hotfixes for windows 2000 SP4

Hi All,

I would like to install a firewall on windows 2000 server.  I would like to know what are the patches that i should installed for a server running windows 2000 SP4.

The only application that i will use in the server is IE.  No others application (MS office) will be installed.

Thanks in advance.
Who is Participating?
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

LucFEMEA Server EngineerCommented:
Hi eecw,

It's always recommended to install ALL patches. Mainly because of IIS running on the server by default (in which recently another security hole has been found which is being exploited at this moment) And, IE has the most patches of all programs in Win2k.
A better suggestion might be to use a completely different browser like Mozilla (

About the firewall... it depends on what you need, a hardware firewall is always the best solution, you could combine it with an IDS. If you don't need that much protection and you just want a software firewall then there are a lot of options.


Lee W, MVPTechnology and Business Process AdvisorCommented:
2000 does not have a firewall built in or as an optional add-on from MS.  You'd like need ZoneAlarm Pro or a similar "Pro" product as most "home firewall" products will recognize server and won't install.
eecwAuthor Commented:
Hi LucF and leew,

I think i had not make my question clear.  I will install a firewall (example Checkpoint) on a server that is running Windows 2000  Server SP4.  And the only application i will use is IE, I will disable the ISS during the installation.

There are a lot of patches release by microsoft after the SP4.  I dont think it is sensible to install all the patches.  I only want to install those critical patches only.

Thank you
Cloud Class® Course: MCSA MCSE Windows Server 2012

This course teaches how to install and configure Windows Server 2012 R2.  It is the first step on your path to becoming a Microsoft Certified Solutions Expert (MCSE).

look for windows 2000 (Essential)

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
LucFEMEA Server EngineerCommented:

Although your logic is okey. New security holes will always be found, so the best option is to enable "automatic updates" in win2k. This will of course also install the patches for other things than IE, but at least you can be sure they're installed as soon as possible.
Another plus on this is that you can always enable for example IIS in case you want to start running a website in the future as all patches will be installed allready.

The patches are only there because they are needed. I strongly suggest you install ALL of them.
If your going to run checkpoint, then refer to checkpoint's FAQ's for any conflicts of patches / OS service pack levels.
If you were going to run ISA 2004, I grant you all patches should be installed.
Hope it helps.
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Windows 2000

From novice to tech pro — start learning today.

Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.