Microsoft Adds to Its Arsenal of SQL Tools

By Lisa Vaas  |  Posted 2003-02-07 Print this article Print

Tools geared to help users sniff out Slammer vulnerabilities and install SQL server patches.

Microsoft Corp., still scrambling to help customers glue their systems back together following the SQL Server "Slammer" worm, on Friday will put out a new version of tools designed to help users figure out whether theyre at risk. In addition, the company plans to put out a third version sometime next week. There are three tools now posted on Microsofts site: SQL Scan, SQL Check and SQL Critical Update. The SQL Server 2000 Scan tool scans individual computers, Windows domains or IP address ranges for instances of SQL Server 2000 and MSDE 2000, identifying instances that may be vulnerable to Slammer. SQL Scan runs on Windows NT 4.0, Windows 2000 or Windows XP. SQL Check also scans computers for instances of SQL Server 2000 and MSDE 2000, stopping and disabling SQL Server and SQL Agent services, but on Windows 98 and Windows ME, it does not stop vulnerable instances. SQL Critical Update scans computers for vulnerable instances and also automatically updates affected files. It doesnt run on Windows 95, Windows 98 or Windows ME.
The most important upgrade to all three tools is that interfaces will give users a clearer idea of whats going on, according to SQL Server Product Manager Sheryl Tullis. Before, it was "a little difficult" to tell when the patch was done installing, she said. Also, Microsoft has clarified error message language so that users will have less confusion following instructions, said Tullis, in Redmond, Wash. Microsoft also plans to address Windows 98 and ME in both Version 2 and 3 of the tools.
Version 3 will be geared to small-business users and those who have MSD on their systems but arent database administrators and therefore dont know how to install patches, Tullis said. This attempt to address the laborious installation process of SQL Server patches is the latest of a few similar moves by Microsoft, which addressed the problem by releasing an automatic installation version of the patch last weekend, when Slammer first struck. Version 3 will have an interface customized for non-DBAs lack of experience with patch installation, Tullis said. Tullis said that the timing of the patch upgrades is deliberate in that Microsoft wants to give administrators time to patch systems over the weekend. "That way they dont have to take the systems down during critical business hours," she said. Microsoft also has long-term plans in place to address Slammer. Plans include re-releasing SQL Server 2000 packaged with Service Pack 3, which has been out since July but will now be available out of the box with the system it patches. This move is meant to address the catastrophic timing of the release of SP3, which came out the week before Slammer hit, giving DBAs insufficient time to install the patch. "We dont want any confusion about where we want customers to be—current users or future users," Tullie said. "Anybody who buys SQL Server 2000 will have SP3 right out of the box." It will take "several months" before the two are packaged, she said.
Lisa Vaas is News Editor/Operations for and also serves as editor of the Database topic center. Since 1995, she has also been a Webcast news show anchorperson and a reporter covering the IT industry. She has focused on customer relationship management technology, IT salaries and careers, effects of the H1-B visa on the technology workforce, wireless technology, security, and, most recently, databases and the technologies that touch upon them. Her articles have appeared in eWEEK's print edition, on, and in the startup IT magazine PC Connection. Prior to becoming a journalist, Vaas experienced an array of eye-opening careers, including driving a cab in Boston, photographing cranky babies in shopping malls, selling cameras, typography and computer training. She stopped a hair short of finishing an M.A. in English at the University of Massachusetts in Boston. She earned a B.S. in Communications from Emerson College. She runs two open-mic reading series in Boston and currently keeps bees in her home in Mashpee, Mass.

Submit a Comment

Loading Comments...
Manage your Newsletters: Login   Register My Newsletters

Rocket Fuel