Microsoft Windows 2000

Service Pack 3 Installation and Deployment Guide

About This Guide

Organization of This Guide
Terminology Used in This Guide
For More Information

What is the Service Pack?

Service Pack CD Contents
Service Pack Information on the Web
Service Pack Updates
Service Pack 3 Features

Planning the Deployment

Choosing an Installation Method
Identifying the Deployment Tools and Files
Determining Upgrade Options
Checking Space Requirements
Testing the Deployment in Your Environment
Evaluating Application Compatibility Modes

Removing Visible Entry Points for Windows 2000 Components

Removing Visible Entry Points During Unattended Setup
Removing Visible Entry Points During Sysprep

Installing Service Pack 3 for Windows 2000

The Update Installation

Scenario 1: Installing the service pack such that computers use local service pack source files (recommended)

Scenario 2: Installing the service pack such that computers use shared, remote service pack source files

Scenario 3: Installing the service pack by using SMS

Scenario 4: Installing the service pack by using Windows Installer and Group Policy

The Integrated Installation

Scenario 1: Installing Windows 2000 integrated with the service pack

Scenario 2: Using RIS to install Windows 2000 integrated with the service pack

Installing the Service Pack 3 Debugging Symbol Files

Removing the Service Pack

Removing a Service Pack Deployed by Using Group Policy

Automatic Updates for Windows 2000

Other Options

Copyright



About This Guide

Back to Top

This guide provides instructions for administrators installing Service Pack 3 (SP3) for Windows 2000 Professional, Windows 2000 Server, Windows 2000 Advanced Server, and Windows 2000 with Server Appliance Kit. This guide includes information for advanced users, technical details, procedures, and recommendations for successfully installing the service pack on multiple computers in a small business or corporate environment.

This document focuses on the key scenarios for installing the service pack either alone or with Windows 2000.

Note

If you want to install the service pack in combination with Windows 2000 hotfixes, see the Microsoft Windows 2000 Hotfix Installation and Deployment Guide.

This guide assumes a working knowledge of Windows 2000 and service pack installations. Although some basic operating system information is included in the document, this is not a replacement for either the Windows 2000 documentation or formal training. Rather, it is intended to complement these sources of information.

In particular, you should use this guide in conjunction with the Microsoft Windows 2000 Professional Resource Kit and the Microsoft Windows 2000 Server Resource Kit. For more information about these technical resources, see For More Information later in this document.

The Windows 2000 Service Pack 3 Web site provides a list of known issues and release notes pertaining to SP3, and any updated versions of this guide will be included on the Web site. You will find all of this information under Learn More on the site.

Organization of This Guide

This guide includes the following main sections:

Note

For details about the combination installation (installing hotfixes with Windows 2000), see the Microsoft Windows 2000 Hotfix Installation and Deployment Guide.

Terminology Used in This Guide

Before you get started, it's important to understand a few specialized terms that are used in this installation and deployment guide.

The following table provides definitions of terms used in this guide that are specific to service pack installations or Windows 2000, or both.

TermDefinition
systemrootThe "root" directory of the Windows installation on the computer's hard disk. For example, on most computers, systemroot is C:\Winnt.
systemdriveThe drive where the operating system is installed. For example, on most computers, the systemdrive is C:\.
integratedDescribes the version of the service pack that comes bundled with the operating system (for example, Windows 2000), which results in a unified operating system that is marketed as such (for example, Windows 2000 with SP3). You can also create an integrated version of Windows 2000 operating system files with SP3.

For More Information

For additional information about Windows 2000 and this service pack, see the following resources:



What is the Service Pack?

Back to Top

This service pack is a collection of updates to Windows 2000. To help you learn more about the service pack, this section discusses the following topics:

Important

This service pack is not a required upgrade; however, some applications might not run correctly unless SP3 is installed.

Service Pack CD Contents

The Service Pack 3 CD includes the following items:

The Service Pack 3 CD also contains the following documents and tools for advanced users and administrators:

Important

Service Pack Information on the Web

All files and programs included on the Service Pack 3 CD are also available on the Web. On the Windows 2000 Service Pack 3 Web site, you can view a list of fixes included in the service pack. The list includes the files affected by SP3, known issues, and general release notes for the service pack.

There are also two installation options available from this Web site, as described in the following paragraphs. Note that both of these installations provide you with the exact same software.

Service Pack Updates

To help you decide whether to upgrade to this service pack, Microsoft provides extensive documentation about the service pack updates. You will find the current list of fixes and general release note items (for example, space requirements for installing SP3) on the Windows 2000 Service Pack 3 Web site.

The service pack is a collection of updates for Windows 2000. These updates address the following aspects of Windows 2000:

Service Pack 3 Features

SP3 includes the features listed and described in the following paragraphs.

Important

Removing SP3 does not cause your computer to revert to 56-bit encryption. You can remove SP3 at any time, but your computer will retain high-encryption support. After SP3 is installed, the Protected Store will not be upgraded to 128-bit encryption. Microsoft has released a patch and tool to upgrade the Protected Store. To download the patch and the tool, see Microsoft Security Bulletin MS00-032. The FAQ for this security bulletin provides more information about Protected Store, the patch, and the tool.

Command-Line Options for W2ksp3.exe and Update.exe

To deploy the service pack, you can run the W2ksp3.exe, which extracts the contents. After this, Update.exe runs automatically to install the service pack. You can define the way these steps are completed by using the options explained in this section.

The following table describes the command-line options that both the Update.exe and W2ksp3.exe programs support. You include the options you want to use when you enter the command to extract files from W2ksp3.exe. The options are passed to Update.exe and dictate the specifics of the installation process; they do not, however, affect the way the files are extracted. All of the options listed in the table include a forward slash (/), but you can use a hyphen (-) instead, if you prefer. The options work the same way with either symbol.

Command-line optionDescription
/UUses unattended Setup mode. If you use this option, only critical error prompts will appear on-screen during the installation process.
/QUses quiet mode (the same as unattended mode, but with the user interface hidden from view). If you use this option, no prompts will appear on-screen during the installation process.
/FForces other applications to close at shutdown.
/NDoes not back up files for removing the service pack.
/OThis option is not currently available.
/ZDoes not restart the computer after the installation is completed.
/LLists installed hotfixes.
/S:folder_nameUses integrated installation mode—to a distribution server location. (This option is not currently available for W2ksp3.exe.)

Using Command-Line Options

You can use these options to install the service pack as follows:

Command-Line Options for W2ksp3.exe Only

The following table identifies additional command-line options that only the W2ksp3.exe program supports.

Command-line optionDescription
/XExtracts service pack files without starting Update.exe.

You are prompted to provide the path for the folder to which you want to extract W2ksp3.exe.

/U /X:folder_nameExtracts service pack files to the <folder_name> folder without prompting you and without starting Update.exe.



Planning the Deployment

Back to Top

To ensure a successful deployment of the service pack, prepare for your deployment by assessing the updates and enhancements contained in the service pack and determining how they affect your organization. After you have assessed deploying the service pack in your organization, complete these important planning tasks:

The following sections describe these tasks. For a complete list of and detailed information about deployment planning tasks and strategies, see the Microsoft Windows 2000 Server Resource Kit Deployment Planning Guide. This planning guide is an important tool to use as you design, plan, and develop your deployment of Windows 2000 as well as Windows 2000 service packs. The guide can help you gain insight into planning your deployment on both a project management level and a feature level. It addresses planning information that can help you get started, such as how to create a deployment plan and how to run a pilot project. It also provides important technical discussions that can help you deploy Windows 2000.

Choosing an Installation Method

The service pack supports the following installation methods:

For more information about the update and integrated installation methods, see these sections later in this document:

Identifying the Deployment Tools and Files

After you select your installation method , review the corresponding scenario in the Installing Service Pack 3 for Windows 2000 section later in this document to determine the necessary deployment tools and files.

This section provides a brief overview of common deployment tools and files. For more detailed information about a specific deployment tool or file, see the Microsoft Windows 2000 Server Resource Kit Deployment Planning Guide.

Depending on the scenario you choose, you might need one or more of the following deployment tools and files:

Determining Upgrade Options

Before you deploy the service pack in your organization, consider the upgrade paths supported by update and integrated installations:

The following table shows which Windows versions are and are not supported for these two types of SP3 installations.

Windows versionSupported for update installations of Service Pack 3Supported for integrated installations of Service Pack 3
Windows 95NoYes
Windows 98NoYes
Windows 98SENoYes
Windows NT 3.51NoYes
Windows NT 4.0NoYes
Windows Millennium EditionNoNo
Windows 2000 ProYesNo
Windows 2000 ServerYesNo
Windows 2000 Advanced ServerYesNo
Windows 2000 with Server Appliance KitYesNo

Checking Space Requirements

Disk space requirements vary according to the version of Windows 2000 you are installing: Windows 2000 Professional, Windows 2000 Server, Windows 2000 Advanced Server, or Windows 2000 with Server Appliance Kit. For specific information about the space you will need to install SP3 on a given version of Windows 2000, see the Readme file on the service pack CD.

Testing the Deployment in Your Environment

Although Microsoft has a high degree of confidence in this service pack, we cannot test all possible hardware configurations and line-of-business (LOB) applications that might be present in all environments. Instead, we recommend that you test the service pack in your environment before you deploy it to all of your users.

Testing the service pack in your environment can include, but is not limited to, the following procedure.

To test the service pack in your environment

  1. Take a cross-section of the types of computers used in your environment that should receive the service pack. Make sure that the computers you are using for the test are equipped with the software and the hardware devices that are typically used in your business.
  2. Install the service pack on each of these computers in the same way that you expect to do in your specific environment. Make sure that you perform each of the following actions:
  3. Verify that the software and hardware continue to work as expected for the various scenarios.
  4. Run System Stress for Windows NT 4.0 and Windows 2000 version 1.0 for up to two weeks (a System Stress CD is included with Microsoft Developer Network (MSDN) CD subscriptions).

    If you are installing Windows 2000 for the first time in your company or a particular division of your company, you might want to set up a pilot group to help test your deployment and verify that it works in your environment as expected.

For more information about planning for, testing, and deploying Windows 2000 in your environment, see the Windows 2000 Server Deployment and Planning Guide.

Evaluating Application Compatibility Modes

Compatibility modes provide an environment for applications that were designed to run on Windows 95, Windows 98, or Windows NT 4.0 Service Pack 5. These modes resolve several of the most common issues that prevent older applications from working correctly on Windows 2000. Applications that experience problems after the computer they are running on are upgraded from Windows 95 or Windows NT 4.0 to Windows 2000 might function better if they are started in one of these application compatibility environments.

Windows 2000 uses the compatibility modes to ensure compatibility with many popular applications. However, advanced users can also use this technology to provide solutions for their own applications. For more information on compatibility modes and how to use them, see article Q279792, "HOW TO: Enable Application Compatibility-Mode Technology in Windows 2000 Service Pack 2," in the Microsoft Knowledge Base. Note that although this article was written for SP2, it applies to SP3 as well.

SP3 includes significant enhancements and updates for Windows 2000 application-compatibility issues, including support for the Application Compatibility Toolkit, which you will find on the MSDN Application Compatibility Web site.

Compatibility modes are required primarily for user applications rather than for server applications. Because of this, compatibility updates are supplied with Windows 2000 Professional only. Windows 2000 Server and Windows 2000 Advanced Server users can install these compatibility updates from the Windows 2000 Compatibility Updates Web site.



Removing Visible Entry Points for Windows 2000 Components

Back to Top

This section explains how to remove Microsoft Internet Explorer, Outlook Express, or Windows Media Player visible entry points (such as shortcuts and menu entries) either during unattended Setup for Windows 2000 (using W2ksp3.exe or Update.exe) or while running Sysprep for Windows 2000. Note that the two procedures in this section do not remove any actual Windows code; they remove only the visible entry points for the individual components that you specify.

Removing Visible Entry Points During Unattended Setup

Each entry listed in the [Components] section in the Unattend.txt file uses the same two values: On and Off. For each item, select On to install it, or select Off not to install it.

To remove Internet Explorer, Outlook Express, or Windows Media Player visible entry points from Windows 2000 during unattended Setup, perform the following procedure.

To remove visible entry points during unattended Setup

  1. Use Setup Manager to create an Unattend.txt file, or modify an existing Unattend.txt file.
  2. To remove Internet Explorer visible entry points, set IEAccess equal to Off in the [Components] section of the Unattend.txt file, as in the sample code following this procedure.
  3. To remove Outlook Express visible entry points, set OEAccess equal to Off in the [Components] section of the Unattend.txt file.
  4. To remove Windows Media Player visible entry points, set WMPOCM equal to Off in the [Components] section of the Unattend.txt file.
  5. Run an unattended Setup, following the instructions in the Help file Deptool.chm (in \Support\Tools\Deploy.cab) on the Service Pack 3 CD.

Sample

[Components]
IEAccess = Off
OEAccess = Off
WMPOCM = Off

Removing Visible Entry Points During Sysprep

To remove Internet Explorer, Outlook Express, or Windows Media Player visible entry points from Windows 2000 after you have already installed the operating system, perform the following procedure.

To remove visible entry points during Sysprep

  1. Create an Unattend.txt file with one or more of the following entries in the [Components] section:
    [Components]
    IEAccess = Off
    OEAccess = Off
    WMPOCM = Off

    You can use the same Unattend.txt file described in the preceding section (Removing Visible Entry Points During Unattended Setup), or you can use a separate file that contains only the [Components] section.

  2. Add the following command line to the [GuiRunOnce] section of Sysprep.inf:
    [GuiRunOnce]
    sysocmgr /U:unattend.txt /Q /R /C /X 
  3. Run Sysprep, following the instructions in the Help file Deptool.chm (in \Support\Tools\Deploy.cab) on the Service Pack 3 CD.


Installing Service Pack 3 for Windows 2000

Back to Top

The following sections provide instructions for installing SP3. You can either update computers already running Windows 2000 or complete an integrated installation by installing Windows 2000 and the service pack together.

For either type of installation, administrative logon credentials are required. To install the service pack on a given computer or over a network, you must be logged on as an administrator.

The Update Installation

During the update installation, the service pack is installed on a computer that is already running Windows 2000. When you run the Update.exe program, it automatically installs the updated system files and makes the necessary registry changes. After the computer is restarted, the installation is complete and Windows 2000 runs with an updated file set.

This section describes the steps involved in the following update installation scenarios:

Important

If a system file on a computer becomes corrupted or needs replacing for some other reason, you will need the service pack source files to replace that system file.

This service pack supports several types of distribution media, including CD-ROMs, shared folders on networks, and Web downloads. Because this guide is intended for corporate audiences, the update installation scenarios described in this document focus on the use of shared distribution folders on networks, which is the most common distribution medium for this audience.

Depending on your installation requirements, you can choose from the various update scenarios presented in this section.

Note

In all of the following procedures, "E:\" represents the drive name of the network or computer where your distribution folder is located.

Scenario 1: Installing the service pack such that computers use local service pack source files (recommended)

This method enables you to set up a shared distribution folder on a network so that users can upgrade their computers from a central point and store their system backup files locally.

You can do this by starting the W2ksp3.exe program (setting whatever options you want to use). You can also create logon scripts for users, which will ensure that they can upgrade to SP3 when they next use their computers.

To install the service pack

  1. Connect to the network or computer on which you want to create the distribution folder.
  2. In the shared folder on the network, create a distribution folder for the service pack.

    For example, to create a distribution folder named SP3, type the following at the command prompt:

    mkdir E:\SP3

  3. Before you begin the installation, be sure to disable any real-time virus checkers that are running on the computers on which you will be installing the service pack.

    This is an important first step, because real-time virus checkers could cause problems with the installation if they are running.

  4. To install the service pack from the distribution folder (in this example, named SP3), type the following at the command prompt:

    E:\SP3\W2ksp3.exe

    You can include command-line options as needed. For example, if you want to install hotfixes immediately after installing SP3 and thus don't your computer to restart automatically at the completion of the SP3 installation, include the /Z option in the installation command.

  5. After the installation is complete, restart the computer right away unless you want to install hotfixes immediately after the service pack installation.

    If you want to install hotfixes, see the hotfix installation and deployment guide. You can restart the computer later so that SP3 and the hotfixes become fully operational at the same time.

  6. After you restart the computer, be sure to reenable the virus checkers.

    Important

    SP3 will not be fully operational until you restart your computer.

Scenario 2: Installing the service pack such that computers use shared, remote service pack source files

This scenario explains how to prepare a shared distribution folder on a network and install the service pack from it. Doing this enables you to store service pack source files in the shared distribution folder rather than on local computers. Note that the update installation method installs the service pack on computers that are already running Windows 2000.

Important

Because the service pack source files are kept remotely on the network, this method is suitable only for computers that are permanently connected to the network. For example, this method is not suitable for upgrading laptops.

You must use a shared distribution folder that was created specifically for SP3. Do not reuse a folder that was set up for a previous service pack. Shared distribution folders for service pack source files must be permanent to ensure that all of the files a computer might need to replace are available.

Extracting the files from W2ksp3.exe by using command line options can be useful if you want to use the distribution folder as the folder that contains the service pack source files. This saves disk space on local computers, as the installation would point to the distribution folder for ServicePackFiles rather than creating this folder locally. The ServicePackFiles folder is needed whenever Windows 2000 requires a service pack file, such as when Windows File Protection needs to restore a corrupted or tampered-with file or when an optional component is configured.

If you move the shared distribution folder, see article Q271484, "Files and Folders Are Added to Your System After Service Pack Is Installed," in the Microsoft Knowledge Base for more information.

Installing the service pack on a server cluster

If you are installing the service pack on a server cluster, you must first pause the node and move all groups running on it to another node. For complete instructions before installing the service pack, see article Q174799, "How to Install Service Packs in a Cluster," in the Microsoft Knowledge Base. If SQL Server is installed on the server cluster, see article Q239473, "PRB:70rebind.exe for Windows 2000 and MDAC Upgrades on Clustered SQL Server 7.0 Servers," in the Knowledge Base before installing the service pack.

For information about Kerberos support in SP3, see article Q235529, "Kerberos support on Windows 2000 Server Clusters," in the Microsoft Knowledge Base.

To install the service pack

  1. Connect to the network or computer on which you want to create the distribution folder.
  2. In the shared folder on the network, create a distribution folder for the service pack.
  3. Before you begin the installation, be sure to disable any real-time virus checkers that are running on the computer on which you will be installing the service pack.

    This is an important first step, because real-time virus checkers could cause problems with the installation if they are running.

  4. For example, to create a distribution folder named SP3, type the following at the command prompt:

    mkdir E:\SP3

  5. If you want to install the service pack without first extracting files to a shared distribution folder, skip this step. If you want to extract files to the shared distribution folder, type the following at the command prompt:

    W2ksp3.exe -x

    You are then prompted to enter the path to the distribution folder you have created. Enter the full path to this folder — for example, E:\SP3 — to automatically extract the service pack files to that path.

  6. To install the service pack from the shared distribution folder, run the service pack update.

    If you have extracted the files first, use Update.exe. For example, to install the service pack from a distribution folder named SP3, type the following at the command prompt:

    E:\SP3\i386\Update\Update.exe

    If you did not extract the files first, use W2ksp3.exe. For example, to install the service pack from a distribution folder names SP3, type the following at the command prompt:

    E:\SP3\W2ksp3.exe

    After the installation is complete, restart the computer right away unless you want to install hotfixes immediately after the service pack installation.

    If you want to install hotfixes, see the hotfix installation and deployment guide. You can restart the computer later so that SP3 and the hotfixes become fully operational at the same time.

  7. After you restart the computer, be sure to reenable the virus checkers.

Important

SP3 will not be fully operational until you restart your computer.

Scenario 3: Installing the service pack by using SMS

This scenario explains how to install the service pack from a shared distribution folder on a network by using SMS. This update installation method installs the service pack on SMS client computers that are already running Windows 2000.

Important

To do this type of installation, you must have SMS 2.0 with SP2 installed on your computer.

To install the service pack by using SMS

  1. Create the SMS package by importing the package definition file for the service pack. In the package, provide the path to the service pack source files.
  2. Distribute the SMS package to the distribution points.
  3. Create the advertisement to notify SMS clients about the service pack.

This scenario assumes that you have an understanding of SMS as well as a working knowledge of software distribution. Also, this section assumes that your SMS infrastructure is in place or that you will put an SMS infrastructure in place before you deploy the service pack. For more information about SMS, see the SMS 2.0 Administrator's Guide. For specific information about software distribution, see Chapter 12, "Distributing Software," in the SMS 2.0 Administrator's Guide.

For information about using SMS securely, see the security documentation on the Microsoft Systems Management Server Web site, including the "SMS Security Essentials" white paper.

A sample package definition file for Windows 2000 SP3 (W2ksp3.sms) is provided in the \Support\Tools folder on the service pack CD.

Creating the SMS Package

The first step in distributing software through SMS is to create the SMS package, which contains the files and instructions that direct the software distribution process. When you create the SMS package, you set up the location of the package source files (where SMS obtains the files) and the package definition file (.sms or .pdf) for distributing the service pack.

A package definition file is a specially formatted file that contains all of the information necessary to create the SMS package. If you import this file, SMS immediately creates the package. After you use a package definition file to create a package, you can modify it the same way you would modify any other SMS package.

Each predefined SMS package also contains SMS programs, which are command lines that run on each targeted computer to control the execution of the package. Each program is a different combination of options that you create for installing the package. For example, the package definition for the service pack includes programs to install the service pack with or without user input. These SMS programs must be compatible with the installation files for the package.

To create the SMS package

  1. Connect to the shared network folder or the folder on your local computer in which you want to place the source files.
  2. In the shared network folder or local folder, create a source files folder for the service pack.

    For example, to create a source files folder named SP3, type the following:

    mkdir E:\SP3

  3. Copy the service pack executable files to the source files folder that you created in step 2.

    For example, to copy the service pack executable files from the service pack CD in the CD-ROM drive (D:) to the SP3 source files folder, type the following:

    xcopy D:\ E:\SP3 /e

  4. Extract the files as follows:
    1. At the command prompt, type W2ksp3.exe -x, and then press ENTER.
    2. You are then prompted to provide the path to the folder (for example, the source files folder) to which you want W2ksp3.exe to be extracted.

    Important

    If you download a service pack from the Windows 2000 Service Pack 3 Web site, you must extract the compressed program file before you can copy it to the source files folder.

  5. In the SMS Administrator console, click Packages.
  6. On the Action menu, point to New, and then click Package From Definition.
  7. On the Welcome page, click Next.
  8. To import the service pack package definition file, click Browse in the Package definition list, and then navigate to the folder where the package definition file for the service pack was created (for example, \Support\Tools\W2ksp3.sms on the service pack CD). When you find the package definition file, click it.
  9. On the Source Files page, click Always obtain files from a source directory, and then click Next.
  10. In the Source directory box, enter the path to the package source files (for example, \\server1\share1\dir1). This is the path you provided in step 4b earlier in this procedure.
  11. Click Next, and then click Finish.
  12. After the wizard finishes, click Programs under your new package.
  13. In the results pane on the right side of the console, double-click the service pack program.
  14. On the General tab in the Program Properties dialog box, verify that the predefined command line is the correct setup command for your needs.
  15. To check and modify the options that control the execution of your program, click the Requirements, Environment, and Advanced tabs in turn. For more information about the options on these tabs, see the SMS 2.0 Administrator's Guide.

Distributing the SMS Package to the Distribution Points

After you create the SMS package for the service pack, you can distribute the package to your distribution points. Distribution points are shared network folders from which SMS copies the package source files so that client computers can access these files.

To distribute the SMS package to the distribution points

  1. In the SMS Administrator console, click Packages, click the SMS package that you created for the service pack, and then click Distribution Points.
  2. On the Action menu, point to New, and then click Distribution Points.
  3. The New Distribution Points Wizard appears.
  4. Click Next to continue past the Welcome page, and then select the distribution points you want to use.

    Note

    All of the distribution points for all sites are listed, so you can select all of the distribution points now. Be sure to specify a distribution point for every site that has clients that need SP3.

  5. Click Finish to start the distribution. The package is immediately distributed to the selected distribution points.

    Note

    Distribution points must have sufficient disk space for the SMS package. For instructions for using the SMS Administrator console to check the amount of disk space available on distribution points, see the SMS 2.0 Administrator's Guide.

Creating the Advertisement

After you distribute the SMS package to the distribution points, you can create the advertisement that offers the package to the SMS clients.

To create the advertisement

  1. Create a collection of SMS clients to receive the installation program. You can base the collection either on a query or on direct membership rules.

    Note

    For more information about creating a collection, see the SMS 2.0 Administrator's Guide.

  2. Right-click the collection that will receive the program, and then click All Tasks/Distribute Software.

    The Distribute Software Wizard appears.

  3. Click Next.
  4. Click Distribute an existing package, click the SMS package for the service pack, and then click Next.
  5. In the Distribution Points dialog box, make sure that the distribution points you want to use are selected under Distribution points, and then click Next.
  6. In the Advertise a Program dialog box, click "Yes. Advertise a program", click the program you want to advertise, and then click Next.
  7. In the Advertisement Target dialog box, confirm that the collection of clients selected in step 2 is listed, and then click Next. If this collection is not listed, click Browse to find the collection you want.
  8. In the Advertisement Name dialog box, fill in the advertisement name, if appropriate, and then click Next.
  9. Specify any subcollections that should also receive this advertisement, and then click Next.
  10. Confirm or change the time at which the advertisement is to be offered, and specify whether and when the advertisement should expire.
  11. To make the advertisement mandatory and force the installation of the advertised package, click Yes on the Assign Program page.
  12. Click Next, and then click Finish.

SMS clients refresh the list of advertised programs on a configurable polling interval; to the default interval is 60 minutes. After the service pack advertisement is received on a client, it appears (for selection by users) in the Advertised Programs Wizard in Control Panel, or, if the advertisement is assigned (mandatory), it runs on the specified schedule.

Scenario 4: Installing the service pack by using Windows Installer and Group Policy

This scenario explains how to install the service pack from a shared distribution folder on a network by using Windows Installer. This installation method installs the service pack on computers that are already running Windows 2000.

This section assumes that you have a basic understanding of Windows Installer, as well as a working knowledge of Group Policy and Active Directory™. For more information about Windows Installer, Group Policy, or Active Directory, see the Microsoft Windows 2000 Professional Resource Kit or the Microsoft Windows 2000 Server Resource Kit (included in the Support.cab file on the service pack CD.

Note

If you plan to deploy the service pack using Group Policy, you are advised to follow the instructions given in article Q302430, "HOW TO: Assign Software to a Specific Group By Using a Group Policy," in the Microsoft Knowledge Base.

Using Windows Installer

The Windows Installer package file (Update.msi) contains all of the information that Windows Installer requires to install or remove the service pack and to run the Setup user interface. This package file describes the relationships among service pack features, components, and resources. The package file also contains an installation database, a summary information stream, and data streams for various parts of the service pack installation.

You can use the Software Installation and Maintenance feature in Windows 2000, which uses Windows Installer and the Update.msi file to create a Windows Installer package that installs the service pack. The Software Installation and Maintenance feature uses a Group Policy object (GPO) to deploy the package (on networked computers) within Active Directory containers, such as sites, domains, and organizational units that are associated with the GPO.

After you assign the package, Windows Installer installs the service pack automatically when the users start their computers. The users do not choose to install the service pack. Note that only a network administrator or someone who is logged on to a local computer as an administrator can remove the assigned software.

Important

Microsoft recommends that you use W2ksp3.exe when deploying Windows 2000 SP3 by using the command prompt. If you use Update.msi to distribute service packs, implement the distribution by using a computer-based GPO only. Microsoft does not support the use of user-based Group Policy deployments with Update.msi. User-based Group Policy deployments apply on a per-user basis. The installation of a service pack applies to the entire system. For more information, see article Q278503, "Best Practices for Using Windows 2000 Update.msi Package for Service Pack 1 Installation," in the Microsoft Knowledge Base.

Microsoft requires that you use the machine assigned distribution method when using Update.msi. There are no other methods available.

Service Pack installations That Are Not Completed

If the service pack installation does not get completed because of a power outage, a shutdown by a user, or some other reason, you must reinstall the GPO on the computers involved. You can determine whether the service pack installation was completed successfully by doing either of the following:

To work around an issue caused by the installation not being completed successfully, move the computers out of the scope of the service pack deployment to another organizational unit, restart the computers, move them back to the organizational unit that has the service pack deployed, and then restart the computers a second time. This redeploys the service pack to the client computers. You can use Active Directory Users and Computers to move the computers from one organizational unit to another.

Removing Previously Installed Service Packs

Microsoft does not recommend removing earlier service packs from your computer before you install a new one. However, when you want to prevent the automatic installation of an earlier service pack on computers added to your organizational unit (for example, to prevent computers from being upgraded to Service Pack 2, because SP3 is now available), you can do so by performing the following procedure.

For information about removing service packs that were deployed with Group Policy, see Removing a Service Pack Deployed by Using Group Policy later in this guide.

To remove an earlier service pack

  1. In the console tree, double-click Active Directory Users and Computers to expand the tree, double-click the name of the domain where the organizational unit that is receiving the service pack resides, and then double-click the applicable organizational unit name.
  2. Right-click the Active Directory object that the MSI package is applied to, and then click Properties.
  3. Double-click the GPO you want to edit (for example, Desktop SP2 Upgrade).
  4. In the Group Policy snap-in, double-click Software Settings under the Computer Configuration node.
  5. Right-click the software package you want to stop installing on computers newly added to your organizational unit (for example, Windows 2000 Service Pack 2 (1033).
  6. Click All Tasks and then click Remove.
  7. Click Allow users to continue to use the software, but prevent new installations and then click OK.

Assigning Service Pack 3 to Computers

This procedure explains how to assign the service pack to computers managed by a GPO. For your installation, you might want to associate the GPO with a different Active Directory container. To assign the service pack to computers by using Group Policy, you must do the following:

  1. Create a shared network distribution folder.
  2. Create a group policy for SP3 deployments.
  3. Apply the policy to assign the service pack to the computers.

Each of these procedures is explained in detail in the remainder of this section.

Note

If you used Add/Remove Programs to remove a service pack that was deployed by using the Update.msi program, you cannot automatically deploy it again by using Group Policy. For more information, see Removing a Service Pack Deployed by Using Group Policy later in this document.

Note

For the following procedure, "E:\" represents the drive of the network or computer where your distribution folder is located.

To create a shared network distribution folder

  1. Connect to the network or computer on which you want to create the distribution folder.
  2. In the shared folder on the network, create a distribution folder for the service pack.

    For example, to create a distribution folder named SP3, type the following:

    mkdir E:\SP3

    You must set the appropriate permissions to share your distribution folder so that users have read and execute access only and administrators have full-control access to the folder.

  3. Copy the service pack files and folders to the source files folder that you created in step 2.
    1. At the command prompt, type E:\SP3\W2ksp3.exe -x, and then press ENTER.
    2. When prompted, provide the path for the folder (for example, the source files folder) to which you want to extract W2ksp3.exe.

To create a group policy for SP3 deployments

  1. For an SP3 deployment, you can either create a new group policy or use an existing GPO.In the Microsoft Management Console (MMC) console, open the Active Directory Users and Computers snap-in.

    The Active Directory Users and Computers snap-in includes tools for Group Policy and software installation and maintenance. You can use these snap-ins to assign the service pack to computers in an organizational unit. For more information, see the Microsoft Windows 2000 Server Resource Kit or the Microsoft Windows 2000 Professional Resource Kit.

  2. In the console tree, double-click Active Directory Users and Computers to expand the tree, double-click the name of the domain where the organizational unit that is receiving the service pack resides, and then double-click the applicable organizational unit name.
  3. Right-click the Active Directory object that the MSI package will be applied to, and then click Properties.
  4. On the Group Policy tab, click New, type Desktop SP3 Upgrade, and then press ENTER.

To apply the group policy and deploy the service pack to the client computers

  1. On the Organizational Unit Properties page, click the Group Policy tab and then double-click the GPO you want to edit.
  2. In the Group Policy snap-in, double-click Software Settings under the Computer Configuration node.
  3. Right-click Software installation, click New, and then click Package.
  4. In the Open dialog box, browse to the i386\Update folder and then open the Update.msi file.
  5. In the Deploy Software dialog box, verify that the Assigned option is selected, and then click OK.
  6. Close the Group Policy snap-in, the Group Policy page, and the Console menu.

The Integrated Installation

You can apply the service pack directly to the Windows 2000 installation files and complete an integrated installation by using a shared distribution folder on a network. It is also possible to create a CD to complete the installation after you have integrated the files.

Because the integrated installation replaces individual files, the space requirements for this installation type are practically identical to the space requirements for Windows 2000. For information on these requirements, see the Readme.doc file on the Windows 2000 CD.

The following scenario explains how to use Update.exe to build the integrated installation and how to run Windows 2000 Setup (Winnt32.exe) to install Windows 2000 with the service pack already applied.

Because this guide is intended for corporate audiences, the integrated scenario described in this document focuses on the use of shared distribution folders on networks, which is the most common distribution medium for this audience.

Important

You cannot remove a service pack that you installed together with Windows 2000 in an integrated installation.

This section describes the installation steps for the following integrated installation scenarios:

Depending on your installation requirements, you can choose from these two integrated installation scenarios, which are described in detail in the following sections.

Note

In the following procedures, "E:\" represents the drive name of the network or computer where your distribution folder is located.

Scenario 1: Installing Windows 2000 integrated with the service pack

This scenario explains how to create an integrated installation of Windows 2000 and the service pack in a shared distribution folder on a network. The integrated process installs the service pack during Windows 2000 Setup. To complete this procedure, you must use a computer that is running Windows 2000.

Note that to use the Setup Manager Wizard (setupmgr.exe) to install Windows 2000 integrated with SP3, you must first have an integrated Windows 2000 Service Pack 3 CD or create a shared distribution folder on the network, as explained in the following procedure.

Important

Do not update Windows 2000 integrated with a service pack in a shared distribution folder if there are users who are still using a previously installed integrated version in the same shared folder.

To create an integrated installation of Windows 2000 and the service pack

  1. Connect to the network or computer on which you want to create the distribution folder.
  2. In the shared folder on the network, create a distribution folder for the Windows 2000 installation files.

    For example, to create a distribution folder named Win2000\i386, type the following:

    mkdir E:\Win2000\i386

    Ensure only the system administrator has full access to this folder. Other users should have only read and execute permissions.

  3. Insert your Windows 2000 CD into the CD-ROM drive, and then copy the contents of the CD to the distribution folder that you created in step 2.

    For example, to copy the installation files and folders from the Windows 2000 CD in the CD-ROM drive (D:) to the distribution folder named Win2000\i386, type the following:

    xcopy D:\i386 E:\Win2000\i386 /e

  4. Remove the Windows 2000 CD from the CD-ROM drive, and then insert the service pack CD.
  5. You can extract the service pack source files from W2ksp3.exe and put them in a folder you choose on your hard disk if you want to store these files locally, as described for the update installation earlier in this document. If you do not want to choose the location on your computer, skip this step and the installation will put the files in the default location.

    For example, to extract the service pack files located in the CD-ROM drive (D:) to your computer's hard disk (C:) in a folder called <SampleFolder>, type the following:

    D:\W2ksp3.exe /x

    In the Choose Directory For Extracted Files box, type C:\<SampleFolder>.

  6. If you extracted the files, you can apply the service pack to the Windows 2000 installation files located in the folder named Win2000\i386 by typing the following:

    C:\<SampleFolder>\i386\Update\Update.exe -s:E:\Win2000

    For a list of command-line options, see Command-Line Options for W2ksp3.exe and Update.exe earlier in this document.

  7. Customize Windows 2000 Setup, as necessary. For more information about how to do this, see the Winnt32.exe command syntax topic in the Microsoft Windows 2000 Professional Resource Kit.

You can now deploy Windows 2000 to your users' computers from the shared distribution folder in either attended or unattended Setup mode. Alternatively, you can burn a CD containing the files from the distribution folder. During the standard installation process, Windows 2000 Setup (Winnt.exe or Winnt32.exe) installs the updated operating system with the service pack already applied.

Important

When you run the Update.exe program as described earlier for an integrated installation, a Svcpack.log file is created automatically in systemroot on the computer that is running the Update.exe program. If you plan to update more than one version of Windows 2000 on this computer, rename the Svcpack.log file after you update each version. This ensures that you do not overwrite the current log file when you update additional versions of Windows 2000.

Scenario 2: Using RIS to install Windows 2000 integrated with the service pack

This scenario explains how to use Remote Installation Services (RIS) to install Windows 2000 integrated with the service pack. However, this section does not provide details on how to set up RIS. For more information about RIS, see the Step-by-Step Guide to Remote OS Installation.

Types of RIS Images

There are two types of operating system images supported by Remote OS Installation: CD-based images and Remote Installation Preparation (RIPrep) images. The CD-based option is similar to setting up a client's operating system directly from the Windows 2000 CD, but in this case, the source files reside on a RIS server. The RIPrep image enables an administrator to configure a client computer exactly how he or she wants it and then make a copy of that image for installation on client computers connected to the network.

Adding a Service Pack 3 Integrated CD-Based Image to a RIS Server

After you complete the installation of RIS on the server, perform the following steps to add an image of Windows 2000 integrated with the service pack to your RIS server.

To copy Windows 2000 integrated with SP3 to your RIS server

  1. Create an integrated installation of Windows 2000 with SP3. For more information, see Scenario 1: Installing Windows 2000 integrated with the service pack earlier in this document.
  2. On the RIS server, click Start, point to Programs, point to Administrative Tools, and then click Active Directory Users and Computers.
  3. In the left pane, click the container that the RIS server resides in.
  4. In the right pane, right-click the name of the RIS server and then click Properties.
  5. On the RIS server property page, click the Remote Install tab and then click Advanced Settings.
  6. On the Images tab, click Add to add a new CD-based operating system image. When prompted for the image source, point to the shared folder that contains the integrated installation that you created in step 1.

Updating Existing RIPrep Images to Service Pack 3

To perform this procedure, you must have an SP3 CD-based image of Windows 2000 Professional or Windows 2000 Server on your RIS server (see the preceding section, "Adding a Service Pack 3 Integrated CD-Based Image to a RIS Server").

To update existing RIPrep images

  1. Install each RIPrep image on your computer by using RIS.
  2. Install SP3 on this same computer by using the Update.exe program.
  3. Run RIPrep to copy the image back to the RIS server. For instructions on how to run RIPrep, see the Step-by-Step Guide to Remote OS Installation.

Note

You cannot use the /S option to integrate SP3 directly into an existing CD-based image or RIPrep image.



Installing the Service Pack 3 Debugging Symbol Files

Back to Top

The debugging symbol files are recommended for system administrators and other advanced users who will be diagnosing Windows 2000 system problems.

To use the SP3 debugging symbols successfully, you must have the Windows 2000 symbols installed on your computer before you install the SP3 symbols. If you do not already have these symbol files, you can download them from the How To Get Symbols page on the Microsoft Debugging Tools Web site.

To install the debugging symbol files for SP3, click here. During the installation, the SP3 debugging symbol files are copied over any existing versions of the debugging symbol files in the symbol installation folder.

Note

You do not need to have debugging symbols installed for your computer to operate properly.

You can also download symbols from How to Get Symbols page on the Microsoft Debugging Tools Web site. This page also contains information about the Microsoft Symbol Server, which enables you to download symbols on demand during a debugging session. For more information and to obtain the most current version of the debugging tools for Windows, see the Microsoft Debugging Tools Web site.



Removing the Service Pack

Back to Top

This section discusses the process of removing the service pack from your computer. If you want to remove the service pack, it is possible to restore your computer to its previous state. However, you cannot remove a service pack that was installed by means of an integrated installation.

When you run the Update.exe program to install the service pack, a subfolder named $ntservicepackuninstall$ is created in your systemroot folder.

You can remove the service pack either by using the command prompt or by using Add/Remove Programs in Control Panel.

Important

To remove the service pack by using Add/Remove Programs

  1. If you installed any applications after the service pack was installed, you must remove these applications first, in the order in which they were installed.
  2. Click Start, point to Settings, and then click Control Panel.
  3. Double-click Add/Remove Programs, click Windows 2000 Service Pack 3, and then click Change/Remove.
  4. Follow the instructions that appear on your screen.

    Important

    If you choose to remove SP3, a dialog box appears, listing the applications you installed since you upgraded to SP3. If you continue with the removal, these applications might not work correctly.

To remove the service pack by using the command prompt

  1. Open the command prompt window.
  2. Switch to the systemroot\$NtServicePackUninstall$\spuninst\ folder.
  3. Type Spuninst.exe, and then press ENTER.
  4. Follow the instructions that appear on your screen.
  5. To close the command prompt window, type exit.

Removing a Service Pack Deployed by Using Group Policy

When you use Add/Remove Programs to remove a service pack that was deployed by using the Update.msi program, you cannot automatically deploy it again by using Group Policy. Only the network administrator or a user who is logged on as an administrator is authorized to remove a service pack.

Update.msi is designed this way because a network administrator is likely to remove a service pack for good reason and does not want users who are connected to the network to have the service pack automatically reinstalled the next time they start their computers. After an administrator removes the service pack by using Update.msi, the only way to reinstall it on the computers involved would be to either deploy a newer version of it or manually reinstall the recently removed service pack from the service pack CD or from a shared network folder.

For more information, see article Q315141, "Nothing to Do" Error Message When You Try to Remove Service Pack from Add/Remove Programs," in the Microsoft Knowledge Base.



Automatic Updates for Windows 2000

Back to Top

SP3 installs the Automatic Updates feature so that you can automatically receive critical Windows 2000 fixes as soon as they become available. If you choose to enable Automatic Updates, whenever your computer is online and Windows 2000 updates become available, a "balloon" message is displayed in the status area. A link is provided so that you can go straight to the updates you need.

You can configure your computer to receive these notifications if you are logged on as an administrator. Use Control Panel to select the options you want. If Automatic Updates is not configured within 24 hours after the service pack is installed, the network administrator or whoever is logged on locally as an administrator will be prompted to configure it. Automatic Updates will not download any updates until someone has configured it to do so.

Network administrators can configure Automatic Updates by using Group Policy.

To configure Automatic Updates by using Group Policy

  1. In the Group Policy snap-in, right-click Administrative Templates and then click Add/Remove Administrative Templates.
  2. Click Add, select wuau.adm in the %windir%\inf folder, and then click Open.
  3. Double-click Administrative Templates, double-click Windows Components, and then double-click Windows Update.

    The Configure Automatic Updates policy is now displayed on your screen. This policy dictates whether a given computer will receive security updates and other important downloads through the Windows Automatic Updates feature. Using this policy, you can specify whether or not Automatic Updates is enabled.

  4. To view the policy settings, double-click the Configure Automatic Updates policy.
  5. To enable Automatic Updates, click Enabled in the group of options at the top of the Setting tab. Selecting this option will enable Windows 2000 to recognize when this computer is online. Whenever the computer is online, Windows uses its Internet connection to search the Microsoft Windows Update Web site for updates that apply to this computer.
  6. You must select one of the following three notification options:

Other Options

You can also select either the Disabled or Not Configured option:



Copyright

Back to Top

Information in this document, including URL and other Internet Web site references, is subject to change without notice. Unless otherwise noted, the example companies, organizations, products, domain names, e-mail addresses, logos, people, places and events depicted herein are fictitious, and no association with any real company, organization, product, domain name, e-mail address, logo, person, place or event is intended or should be inferred. Complying with all applicable copyright laws is the responsibility of the user. Without limiting the rights under copyright, no part of this document may be reproduced, stored in or introduced into a retrieval system, or transmitted in any form or by any means (electronic, mechanical, photocopying, recording, or otherwise), or for any purpose, without the express written permission of Microsoft Corporation.

Microsoft may have patents, patent applications, trademarks, copyrights, or other intellectual property rights covering subject matter in this document. Except as expressly provided in any written license agreement from Microsoft, the furnishing of this document does not give you any license to these patents, trademarks, copyrights, or other intellectual property.

© 2002 Microsoft Corporation. All rights reserved.

Microsoft, Active Directory, Outlook, Windows, Windows Media, and Windows NT are either registered trademarks or trademarks of Microsoft Corporation in the United States and/or other countries.

This product contains graphics filter software; this software is based in part on the work of the Independent JPEG Group.

The names of actual companies and products mentioned herein may be the trademarks of their respective owners.