Microsoft has started to ship Windows Server 2003 Service Pack 1 (SP1), the first major update to the server software. The patch addresses core security issues by providing a reduced 'attack surface', better protected system services with stronger default settings, and reduced privileges. The release is also a milestone because it's the basis for variations of Windows Server 2003 and Windows XP that support 64-bit chips from Intel and AMD. The service pack should help address certain classes of exploits by treating the root cause of many security issues, not just the symptoms, according to Microsoft. New technologies include a security configuration wizard tool, which reduces the platform's attack surface by gathering information about specific server roles. It then automatically blocks all services and ports not needed to perform those roles. There's also an additional Windows firewall on the server that delivers network-wide control through group policies, and a post-setup security update feature blocks all inbound connections to the server until updates are activated on the computer. This prevents hacks between the time of installing updates and their activation. Other features include Internet Information Services 6.0 Metabase Auditing, which allows administrators to identify potential malicious users, and stronger defaults and privilege reductions on services to establish a minimum security threshold for applications. Microsoft claims you can enjoy a 50 per cent increase in performance and reliability by installing SP1.

Pros: Addresses performance, reliability and security issues
Cons: None noticeable


Release: Microsoft Corp. released to manufacturing Microsoft Windows Server 2003 Service Pack 1 (SP1). This unique service pack provides customers with significant security enhancements as well as reliability and performance improvements. Building on a comprehensive collection of security updates, Service Pack 1 addresses additional core security issues by providing customers with a reduced attack surface, better protected system services with stronger default settings, and reduced privileges.

'With Windows Server 2003 Service Pack 1, our development team took the time to treat the root cause of many security issues, not just the symptoms. This service pack is very significant and should help address certain classes of exploits,' said Bob Muglia, senior vice president of the Windows Server Division at Microsoft. 'Service Pack 1 is a major component of our overall strategy to help keep customers as secure as possible. I encourage all of our Windows Server 2003 customers to deploy Service Pack 1.'

'IDC research consistently finds that customers look forward to a first service pack after a product release to bolster the security of the Windows environment,' said Al Gillen, research director for system software at IDC. 'In the case of Windows Server 2003 SP1, Microsoft has brought forward not just the normal collection of updates, but several tools that promote more-secure network configuration and a streamlined way to administer the latest security releases.'

Windows Server 2003 Service Pack 1 provides new functionality to address known security vulnerabilities and prepares companies to better face future security threats. These new technologies include the following:

Security Configuration Wizard. Customers can more easily reduce attack surface area with the new Security Configuration Wizard. The tool reduces the attack surface by gathering information about specific server roles, then automatically blocking all services and ports not needed to perform those roles.

Windows Firewall. Customers can increase their security with the new Windows Firewall on the server, allowing networkwide control through Group Policy. Also released with Windows XP Service Pack 2, Windows Firewall serves as a host (software) firewall around each client and server computer on a customer's network.

Post-Setup Security Updates (PSSU). Servers are vulnerable during the time between their installation and application of the latest security updates. In response, Windows Server 2003 Service Pack 1 blocks all inbound connections to the server after installation until Windows Update has delivered the latest security updates to the new computer.

Other Service Pack 1 features that offer customers a more robust security defense include Internet Information Services (IIS) 6.0 Metabase Auditing, which allows administrators to identify potential malicious users should the store become corrupted, stronger defaults and privilege reduction on services to establish a minimum security threshold for applications, and the addition of Network Access Quarantine Control components to allow administrators to isolate out-of-date virtual private networking (VPN) assets.

'Windows Server 2003 Service Pack 1 has enabled us to take our network security to the next level, and installation was practically seamless,' said Jonathan Addington, network administrator at K2 Corp. 'With the latest security updates, we've once again reduced our system vulnerability to viruses, worms and hacker attacks, and added functionality that continues to reduce system management costs.'

Customers also can expect to see an increase in overall reliability and performance with the enhancements in Windows Server 2003 Service Pack 1. Microsoft internal testing shows customers can expect increased performance and reliability up to 50 percent, depending upon workload, after deploying Windows Server 2003 Service Pack 1.

In addition, Microsoft worked closely with its hardware and software partners to ensure the highest possible level of application and device compatibility for Service Pack 1. Microsoft tested a wide range of server applications including anti-virus, firewall, database, communication, business intelligence, Web development, financial and more. Microsoft also tested many Windows Server-based devices for compatibility with Service Pack 1.

From small businesses to large enterprises, Microsoft is committed to continually improving its customers' security. Customers will be able to obtain Windows Small Business Server 2003 SP1 within the next 60 days through the Microsoft Web site.

Windows Small Business Server 2003 SP1 will include the latest service packs and updates for Windows Small Business Server 2003 and its product components. Also included are built-in and customised integration capabilities to ensure customers will have a smooth installation experience. Service Pack 1 improves on the security, performance, collaboration and productivity benefits built into Windows Small Business Server 2003.

Microsoft customers can obtain Windows Server 2003 Service Pack 1 free via download from the Microsoft Download Center; or through Windows Update), OEM preinstallation, CD order, or the Volume Licensing and System Builder programs. As part of the worldwide rollout of Windows Server 2003 SP1 and Windows Small Business Server 2003 SP1, Microsoft will localise the software in 18 languages over the next two months. Also today, Windows Server 2003 x64 Editions and Windows XP Professional x64 Edition were released to manufacturing and will be available through various partners in late April.

BIOS, Mar 31, 05 | Print | Send | Comments (0) | Posted In Operating System