hotfixes for windows 2000 SP4

Posted on 2004-11-01
Last Modified: 2010-04-13
Hi All,

I would like to install a firewall on windows 2000 server.  I would like to know what are the patches that i should installed for a server running windows 2000 SP4.

The only application that i will use in the server is IE.  No others application (MS office) will be installed.

Thanks in advance.
Question by:eecw
    LVL 32

    Expert Comment

    by:Luc Franken
    Hi eecw,

    It's always recommended to install ALL patches. Mainly because of IIS running on the server by default (in which recently another security hole has been found which is being exploited at this moment) And, IE has the most patches of all programs in Win2k.
    A better suggestion might be to use a completely different browser like Mozilla (

    About the firewall... it depends on what you need, a hardware firewall is always the best solution, you could combine it with an IDS. If you don't need that much protection and you just want a software firewall then there are a lot of options.


    LVL 95

    Expert Comment

    by:Lee W, MVP
    2000 does not have a firewall built in or as an optional add-on from MS.  You'd like need ZoneAlarm Pro or a similar "Pro" product as most "home firewall" products will recognize server and won't install.

    Author Comment

    Hi LucF and leew,

    I think i had not make my question clear.  I will install a firewall (example Checkpoint) on a server that is running Windows 2000  Server SP4.  And the only application i will use is IE, I will disable the ISS during the installation.

    There are a lot of patches release by microsoft after the SP4.  I dont think it is sensible to install all the patches.  I only want to install those critical patches only.

    Thank you
    LVL 6

    Accepted Solution

    look for windows 2000 (Essential)
    LVL 32

    Assisted Solution

    by:Luc Franken

    Although your logic is okey. New security holes will always be found, so the best option is to enable "automatic updates" in win2k. This will of course also install the patches for other things than IE, but at least you can be sure they're installed as soon as possible.
    Another plus on this is that you can always enable for example IIS in case you want to start running a website in the future as all patches will be installed allready.

    LVL 9

    Expert Comment

    The patches are only there because they are needed. I strongly suggest you install ALL of them.
    If your going to run checkpoint, then refer to checkpoint's FAQ's for any conflicts of patches / OS service pack levels.
    If you were going to run ISA 2004, I grant you all patches should be installed.
    Hope it helps.

    Write Comment

    Please enter a first name

    Please enter a last name

    We will never share this with anyone.

    Featured Post

    How your wiki can always stay up-to-date

    Quip doubles as a “living” wiki and a project management tool that evolves with your organization. As you finish projects in Quip, the work remains, easily accessible to all team members, new and old.
    - Increase transparency
    - Onboard new hires faster
    - Access from mobile/offline

    NTFS file system has been developed by Microsoft that is widely used by Windows NT operating system and its advanced versions. It is the mostly used over FAT file system as it provides superior features like reliability, security, storage, efficienc…
    Every business owner understands the significance of online customer reviews and the impact it can have on sales and revenues. With technology advancing at such a rapid pace, getting online reviews has never been easier, especially when many regions…
    This video Micro Tutorial is the second in a two-part series that shows how to create and use custom scanning profiles in Nuance's PaperPort 14.5 ( But the ability to create custom scanning profiles a…
    To add imagery to an HTML email signature, you have two options available to you. You can either add a logo/image by embedding it directly into the signature or hosting it externally and linking to it. The vast majority of email clients display l…

    884 members asked questions and received personalized solutions in the past 7 days.

    Join the community of 500,000 technology professionals and ask your questions.

    Join & Ask a Question

    Need Help in Real-Time?

    Connect with top rated Experts

    16 Experts available now in Live!

    Get 1:1 Help Now