Microsoft Windows NT 4.0 [Build 1381] (July 1996 - December 2004)

Overview

PREFACE

Installing Windows NT from CD, HDD or floppies as usual on modern hardware (I mean Pentium4-based and later PCs) it is a difficult task due to installer incompatibility with faster/newer hardware & CPUs. That doesnt mean that Windows NT cannot RUN on such hardware. You CAN install Windows NT in virtialization software (QEMU, VirtualBox, VmWare, VirtualPC, Bochs ...) and then copy intalled OS image on "real" PC harddrive.

Making Windows NT 4.0 up-to-date MINI FAQ


Problem 1: Installing NT 4.0 on new PC's (PII/III-P4 or newer Class CPUs) (remove 8gb HDD limitation, enable AGP support, successful booting on new systems etc.)
Solution: NT Service Pack Integration (Slipstreaming) Guide
Prerequisites: Let's start:
  1. This guide can also be used to update installation media for ALPHA/MIPS/PPC architecture on i386/AMD64 compatible computer. Just replace \I386 to either \ALPHA, \MIPS or \PPC folder
  2. Make directory C:\NT4INST. Extract there SSKIT.ZIP.
  3. Make directory C:\NT4INST\SP6. Extract there Service Pack 6a: 
    sp6i386.exe /x
    or for Terminal Server (Service Pack 6): 
    wtsi386.exe /x
  4. Of course you can also copy there any newer files from other (newer) updates overwriting older ones, like from SRP package or WindowsNT4Server-KB835732-x86-ENU.EXE mentioned below. It is discovered that you MUST rename some files in C:\NT4INST\SP6 directory before using SSKIT, if you are got files from : 
    oem*.wks to oem*.inf ; Service Pack 6a and updating NT4 Workstation.
oem*.srv to oem*.inf ; Service Pack 6a and updating NT4 Server/Server Enterprise Edition
oem*.srv to oem*.inf ; Service Pack 6 and updating NT4 Terminal Server.
browser2.dll to browser.dll ; SRP package
  5. Make directory C:\NT4INST\I386. Copy there \I386 directory content (with sub-dirs) from NT4 Distributive.
  6. Make directory C:\NT4INST\OUT. It is a temporary directory for SSKIT.
  7. Make directory C:\NT4INST\SRC\I386. There will be placed final distributive.
  8. Go to C:\NT4INST directory. Start SSKIT from command line: 
    sskit.exe C:\NT4INST\SP6\ C:\NT4INST\I386\ C:\NT4INST\OUT\
  9. After SSKIT make its work:
  10. Copy nt4pack archive content from folder I386 to C:\NT4INST\SRC\I386 with replacing existing files. If you are using UniATA driver also copy uniata.sys to C:\NT4INST\SRC\I386.
  11. Copy nt4pack archive content from folder ROOT to C:\NT4INST\SRC with replacing existing files.
  12. Copy nt4pack archive content from folder EXE to C:\NT4INST with replacing existing files.
  13. NOTE: Windows NT for Alpha either Gold or SP1 does not support installing over atapi.sys storage driver, so you should integrate it as well.
  14. If you want to integrate storage controller driver - make these changes in C:\NT4INST\SRC\I386\txtsetup.sif (intelata.sys, for example) : 
    [SourceDisksFiles]
...
intelata.sys = 1,,,,,,_3,4,0,0
...

[SCSI.Load]
intelata = intelata.sys,4 ; first line, for I386
...

[SCSI]
...
intelata = "Intel ATA PIIX/ICH Controller"
...
    Make these changes in C:\NT4INST\SRC\I386\dosnet.inf 
    [Files]
...
d1,intelata.sys
...
    Make these changes in C:\NT4INST\SRC\I386\layout.inf 
    [SourceDisksFiles]
...
intelata.sys = 1,,,,,,_3,4,0,0
...
  15. Before burning you can remove Internet Explorer and Microsoft Mail from installed components. You must edit I386\syssetup.inf ( inside I386\syssetup.in_ ): 
    ;
; List of infs we load and run BaseWinOptions at Setup time.
;
[BaseWinOptionsInfs]
accessor.inf
communic.inf
games.inf
imagevue.inf
mmopt.inf
msmail.inf ; remove this line to disable Microsoft Mail
multimed.inf
optional.inf
pinball.inf ; remove this line to disable Pinball Game
wordpad.inf

;
; Infs that get run at optional components time,
; in initial and upgrade cases.
;
[Infs.Always]
iexplore.inf,DefaultInstall ; remove this line to disable Internet Explorer 2.0
    After edit you should compress it (command line of mscab tool is case sensitive!): 
    mscab -MSZIP a syssetup.in_ syssetup.inf
  16. Go to C:\NT4INST directory. Start CDIMAGE.EXE from command line: 
    CDIMAGE.EXE -bC:\NT4INST\SRC\bootsect.bin -e -h -lNT4SP6a -m -nt -o -pNT4SP6a -y5 -x C:\NT4INST\SRC nt4sp6a.iso
    cdimage (or oscdimg) taken from WindowsPE ( xpsp2_2180_usa_x86fre_opk.zip or ensp1opk.zip )
  17. Burn nt4sp6a.iso onto CD/DVD media using your favorite burning program and as a result we have an NT4 installation disk with slipstreamed/integrated Service Pack. :)
  18. Don't forget that after NT4 installation process using this disk you MUST apply SP6a/SP6 from "native" distributive (to cover SP6a/SP6 existence in registry): 
    sp6i386.exe -z -n -q
    or for Terminal Server (Service Pack 6): 
    wtsi386.exe -z -n -q
    And then - reboot.
  19. I don't recommend to install NT network support until you apply latest service pack. Later you may install Post-SP6a patches, hofixes and install IE6 32-bit, if needed.

Problem 2: I need a driver for NEW (E)IDE/(S)ATA storage controller with busmastering, LBA48 & UDMA support
Solution: Windows NT has internal driver for (E)IDE/(S)ATA devices - atapi.sys. However it has some limitations: before Windows NT Service Pack 4 it cannot access drives above 8 Gb, no DMA support. If you wish, you can update atapi.sys from Service Pack 4 and later or you can get it from separate package 'Microsoft ATAPI SP4 IDE Driver Support Disk', ATAPI.EXE. This updated atapi.sys driver supports DMA and LBA24 (+Int13 Extentions), but does NOT support LBA48 (> 137 Gb) and UDMA (only PIO, SWDMA, MWDMA modes). By default DMA support in disabled in atapi.sys, to enable it - use DMACHECK.EXE utility from for i386 or for DEC Alpha.
For some controllers, chipsets updated storage driver is available: 
Intel Corp. PIIX-PIIX4e,ICH-ICH4 - Intel Application Accelerator.
Promise Technology, Inc. Ultra, FastTrak Series - contact its support site.
Silicon Image, Inc. - contact its support site.
SiS Technologies, Inc. - contact its support site.
VIA Technologies - Via Service Pack.
For newer controllers visit UniATA - Universal (E)IDE/(S)ATA driver for Windows NT3/NT4/2000/XP/2003. It supports a wide range of SATA/PATA controllers (see BM_DEVS.H in UniATA sources) but only in these modes: when you set 'AHCI' (experimental since summer 2012), 'Native IDE' or 'Legacy IDE' option in your computer's BIOS. RAIDs are unsupported. In some cases SCSIPORT.SYS fix is REQUIRED, problem described here.

For optical drives (CD, DVD, etc.) I recommend DVDWriteNow or Patch for cdrom.sys (NT4) : 

CDROMX driver v.5 (replacement for CDROM.SYS, made by Alter, ver 0.69/1.5.12, 3 Nov 2007)

Release version: cdromx_v5.rar
Debug version: cdromx_v5_dbg.rar

Note that regardless of storage driver Windows NT cannot install on a partition larger then 4Gb due to installer limitation since it creates NTFS partition from FAT16 one and FAT16 limit is 4Gb (with 64k clusters). However if we copy installed OS image to a larger partition, NT system will work fine from there.

By default, Windows NT 4.0 with SP4 and later can ACCESS Windows 2000/XP/2003 and later NTFS volumes, but cannot CHECK, REPAIR ERRORS on such volume. A hotfix is available resolving this problem: KB872952: You cannot run the Chkdsk.exe program on NTFS file system volumes on a Windows NT 4.0 Service Pack 4-based computer. Note that in some cases computer hangs when checking disk volumes for errors with this hotfix installed.

Problem 3: I need a driver for new VIDEO adapter
Solution: For generic VESA BIOS extensions (VBE) driver visit VBEMP x86 Project. For accelerated one use SciTech Software SNAP Graphics Version 3.1.1 [snap-winnt-3.1.1.exe], supported chips for 3.1.1 or Version 3.1.3 beta 1284 [snap-winnt-3.1.3-1284.exe] for NT4. SNAP package can 2D acceleration and hardware overlay.

As for official mainstream support drivers, here is the shortlist:

  1. AMD/ATI Radeon cards: all cards below R400 chips, including mobile and PCI-E ones, i.e. Radeon X300/X550/X600 and below (search notebook vendors for driver released in 2004-2006). SNAP Graphics supports up to x700, x800, x850 chips.
  2. Intel integrated graphics: all cards below/equal 865G chips i.e. all up to 810/815/830/835/845/852/855/865 (driver version is 13.6.1). 910G/915G graphics is supported via additional Intel Embedded Graphics driver (version is 4.1 or 5.1). 945G graphics is supported via additional Intel Embedded Graphics driver (version is 5.1 only). SNAP Graphics supports up to 945G.
  3. nVidia GeForce cards: all cards below/equal GeForce 2/3/4/FX/6 Series (driver version is 77.72). SNAP Graphics supports up to GeForce 6 Series.
  4. Matrox cards: G550/P650/P750/Parhelia chips and below/equal.
  5. to be continued...

Warning: Security Hotfix KB891711 MS05-002: Vulnerability in cursor and icon format handling could allow remote code execution breaks hardware OpenGL support with some cards. To resolve this problem, replace \WINNT\SYSTEM32\WIN32K.SYS dated December, 2004 from KB835732 (or earlier one), or deinstall this hotfix.

Problem 4: I need a driver for new AUDIO card
Solution: Use SciTech Software SNAP Audio for NT4 [snapaudio-winnt-1.1.2.exe]. Supported chips: 

; Directory file to map PCI device ID's to specific SNAP driver
; files. This directory file lives in the same directory as all the
; driver files. The format is as follows:
;
; x vvvv:dddd
;
; where vvvv is the PCI vendor ID in hex and dddd is the PCI device ID
; and  is the name of the driver file for the device. The
; value of x should be 0 for a supported device, or 1 for unsupported.

; ALI

1 10B9:5451 ac97ali.drv         ; ALI M5451
1 10B9:5455 ac97ali.drv         ; ALI M1563M
0 10B9:5461 hdaudio.drv         ; ALI 5461

; AMD

0 1022:7445 ac97int.drv         ; AMD 768
0 1022:746d ac97int.drv         ; AMD 8111

; ATI

0 1002:4341 ac97ati.drv         ; ATI SB200
0 1002:4361 ac97ati.drv         ; ATI SB300
0 1002:4370 ac97ati.drv         ; ATI SB400
0 1002:437b hdaudio.drv         ; ATI SB450
0 1002:4382 ac97ati.drv         ; ATI SB600
0 1002:4383 hdaudio.drv         ; ATI SB600
0 1002:793b hdaudio.drv         ; ATI RS600

; Creative Labs (Ensoniq on old PCI cards)

1 1102:0002 sblive.drv          ; SB Live! / PCI 512
1 1102:0004 sblive.drv          ; SB Audigy
1 1102:0006 sblive.drv          ; SB Live! (Dell)
1 1102:0007 sblive.drv          ; SB Audigy LS
1 1102:0008 sblive.drv          ; SB Audigy 2
1 1274:1371 sbpci.drv           ; SB PCI
1 1274:5880 sbpci.drv           ; SB PCI

; Crystal / Cirrus

1 1013:6001 crystal.drv         ; CS4610
1 1013:6003 crystal.drv         ; CS4280

; Intel

0 8086:2415 ac97int.drv         ; Intel ICH
0 8086:2425 ac97int.drv         ; Intel ICH0
0 8086:2445 ac97int.drv         ; Intel ICH2
0 8086:2485 ac97int.drv         ; Intel ICH3
0 8086:24c5 ac97int.drv         ; Intel ICH4
0 8086:24d5 ac97int.drv         ; Intel ICH5
0 8086:25a6 ac97int.drv         ; Intel ESB
0 8086:2668 hdaudio.drv         ; Intel ICH6 (HDA)
0 8086:266e ac97int.drv         ; Intel ICH6 (AC97)
0 8086:2698 ac97int.drv         ; Intel ESB2 (AC97)
0 8086:269a hdaudio.drv         ; Intel ESB2 (HDA)
0 8086:27d8 hdaudio.drv         ; Intel ICH7 (HDA)
0 8086:27de ac97int.drv         ; Intel ICH7 (AC97)
0 8086:284d hdaudio.drv         ; Intel ICH8
0 8086:7195 ac97int.drv         ; Intel 440MX

; Neomagic

1 10C8:8005 neomagic.drv        ; MagicMedia 256AV (NM2200)
1 10C8:8006 neomagic.drv        ; MagicMedia 256ZX (NM2360)
1 10C8:8016 neomagic.drv        ; MagicMedia 256XL+ (NM2380)
1 10C8:8025 neomagic.drv        ; MagicMedia 256AV+ (NM2230)

; NVIDIA

1 10de:003a ac97int.drv         ; MCP04
1 10de:0059 ac97int.drv         ; CK804
0 10de:006a ac97int.drv         ; nForce 2
0 10de:008a ac97int.drv         ; MCP2S
0 10de:00da ac97int.drv         ; nForce 3
0 10de:00ea ac97int.drv         ; nForce 3
0 10de:01b1 ac97int.drv         ; nForce
1 10de:026b ac97int.drv         ; MCP51 (AC97)
0 10de:026c hdaudio.drv         ; MCP51 (HDA)
0 10de:0371 hdaudio.drv         ; MCP55
0 10de:03e4 hdaudio.drv         ; MCP61
0 10de:03f0 hdaudio.drv         ; MCP61
0 10de:044a hdaudio.drv         ; MCP65
0 10de:044b hdaudio.drv         ; MCP65

; SiS

1 1039:7012 ac97int.drv         ; SiS 7012
1 1039:7018 ac97int.drv         ; SiS 7018
0 1039:7502 hdaudio.drv         ; SiS 966

; VIA

1 1106:3058 ac97via.drv         ; VIA VT82C686
1 1106:3059 ac97via.drv         ; VIA VT8233/A/8235/8237
0 1106:3288 hdaudio.drv         ; VIA VT8251/VT8237A
* Bold items available from newer version updated with these files from snapaudio-dos-1.0.1.exe: AUDIO.BPD HDABUS.BPD.

Problem 5: I need a driver for new NETWORK (W)LAN card
Solution: Some of the manufacturers dropped NT 4.0 support in their drivers, some - not. You should visit sites showed below to find appropriate drivers.
  1. Intel Corp. - http://www.intel.com/support/index.htm 
    *** 8086 Intel ****
8086:1029  82559 Ethernet Controller
8086:1229  82557/8/9/0/1 Ethernet Pro 100
8086:2449  82801BA/BAM/CA/CAM Ethernet Controller
8086:1000  82542 Gigabit Ethernet Controller (Fiber)
8086:1001  82543GC Gigabit Ethernet Controller (Fiber)
8086:1004  82543GC Gigabit Ethernet Controller (Copper)
8086:1008  82544EI Gigabit Ethernet Controller (Copper)
8086:100c  82544GC Gigabit Ethernet Controller (Copper)
8086:100e  82540EM Gigabit Ethernet Controller
8086:1015  82540EM Gigabit Ethernet Controller (LOM)
8086:1016  82540EP Gigabit Ethernet Controller (Mobile)
8086:1017  82540EP Gigabit Ethernet Controller
8086:101d  82546EB Gigabit Ethernet Controller

Driver PRONT4.EXE, 7920120 bytes, released in December 2005.


    *** 8086 Intel ****
8086:1001  82543GC Gigabit Ethernet Controller (Fiber)
8086:1008  82544EI Gigabit Ethernet Controller (Copper)
8086:100d  82544GC Gigabit Ethernet Controller (LOM)

Driver e1000ent.exe, 93923 bytes, released in March 2003.


    *** 8086 Intel ****
8086:1076  82541GI Gigabit Ethernet Controller
8086:1078  82541ER Gigabit Ethernet Controller

Driver e1000ent.exe, 388553 bytes, released in December 2004.

    *** 1011 DEC ****
1011:0002    ;Intel 21040
1011:0014    ;Intel 21041
1011:0009    ;Intel 21140
1011:0019    ;Intel 21143
1011:0039    ;Intel 21145

*** 8086 Intel ****
8086:0039    ;Intel 21145

Driver dc21x4.zip, 711856 bytes, released in November 1999.
  2. 3Com Corp. - http://www.3com.com/products/en_US/downloadsindex.jsp 
    *** 10b7 3Com ***
10b7:9000  3c900 10BaseT [Boomerang]
10b7:9001  3c900 10Mbps Combo [Boomerang]
10b7:9004  3c900B-TPO Etherlink XL [Cyclone]
10b7:9005  3c900B-Combo Etherlink XL [Cyclone]
10b7:9006  3c900B-TPC Etherlink XL [Cyclone]
10b7:900a  3c900B-FL 10base-FL [Cyclone]
10b7:9050  3c905 100BaseTX [Boomerang]
10b7:9051  3c905 100BaseT4 [Boomerang]
10b7:9055  3c905B 100BaseTX [Cyclone]
10b7:9058  3c905B Deluxe Etherlink 10/100/BNC [Cyclone]
10b7:905a  3c905B-FX Fast Etherlink XL FX 100baseFx [Cyclone]
10b7:9200  3c905C-TX/TX-M [Tornado]
10b7:9201  3C920B-EMB Integrated Fast Ethernet Controller [Tornado]

Driver 3c90x1.exe, 916325 bytes, released in September 2002.
  3. Marvell Semiconductor, Inc. - http://www.marvell.com/drivers 
    *** 11ab Marvell ****
11ab:4320  88E8001 Gigabit Ethernet Controller
11ab:4350  88E8035 PCI-E Fast Ethernet Controller
11ab:4360  88E8052 PCI-E ASF Gigabit Ethernet Controller
11ab:4361  88E8050 PCI-E ASF Gigabit Ethernet Controller
11ab:4362  88E8053 PCI-E Gigabit Ethernet Controller

Drivers yukonwnt_71423.zip, yukonwnt_72213.zip, released in 2004.
  4. Syskonnect (Schneider & Koch) - http://www.syskonnect.de/e_en/support/driver.html 
    *** 1148 Syskonnect (Schneider & Koch) ***
1148:4300  SK-9872 Gigabit Ethernet Server Adapter (SK-NET GE-ZX dual link)
1148:4320  SK-9871 V2.0 Gigabit Ethernet 1000Base-ZX Adapter, PCI64, Fiber ZX/SC
1148:9e00  SK-9E21D 10/100/1000Base-T Adapter, Copper RJ-45

Driver skwnt.zip, 113851 bytes, released in June 2004.
  5. Broadcom Corp. - http://www.broadcom.com/support/
  6. Realtek Semiconductor Corp. - http://www.realtek.com.tw/downloads/ 
    *** 10ec Realtek ****
10ec:8139  RTL-8139/8139C/8139C+

Driver nt4-8139(620).zip, 110950 bytes, released in December 2004.

10ec:8169 RTL-8169 Gigabit Ethernet
10ec:8180 RTL8180L 802.11b MAC

Driver nt4-8169(620).zip, 111002 bytes, released in December 2004.
  7. VIA Technologies, Inc. - http://www.via.com.tw/en/support/drivers.jsp 
    *** 1106 VIA Technologies ***
1106:0100  ?
1106:0102  Embedded VIA Ethernet Controller
1106:0105  ?
1106:0106  ?
1106:0926  VT82C926 [Amazon]
1106:3043  VT86C100A [Rhine]
1106:3053  VT6105M [Rhine-III]
1106:3065  VT6102 [Rhine-II]
1106:3106  VT6105/VT6106S [Rhine-III]

See its site for NT4 driver updates.
  8. Silicon Integrated Systems [SiS]. - http://www.sis.com/download/ 
    *** 1039 Silicon Integrated Systems [SiS] ***
1039:0160  SiS160 Series Wireless LAN Adapter
1039:0900  SiS900 PCI Fast Ethernet

See its site for NT4 driver updates.
  9. National Semiconductor Corp. - https://nationalsemiconductor.com/ 
    *** 100B National Semiconductor Corp. [NSC] ***
100B:0020  DP83815/816

Driver macphyter_winnt4.zip, 46102 bytes, released in July 2004.
Note that even when your Network adapter doesn't have suitable driver for Windows NT 4.0 you can connect computers using null-modem serial cable over serial RS-232 port. In some cases it is better than nothing.

Problem 6: I need a driver for new Parallel (LPT), serial (COM, RS-232) port controller card
Solution: Most of them now are based on Moschip Semiconductor chips. They have a NT4 driver onto their site, http://www.moschip.com/, file NetMosWinNTMultiIODrivers.exe. You should visit it to find appropriate drivers.

Problem 7: I need a driver for USB, FireWire (IEEE 1394) devices/controllers
Solution: Use Inside Out Networks (now acquired by Digi International®) USB 1.x/2.0 Stack/drivers [i4usb406.exe] for stack, mice, keyboards, usb printers (via virtual LPT port emulation), usb mass storage - flash/hdd media.
Here are NEW updated files for version 4.06 upgrade only! - Digi International® 4.20 USB 1.x/2.0 Stack/drivers update ver 4.20 [?],[?],[?]. Place them over old files in %SystemRoot%/SYSTEM32 and %SystemRoot%/SYSTEM32/DRIVERS directories.

Use Unibrain ubCore 3.30 driver [ubcore33.zip] for FireWire (IEEE 1394) devices.

Problem 8: I need a driver for recent printer or MFP device

Solution: If you have experience with printing from within Microsoft Windows, you are probably familiar with the complexity of adding printers-selecting the correct printer driver, creating and configuring a port, finding the printer on the network, and so on. When you are traveling and need to print a document on a networked printer at the location you are visiting, you might not have time to work through the challenges of installing a new printer driver. Instead, you can use HP Mobile Printing for Notebooks. HP Mobile Printing for Notebooks combines a general-purpose PostScript(PS) printer driver with software that you can use to specify the network address (for example, the IP address) of the printer where you want to print each document. With HP Mobile Printing selected as the default printer, you simply open a document, and either click the print button or use the Print option on the File menu. HP Mobile Printing for Notebooks displays a dialog where you specify the printer's network address. When you click Print, the document is on its way. HP Mobile Printing for Notebooks can print to most networked HP printers that support PostScript(PS).


Problem 9: I need a driver for FAT32 filesystem
Solution 1: Use Sysinternals Freeware - Fat32 for Windows NT 4.0 for this filesystem support. If FAT32.SYS driver set it in registry to start at system boot time as described below, 
---- start copying here ----
REGEDIT4

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session Manager]
"BootExecute"=hex(7):61,75,74,6f,63,68,65,63,6b,20,61,75,74,6f,63,68,6b,20,2a,\
  00,73,63,6e,66,61,74,33,32,00,00

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\FAT32]
"Type"=dword:00000002
"Start"=dword:00000000
"ErrorControl"=dword:00000001
---- end copying here ----
it is possible to BOOT NT4 from FAT32 partition, loaders from Windows 2000/XP/2003 and later (ntldr/ntdetect.com) are required!

Solution 2: Use UPDATED fastfat.sys/fs_rec.sys from FASTFAT.ZIP package by unknown author (151450 bytes) FASTFAT.ZIP package by unknown author (151450 bytes) [?],[?],[?] for this filesystem support. To install it replace %SystemRoot%/System32/Drivers/fastfat.sys and %SystemRoot%/System32/Drivers/fs_rec.sys with files from this archive and reboot.

But remember that these drivers cannot repair filesystem errors on FAT32 partitions. You must use third-party tool for it. I recommend to use NT4 installed on FAT32 partition ONLY in dualboot with any system that supports FAT32 natively (Windows 95/98/ME/2K/XP/2003...)

 Problem 10: I want to use autologon feature with BLANK password as in Windows 2000/XP and later
Solution: Use TweakUI Autologon option & make a patch in MSGINA.DLL 
EN-US version of MSGINA.DLL from WindowsNT4Server-KB835732-x86-ENU.EXE

.48482BAF: FF7004         push        d,[eax][04]                              
.48482BB2: E87F740000     call        LsaFreeMemory ;ADVAPI32 -- 2             
.48482BB7: FF75F8        1push        d,[ebp][-08]                             
.48482BBA: E877740000     call        LsaFreeMemory ;ADVAPI32 -- 2             
.48482BBF: FF75F0         push        d,[ebp][-10]                             
.48482BC2: E869740000     call        LsaClose ;ADVAPI32 -- 3                  
.48482BC7: 837DF400       cmp         d,[ebp][-0C],0                           
.48482BCB: 7D15           jge        .048482BE2 -- 4  (7D change to EB)
.48482BCD: 689CD74848     push        04848D79C -- 5                           
.48482BD2: 68D8D44848     push        04848D4D8 ;'AutoAdminLogon'              
.48482BD7: 6888D74848     push        04848D788 ;'Winlogon'                    
.48482BDC: FF15D4D04848   call        WriteProfileStringW ;KERNEL32            
.48482BE2: 8B75FC        4mov         esi,[ebp][-04]                           
.48482BE5: 81C61C0B0000   add         esi,000000B1C ;'    '                    
.48482BEB: 833E00         cmp         d,[esi],0                                
.48482BEE: 754C           jne        .048482C3C -- 8                           
.48482BF0: 6A00           push        0                                        
.48482BF2: 68B4D44848     push        04848D4B4 -- 9                           
.48482BF7: 6864D74848     push        04848D764 ;'DefaultDomainName'           
.48482BFC: 6850D74848     push        04848D750 ;'Winlogon'                    
.48482C01: E8E8F5FFFF     call       .0484821EE -- C                           
.48482C06: 8BF8           mov         edi,eax
Don't forget to recalculate checksum of MSGINA.DLL. You can use editbin tool from Microsoft's Visual Studio or Platform SDK: 
editbin /RELEASE MSGINA.DLL

Problem 11: I want to use Advanced Power Management features in NT4 (Software power-off, sleep, suspend, resume)
Solution: Use Dell Phoenix APM Utility [R44506.EXE].
Note that this driver doesn't send HLT signals to processor when it is in idle loop and in any case it consumes 100% of power. It is possible to patch hal.dll for HLT support. Otherways, standard HAL is correctly sending HLT instructions to CPU when it is in idle loop, but it is can't do APM functions.

Problem 12: I want to see HICOLOR icons in system tray
Solution: Patch explorer.exe: 
.01587005: 6A01                         push        001                        
.01587007: 6A00                         push        000                        
.01587009: 6A01                         push        001 (change to push 011)
.0158700B: FF75FC                       push        d,[ebp][-04]               
.0158700E: 57                           push        edi                        
.0158700F: FF1550075A01                 call        ImageList_Create ;COMCTL32 
...
...
...
.015890AA: 6A01                         push        001                        
.015890AC: 6A00                         push        000                        
.015890AE: 6A01                         push        001 (change to push 011)
.015890B0: 6A32                         push        032                        
.015890B2: FF15E8025A01                 call        GetSystemMetrics ;USER32   
.015890B8: 50                           push        eax                        
.015890B9: 6A31                         push        031                        
.015890BB: FF15E8025A01                 call        GetSystemMetrics ;USER32   
.015890C1: 50                           push        eax                        
.015890C2: FF1550075A01                 call        ImageList_Create ;COMCTL32

Problem 13: How to control security patches and critical updates installed in Windows NT/2K/XP/2003?
Solution: Use MBSA 1.2.1 security inventory tool from Microsoft.

MBSA 1.2.1 is the free, legacy vulnerability assessment tool for the Microsoft platform. Designed for the IT professional, the tool helps with the assessment phase of an overall security management strategy for legacy platforms and products. MBSA Version 1.2.1 includes a graphical and command line interface that can perform local or remote scans of Windows systems. See the MBSA 1.2.1 Datasheet - Security Initiatives for details.

Installed Service Pack 6a, Internet Explorer 5.01 or later and XML parser are required. You must install network support so Workstation and Server services must be running. If you don't have a network card or don't want to install it, you can install 'MS Loopback Adapter'. Some details are here: MSKB: Microsoft Baseline Security Analyzer (MBSA) version 1.2.1 is available (Q320454).

You can perform GUI installation of MBSA (Windows Installer service must be installed) or minimum console installation of MBSA, only these TWO files are required: 

mbsacli.exe
mssecure.xml // compressed in mssecure_????.cab, ???? may vary (1033 for en_US version)

You can extract mbsacli.exe from MBSASetup-xx.msi using any archive tool that supports extracting from *.cab archives. Mssecure_????.cab should be downloaded separately (see below), since mbsacli.exe -hf itself wiil download older version of it by default, read this MSKB: Versions of Microsoft Baseline Security Analyzer that are earlier than MBSA 2.0.1 will no longer be supported after October 9, 2007 (Q914791). Just for historical purpose, older versions of security catalog file are here: 

http://go.microsoft.com/fwlink/?LinkId=18922, OLD English version (dated October 5,2007).
http://go.microsoft.com/fwlink/?LinkId=18122, OLD French version.
http://go.microsoft.com/fwlink/?LinkId=18121, OLD German version.
http://go.microsoft.com/fwlink/?LinkId=18120, OLD Japanese version.
And finally extract xml catalog Mssecure.xml from it. You can use these security catalogs with NT4 (since its support dropped before October 9, 2007), but with more recent systems, such as Windows 2000/XP/2003, updated version of catalog is required, see below.

How to scan using batch cmd-file: 

mbsacli -hf -nvc -nosum -x mssecure.xml > local.txt
mbsacli -hf -nvc -nosum -v -x mssecure.xml > localw.txt
local.txt will be short log-file and localw.txt will be verbose one.

See all command line options: 

mbsacli.exe -hf -?

See version information: 

mbsacli.exe -hf -about

Microsoft Baseline Security Analyzer
Version 1.2.1 (1.2.4013.0)
(C) Copyright 2002-2004 Microsoft Corporation. All rights reserved.
HFNetChk developed for Microsoft Corporation by Shavlik Technologies, LLC.
(C) Copyright 2002-2004 Shavlik Technologies, LLC. www.shavlik.com

Some words about extended support:

Microsoft will continue to support MBSA 1.2.1 for legacy security update detection for six months after the new MBSA 2.0 limited scan tool is released (expected in Q2 of 2007). After October 9, 2007, the MSSecure.XML file used by MBSA 1.2.1 will no longer be updated. After this date, no new security updates will be added to the MSSecure.XML file used by MBSA 1.2.1 and no new versions of the Enterprise Scan Tool will be released.

Customers should use MBSA 2.0.1 or MBSA 2.1 together with the upcoming limited scan tool for comprehensive security update and vulnerability assessment needs. MBSA 1.2.1 will be retired in favor of the newer MBSA 2.x products on October 9, 2007.

This means that security catalog file will be never updated after end-of-support date. THIS IS NOT TRUE!

According to this article, MSKB: How to troubleshoot catalog file downloads for Microsoft Baseline Security Analyzer 1.2 (Q842432), correct links for security catalog file are:

You can simple download it using wget tool or your favourite browser: 
wget http://go.microsoft.com/fwlink/?LinkId=23130
It updated by Microsoft MONTHLY, EVERY SECOND TUESDAY.

Microsoft Systems Management Server 2.0 (which use the same mssecure_????.cab/mssecure.xml pattern file as MBSA 1.x) Extended support ends at April 12, 2011, so no more updates will be received.

Note that regardless of language installed in your system, you can scan with any version of MBSA. For example you can scan Russian Windows NT SP6a with English version of MBSA and security catalog due to version checking method, which is not language dependant.

Sample log from WINDOWS NT WORKSTATION 4.0 system: 

----------------------------
TEST4 (10.0.0.1)
----------------------------

	* WINDOWS NT WORKSTATION 4.0 SP6A

	Note		MS99-036	155197
	Note		MS99-041	242294
	Note		MS01-022	296441
	Note		MS02-053	324096
	Note		MS03-008	814078
	Note		MS03-010	331953
	Note		MS03-030	819696
	Note		MS04-022	841873

	* INTERNET EXPLORER 6 SP1

	Note		MS04-028	833987
	Patch NOT Found	MS08-023	948881
	Patch NOT Found	MS09-034	972260

	* WINDOWS MEDIA PLAYER 6.4 GOLD

	Information
	All necessary hotfixes have been applied.

	* MDAC 2.8 SP1

	Information			
	There are no security updates available for this product.


	* MICROSOFT VIRTUAL MACHINE (VM) GOLD

	Information			
	There are no security updates available for this product.


	* MSXML 3.0 SP7

	Information			
	There are no security updates available for this product.


	* MSXML 4.0 SP2

	Information
	All necessary hotfixes have been applied.

Sample log from WINDOWS NT 4.0 TERMINAL SERVER EDITION system: 

----------------------------
BIYYK43E (192.168.0.1)
----------------------------

	* WINDOWS NT SERVER 4.0, TERMINAL SERVER EDITION SP6

	Patch Found	MS00-004	249108
	Patch Found	MS00-047	269239
	Patch Found	MS00-087	277910
	Patch Found	MS00-095	265714
	Patch Found	MS01-040	292435
	Patch Found	MS01-052	307454
	Patch Found	MS02-017	311967
	Patch Found	MS02-024	320206
	Patch Found	MS02-029	318138
	Patch Found	MS02-045	326830
	Patch Found	MS02-048	323172
	Patch Found	MS02-050	329115
	Patch Found	MS02-055	323255
	Patch Found	MS02-071	328310
	Patch Found	MS03-001	810833
	Patch Found	MS03-007	815021
	Patch Found	MS03-013	811493
	Patch Found	MS03-023	823559
	Patch Found	MS03-024	817606
	Patch Found	MS03-026	823980
	Patch Found	MS03-029	823803
	Patch Found	MS03-034	824105
	Patch Found	MS03-039	824146
	Patch Found	MS03-041	823182
	Patch Found	MS03-043	828035
	Patch Found	MS03-044	825119
	Patch Found	MS03-045	824141
	Patch Found	MS04-007	828028
	Patch Found	MS04-011	835732
	Patch Found	MS04-012	828741
	Patch Found	MS04-020	841872
	Patch Found	MS04-023	840315
	Patch Found	MS04-024	839645
	Patch Found	MS04-029	873350
	Patch Found	MS04-031	841533
	Patch Found	MS04-037	841356
	Patch Found	MS04-041	885836
	Patch Found	MS04-043	873339
	Patch Found	MS04-044	885835
	Patch Found	MS05-001	890175
	Patch Found	MS05-010	885834
	Note		MS99-036	155197
	Note		MS99-041	242294
	Note		MS00-021	257870
	Note		MS00-024	259496
	Note		MS00-027	259622
	Note		MS00-029	259728
	Note		MS00-036	262694
	Note		MS00-040	264684
	Patch NOT Found	MS00-052	269049
	Note		MS00-083	274835
	Note		MS00-091	275567
	Note		MS00-094	276575
	Note		MS00-100	280322
	Patch NOT Found	MS01-003	279336
	Patch NOT Found	MS01-008	280119
	Note		MS01-009	283001
	Note		MS01-017	293818
	Note		MS01-022	296441
	Note		MS01-033	300972
	Note		MS01-041	299444
	Note		MS01-048	305399
	Note		MS02-006	314147
	Note		MS02-014	313829
	Note		MS02-018	319733
	Note		MS02-053	324096
	Note		MS03-008	814078
	Note		MS03-010	331953
	Note		MS03-030	819696
	Note		MS04-022	841873
	Patch NOT Found	MS04-032	840987
	Patch NOT Found	MS05-002	891711

	* INTERNET EXPLORER 6 SP1

	Patch Found	MS02-066	328970
	Patch Found	MS02-068	324929
	Patch Found	MS03-004	810847
	Patch Found	MS03-015	813489
	Patch Found	MS03-020	818529
	Patch Found	MS03-032	822925
	Patch Found	MS03-040	828750
	Patch Found	MS03-048	824145
	Patch Found	MS04-004	832894
	Patch Found	MS04-025	867801
	Patch Found	MS04-038	834707
	Patch Found	MS04-040	889293
	Patch Found	MS05-014	867282
	Patch Found	MS05-020	890923
	Patch Found	MS05-025	899950
	Patch Found	MS05-037	903235
	Patch Found	MS05-038	896727
	Patch Found	MS05-052	896688
	Patch Found	MS05-054	905915
	Patch Found	MS06-013	912812
	Patch Found	MS06-021	916281
	Patch Found	MS06-042	918899
	Patch Found	MS06-067	922760
	Patch Found	MS06-072	925454
	Patch Found	MS07-016	928090
	Patch Found	MS07-027	931768
	Patch Found	MS07-033	933566
	Patch Found	MS07-045	937143
	Patch Found	MS07-057	939653
	Patch Found	MS07-069	942615
	Patch Found	MS08-010	944533
	Patch Found	MS08-023	948881
	Patch Found	MS08-024	947864
	Patch Found	MS08-031	950759
	Patch Found	MS08-045	953838
	Patch Found	MS08-058	956390
	Patch Found	MS08-073	958215
	Patch Found	MS08-078	960714
	Patch Found	MS09-014	963027
	Patch Found	MS09-019	969897
	Patch Found	MS09-034	972260
	Patch Found	MS09-054	974455
	Patch Found	MS09-072	976325
	Patch Found	MS10-002	978207
	Patch Found	MS10-018	0980182
	Patch Found	MS10-035	0982381
	Note		MS04-028	833987

	* WINDOWS MEDIA PLAYER 6.4 GOLD

	Patch Found	MS01-029	296138
	Patch Found	MS01-042	304404
	Patch Found	MS01-056	308567
	Patch Found	MS02-032	320920
	Note		MS00-090	280419

	* MDAC 2.8 SP1

	Information			
	There are no security updates available for this product.


	* MSXML 3.0 SP7

	Information			
	There are no security updates available for this product.
Problem 14: I want to use most recent software in Windows NT 4.0.
Solution: Use this list (for NT 4.0 x86 32-bit): * If you are unable to access sites by HTTPS protocol using SeaMonkey 1.1.x - you must replace SHGetSpecialFolderPathW entry with SHGetPathFromIDList in the freebl3.dll file.

Problem 15: I want to install additional hotfixes and updates in Windows NT 4.0.
Solution: Use this list (for NT 4.0 x86 32-bit):

The Windows NT 4.0 Option Pack contains the following components:

  1. Certificate Server

    Microsoft Certificate Server provides customizable services for issuing and managing certificates used in software security systems employing public-key cryptography. Certificate Server performs a central role in the management of software security systems to enable secure communications across the Internet, corporate intranets, and other nonsecure networks. See .

  2. FrontPage Server Extensions

    The FrontPage Server Extensions implement the FrontPage server-resident portions in three areas: authoring (uploading/downloads documents, updating the To Do List), administration (setting end user, author, and administrator permissions), and dynamic content (browse-time WebBot components). See FrontPage Server Extensions (http://www.microsoft.com/frontpage/wpp/kit/primer.htm).

  3. Index Server

    Microsoft Index Server works with Windows NT Server 4.0 operating system and Internet Information Server 2.0 to provide your organization access to all of the documents stored on your intranet or Internet site. It allows you to easily perform full-text searches and retrieve all types of information from any Web browser. See (http://www.microsoft.com/ntserver/guide/indexserver.asp).

  4. Internet Connection Services for RAS

    The Internet Connection Services for RAS include new Microsoft Connection Manager (CM), Connection Manager Administration Kit (CMAK), Internet Authentication Services (IAS), and Connection Point Services (CPS). See Internet Connection Services for Microsoft RAS Features (http://www.microsoft.com/communications/rasfeatures.htm).

  5. Internet Information Server (IIS)

    Windows NT Server with Internet Information Server (IIS) 4.0 makes it easy to share documents and information and, for the first time, deploy scalable and reliable Web-based applications. This new generation of networked business solutions brings legacy data and applications to the Web and enables redefining internal and external business processes. See Overview of Microsoft Internet Information Server 4.0 (http://www.microsoft.com/products/prodref/534_ov.htm).

  6. Mail and News Services

    Microsoft SMTP Service uses the standard Internet protocol Simple Mail Transfer Protocol (SMTP) to transport and deliver messages based on specifications in Request for Comments (RFC) 821 and RFC 822. It also includes enhancements that build upon the basic delivery functions of the protocol. There are options available that give you control over the routing and delivery of messages and that provide secure communications.

    The Microsoft NNTP Service enables you to create newsgroups, to share information with colleagues. Creating newsgroups with Microsoft NNTP Service makes it easy for users in your organization to engage in discussions on various topics with each other and with users outside the organization.

  7. Microsoft Data Access Components

    The Microsoft Data Access Components (MDAC) enable easy use of databases with support for ActiveX Data Objects and the Microsoft Access driver. This release enables access to information across an organization, from the desktop to the enterprise. MDAC 1.5 is released as an integrated set of components and includes ActiveXT Data Objects (ADO) 1.5, OLE DB 1.5, and Open Database Connectivity (ODBC) 3.5. MDAC is integrated with Microsoft Internet Explorer 4.0 and has enhancements to ADO and support for remote users. See Microsoft to Release Microsoft Data Access Components 1.5 (http://www.microsoft.com/data/mdac15_press.htm).

  8. Microsoft Management Console (MMC)

    For integration, delegation, task orientation, and overall interface simplification, the Microsoft Management Console (MMC) provides an improved environment in which Microsoft and ISVs can present management tools called snap-in components (snap-ins). Microsoft Management Console is a WindowsR-based multiple document interface (MDI) application that makes extensive use of Internet technologies. See .

  9. Microsoft Message Queue Server (MSMQ)

    Microsoft Message Queue Server (MSMQ), also known by its code name Falcon, makes it easy for application programs to communicate with other application programs quickly, reliably, and asynchronously by sending and receiving messages. MSMQ offers ActiveX support, dynamic routing and configuration, multiple delivery and acknowledgment options, and integration with Windows NT security facilities. MSMQ also offers interoperability with other key platforms and applications, such as IBM's CICS and MQSeries, through products from Level 8 Systems. See MSMQ Features (http://www.microsoft.com/ntserver/appservice/exec/overview/MSMQ_Overview.asp).

  10. Microsoft Transaction Server (MTS)

    Microsoft Transaction Server (MTS) is a component-based transaction processing system for developing, deploying, and managing high-performance, scalable, and robust enterprise, Internet, and intranet server applications. See .

  11. Site Server

    Site Server is a comprehensive Web site environment for enhancing, deploying, and managing rich intranet and Internet Web sites. Site Server provides ways for businesses to understand more about their users, deliver more relevant information, and better appeal to shoppers. See What's New in Site Server 3.0 (http://www.microsoft.com/siteserver/guide/whatsnew.asp).

  12. SNA Server

    Microsoft SNA Server is a comprehensive gateway and application integration platform that enables you to use Internet, intranet, and client-server technologies while preserving investments in existing AS/400 and mainframe systems. SNA allows developers to preserve existing CICS and IMS environments while moving to a three tier client/server or Web-to-host computing environment. See Overview of Microsoft SNA Server 4.0 (http://www.microsoft.com/products/prodref/601_ov.htm).

  13. Windows Script Host

    The Microsoft Windows Script Host is a language-independent scripting host for ActiveXT scripting engines on 32-bit Windows platforms. Windows Script Host will be integrated into Windows 98, Windows NT Workstation version 5.0, and Windows NT Server version 5.0.

Download Windows NT 4.0 Server: Option Pack x86: (English) | (English) #2

Download Windows NT 4.0 Workstation: Option Pack x86: (English) | (Russian)

Download Windows 95: Option Pack x86: (English) | (Russian)

Direct3D, DirectDraw, DirectShow, DirectX, Microsoft, MS-DOS, Visual C++, Win32, Win32s, Windows, Windows XP, Windows 2003 Server and Windows NT are either registered trademarks or trademarks of Microsoft Corporation in the United States and/or other countries/regions.
The names of actual companies and products mentioned herein may be the trademarks of their respective owners.
Home page
E-Mail: bearwindows_at_fastmail_dot_com | Last update: December 1st 2011