Any references to Community Connect 3™ in this document apply equally to RM Smart-Tools 3.

Note: The components of this hotfix are included in Service Release 4 (SR4). If you have already installed SR4 you do not need to install this hotfix. If you have not yet installed SR4, you should consider installing this Critical Hotfix at your earliest convenience.

Microsoft have released significant critical security updates to key Windows components to improve their security and performance.  HFXCC3046 contains these updates in a format easily applied to Community Connect 3 networks.

HFXCC3046 also contains additional non-critical hotfixes which are not installed automatically. Please read the Additional Information section of this article which describes the issues resolved by these hotfixes, and only apply the hotfixes if you are experiencing the specific issue addressed by each hotfix.

HFXCC3046 should be installed on to all Community Connect 3 servers. Servers and workstations will need to be restarted for the hotfix to be applied fully.

HFXCC3046 contains critical Microsoft security updates which are applicable to Microsoft� Windows� 2000 Server and/or Microsoft� Window� XP Professional:

1. MS03-033: MDAC Security Hotfix 823718 - for Community Connect 3 servers and workstations.
2. MS03-035: Microsoft Word 2002 Macro Hotfix KB827653 - for Community Connect 3 workstations running Microsoft Office XP SP2.
3. MS03-037: MS Visual Basic for Applications Security Hotfix KB822715 - for Community Connect 3 workstations running Microsoft Office XP SP2.
4. Cryptographic Service Hotfix 817287 - for all Community Connect 3 workstations.

HFXCC3046 also contains additional non-critical hotfixes which will not be installed automatically. Please read the Additional Information section of this article which describes the issues resolved by these hotfixes, and only apply one or more of the hotfixes if you are experiencing the specific issue addressed by each hotfix.

More information on the issues resolved by each of these hotfixes is available from Microsoft's website (http://www.microsoft.com/).

You should apply this hotfix immediately if you are running a Community Connect 3 network running Service Release 3.

HFXCC3046 should be applied to all Community Connect 3 servers, i.e. all domain controllers and all member servers (e.g. DAMMS servers, MIS servers).  It does not need to be applied to Community Connect 3 workstations directly.

Important prerequisites

Community Connect 3 Service Release 3

The hotfix will check for the installation of Service Release 3 and will not install if it is not detected.

HFXCC3035

This must be installed if the workstations are using any variant of Microsoft Office XP Service Pack 2 (please refer to the section below for more details).
Customers using variants of Microsoft Office 2000 or who have no version of Microsoft Office at all do not need to install this hotfix. A link to HFXCC3035 can be found at the end of this article.

Microsoft Office XP Service Pack 2

If you are using any variant of Microsoft Office XP Service Pack 1*, please upgrade to Microsoft Office XP Service Pack 2 before proceeding with HFXCC3046. This is a Free Of Charge upgrade for customers who already have Microsoft Office XP Service Pack 1 and can be ordered using this link.
Customers using variants of Microsoft Office 2000 or who do not use Microsoft Office at all do not need to upgrade.

*Stations packages for Microsoft Office XP Service Pack 1 are easily identified, they all start with 'MS Office XP SP1' when viewed through the management console.

1.      Select the HFXCC3046.exe file to download.

2.      Choose to Save the file, browse to the location you wish to save it to and click Save.

3.      When it has downloaded follow the installation instructions below to install the hotfix on each Community Connect 3 server.

Note: If you previously started to install the hotfix but cancelled the operation, follow the installation instructions in the 'Installing after cancelling a previous install' section below.

1. Download HFXCC3046.
2. Log on to your first Community Connect 3 domain controller as Administrator (not SystemAdmin) and copy the hotfix to a temporary location (e.g. D:\temp).
3. Run the hotfix by double-clicking the self-extracting executable file (HFXCC3046.exe).  The hotfix will extract files automatically and run the RM Installation Assistant to install the hotfix.
4. When prompted, click Continue.
5. The installation will proceed automatically.  When prompted that the RM Installation Assistant has finished, click Finish.
6. Reboot the server to complete the installation of the hotfix.
7. Repeat Steps 2-6 at all your other Community Connect 3 domain controllers and member servers (including DAMMS and MIS servers).
   
   If there are workstations on the network running any variant of 'MS Office XP SP2', follow all the steps below.
   If workstations have any variant of the MS Office 2000 installed or no variant of Office installed at all, jump straight to step 15 below.
   Note: If any variant of 'MS Office XP SP2' is installed in future, e.g. as an upgrade from MS Offices 2000, carry out steps 8-15 immediately after upgrading the stations with the new package.
   
   
8. Log in to a Community Connect 3 workstation as SystemAdmin and run the RM Management Console.
9. Under the Workstations node, select the highest level folder in the hierarchy to which an 'MS Office XP SP2' package is allocated. This will probably be at room level in the hierarchy.
10. Right-click on the folder and choose Properties.
11. From the Packages tab, choose Available Packages.
12. Highlight the following packages (hold down the CTRL key while selecting more than one package):
    
    'Microsoft Word 2002 Macro Hotfix KB827653'
    'MS Visual Basic for Applications Security Hotfix KB822715'
    
    
13. Choose OK to save your changes.
14. Repeat steps 10 to 13 for every other folder at the same level as the first one, to which an 'MS Office XP SP2' package is allocated.
15. Restart all workstations to complete the installation. Once the hotfixes have been installed, the workstation will restart again

1. Browse to D:\RMNetwork\RMManage\RM Hotfixes\HFXCC3046_extracted and double-click the file RM Installation Assistant.exe.
   (If this folder or its contents does not exist, re-run the HFXCC3046.exe file downloaded from the RM Support website). 
2. The RM Installation Assistant will initialise. Click Continue to proceed with the installation. 
3. The installation should proceed automatically. Click Finish when prompted. 
4. Follow the procedures in 'How to install the Hotfix' from step 5 above.

The security-related Microsoft hotfixes contained in HFXCC3046 are included in Service Release 4.

The hotfix can be installed on to networks running Community Connect 3 with Service Release 3.

Non-critical hotfixes included in HFXCC3046

IE6 SP1 Hotfix KB811383 (all servers and workstations)

Symptoms: When you use Internet Explorer to connect to Web sites that use the "Connection: Close" header during a keep-alive connection, Internet Explorer may enter an infinite loop of trying to connect to the site. The expected behaviour when this problem occurs is for Internet Explorer to continue trying to connect until the port times out or is reset.

Internet Explorer also may not show a client certificate when you try to connect to a secure Web site after you are prompted for authentication by the secure site. The expected behaviour when this problem occurs is that the client certificate that is used to connect to the secure Web site is not available in the list of available certificates that you can select from for authentication validation by the secure Web site. In some cases, you might receive a 'Page cannot be displayed' error message when you try to connect to the secure Web site.

Resolution: Apply the hotfix following the procedures below. 

To apply KB811383 to a Community Connect 3 server: 

1.      Log on to the server as an administrator.

2.      Ensure Internet Explorer 6 Service Pack 1 is installed: in IE, go to Help, About and confirm that 'SP1' appears in the Update Versions field. If it does not, apply IE6 SP1 to the server. IE6 SP1 is available as HFXCC3021.

3.      Browse to D:\RMNetwork\RMManage\RM Hotfixes\HFXCC3046_extracted\Utilities\IE6 SP1 Hotfix KB811383 (server) and double-click the file q811383.exe.

4.      Click Yes, then OK when prompted. Then either click Yes to reboot the server now or No to reboot at a later time.

Note: The server will need to be rebooted for the hotfix to be installed fully.

To apply KB811383 to Community Connect workstations:

1.      Log on to any Community Connect 3 workstation as SystemAdmin and open the RM Management Console.

2.      Under the Workstations node, highlight the workstation or location at which you wish to install the hotfix, right-click and choose Properties.

3.      In the Packages menu, change the status to Available packages and ensure that the Show RM system packages tick box is selected. Highlight IE6 SP1 Hotfix KB811383 (client) and choose Allocate, then OK to save your change.

4.      Restart the workstation(s) to which you have allocated the package for the hotfix to be installed.

Directory Services Event Log Error 1168 Hotfix KB827531 (domain controllers with Windows 2000 SP4 only)

Symptoms: After you install Microsoft Windows 2000 Service Pack 4 (SP4) on your domain controller, random 1168 errors that are similar to the following may be logged in the Directory Services event log:

Event ID: 1168

Source: NTDS Database

Description: Error 8430 (20ee) has occurred (internal ID 20612ee). Please contact Microsoft product support services for assistance.

Resolution: Apply the hotfix following the procedure below.

To apply KB827531 to a Community Connect 3 domain controller running Windows 2000 Service Pack 4:

1.      Log on to the server as an administrator.

2.      Browse to D:\RMNetwork\RMManage\RM Hotfixes\HFXCC3046_extracted\Utilities\Directory Services Event Log Error 1168 Hotfix KB827531 and double-click the file Windows2000-KB827531-x86-ENU.exe.

3.      At the Setup Wizard screen, choose Next.

4.      Accept the license agreement, then choose Next.

5.      Tick the box Do not restart now if you do not wish the server to reboot automatically, then click Finish.

Note: The server will need to be rebooted for the hotfix to be installed fully.

Network Share Shortcut Deletion Hotfix 826722 (workstations only)

Symptoms: When you try to delete a shortcut that you access from a network share (a UNC share or a mapped drive) and that is located on a Windows 2000 server, you may receive the following error message:

"Cannot delete File name: It is being used by another person or program. Close any programs that might be using the file and try again."

or

Windows Explorer may stop responding for about 30 seconds, and then you may receive the following error message: "Cannot delete File name: It is being used by another person or program. Close any programs that might be using the file and try again"

Resolution: Apply the hotfix following the procedure below. 

To apply 826722 to Community Connect workstations: 

1.      Log on to any Community Connect 3 workstation as SystemAdmin and open the RM Management Console.

2.      Under the Workstations node, highlight the workstation or location at which you wish to install the hotfix, right-click and choose Properties.

3.      In the Packages menu, change the status to Available packages and ensure that the Show RM system packages tick box is selected. Highlight Network Share Shortcut Deletion Hotfix 826722 and choose Allocate, then OK to save your change.

4.      Restart the workstation(s) to which you have allocated the package for the hotfix to be installed.