Applies To
Express Software Manager version 6.1 and higher

Summary
Microsoft has released two service patches for MSDE 2000 (SQL Server). You should apply the most recent patch (SQL SP3) to close security problems such as those caused by the "Slammer" or "Sapphire" worm.

Express Software Manager and Microsoft SQL Server 2000 Desktop Engine (MSDE)
Recent publicity about the “Slammer” worm, which targets unpatched SQL Server and MSDE installations, has raised concerns among some Express Software Manager administrators. While such worm attacks are unlikely on systems that are not connected to the internet, Express Metrix recommends following the steps outlined by Microsoft, and updating any system when new security patches are released.

This Technical Note describes the steps necessary to update a copy of Express Software Manager-installed MSDE 2000 with Service Pack 3. For more information about SQL Server 2000, including security risks and available Service Packs, see the Microsoft SQL Server Web site:

http://www.microsoft.com/sql/default.asp

1. Stop the MSSQLSERVER service on your computer.

2. Down the SQL2KDeskSP3.exe file from the Microsoft Web site:

http://www.microsoft.com/sql/downloads/2000/sp3.asp

Note: At the time this Technical Note was written, there were 3 different files available from this link: sql2kasp3.exe, SQL2KDeskSP3.exe, and sql2ksp3.exe. SQL2KDeskSP3.exe applies to MSDE 2000.

3. Run SQL2KDeskSP3.exe to extract the files it contains. By default the program offers to extract the files to a folder called \sql2ksp3\MSDE.

4. Run the Setup.exe program in the MSDE folder to install the service pack.

Use the following command syntax:

<drive>:\sql2ksp3\MSDE\Setup.exe /upgradesp SQLRUN INSTANCENAME=<instance_name> SECURITYMODE=SQL UPGRADEUSER=<username> UPGRADEPWD=<password>

Express Software Manager uses the instance name, MSSQLSERVER. The username and password are the name and password you use to access the database in Express Software Manager.

For example, if you are using the “sa” account and a password of “esm02”, your command would be:

Setup.exe /upgradesp SQLRUN INSTANCENAME=MSSQLSERVER SECURITYMODE=SQL UPGRADEUSER=sa UPGRADEPWD=esm02

5. You may be prompted to restart your computer in order to complete the update to MSDE 2000.

Related Technical Notes

1606	Maintaining Your SQL Database With OSQL
9989	Express Software Manager 6.x Technical Notes