[BigFix-Announcements] BES Auto Notification: New Fixlets Published in Fixlet Site: 'Patches for Windows'

Wed May 24 02:04:27 PDT 2017

Fixlet Site - 'Patches for Windows'
Current Version: 2764	Published: Wed, 24 May 2017 02:18:56  GMT

New Fixlets:
============

***************************************************************
Title: 2696547: Disable SMBv1 in Windows and Windows Server - Enable Workaround (Disable SMB v1) - Windows 7 / Windows 8 / Windows Vista / Windows Server 2008 / Windows Server 2008 R2 / Windows Server 2012 - KB2696547
Severity: Unspecified
Fixlet ID: 269654701
Fixlet Link: https://support.microsoft.com/kb/2696547

Fixlet Description: This fixlet will disable SMBv1 on Windows and Windows Servers, providing the alternative method for customers who can not apply MS17-010 patch. This security update MS17-010 resolves vulnerabilities in Microsoft Windows. The most severe of the vulnerabilities could allow remote code execution if an attacker sends specially crafted messages to a Microsoft Server Message Block 1.0 (SMBv1) server.Note: Affected computers may report back as 'Pending Restart' once the update has run successfully, but will not report back their final status until the computer has been restarted. 

Important Note: There are known issues associated with the installation of this update. Machine with SMBv1 disabled will not be able to access files and folders on Windows Server 2003, which can only negotiate SMBv1. For more information please review The Derecation of SMBv1.

***************************************************************
Title: 2696547: Disable SMBv1 in Windows and Windows Server - Disable Workaround (Disable SMB v1) - Windows 7 / Windows 8 / Windows Vista / Windows Server 2008 / Windows Server 2008 R2 / Windows Server 2012 - KB2696547
Severity: Unspecified
Fixlet ID: 269654703
Fixlet Link: https://support.microsoft.com/kb/2696547

Fixlet Description: This fixlet will install SMBv1 on Windows and Windows Servers, providing the method for customers who have removed SMBv1 to restore the SMBv1 service. Disabling SMBv1 on Windows and Windows Servers provides the alternative method for customers who can not apply MS17-010 patch. This security update MS17-010 resolves vulnerabilities in Microsoft Windows. The most severe of the vulnerabilities could allow remote code execution if an attacker sends specially crafted messages to a Microsoft Server Message Block 1.0 (SMBv1) server.Note: Affected computers may report back as 'Pending Restart' once the update has run successfully, but will not report back their final status until the computer has been restarted. 

Important Note: There are known issues associated with the disabling of SMB v1. Machine with SMBv1 disabled will not be able to access files and folders on Windows Server 2003, which can only negotiate SMBv1. For more information please review The Derecation of SMBv1.

***************************************************************
Title: 2696547: Disable SMBv1 in Windows and Windows Server - Enable Workaround (Remove SMB v1 completely) - Windows 8.1 / Windows 10 / Windows Server 2012 R2 / Windows Server 2016 - KB2696547
Severity: Unspecified
Fixlet ID: 269654705
Fixlet Link: https://support.microsoft.com/kb/2696547

Fixlet Description: This fixlet will remove SMBv1 on Windows and Windows Servers, providing the alternative method for customers who can not apply MS17-010 patch. This security update MS17-010 resolves vulnerabilities in Microsoft Windows. The most severe of the vulnerabilities could allow remote code execution if an attacker sends specially crafted messages to a Microsoft Server Message Block 1.0 (SMBv1) server.Note: Affected computers may report back as 'Pending Restart' once the update has run successfully, but will not report back their final status until the computer has been restarted. 

Important Note: There are known issues associated with the installation of this update. Machine with SMBv1 removed will not be able to access files and folders on Windows Server 2003, which can only negotiate SMBv1. For more information please review The Derecation of SMBv1.

***************************************************************
Title: 2696547: Disable SMBv1 in Windows and Windows Server - Disable Workaround (Remove SMB v1 completely) - Windows 8.1 / Windows 10 / Windows Server 2012 R2 / Windows Server 2016 - KB2696547
Severity: Unspecified
Fixlet ID: 269654707
Fixlet Link: https://support.microsoft.com/kb/2696547

Fixlet Description: This fixlet will install SMBv1 on Windows and Windows Servers, providing the method for customers who have removed SMBv1 to restore the SMBv1 service. Removing SMBv1 on SMB servers provides the alternative method for customers who can not apply MS17-010 patch. This security update MS17-010 resolves vulnerabilities in Microsoft Windows. The most severe of the vulnerabilities could allow remote code execution if an attacker sends specially crafted messages to a Microsoft Server Message Block 1.0 (SMBv1) server.Note: Affected computers may report back as 'Pending Restart' once the update has run successfully, but will not report back their final status until the computer has been restarted. 

Important Note: There are known issues associated with the removing of SMB v1. Machine with SMBv1 removed will not be able to access files and folders on Windows Server 2003, which can only negotiate SMBv1. For more information please review The Derecation of SMBv1.