Ok, this one has me really confused, and somewhat miffed at Microsoft. I've
tried to call them on it, but that didn't work out very well.
Cenk Kulacoglu reported that MS acknowledged a problem with the new GPO
elements for XP SP2 when loaded for editing on systems other than XP SP2
according to KB 842933. He provided a link to the download site for the fix
(see the NTBugtraq archive.)
1. The KB states the problem exists with Windows 2000, XP (pre-SP2), and
Windows Server 2003. However, the fix page says the fix is only for Windows
2000. The installer seems to only detect Windows 2000 also.
2. I called Microsoft Support yesterday about this fix (since, after all, the
KB still says the only way to get this fix is by calling them), and they
politely reminded me that it is a *Hotfix*. That means it shouldn't be run on a
production system (which they said), and should be thoroughly tested.
So, a couple of issues come to mind;
a) What the heck is going on when the only way to implement the new GPO
features of XP SP2 (which are many) is via a *Hotfix* that's not supposed to be
run in a production environment!!! Heck, there are new IE settings which used
to be set via the IE Administrators Kit which can now only be edited via GPO!
This hotfix won't be officially supported until Windows 2000 SP5 I was told by
MS Support!
b) Does Windows Server 2003 and XP (pre-SP2) have a problem editing the new
inetres.adm or not? If it does, then why do I need to copy the nearly 6MB
SP3res.dll to those machines?
Reports about whether you've had any problems with this hotfix, or if you've
installed it on non-Windows 2000 systems, would be appreciated. Getting MS to
officially support this now (and make it available to WU/SUS/AU) would be
better.
Cheers,
Russ - NTBugtraq Editor
-----
NTBugtraq Editor's Note:
Want to reply to the person who sent this message? This list is configured such
that just hitting reply is going to result in the message coming to the list,
not to the individual who sent the message. This was done to help reduce the
number of Out of Office messages posters received. So if you want to send a
reply just to the poster, you'll have to copy their email address out of the
message and place it in your TO: field.
-----
