It's important to update Windows 2000 with the latest service pack and any security updates and hot fixes that are appropriate for the server and your network (this is a key point—applying every hot fix that comes out of Redmond could actually decrease your stability). We recommend that you stay on top of the service packs, and deploy only hot fixes and security updates that fix problems you're currently experiencing.
To update Windows, follow these guidelines:
- Install the latest service pack. (You don't have to go out and grab it right away. In general, though, it's a good idea not to fall more than one service pack behind.) You can download the latest service packs from Windows Update, or Microsoft Corporate Windows Update (http://corporate.windowsupdate.microsoft.com), among other locations.
- Install any security hot fixes that are important for your server and network. Web servers will need to install many (if not most) of the security updates to stay secure; internal file servers will infrequently need hot fixes. We recommend that you evaluate and test any hot fix before deploying it.
- Install a newer version of Microsoft Internet Explorer if Web browsing will be done locally on the server. The version of Internet Explorer that ships with Windows 2000 has a number of security holes and should be updated.