1.0 Introduction
1.1 What's in Service Pack 2?
1.2 Service Pack CD Contents
1.3 Service Pack Web Site
2.0 Installing the Service Pack
2.1 Before You Install the Service Pack
2.2 Space Requirements for the Service Pack
3.0 Uninstalling Service Pack 2
4.0 Installation Notes
4.1 Using the Integrated Installation Method to Install Windows 2000 and Service Pack 2
4.2 Service Pack Debug Symbols
4.3 Terminal Services Advanced Client
5.0 Release Notes and Known Issues
5.1 Encryption Level Changed to 128-bit with Service Pack 2 Installation
5.2 Uninstall Previous Beta Builds of Service Pack 2 Before Installing an Updated Build
5.3 Windows 2000 Datacenter Server Customers Must Contact OEMs for Service Pack Updates
5.4 Setupapi.log Entries Appear After Running Update.exe
5.5 Upgrading from Service Pack 2 Beta 1 Release to an Upgrade Build or
Final Release Build Is Not Supported
5.6 Winsock Direct Protocol
Information in this document, including URL and other Internet Web site references, is subject to change without notice. Unless otherwise noted, the example companies, organizations, products, people, and events depicted herein are fictitious and no association with any real company, organization, product, person, or event is intended or should be inferred. Complying with all applicable copyright laws is the responsibility of the user. Without limiting the rights under copyright, no part of this document may be reproduced, stored in or introduced into a retrieval system, or transmitted in any form or by any means (electronic, mechanical, photocopying, recording, or otherwise), or for any purpose, without the express written permission of Microsoft Corporation.
Microsoft may have patents, patent applications, trademarks, copyrights, or other intellectual property rights covering subject matter in this document. Except as expressly provided in any written license agreement from Microsoft, the furnishing of this document does not give you any license to these patents, trademarks, copyrights, or other intellectual property.
© 2000 Microsoft Corporation. All rights reserved.
Active Directory, ActiveX, Microsoft, Win32, Windows, and Windows NT are either registered trademarks or trademarks of Microsoft Corporation in the United States and/or other countries.
This product contains graphics filter software; this software is based in part on the work of the Independent JPEG Group.
The names of actual companies and products mentioned herein may be the trademarks of their respective owners.
This document provides information about Service Pack 2 (SP2) for Windows 2000 Professional, Windows 2000 Server, Windows 2000 Advanced Server, and Windows 2000 with Server Appliance Kit. Review this document to better understand the scope of this service pack, how to install Service Pack 2, and the issues that it addresses.
Service Pack 2 is a collection of updates for the Windows 2000 operating system. You can apply this service pack easily while Windows 2000 is running. Service Pack 2 includes the updates contained in Service Pack 1. If you have not installed Service Pack 1, you only need to install Service Pack 2 to get all of the Windows 2000 updates.
To assist customers who are deciding whether to upgrade to Service Pack 2, Microsoft provides extensive documentation about Service Pack 2. This documentation gives customers the opportunity to analyze whether the Service Pack 2 contents justify the necessary testing and deployment resources. For the most current list of files affected by this service pack, see the Microsoft Windows Beta Web site.
Important
When you install Service Pack 2, your system security will be upgraded. Any system at a standard encryption level (56-bit) will be moved to a high encryption level (128-bit) in order to offer better online and local security, and bring your system on par with the new worldwide standard of 128-bit encryption. After this upgrade is made, you will not be able to return to 56-bit encryption on your system even if you uninstall Service Pack 2.
If you have already installed Service Pack 1, Microsoft recommends that you install Service Pack 2 without uninstalling Service Pack 1.
Service Pack 2 is not a required upgrade; however, some applications might require Service Pack 2 to run correctly.
Before you apply Service Pack 2, see Before You Install the Service Pack.
You cannot use Windows 2000 integrated installations to update Windows Millennium Edition, Windows 2000 Professional, Windows 2000 Server, Windows 2000 Advanced Server, or Windows 2000 with Server Appliance Kit.
Service Pack 2 is a collection of updates for Windows 2000. These updates pertain to:
Service Pack 2 is available from the Windows 2000 Service Pack 2 CD, which includes:
Important The Terminal Services Advanced Client is not part of the Service Pack 2 installation; it must be installed separately. For more information about using and installing TSAC, see \ValueAdd\TSAC\Readme.htm on your Service Pack 2 CD or the Microsoft Windows 2000 Service Pack Web site under "Learn More".
The Microsoft Windows Beta Web site includes all of the items listed under Service Pack CD Contents. There are also two installation options available from this Web site:
For more information about each of these installation options, see Installing from the Web.
1.3.1 The Express Installation
This installation option detects your system components and installs only those files that are necessary to update the destination computer. This method ensures the entire service pack is loaded on your system. It is recommended for end users who want to reduce their download time.
This installation option downloads all of the Service Pack 2 files to your computer. This is an ideal download mechanism for administrators who want to set up a network share for deployment.
1.4 Service Pack 2 128-bit Encryption
Service Pack 2 supports high encryption (128-bit) as a default, and will upgrade your system from standard encryption (56-bit) if it hasn't been upgraded already. Service Pack 2 adds high encryption support for all Windows 2000 encryption-based services, including Kerberos, Encrypting File System, RAS, RPC, SSL/TLS, CryptoAPI, Terminal Services RDP and IPSec. High encryption support is intended to improve the security of stored data and online transactions, as well as any other content you share over networks or the Internet.
To determine the encryption level you are currently using in Internet Explorer, on the Help menu, click About Internet Explorer. In the About Internet Explorer dialog box, the encryption level is listed next to Cipher Strength.
Important Uninstalling Service Pack 2 does not revert your system to a standard encryption level. You can always uninstall Service Pack 2, but your system will retain high encryption support.
Windows Service Pack 2 is eligible for export from the U.S. to all customers worldwide, except to US embargoed destinations. Other countries may exercise separate jurisdiction over the import, export, or use of encryption products. Users who install Service Pack 2 should observe any local regulations that may apply to the distribution or use of encryption products. Details on exporting Microsoft products are available at the Microsoft Web site at http://www.microsoft.com/exporting/.
1.5 Application Compatibility Modes
Compatibility Modes provide environments for applications that were designed
to run on Windows 95 or Windows NT 4.0. These modes resolve
several of the most common issues that prohibit older applications from
working correctly on Windows 2000. Applications that experience problems after
upgrading from Windows 95 or Windows NT 4.0
to Windows 2000 might function better by starting in one of these compatibility
environments.
Windows 2000 uses the Compatibility Mode technology to ensure
out-of-box compatibility with many popular applications. However, advanced users
can also use this technology to provide solutions for
their own applications.
1.6 Additional Windows 2000 Service Pack Resources
For additional information about the Windows 2000 operating system and this service pack, see the following resources:
Read these installation instructions carefully before you install Service Pack 2. Installation methods may have changed from previous service packs.
Note If you want to install this service pack on multiple computers, see Microsoft Windows 2000 Service Pack Installation and Deployment Guide (SPDeploy.doc) located in the \Support\Tools\ folder on your Service Pack 2 CD. This guide provides detailed instructions for installing Service Pack 2 by using update and integration installation methods.
2.1 Before You Install the Service Pack
Before you install this service pack:
"The system must be restarted before installing the Service Pack, to allow some prior file update operations to complete. (These operations were previously scheduled by some other install or uninstall operation.)"
2.2 Space Requirements for the Service Pack
The following sections outline the recommended space requirements when installing Service Pack 2 with Windows 2000 Professional, Windows 2000 Server, Windows 2000 Advanced Server, and Windows 2000 with Server Appliance Kit.
2.2.1 Space Requirements for Windows 2000 Professional
The working space, noted below, is required for files used in the installation process. The space these files require is temporary and does not contribute to the total space requirement. The space required for the uninstallation files, noted below, is used to store the files and settings that are changed during service pack installation. These files are required if you want to uninstall the service pack later.
Important The information provided here represents the space requirements for a typical installation of Windows 2000 Professional with Service Pack 2. If you already have a service pack folder from installing Service Pack 1, the space requirements are approximately 100 MB less.
| Space Use | Space Required for Installing Service Pack 2 |
| Service Pack only | 10 MB for the service pack 170 MB for the %windir%\ServicePackFiles containing the extracted SP2 files |
| Subtotal: | 180 MB |
| Working space (this space used during installation only and does not contribute to overall space requirement for your computer) | 190 MB |
| Uninstallation files* | 205 MB |
| Total: | 385 MB |
The working space, noted below, is required for files used in the installation process. The space these files require is temporary and does not contribute to the total space requirement. The space required for the uninstallation files, noted below, is used to store the files and settings that are changed during service pack installation. These files are required if you want to uninstall the service pack later.
Important The information provided here represents the space requirements for a typical installation of Windows 2000 Server, Windows 2000 Advanced Server, or Windows 2000 with Server Appliance Kit with Service Pack 2. If you already have a service pack folder from installing Service Pack 1, the space requirements are approximately 100 MB less.
| Space Use | Space Required for Installing Service Pack 2 |
| Service pack only | 30 MB for the service pack 205 MB for the %windir%\ServicePackFiles containing the extracted Service Pack 2 files |
| Subtotal: | 235 MB |
| Working space (this space used during installation only and does not contribute to overall space requirement for your computer) | 250 MB |
| Uninstallation files* | 260 MB |
| Total: | 495 MB |
You can install Service Pack 2 from the Service Pack 2 CD, from a network drive, or from the Microsoft Windows Beta Web site. During the installation process, the W2ksp2.exe program installs the service pack files on your computer and automatically creates a backup of the files and settings that the service pack installer changes and saves them in a $NTServicepackUninstall$ folder in your systemroot folder.
To stop W2ksp2.exe from automatically creating a back-up
Important If you turn off the automatic backup option for W2ksp2.exe, you cannot use the uninstall Service Pack 2 mechanism and, therefore, cannot uninstall the service pack.
2.3.1 Installing from the Service Pack 2 CD
This method starts W2ksp2.exe from the CD by means of the autorun.
To install from the Service Pack 2 CD
There are two installation options for Service Pack 2 available from the Web:
For more information on these options, see Service Pack Web Site.
To download the express installation
The express installation automatically detects which files need to be updated and then copies the appropriate files to a temporary folder on your computer. It then installs those files and updates your computer.
Note Internet Explorer 5 is installed with Windows 2000. If you use a Web browser other than Internet Explorer 5 or later, you may be unable to install Service Pack 2 with the express installation option. You can still install Service Pack 2 by downloading the entire service pack from the Web to your computer and running W2ksp2.exe locally.
To download the network download
If you download the network download of the service pack, you should read this section completely before you extract and install the service pack.
During the service pack download, the compressed service pack executable file (W2ksp2.exe) is saved on your hard disk. You can extract this compressed program file with or without starting the installation program.
To extract the compressed program file and start the installation program
To extract the compressed program file without starting the installation program (Update.exe)
Note If W2ksp2.exe is started with any other command-line switches, it assumes that these switches are for Update.exe and "forwards" them accordingly.
For more information about the command-line switches, see Using Command-Line Switches with Update.exe.
2.3.3 Installing from a Network Drive
This is one of the supported methods for redistributing the service pack by means of a company server.
To install from a network drive
2.4 Using Command-Line Switches with Update.exe
The following table identifies the command-line switches that Update.exe supports.
| Command-Line Switch | Description |
| -u | Uses unattended Setup mode. |
| -f | Force other applications to close at shutdown. |
| -n | Do not back up files for uninstall. |
| -o | Overwrite original equipment manufacturer (OEM) files without prompting. |
| -z | Do not restart the computer when the installation completes. |
| -q | Use quiet mode—no user interaction required. |
| -s:folder name | Use integrated installation mode (to a distribution server location). |
For example, if you want to install Service Pack 2 in quiet mode and you want all other applications to close when the computer shuts down, type update.exe -q -f
Note If you use the -q or -u switch to run Update.exe in quiet or unattended Setup mode and you want to update OEM-supplied files, you must also use the -o switch. If you do not use the -o switch, files such as the hardware abstraction layer (HAL) and disk miniport drivers are not updated.
This service pack contains an uninstall mechanism that you can use to restore your computer to its previous state. When you run W2ksp2.exe to install Service Pack 2, a subfolder named $NTServicepackUninstall$ is automatically created in your systemroot folder. To turn off this W2ksp2.exe option, see Installing Service Pack 2.
Important If you turn off the automatic backup option for W2ksp2.exe, you cannot use the uninstall Service Pack 2 mechanism and, therefore, cannot uninstall the service pack.
You can uninstall Service Pack 2 by using Add/Remove Programs in Control Panel or by running the uninstall program from the command prompt.
Important If you install any programs or services that require Service Pack 2 or that have fixes contained in Service Pack 2, uninstalling Service Pack 2 could adversely affect those programs.
To uninstall Service Pack 2 by using Add/Remove Programs
To uninstall Service Pack 2 from the command prompt
This section provides specific release information about Service Pack 2.
4.1 Using the Integrated Installation Method to Install Windows 2000 and Service Pack 2
The Update.exe program supports an installation that integrates the service pack with the Windows 2000 installation. You no longer need to perform separate installations of the operating system and the service pack.
Important You cannot use Windows 2000 integrated installations to update Windows Millennium Edition, Windows 2000 Professional, Windows 2000 Server, Windows 2000 Advanced Server, or Windows 2000 with Server Appliance Kit. For more information about this issue, visit the Microsoft Knowledge Base at the Microsoft Personal Online Support Web site.
For more information about the integration installation method, see Microsoft Windows 2000 Service Pack Installation and Deployment Guide (SPDeploy.doc) located in the \Support\Tools\ folder on your Service Pack 2 CD.
4.2 Service Pack Debug Symbols
You can install the service pack debug symbols files from \Support\Debug\Dbg_sp.htm on your Service Pack 2 CD. During the installation process, the service pack debug symbols files are copied over the existing versions of the original debug symbol files.
Note Debug symbol files are recommended for system administrators and other advanced users to diagnose application and computer failures. However, debug symbol files are not required for correct operation of your computer.
For more information about debugging on Windows 2000, visit the Microsoft Debugging Tools Web site.
4.3 Terminal Services Advanced Client
Your Service Pack 2 CD includes Microsoft Terminal Services Advanced Client (TSAC). TSAC extends the Terminal Services solution to Web applications and provides administrative tools for managing Terminal Services connections and deploying clients.
Important Terminal Services Advanced Client is not part of the Service Pack 2 installation; it must be installed separately. For more information about using and installing TSAC, see \ValueAdd\TSAC\Readme.htm on your Service Pack 2 CD or the Windows 2000 Service Pack Web site under "Learn More".
Terminal Services Advanced Client consists of the following three components, each with its own setup program:
Important The Terminal Services Advanced Client ActiveX Client Control must be installed on a Web server running Windows NT Server 4.0 or later and Internet Information Services (IIS) version 4.0 or later. To use the sample pages, Active Server Pages (ASP) must be enabled on the Web server. Users can download the control and view the Web pages from any supported client computer (Windows 98, Windows NT 4.0, or Windows 2000).
Important Before you can install Windows Installer Setup packages on a client computer, the client computer must first have the Windows Installer service installed. Windows 2000 comes with Windows Installer already configured. To install Windows Installer on computers running Windows NT 4.0, Windows 98, or Windows 95, use the Windows Installer Setup program (InstMSI.exe). You can download a copy of this Setup program from the Microsoft Product Download Web site at: http://www.microsoft.com/msdownload/platformsdk/instmsi.htm
For more information about using and installing TSAC, see \ValueAdd\TSAC\Readme.htm on your Service Pack 2 CD or the Windows 2000 Service Pack Web site under "Learn More".
Read these notes carefully before you install the service pack. General release note items found after Beta 1 will be posted at the Microsoft Windows Beta Web site.
5.1 Encryption Level Changed to 128-bit with Service Pack 2 Installation
Service Pack 2 supports high encryption (128-bit) as a default, and will upgrade your system from standard encryption (56-bit) if it hasn't been upgraded already. Service Pack 2 adds high encryption support for all Windows 2000 encryption-based services, including Kerberos, Encrypting File System, RAS, RPC, SSL/TLS, CryptoAPI, Terminal Services RDP and IPSec. High encryption support is intended to improve the security of stored data and online transactions, as well as any other content you share over networks or the Internet.
To determine the encryption level you are currently using, in Internet Explorer, on the Help menu, click About Internet Explorer. In the About Internet Explorer dialog box, the encryption level is listed next to Cipher Strength.
Important Uninstalling Service Pack 2 does not revert your system to a standard encryption level. You can always uninstall Service Pack 2, but your system will retain high encryption support.
Windows Service Pack 2 is eligible for export from the U.S. to all customers worldwide, except to US embargoed destinations. Details on exporting Microsoft products are available at http://www.microsoft.com/exporting/. Other countries may exercise separate jurisdiction over the import, export, or use of encryption products. Users who install Service Pack 2 should observe any local regulations that may apply to the distribution or use of encryption products.
For more information, visit the Microsoft Knowledge Base at the Microsoft Personal Online Support Web site.
5.2 Uninstall Previous Beta Builds of Service Pack 2 Before Installing an Updated Build
Uninstall any previous beta builds of Service Pack 2 before installing an updated build (or final release build). A beta build installed over another beta build is not supported.
5.3 Windows 2000 Datacenter Server Customers Must Contact OEMs for Service Pack Updates
If you are a Windows 2000 Datacenter Server customer, please contact your original equipment manufacturer (OEM) for information on how service packs can be deployed on your systems. OEMs test all upcoming service packs beta releases. Customers should not test any Windows 2000 service pack beta releases on their production computers.
5.4 Setupapi.log Entries Appear After Running Update.exe
After you install Windows 2000 Service Pack 2 (SP2), the Setupapi.log file might contain entries such as:
"Copying file \\Name\Xcopy.ex_ to C:\Winntsrv\System32\Dllcache\Xcopy.exe
An unsigned or incorrectly signed file (\\Name\Xcopy.ex_) was installed. Error 0x800b0003: The form specified for the subject is not one supported or known by the specified trust provider."
This entry is an informational statement that does not affect functionality. For more information on this issue, visit the Microsoft Knowledge Base at the Microsoft Personal Online Support Web site and view the following article.
5.5 Upgrading from Service Pack 2 Beta 1 to an Upgrade Build or Final Release Build Is Not Supported
Upgrades from Service Pack 2 Beta 1 to an upgrade build or the final release build are not supported upgrade paths.
To realize the full potential of the Winsock Direct (WSD) protocol, customers need the option of deploying it across all tiers of their 3-tier environment (Web, application, and data). So, in addition to being available on Windows 2000 Datacenter Server, through Service Pack 2 for Windows 2000, it will now be enabled on Windows 2000 Advanced Server. WSD applies only to customers deploying a System Area Network (SAN) across a server farm. In other words, WSD is used only if a SAN card and the WSD drivers for that card have been installed. If both of these components are installed, standard Windows Sockets-based applications will communicate over the SAN using the WSD infrastructure. This can substantially reduce the CPU utilization on the servers (when compared to using a TCP/IP infrastructure) resulting in reduced latency and increased capacity.
Note that the WSD optimized path does not require any application changes. Existing applications that are written to the Winsock standard are ready to take advantage of this service. Specifically, existing binaries that use Winsock SOCK_STREAM APIs will automatically use WSD. If the application uses SOCK_DGRAM, it will continue to be processed by the conventional networking protocol stack.