MBSA, Office Update, Versions, Failures

Discussion in 'Windows Update' started by Michael, Jul 22, 2004.

  1. Michael

    Michael Guest

    Hello (all?),
    I apologize for posting this to three groups (MBSA, Windows Update, Office Update), I realize the risk is not getting or missing something due to a belief that someone else will "get it". The same problem emails have with many on the TO: list. However, these questions I have are interrelated and may need expertise from multiple areas. Some are easy (simple) questions; others are not and will require "more" details from me. Again, I apologize for the length and/or wordiness. (Sigh, always the dramatic...)

    --------------------------------------------------------------------------------
    First, versions:
    Micro Transport ZX laptop, Pent III, 500 MHz. 128MB Ram, 6.0GB HD.
    2 USB (1.1) ports, one to External CD/RW drive, other Canon Image Printer.

    Microsoft Windows 2000 Professional, Office 2000 Professional.
    All have latest Service Packs and Patches, including recent Win 2000 July Updates from Windows Update Web site. NOT including latest patches for Office 2000 (problem below).

    "My Computer" Properties reads: Microsoft Windows 2000, 5.00.2195, Service Pack 4.
    Word About reads: Microsoft Word 2000 (9.0.6926 SP-3).

    MBSA version: 1.2.3316.1
    Security Update Database version: 2004.7.13.0
    MS Office Update Database version: 11.0.0.6608

    --------------------------------------------------------------------------------
    Note: About Network DOMAIN (to workgroup or not to workgroup...)
    This machine previously used on a work Domain, used almost exclusively with Domain User account (connected or not). Now, use local machine account or administrator account. The "Domain" still exists (cannot connect anymore), and domain accounts still exist.

    My old domain account, needed to access the locally saved email and contacts via Outlook 2000, a very LARGE (258MB) locally saved Outlook.ost file. This is a problem actually, cannot use Outlook really for anything else, as needs to connect to an Exchange Server to create any new Outlook Profile. I would "love" to export my Domain/Outlook items and eliminate the Domain (set a Workgroup). But export this to what? A local PST file? What could Import that? Would export/import lose attachments? Outlook really should be standard part of the Operating System (thanks that Express is much better).

    This also means I do not have access to the old (network domain) folder location where MS Office was installed and maintained from. Nor any Office 2K Install CD (with Disk1.cab file). This a problem for me below with both MBSA and Office Update Web Site. I do have the license CD's for all else (Win2K, Visio2K, Visual Studio 6, Oracle 8i). "We" (IT people) just forgot an Office CD for me when I got this computer from my previously workplace (and no going back). "We" did make sure Office SP4 installed.

    --------------------------------------------------------------------------------
    Ok, sorry now the questions:

    MBSA version Updating
    Microsoft Baseline Security Advisor (? Administrator? I forget).

    MBSA seems to update the Security/Windows version (data) itself, when you scan while connected to the Internet. (Wish the Scanning and Updating were separate functions, btw). The "mssecure.xml" and .cab files I mean.

    1. Does the actual program MBSA v1.2.3316.1 "update" automatically? How can I tell if another (better) version exists? (Would uninstall/install be necessary?)

    2. The office database version data files (not just one xml, but a couple and a folder?) do not (or has not for me) changed at all since I initially got MBSA set up and working. The version 11.0.0.6608 is as above. Is this true that Office info does not update automatically? If not, how to check and update this?

    --------------------------------------------------------------------------------

    3. MBSA Results Issues - IE (Internet Explorer) Zones, Severe Red X.

    It says IE Zones do not have secure settings for some users and Zone is "Restricted Sites" is "Custom" and recommended "High". It lists the User's ID only, and turns out this is a Domain Administrator account, used previously by my old workplace IT people). I don't know the password, nor the effect of simply deleting this account, without eliminating the network Domain settings also.

    When MBSA first setup I remember getting these types of failures for various users (and also for the "Macro Security", see next problem #4). It isn't possible to do "Global" settings changes? (i.e. affect all users on machine, even one's can't access normally). This Domain Admin account not used at all by me but gets Severe Red X and has failed every scan done by MBSA so far...

    --------------------------------------------------------------------------------

    4. MBSA Results Issue - Macro Security, Yellow X.

    It says 4 Office Products were found and some issues are found. (Not true, have Word, Excel, PowerPoint, Access, and Outlook. Isn't that five products?) (I have Visio 2K, btw).

    For 2 Users on Two Products (four problem issues listed in MBSA report). Two Products are MS Outlook 2000 and MS PowerPoint 2000. One User is the above-mentioned Domain Admin account; the other user is unknown, apparently a local account, and first parts of ID). I suspect SMS account or Backup account? Visual Studio created two accounts for VS Analyzer once-upon-a-time. This is unused (by me). However, identity of the second account here is unknown so far by me.

    The "4" Macro Security Issues (same for both Users, both Products): Macro Security is set to Medium which will allow you to choose whether or not to run possibly unsafe macros. Is does list all "OK" for Word and Excel. Does not "see" MS Access 2K, apparently.

    Again, a "Global" way to change this for all users would be muy bueno. I have a lot of these error failures, and sometimes would change and would come back (probably affected via Net Framework 1.1? or Group/Local Policy? COM+ objects). It seems IE Zones and Office Security settings are done in many places.

    How to fix this for accounts I cannot login to? (one the Domain Admin, the other unknown). The unknown might be one of two SMS accounts that also exist). Can't and don't login with SMS as well).

    --------------------------------------------------------------------------------

    5. Office 2000 Security Patches - Red X's, Severe Security Risks

    This a problem with Office Update Web Site and MBSA. To be fair, MBSA is working perfectly, reporting that these Security Updates are not installed. Installing them is what I would really like (opposed to faking or setting MBSA to stop Red X-ing).

    Note: Office 2000 SP4 already installed. Only post SP4 Security Patches have are involved. The "five" Security Patches are:

    1. KB826292 - Access 2000 Snapshot Viewer Security Patch, English Version.
    2. KB930349 - Excel 2000 Security Patch.
    3. KB822035 - Office 2000 Security Patch.
    4. KB824993 - Office 2000 WordPerfect 5.x Converter Security Patch, English Version.
    5. KB830347 - Word 2000 Security Patch.

    These all "fail" (and have been failing) from MS Office Update Web Site. They download (are downloaded), look like they are installing (disk lights flash), then near the "end", a dialog box requesting Office Install CD or Network Location (with old Domain Shared Folder location displayed in Edit Box by default). It is asking for "Disk1.cab" (or is it "Disk1.msi" ??). I must press Cancel, so the whole thing fails and backs out.

    There is a link to "Report Problem to Microsoft", which have done several times. I have tried the "Full File Versions" of the updates, and a few other suggestions. But although would not tell me the exact reason, apparently some files in office are missing the version numbers or have lost them? Probably (very likely) they are unrelated to the Security Patch involved.

    It would see Security Patches should be different than product updates. But all who have tried to help me, say it should work without a Source Office CD...

    I know also, there are further Office Security Patches after these five. (Presume haven't shown up, because these still "waiting failures".) Any ways to find out if/what these other Security Patches are?

    --------------------------------------------------------------------------------

    5. Office (2000) Update - related to above Office Security Patches

    I have two folders under "C:\Program Files\", one is "OfficeUpdate", other "OfficeUpdate11", with both having a "Cabs" sub-folder. The first appears to be older and has two in the "Cabs" folder, 510065, 510634. The second ("OfficeUpdate11") has five in the "Cabs" folder, the five Office Security Patches listed above, 511319, 511325, 511324, 511467, 511468. It is here that the downloaded patches have been hiding (each number a folder under "Cabs").

    Can/Should I delete any of this and re-try Office Update Web Site?
    Delete entire "OfficeUpdate" and "OfficeUpdate11" folders, I mean.
    Will Office Update re-set this up?

    I wonder if having these locally and failures affect seeing any beyond or even affect the re-trying to install them. Perhaps the problem is fixed, but since somewhere it is marked to "ask for Source CD", that what it always does.

    --------------------------------------------------------------------------------

    That's it (not really, but hey).
    Thanks heeps anyway!

    Michael Waltrip
    San Diego, California
     
    Michael, Jul 22, 2004
    #1
    1. Advertisements

  2. Michael

    itsme Guest

    So what the heck is your problem?

    Update), I realize the risk is not getting or missing something due to a
    belief that someone else will "get it". The same problem emails have with
    many on the TO: list. However, these questions I have are interrelated and
    may need expertise from multiple areas. Some are easy (simple) questions;
    others are not and will require "more" details from me. Again, I apologize
    for the length and/or wordiness. (Sigh, always the dramatic...)
    Updates from Windows Update Web site. NOT including latest patches for
    Office 2000 (problem below).
    with Domain User account (connected or not). Now, use local machine account
    or administrator account. The "Domain" still exists (cannot connect
    anymore), and domain accounts still exist.
    contacts via Outlook 2000, a very LARGE (258MB) locally saved Outlook.ost
    file. This is a problem actually, cannot use Outlook really for anything
    else, as needs to connect to an Exchange Server to create any new Outlook
    Profile. I would "love" to export my Domain/Outlook items and eliminate the
    Domain (set a Workgroup). But export this to what? A local PST file? What
    could Import that? Would export/import lose attachments? Outlook really
    should be standard part of the Operating System (thanks that Express is much
    better).
    location where MS Office was installed and maintained from. Nor any Office
    2K Install CD (with Disk1.cab file). This a problem for me below with both
    MBSA and Office Update Web Site. I do have the license CD's for all else
    (Win2K, Visio2K, Visual Studio 6, Oracle 8i). "We" (IT people) just forgot
    an Office CD for me when I got this computer from my previously workplace
    (and no going back). "We" did make sure Office SP4 installed.
    scan while connected to the Internet. (Wish the Scanning and Updating were
    separate functions, btw). The "mssecure.xml" and .cab files I mean.
    can I tell if another (better) version exists? (Would uninstall/install be
    necessary?)
    and a folder?) do not (or has not for me) changed at all since I initially
    got MBSA set up and working. The version 11.0.0.6608 is as above. Is this
    true that Office info does not update automatically? If not, how to check
    and update this?
    "Restricted Sites" is "Custom" and recommended "High". It lists the User's
    ID only, and turns out this is a Domain Administrator account, used
    previously by my old workplace IT people). I don't know the password, nor
    the effect of simply deleting this account, without eliminating the network
    Domain settings also.
    various users (and also for the "Macro Security", see next problem #4). It
    isn't possible to do "Global" settings changes? (i.e. affect all users on
    machine, even one's can't access normally). This Domain Admin account not
    used at all by me but gets Severe Red X and has failed every scan done by
    MBSA so far...
    have Word, Excel, PowerPoint, Access, and Outlook. Isn't that five
    products?) (I have Visio 2K, btw).
    Two Products are MS Outlook 2000 and MS PowerPoint 2000. One User is the
    above-mentioned Domain Admin account; the other user is unknown, apparently
    a local account, and first parts of ID). I suspect SMS account or Backup
    account? Visual Studio created two accounts for VS Analyzer
    once-upon-a-time. This is unused (by me). However, identity of the second
    account here is unknown so far by me.
    Security is set to Medium which will allow you to choose whether or not to
    run possibly unsafe macros. Is does list all "OK" for Word and Excel. Does
    not "see" MS Access 2K, apparently.
    have a lot of these error failures, and sometimes would change and would
    come back (probably affected via Net Framework 1.1? or Group/Local Policy?
    COM+ objects). It seems IE Zones and Office Security settings are done in
    many places.
    the other unknown). The unknown might be one of two SMS accounts that also
    exist). Can't and don't login with SMS as well).
    working perfectly, reporting that these Security Updates are not installed.
    Installing them is what I would really like (opposed to faking or setting
    MBSA to stop Red X-ing).
    have are involved. The "five" Security Patches are:
    They download (are downloaded), look like they are installing (disk lights
    flash), then near the "end", a dialog box requesting Office Install CD or
    Network Location (with old Domain Shared Folder location displayed in Edit
    Box by default). It is asking for "Disk1.cab" (or is it "Disk1.msi" ??). I
    must press Cancel, so the whole thing fails and backs out.
    times. I have tried the "Full File Versions" of the updates, and a few other
    suggestions. But although would not tell me the exact reason, apparently
    some files in office are missing the version numbers or have lost them?
    Probably (very likely) they are unrelated to the Security Patch involved.
    But all who have tried to help me, say it should work without a Source
    Office CD...
    (Presume haven't shown up, because these still "waiting failures".) Any
    ways to find out if/what these other Security Patches are?
    "OfficeUpdate11", with both having a "Cabs" sub-folder. The first appears to
    be older and has two in the "Cabs" folder, 510065, 510634. The second
    ("OfficeUpdate11") has five in the "Cabs" folder, the five Office Security
    Patches listed above, 511319, 511325, 511324, 511467, 511468. It is here
    that the downloaded patches have been hiding (each number a folder under
    "Cabs").
    even affect the re-trying to install them. Perhaps the problem is fixed, but
    since somewhere it is marked to "ask for Source CD", that what it always
    does.
     
    itsme, Jul 22, 2004
    #2
    1. Advertisements

  3. As for your MBSA questions:

    1. Does the actual program MBSA v1.2.3316.1 "update" automatically? How can
    I tell if another (better) version exists? (Would uninstall/install be
    necessary?)

    The actual tool (the MBSA program) does not update, but will alert you if a
    newer version is available. You have the latest version (which is MBSA
    1.2). The security database for both patch scanning (MSSECURE.XML) and
    Microsoft Office patches (PATCHDATA.XML and others - see next answer below)
    are updated each time you run MBSA and are connected to the internet.

    2. The office database version data files (not just one xml, but a couple
    and a folder?) do not (or has not for me) changed at all since I initially
    got MBSA set up and working. The version 11.0.0.6608 is as above. Is this
    true that Office info does not update automatically? If not, how to check
    and update this?

    The Office Update files are updated automatically at the same time the
    MSSECURE.XML file is updated, but are less frequently updated because Office
    releases paches on a less-frequent basis than Windows and all of its related
    components. You are using the latest version of the Office database and you
    are downloading it without problem (since MBSA ships without this file, you
    have successfullly downloaded at least once or it wouldn't be present on
    your machine).

    For more details on this, see the MBSA FAQ here:
    http://www.microsoft.com/technet/security/tools/mbsaqa.mspx - and check out
    the item titled "Q. How can I download the files necessary to run a scan if
    my proxy server requires authentication?"



    3. MBSA Results Issues - IE (Internet Explorer) Zones, Severe Red X.

    You'll want to determine if removing an account is appropraite for your
    machine and environment - and if it is, you can simply remove this account
    (which, if done through Windows, will also remove the residual IE zone
    settings).

    4. MBSA Results Issue - Macro Security, Yellow X.


    The confusing "4 Office Products" message stems from the fact that only
    Outlook, Word, Excel and PowerPoint are supported. It probably would be
    more correct if it said, "at least 4..." but that's a shortcoming that
    exists in MBSA 1.2. These residual settings for long-gone users need to be
    examined in the same way asd #3 above. In case it helps, here's a couple
    links to TechNet to help you resolve the SIDs to their origins:

    http://support.microsoft.com/default.aspx?scid=kb;en-us;163846
    http://www.microsoft.com/technet/tr...rodtechnol/ntwrkstn/deploy/depopt/cloning.asp

    Since Access is not one of the 4 products MBSA supports Macro setting
    detection, any other Office applications that have poor macro settings (like
    Visio, Access, Project, etc.) will not be scanned by MBSA. Unfortnunately,
    I don't know of a supported way to remove/change these settings globally
    (others on this newsgroup may have an idea).

    As for the patch installation problem and item #5, I'm afraid I don't know
    the answer to that. Perhaps an Office-centric MVP can assist better on this
    item.

    I hope that helps - and thanks for posting your issues and for using MBSA.







    --


    Doug Neal [MSFT]


    This posting is provided "AS IS" with no warranties, and confers no rights.

    If newsgroup discussion with experts and MVPs is unable to solve a problem
    to your satisfaction, feel free to contact PSS for the Microsoft Baseline
    Security Analyzer (MBSA) at the following link:
    http://support.microsoft.com/default.aspx?scid=fh;en-us;Prodoffer20a

    This e-mail address does not receive e-mail, but is used for newsgroup
    postings only.
     
    Doug Neal [MSFT], Jul 22, 2004
    #3
  4. Michael

    Michael Dude Guest

    Awesome! You replied even before I logged off (was still poking about).
    I will check out the links you suggested. You are right, properly managed user profiles is better than some "Global" set all solution.

    (and yes we know it's you itsme. What the heck is your problem? I guess, would be the proper response...)

    Cya!
    --
    Michael Waltrip
    San Diego, California



     
    Michael Dude, Jul 22, 2004
    #4
  5. Michael

    Michael Dude Guest

    Hey Doug,
    I replied just now (but was "in" Office Update Group. Not sure if this new-fangled spify Discussion Group interface will cross-post replies...)

    Anyway, what I said was "Awesome!". Thanks for the quick reply, I hadn't even logged off yet, was still poking around. And I think you are right, in that better managed user account list is the answer opposed to a Global "set all". Then again, better global tools for the Admin types (I say this only to get on their good sides).

    And yes, we know it's you, itsme. What the heck is your problem? (I think that is the proper response.)

    Cya....
    --
    Michael Waltrip
    San Diego, California
    "Remember, if ya wanna be a surfer, you gotta surf."


     
    Michael Dude, Jul 22, 2004
    #5
  6. Michael

    Michael Dude Guest

    First, they traded Junior Seau. Now Shaq O'Neil is gone. (Vlade going back home, I hear).

    What's your problem? You talkin' to me?

    Michael
     
    Michael Dude, Jul 22, 2004
    #6
  7. Michael

    Classact Guest

    Hi,
    I am looking for information on what to do when you are not able to download
    templates to your office 2003. I had been able to do this, but right now it
    is not possible. I have downloaded the updates to office. I am using XP as
    my operating system and have downloaded all the security updates. I don't
    know what else I can do. Also I am receiving x on my photos when opening an
    attachment or even in the email message. I am using IE 6.0. Do you have any
    suggestions? Thank you
     
    Classact, Mar 7, 2005
    #7
  8. I can only answer the MBSA questions. Although MBSA is reporting the Office
    Update issues, these results are coming from the Office Update engine. You
    will need to post these questions on an Office-related newsgroup and/or
    obtain a legal copy of the matching Microsoft Office installation CD-ROM and
    provide it at the time your computer requests the original Office CD-ROM.
    Even if it asks for it on a domain-based location, you can intervene and
    provide a local copy (through your CD-ROM drive, for example).
    Although your verison of the MBSA tool is up-to-date, you have very
    OUT-OF-DATE mssecure and Office Update files. The latest versions are
    2005.2.25.0 for MBSA (and are updated almost every month) and 11.0.0.7329
    from Office Update (and are updated when Office-based security bulletns are
    released). Check out the MBSA FAQ under the question "How can I use MBSA in
    an offline or secure environment that may require proxy authentication?" to
    troubleshoot problems with automaticaly downloading (See
    http://www.microsoft.com/technet/security/tools/mbsaqa.mspx).
    MBSA will notify you if there is a newer version, but presently, you are
    running the latest version (see above).
    See the MBSA FAQ under the aforementioned section titled, "How can I use
    MBSA in an offline or secure environment that may require proxy
    authentication?" to troubleshoot the lack of Office Updates
    By removing the user directories and regsitry keys, you will not remove
    domain-based settings elsewhere.
    There is no way to globally change these settings for individual users - or
    to apply (or remove) applicaitons for specific users you do not have access
    to. This machine sounds to be in a confusing state (removed, but still
    connected domain-based access - as well as orphaned domain-based users).
    You may want to consider preserving needed files and re-installing the
    machine in a non-domain joined state to make it easier to support and
    reset/remove extranious settings and applications you no longer need.

    As I mentioedn before, you will need to post these questions on an
    Office-related newsgroup and/or obtain a legal copy of the matching
    Microsoft Office installation CD-ROM and provide it at the time your
    computer requests the original Office CD-ROM. Even if it asks for it on a
    domain-based location, you can intervene and provide a local copy (through
    your CD-ROM drive, for example).



    --


    Doug Neal [MSFT]


    This posting is provided "AS IS" with no warranties, and confers no rights.

    If newsgroup discussion with experts and MVPs is unable to solve a problem
    to your satisfaction, feel free to contact PSS for the Microsoft Baseline
    Security Analyzer (MBSA) at the following link:
    http://support.microsoft.com/default.aspx?scid=fh;en-us;Prodoffer20a

    This e-mail address does not receive e-mail, but is used for newsgroup
    postings only.
     
    Doug Neal [MSFT], Mar 8, 2005
    #8
  9. Michael

    Rush L. Guest

    Dear Michael, don't you have a race to get ready for? Probably an old joke
    for you, sorry.

    I'm just trying to find out how to continue getting Office 2003 automatic
    updates without the Outlook updates. Couldn't find anything on the MS Office
    site for this, probably because it's not possible. I don't use Outlook
    because I can't send any E-Mails larger than 5 meg using Verizon DSL. The
    auto update won't leave me alone until I install it and of course if I turn
    off the auto updates the annoying reminders that it's off pops up way too
    often......... Kind of new at this blogging stuff so I don't even know if I
    got this ? in the right area. Thanks, Rush L.
     
    Rush L., Feb 25, 2006
    #9
  10. Michael

    Dummy Guest

     
    Dummy, Mar 8, 2006
    #10
  11. Michael

    Dummy Guest

    ok, I'll admit all this computa jargon is makin' ma head spin. all i wanna do
    is turn on this heah computa and tap away, knowing that when i click on
    things like I'm told, things are gonna work like they's supposed to. so u may
    call me a dummy if u like, but my microsoft updates keep on a'comin', and my
    windows updates -- they keep on a'comin', too, but that MSN task launcher,
    whenever i click on a :"template on the web", a little popup comes up to
    stall me and cause me grief. That popup tells me i have to reinstall or
    something or other, but when i go to do that, more problems occur in the
    control panel, there seem to be no end to difficulties...

    i don't wanna know all the gory details. i just want it to WORK.

    surely mr. gates could appoint someone to fix this little detail. or mr.
    gates's secretary could appoint someone, eh?
     
    Dummy, Mar 8, 2006
    #11
  12. Michael

    Tatia Guest

    Hi I have a question How can I use an old printer of mine and I also lost my
    disk to the printer to my second hand computer I just received. Please help

    Thank you
    Tatia
     
    Tatia, Jan 19, 2007
    #12
  13. Michael

    PA Bear Guest

    And how does your question pertain to Office Update, SBA and/or Windows
    Update, Tatia?
    --
    ~PA Bear
    <snip>
     
    PA Bear, Jan 20, 2007
    #13
  14. It pertains to not seeing that she cross-posted to 3 different newsgroups as
    well as hijacking a completely unrelated issue.

    --

    JoAnn Paules
    MVP Microsoft [Publisher]

    ~~~~~
    How to ask a question
    http://support.microsoft.com/KB/555375
     
    JoAnn Paules [MVP], Jan 20, 2007
    #14
  15. CDO all night long, doo dah, doo dah
    Cross group hijack frowned upon
    all the doo dah day ...

    < Everybody sing !!! >


    MowGreen [MVP 2003-2007]
    ===============
    *-343-* FDNY
    Never Forgotten
    ===============
     
    MowGreen [MVP], Jan 20, 2007
    #15
  16. Michael

    Peter Foldes Guest

    LOL. In a chorus on top of that

    --
    Peter

    Please Reply to Newsgroup for the benefit of others
    Requests for assistance by email can not and will not be acknowledged.

     
    Peter Foldes, Jan 20, 2007
    #16
  17. Must be one of them thar song-writin' MVPs. :)

    --

    JoAnn Paules
    MVP Microsoft [Publisher]

    ~~~~~
    How to ask a question
    http://support.microsoft.com/KB/555375




     
    JoAnn Paules [MVP], Jan 20, 2007
    #17
    1. Advertisements

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments (here). After that, you can post your question and our members will help you out.