Microsoft Windows Server 2003 SP1 incorporates a set of security enhancements and tools designed to help administrators more effectively manage the security of their current Server 2003 install base and new server deployment. 

Technical details about the deployment process for Dell™ PowerEdge™ servers can be found in the Dell Power Solutions May 2005 Issue Guide to Deploying Microsoft Windows Server 2003 Service Pack 1 on Dell PowerEdge Servers.

The Windows 2003 family products that can install Microsoft Windows 2003 Service Pack 1 are:

• Windows Server 2003 Web Edition
• Windows Server 2003 Standard Edition
• Windows Server 2003 Enterprise Edition
• Windows Storage Server 2003 (Running on Dell PowerVault NAS Appliances)

	Note:
	This Service Pack does not apply to the following Windows Server Products: Windows Small Business Server 2003 Windows Server 2003 x64 Editions

• Before installing SP1 on the systems listed below (Figure 1), apply the Microsoft Hotfix.
  
  
  

  	Note:
  	For more information on the Hotfix, refer to the following Microsoft Knowledge Base article: "A fix is available for a registry problem on Dell PowerEdge servers that have specific nonnative disk controllers and factory installed versions of Windows Server 2003" Article ID : 898792

  
  
  
  
  Figure 1: Systems requiring Hotfix
  
  
• After applying the hotfix, it is recommended that the system BIOS, firmware, and device drivers be updated. The latest system BIOS, firmware and device drivers for Dell systems can be found at Dell Support.
  
  
• Dell OpenManage version 4.4 is the first version that supports SP1. OpenManage should be upgraded to version 4.4 before installing SP1.
  
  
• SP1 does not enable Windows Firewall by default unless it was enabled on the system before installing SP1. If Windows Firewall is enabled, be aware that the Windows Firewall policy may break any remote system management capability due to locked-down network security policy.
  
  
• For security reasons, after a new installation Windows Server 2003 with SP1 integrated, Windows Firewall will be turned on until the Post-Setup Security Update is run. Until the Post-Setup Security Update is complete, remote server management is blocked. To make remote management possible, the server will have to be accessed physically to finish the security update or use a Dell Remote Access Card.
  
  
• Application compatibility is the most common issue after installing SP1. It is recommended that applications be tested on a SP1 test system before rolling out SP1 to production servers. Before resolving identified application compatibility issues, applications can be added to the DEP exception list.

Major new features and changes that are important for your SP1 deployment:

• Security enhancement: Data Execution Prevention leveraging Intel® eXecution Disable (XD) technology, Windows Firewall.
• Security Tools: Post-Setup Security Update, Security Configuration Wizard.
• 64GB increased memory support for Windows Server 2003 Enterprise Edition.
• New Power Option to support Enhanced Intel SpeedStep® Technology (EIST).
• 1TB or larger dynamic disk support.

 Download Microsoft Windows 2003 Service Pack 1 from the following sources.

• Automatic Updates: If Automatic Update is turned on in the properties page of My Computer, your operating system will download SP1 automatically from Microsoft when available and prompt you to start installation.
• Download from the Microsoft Download Center at Windows Server 2003 Service Packs.
• Update from Windows Update.

The top issues after installing after installing Microsoft Windows 2003 Service Pack 1 are as follows:

• Servers pre-installed with Microsoft Windows Server 2003 and non-native mass storage drivers may experience a blue screen (STOP 0x00000051 (REGISTRY_ERROR)) after upgrading to Service Pack 1. To correct this condition, please download and execute the Dell Registry Update Tool found here (instructions for use are in the read-me file): ftp://ftp.dell.com/utility/F6_regfix_1026.exe
  
  
• Specific Dell™ PowerEdge™ hardware configurations (see the section What Should I Do Before Installing Microsoft Windows Server 2003 Service Pack 1?) with Dell factory-installed Windows Server 2003 operating systems are prone to a registry issue when upgrading to Windows Server 2003 Service Pack 1. These configurations are required to apply the Microsoft Hotfix before upgrading to Service Pack 1. Click here to download the hotfix.
  
  
• Server remote management issues after enabling Windows Firewall.
  Because Windows Firewall enables network port blocking and application level protection, after enabling Windows Firewall, the existing server remote management application may not function correctly. For more information see the Windows Firewall Setting section of the Windows Server 2003 Technical reference at the Microsoft Windows Server TechCenter.
  
  
• Server remote management issues following a new install of the operating system due to Post-Setup Security Update.
  Post-Setup Security Update is a security enhancement wizard that allows a system administrator to install all necessary security patches after a fresh install of Windows Server 2003. Before completing this wizard, Windows blocks all incoming network communication, which may cause the remote server remote management application malfunction. The wizard must be completed via either Dell Remote Access Card remotely or on the server console locally before Windows allows any incoming network communication. For more information on Post-Setup Security Update, go to the Post-Setup Security Updates section of Changes to Functionality in Microsoft Windows Server 2003 Service Pack 1 at the Microsoft Windows TechCenter.
  
  
• Windows closes an application due to Data Execution Prevention (DEP) application compatibility issues.
  Data Execution Prevention is a new feature in Windows Server 2003 Service Pack 1 which leverages both hardware and software technologies that help protect system memory against malicious code exploits. An existing running application may be stopped by this protection. If you encounter this issue in your application, you can configure to selectively disable DEP for your application. For more information on DEP, go to changes to The Data Execution Prevention section of Changes to Functionality in Microsoft Windows Server 2003 Service Pack 1 at the at the Microsoft Windows TechCenter.

Additional information about Microsoft Windows Server 2003 Service Pack 1 and associated files can be found at:

• Dell and Microsoft Alliance Page
• Dell Power Solutions
• The latest driver, firmware, and BIOS for your system can be downloaded from Dell Support.
• The latest Dell operating system tech sheets and User Guides can be found at Dell User Guides.
• Microsoft Windows Server 2003 home page.
• Technical Overview of Windows Server 2003 Service Pack 1 from Microsoft TechNet.