| Author |
Message |
Gary
Guest
|
 Posted:
Sun Jan 16, 2005 7:19 pm Post subject:
KB870763 automatic installation |
|
|
Whilst viewing the event logs on a SBS2000 server I came acroos EventID 4377
(Windows 2000 hotfix KB870763 was installed).
Strange thing is that it was done at 22:00hrs, when the office was closed &
had been since 17:00hrs, & Automatic updates are turned off.
My question is how did this get installed without user input? |
|
| Back to top |
|
 |
Lanwench [MVP - Exchange]
Guest
|
| Posted:
Sun Jan 16, 2005 11:29 pm Post subject:
Re: KB870763 automatic installation |
|
|
Gary wrote:
| Quote: | Whilst viewing the event logs on a SBS2000 server I came acroos
EventID 4377 (Windows 2000 hotfix KB870763 was installed).
Strange thing is that it was done at 22:00hrs, when the office was
closed & had been since 17:00hrs, & Automatic updates are turned off.
My question is how did this get installed without user input?
|
I don't see how it could have been. Are you 100% sure autoupdate is off? Who
else has access to this server (physically, or remotely)? |
|
| Back to top |
|
|
Gary
Guest
|
| Posted:
Tue Jan 18, 2005 2:15 am Post subject:
Re: KB870763 automatic installation |
|
|
Hi Lanwrench
Autoupdate is turned off & has been for over a year, I install updates
manually. The office was definitley locked at 17:00hrs and there is no remote
access. I also check the system time to ensure that it was not a time problem.
The only thing that I have found is that the WINS server was reporting
errors before the install, and it restarted the WINS service after the KB
install.
"Lanwench [MVP - Exchange]" wrote:
| Quote: | Gary wrote:
Whilst viewing the event logs on a SBS2000 server I came acroos
EventID 4377 (Windows 2000 hotfix KB870763 was installed).
Strange thing is that it was done at 22:00hrs, when the office was
closed & had been since 17:00hrs, & Automatic updates are turned off.
My question is how did this get installed without user input?
I don't see how it could have been. Are you 100% sure autoupdate is off? Who
else has access to this server (physically, or remotely)?
|
|
|
| Back to top |
|
|
Lanwench [MVP - Exchange]
Guest
|
| Posted:
Tue Jan 18, 2005 8:46 am Post subject:
Re: KB870763 automatic installation |
|
|
Gary wrote:
| Quote: | Hi Lanwrench
Autoupdate is turned off & has been for over a year, I install updates
manually. The office was definitley locked at 17:00hrs and there is
no remote access. I also check the system time to ensure that it was
not a time problem.
The only thing that I have found is that the WINS server was reporting
errors before the install, and it restarted the WINS service after
the KB install.
|
Hmmm. Well, I still don't see how this could have happened, barring a
gremlin infestation...do you/did you have security/login auditing cranked
up?
| Quote: |
"Lanwench [MVP - Exchange]" wrote:
Gary wrote:
Whilst viewing the event logs on a SBS2000 server I came acroos
EventID 4377 (Windows 2000 hotfix KB870763 was installed).
Strange thing is that it was done at 22:00hrs, when the office was
closed & had been since 17:00hrs, & Automatic updates are turned
off.
My question is how did this get installed without user input?
I don't see how it could have been. Are you 100% sure autoupdate is
off? Who else has access to this server (physically, or remotely)? |
|
|
| Back to top |
|
|
|
|
|
|
FAQ
Memberlist
Register
Profile
Log in to check your private messages
Log in