BackOffice Installer Tool Does Not Delete Password Cache File

ID: Q217004

The information in this article applies to:

Microsoft BackOffice Server version 4.0

SYMPTOMS

When you use BackOffice Server version 4.0 to install Microsoft SQL Server, Microsoft Exchange Server, or Microsoft Transaction Server, you are required to provide a user account and password during the installation of each product. This information is stored in the Reboot.ini file to automate part of the installation process. However, upon completion, the installation tool does not delete the Reboot.ini file and the file can then be accessed if:

A user has security permission to log on to the server locally.

The folder containing the Reboot.ini file is shared and a user has security permissions to that shared folder.

RESOLUTION

To prevent the Reboot.ini file from being read by an unauthorized user:

At a command prompt, change to the Program Files\Microsoft BackOffice folder on the partition where the BackOffice server was installed.

Type del reboot.ini, and then press ENTER.

NOTE: It will not be necessary to repeat this process at any future time unless the BackOffice installation tool is used again.

MORE INFORMATION

For more information on this issue, please see the following Microsoft Security Bulletin at:

http://www.microsoft.com/security/bulletins/MS99-005.asp

For additional security related information about Microsoft products, visit the Microsoft Security Web site at:

http://www.microsoft.com/security

Additional query words:

Keywords : kbinterop ntsecurity
Version : winnt:4.0
Platform : winnt
Issue type : kbprb