Tech Tip: Identify installed updates in Win2K/Create trust relationships

Learn how to identify installed updates and create trust relationships.

Windows 2000 Professional: Identify installed updates

Any given Windows 2000 computer has numerous service packs, updates, and hot fixes installed, so it can sometimes be difficult to determine which specific patches you've applied. If you're trying to get a handle on your systems, there are a couple of methods for determining which updates you've installed.

One of the easiest ways is to look in the registry. Navigate to the HKEY_LOCAL_MACHINE\Software\Microsoft\Updates\Windows 2000 key, which contains registry keys for each installed update.

These keys take the name of the specific service pack or update in question. The update names originate from the Microsoft Knowledge Base article that describes the problem and the update.

If you need more information about updates, you can use the Qfecheck.exe tool, which you can download from Microsoft's Web site. In addition to pulling the information on updates from the registry, Qfecheck.exe checks the version number stored in the registry against the version number of the update file. Qfecheck.exe also checks the Windows System File Protection catalogs to verify that the cached version is the correct one.

To use Qfecheck.exe, open a command console, and type QFECHECK at the command prompt. This returns the results to the screen. To log the results to a file, use the /I switch, and specify a location.

Note: Editing the registry is risky, so be sure you have a verified backup before making any changes.

Windows 2000 Server: Create additional trust relationships

Trust relationships in Active Directory enable users in one domain to access and use resources in another domain. For example, users in your sales domain might need to access documents and other resources in the engineering domain.

In Windows 2000 Server, domains in a forest automatically exist in a transitive, two-way trust. For example, if domain A trusts B, and B trusts C, then A trusts C.

In addition, all root domains in a domain tree have a transitive two-way trust with the forest root domain. Ultimately, this means that all domains in the forest have a trust relationship with the other domains in the forest.

You can create two additional explicit trust relationships: external trusts and shortcut trusts. An external trust creates a relationship to a domain outside of the forest, such as a Windows NT domain. External trusts are one-way and nontransitive.

You can also create shortcut trusts, which are two-way, transitive trusts between domains in the same forest. Shortcut trusts shorten the trust path between two domains to improve performance and optimize authentication.

To create a new trust relationship, follow these steps:

  1. Open the Active Directory Domains And Trusts console, which you can find in the Administrative Tools folder.
  2. Right-click the domain, and select Properties.
  3. On the Trusts tab, you'll find a section for trusted domains and a section for trusting domains. Click the Add button in the appropriate area.
  4. In the resulting dialog box, specify the remote domain and a password for the trust, and click OK.