Chapter 2 - Operating System Installation

This section provides the initial installation procedures for the Windows 2000 Professional, Server, and Advanced Server operating systems.

On This Page

Preparing for Installation
Windows 2000 Installation Process
Installation Methods
Initiating the Installation from Setup Boot Disks
Creating Setup Startup Disks
Start Setup from the Boot Disks
Initiating the Installation from a Bootable CD-ROM
Text Mode Installation Phase
GUI Mode Installation Phase
GUI Mode Start Up Process
Specify regional options, name, product key, and licensing mode
Select a licensing mode for Windows 2000 Server and Advanced Server
Assign a computer name and Administrator account password
Computer name
Administrator password
Choose service components for Windows 2000 Server and Advanced Server
Set the date and time
Configure network settings
Join a domain or workgroup
Windows 2000 Server and Advanced Server Configuration Options
Convert a Windows 2000 Server to a Domain Controller
Windows 2000 Professional Network Identification Wizard
Windows 2000 Service Packs and Hotfixes
Windows 2000 Service Pack Encryption
Recommended Actions Prior to Installing Service Pack and Hotfix Updates
Installing Service Pack and Hotfix Updates

Preparing for Installation

During Installation, the Setup program will ask for information on how to install and configure Windows 2000. Prepare for the Windows 2000 operating system installation by collecting hardware information and establishing configuration decisions prior to initiating the installation process. The following checklist provides some guidelines as to the information that needs to be defined prior to initiating the installation process.

Table 3.1 Windows 2000 Pre-Installation Checklist

	Description
	Hardware Compatibility: Review all hardware to ensure compatibility with the Windows 2000 operating system and, if desired, the Evaluated Configuration hardware configuration. Hardware components include: Motherboard, network adapters, video card, sound card, CD-ROM drives, etc. The Windows 2000 Hardware Compatibility List (HCL) can be found at:https://www.microsoft.com/windows2000/server/howtobuy/upgrading/compat/
	Disk Space: Ensure the system has sufficient disk space. The minimum disk space recommended for installation of Windows 2000 is 2 gigabytes (GB).
	Disk Partitions: Determine disk-partitioning requirements, keeping in mind the minimum disk space recommendations for installation of the Windows 2000 operating system. It is recommended that the operating system for Evaluated Configuration platforms be installed on the primary disk partition.
	File System: The file system must be configured as NTFS in order to allow configuration of the evaluated security mechanisms and conformance to the ST requirements.
	Licensing Mode: Select the desired licensing mode. The two modes are per-server and per-seat. The mode can be switched from per-server to per-seat after installation, but not from per-seat to per-server. The "Select a licensing mode for Windows 2000 Server and Advanced Server" subsection provides a description of the two licensing modes.
	Computer Name: Determine the name to be used by the new computer. If the computer is to be a member of any Windows network environment, its name must be unique within the network.
	Network Membership: If the computer is to become part of a network, determine the type of network group the computer will join. The computer can either be in a Domain or a Workgroup. If it will be joined to a Domain, the Domain name is needed and a computer account needs to be created within the Domain for the new computer. The computer account can be created prior to installation or it can be created during the installation process with an appropriate Domain administrator account and password. The "Join a domain or workgroup "subsection provides descriptions for Domain and Workgroup.
	Installation Method: Determine whether the Windows 2000 operating system will be installed from Setup boot disks, CD-ROM, or over-the-network. Procedures provided in this document describe installations from boot disks or from CD-ROM.
	Service Components: Prior to installation, determine the services that will be required for the installed operating system. For server installations, considerations may include Active Directory, DNS, WINS, or DHCP. A list of evaluated services that may be used in an Evaluated Configuration installation is provided in the "Evaluated Configuration System Services" subsection.

Windows 2000 Installation Process

Installation Methods

Windows 2000 can be installed as either an upgrade to an existing Windows operating system or as a new operating system installation. To ensure the Evaluated Configuration the Windows 2000 operating system must be the only operating system on the computer and must be installed on a clean partition. That is, any previous operating system must be wiped clean from the all hard disk partitions within the computer prior to installing Windows 2000.

There are three methods available to install the Windows 2000 operating system:

• Setup boot disks

• CD-ROM

• Over-the-network

This section describes the installation of Windows 2000 via setup boot disks or CD-ROM.

Note: An over-the-network installation shall not be used for the Evaluated Configuration, as it requires the use of an existing operating system such as Windows 9x, Windows Me, Windows NT, or MS-DOS.

The setup boot disk installation method requires the use of four setup floppy disks. The setup boot disk method of installation will be required if the computer on which the operating system is to be installed does not support the bootable CD-ROM format.

The CD-ROM installation method requires configuration of the computer's motherboard BIOS to detect and boot from a bootable Windows 2000 installation CD.

The subsections that follow provide procedures for initiating the installation of Windows 2000 from either the setup boot disks or a bootable CD-ROM.

Initiating the Installation from Setup Boot Disks

If the computer on which the Windows 2000 operating system is to be installed does not support booting from a CD-ROM, it will be necessary to use the setup boot disk method of installation. If Windows 2000 setup disks are not already available, they can be created on another computer from the installation CD-ROM.

Creating Setup Startup Disks

If the original setup boot disks are not available, new ones can be created as follows:

1. Obtain four blank, 1.44 MB formatted 3.5-inch disks. Label them "Setup Disk 1", "Setup Disk 2", "Setup Disk 3", and "Setup Disk 4". Indicate on each of the disks whether they are for Windows 2000 Server or for Windows 2000 Professional.

2. Use a second working computer running a Windows operating system to create the setup boot disks.

3. Insert the disk labeled "Setup Disk 1" into the floppy disk drive, and insert the Windows 2000 operating system CD into the CD-ROM drive.

4. Click Start, and then click Run. Otherwise open an MS-DOS Command prompt.

5. At the prompt, type the following command, replacing the d: and a: drive letters with the appropriate letter of the CD-ROM drive and floppy disk drive of the computer being used:

   d:\bootdisk\Makeboot.exe a:

6. Follow the instructions that appear.

Start Setup from the Boot Disks

Once Setup is started from the boot disks, it works in several stages, prompting for insertion of specific boot disks and the CD-ROM, requesting information, copying files, and restarting.

Start Setup from the setup boot disks as follows:

1. With the computer turned off, insert "Setup Disk 1" into drive A: of the computer.

2. Turn on the computer.

3. Follow the Setup instructions on the screen. The text mode installation phase that will follow is explained below in the "Text Mode Installation Phase".

Initiating the Installation from a Bootable CD-ROM

Using a bootable CD-ROM is the simplest method of initiating the Windows 2000 Setup program, given that the computer's motherboard BIOS supports this capability. Once the Setup program is started, it works in several stages, prompting for information, copying files, and restarting.

Start Setup from a bootable CD-ROM as follows:

1. Insert the CD-ROM in the drive.

2. Restart the computer and wait for Setup to display a dialog box.

3. Follow the Setup instructions on the screen. The text mode installation phase that will follow is explained below in the "Text Mode Installation Phase" subsection.

Text Mode Installation Phase

This subsection provides details for the text mode installation phase of the Windows 2000 operating system. This installation phase is similar for either boot disk or CD-ROM installation, with the exception that the boot disk installation will prompt the user whenever the next setup disk is required. Once the setup phase has been initiated, the setup process will begin as follows:

1. Setup will begin by first inspecting the computer's hardware. The screen will display the message "Setup is inspecting your computer's hardware configuration..."

2. The screen will then move on to an interactive stage, where the first interaction will depend on whether there are third party SCSI or RAID drivers required by the hardware. If a third party SCSI or RAID driver is required press the F6 key on the keyboard. Otherwise, allow the setup process to continue and proceed to Step 8.

   Note: When installing Windows 2000 on a new computer, or on a computer containing the latest SCSI or IDE controller technology, it may be necessary to use an OEM device driver to support the new mass storage controller in order to continue with the installation. This is done by pressing the F6 key as described above. Otherwise, Windows Setup may stop with the following message if the controller is not properly detected when booting from the Installation Floppy Disks or CD-ROM:

   Setup did not find any hard disk drives installed in your system

   

3. If the F6 key is pressed, the setup process will proceed to loading files until it reaches the stage where it requires the third party driver.

4. When setup reaches the stage where it requires the third party driver, it will provide the following interactive display:

   

5. Pressing the S key on the keyboard will cause Setup to search the A: drive for a driver. If there is no disk in the drive, the following interactive display will appear:

   

6. Place the disk containing the manufacturer supplied driver in drive A: and press the ENTER key on the keyboard to continue. Setup will read the information on the floppy disk and will display the available driver choices as shown below.

   

7. Make sure the proper driver is selected and press the ENTER key on the keyboard to continue. Setup will begin loading the selected driver. A confirmation of the selected driver will be shown in an interactive display. If additional drivers are to be installed, press the S key on the keyboard, otherwise press the ENTER key on the keyboard to continue.

   

8. Setup will continue loading files for a short period of time. Once the necessary files have been loaded, a message will appear for a brief moment stating; "Setup is starting Windows 2000". In the interactive display that follows the user has the option of selecting whether to setup Windows 2000 (install), repair an existing installation, or exit the Setup process. Press the ENTER key on the keyboard to continue.

   

9. If the hard disk on which the operating system is being installed is new and unformatted, or if there is an operating system on the hard disk that the Windows 2000 Setup process cannot recognize, an interactive display will appear informing the user of this fact. The user then has the option of continuing with the Setup by pressing the C key on the keyboard quitting the Setup by pressing the F3 key on the keyboard. Read the caution information in the display and press the C key on the keyboard to continue if it has been determined that it is safe to do so. Otherwise, press the F3 key on the keyboard and make appropriate configuration changes or backup measures before restarting the Setup process again.

   

10. The Windows 2000 Licensing Agreement will appear in an interactive display. User the PAGE DOWN key on the keyboard to scroll through the text while reading it. After reading the Licensing Agreement, make sure the page has been scrolled all the way to the bottom and press the F8 key on the keyboard to agree with the Windows 2000 Licensing Agreement and continue with the installation.

    

11. The next interactive display will show the existing hard disks and partitions that are available in the computer. If there are multiple partitions or multiple hard disks they will be identified in the interactive display. Any unpartitioned space on the disk will need to be partitioned and formatted before it can be used. The interactive display example below shows a 40 Gigabyte Hard disk that is not partitioned. To use all of the existing unpartitioned space, press the ENTER key on the keyboard and continue at Step 12 of these procedures. In order to partition the disk for use press the C key on the keyboard and proceed to Step 13.

    

12. The interactive display shows that the new partition was created and must be formatted. To format the partition press the ENTER key on the keyboard and proceed to Step 16.

    

13. If selecting to create a partition, the next interactive display will provide the ability to define the size of the new partition. The default size selected will be the full amount of the unpartitioned space that was previously selected. Either reduce the size for the required partition from the number shown on the screen, or accept the default. Press the ENTER key on the keyboard to accept the settings and proceed.

    

14. The interactive display will once again show the available disk partitions. This time it will display the new partition that is available for installation. Select the newly created partition and press the ENTER key to proceed with the installation.

    

15. The interactive display will present the options for formatting the selected partition. The Evaluated Configuration requires the use of NTFS. Select NTFS and press the ENTER key on the keyboard to continue.

    

16. Windows 2000 Setup will start formatting the partition.

    

17. Once formatting is completed, Windows 2000 Setup will examine the disks and then proceed to copy the necessary operating system files to the hard disk.

    

18. When all files have been copied to the hard disk, Windows 2000 Setup will restart the computer. Make sure to remove any disk from the floppy drive. Allow Setup to count down to the restart, or press the ENTER key on the keyboard to restart the computer.

    

19. When the Computer reboots, the installation will continue in the GUI mode. The GUI mode installation phase is explained in the subsection that follows.

GUI Mode Installation Phase

This subsection addresses several of the key installation settings that are called for during the GUI mode phase of the Setup process. This phase allows selection of optional components to install and allows the setting of the Administrator password. There are a series of dialog boxes that Windows 2000 will use to collect configuration information for setting up the operating system. Most of the sample screen shots and dialog boxes presented in this subsection are based on a Windows 2000 Advanced Server installation. However, the setup process described also applies to Window 2000 Server and Professional product installations, unless otherwise specified.

GUI Mode Start Up Process

Once the Windows 2000 Setup completes its text mode installation phase, the computer will reboot and begin the GUI Mode phase of the installation.

1. The Windows GUI mode will begin by displaying the appropriate startup background for Windows 2000 Professional, Server, or Advanced Server.

   

2. A Windows 2000 Setup Wizard will appear. Click the Next button to continue, or wait a few seconds and the Wizard will start on its own.

   

3. The Windows 2000 Setup Wizard will begin by automatically detecting and installing hardware devices. This may take a few minutes and the screen may flicker during the process. During this process, the Next button on the Installing Devices setup window will be inactive. When this process completes, the Regional Settings dialog box will appear.

Specify regional options, name, product key, and licensing mode

The initial dialog box will allow configuration of regional settings. The default setting will be displayed; this will most likely be shown as English (United States). The next two dialog boxes will allow entering a user and organization name and the preferred licensing mode.

1. In the Regional Settings dialog box, verify or change the default settings for language, locale, and accessibility settings. Click the Next button to continue.

   

2. In the Personalize Your Software dialog box, type the user name and, optionally, the name of an organization. Click the Next button to continue.

   

3. In the Your Product Key dialog box, enter the 25-character product key for the Windows operating system being installed. Click the Next button to continue.

   

Select a licensing mode for Windows 2000 Server and Advanced Server

In the Licensing Modes dialog box, select the client-licensing mode, either Per seat or Per Server. If unsure of which mode to use, select Per Server because a change is allowed once from Per server to Per seat at no cost. A description of the Licensing Modes is provided below. Once the licensing mode is selected, click the Next button to continue with Setup.

• Per Server. Per server licensing means that each concurrent connection to this server requires a separate Client Access License (CAL). This means that at any one time, this Windows 2000 Server can only support a fixed number of connections. For example, if the Per server client licensing mode is selected with five concurrent connections, this Windows 2000 Server could only have five computers (clients) connected at any one time. Those computers would not need any additional licenses.

• Per Seat. If the Per seat mode is chosen, each computer that accesses a Windows 2000 Server will require a separate CAL. With one CAL, a particular client computer can connect to any number of Windows 2000 servers. This is the most commonly used licensing method for companies with more than one Windows 2000 Server.

Assign a computer name and Administrator account password

The Computer Name and Administrator Password dialog box provides a means of naming the computer so that it may be recognized on the network by a distinct name, and setting the password for the default Administrator account. The requirements and procedures for computer names and administrator passwords are provided in the subsections that follow.

Computer name

Enter a computer name in the Computer Name and Administrator Password dialog box. The recommended length for most languages is 15 characters or less. It is recommended that only Internet-standard characters be used in the computer name. The standard characters are the numbers 0 to 9, uppercase and lowercase letters from A to Z, and the hyphen (-) character. If Microsoft DNS Service is used on the network, a wider variety of characters can be used, including Unicode characters and other nonstandard characters such as the ampersand (&). However, using nonstandard characters might affect the interoperability of any non-Microsoft software on the network.

The maximum length for a computer name is 63 bytes. If the name is longer than 15 bytes (15 characters in most languages, 7 characters in some), pre-Windows 2000 computers will recognize this computer by the first 15 bytes of the name only. In addition, there are additional configuration steps for a name longer than 15 bytes.

Note: If this computer will be part of a domain, choose a computer name that is different from any other computer in the domain.

Administrator password

The Windows 2000 Setup program creates a user account on the computer called Administrator that has administrative privileges for managing the overall configuration of the computer. The Administrator account is intended for the person who manages this computer. For security reasons, it is necessary to specify a password for the Administrator account. Leaving Administrator password blank indicates no password for the account.

1. In the Computer Name and Administrator Password dialog box, next to Administrator password, type a password of up to 127 characters. For the strong password security, use a password of at least 8 characters, and use a mixture of uppercase and lowercase letters, numbers, and other characters such as *, ?, or $.

   Note: The Evaluated Configuration requires a minimum password length of 8 characters.

2. In Confirm password, type the password again.

3. Click Next to continue with Setup.

For security reasons, it is recommended that a strong password be assigned to the Administrator account.

The password typed in Confirm password must exactly match the password typed in Administrator password. Take special care to remember and protect the password.

Note: After Setup is completed, for best security, change the name of the Administrator account (it cannot be deleted) and keep a strong password on the account at all times.

Choose service components for Windows 2000 Server and Advanced Server

In the Windows 2000 Components dialog box, select the necessary components for the server being installed. This dialog box allows addition or removal of components during installation.

1. Components often needed on networks that use TCP/IP include DHCP, DNS, and WINS. To select these components, in the Windows 2000 Components dialog box, select the Networking Services check box, click Details, and then select the component or components needed. Subcomponents of networking services that must not be selected for the Evaluated Configuration include: COM Internet Services Proxy, Internet Authentication Service, QoS Administration Control Service, Simple TCP/IP Services, and Site Server ILS Services.

2. For server installations, Indexing Service, Internet Information Service (IIS), and Script Debugger are selected for installation by default in the Windows 2000 Components dialog box. However, the Evaluated Configuration must not have these components installed. Therefore, unselect the Indexing Service, Internet Information Service (IIS), and Script Debugger from the Components: window.

   

3. Click Next to continue with Setup.

If Setup is completed and it is later decided that other components are needed, they can be added at a later time. To do this, after running Setup, click Start, point to Settings, click Control Panel, and then double-click Add/Remove Programs. In Add/Remove Programs, click Add/Remove Windows Components.

Set the date and time

The Date and Time Settings dialog box allows selection of the appropriate time zone and adjustment of date and time settings, including the ability to set automatic adjustments for daylight savings time.

1. During Setup, in the Date and Time Settings dialog box, set the date, time, and time zone.

   

2. Set the system to automatically adjust for daylight saving time by selecting the Automatically adjust clock for daylight saving changes check box.

3. Click Next to continue with Setup. Windows Setup will begin installing networking software.

Configure network settings

The Networking Settings dialog box allows setting the configuration options for connecting to other computers, networks, and the Internet. Select either Typical settings or Custom settings based on the information gathered obtained from the network administrator. If uncertain, select Typical settings at this stage as it may be changed later.

• Typical Settings. When the Typical settings radio button is selected in the Networking Settings dialog box, Windows 2000 Setup checks to see if there is a Dynamic Host Configuration Protocol (DHCP) Server within the domain. If there is a DHCP server, that server provides the IP address. If there is no DHCP server within the domain, Automatic IP Addressing (APIPA) assigns an IP address. APIPA provides automatic IP address assignment for computers on networks without a DHCP server. A Windows 2000 Professional – based client assigns itself an IP address from a reserved class B network (169.254.0.0 with the subnet mask of 255.255.0.0), which cannot directly communicate with hosts outside this subnet, including Internet hosts. This option is most suitable for small, single-subnet networks, such as a home or small office.

• Custom settings. When the Custom settings radio button is selected in the Networking Settings dialog box, Windows 2000 Setup will open the Networking Components dialog box to allow customized configuration of network components including the selection of dynamic or static IP address and networking information.

For Evaluated Configuration installations, either static or dynamic IP addresses may be assigned. All servers should have a static IP address. To specify a static local IP address and settings needed for DNS and WINS:

1. In the Networking Settings dialog box, select the Custom settings radio button and click the Next button to continue.

2. In the Networking Components dialog box, click Internet Protocol (TCP/IP), and then click Properties.

   

3. In the Internet Protocol (TCP/IP) Properties dialog box, click Use the following IP address.

   

4. In IP address and Subnet mask, type the appropriate numbers. (If appropriate, specify the Default gateway as well).

5. Under Use the following DNS server addresses, type the address of a preferred DNS server and, optionally, an alternate DNS server. If the local server is the preferred or alternate DNS server, type the same IP address as assigned in the previous step.

6. If a WINS server will be used, click Advanced, and on the WINS tab, click Add to add the IP address of one or more WINS servers. If the local server is a WINS server, type the IP address assigned in step 5.

7. Click OK in each dialog box, and click Next in the Networking Components dialog box continue with Setup.

Join a domain or workgroup

The Workgroup or Computer Domain dialog box allows the option of joining a workgroup or a domain.

1. Select to join a workgroup or a domain by selecting either the No, this computer is not on the network... radio button for a workgroup, or the Yes, make this computer a member of the following domain: radio button for a domain.

   Note: If the computer is a server that is to become the first Domain Controller for a Domain, select the No, this computer is not on the network... radio button. The server can be converted later to a Domain Controller, as instructed in the "Convert Windows 2000 Server to a Domain Controller" subsection.

2. Enter the name of the workgroup or domain in the text box and click the Next button to continue with Setup.

3. Windows Setup will install all the previously defined Windows 2000 components.

4. Click the Finish button to reboot the computer.

   

• Workgroup. A workgroup is one or more computers with the same workgroup name. Any user can join a workgroup. If the computer will not be joining a network, specify that it will be part of a workgroup. To join a workgroup, provide an existing or new workgroup name.

• Domain. A domain is a collection of computers defined by a network administrator for security and administrative purposes. Check with the network administrator to determine the proper domain name information required for joining the domain. Joining a domain requires a computer account in the specified domain. Ask the network administrator to create a computer account in the domain prior to proceeding with Setup. Otherwise, have an authorized administrator create the account and join the domain during Setup.

Windows 2000 Server and Advanced Server Configuration Options

When the Setup wizard completes the installation of Windows 2000, the computer restarts. Setup has now performed the basic installation. For Windows 2000 Server and Advanced Server installations, the Configure Your Server program, which appears on the screen if logged on as the computer's administrator, makes further configuration easy. At this point Windows 2000 Server can be registered and configured as needed.

The initial Server choices page provides three options for configuring the server:

• This is the only server on my network. Selecting this option and clicking the Next button will present a page informing the administrator that Windows will automatically configure the server as a Domain Controller if the administrator chooses to proceed. To proceed and configure the server as a Domain Controller click the Next button and follow all subsequent directions. Otherwise, click the Back button and select another option.

  

• One or more servers are already on my network. Selecting this option and clicking the Next button will present the administrator with the Configure Your Server page. From this page, the administrator can choose from any of the options on the left hand column for step-by-step instructions in configuring the server as required.

  

• I will configure this server later. Selecting this option and clicking the Next button will present the administrator with the Configure Your Server page just as explained with the previous option.

Start Configure Your Server at any time by clicking Start, pointing to Programs, pointing to Administrative Tools, and then clicking Configure Your Server. The configuration options available through the Configure Your Server program are listed in Table 3.2.

Table 3.2 Server Service Configuration Options

Icon	Elements
	Active Directory User accounts, Domains, server roles, permissions, and other security functions.
	File Server Shared folders and other shared network resources.
	Print Server Printers, printer queues, and other elements related to printing.
	Web/Media Server Web sites, multimedia sites, FTP sites, and other functionality. To use these services, appropriate components in Windows 2000 Server must be installed.
	Networking Protocols, remote access, and routing.
	Application Server Component Services and related support for applications distributed across a network; also includes Terminal Services.
	Advanced Windows 2000 Resource Kit support tools and optional components such as Remote Installation.

Convert a Windows 2000 Server to a Domain Controller

To configure a Domain Controller after a server installation has been completed and after either the One or more servers are already on my network or the I will configure this server later options have been selected as mentioned above, use the following procedures:

1. Log on as an administrator (if not already logged on).

2. If the Configure Your Server page is not open, click Start, point to Programs, point to Administrative Tools, and then click on Configure Your Server.

3. From the left hand column of the Configure Your Server page, click Active Directory.

   

4. The Active Directory page will appear with important information about configuring Active Directory. Read the information and scroll down to the bottom of the page to click on the Start the Active Directory Wizard link.

   

5. The Active Directory Installation Wizard will appear. Click the Next button to continue.

   

6. Select whether the server will be a Domain Controller for a new Domain or whether it will be an additional Domain Controller within an existing Domain and click the Next button (be sure to read the warning message on selection of the later).

   

7. Follow all the subsequent instructions from the Active Directory Installation Wizard to complete the configuration of the Domain Controller.

   Note: During the Domain Controller configuration process through the Active Directory Installation Wizard, a dialog window will appear labeled Permissions. On this dialog window, the Permissions compatible with Windows 2000 servers radio button must be selected.

Windows 2000 Professional Network Identification Wizard

When the Setup wizard completes the installation of Windows 2000, the computer restarts. Setup has now performed the basic installation. For Windows 2000 Professional installations, the Network Identification Wizard will appear on the screen. The wizard is used to select the option of either requiring a user name and password every time someone logs on to the computer or allowing the computer to automatically log a specified user onto the computer upon startup. For the Evaluated Configuration users must be required to enter individual user names and passwords in order to access the computer and the network. Configure this network identification requirement as follows:

1. At the Welcome to the Network Identification Wizard window, click the Next button to continue.

   

2. The Users of this Computer window will appear. Select the radio button for the Users must enter a user name and password to use this computer option. Click the Next button to continue.

   

3. Click the Finish button to close the Network Identification Wizard. The Windows 2000 Professional logon window will appear.

Windows 2000 Service Packs and Hotfixes

Windows 2000 Service Packs for Windows 2000 Professional, Windows 2000 Server, and Windows 2000 Advanced Server provide the latest updates for the Windows 2000 operating systems. These updates are a collection of fixes in the following areas: application compatibility, operating system reliability, security, and setup. Each Service Pack update is cumulative, including all the updates contained in previous Windows 2000 Service Packs.

Windows 2000 post Service Pack Hotfixes provides product updates to address specific issues that may occur between Service Pack builds. All Hotfixes are generally rolled into each successive Service Pack build. For example, Windows 2000 Service Pack 3 contains all the updates in Service Pack 2 plus all of the post Service Pack 2 Hotfixes. The Evaluated Configuration must be configured with Service Pack 3 installed, along with the 326886 Post Service Pack 3 Hotfix that resolves the Flaw in Network Connection Manager security vulnerability in Windows 2000.

Windows 2000 Service Pack Encryption

Windows 2000 Service Packs 2 and higher support high encryption (128-bit) as a default, and will automatically upgrade the operating system from standard encryption (56-bit) if it has not been upgraded already. It is not possible to disable or uninstall this feature. If the Service Pack is removed after installation, the operating system will continue to use 128-bit encryption; it will not revert to back to 56-bit encryption.

Windows 2000 Service Packs 2 and higher add high encryption support for all Windows 2000 encryption-based services, including Kerberos, Encrypting File System, RAS, RPC, SSL/TLS, CryptoAPI, Terminal Services RDP, and IPSec. High encryption support is intended to improve the security of stored data and online transactions, as well as any other content shared over networks or the Internet.

Recommended Actions Prior to Installing Service Pack and Hotfix Updates

Before installing any Service Pack or Hotfix updates:

1. Close all applications.

2. Update the Emergency Repair Disk (ERD):

   • Click Start, point to Programs, point to Accessories, point to System Tools, and then select Backup.

   

   • On the Welcome tab, click Emergency Repair Disk.

   • In the Emergency Repair Diskette window, choose Also back up the registry to the repair directory to save the current registry files in a folder called \RegBack within the %systemroot%\Repair folder. This is useful if there is a need to recover the system in the event of a failure.

   • Click OK to create the ERD.

   • When the ERD is created, the files described in the table below will be copied from the %systemroot%\Repair folder to a floppy disk.

     File Name	Contents
     Autoexec.nt	A copy of %systemroot%\System32\Autoexec.nt, which is used to initialize the MS-DOS environment.
     Config.nt	A copy of the %systemroot%\System32\Config.nt, which is used to initialize the MS-DOS environment.
     Setup.log	A log of which files were installed and of Cyclic Redundancy Check (CRC) information for use during the emergency repair process. This file has the read-only, system, and hidden attributes, and it is not visible unless the computer has been configured to show all files.

3. Perform a full backup of the computer, including the Registry files.

4. Verify available disk space with update requirements, which are generally found in the corresponding Readme file.

5. If recent changes were made to the system it may be necessary to restart the computer prior to installing a Service Pack update.

Installing Service Pack and Hotfix Updates

Windows 2000 Service Pack 4 can be installed from a Service Pack CD, from a network drive, of from the Windows 2000 Service Pack Web site at:

https://www.microsoft.com/windows2000/downloads/servicepacks/

Detailed procedures for each installation method can be found in the Service Pack readme file. During the installation process, the Service Pack program installs its files in the computer and automatically creates a backup of the files and settings that the service pack installer changes and saves the backup files in a $NTServicepackUninstall$ folder within the %systemroot% folder.