Exchange 2003 new security patch. will it break BES?
 

Has anyone seen this yet? It's a new security patch released not long ago.

MS09-003xxx58; Description of the security update for Exchange 2000 Server SP3 and Exchange Server 2003 SP2

Does anyone know whether this will break BES functionality since it looks like it will update CDO.DLL and EMSMDB32.DLL?

we actually have auto updates on and this is not yet installed. I would like to know as well.

I'm hesistating to install this. I should give RIM a call to verify. Our security group is pushing hard to install this. If this patch does break BES because of the CDO/EMSMDB32/MAP32 version mismatch, we will not do it.

Since the CDO.dll will change I would hold off unless you have a test area to prove it works.

This will affect BES and message delivery.

I am waiting this one out for a while.

Im on the phone with RIM now, and the verdict is................

we have installed the patch and nothing has happened to our BES. been running it since tuesday.

Rim has NOT 100% said that the patch is ok, as of now there are no known issues at this time and they will troubleshoot any issues with you if you have them.

BTW ill be installing it this weekend.

Just got this official email from them:

Hello,

Your Service Request has been logged and the following course of action has been
provided in response to your inquiry. If you have any questions concerning this request,
please reply to this email within the next three (3) business days.

Details:
TX1 - BESX - Question regarding Microsoft Critical Update - Security Patch MS09-003

Resolution:
Still testing with patch, but will continue to support if applied in environment.



Regards,

BlackBerry Customer Support
1-877-255-2377 (North America Toll Free)
0808 100 7466 (Toll Free UK Only)
+44 1753 558400 (Outside UK)
1-519-888-6181 (Worldwide)

Did you reregister the upgraded DLL's on BES?

i haven't changed anything on the bes in regards to dll's. now i don't think i want to.

I just called RIM and they said that they haven't fully tested it. They will support us and resolve any issuses if problems do arise after the patch installation.

This is their reply:

"Resolution:
Microsoft Security Patch MS09-003 does not necessarily have to be applied to the Exchange System Manager installed on the BlackBerry Enterprise Server if the patch is applied to the Exchange 2003 server. Any BlackBerry ramifications of installing the Microsoft Security Patch MS09-003 are unknown and currently under investigation by BlackBerry."

WSUS applied it to both Exchange servers, it did NOT apply it to the BES though, which leads me to believe it doesn't require it. I've reset all machines and no problems found.

BTW, if you do plan on installing the patch, it WILL dismount your stores (or at least cut off everyone from email) as soon as you start applying it. It requires a restart as well.

Has anyone who installed this validated that wireless calendar functionality still functions properly?

If you have a newer CDO on Exchange then BES it usually breaks one of the wireless direction updates.

So far this week i have been getting my calendar notifications on my BB. I however haven't added anything new either in exchange or on my device. I shall try now.

ok so i added a test meeting using my BB. it showed up in outlook so I am fairly confident that calendar synch is working still.

Yup - no problems

It broke it for me. Our server, every 2-3 hours like clockwork, now drops the bbadmin security account from Send As permissions. I have to go back in and add it manually, stop and restart the Information Store and the Blackberry Router services, and it'll work for another 2-3 hours. I'm asking MS about this now. Anyone have any ideas on this one?

Hello all,

I'm also curious if this patch is officially supported by RIM and whether is also required on the BES server or not.

Is this type of information usually posted somewhere as RIM officially provides a statement about this patch and BES compatibility? I'll just check there in the future...

Thanks in advance

That sounds like the besadmin account has been added to an admin group.

Ok so all my Exchange boxes are patched, my BESs aren't and all is fine. The question is, are RIM happy leaving the CDOs out of sync now or are they going to do something which allows us to keep the BES at the same level as Exchange (whether BES needs this patch or not). i.e. I am wondering how long it will be before someone unwittingly updates the CDO.dll on a BES to ensure they are at the same level as Exchange, then watch it all start to melt....

Well crud. It had been. It wasn't setup that way before the patch was applied. Changing it now. Thanks for the heads-up.