Topic: For any of you learning/ using SQL2000 or MSDE (Read 1432 times)

Toasty0 · « **on:** September 05, 2003, 12:24:13 am »

Please go here and use this free app. It just might save you a great deal of headache on down the road.

http://www.microsoft.com/technet/treeview/default.asp?url=/technet/security/tools/tools/mbsahome.asp

I know I'm very diligent about updates and service packs. What this tool found startled the **** outta me and guided me through the steps of closing some really hairy security openings in SQL and IIS.

Best,
Jerry

NannerSlug · « **Reply #1 on:** September 05, 2003, 01:02:23 pm »

thanks T.. i use 2 sql servers and kinda by default get asked to shepard them some what.

Toasty0 · « **Reply #2 on:** September 05, 2003, 02:51:10 pm »

My pleasure, Nanner.

I've the limited MSDE running on my system while I learn ADO.NET and ASP.NET.

I ran across a mention of the MBSA in a white paper. So last night I DLed the thing and ran it. It alerted me to the lack of a security patch for SQL Server2000 and MSDE that the regular Windows Update site failed to catch. It also does a very thorough analysis of IIS security and directory security issues. I recommend this tool for anyone doing IIS, SQL/MSDE, or other web/IT development or network services on their machine.

Best,
Jerry

Sten · « **Reply #3 on:** September 06, 2003, 09:01:18 am »

I was not aware that Window Update would do updates for SQL2000 or SQL7. I know it will updatet the MDAC but it does not update MSDE.

Yesterday thanks to this app I verified that. WE had a programmer who "thought" his installer was updating MSDE and the MDAC surprise he it wasn't.

3dot14 · « **Reply #4 on:** September 06, 2003, 05:25:24 pm »

and MS is remedying that situation right now...

http://www.betanews.com/article.php3?sid=1062805731

Start with the next Windows Update revision, those apps will be included as well...

Toasty0 · « **Reply #5 on:** September 06, 2003, 06:06:07 pm »

Now that I've got it I kind of like MSBA. It's a handy tool and I hope MS doen't abandone it.

Toasty0 · « **Reply #6 on:** September 05, 2003, 12:24:13 am »

Please go here and use this free app. It just might save you a great deal of headache on down the road.

http://www.microsoft.com/technet/treeview/default.asp?url=/technet/security/tools/tools/mbsahome.asp

I know I'm very diligent about updates and service packs. What this tool found startled the **** outta me and guided me through the steps of closing some really hairy security openings in SQL and IIS.

Best,
Jerry

NannerSlug · « **Reply #7 on:** September 05, 2003, 01:02:23 pm »

thanks T.. i use 2 sql servers and kinda by default get asked to shepard them some what.

Toasty0 · « **Reply #8 on:** September 05, 2003, 02:51:10 pm »

My pleasure, Nanner.

I've the limited MSDE running on my system while I learn ADO.NET and ASP.NET.

I ran across a mention of the MBSA in a white paper. So last night I DLed the thing and ran it. It alerted me to the lack of a security patch for SQL Server2000 and MSDE that the regular Windows Update site failed to catch. It also does a very thorough analysis of IIS security and directory security issues. I recommend this tool for anyone doing IIS, SQL/MSDE, or other web/IT development or network services on their machine.

Best,
Jerry

Sten · « **Reply #9 on:** September 06, 2003, 09:01:18 am »

I was not aware that Window Update would do updates for SQL2000 or SQL7. I know it will updatet the MDAC but it does not update MSDE.

Yesterday thanks to this app I verified that. WE had a programmer who "thought" his installer was updating MSDE and the MDAC surprise he it wasn't.

3dot14 · « **Reply #10 on:** September 06, 2003, 05:25:24 pm »

and MS is remedying that situation right now...

http://www.betanews.com/article.php3?sid=1062805731

Start with the next Windows Update revision, those apps will be included as well...

Toasty0 · « **Reply #11 on:** September 06, 2003, 06:06:07 pm »

Now that I've got it I kind of like MSBA. It's a handy tool and I hope MS doen't abandone it.

News: