Sender: Windows NTBugtraq Mailing List <NTBUGTRAQ@LISTSERV.NTBUGTRAQ.COM>
From: Russ <Russ.Cooper@RC.ON.CA>
Subject:      Alert: Windows NT 4.0 now C2 certified in 6 configs
To: NTBUGTRAQ@LISTSERV.NTBUGTRAQ.COM

-----BEGIN PGP SIGNED MESSAGE-----

I'm extremely back-logged over here, so please accept my apologies if
you haven't seen your message go through yet. I will be clearing
things up later today and through the weekend.

Meanwhile, Microsoft have announced today that they have received
their C2 certification for 6 different configurations of Windows NT
4.0 SP6a + "C2 Update" hotfix. They are;

- - Server operating as a primary domain controller
- - Server operating as a backup domain controller
- - Server operating as a member server
- - Server operating as a non-member server
- - Workstation as a domain member
- - Workstation as a non-domain member

I am in the process of preparing a summary review of the new
information they have provided which should be ready later today or
early tomorrow.

See;

<http://www.microsoft.com/security/issues/C2Evaluation.asp>

and in particular, read the C2SecGuide.exe Word document found on
those pages ("C2 Administrator's and User's Guide").

FWIW, this was the "thing" I referred to a couple of weeks ago when I
suggested you hold off downloading SP6a. My information at the time
indicated that the SP6a CD was going to contain the "C2 Update"
hotfix, as well as the C2SecGuide. I felt that if you downloaded SP6a
back then, and then wanted to implement any of the functionality
provided by the "C2 Update", you'd end up having to touch your
machines twice in a couple of weeks. I was hoping to save you that
effort.

I was under NDA not to disclose that MS was receiving the
certification, but I had not seen any details of what the "C2 Update"
included, so didn't know there were "fixes", or even issues.

More later...

Cheers,
Russ - NTBugtraq Editor

-----BEGIN PGP SIGNATURE-----
Version: PGP 6.0.2

iQCVAwUBOEgNHBBh2Kw/l7p5AQHFlAP9GGrH51LkYROmX4M4/op8a2t5MTTxC09n
toR8m36G7NSEjSPtBijeiEpOTyylCnBib5XLQR6pMrU5XlPAA3N2KH9DzGM1uH3x
Tcijl6CVt0NsSusBTgXnkOic9ZMg8N4kyPtgcssI6q2Iwi+RlXBsZaZndvZLfM3D
+svqOuF3Z30=
=KAJ4
-----END PGP SIGNATURE-----