SP2: Networking (1 of 3)

1) 967800. Hotfix. An SNMP transport is disabled, and SNMP Event ID 1501 is logged when lots of SNMP queries occur on a computer that is running Windows Vista SP1 or Windows Server 2008.  http://support.microsoft.com/kb/967800 2) 967789. Hotfix. A Windows Server 2008-based DHCPv6 server consumes 100 percent of CPU resources and then becomes unresponsive after it receives a malformed relay-forwarded packet.  http://support.microsoft.com/kb/967789 3) 967787. Hotfix. Stop error message when you have the TCP Chimney feature enabled and the TCP transfer buffer size is set to 32 MB in Windows Vista, Windows Server 2008, or Windows Server 2003: "Stop 0x00000040 TARGET_MDL_TOO_SMALL".  http://support.microsoft.com/kb/967787 4) 967363. Hotfix. A Windows Server 2008-based DHCP server does not register DNS records for earlier version DHCP clients that do not send option 81 to the DHCP server.  http://support.microsoft.com/kb/967363 5) 967227. Hotfix. An application may stop working unexpectedly on a Windows Vista SP1-based or a Windows Server 2008-based computer.  http://support.microsoft.com/kb/967227 6) 967181. Hotfix. FIX: The agent IP address is sent as "0.0.0.0" when you use the SnmpSendMsg function to send an SNMPv1 trap to an external SNMP manager.  http://support.microsoft.com/kb/967181 7) 962943. Hotfix. FIX: You receive a Stop 0x0000007e error message on a blue screen when the AppPoolCredentials attribute is set to true and you use a domain account as the application pool identity in IIS 7.0.  http://support.microsoft.com/kb/962943 8) 961775. Hotfix. New AFD connections fail when software that uses TDI drivers is installed on a Windows Server 2008 or Windows Vista SP1 system that is running on a computer that has multiple processors.  http://support.microsoft.com/kb/961775 9) 961707. Hotfix. You may be not able to use a VPN connection again on a computer that is running Windows Server 2008 or Windows Vista if you log off the computer without disconnecting the VPN connection.  http://support.microsoft.com/kb/961707 10) 961706. Hotfix. Error message when a VPN client that is running Windows Vista or Windows Server 2008 is remotely managed: "Computer \\ComputerName cannot be managed. The network path was not found".  http://support.microsoft.com/kb/961706 11) 961533. Hotfix. When you use an IPsec rule to block traffic from any IP address to any other IP address, the Self-to-Self connection may be blocked on a Windows Vista-based or a Windows Server 2008-based client computer.  http://support.microsoft.com/kb/961533 12) 961183. Hotfix. Event ID 5740 and event ID 5754 may be logged when the BizTalk SQL Adapter is under heavy load on a Windows Server 2008-based multiprocessor computer.  http://support.microsoft.com/kb/961183 13) 960723. Hotfix. Windows Vista Service Pack 1 or Windows Server 2008 stops responding (hangs) during startup.  http://support.microsoft.com/kb/960723 14) 960519. Hotfix. Windows Vista does not use all the bandwidth of a PPPoE connection when you download a file from an FTP server.  http://support.microsoft.com/kb/960519 15) 959816. Hotfix. Applications or services that use sockets may stop responding in Windows Server 2008 or Windows Vista SP1.  http://support.microsoft.com/kb/959816 16) 959130. Hotfix. When you run the "Connect to the Internet" Wizard and select the "Browse the Internet now" option, Internet Explorer starts instead of the default Web browser that you set in Windows Vista or in Windows Server 2008.  http://support.microsoft.com/kb/959130 17) 958936. Hotfix. System Center Operations Manager 2007 cannot receive SNMP trap data when you use a Windows Server 2008-based computer or a Windows Vista-based computer as a proxy agent for SNMP devices.  http://support.microsoft.com/kb/958936 18) 958904. Hotfix. A hotfix is available that corrects a logic that is used to determine affinity masks on a Windows Vista-based or Windows Server 2008-based computer that has more than 32 logical processors.  http://support.microsoft.com/kb/958904 19) 958551. Hotfix. The DNS search order is reversed on the DHCP client in Windows Vista or in Windows Server 2008 when you use dial-up or a VPN connection to connect to a Routing and Remote Access server.  http://support.microsoft.com/kb/958551 20) 958285. Hotfix. Error message when you access the shared resources in a cooperation network over a VPN connection from a Windows Vista or Windows Server 2008-based client computer: "0x80004005" or "0x80070035".  http://support.microsoft.com/kb/958285 21) 958178. Hotfix. A Windows Server 2008 update lets you use the RPC redirection (RDR) interface to enable or disable custom load balancing based on server name and port number.  http://support.microsoft.com/kb/958178 22) 958015. Hotfix. Receive-side scaling is unexpectedly disabled on a Windows Server 2008-based computer.  http://support.microsoft.com/kb/958015 23) 957933. Hotfix. A delay occurs when you try to reconnect to the network on a Windows Vista Service Pack 1-based or Windows Server 2008-based computer that is a member of a domain.  http://support.microsoft.com/kb/957933

SP2: Networking (2 of 3)

24) 957931. Hotfix. A Windows XP-based, Windows Vista-based, or Windows Server 2008-based computer does not respond to 802.1X authentication requests for 20 minutes after a failed authentication.  http://support.microsoft.com/kb/957931 25) 957802. Hotfix. The "Slow network connection time-out for user profiles" Group Policy setting does not work for a Windows Vista Service Pack 1-based or a Windows Server 2008-based client computer.  http://support.microsoft.com/kb/957802 26) 957624. Hotfix. A Windows Vista-based or Windows Server 2008-based computer behind a NAT device cannot communicate with another computer through an IPsec tunnel-mode connection.  http://support.microsoft.com/kb/957624 27) 957526. Hotfix. The shutdown process becomes very slow when there is an active connection during shutdown on a Windows Vista-based or Windows Server 2008-based computer.  http://support.microsoft.com/kb/957526 28) 957424. Hotfix. A user name that contains Unicode characters is not handled correctly in Windows Vista and Windows Server 2008 during EAP authentication.  http://support.microsoft.com/kb/957424 29) 956840. Hotfix. A memory leak may occur in an application that uses the MS-FASP API to open and close policy store handles in Windows Vista or in Windows Server 2008.  http://support.microsoft.com/kb/956840 30) 956594. Hotfix. An indexed Excel worksheet that contains cells with a large comment field is not searchable in the Indexing service and by other search providers in Windows Server 2003.  http://support.microsoft.com/kb/956594 31) 956463. Hotfix. Windows Server 2008 Network Policy Server (NPS) recognizes all computers as domain controllers in the NAP reporting data.  http://support.microsoft.com/kb/956463 32) 955995. Hotfix. NPS servers in Windows Server 2008 systems cannot import configuration settings that were exported from IAS servers in Windows Server 2003 systems.  http://support.microsoft.com/kb/955995 33) 955804. Hotfix. In Windows Vista, Windows Meeting Space may be unable to detect the peer computer and may be unable to establish the connection over a private ad hoc wireless network.  http://support.microsoft.com/kb/955804 34) 955734. Hotfix. Stop error message in Windows Server 2008, in Windows Vista, or in Windows Vista SP1: "0x000000D1".  http://support.microsoft.com/kb/955734 35) 955540. Hotfix. A hotfix is available that enables support for dynamic filters for IPsec communication on Windows Server 2008 or Windows Vista SP1-based computers.  http://support.microsoft.com/kb/955540 36) 955427. Hotfix. Copy process is very slow when you copy large files from one computer to another computer in a high-bandwidth network environment if both computers are running either Windows Vista or Windows Server 2008.  http://support.microsoft.com/kb/955427 37) 955386. Hotfix. DHCP server log files may be corrupted in Asian language versions of Windows Server 2008, such as in the Japanese, Chinese, or Korean editions of Windows Server 2008.  http://support.microsoft.com/kb/955386 38) 955352. Hotfix. A Windows Vista-based DHCP client does not accept a new IP address until two DHCPOFFER packets are exchanged.  http://support.microsoft.com/kb/955352 39) 954664. Hotfix. MIB interface information that is collected by the IP Helper API is blank or incomplete on a computer that is running a non-English version of Windows Server 2008 or Windows Vista.  http://support.microsoft.com/kb/954664 40) 953835. Hotfix. You cannot perform NetSH commands by using a user account that belongs to the "Network Configuration Operators" security group on a Windows Vista-based computer or on a Windows Server 2008-based computer.  http://support.microsoft.com/kb/953835 41) 953733. Security. MS08-047: Vulnerabilities in IPsec policy processing could allow information disclosure.  http://support.microsoft.com/kb/953733 42) 953270. Hotfix. After a Windows Vista-based computer resumes from hibernation, the computer waits 30 seconds before it starts connecting to a new wireless network.  http://support.microsoft.com/kb/953270 43) 953269. Hotfix. The DHCP Server service on a Windows Server 2008-based computer interprets DHCPv6 Option 39 incorrectly.  http://support.microsoft.com/kb/953269 44) 953268. Hotfix. Some network-related parameters for a Windows Vista-based or Windows Server 2008-based DHCP client computer are configured incorrectly when you use DHCPv6.  http://support.microsoft.com/kb/953268 45) 952613. Hotfix. An independent hardware vendor (IHV) profile may be unable to establish a wireless connection by implementing a third-party EAP method on a Windows Vista-based computer.  http://support.microsoft.com/kb/952613 46) 952178. Hotfix. The Print Spooler service consumes a large amount of memory because of unsuitable RPC caching in Windows Server 2008 and in Windows Vista.  http://support.microsoft.com/kb/952178 47) 952131. Hotfix. Piggybacked data on a TCP Acknowledgement (ACK) package may bypass the WFP inspection process in Windows Vista.  http://support.microsoft.com/kb/952131

SP2: Networking (3 of 3)

48) 951805. Hotfix. Stop error message when you send or receive e-mail messages on a Windows Vista-based computer that has e-mail scanning software installed: "STOP: 0x1000008E KERNEL_MODE_EXCEPTION_NOT_HANDLED_M".  http://support.microsoft.com/kb/951805 49) 951738. Hotfix. On a computer that is running Windows Vista  or Windows Server 2008 and that has UAC and Internet Explorer 7 protected mode enabled, Internet Explorer 7 may stop responding when you try to visit any Web site.  http://support.microsoft.com/kb/951738 50) 951598. Hotfix. On a computer that is running an Itanium-based version of Windows Server 2008, the Ftp.exe utility crashes when you run the "mput" command.  http://support.microsoft.com/kb/951598 51) 950918. Hotfix. To keep Remote Access Service connections active after you log off from Windows Vista or Windows Server 2008, you must create a new registry key.  http://support.microsoft.com/kb/950918 52) 950826. Hotfix. You cannot establish an IPsec connection between a Linux operating system and a Windows Vista operating system when you initiate the connection from the Linux operating system.  http://support.microsoft.com/kb/950826 53) 950762. Security. MS08-036: Vulnerabilities in Pragmatic General Multicast (PGM) could allow denial of service.  http://support.microsoft.com/kb/950762 54) 950570. Hotfix. Error message when you start a multiprocessor computer that runs Windows Vista: "STOP: 0x0000007E".  http://support.microsoft.com/kb/950570 55) 950499. Hotfix. You may be unable to use the "netsh interface" context in some Server Core installations of Windows Server 2008.  http://support.microsoft.com/kb/950499 56) 950319. Hotfix. On a multiprocessor computer that is running Windows Vista or Windows Server 2008, a network connectivity failure occurs randomly when you run certain utilities.  http://support.microsoft.com/kb/950319 57) 950136. Hotfix. No more than 1,024 methods can be present in one COM interface on a computer that is running the 64-bit version of Windows Vista or the 64-bit version Windows Server 2003.  http://support.microsoft.com/kb/950136 58) 949887. Hotfix. A memory leak occurs on an RPC server that is running Windows Server 2008 after the RPC server function runs an RPC client callback function.  http://support.microsoft.com/kb/949887 59) 949729. Hotfix. When you run an NDISTest on a Windows-based computer that has a RNDIS driver installed, a failure is reported, or the computer may become unresponsive.  http://support.microsoft.com/kb/949729 60) 949540. Hotfix. A local-to-local connection is broken when you create a connection security rule that has the "Accept health certificates only" option enabled on a Windows Vista-based computer.  http://support.microsoft.com/kb/949540 61) 949429. Hotfix. The virtual IP address of a Windows Server 2008 NLB cluster is bound to the NetBIOS host name of a particular server or of multiple servers.  http://support.microsoft.com/kb/949429 62) 949130. Hotfix. The Reassembly Failure counter displays a value that is higher than expected when you use the "netstat -s" command in Windows Vista.  http://support.microsoft.com/kb/949130 63) 948927. Hotfix. Error message when you use SmartCard-only authentication to log on to a Windows Vista-based client computer in a wireless network environment: "Cannot connect to <SSID>: Please contact network administrator".  http://support.microsoft.com/kb/948927 64) 948363. Hotfix. Event ID 4199 is logged in the System log when you assign or change an IP address on a Windows Vista-based computer.  http://support.microsoft.com/kb/948363 65) 948278. Hotfix. After you resume a Windows Vista-based computer from standby, a bus driver is not loaded as expected, and error code 38 is reported.  http://support.microsoft.com/kb/948278 66) 946988. Hotfix. Stop error message when you try to put a Windows Vista-based computer to sleep while a dial-up network connection is active: "STOP: 0x0000009F".  http://support.microsoft.com/kb/946988 67) 946887. Hotfix. A Windows Vista or Windows Server 2008-based computer cannot negotiate the security mode with the partner if you use a subnet address as a source address or as a destination filter address when you configure IPsec policy to use tunnel mode http://support.microsoft.com/kb/946887 68) 946886. Hotfix. A video call may fail when you try to start the video call by using Office Communicator on a computer that is running Windows Server 2008 or Windows Vista.  http://support.microsoft.com/kb/946886 69) 946776. Hotfix. Stop error message on a Windows Vista-based computer when you unplug the network cable: "STOP 0x000000D1 DRIVER_IRQL_NOT_LESS_OR_EQUAL".  http://support.microsoft.com/kb/946776 70) 943650. Hotfix. A computer that is running Windows Server 2008 or Windows Vista may restart repeatedly with different Stop error codes when multicast forwarding is enabled.  http://support.microsoft.com/kb/943650

SP2: OS Deployment

1) 967756. Hotfix. After you uninstall some software updates in Windows Vista or in Windows Server 2008, some assembly files may still reflect the updated version instead of the original version of the files.  http://support.microsoft.com/kb/967756 2) 967353. Hotfix. Description of the pre-scan version of System Update Readiness Tool for Windows Vista and for Windows Server 2008.  http://support.microsoft.com/kb/967353 3) 958756. Hotfix. The customized properties for an .msi package installation are reset to their default values after you install Windows Installer 4.5.  http://support.microsoft.com/kb/958756 4) 958655. Hotfix. Error message when you use Windows Installer (MSI) 4.5 to install multiple MSI packages in Windows Server 2008, Windows Vista, Windows Server 2003 or Windows XP: "API call rejected - No actions in Context".  http://support.microsoft.com/kb/958655 5) 958351. Hotfix. Certain properties are not returned from a WMI query in Windows PE 2.1 that has WMI support.  http://support.microsoft.com/kb/958351 6) 957051. Hotfix. Windows Deployment Services generates duplicate client computer names when the %MAC variable is used.  http://support.microsoft.com/kb/957051 7) 953319. Hotfix. The English version of the Microsoft Software License Terms appears when you run the OOBE Wizard to deploy a Chinese Traditional version of Windows Vista.  http://support.microsoft.com/kb/953319 8) 952880. Hotfix. The customized desktop wallpaper that is specified in the Oobe.xml file is not displayed in Windows Vista.  http://support.microsoft.com/kb/952880 9) 947880. Hotfix. Regional settings that users make during OOBE may be overwritten by the default settings in the Oobe.xml file after Windows Vista Service Pack 1 is installed.  http://support.microsoft.com/kb/947880 10) 947821. Hotfix. Description of the System Update Readiness Tool for Windows Vista and for Windows Server 2008.  http://support.microsoft.com/kb/947821 11) 937287. Hotfix. A software update is available for the Windows Vista installation software feature.  http://support.microsoft.com/kb/937287 12) 935772. Hotfix. After you upgrade to WDS, an ACPI Multiprocessor image does not appear in the menu of operating system images when you start a PXE client that uses an ACPI Uniprocessor computer HAL.  http://support.microsoft.com/kb/935772

SP2: Printing & Imaging Technologies

1) 967159. Hotfix. Many events that have a Source attribute of Microsoft-Windows-SpoolerWin32SPL and an event ID of 4 are logged in Windows Vista SP1 and in Windows Server 2008.  http://support.microsoft.com/kb/967159 2) 962998. Hotfix. Error message when you try to export printers to a file on a Windows Server 2008-based cluster node: "Windows encountered errors during the migration process".  http://support.microsoft.com/kb/962998 3) 962000. Hotfix. Print jobs in an offline print queue are missing or incomplete after you print a second document to the print queue in Windows Server 2008 or in Windows Vista SP1.  http://support.microsoft.com/kb/962000 4) 960594. Hotfix. Per-machine printer connections that are deployed by using group policies may not be removed completely from Windows Server 2008 and Windows Vista SP1-based computers.  http://support.microsoft.com/kb/960594 5) 959886. Hotfix. Error reports are printed when you print an image to a PostScript printer from a computer that is running Windows Vista or Windows Server 2008.  http://support.microsoft.com/kb/959886 6) 959482. Hotfix. Horizontal black stripes are displayed in the print output when you print an image to a PCL printer from a computer that is running Windows Vista or Windows Server 2008.  http://support.microsoft.com/kb/959482 7) 959203. Hotfix. The print options that you specify in an application may be ignored in the print output when you print a document from a client computer that runs an x64 version of Windows Vista or Windows Server 2008.  http://support.microsoft.com/kb/959203 8) 958894. Hotfix. The Printer Spooler service may encounter an access violation and crash when the service handles asynchronous notifications from print clients on Windows Server 2008-based or Windows Vista Service Pack 1-based computers.  http://support.microsoft.com/kb/958894 9) 958741. Hotfix. Print jobs may have incorrect owners when you share a printer from a Windows Server 2008-based computer or from a Windows Vista Service Pack 1-based computer.  http://support.microsoft.com/kb/958741 10) 958708. Hotfix. Some temp files that have a size of 0 bytes are not deleted automatically after you install or upgrade the printer driver on a Windows Vista or Windows Server 2008-based computer.  http://support.microsoft.com/kb/958708 11) 958656. Hotfix. Client-side rendering in Windows Server 2008 and in Windows Vista may decrease performance on Windows Server 2008-based terminal servers.  http://support.microsoft.com/kb/958656 12) 957295. Hotfix. System memory is quickly exhausted when you run a custom application that uses the SetICMMode function on a Windows Vista-based or on a Windows Server 2008-based computer.  http://support.microsoft.com/kb/957295 13) 955806. Hotfix. The print process crashes under heavy stress on Windows Vista-based or Windows Server 2008-based computers.  http://support.microsoft.com/kb/955806 14) 955560. Hotfix. Handle leaks and memory leaks occur on the Printer Spooler service when a Windows Vista SP1-based computer or a Windows Server 2008-based computer installs and uninstalls network printers.  http://support.microsoft.com/kb/955560 15) 955554. Hotfix. DLL files may not be registered by the RegisterDlls directive in a printer driver for a Windows Vista Service Pack 1-based or Windows Server 2008-based computer.  http://support.microsoft.com/kb/955554 16) 954962. Hotfix. Fax applications may randomly crash when you use the application to send or receive fax documents on a Windows Server 2008-based or Windows Vista SP1-based computer.  http://support.microsoft.com/kb/954962 17) 954051. Hotfix. It takes longer than expected to print a graphics-intensive document by using an XPS printer on a computer that is running Windows Vista Service Pack 1 or Windows Server 2008.  http://support.microsoft.com/kb/954051 18) 953253. Hotfix. Error message when you try to import an image from a scanner by using "Windows Fax and Scan" or by using Windows Photo Gallery in Windows Vista SP1: "A problem prevented the document from being scanned".  http://support.microsoft.com/kb/953253 19) 953155. Security. MS08-062: Vulnerability in Windows Internet Printing service could allow remote code execution.  http://support.microsoft.com/kb/953155 20) 952206. Hotfix. A printer-driver upgrade operation fails on printer clients that are running Windows Server 2003 or Windows XP when multiple printer queues are upgraded at the same time.  http://support.microsoft.com/kb/952206 21) 951638. Hotfix. Performance issues are caused by a memory leak on a Windows Server 2008-based print server that has many Windows Vista-based printer clients.  http://support.microsoft.com/kb/951638 22) 950087. Hotfix. A print server's performance gradually decreases after you add a shared printer to a computer that is running Windows Vista or Windows Server 2008.  http://support.microsoft.com/kb/950087 23) 948924. Hotfix. When you use an XPS printer to print an XPS document on a Windows Vista-based computer, the XPS document is not correctly printed.  http://support.microsoft.com/kb/948924 24) 948765. Hotfix. Text that is set to a size of 9 pt in the Simsun-18030 font is displayed incorrectly on a computer that is running Windows XP or Windows 2000.  http://support.microsoft.com/kb/948765

SP2: Security (1 of 2)

1) 967696. Hotfix. The memory usage of the Windows Server 2008 Active Directory Certificate Services (Certsrv.exe) may keep increasing when third-party plug-ins are installed and certificate requests are rejected.  http://support.microsoft.com/kb/967696 2) 967170. Hotfix. Windows Vista and Windows Server 2008 do not correctly audit all the privilege use events.  http://support.microsoft.com/kb/967170 3) 966329. Hotfix. Windows Server 2008 Certificate Services (ADCS) does not start, and error code 0x80070057 is generated when ADCS is reinstalled by using the "use existing keys" option in Windows Server 2008.  http://support.microsoft.com/kb/966329 4) 963046. Hotfix. When you use the Encrypting File System (EFS) to encrypt files, some files are not fully encrypted in Windows Vista or in Windows Server 2008.  http://support.microsoft.com/kb/963046 5) 961403. Hotfix. After the Active Directory RMS role is decommissioned on a Windows Server 2008-based server, users cannot open documents that IRM helps protect.  http://support.microsoft.com/kb/961403 6) 961120. Hotfix. When you enable the "Encrypt the Offline Files cache" policy setting, multiple EFS certificates may be generated when you log on to the domain from multiple Windows Vista-based or Windows Server 2008-based client computers.  http://support.microsoft.com/kb/961120 7) 961099. Hotfix. An application that uses Windows NT security event log APIs cannot read the description of an event log message from a computer that is running Windows Vista or Windows Server 2008.  http://support.microsoft.com/kb/961099 8) 960830. Hotfix. The password is not set as expected when you use the Ktpass.exe tool that is included with a 64-bit version of Windows Server 2008 to create a Kerberos keytab file.  http://support.microsoft.com/kb/960830 9) 960809. Hotfix. The Windows Server 2008 Online Certificate Status Protocol (OCSP) responder does not work with signing certificates that do not use the SHA1 algorithm.  http://support.microsoft.com/kb/960809 10) 960549. Hotfix. Some third-party Online Certificate Status Protocol (OCSP) clients may reject a response from an OSCP responder if this OCSP responder receives a Response Signing certificate from a Windows Server 2008 certification authority.  http://support.microsoft.com/kb/960549 11) 960375. Hotfix. You receive an ERROR_HANDLE_NOT_CLOSABLE error code and the Lsass.exe process crashes when an application calls the LsaLogonUser function together with the KERB_TICKET_LOGON structure in Windows Server 2008 and Windows Vista SP1.  http://support.microsoft.com/kb/960375 12) 960225. Security. MS09-007: Vulnerability in SChannel could allow spoofing.  http://support.microsoft.com/kb/960225 13) 959887. Hotfix. You cannot use a smart card certificate to log on to a domain from a Windows Vista-based client computer.  http://support.microsoft.com/kb/959887 14) 959517. Hotfix. Windows Server 2008 Key Distribution Center (KDC) rejects a TGS request after the TGT is renewed.  http://support.microsoft.com/kb/959517 15) 959406. Hotfix. The smart card personal identification number (PIN) dialog box does not appear in the foreground of the desktop when you enroll a smart card certificate in Windows Vista Service Pack 1 or Windows Server 2008.  http://support.microsoft.com/kb/959406 16) 959193. Hotfix. Two improvements are available that shorten the time that is required to manage SCEP certificates by using the Network Device Enrollment Service in Windows Server 2008.  http://support.microsoft.com/kb/959193 17) 959052. Hotfix. The FQDN option does not appear in the Subject name format list in the Certificate Templates console.  http://support.microsoft.com/kb/959052 18) 958900. Hotfix. Error message when you try to unlock a Windows Vista-based or a Windows Server 2008-based computer that has the Fast User Switching feature disabled: "The password for this account has expired".  http://support.microsoft.com/kb/958900 19) 957656. Hotfix. Error message when you log on to a Windows Vista-based or Windows Server 2008-based computer that has the "Allow user name hint" Group Policy setting enabled: "The specified username is invalid".  http://support.microsoft.com/kb/957656 20) 957441. Hotfix. Client connections return a "STATUS_INVALID_PARAM" error code when you use a "Send NTLMv2 response only" authentication level in Windows Server 2008 or in Windows Vista.  http://support.microsoft.com/kb/957441 21) 956580. Hotfix. You cannot enroll for a certificate that is larger than 4096 bits on an SCEP client in Windows Server 2008.  http://support.microsoft.com/kb/956580 22) 956544. Hotfix. When you enroll a certificate on a computer that is running Windows Vista or that is running Windows Server 2008, you are prompted to insert a smart card even though a smart card is already inserted.  http://support.microsoft.com/kb/956544 23) 956333. Hotfix. Certificate Web Enrollment Pages do not support Windows Mobile devices when they are released on computers that are running Windows Server 2008 or Windows Server 2003 and that have Certificate Services installed.  http://support.microsoft.com/kb/956333 24) 955805. Hotfix. Certain applications become very slow on a Windows Server 2008-based or Windows Vista SP1-based computer when a certificate with the SIA extension is installed.  http://support.microsoft.com/kb/955805 25) 955558. Hotfix. You cannot use a smart card certificate to log on to a domain from a Windows Vista-based or a Windows Server 2008-based client computer.  http://support.microsoft.com/kb/955558

SP2: Security (2 of 2)

26) 955551. Hotfix. Error message when you run the Encrypting File System (EFS) Wizard to create a self-signed certificate that is stored on a smart card in Windows Vista Service Pack 1 and in Windows Server 2008: "No valid certificates found".  http://support.microsoft.com/kb/955551 27) 955548. Hotfix. Error message when you try to use the Encrypting File System wizard to create a self-signed certificate that can be stored in a smart card on a Windows Vista Service Pack 1 (SP1)-based computer or on a Windows Server 2008-based computer.  http://support.microsoft.com/kb/955548 28) 955248. Hotfix. The RSoP snap-in does not display some file security policies, and Event ID 1091 is logged on domain member computers that are running Windows Vista Service Pack 1 or Windows Server 2008.  http://support.microsoft.com/kb/955248 29) 954910. Hotfix. Error message when you use smart card authentication to log on to a Windows Server 2008-based terminal server from a client computer that is running Windows Vista or Windows Server 2008: "0xC000040C".  http://support.microsoft.com/kb/954910 30) 954902. Hotfix. After a user is deleted from a role in the Authorization Manager in an Active Directory domain environment, the user can still unexpectedly access that role from a Windows Vista-based or Windows Server 2008-based client computer.  http://support.microsoft.com/kb/954902 31) 954808. Hotfix. You may experience slow authentication performance on a Windows Server 2008-based RODC when it is under high load or when the link between the RODC and a writable domain controller is slow.  http://support.microsoft.com/kb/954808 32) 954545. Hotfix. You cannot use user names and passwords that are stored on a Windows Vista-based or Windows Server 2008-based client computer to connect to a server application that is hosted in a domain.  http://support.microsoft.com/kb/954545 33) 954059. Hotfix. The random number generator is not compliant with Federal Processing Standard 140-2 in Windows Vista Service Pack 1 and in Windows Server 2008.  http://support.microsoft.com/kb/954059 34) 953535. Hotfix. When many SSL connections are established on a Windows Server 2008-based computer, the computer eventually stops responding because of a memory leak.  http://support.microsoft.com/kb/953535 35) 953152. Hotfix. The algorithm for the Encrypting File System (EFS) smartcard certificate implementation in Windows Vista may cause data loss.  http://support.microsoft.com/kb/953152 36) 952722. Hotfix. The Active Directory Certificate Services service does not start on a Windows Server 2008-based certification authority server if the key storage provider does not support SHA1 hash signing.  http://support.microsoft.com/kb/952722 37) 952234. Hotfix. When you establish a Terminal Services session that requires smart card authentication to log on to a Windows Server 2008-based terminal server, the Terminal Services session stops responding.  http://support.microsoft.com/kb/952234 38) 952009. Hotfix. The floppy disk drive lights and the CD drive or DVD drive lights flash unexpectedly when you use the Win32_EncryptableVolume WMI class to check whether drives are encrypted on a Windows Vista-based computer.  http://support.microsoft.com/kb/952009 39) 952004. Security. MS09-012: Description of the security update for MSDTC Transaction Facility: April 2009.  http://support.microsoft.com/kb/952004 40) 951585. Hotfix. You cannot use the ActiveX Installer service to install ActiveX controls in a standard user environment on a Windows Vista-based client computer, and event 4100 is logged.  http://support.microsoft.com/kb/951585 41) 951541. Hotfix. An update to add support to wildcard characters for the ActiveX Installer Service (AxIS) in Windows Vista.  http://support.microsoft.com/kb/951541 42) 951191. Hotfix. An error code is returned when a Kerberos client requests a TGT against a Windows Server 2008-based domain controller: "KERB5KDC_ERR_C_PRINICPAL_UNKNOWN".  http://support.microsoft.com/kb/951191 43) 950888. Hotfix. You cannot create multiple RMS Client sessions for one user context on a Windows Vista-based computer.  http://support.microsoft.com/kb/950888 44) 949655. Hotfix. On a Windows Vista SP1-based computer, the SCardReleaseContext function returns a "0x80100004 (SCARD_E_INVALID_PARAMETER)" error code when the Cryptographic Service Provider process closes.  http://support.microsoft.com/kb/949655 45) 949459. Hotfix. The new 64-bit CPU from VIA Technologies is not recognized on computers that are running Windows XP or later operating systems.  http://support.microsoft.com/kb/949459 46) 948790. Hotfix. Services or processes that require authentication may stop responding because of a deadlock condition in the Lsass.exe process on a Windows Server 2008-based computer or on a Windows Vista Service Pack 1-based computer.  http://support.microsoft.com/kb/948790 47) 948088. Hotfix. Misleading message when you remove a smart card in a RDP session on a Windows Vista-based computer: "The card supplied was not recognized".  http://support.microsoft.com/kb/948088 48) 946583. Hotfix. Cipher Block Chaining (CBC) encryption is not available in the Windows Rights Management Services (RMS) for Windows Server 2003.  http://support.microsoft.com/kb/946583 49) 941467. Hotfix. Authorization Manager closes the LDAP connection when an attempt to read the Authorization Manager store fails on a computer that is running Windows Server 2003 or Windows Server 2008.  http://support.microsoft.com/kb/941467