Dynaverse.net

Taldrenites => General Starfleet Command Forum => Topic started by: Toasty0 on September 05, 2003, 12:24:13 am

Title: For any of you learning/ using SQL2000 or MSDE
Post by: Toasty0 on September 05, 2003, 12:24:13 am

Please go here and use this free app. It just might save you a great deal of headache on down the road.

http://www.microsoft.com/technet/treeview/default.asp?url=/technet/security/tools/tools/mbsahome.asp

I know I'm very diligent about updates and service packs. What this tool found startled the **** outta me and guided me through the steps of closing some really hairy security openings in SQL and IIS.

Best,
Jerry  

Title: Re: For any of you learning/ using SQL2000 or MSDE
Post by: NannerSlug on September 05, 2003, 01:02:23 pm

thanks T.. i use 2 sql servers and kinda by default get asked to shepard them some what.

Title: Re: For any of you learning/ using SQL2000 or MSDE
Post by: Toasty0 on September 05, 2003, 02:51:10 pm

My pleasure, Nanner.

I've the limited MSDE running on my system while I learn ADO.NET and ASP.NET.

I ran across a mention of the MBSA in a white paper. So last night I DLed the thing and ran it. It alerted me to the lack of a security patch for SQL Server2000 and MSDE that the regular Windows Update site failed to catch. It also does a very thorough analysis of IIS security and directory security issues. I recommend this tool for anyone doing IIS, SQL/MSDE, or other web/IT development or network services on their machine.

Best,
Jerry  

Title: Re: For any of you learning/ using SQL2000 or MSDE
Post by: Sten on September 06, 2003, 09:01:18 am

I was not aware that Window Update would do updates for SQL2000 or SQL7. I know it will updatet the MDAC but it does not update MSDE.

Yesterday thanks to this app I verified that. WE had a programmer who "thought" his installer was updating MSDE and the MDAC surprise he it wasn't.  

Title: Re: For any of you learning/ using SQL2000 or MSDE
Post by: 3dot14 on September 06, 2003, 05:25:24 pm

and MS is remedying that situation right now...

http://www.betanews.com/article.php3?sid=1062805731

Start with the next Windows Update revision, those apps will be included as well...

Title: Re: For any of you learning/ using SQL2000 or MSDE
Post by: Toasty0 on September 06, 2003, 06:06:07 pm

Now that I've got it I kind of like MSBA. It's a handy tool and I hope MS doen't abandone it.  

Title: For any of you learning/ using SQL2000 or MSDE
Post by: Toasty0 on September 05, 2003, 12:24:13 am

Please go here and use this free app. It just might save you a great deal of headache on down the road.

http://www.microsoft.com/technet/treeview/default.asp?url=/technet/security/tools/tools/mbsahome.asp

I know I'm very diligent about updates and service packs. What this tool found startled the **** outta me and guided me through the steps of closing some really hairy security openings in SQL and IIS.

Best,
Jerry  

Title: Re: For any of you learning/ using SQL2000 or MSDE
Post by: NannerSlug on September 05, 2003, 01:02:23 pm

thanks T.. i use 2 sql servers and kinda by default get asked to shepard them some what.

Title: Re: For any of you learning/ using SQL2000 or MSDE
Post by: Toasty0 on September 05, 2003, 02:51:10 pm

My pleasure, Nanner.

I've the limited MSDE running on my system while I learn ADO.NET and ASP.NET.

I ran across a mention of the MBSA in a white paper. So last night I DLed the thing and ran it. It alerted me to the lack of a security patch for SQL Server2000 and MSDE that the regular Windows Update site failed to catch. It also does a very thorough analysis of IIS security and directory security issues. I recommend this tool for anyone doing IIS, SQL/MSDE, or other web/IT development or network services on their machine.

Best,
Jerry  

Title: Re: For any of you learning/ using SQL2000 or MSDE
Post by: Sten on September 06, 2003, 09:01:18 am

I was not aware that Window Update would do updates for SQL2000 or SQL7. I know it will updatet the MDAC but it does not update MSDE.

Yesterday thanks to this app I verified that. WE had a programmer who "thought" his installer was updating MSDE and the MDAC surprise he it wasn't.  

Title: Re: For any of you learning/ using SQL2000 or MSDE
Post by: 3dot14 on September 06, 2003, 05:25:24 pm

and MS is remedying that situation right now...

http://www.betanews.com/article.php3?sid=1062805731

Start with the next Windows Update revision, those apps will be included as well...

Title: Re: For any of you learning/ using SQL2000 or MSDE
Post by: Toasty0 on September 06, 2003, 06:06:07 pm

Now that I've got it I kind of like MSBA. It's a handy tool and I hope MS doen't abandone it.