Microsoft Windows 2000

Microsoft Windows 2000 Service Pack 4
Installation and Deployment Guide (SPDeploy.htm)


About This Guide

Organization of This Guide

Terminology Used in This Guide

For More Information

About This Service Pack

Contents of the Service Pack 4 CD

Web Site Information for This Service Pack

Updates Included in This Service Pack

Service Pack Functionality

Planning Your Deployment

Choosing an Installation Type

Identifying Deployment Tools and Files

Determining Your Deployment Options

Checking Space Requirements

Testing the Deployment in Your Environment

Evaluating Application Compatibility Modes

Removing Visible Entry Points for Windows 2000 Components (Optional)

Removing Visible Entry Points During Unattended Setup

Removing Visible Entry Points During Sysprep

Installing Service Pack 4 for Windows 2000

The Standalone Installation

The Integrated Installation

Installing the Debugging Symbol Files for Service Pack 4

Removing the Service Pack

Removing a Service Pack Deployed by Using Group Policy

Automatic Updates for Windows 2000

Copyright

About This Guide

Back to Top

This guide provides instructions for administrators who want to install Service Pack 4 (SP4) for Microsoft® Windows® 2000 Professional, Windows 2000 Server, Windows 2000 Advanced Server, or Windows 2000 with Server Appliance Kit. The guide includes technical details, procedures, and recommendations for installing the service pack on multiple computers in a small business or a corporate environment.

This guide also provides information about the most common scenarios for installing the service pack either as a standalone installation or as an installation that is integrated with Windows 2000.

Note

If you want to install the service pack in combination with Windows 2000 hotfixes, see the Microsoft Windows 2000 Hotfix Installation and Deployment Guide.

If you are a Windows 2000 Datacenter Server customer, contact your OEM for information on how to deploy service packs on your computers.

This guide assumes that you have a working knowledge of Windows 2000 and service pack installations. Although this guide provides some basic operating system information, it is not a replacement for either the Windows 2000 documentation or formal training. Rather, it is intended to complement these sources of information.

You should use this guide in conjunction with the Microsoft Windows 2000 Professional Resource Kit and the Microsoft Windows 2000 Server Resource Kit. For more information about these technical resources, see For More Information later in this guide.

The Microsoft Windows 2000 Service Pack 4 Web site provides links from which you can install SP4. It also provides links to other documents and information about SP4, including a list of known issues, release notes for SP4, and updated versions of this guide. You can find this information under Learn More on the Windows 2000 Service Pack 4 Web site.

Organization of This Guide

This guide includes the following main sections:

Note

For details about the combination installation (installing hotfixes with Windows 2000, the service pack, or both), see the Microsoft Windows 2000 Hotfix Installation and Deployment Guide.

Terminology Used in This Guide

This table in this section provides definitions for a few specialized terms that are used in this guide. The terms are specific to service pack installations, Windows 2000, or both. It is important that you understand these terms before you proceed.

TermDefinition
systemrootThe "root" directory of the Windows installation on the computer’s hard disk. For example, on most computers, systemroot is C:\Winnt.
systemdriveThe drive where the operating system is installed. For example, on most computers, the systemdrive is C:\.
Integrated Describes the version of the service pack that comes bundled with the operating system (for example, Windows 2000), which results in a unified operating system that is marketed as such (for example, Windows 2000 with SP4). You can also create an integrated version of Windows 2000 operating system files with SP4.

For More Information

For additional information about Windows 2000 and SP4, see the following resources:

About This Service Pack

Back to Top

This service pack is a collection of updates to Windows 2000. SP4 is a recommended update because it includes fixes that can improve how some programs run with Windows 2000.

This section provides information about the following topics:

Contents of the Service Pack 4 CD

The SP4 CD includes the following:

The Service Pack 4 CD also contains the following documents and tools for advanced users and administrators:

Note

If you are a Windows 2000 Datacenter Server customer, contact your original equipment manufacturer (OEM) for updated support tools.

Web Site Information for This Service Pack

All files and programs included on the Service Pack 4 CD are also available on the Web. To view a list of fixes included in the service pack, see the Microsoft Windows 2000 Service Pack 4 Web site. The list includes the files affected by SP4, known issues, and general release notes for the service pack. You can find this information under Learn More on the Web site.

There are also two installation options available from the Web site: the Express installation and the Network installation. Both installations provide you with the same software. For administrators installing SP4 on multiple computers, the Network installation is the best option.

Updates Included in This Service Pack

To help you decide whether to update to SP4, Microsoft provides extensive documentation about the service pack. You will find the current list of fixes and general release note items (for example, space requirements for installing SP4) under Learn More on the Microsoft Windows 2000 Service Pack 4 Web site.

The service pack is a collection of updates for Windows 2000. These updates address the following areas of functionality:

Service Pack Functionality

This section describes the functionality included in SP4.

Note

Removing SP4 does not cause your computer to revert to 56-bit encryption. You can remove SP4 at any time, but your computer will retain support for 128-bit encryption unless you reformat the hard drive and reinstall Windows 2000 or Windows 2000 with SP1.

Command-Line Options for W2ksp4.exe and Update.exe

To deploy the service pack, you can run W2ksp4.exe, which extracts the installation files for SP4. Update.exe then runs automatically to install the service pack. You can define the way these steps are completed by using the options explained in this section.

The following table describes the command-line options that both the W2ksp4.exe and Update.exe programs support. You can include one or more options that you want to use when you type the command to extract files from W2ksp4.exe. The options are passed to Update.exe. They dictate the specifics of the installation process. The options do not affect the way the files are extracted, however.

All of the options listed in the following table use a forward slash (/), but you can use a hyphen (-) instead. The options work the same way with either symbol.

Command-line optionDescription
/UUses unattended Setup mode. If you use this option, only critical error prompts will appear during the installation process.
/QUses quiet mode, which is the same as unattended mode except that the user interface is hidden. If you use this option, no prompts will appear during the installation process.
/FForces other applications to close when the computer restarts after the installation.
/NDoes not back up files for removing the service pack.
/OOverwrites OEM files without prompting.
/ZDoes not restart the computer after the installation is completed.
/LLists installed hotfixes.
/S:foldernameCombines Windows 2000 with SP4 in a shared distribution folder for an integrated installation.
/D:foldername Backs up files into the specified folder.

Using command-line options

You can use these options to install the service pack as follows:

Command-Line Options Only for W2ksp4.exe

The following table identifies additional command-line options that only the W2ksp4.exe program supports.

Command-line optionDescription
/XExtracts service pack files without starting Update.exe.

You are prompted to provide the path for the folder to which you want to extract W2ksp4.exe.

/U /X:foldernameExtracts service pack files to the specified folder without starting Update.exe or prompting you.

Planning Your Deployment

Back to Top

To help ensure that your deployment of the service pack is successful, you should prepare for your deployment by first assessing the updates and enhancements contained in the service pack. You should then determine how those changes would affect your organization. After this assessment, complete these other important planning tasks:

The following sections describe these planning tasks. For a complete list of and detailed information about deployment planning tasks and strategies, see the Microsoft Windows 2000 Server Resource Kit Deployment Planning Guide. This guide is an important tool for designing, planning, and developing your deployment of Windows 2000 and its service packs. This guide can help you understand what is involved in planning your deployment at both a project-management level and a feature level. It provides planning information that can help you get started, such as how to create a deployment plan and how to run a pilot project. It also provides important technical information that can help you deploy Windows 2000.

Choosing an Installation Type

The service pack supports the following types of installation:

Standalone installation
The standalone installation is the one that is usually used to install service packs for Windows NT and Windows 2000. This involves installing only the service pack. If you have installed a Windows NT 4.0 service pack, you might already be familiar with the standalone installation.
Integrated installation
The integrated installation installs Windows 2000 and SP4 simultaneously.
Combination installation
A combination installs hotfixes along with the service pack, Windows 2000, or both. This involves using a combination of update and integrated installation processes. This type of installation is explained in the Microsoft Windows 2000 Hotfix Installation and Deployment Guide.

Identifying Deployment Tools and Files

After you determine which type of installation best suits your organization, review the corresponding scenario in the Installing Service Pack 4 for Windows 2000 section later in this guide to determine the deployment tools and files that your installation requires.

This section provides a brief overview of common deployment tools and files. For more detailed information about a specific deployment tool or file, see the Microsoft Windows 2000 Server Resource Kit Deployment Planning Guide.

Depending on the type of installation you choose, you might need one or more of the following deployment tools and files:

Determining Your Deployment Options

Before you deploy the service pack in your organization, you should consider the following installation types and the versions of Windows they support:

The following table shows which versions of Windows are and are not supported for each of these two types of installations.

Windows versionSupported for standalone installations of SP4 Supported for integrated installations of SP4
Microsoft Windows 95NoYes
Windows 98NoYes
Windows 98 Second EditionNoYes
Windows NT 3.51NoYes
Windows NT 4.0NoYes
Windows Millennium EditionNoNo
Windows 2000 ProfessionalYesNo
Windows 2000 ServerYesNo
Windows 2000 Advanced ServerYesNo
Windows 2000 with Server Appliance KitYesNo

Checking Space Requirements

Disk space requirements vary according to which version of Windows 2000 you are installing–Windows 2000 Professional, Windows 2000 Server, Windows 2000 Advanced Server, or Windows 2000 with Server Appliance Kit. For specific information about the space that is required to install SP4 on a particular version of Windows 2000, see article 813432, "Release Notes for Windows 2000 Service Pack 4," in the Microsoft Knowledge Base .

Testing the Deployment in Your Environment

Although Microsoft has a high degree of confidence in this service pack, it is not possible to test all possible hardware configurations and line-of-business (LOB) applications that might be present in all environments. We therefore recommend that you test the service pack in your environment before you deploy it to all of your users.

Testing the service pack in your environment can include, but is not limited to, the following procedure.

To test the service pack in your environment

  1. Identify computers to be used for testing. The test computers should be a representative cross-section of the computers in your environment on which you plan to install the service pack. The computers that you use for the test should be equipped with the software and hardware devices that are typically used in your organization.
  2. Install the service pack on each of the test computers just as you would install them in your actual computing environment.
  3. Make sure that you perform each of the following actions:
  4. Verify that the software and hardware on the test computers continue to function as expected for the various scenarios.
  5. Run System Stress for Windows NT 4.0 and Windows 2000 version 1.0 for up to two weeks. A System Stress CD is included with each CD subscription to the Microsoft Developer Network (MSDN).

    If you are installing Windows 2000 for the first time in your company or a particular division of your company, you might want to set up a pilot group to help test your deployment and verify that it works in your environment as expected.

For more information about planning for, testing, and deploying Windows 2000 in your environment, see the Windows 2000 Server Deployment and Planning Guide.

Evaluating Application Compatibility Modes

Compatibility modes provide an environment for applications that were designed to run on Windows 95, Windows 98, or Windows NT 4.0 Service Pack 5. These modes resolve several of the most common issues that prevent older applications from working correctly on Windows 2000. Applications that exhibit problems after the computers on which they are running are upgraded from Windows 95 or Windows NT 4.0 to Windows 2000 might function better if they are started in an application compatibility environment.

Windows 2000 uses compatibility modes to ensure compatibility with many popular applications. However, advanced users can also use this technology to provide solutions for their own applications. For more information on compatibility modes and how to use them, see article 279792, "HOW TO: Enable Application Compatibility-Mode Technology in Windows 2000 SP2 and SP3," in the Microsoft Knowledge Base. Although this article was written for SP2 and SP3, it applies to SP4 as well.

Removing Visible Entry Points for Windows 2000 Components (Optional)

Back to Top

This section explains how to remove visible entry points (such as shortcuts and menu entries) for Internet Explorer, Outlook® Express, or Windows Media® Player, either during unattended Setup for Windows 2000 (using Winnt.exe or Winnt32.exe), or while running Sysprep for Windows 2000.

The two procedures in this section do not remove any actual Windows code; they remove only the visible entry points for the individual components that you specify.

Removing Visible Entry Points During Unattended Setup

Each entry listed in the [Components] section in the Unattend.txt file uses the same two values: On or Off.

OnInstalls the item.
OffDoes not install the item.

To remove visible entry points for Internet Explorer, Outlook Express, or Windows Media Player from Windows 2000 during unattended Setup, perform the following procedure.

To remove visible entry points for Internet Explorer, Outlook Express, or Windows Media Player

  1. Use Setup Manager to create an Unattend.txt file, or modify an existing Unattend.txt file.
  2. To remove Internet Explorer visible entry points, in the [Components] section of the Unattend.txt file, set IEAccess equal to Off.
  3. To remove Outlook Express visible entry points, in the [Components] section of the Unattend.txt file, set OEAccess equal to Off.
  4. To remove Windows Media Player visible entry points, in the [Components] section of the Unattend.txt file, set WMPOCM equal to Off.
  5. Run an unattended Setup by following the instructions in the Help file Deptool.chm, which is in the file Deploy.cab located in the \Support\Tools\ folder on the Service Pack 4 CD.

Sample

The following sample code shows how to modify the [Components] section of the Unattend.txt file to remove visible entry points:

[Components]
IEAccess = Off
OEAccess = Off
WMPOCM = Off

Removing Visible Entry Points During Sysprep

To remove visible entry points for Internet Explorer, Outlook Express, or Windows Media Player from Windows 2000 after you have already installed the operating system, perform the following procedure.

To remove visible entry points for Internet Explorer, Outlook Express, or Windows Media Player

  1. Create an Unattend.txt file with one or more of the following entries in the [Components] section:
    [Components]
    IEAccess = Off
    OEAccess = Off
    WMPOCM = Off

    You can use the same Unattend.txt file described in the preceding section Removing Visible Entry Points During Unattended Setup, or you can use a separate file that contains only the [Components] section.

  2. Add the following command line to the [GuiRunOnce] section of Sysprep.inf:
    [GuiRunOnce]
    sysocmgr /I:%windir%\inf\sysoc.inf /U:%systemdrive%\sysprep\unattend.txt /X /Q /R /C 
  3. Run Sysprep following the instructions in the Help file Deptool.chm, which is in the file Deploy.cab located in the \Support\Tools\ folder on the Service Pack 4 CD.

Installing Service Pack 4 for
Windows 2000

Back to Top

The following sections provide instructions for installing SP4. You can either update computers that are already running Windows 2000 by performing a standalone installation of SP4, or you can install Windows 2000 and the service pack together by performing an integrated installation.

For either type of installation, administrative logon credentials are required. To install the service pack locally or over a network, you must be logged on as a member of the Administrators group on that computer.

The Standalone Installation

During a standalone installation, the service pack is installed on a computer that is already running Windows 2000. When you run the Update.exe program, it automatically installs the updated system files and makes the necessary registry changes. After the computer is restarted, the installation is complete, and Windows 2000 runs with an updated file set.

This section describes the how to complete a standalone installation for each of the following scenarios:

Important

If it becomes necessary to replace a system file because it has become corrupted or for some other reason, you must have the service pack source files in order to do so.

This service pack supports several types of distribution media, including CD-ROMs, shared folders on networks, and Web downloads. Because this guide is intended for corporate audiences, the standalone installation scenarios described in this guide focus on the use of shared distribution folders on networks, which is the most common distribution medium for this audience.

Your particular installation requirements will determine which of the standalone installation scenarios presented in this section you should use.

Scenario 1: Installing the service pack so that computers use local service pack source files (recommended)

When you use this method, you set up a shared distribution folder on a network so that users can update their computers from a central point and store their system backup files locally.

You can do this by starting the W2ksp4.exe program and specifying the options you want. You can also create logon scripts for users, which will ensure that they can update their computers to SP4 when they next use their computers.

Note

In the following procedure, Drive represents the drive letter of the network or computer where your distribution folder is located.

To install the service pack

  1. Connect to the network or computer on which you want to create the distribution folder.
  2. In the shared folder on the network, create a distribution folder for the service pack.

    For example, to create a distribution folder named SP4, type the following at the command prompt:

    mkdir Drive:\W2KSP4

  3. Copy W2ksp4.exe from the SP4 CD, or download it from the Microsoft Windows 2000 Service Pack 4 Web site.
  4. Copy the W2ksp4.exe file into the distribution folder.
  5. To verify that you have assigned appropriate Read and Access permissions to users who are installing the service pack, do the following:
    1. Navigate to the folder, right-click it, and then click Properties.
    2. Click the Sharing tab, and then click Share This Folder.
    3. In Share Name, type a name for the folder.
    4. Click Permissions, and then assign permissions that allow users to install the service pack from this folder.
    5. If you are using an NTFS file system partition, click the Security tab, confirm that the permissions listed there do not conflict with those on the Sharing tab, and then click OK.
    6. Before you begin the installation, stop any real-time virus checkers that are running on the computers on which you will be installing the service pack.

      This is important because if real-time virus checkers are running, they can cause problems with the installation.

  6. To install the service pack from the distribution folder (in this example, named SP4), use the following command:

    \\servername\W2KSP4\W2ksp4.exe

    You can include command-line options as needed. For example, if you want to install hotfixes immediately after installing SP4, and therefore do not want your computer to restart automatically after SP4 is installed, specify the /Z option in the installation command.

  7. Follow the instructions in the Setup Wizard. For more information, see ReadMeSP.
  8. After the installation is complete, do one of the following:
  9. After you restart the computer, restart the virus checkers.

    Important

    SP4 will not be fully operational until you restart your computer.

Scenario 2: Installing the service pack so that computers use shared, remote, service pack source files

This scenario explains how to prepare a shared distribution folder on a network and then install the service pack from that folder. Doing this enables you to store service pack source files in the shared distribution folder rather than on local computers.

Important

Because the service pack source files are kept remotely on the network, this method is suitable only for computers that are permanently connected to the network; this method is not suitable for updating laptop computers.

You must use a shared distribution folder that was created specifically for SP4. Do not reuse a folder that was set up for a previous service pack. Shared distribution folders for service pack source files must be permanent to ensure that all of the files that a computer might need to replace are available.

It can be useful to use command-line options to extract the files from W2ksp4.exe if you want to use the distribution folder to contain the service pack source files. This saves disk space on local computers because the installation points to the distribution folder for ServicePackFiles rather than creating this folder locally. The ServicePackFiles folder is needed whenever Windows 2000 requires a service pack file, such as when Windows File Protection must restore a file that has been corrupted or tampered with, or when an optional component is configured.

For more information about moving the shared distribution folder, see article 271484, "Files and Folders Are Added to Your System After Service Pack Is Installed," in the Microsoft Knowledge Base.

Installing the service pack on a server cluster

If you are installing the service pack on a server cluster, you must first pause the node and move all groups running on it to another node. For complete instructions, see article 174799, "How to Install Service Packs in a Cluster," in the Microsoft Knowledge Base before you install the service pack. If Microsoft SQL ServerTM is installed on the server cluster, see article 239473, "FIX:70rebind.exe for Windows 2000 and MDAC Upgrades on Clustered SQL Server 7.0 Servers," in the Microsoft Knowledge Base.

For information about Kerberos support in SP4, see article 235529, "Kerberos Support on Windows 2000-Based Server Clusters," in the Microsoft Knowledge Base. This article was written for SP3, but it also applies to SP4.

Note

In the following procedure, Drive represents the drive letter of the network or computer where your distribution folder is located.

To install the service pack

  1. Connect to the network or computer on which you want to create the distribution folder.
  2. In the shared folder on the network, create a distribution folder for the service pack.

    For example, to create a distribution folder named W2KSP4, type the following at the command prompt:

    mkdir Drive:\W2KSP4

  3. Copy W2ksp4.exe from the SP4 CD, or download it from the Microsoft Windows 2000 Service Pack 4 Web site.
  4. To extract files to the shared distribution folder, type the following at the command prompt:

    Drive:\w2ksp4.exe /x:Drive:\W2KSP4

  5. After you have extracted the service pack files, verify that you have assigned appropriate permissions by doing the following.
    1. Navigate to the folder, right-click it, and then click Properties.
    2. Click the Sharing tab, and then click Share This Folder.
    3. In Share Name, type a name for the folder.
    4. Click Permissions, and assign permissions that allow users to install their hotfixes from this folder.
    5. If you are using an NTFS file system partition, click the Security tab, confirm that the permissions listed there do not conflict with those on the Sharing tab, and then click OK.
    6. Before you begin the installation, stop any real-time virus checkers that are running on the computer on which you will be installing the service pack.

      This is important because if real-time virus checkers are running, they can cause problems with the installation.

  6. To install the service pack from the shared distribution folder, run the service pack update.

    For example, to install the service pack from a distribution folder named SP4, you would use the following command:

  7. \\servername\W2KSP4\i386\update\update.exe

  8. After the installation is complete, do one of the following:
  9. After you restart the computer, restart the virus checkers.
  10. Important

    SP4 will not be fully operational until you restart your computer.

Scenario 3: Installing the service pack by using SMS

This scenario explains how to install the service pack from a shared distribution folder on a network by using Microsoft Systems Management Server (SMS). This installation method installs the service pack on SMS client computers that are already running Windows 2000.

Important

To perform this type of installation, you must have SMS 2.0 with Service Pack 2, Service Pack 3, or Service Pack 4 installed on your computer.

To install the service pack by using SMS

  1. Create the SMS package by importing the package definition file for the service pack. In the package, provide the path to the service pack source files.
  2. Distribute the SMS package to the distribution points.
  3. Create the advertisement to notify SMS clients about the service pack.
  4. In/OL>

    This scenario assumes that you have an understanding of SMS as well as a working knowledge of software distribution. In addition, this section assumes that your SMS infrastructure is in place, or that you will put an SMS infrastructure in place before you deploy the service pack. For more information about SMS, see the Systems Management Server 2.0 Administrator’s Guide. For specific information about software distribution, see Chapter 12, "Distributing Software," in that guide.

    For information about using SMS securely, see the security documentation on the Microsoft Systems Management Server Web site, including the white paper, "SMS Security Essentials," on the Microsoft Web site.

    A sample package definition file for Windows 2000 SP4 (W2ksp4.sms) is provided in the \Support\Tools folder on the Service Pack 4 CD.

    Creating the SMS Package

    The first step in distributing software through SMS is to create the SMS package, which contains the files and instructions that direct the software distribution process. When you create the SMS package, you set up the location of the package source files (where SMS obtains the files) and the package definition file (.sms or .pdf) for distributing the service pack.

    A package definition file is a specially formatted file that contains all of the information necessary to create the SMS package. If you import this file, SMS immediately creates the package. After you create the package, you can modify it in the same way that you would modify any other SMS package.

    Each predefined SMS package also contains SMS programs, which are command lines that run on each targeted computer to control the execution of the package. You can choose the command-line options you want to use to install the package. For example, the package definition for the service pack includes programs you can use to install the service pack with or without user input.

    To create the SMS package

    To create a package on a site

    1. Open the SMS Administrator console. To do so, click Start, click Programs, click System Management Server, and then click SMS Administrator Console.
    2. In the console tree, click Site Database, and then click Packages.
    3. On the Action menu, point to New, and then click Package From Definition.

      The Create Package From Definition Wizard appears.

    4. On the Welcome page, click Next.
    5. To import the package definition file for the service pack, on the Package Definition page, click Browse, and then navigate to the package definition file (\Support\Tools\W2ksp4.sms on the service pack CD).
    6. To display the package definition file in the Publisher box, click Open.
    7. In the Package Definition list, click the package definition file, and then click Next.
    8. On the Source Files page, click Always obtain files from a source directory, and then click Next.
    9. On the Source directory page, in the Source Directory box, enter the path to the package source files (for example, \\servername\sharename\W2KSP4\i386). This path is the same one that you provided in the procedure, "To create the SMS package," except that, in this case, you must also include the i386 folder in your path.
    10. Click Next, and then click Finish.
    11. After the wizard is finished, in the SMS Administrator console, click Action, and then click Refresh.
    12. In the SMS Administrator console, in the console tree, click Packages, click the package you created, and then, under your new package, click Programs.
    13. In the details pane, under Name, double-click the service pack program you want to use. This displays the Program Properties dialog box.
    14. In Program Properties, on the General tab, verify that the predefined path and command line match what you want to do. If they do not, you can change them. For example, you can modify the command line by adding or removing options. For more information, see Command-Line Options for W2ksp4.exe and Update.exe.

      To check and modify the options that control the execution of your program, click the Requirements, Environment, and Advanced tabs, and then click OK to finish.

      Note

      For more information about the options that are available on the Requirements, Environment, and Advanced tabs, see the Systems Management Server 2.0 Administrator’s Guide.

    Distributing the SMS Package to the Distribution Points

    After you create the SMS package for the service pack, you can distribute the package to your distribution points. Distribution points are shared network folders from which SMS copies the package source files so that client computers can access these files.

    Important

    Distribution points must have sufficient disk space for the SMS package. For instructions on how to use the SMS Administrator console to determine the amount of disk space available on distribution points, see the Systems Management Server 2.0 Administrator’s Guide.

    To distribute the SMS package to the distribution points

    1. Open the SMS Administrator console.
    2. In the console tree, click Packages, click the SMS package that you created for the service pack, and then click Distribution Points.
    3. On the Action menu, point to New, and then click Distribution Points.

      The New Distribution Points Wizard appears.

    4. Click Next, and then, on the Copy Package page, select the distribution points that you want to use.
    5. Note

      All of the distribution points for all sites are listed, so you can specify all of the distribution points now. Specify a distribution point for every site that has clients on which you want to install SP4.

    6. Click Finish to start the distribution. The package is immediately distributed to the selected distribution points.

    Creating the Advertisement

    After you distribute the SMS package to the distribution points, you can create the advertisement that offers the package to the SMS clients.

    To create the advertisement

    1. Create a collection of SMS clients to receive SP4. You can base the collection membership rules either on a query or on direct membership rules.
    2. In the console tree, under Collections, right-click the collection of clients that will receive the program, click All Tasks, and then click Distribute Software.

      The Distribute Software Wizard appears.

    3. Click Next.
    4. On the Package page, click Distribute an existing package.
    5. In the Packages list, click to select the SMS package for the service pack, and then click Next.
    6. On the Distribution Points page, verify that the distribution points that you want to use are selected, and then click Next.
    7. On the Advertise a Program page, click Yes to advertise a program to a collection.
    8. In the Programs list, click the program that you want to advertise, and then click Next.
    9. On the Advertisement Target page, confirm that the collection of clients that you selected in step 2 appears in the Collections box, and then click Next. If this collection is not listed, click Browse to find the collection you want.
    10. On the Advertisement Name page, if appropriate, type the advertisement name in the Name box, and then click Next.
    11. On the Advertise to Subcollections page, specify any subcollections that should also receive this advertisement, and then click Next.
    12. On the Advertisement page, confirm or change the time at which the advertisement is to be offered, and specify whether and when the advertisement should expire.
    13. On the Assign Program page, to make the advertisement mandatory and force the installation of the advertised package, click Yes. Assign the program. You must specify a date and time for the program to run if you want the update to be mandatory.
    14. Click Next, and then click Finish.

    SMS clients refresh the list of advertised programs on a configurable polling interval. The default interval is one hour.

    After a client receives the service pack advertisement, if the advertisement is not assigned (not mandatory), it appears for selection by users in the Advertised Programs Wizard in Control Panel. If the advertisement is assigned, (mandatory) it runs on the specified schedule.

    In the console tree, under Site Database, click Advertisements to see the advertisement you created. Click the advertisement you created if you want to make changes to any of the settings.

    Note

    For more information about creating a collection, see the Systems Management Server 2.0 Administrator’s Guide.

    Scenario 4: Installing the service pack by using Windows Installer and Group Policy

    This scenario explains how to install the service pack from a shared distribution folder on a network by using Windows Installer. This installation method installs the service pack on computers that are already running Windows 2000.

    Note

    If you plan to deploy the service pack by using the Group Policy snap-in, you should follow the instructions given in article 302430, "HOW TO: Assign Software to a Specific Group By Using a Group Policy," in the Microsoft Knowledge Base.

    This section assumes that you have a basic understanding of Windows Installer, as well as a working knowledge of Group Policy and the Microsoft Active Directory® directory service. For more information about Windows Installer, Group Policy, or Active Directory, see the Microsoft Windows 2000 Server Resource Kit (deploy.chm), which is included in the file Support.cab file in the \Support\Tools folder on the service pack CD.

    Using Windows Installer

    The Windows Installer package file (Update.msi) contains all of the information that Windows Installer requires to install or remove the service pack and to run Setup. This package file describes the relationships among service pack components and resources. The package file also contains an installation database, a summary information stream, and data streams for various parts of the service pack installation.

    You can use the Software Installation and Maintenance feature in Windows 2000, which uses Windows Installer and the Update.msi file to deploy SP4 to the computers that are running Windows 2000 in your organization. The Software Installation and Maintenance feature uses a Group Policy object (GPO) to deploy the package (on networked computers) within Active Directory containers, such as sites, domains, and organizational units that are associated with the GPO.

    After you assign the package, Windows Installer installs the service pack automatically when users start their computers. Users do not choose to install the service pack. Only a network administrator or someone who is logged on to a local computer as a member of the Administrators group on that computer can remove the assigned software.

    Important

    We recommend that you use W2Ksp4.exe when deploying SP4 from the command prompt. If you use Update.msi to distribute service packs, you must use only a computer-based (machine-assigned) GPO. The use of user-based Group Policy deployments with Update.msi is not supported. For more information, see article 278503, "Best Practices for Using Update.msi to deploy Service Packs," in the Microsoft Knowledge Base.

    Note

    After you install a Windows 2000 service pack by using the Update.msi file, the service pack entry in Add/Remove Programs in Control Panel has a trailing 4-digit number in brackets (the language code). For more information, see article 305134, "4-Digit Number Is Listed After the Windows Service Pack Entry in the Add Remove Programs Tool," in the Microsoft Knowledge Base.

    Service Pack Installations That Are Not Completed

    If the service pack installation is not completed because of a power outage, a shutdown by a user, or for some other reason, you must reinstall the GPO on the computers involved. To determine whether the service pack installation completed successfully, run Winver.exe. You can then view details about the Windows version and any service packs that are running on your computer. If the service pack has not deployed, open the Group Policy snap-in, and then open the Group Policy object (GPO). Click the package, click Action, click All Tasks, and then click Redeploy Applications.

    Removing Previously Installed Service Packs

    We do not recommend removing earlier service packs from your computer before you install a new one. However, if you want to prevent the automatic installation of an earlier service pack on computers added to your organizational unit (for example, to prevent computers from being updated to SP3 because SP4 is now available), you can do so by performing the following procedure, "To remove earlier service packs."

    For information about removing service packs that were deployed by using Group Policy, see Removing a Service Pack Deployed by Using Group Policy later in this guide.

    To remove an earlier service pack

    1. In the console tree, double-click Active Directory Users and Computers, double-click the name of the domain where the organizational unit that is receiving the service pack resides, and then double-click the applicable organizational unit name.
    2. Right-click the Active Directory object to which the MSI package is applied, and then click Properties.
    3. Double-click the GPO that you want to edit (for example, Desktop SP3 Update).
    4. In the Group Policy snap-in, under Computer Configuration, double-click Software Settings.
    5. Right-click the software package that you want to stop installing on computers newly added to your organizational unit, for example, Windows 2000 Service Pack 3 (1033).
    6. Click All Tasks, and then click Remove.
    7. Click Allow users to continue to use the software, but prevent new installations, and then click OK.

    Assigning Service Pack 4 to Computers

    This procedure explains how to assign the service pack to computers managed by a GPO. For your installation, you might want to associate the GPO with a different Active Directory container. To use Group Policy to assign the service pack to computers, you must do the following:

    1. Create a shared network distribution folder.
    2. Create a Group Policy for SP4 deployments.
    3. Apply the policy to assign the service pack to the computers.

    Each of these procedures is explained in detail in the remainder of this section.

    Important

    If you have used Add/Remove Programs to remove a service pack that was deployed by using the Update.msi program, you cannot automatically deploy it again by using Group Policy. For more information, see Removing a Service Pack Deployed by Using Group Policy later in this guide.

    Note

    For the following procedure, Drive represents the drive letter of the network or computer where your distribution folder is located.

    To create a shared network distribution folder

    1. Connect to the network or computer on which you want to create the distribution folder.
    2. In the shared folder on the network, create a distribution folder for the service pack.

      For example, to create a distribution folder named SP4, type the following:

      mkdir Drive:\W2KSP4

      You must set the appropriate permissions to share your distribution folder so that users have only Read and Execute permissions, and members of the Administrators group have full-control access to the folder.

    3. Copy the service pack files and folders to the source files folder that you created in step 2.
      1. At the command prompt, type:

        Drive:\SP4\W2ksp4.exe /X

        and then press ENTER.
      2. When prompted, provide the path for the folder (for example, the source files folder) to which you want to extract W2ksp4.exe.

    To create a Group Policy for SP4 deployments

    1. For an SP4 deployment, you can either create a GPO or use an existing GPO. In Microsoft Management Console (MMC), open the Active Directory Users and Computers snap-in.

      The Active Directory Users and Computers snap-in includes tools for Group Policy and software installation and maintenance. You can use this snap-in to assign the service pack to computers in an organizational unit. For more information, see the Microsoft Windows 2000 Server Resource Kit or the Microsoft Windows 2000 Professional Resource Kit.

    2. In the console tree, double-click Active Directory Users and Computers, double-click the name of the domain where the organizational unit that is receiving the service pack resides, and then double-click the name of the applicable organizational unit.
    3. Right-click the Active Directory object to which the MSI package will be applied, and then click Properties.
    4. On the Group Policy tab, click New, type Desktop SP4 Update, and then press ENTER.

    To apply the Group Policy and deploy the service pack to the client computers

    1. Open the Active Directory Users and Computers snap-in.
    2. In the console tree, right-click the domain or organizational unit for which you want to set Group Policy.
    3. Click Properties, and then click the Group Policy tab.
    4. Click Edit to open the Group Policy object you want to edit.
    5. In the Group Policy snap-in, under Computer Configuration, double-click Software Settings.
    6. Right-click Software installation, click New, and then click Package.
    7. Browse to the shared folder where your service pack distribution folder is located.
    8. Right-click the i386\Update folder, click Open, right-click Update (.msi file), and then click Open.
    9. In the Deploy Software dialog box, verify that the Assigned option is selected, and then click OK.

    The Integrated Installation

    You can apply the service pack directly to the Windows 2000 installation files and complete an integrated installation by using a shared distribution folder on a network. You can also create a CD to complete the installation after you have integrated the files.

    Because the integrated installation replaces individual files, the space requirements for this installation type are almost identical to the space requirements for Windows 2000. For information on these requirements, see article 813432, "Release Notes for Windows 2000 Service Pack 4, " in the Microsoft Knowledge Base.

    Scenario 1 in this section explains how to use Update.exe to create an integrated installation. It also explains how to run Windows 2000 Setup (Winnt32.exe) to install Windows 2000 with the service pack already applied.

    Because this guide is intended for corporate audiences, the integrated scenario described in this guide focuses on the use of shared distribution folders on networks, which is the most common distribution medium for this audience.

    Important

    You cannot remove a service pack that you installed as part of an integrated installation.

    This section describes the installation steps for the following integrated installation scenarios:

    Depending on your installation requirements, you can choose from these two integrated installation scenarios, which are described in detail in the following sections.

    Scenario 1: Installing Windows 2000 integrated with the service pack

    This scenario explains how to create an integrated installation of Windows 2000 and the service pack in a shared distribution folder on a network. The integrated process installs the service pack during Windows 2000 Setup. To complete this procedure, you must use a computer that is running Windows 2000.

    To use the Setup Manager Wizard (Setupmgr.exe) to install Windows 2000 integrated with SP4, you must first have an integrated Windows 2000 with Service Pack 4 CD, or you must create a shared distribution folder on the network, as explained in the following procedure.

    Important

    Do not create an installation of Windows 2000 integrated with a service pack in a shared distribution folder if users are still using a previously installed integrated version in the same shared folder.

    Note

    In the following procedure, Drive represents the drive letter of the network or computer where your distribution folder is located.

    To create an integrated installation of Windows 2000 and the service pack

    1. Connect to the network or computer on which you want to create the distribution folder.
    2. In the shared folder on the network, create a distribution folder for the Windows 2000 installation files.

      For example, to create a distribution folder named W2000\i386, type the following:

      mkdir Drive:\W2000\i386

      Ensure that only the system administrator has full access to this folder. Other users should have only Read and Execute permissions.

    3. Insert your Windows 2000 product CD into the CD-ROM drive, and then copy the contents of the CD to the distribution folder that you created in step 2.

      For example, to copy the installation files and folders from the Windows 2000 product CD in the CD-ROM drive (D:) to the distribution folder named W2000\i386, you would type the following:

      xcopy /E D:\i386 Drive:\W2000\i386

    4. Remove the Windows 2000 product CD from the CD-ROM drive, and then insert the service pack CD.
    5. To apply the service pack source files to the Windows 2000 Installation files located in the folder named W2000\i386, type the following:

      w2ksp4.exe /S:Drive:\W2000

      For a list of command-line options, see Command-Line Options for W2ksp4.exe and Update.exe earlier in this guide.

    6. Customize Windows 2000 Setup as necessary.

      For more information about how to do this, you can view Help by entering the following the command from the deployment folder:

      \i386\winnt32.exe /?

      For more detailed information, see the Winnt32.exe command syntax topic in the Microsoft Windows 2000 Professional Resource Kit.

    You can now deploy Windows 2000 to your users’ computers from the shared distribution folder in either attended or unattended Setup mode. Alternatively, you can write the files from the distribution folder to a CD. During the standard installation process, Windows 2000 Setup (Winnt.exe or Winnt32.exe) installs the updated operating system with the service pack already applied.

    Important

    When you run the Update.exe program as described earlier for an integrated installation, a Svcpack.log file is created automatically in systemroot on the computer that is running the Update.exe program. If you plan to update more than one version of Windows 2000 on this computer, rename the Svcpack.log file after you update each version. This ensures that you do not overwrite the current log file when you update additional versions of Windows 2000.

    Scenario 2: Using RIS to install Windows 2000 integrated with the service pack

    This scenario explains how to use Remote Installation Services (RIS) to install Windows 2000 integrated with the service pack. This section does not provide details on how to set up RIS, however. Rather, it focuses on adding a new image (Windows 2000 integrated with service pack) to an existing RIS server. For more information about RIS, see the "Step-by-Step Guide to Remote OS Installation” on the Microsoft Web site.

    Types of RIS Images

    Remote OS Installation supports two types of operating system images: CD-based images and Remote Installation Preparation (RIPrep) images. The CD-based option is similar to setting up a client operating system directly from the Windows 2000 product CD, but in this case, the source files reside on a RIS server. You can use a RIPrep image to configure a client computer (with Remote OS Installation and any preinstalled programs and tools) exactly how you want it, and then copy that image for installation on client computers that are connected to the network. To store a RIPrep–based image on a server, at least one CD-based image must also be stored on the same RIS server.

    Adding a Service Pack 4 Integrated CD-Based Image to a RIS Server

    After you install RIS on a server, perform the following steps to add an image of Windows 2000 integrated with the service pack to that server.

    To copy Windows 2000 integrated with SP4 to a RIS server

    1. Create an integrated installation of Windows 2000 with SP4. For more information, see Scenario 1: Installing Windows 2000 integrated with the service pack earlier in this guide.
    2. On the RIS server, click Start, point to Programs, point to Administrative Tools, and then click Active Directory Users and Computers.
    3. In the console tree, click the container in which the RIS server resides.
    4. In the details pane, right-click the name of the RIS server, click Properties, click the Remote Install tab, and then click Advanced Settings.
    5. To add a new CD-based image of Windows 2000 with SP4, on the Images tab, click Add.
    6. When prompted for the image source, specify the shared folder that contains the integrated installation that you created in step 1.

    Updating Existing RIPrep Images to Service Pack 4

    To perform this procedure, you must have a CD-based image of Windows 2000 Professional or Windows 2000 Server with SP4 on your RIS server. (See the preceding section, "Adding a Service Pack 4 Integrated CD-Based Image to a RIS Server.")

    To update existing RIPrep images

    1. Use RIS to install each RIPrep image on your computer.
    2. Use the Update.exe program to install SP4 on this same computer.
    3. Run RIPrep to copy the image back to the RIS server. For instructions on how to run RIPrep, see the "Step-by-Step Guide to Remote OS Installation" on the Microsoft Web site.

    Note

    You cannot use the /S option with Update.exe to integrate SP4 directly into an existing CD-based image or RIPrep image.

    Installing the Debugging Symbol Files for Service Pack 4

    Back to Top

    The debugging symbol files are recommended for system administrators and other advanced users who diagnose Windows 2000 system problems.

    To use the SP4 debugging symbols successfully, you must have the Windows 2000 symbols installed on your computer before you install the SP4 symbols. If you do not already have these symbol files, you can download them from the "How To Get Symbols” page on the Microsoft Debugging Tools Web site.

    To install the debugging symbol files for SP4, double-click the following file:

    \support\debug\symbols\i386\symbols_sp.exe

    During the installation, the SP4 debugging symbol files overwrite any existing files in the symbol installation folder.

    You can also download symbols from the "How To Get Symbols" page on the Microsoft Debugging Tools Web site. This page also contains information about the Microsoft Symbol Server, from which you can download symbols on demand during a debugging session. For more information, and to obtain the most current version of the debugging tools for Windows, see the Microsoft Debugging Tools Web site.

    Note

    It is not necessary for you to install the debugging symbols for your computer to operate properly.

    Removing the Service Pack

    Back to Top

    This section provides information about how to remove the service pack from your computer. If you want to remove the service pack, you can restore your computer to its previous state.

    Important

    If you want to remove a service pack that was installed through an integrated installation, you must first reformat the hard drive. You can then perform a clean installation of Windows 2000 that is not integrated with SP4. If you want to revert to Windows 2000 with SP3, after you reformat your hard drive, you can perform an integrated installation of Windows 2000 with SP3.

    When you run the Update.exe program to install the service pack, a subfolder named $ntservicepackuninstall$ is created in your systemroot folder.

    If you installed the service pack using a scenario from The Standalone Installation section, you can remove it by using either the command prompt or Add/Remove Programs in Control Panel.

    Important

    If you install any applications or services that require the service pack, removing the service pack can adversely affect those programs.

    If you turned off the automatic backup option for Update.exe, you cannot remove the service pack unless you reformat the hard drive and perform a clean installation of Windows 2000.

    If you install Internet Explorer after you install the service pack, the service pack will not appear in Add/Remove Programs. If you want to be able to use Add/Remove Programs to remove the service pack, you must install Internet Explorer before you install the service pack.

    To remove the service pack by using Add/Remove Programs

    1. If you installed any applications after the service pack was installed, you must remove these applications first, in the order in which they were installed.
    2. Click Start, point to Settings, and then click Control Panel.
    3. Double-click Add/Remove Programs, click Windows 2000 Service Pack 4, and then click Change/Remove.
    4. Follow the instructions that appear on your screen.

    Important

    If you choose to remove SP4, a dialog box appears that lists the applications you have installed since you updated your computer to SP4. If you continue to remove SP4, these applications might not work correctly.

    To remove the service pack by using the command prompt

    1. Open the command-prompt window.
    2. Switch to the %systemroot%\$NtServicePackUninstall$\spuninst\ folder.
    3. Type Spuninst.exe, and then press ENTER.
    4. Follow the instructions that appear on your screen.

    Removing a Service Pack Deployed by Using Group Policy

    When you use Add/Remove Programs to remove a service pack that was deployed by using the Update.msi program, you cannot automatically deploy it again by using the Group Policy snap-in. Only the network administrator or a user who is logged on as a member of the Administrators group on the local computer is authorized to remove a service pack.

    Update.msi is designed this way because a network administrator is likely to remove a service pack for good reason and probably does not want users who are connected to the network to have the service pack automatically reinstalled the next time they start their computers. After an administrator uses Update.msi to remove the service pack, the only way to reinstall it on the computers involved is to either deploy a newer version of it, or manually reinstall the recently removed service pack, either from the service pack CD or from a shared network folder.

    For more information, see article 315141, "'Nothing to Do' Error Message When You Try to Remove Service Pack from Add/Remove Programs," in the Microsoft Knowledge Base.

    Automatic Updates for Windows 2000

    Back to Top

    If you have SP3 or SP4 installed, you can automatically receive critical Windows 2000 fixes as soon as they become available. For information about using this option, see the Microsoft Windows 2000 Service Pack 3 Installation and Deployment Guide under Learn More on the Windows 2000 Service Pack 3 Web site.

    Copyright

    Back to Top

    Information in this document, including URL and other Internet Web site references, is subject to change without notice. Unless otherwise noted, the example companies, organizations, products, domain names, e-mail addresses, logos, people, places and events depicted herein are fictitious, and no association with any real company, organization, product, domain name, e-mail address, logo, person, place or event is intended or should be inferred. Complying with all applicable copyright laws is the responsibility of the user. Without limiting the rights under copyright, no part of this document may be reproduced, stored in or introduced into a retrieval system, or transmitted in any form or by any means (electronic, mechanical, photocopying, recording, or otherwise), or for any purpose, without the express written permission of Microsoft Corporation.

    Microsoft may have patents, patent applications, trademarks, copyrights, or other intellectual property rights covering subject matter in this document. Except as expressly provided in any written license agreement from Microsoft, the furnishing of this document does not give you any license to these patents, trademarks, copyrights, or other intellectual property.

    © 2003 Microsoft Corporation. All rights reserved.

    Microsoft, Windows, Windows NT, Outlook, Windows Media, and Active Directory are either registered trademarks or trademarks of Microsoft Corporation in the United States and/or other countries.

    This product contains graphics filter software; this software is based in part on the work of the Independent JPEG Group.

    The names of actual companies and products mentioned herein may be the trademarks of their respective owners.