http://www.microsoft.com/downloads/deta...-4D81-8354-72593B1C1F43&displaylang=en
Nice @ 329 mb..
I'm going to run this and test it out...
--
The additions to Windows Server 2003 introduced by Windows Server 2003 SP1 are designed to improve security, reliability, and productivity. Below is a brief introduction to the new features and enhancements brought to Windows Server 2003 by Service Pack 1. A more detailed description of these additions can be found in the Windows Server 2003 SP1 Product Overview.
Enhancements
Windows Server 2003 SP1 includes improvements to functionality that originally shipped with Windows Server 2003. Such enhancements make a great product better and raise the security, reliability, and productivity of Windows Server 2003. Some of the key enhancements include:
? Support for "no execute" hardware. Windows Server 2003 SP1 allows Windows Server 2003 to utilize functionality built in to computing hardware by companies such as Intel and Advanced Micro Devices to prevent malicious code from launching attacks from areas of computer memory that should not run code. This enhancement reduces the likelihood of the broadest and most exploited avenues of information attack.
? Internet Information Services (IIS) 6.0 metabase auditing. The metabase is the XML-based, hierarchical store of configuration information for IIS 6.0. The ability to audit this store allows network administrators to see which user accessed the metabase if it becomes corrupted.
? Stronger defaults and privilege reduction on services. Services such as RPC and DCOM are integral to Windows Server 2003 and thus make an alluring target for hackers. By requiring greater authentication for calls of these services, Windows Server 2003 SP1 establishes a minimum threshold of security for all applications that use these services, even if they possess little or no security inherently.
? Addition of Network Access Quarantine Control components. Windows Server 2003 SP1 now includes the RQS.exe and RQC.exe components to make deployment of Network Access Quarantine Control easier. For more information, see Network Access Quarantine Control in Windows Server 2003.
New features
In contrast with other service pack releases, Microsoft is taking the opportunity afforded by the release of SP1 to introduce powerful new functionality to Windows Server 2003.
? Windows Firewall. Also released with Windows XP Service Pack 2, Windows Firewall is the successor to the Internet Connection Firewall. Windows Firewall is a host (software) firewall, a firewall around each client and server computer on a customer's network. Windows Server 2003 Service Pack 1 installs Windows Firewall on the server and allows network-wide control through Group Policy.
? Post-Setup Security Updates (PSSU). Servers are vulnerable in the time between being installation and when the latest security updates are applied. To counter this, Windows Server 2003 with Windows Server 2003 Service Pack 1 blocks all inbound connections to the server after installation until Windows Update has run to deliver the latest security updates to the new computer. This feature also guides administrators through Automatic Update at the time of first log on.
? Security Configuration Wizard (SCW). SCW asks users questions about the role their servers fill and then stops all services and blocks ports not necessary to perform those roles. This new feature of Windows Server 2003 closes unnecessary avenues of attack.
Q. Where can I get complete information on all of the updates included in SP1?
A. The Windows Server 2003 SP1 overview guide contains a complete summary of all enhancements and improvements.
Q. How can I get SP1?
A. The Windows Server 2003 SP1 is available at no cost in the download center.
Q. Why should my organization deploy SP1?
A. Windows Server 2003 SP1 is a no-cost means for enterprises to enhance Windows Server 2003. Windows Server 2003 SP1 updates known vulnerabilities in Windows Server 2003 and adds to its capabilities to meet Microsoft's commitments to enhance server security, reliability, and productivity.
? Enhanced security. SP1 dramatically shrinks the attack surface of Windows Server 2003. Not only does it reactively address known security holes through updates, it sets up customers to proactively face future security threats. By shifting security into a role-based paradigm, Windows Server 2003 SP1 allows customers to run no more services than they need, eliminating potential toeholds for hackers and malicious code. Moreover, role-based security eases the deployment of future updates, reducing the time it takes for IT professionals to prepare for attempted exploitation of newly discovered vulnerabilities.
? Enhanced reliability. Security is at the heart of IT reliability: a network plagued by external attack is not reliable for the people and systems that depend upon it. By updating against past threats and proactively meeting future threats, SP1 increases the reliability of Windows Server 2003.
? Enhanced productivity. Resources spent dealing with the aftermath of an attack or maintaining cumbersome security arrangements are resources siphoned away from an organization's core business. SP1 addresses both of these intersections of security and productivity. By aggressively countering security threats, SP1 obviates organizations' need to clean up after attacks. By simplifying and rationalizing update management, SP1 frees resources to focus on core business.
Windows Server 2003 SP1 is an incentive for organizations migrating to Windows Server 2003. Not only is Windows Server 2003 with Windows Server 2003 SP1 already inoculated with all current updates, it includes new functionality to meet real-world needs discovered since the launch of Windows Server 2003.
Q. Will SP1 cause functionality problems with my existing applications?
A. The developers of Windows Server 2003 SP1 strove to provide the highest degree of application compatibility for existing applications written for Windows Server 2003 without compromising security. Windows Server 2003 SP1 addresses known vulnerabilities to Windows Server 2003 by tightening the authorization needed for some services and disabling others all together. In some cases this may result in unexpected behavior from your applications.
All of these changes to Windows Server 2003 are motivated by malicious exploitations of known security vulnerabilities. Avoiding known vulnerabilities is a very good reason to investigate and modify applications to take advantage of these better security practices.
Q. Does my organization have to use all of the new changes that come with SP1? Can we apply only some these changes to Windows Server 2003?
A. Some of the enhancements and updates introduced by Windows Server 2003 SP1 fundamentally change the working of Windows Server 2003, such as those changes to DCOM and Internet Explorer. These changes are unalterable. However, many of the enhancements and updates simply change application defaults and registry keys. Other components make enhancements and features available to your server but they still require separate installation, activation or configuration to apply to your systems.
Nice @ 329 mb..
I'm going to run this and test it out...
--
The additions to Windows Server 2003 introduced by Windows Server 2003 SP1 are designed to improve security, reliability, and productivity. Below is a brief introduction to the new features and enhancements brought to Windows Server 2003 by Service Pack 1. A more detailed description of these additions can be found in the Windows Server 2003 SP1 Product Overview.
Enhancements
Windows Server 2003 SP1 includes improvements to functionality that originally shipped with Windows Server 2003. Such enhancements make a great product better and raise the security, reliability, and productivity of Windows Server 2003. Some of the key enhancements include:
? Support for "no execute" hardware. Windows Server 2003 SP1 allows Windows Server 2003 to utilize functionality built in to computing hardware by companies such as Intel and Advanced Micro Devices to prevent malicious code from launching attacks from areas of computer memory that should not run code. This enhancement reduces the likelihood of the broadest and most exploited avenues of information attack.
? Internet Information Services (IIS) 6.0 metabase auditing. The metabase is the XML-based, hierarchical store of configuration information for IIS 6.0. The ability to audit this store allows network administrators to see which user accessed the metabase if it becomes corrupted.
? Stronger defaults and privilege reduction on services. Services such as RPC and DCOM are integral to Windows Server 2003 and thus make an alluring target for hackers. By requiring greater authentication for calls of these services, Windows Server 2003 SP1 establishes a minimum threshold of security for all applications that use these services, even if they possess little or no security inherently.
? Addition of Network Access Quarantine Control components. Windows Server 2003 SP1 now includes the RQS.exe and RQC.exe components to make deployment of Network Access Quarantine Control easier. For more information, see Network Access Quarantine Control in Windows Server 2003.
New features
In contrast with other service pack releases, Microsoft is taking the opportunity afforded by the release of SP1 to introduce powerful new functionality to Windows Server 2003.
? Windows Firewall. Also released with Windows XP Service Pack 2, Windows Firewall is the successor to the Internet Connection Firewall. Windows Firewall is a host (software) firewall, a firewall around each client and server computer on a customer's network. Windows Server 2003 Service Pack 1 installs Windows Firewall on the server and allows network-wide control through Group Policy.
? Post-Setup Security Updates (PSSU). Servers are vulnerable in the time between being installation and when the latest security updates are applied. To counter this, Windows Server 2003 with Windows Server 2003 Service Pack 1 blocks all inbound connections to the server after installation until Windows Update has run to deliver the latest security updates to the new computer. This feature also guides administrators through Automatic Update at the time of first log on.
? Security Configuration Wizard (SCW). SCW asks users questions about the role their servers fill and then stops all services and blocks ports not necessary to perform those roles. This new feature of Windows Server 2003 closes unnecessary avenues of attack.
Q. Where can I get complete information on all of the updates included in SP1?
A. The Windows Server 2003 SP1 overview guide contains a complete summary of all enhancements and improvements.
Q. How can I get SP1?
A. The Windows Server 2003 SP1 is available at no cost in the download center.
Q. Why should my organization deploy SP1?
A. Windows Server 2003 SP1 is a no-cost means for enterprises to enhance Windows Server 2003. Windows Server 2003 SP1 updates known vulnerabilities in Windows Server 2003 and adds to its capabilities to meet Microsoft's commitments to enhance server security, reliability, and productivity.
? Enhanced security. SP1 dramatically shrinks the attack surface of Windows Server 2003. Not only does it reactively address known security holes through updates, it sets up customers to proactively face future security threats. By shifting security into a role-based paradigm, Windows Server 2003 SP1 allows customers to run no more services than they need, eliminating potential toeholds for hackers and malicious code. Moreover, role-based security eases the deployment of future updates, reducing the time it takes for IT professionals to prepare for attempted exploitation of newly discovered vulnerabilities.
? Enhanced reliability. Security is at the heart of IT reliability: a network plagued by external attack is not reliable for the people and systems that depend upon it. By updating against past threats and proactively meeting future threats, SP1 increases the reliability of Windows Server 2003.
? Enhanced productivity. Resources spent dealing with the aftermath of an attack or maintaining cumbersome security arrangements are resources siphoned away from an organization's core business. SP1 addresses both of these intersections of security and productivity. By aggressively countering security threats, SP1 obviates organizations' need to clean up after attacks. By simplifying and rationalizing update management, SP1 frees resources to focus on core business.
Windows Server 2003 SP1 is an incentive for organizations migrating to Windows Server 2003. Not only is Windows Server 2003 with Windows Server 2003 SP1 already inoculated with all current updates, it includes new functionality to meet real-world needs discovered since the launch of Windows Server 2003.
Q. Will SP1 cause functionality problems with my existing applications?
A. The developers of Windows Server 2003 SP1 strove to provide the highest degree of application compatibility for existing applications written for Windows Server 2003 without compromising security. Windows Server 2003 SP1 addresses known vulnerabilities to Windows Server 2003 by tightening the authorization needed for some services and disabling others all together. In some cases this may result in unexpected behavior from your applications.
All of these changes to Windows Server 2003 are motivated by malicious exploitations of known security vulnerabilities. Avoiding known vulnerabilities is a very good reason to investigate and modify applications to take advantage of these better security practices.
Q. Does my organization have to use all of the new changes that come with SP1? Can we apply only some these changes to Windows Server 2003?
A. Some of the enhancements and updates introduced by Windows Server 2003 SP1 fundamentally change the working of Windows Server 2003, such as those changes to DCOM and Internet Explorer. These changes are unalterable. However, many of the enhancements and updates simply change application defaults and registry keys. Other components make enhancements and features available to your server but they still require separate installation, activation or configuration to apply to your systems.