft", which have done several
times. I have tried the "Full File Versions" of the updates, and a few other
suggestions. But although would not tell me the exact reason, apparently
some files in office are missing the version numbers or have lost them?
Probably (very likely) they are unrelated to the Security Patch involved.
>
> It would see Security Patches should be different than product updates.
But all who have tried to help me, say it should work without a Source
Office CD...
>
> I know also, there are further Office Security Patches after these five.
(Presume haven't shown up, because these still "waiting failures".) Any
ways to find out if/what these other Security Patches are?
>
> --------------------------------------------------------------------------
------
>
> 5. Office (2000) Update - related to above Office Security Patches
>
> I have two folders under "C:\Program Files\", one is "OfficeUpdate", other
"OfficeUpdate11", with both having a "Cabs" sub-folder. The first appears to
be older and has two in the "Cabs" folder, 510065, 510634. The second
("OfficeUpdate11") has five in the "Cabs" folder, the five Office Security
Patches listed above, 511319, 511325, 511324, 511467, 511468. It is here
that the downloaded patches have been hiding (each number a folder under
"Cabs").
>
> Can/Should I delete any of this and re-try Office Update Web Site?
> Delete entire "OfficeUpdate" and "OfficeUpdate11" folders, I mean.
> Will Office Update re-set this up?
>
> I wonder if having these locally and failures affect seeing any beyond or
even affect the re-trying to install them. Perhaps the problem is fixed, but
since somewhere it is marked to "ask for Source CD", that what it always
does.
>
> --------------------------------------------------------------------------
------
>
> That's it (not really, but hey).
> Thanks heeps anyway!
>
> Michael Waltrip
> San Diego, California
>

Relevant Pages

  • Re: MBSA, Office Update, Versions, Failures
    ... I apologize for posting this to three groups (MBSA, Windows Update, ... with Domain User account. ... Microsoft Baseline Security Advisor (? ... Office 2000 Security Patches - Red X's, ...
    (microsoft.public.officeupdate)
  • Re: Alerting - Malicious software removal tool
    ... Plus, much of what the MSRT removes are worms that exploit vulnerabilities in humans, not vulnerabilities in the software -- even a perfect operating system can't protect itself from that. ... I explained that they should not use the Administrator account except in rare cases where "MOM" needed to install an application that she could not install from her/son's accounts, that they were NOT to run anything as the "Administrator" account. ... Security settings would not provide the user with what they needed to run the programs that they wanted to use while protecting them from malware. ...
    (microsoft.public.security.virus)
  • Re: MBSA, Office Update, Versions, Failures
    ... > As for your MBSA questions: ... > machine and environment - and if it is, you can simply remove this account ... MBSA Results Issue - Macro Security, ... These residual settings for long-gone users need to be ...
    (microsoft.public.officeupdate)
  • Re: MBSA, Office Update, Versions, Failures
    ... > As for your MBSA questions: ... > machine and environment - and if it is, you can simply remove this account ... MBSA Results Issue - Macro Security, ... These residual settings for long-gone users need to be ...
    (microsoft.public.officeupdate)
  • Re: MBSA, Office Update, Versions, Failures
    ... > As for your MBSA questions: ... > machine and environment - and if it is, you can simply remove this account ... MBSA Results Issue - Macro Security, ... These residual settings for long-gone users need to be ...
    (microsoft.public.windowsupdate)