OFF2000: How to Update an Administrative Installation with the UA Control Security Update

Microsoft has released the Office 2000 UA Control (Ouactrl.ocx), which eliminates a security vulnerability in Microsoft Office 2000 and all Office 2000 programs. The vulnerability could allow a malicious Web site operator to take inappropriate action on the computer of a user who visited the Web site.

This article explains how to add this update to your Office administrative installation and how to update your client installations of Office 2000.

Download and Extract the Update

To download and extract the update, follow these steps:

1. Point your Web browser to the following Web site:
   
   http://office.microsoft.com/downloads/2000/Uactlsec.aspx
2. Click Download Now!. Click Save this program to disk, and then click OK.
3. Click Save to save the Uactlsec.exe file in the selected folder.
4. Click Start, and then click Run.
5. In the Open box, type a command line similar to the following, and then click OK:
   path\Uactlsec.exe /c /t:c:\UAControlfiles
   where path is the full path to the folder into which you downloaded Uactlsec.exe.
6. Click Yes to accept the license agreement. This expands the following files that are contained in the Uactlsec.exe package into the c:\UAControlfiles folder:
   Advpack.dll
   Install.inf
   Ouactrl.ocx
   W95inf16.dll
   W95inf32.dll

Add the Update to Your Administrative Installation

To add the UA Control update to your Office administrative installation, follow these steps:

1. In the \PFiles\MSOffice\Office folder on your administrative installation, rename Ouactrl.ocx to Ouactrl.old.
2. Copy the version (2.0.0.0) of Ouactrl.ocx expanded from the Uactlsec.exe package into your administrative installation of Office.

When you install Office onto a network client by using this administrative installation, the updated version of the control is automatically copied to the client. If you already installed Office from the administrative installation, please see the next section for how to update client installations.

Update Your Clients Where Office Is Already Installed

Use a Command Line

If you already installed Office onto your network clients by using the Office 2000 administrative installation, follow these steps to update them with the new version of Ouactrl.ocx:

1. Click Start, and then click Run.
2. In the Open box, type a command line similar to the following, and then click OK:
   
   NOTE: The following command should be all on one line.
   msiexec /i path\Data1.msi Reinstall=ProductNonBootFiles ReinstallMode=vemus
   NOTE: The ProductNonBootFiles parameter must be typed exactly as it appears in the above step.
3. Click OK to the message that Setup completed successfully.
4. Click Yes to restart the computer if prompted.

Use Maintenance Mode Setup

If you prefer to use Maintenance Mode Setup instead of a command line to update your network client, follow these steps:

1. Click Start, point to Settings, and then click Control Panel.
2. In Control Panel, double-click Add/Remove Programs.
3. In the Add/Remove Programs Properties dialog box, double-click the name of your Office 2000 product.
4. In the Microsoft Office 2000 Maintenance Mode dialog box, click Repair Office.
5. In the Reinstall/Repair Microsoft Office 2000 dialog box, click Reinstall Office, and then click Finish.