IE5/Win2K security patch can lock out users

Microsoft warned network administrators yesterday to stop distributing a security patch for Internet Explorer 5.0 that could prevent Windows 2000 users from logging in to their computers.

          Microsoft warned network administrators yesterday to stop distributing a security patch for Internet Explorer 5.0 that could prevent Windows 2000 users from logging in to their computers.

          Instructions included with the patch, a 128-bit security add-on for Internet Explorer 5.0, 5.0a and 5.0b versions, are incorrect, said a Microsoft spokesman. The error, a command-line "switch," causes an automated installation to replace security files with older versions that will lock users out of their systems after restart. The 128-bit security installations under Windows 9x and Windows NT 4.x aren't affected, the spokesman added.

          Administrators who have built automated installation packages for Internet Explorer 5.0 on Windows 2000 systems should check the Microsoft site for information on correcting the problem. Installation packages containing the faulty switch should be frozen immediately, however.

          A Microsoft KnowledgeBase bulletin (#Q255669) with complete instructions and updates should be available within 24 hours, the spokesman said.

Join the newsletter!

Error: Please check your email address.
Show Comments
[]