Re: Office 2000 on SBS2003?

From: root (postmaster_at_buchanangc.com)
Date: 06/22/04 

Date: Tue, 22 Jun 2004 12:00:33 -0700

"Susan Bradley, CPA aka Ebitz SBS Rocks [MVP] " <sbradcpa@pacbell.net> wrote
in message news:%23OBVcwBWEHA.3420@TK2MSFTNGP12.phx.gbl...
> :-) I think we're going to agree to disagree here. I was assuming that
> you'd be reading this email from a workstation. My servers never have
> me sitting in front of them emailing or reading email.

NO, as I said previously more than once no Outlook no Email no general
workstation usage, no MusicMatch. Just server support. Something I read
and now another poster points out that Word and Excel may be needed on a
server. These are entirely different issues.

> Thus when
> there's an OE vulnerability, it doesn't phase me one bit because I don't
> surf from my server. IE in lockdown mode won't let you download that
> file anyway. Reading a newsgroup from the server would mean open up
> port 119 which in my world is not necessary.

You are changing the subjecty of this thread which was:

Will Office 2000 Word and Excel install on SBS2003.

> You do whatever you like, Root. It's your server. You run your ship
> the way you want to. Me, I read email from a workstation. I open Word
> from a workstation. I do Excel on a workstation.
>
> For the rest of those who read this thread, know that there are a heck
> of lot more vulnerabilities in Word than in notepad. The size of the
> directory for Word alone tells you there are a lot more things under the
> hood and thus a much much bigger threat vector. Just keep in mind that
> Servers are not workstations and should never be used for functions that
> are best done at a workstation. These days any old workstation can be
> purchased for a reasonable low cost that would greatly reduce the risk
> and threats.
>
> But Root, it's your server not mine.
>
> Still owe you a beer in Seattle. You coming to SMBnation or will you be
> nearby that weekend?
>
> root wrote:
> > "Susan Bradley, CPA aka Ebitz SBS Rocks [MVP] " <sbradcpa@pacbell.net>
wrote
> > in message news:OPQL38AWEHA.3336@TK2MSFTNGP11.phx.gbl...
> >
> >>Do Not Use the Computer Running Windows Small Business Server 2003 as a
> >>Workstation
> >
> >
> > Right.
> >
> >
> >>Consider not using the computer running Windows Small Business Server
> >>2003 as a workstation, because this increases the surface area for
> >>attacks and affects the performance of the network. The surface area for
> >>attacks increases because you need to install client applications on the
> >>server. If there is a security-related issue for any client application,
> >>the server is vulnerable to attack until a security patch is installed.
> >>Additionally, if a user other than an administrator logs on to the
> >>server, the chance increases that the user will accidentally delete
> >>critical information or an application.
> >>
> >>Do Not Install Unnecessary Software on the Computer Running Windows
> >>Small Business Server 2003
> >>Consider installing only the software on the computer running Windows
> >>Small Business Server 2003 that is necessary for your business
> >>operations to reduce the surface area of attacks and help maximize the
> >>server's performance.
> >>
> >>Page 20
> >>
> >
> >
http://download.microsoft.com/download/1/f/1/1f15a874-f696-4992-b5ad-b1e7b258de1c/SecuringSBSnetwork.doc
> >
> > You see that the very file you are trying to use to disuade me from
putting
> > Word on the SBS2003 server is a good example of why I(administrator)
want
> > Word on the server be be able to read such SBS2003 documentation(*.doc
and
> > likely *.xls) there.
> >
> >
> >>Office is a client application.
> >>http://www.microsoft.com/mscorp/articles/business.asp
> >>Office is under "information worker" division which is not a server
> >>application.
> >
> >
> >
> > Its a tool just like Notepad and what you are saying is very
> > chicken-littlish. Use the appropriate tools safely for administrative
> > purposes and don't install MusicMatch on the server....
> >
> >
>
>>http://www.microsoft.com/office/sharepoint/prodinfo/officeintegration.mspx
> >>
> >>Susan Bradley, CPA aka Ebitz SBS Rocks [MVP] wrote:
> >>
> >>
> >>>Granted having Office 2003 on the "workstations" such that they use the
> >>>full power of Sharepoint and collaboration ...that is sweet..
> >>>
> >>>http://support.microsoft.com/default.aspx?scid=kb;en-us;q266418
> >>>http://support.microsoft.com/default.aspx?scid=kb;en-us;Q313889
> >>>
> >>>
> >>>
> >>>Susan Bradley, CPA aka Ebitz SBS Rocks [MVP] wrote:
> >>>
> >>>
> >>>>Okay, I'll ask you. You show me where in the SBS documentation is
> >>>>says to put Word or Excel on the server and how SBS uses it.
> >>>>
> >>>>Threat vector is a threat vector. If it's firing up those DLLs, ... as
> >>>>Russ Cooper counted the vulnerabilities in IIS 6.0 he included all the
> >>>>underlying default installed components. Thus Windows server 2003, OE,
> >>>>Media player.. etc... course his count was still incorrect but he had
> >>>>a point.
> >>>>
> >>>>You put it there as an installation point to roll out to the
> >>>>workstations, but you don't install it as a working application on a
> >>>>server.
> >>>>
> >>>>I have Excel and Word on workstations. Not on the server.
> >>>>
> >>>>I google you up some citations.
> >>>>root wrote:
> >>>>
> >>>>
> >>>>>"Susan Bradley, CPA aka Ebitz - SBS Rocks [MVP]"
> >
> > <sbradcpa@pacbell.net>
> >
> >>>>>wrote in message news:%23eZU%232$VEHA.3024@TK2MSFTNGP09.phx.gbl...
> >>>>>
> >>>>>
> >>>>>>Office on a server? No version of Office is wise to put on a
server.
> >>>>>
> >>>>>
> >>>>>
> >>>>>
> >>>>>Why?
> >>>>>
> >>>>>If I recall correctly in the documentation and feature set some
> >>>>>things in
> >>>>>SBS2003 required Word or Excel? I remember reading in SBS2003 stuff
> >
> > and
> >
> >>>>>specifically saying to myself when I read whatever it was....you need
> >>>>>to put
> >>>>>Office on the server..I wonder if Off2000 will work.
> >>>>>
> >>>>>
> >>>>>
> >>>>>>For one you've introduced a threat vector on that server.
> >>>>>
> >>>>>
> >>>>>
> >>>>>
> >>>>>No, only a potential one.
> >>>>>
> >>>>>
> >>>>>
> >>>>>>[and Shavlik
> >>>>>>is the tool to patch Office, SUS does not do it]
> >>>>>>You can't load Outlook on there.
> >>>>>>You shouldn't have someone using it as a workstation which that
> >>>>>>implies.
> >>>>>
> >>>>>
> >>>>>
> >>>>>
> >>>>>Nope, as an admin tool.
> >>>>>
> >>>>>
> >>>>>
> >>>>>>I can google and find you the KB for the "don't put Outlook on the
> >>>>>>server" if you like.
> >>>>>
> >>>>>
> >>>>>
> >>>>>
> >>>>>Right, no Outlook but what about Word or Excel and what about the
> >>>>>versions
> >>>>>from Office 2000?
> >>>>>
> >>>>>
> >>>>>
> >>>>>>root wrote:
> >>>>>>
> >>>>>>
> >>>>>>
> >>>>>>>Will Office 2000 install and run ok on a SBS2K3 server? There are
> >
> > a
> >
> >>>>>
> >>>>>
> >>>>>few
> >>>>>
> >>>>>
> >>>>>>>requirements for Office Word & Excel on the server but if we could
> >>>>>>>avoid
> >>>>>
> >>>>>
> >>>>>
> >>>>>a
> >>>>>
> >>>>>
> >>>>>>>whole new Office 2003 purchase it would be nice.
> >>>>>>>
> >>>>>>>
> >>>>>>
> >>>>>>--
> >>>>>>http://www.sbslinks.com/really.htm
> >>>>>>
> >>>>>
> >>>>>
> >>>>>
> >
> >
>

Relevant Pages