Some services may not start or may not work correctly on a computer that is running Windows SBS after you install the DNS Server security update 953230 MS08-037

via Some services may not start or may not work correctly on a computer that is running Windows SBS after you install the DNS Server security update 953230 MS08-037.

If you manage any Microsoft server that is running DNS, be sure to read the referenced KB and exclude any IP ports that are needed by services you are using.

See below for part of the KB:

(List courtesy of Howard Cunningham)

1433-1434
1745-1745
1080-1080
1718-1720
3343-3343 (already in many systems)
1645-1646
1701-1701
1812-1813
2883-2883
4500-4500
1801-1801 (already in some systems)
4070-4071 (BES)
3500-3619

To configure the ReservedPorts registry value, follow these steps:

1. Click Start, click Run, type regedit, and then click OK.
2. Locate and then click the following subkey:
   HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesTcpipParameters
3. Right-click ReservedPorts, and then click Modify.
4. Type the range of ports that you want to reserve.Notes
   • You must type the range of ports in the following format:
     xxxx-yyyy
   • Do not replace the existing values. Instead, add the additional values.
   • To specify a single port, use the same value for x and for y. For example, to specify port 4000, type 4000-4000.
   • If you specify the continuous ports separately and if one port is reserved and is not used, the next port is not reserved correctly, and the port is used.
   • ISA Server settings only apply to Small Business Server 2000 or to Windows Small Business Server 2003 Premium Edition.
5. Click OK.Note If you receive the following warning message, click OK
   Warning:
   Data of type REG_MULTI_SZ cannot contain empty strings.
   Registry Editor will remove the empty string found.
6. Exit Registry Editor, and then restart the computer.

Notes

• You must restart the computer after you make these changes for the changes to take effect.
• If you are using any third-party applications on the server that might require you to use a static UDP port that is higher than port 1024, you should also add it to the list of reserved ports.