Should I have the Web Client Service running on the SBS2003 server?

[Hollis Paul]

I have just figured out how to create Network Places to my IIS websites
on the server from my Vista client computer. This requires that the
Web Client Service be running, WebDAV Extensions allowed on the site,
and Integrated authentication allowed on the site.

The Web Client Service had been disabled up until now. Is it dangerous
to have it running on the SBS2003?

--
Hollis Paul
Mukilteo, WA USA

[Robert Li [MSFT]]

Hi Hollis,

Thanks for posting in our newsgroup.

Here is the answer to your question:

Q: Is it dangerous to have Web Client service running on the SBS2003?

A: A security issue has been identified in the Web Client service that
could allow an attacker to compromise your Windows-based system and gain
control over it. So please visit Microsoft update site to download and
install latest Service Packs and updates before you enable Web Client
service on SBS 2003 Server.

For more information, please refer to:

Security Update for Windows Server 2003 64-bit Itanium Edition and Windows
XP 64-bit Itanium Edition, Version 2003 (KB896426)
http://www.microsoft.com/downloads/details.aspx?FamilyId=2024382A-14A9-4231-
8835-E2720C562190&displaylang=en

Vulnerability in Web Client Service Could Allow Remote Code Execution
(911927)
http://www.microsoft.com/technet/security/bulletin/ms06-008.mspx

MS05-028: A vulnerability in the Web Client Service could allow remote code
execution
http://support.microsoft.com/kb/896426/

Hope the information helps.

If you need further assistance, please don't hesitate to let me know.

Best regards,

Robert Li(MSFT)

Microsoft CSS Online Newsgroup Support

Get Secure! - www.microsoft.com/security

=====================================================

This newsgroup only focuses on SBS technical issues. If you have issues
regarding other Microsoft products, you'd better post in the corresponding
newsgroups so that they can be resolved in an efficient and timely manner.
You can locate the newsgroup here:
http://www.microsoft.com/communities/newsgroups/en-us/default.aspx

When opening a new thread via the web interface, we recommend you check the
"Notify me of replies" box to receive e-mail notifications when there are
any updates in your thread. When responding to posts via your newsreader,
please "Reply to Group" so that others may learn and benefit from your
issue.

Microsoft engineers can only focus on one issue per thread. Although we
provide other information for your reference, we recommend you post
different incidents in different threads to keep the thread clean. In doing
so, it will ensure your issues are resolved in a timely manner.

For urgent issues, you may want to contact Microsoft CSS directly. Please
check http://support.microsoft.com for regional support phone numbers.

Any input or comments in this thread are highly appreciated.

=====================================================

This posting is provided "AS IS" with no warranties, and confers no rights.

--------------------
<Date: Tue, 17 Apr 2007 20:47:01 PST
<Mime-Version: 1.0
<Content-Type: text/plain; charset=iso-8859-1
<Content-Transfer-Encoding: 8bit
<X-Newsreader: Virtual Access by Atlantic Coast PLC,
http://www.soft-shop.com
<Organization: No Company
<Message-ID:
<VA.0000032...@obts-outlookdev.outlookbythesound.mukwoods>
<Subject: Should I have the Web Client Service running on the SBS2003
server?
<From: Hollis Paul <nos...@nospam.com>
<Reply-To: nos...@nospam.com
<Newsgroups: microsoft.public.windows.server.sbs
<NNTP-Posting-Host: pool-71-121-153-200.sttlwa.dsl-w.verizon.net
71.121.153.200
<Lines: 1
<Path: TK2MSFTNGHUB02.phx.gbl!TK2MSFTNGP01.phx.gbl!TK2MSFTNGP02.phx.gbl
<Xref: TK2MSFTNGHUB02.phx.gbl microsoft.public.windows.server.sbs:30948
<X-Tomcat-NG: microsoft.public.windows.server.sbs

[Hollis Paul]

In article <5HMio7kg...@TK2MSFTNGHUB02.phx.gbl>, Robert Li [MSFT]
wrote:

> Security Update for Windows Server 2003 64-bit Itanium Edition
>

Thank you, Robert. I had figured that this thread was dead. I just
sort of assume that if the SBS MVPs don't jump all over me and tell me
I am pig headed that it must be OK. I am not likely to ever go to a
64-bit version of SBS, but I will check out these KB articles. And
yes, I did enable the web client service.

[Robert Li [MSFT]]

Hi Hollis,

Thanks for updating.

If you are running Web Client service running on the SBS2003, please pay
attention to install the latest Service Packs and hotfixes from Microsoft
update website.

For more information, please refer to:

Windows Defender Home
http://www.microsoft.com/athome/security/spyware/software/default.mspx

823166 Overview of Exchange Server 2003 and Antivirus Software
http://support.microsoft.com/?id=823166

Best regards,

Robert Li(MSFT)

Get Secure! - www.microsoft.com/security

=====================================================

=====================================================

--------------------
<X-Tomcat-ID: 104601773
<References:
<VA.0000032...@obts-outlookdev.outlookbythesound.mukwoods>
<MIME-Version: 1.0
<Content-Type: text/plain
<Content-Transfer-Encoding: 7bit
<From: v-ro...@online.microsoft.com (Robert Li [MSFT])
<Organization: Microsoft
<Date: Thu, 19 Apr 2007 06:49:40 GMT
<Subject: RE: Should I have the Web Client Service running on the SBS2003
server?
<X-Tomcat-NG: microsoft.public.windows.server.sbs
<Message-ID: <5HMio7kg...@TK2MSFTNGHUB02.phx.gbl>
<Newsgroups: microsoft.public.windows.server.sbs
<Lines: 99
<Path: TK2MSFTNGHUB02.phx.gbl
<Xref: TK2MSFTNGHUB02.phx.gbl microsoft.public.windows.server.sbs:31282
<NNTP-Posting-Host: tomcatimport2.phx.gbl 10.201.218.182