where to install new MS01-057 patch for OWA???

Darren Weston

unread,

Dec 7, 2001, 6:50:03 AM12/7/01

to

Hi. If we have two OWA setup on a seperate Internet server, and not on the
same boxes that hold the mailboxes, do we run this hotfix on the IIS server
with OWA installed, or on the exchange servers themselves????

Ray

unread,

Dec 7, 2001, 9:00:24 AM12/7/01

to

I've got that question also. It looks like it has to be run on both the
standalone OWA servers and Exchange because the patch contains two files,
HTMLSNIF.DLL and SAFEHTML.DLL, that are not present on the standalone OWA
server. If you look at the article at
http://support.microsoft.com/default.aspx?scid=kb;EN-US;q313576, this is
actually a cumulative patch not just a single security fix.

We have about seven Exchange servers, some still at SP3. We can run this
patch on the standalone OWA server that serves all of them and also on the
Exchange server that is its default. Do we also need to convince the admins
of the other Exchange servers that they have to upgrade to SP4 and apply
this patch?

What are the implications of having the standalone OWA server patched, the
default Exchange server patched, and having some of the other Exchange
servers unpatched?

Ray

"Darren Weston" <darren...@kinetech.net> wrote in message
news:9uqaai$d31$1...@reader-00.news.insnet.cw.net...

Martin Tuip [MVP]

unread,

Dec 7, 2001, 10:20:02 AM12/7/01

to

The patch says it should be installed on the Exchange Server :)
(I confirmed this)

-------------------------------------
Martin Tuip
MVP - Exchange
Exchange 2000 list owner
http://www.exchange-mail.org
http://www.sharepointserver.com
-------------------------------------

"Darren Weston" <darren...@kinetech.net> wrote in message
news:9uqaai$d31$1...@reader-00.news.insnet.cw.net...

SW

unread,

Dec 7, 2001, 11:57:02 AM12/7/01

to

We had problems with the patch. It would not allow you to read the MESSAGE
BODY. BE CAREFUL!

"Darren Weston" <darren...@kinetech.net> wrote in message
news:9uqaai$d31$1...@reader-00.news.insnet.cw.net...

Ray

unread,

Dec 7, 2001, 2:31:35 PM12/7/01

to

Since it is replacing .ASP files, it definitely needs applied to the
non-Exchange standalone OWA server at a minimum.

Ray

Martin Tuip [MVP]

unread,

Dec 7, 2001, 3:55:57 PM12/7/01

to

You are absolutely correct about that. I received a change on my first post
and it needs to be installed on the OWA server :)

Martin

"Ray" <repl...@newsgroup.only> wrote in message
news:OqwaCX1fBHA.1852@tkmsftngp02...

Xignals

unread,

Dec 7, 2001, 5:31:40 PM12/7/01

to

How did you fix that problem? I am having the same problem.

On Fri, 7 Dec 2001 11:57:02 -0500, "SW" <twobn...@hotmail.com>
wrote:

Tina Long

unread,

Jan 10, 2002, 4:38:41 AM1/10/02

to

Any resolution to the below?
Tina...@hq.5sigcmd.army.mil. We have the same problem.

>.
>

Ray

unread,

Jan 10, 2002, 9:39:26 AM1/10/02

to

You have to have Internet Explorer 5.0 or above installed on the server
where you install the patch. It works fine with IE 5.5 or 6.0, I can attest.