M
Michael
Hello (all?),
I apologize for posting this to three groups (MBSA, Windows Update, Office Update), I realize the risk is not getting or missing something due to a belief that someone else will "get it". The same problem emails have with many on the TO: list. However, these questions I have are interrelated and may need expertise from multiple areas. Some are easy (simple) questions; others are not and will require "more" details from me. Again, I apologize for the length and/or wordiness. (Sigh, always the dramatic...)
--------------------------------------------------------------------------------
First, versions:
Micro Transport ZX laptop, Pent III, 500 MHz. 128MB Ram, 6.0GB HD.
2 USB (1.1) ports, one to External CD/RW drive, other Canon Image Printer.
Microsoft Windows 2000 Professional, Office 2000 Professional.
All have latest Service Packs and Patches, including recent Win 2000 July Updates from Windows Update Web site. NOT including latest patches for Office 2000 (problem below).
"My Computer" Properties reads: Microsoft Windows 2000, 5.00.2195, Service Pack 4.
Word About reads: Microsoft Word 2000 (9.0.6926 SP-3).
MBSA version: 1.2.3316.1
Security Update Database version: 2004.7.13.0
MS Office Update Database version: 11.0.0.6608
--------------------------------------------------------------------------------
Note: About Network DOMAIN (to workgroup or not to workgroup...)
This machine previously used on a work Domain, used almost exclusively with Domain User account (connected or not). Now, use local machine account or administrator account. The "Domain" still exists (cannot connect anymore), and domain accounts still exist.
My old domain account, needed to access the locally saved email and contacts via Outlook 2000, a very LARGE (258MB) locally saved Outlook.ost file. This is a problem actually, cannot use Outlook really for anything else, as needs to connect to an Exchange Server to create any new Outlook Profile. I would "love" to export my Domain/Outlook items and eliminate the Domain (set a Workgroup). But export this to what? A local PST file? What could Import that? Would export/import lose attachments? Outlook really should be standard part of the Operating System (thanks that Express is much better).
This also means I do not have access to the old (network domain) folder location where MS Office was installed and maintained from. Nor any Office 2K Install CD (with Disk1.cab file). This a problem for me below with both MBSA and Office Update Web Site. I do have the license CD's for all else (Win2K, Visio2K, Visual Studio 6, Oracle 8i). "We" (IT people) just forgot an Office CD for me when I got this computer from my previously workplace (and no going back). "We" did make sure Office SP4 installed.
--------------------------------------------------------------------------------
Ok, sorry now the questions:
MBSA version Updating
Microsoft Baseline Security Advisor (? Administrator? I forget).
MBSA seems to update the Security/Windows version (data) itself, when you scan while connected to the Internet. (Wish the Scanning and Updating were separate functions, btw). The "mssecure.xml" and .cab files I mean.
1. Does the actual program MBSA v1.2.3316.1 "update" automatically? How can I tell if another (better) version exists? (Would uninstall/install be necessary?)
2. The office database version data files (not just one xml, but a couple and a folder?) do not (or has not for me) changed at all since I initially got MBSA set up and working. The version 11.0.0.6608 is as above. Is this true that Office info does not update automatically? If not, how to check and update this?
--------------------------------------------------------------------------------
3. MBSA Results Issues - IE (Internet Explorer) Zones, Severe Red X.
It says IE Zones do not have secure settings for some users and Zone is "Restricted Sites" is "Custom" and recommended "High". It lists the User's ID only, and turns out this is a Domain Administrator account, used previously by my old workplace IT people). I don't know the password, nor the effect of simply deleting this account, without eliminating the network Domain settings also.
When MBSA first setup I remember getting these types of failures for various users (and also for the "Macro Security", see next problem #4). It isn't possible to do "Global" settings changes? (i.e. affect all users on machine, even one's can't access normally). This Domain Admin account not used at all by me but gets Severe Red X and has failed every scan done by MBSA so far...
--------------------------------------------------------------------------------
4. MBSA Results Issue - Macro Security, Yellow X.
It says 4 Office Products were found and some issues are found. (Not true, have Word, Excel, PowerPoint, Access, and Outlook. Isn't that five products?) (I have Visio 2K, btw).
For 2 Users on Two Products (four problem issues listed in MBSA report). Two Products are MS Outlook 2000 and MS PowerPoint 2000. One User is the above-mentioned Domain Admin account; the other user is unknown, apparently a local account, and first parts of ID). I suspect SMS account or Backup account? Visual Studio created two accounts for VS Analyzer once-upon-a-time. This is unused (by me). However, identity of the second account here is unknown so far by me.
The "4" Macro Security Issues (same for both Users, both Products): Macro Security is set to Medium which will allow you to choose whether or not to run possibly unsafe macros. Is does list all "OK" for Word and Excel. Does not "see" MS Access 2K, apparently.
Again, a "Global" way to change this for all users would be muy bueno. I have a lot of these error failures, and sometimes would change and would come back (probably affected via Net Framework 1.1? or Group/Local Policy? COM+ objects). It seems IE Zones and Office Security settings are done in many places.
How to fix this for accounts I cannot login to? (one the Domain Admin, the other unknown). The unknown might be one of two SMS accounts that also exist). Can't and don't login with SMS as well).
--------------------------------------------------------------------------------
5. Office 2000 Security Patches - Red X's, Severe Security Risks
This a problem with Office Update Web Site and MBSA. To be fair, MBSA is working perfectly, reporting that these Security Updates are not installed. Installing them is what I would really like (opposed to faking or setting MBSA to stop Red X-ing).
Note: Office 2000 SP4 already installed. Only post SP4 Security Patches have are involved. The "five" Security Patches are:
1. KB826292 - Access 2000 Snapshot Viewer Security Patch, English Version.
2. KB930349 - Excel 2000 Security Patch.
3. KB822035 - Office 2000 Security Patch.
4. KB824993 - Office 2000 WordPerfect 5.x Converter Security Patch, English Version.
5. KB830347 - Word 2000 Security Patch.
These all "fail" (and have been failing) from MS Office Update Web Site. They download (are downloaded), look like they are installing (disk lights flash), then near the "end", a dialog box requesting Office Install CD or Network Location (with old Domain Shared Folder location displayed in Edit Box by default). It is asking for "Disk1.cab" (or is it "Disk1.msi" ??). I must press Cancel, so the whole thing fails and backs out.
There is a link to "Report Problem to Microsoft", which have done several times. I have tried the "Full File Versions" of the updates, and a few other suggestions. But although would not tell me the exact reason, apparently some files in office are missing the version numbers or have lost them? Probably (very likely) they are unrelated to the Security Patch involved.
It would see Security Patches should be different than product updates. But all who have tried to help me, say it should work without a Source Office CD...
I know also, there are further Office Security Patches after these five. (Presume haven't shown up, because these still "waiting failures".) Any ways to find out if/what these other Security Patches are?
--------------------------------------------------------------------------------
5. Office (2000) Update - related to above Office Security Patches
I have two folders under "C:\Program Files\", one is "OfficeUpdate", other "OfficeUpdate11", with both having a "Cabs" sub-folder. The first appears to be older and has two in the "Cabs" folder, 510065, 510634. The second ("OfficeUpdate11") has five in the "Cabs" folder, the five Office Security Patches listed above, 511319, 511325, 511324, 511467, 511468. It is here that the downloaded patches have been hiding (each number a folder under "Cabs").
Can/Should I delete any of this and re-try Office Update Web Site?
Delete entire "OfficeUpdate" and "OfficeUpdate11" folders, I mean.
Will Office Update re-set this up?
I wonder if having these locally and failures affect seeing any beyond or even affect the re-trying to install them. Perhaps the problem is fixed, but since somewhere it is marked to "ask for Source CD", that what it always does.
--------------------------------------------------------------------------------
That's it (not really, but hey).
Thanks heeps anyway!
Michael Waltrip
San Diego, California
I apologize for posting this to three groups (MBSA, Windows Update, Office Update), I realize the risk is not getting or missing something due to a belief that someone else will "get it". The same problem emails have with many on the TO: list. However, these questions I have are interrelated and may need expertise from multiple areas. Some are easy (simple) questions; others are not and will require "more" details from me. Again, I apologize for the length and/or wordiness. (Sigh, always the dramatic...)
--------------------------------------------------------------------------------
First, versions:
Micro Transport ZX laptop, Pent III, 500 MHz. 128MB Ram, 6.0GB HD.
2 USB (1.1) ports, one to External CD/RW drive, other Canon Image Printer.
Microsoft Windows 2000 Professional, Office 2000 Professional.
All have latest Service Packs and Patches, including recent Win 2000 July Updates from Windows Update Web site. NOT including latest patches for Office 2000 (problem below).
"My Computer" Properties reads: Microsoft Windows 2000, 5.00.2195, Service Pack 4.
Word About reads: Microsoft Word 2000 (9.0.6926 SP-3).
MBSA version: 1.2.3316.1
Security Update Database version: 2004.7.13.0
MS Office Update Database version: 11.0.0.6608
--------------------------------------------------------------------------------
Note: About Network DOMAIN (to workgroup or not to workgroup...)
This machine previously used on a work Domain, used almost exclusively with Domain User account (connected or not). Now, use local machine account or administrator account. The "Domain" still exists (cannot connect anymore), and domain accounts still exist.
My old domain account, needed to access the locally saved email and contacts via Outlook 2000, a very LARGE (258MB) locally saved Outlook.ost file. This is a problem actually, cannot use Outlook really for anything else, as needs to connect to an Exchange Server to create any new Outlook Profile. I would "love" to export my Domain/Outlook items and eliminate the Domain (set a Workgroup). But export this to what? A local PST file? What could Import that? Would export/import lose attachments? Outlook really should be standard part of the Operating System (thanks that Express is much better).
This also means I do not have access to the old (network domain) folder location where MS Office was installed and maintained from. Nor any Office 2K Install CD (with Disk1.cab file). This a problem for me below with both MBSA and Office Update Web Site. I do have the license CD's for all else (Win2K, Visio2K, Visual Studio 6, Oracle 8i). "We" (IT people) just forgot an Office CD for me when I got this computer from my previously workplace (and no going back). "We" did make sure Office SP4 installed.
--------------------------------------------------------------------------------
Ok, sorry now the questions:
MBSA version Updating
Microsoft Baseline Security Advisor (? Administrator? I forget).
MBSA seems to update the Security/Windows version (data) itself, when you scan while connected to the Internet. (Wish the Scanning and Updating were separate functions, btw). The "mssecure.xml" and .cab files I mean.
1. Does the actual program MBSA v1.2.3316.1 "update" automatically? How can I tell if another (better) version exists? (Would uninstall/install be necessary?)
2. The office database version data files (not just one xml, but a couple and a folder?) do not (or has not for me) changed at all since I initially got MBSA set up and working. The version 11.0.0.6608 is as above. Is this true that Office info does not update automatically? If not, how to check and update this?
--------------------------------------------------------------------------------
3. MBSA Results Issues - IE (Internet Explorer) Zones, Severe Red X.
It says IE Zones do not have secure settings for some users and Zone is "Restricted Sites" is "Custom" and recommended "High". It lists the User's ID only, and turns out this is a Domain Administrator account, used previously by my old workplace IT people). I don't know the password, nor the effect of simply deleting this account, without eliminating the network Domain settings also.
When MBSA first setup I remember getting these types of failures for various users (and also for the "Macro Security", see next problem #4). It isn't possible to do "Global" settings changes? (i.e. affect all users on machine, even one's can't access normally). This Domain Admin account not used at all by me but gets Severe Red X and has failed every scan done by MBSA so far...
--------------------------------------------------------------------------------
4. MBSA Results Issue - Macro Security, Yellow X.
It says 4 Office Products were found and some issues are found. (Not true, have Word, Excel, PowerPoint, Access, and Outlook. Isn't that five products?) (I have Visio 2K, btw).
For 2 Users on Two Products (four problem issues listed in MBSA report). Two Products are MS Outlook 2000 and MS PowerPoint 2000. One User is the above-mentioned Domain Admin account; the other user is unknown, apparently a local account, and first parts of ID). I suspect SMS account or Backup account? Visual Studio created two accounts for VS Analyzer once-upon-a-time. This is unused (by me). However, identity of the second account here is unknown so far by me.
The "4" Macro Security Issues (same for both Users, both Products): Macro Security is set to Medium which will allow you to choose whether or not to run possibly unsafe macros. Is does list all "OK" for Word and Excel. Does not "see" MS Access 2K, apparently.
Again, a "Global" way to change this for all users would be muy bueno. I have a lot of these error failures, and sometimes would change and would come back (probably affected via Net Framework 1.1? or Group/Local Policy? COM+ objects). It seems IE Zones and Office Security settings are done in many places.
How to fix this for accounts I cannot login to? (one the Domain Admin, the other unknown). The unknown might be one of two SMS accounts that also exist). Can't and don't login with SMS as well).
--------------------------------------------------------------------------------
5. Office 2000 Security Patches - Red X's, Severe Security Risks
This a problem with Office Update Web Site and MBSA. To be fair, MBSA is working perfectly, reporting that these Security Updates are not installed. Installing them is what I would really like (opposed to faking or setting MBSA to stop Red X-ing).
Note: Office 2000 SP4 already installed. Only post SP4 Security Patches have are involved. The "five" Security Patches are:
1. KB826292 - Access 2000 Snapshot Viewer Security Patch, English Version.
2. KB930349 - Excel 2000 Security Patch.
3. KB822035 - Office 2000 Security Patch.
4. KB824993 - Office 2000 WordPerfect 5.x Converter Security Patch, English Version.
5. KB830347 - Word 2000 Security Patch.
These all "fail" (and have been failing) from MS Office Update Web Site. They download (are downloaded), look like they are installing (disk lights flash), then near the "end", a dialog box requesting Office Install CD or Network Location (with old Domain Shared Folder location displayed in Edit Box by default). It is asking for "Disk1.cab" (or is it "Disk1.msi" ??). I must press Cancel, so the whole thing fails and backs out.
There is a link to "Report Problem to Microsoft", which have done several times. I have tried the "Full File Versions" of the updates, and a few other suggestions. But although would not tell me the exact reason, apparently some files in office are missing the version numbers or have lost them? Probably (very likely) they are unrelated to the Security Patch involved.
It would see Security Patches should be different than product updates. But all who have tried to help me, say it should work without a Source Office CD...
I know also, there are further Office Security Patches after these five. (Presume haven't shown up, because these still "waiting failures".) Any ways to find out if/what these other Security Patches are?
--------------------------------------------------------------------------------
5. Office (2000) Update - related to above Office Security Patches
I have two folders under "C:\Program Files\", one is "OfficeUpdate", other "OfficeUpdate11", with both having a "Cabs" sub-folder. The first appears to be older and has two in the "Cabs" folder, 510065, 510634. The second ("OfficeUpdate11") has five in the "Cabs" folder, the five Office Security Patches listed above, 511319, 511325, 511324, 511467, 511468. It is here that the downloaded patches have been hiding (each number a folder under "Cabs").
Can/Should I delete any of this and re-try Office Update Web Site?
Delete entire "OfficeUpdate" and "OfficeUpdate11" folders, I mean.
Will Office Update re-set this up?
I wonder if having these locally and failures affect seeing any beyond or even affect the re-trying to install them. Perhaps the problem is fixed, but since somewhere it is marked to "ask for Source CD", that what it always does.
--------------------------------------------------------------------------------
That's it (not really, but hey).
Thanks heeps anyway!
Michael Waltrip
San Diego, California
