What's New in Windows Server 2003 Service Pack 2

Applies To:Windows Server 2003 with SP2
This document outlines somechanges in functionality between earlier versions of the Microsoft® Windows Server® 2003 and
Microsoft Windows® XP Professional x64 Edition operating systems,and Windows Server 2003 with Service Pack 2 (SP2) and
Windows XP Professional x64 Edition with SP2.Examples and details are provided for several of thetechnologies thatare
experiencing the biggest changes.
Unless otherwisespecified, these notes apply to thefollowing versions and editions:
Windows Server 2003 with SP2
Windows Server 2003 R2 with SP2
Windows Server 2003 x64 Editions with SP2
Windows Server 2003 R2 x64 Editions with SP2
Windows Server 2003 for Itanium-based Systems with SP2
Windows XP Professional x64 Edition with SP2
Clustering
A new event log event has been created to address certain situations in which the Cluster serviceaccount becomes excessively
restricted by domain policy.
The new event ID is 1239.Theevent text includes troubleshooting information. You can also refer to article 871236 in the
Microsoft Knowledge Base(http://go.microsoft.com/fwlink/?LinkID=69284) for further information.
Data access components
XmlLiteis new with Windows Server 2003 SP2. XmlLiteis a fast, low-level, native XML parser with a small memory footprint.
For moreinformation, including the Programmer’s Guideand API reference, seethe MSDN Web site
(http://go.microsoft.com/fwlink/?LinkID=69285).
Distributed systems
New options have been added to the Dcdiag.exe Domain NameSystem (DNS) tests.These new options are/x and
/xsl:xslfile.xsl or /xsl:xsltfile.xslt.They generate XML tags when thetests arerun with the/test:dns option. You can usethis
new output mechanism to moreeasily parsetheverboselog that the DNS tests generate.
To direct the XML output fileto XMLLog.xml, usethe/x option.For example:
dcdiag /test:dns /v /e /x:XMLLog.xml
Note:The/x: option only works with the/test:dns option.
To add the processing instructions that referencethespecified stylesheet, usethe/xsl:xslfile.xsl or /xsl:xsltfile.xslt option.
For example:
dcdiag /test:dns /v /e /x:XMLLog.xml; /xsl:xslfile.xsl
dcdiag /test:dns /v /e /x:XMLLog.xml; /xsl:xsltfile.xslt
Note:The/xsl:xslfile.xsl or /xsl:xsltfile.xslt option only works with the/test:dns /x:XMLLog.xml option.
File systems
Icacls.exeis an upgrade of the Cacls.exetool in Windows Server 2003 SP2,and can be used to reset theaccess control lists
(ACLs) on files from Recovery Console,and to back up ACLs. Also, unlike Cacls.exe, Icacles.execorrectly propagates thecreation
of inherited ACLs and changes to them.
Microsoft Message Queuing
The default storagelimit for message queuing has been changed to 1 gigabyte(GB). If you chooseto havea storagelimit of
morethan 1 GB,you can changethestoragelimit setting in Microsoft Management Console(MMC) on the General tab of
Message Queuing Properties.
Networking and communications
This version of Windows Server 2003 SP2 includes an updatethatenables you to simplify thecreation and maintenance
of Internet Protocol security (IPsec) policy.This updateenables you to usean IPsec “Simple Policy”.For most
environments, theinstallation of this updateallows you to reducethe number of IPsec filters thatarerequired for a
Server Isolation deployment or for a Domain Isolation deployment. You can reducethe number of IPsec filters from
many hundreds of filters to only two filters.For moreinformation about this updatefor Windows Server 2003 and
Windows XP, seearticle 914841 in the Microsoft Knowledge Base(http://go.microsoft.com/fwlink/?LinkID=69286).
Group Policy support for non-broadcasting networks and Wi-Fi Protected Access 2 (WPA2) settings has been added to
the Windows wireless client in Windows Server 2003 SP2.This updateallows the Windows wireless client to accept
additional wireless Group Policy configuration options.These new settings includesupport for WPA2 parameters and
non-broadcast networks.
The Windows wireless client now supports WPA2, which enables you to takeadvantage of high levels of standards-based
connection and encryption security. New security features include:
Non-broadcast network profiles are now marked with a flag to improvethesecurity of the Windows wireless
client.
Windows will notautomatically connect to a peer-to-peer network,even if it has been automatically saved in the
preferred network list. You must manually connect to a peer-to-peer network profile.
Windows Deployment Services
Starting with this version of Windows Server 2003 with SP2, RemoteInstallation Services is replaced by Windows Deployment
Services. You can use Windows DeploymentServices to set up new computers through a network-based installation without
having to be physically presentateach computer and without having to install directly from DVD media.For moreinformation
about Windows DeploymentServices, seethe Windows DeploymentServices UpdateStep-by-Step Guide
(http://go.microsoft.com/fwlink/?LinkID=69289).