Office 2000 Service Pack 3 (SP3) provides the latest updates to Microsoft® Office 2000 and contains significant security enhancements as well as stability and performance improvements. Some of the fixes included with SP3 have been previously released as separate updates. This service pack combines them into one update.

Office 2000 SP3 also includes stability improvements developed as a result of user input from the Error Reporting Tool and Microsoft Product Support feedback.

Office 2000 SP3 addresses the issues described in the following Microsoft Security Bulletins:

• Microsoft Security Bulletin MS01-002 PowerPoint File Parser Contains Unchecked Buffer
• Microsoft Security Bulletin MS01-028 RTF document linked to template can run macros without warning
• Microsoft Security Bulletin MS01-034 Malformed Word Document Could Enable Macro to Run Automatically
• Microsoft Security Bulletin MS01-038 Outlook View Control Exposes Unsafe Functionality
• Microsoft Security Bulletin MS01-050 Malformed Excel or PowerPoint Document Can Bypass Macro Security
• Microsoft Security Bulletin MS02-021 E-mail Editor Flaw Could Lead to Script Execution on Reply or Forward (Q321804)
• Microsoft Security Bulletin MS02-031 Cumulative Patches for Excel and Word for Windows (Q324458)

This service pack also includes all updates released since Office 2000 SR1:

• Office 2000 Update: Service Pack 2 (SP-2)
• Access 2000 and SQL Server 2000 Readiness Update
• Excel 2000 SR1 Macro Modification Security Update: April 25, 2002
• Excel 2000 SR1 Update: Eurotool Add-in
• Office 2000 Clip Gallery Update: June 19 2002
• Office 2000 Security Update: UA Control Vulnerability
• Office 2000 Speller Update
• Office 2000 SR1 Update: Web Client Security
• Outlook 2000 SR1 Update: Extended E-mail Security
• Outlook 2000 SR1 Update: Java Permissions Security
• Outlook 2000 SR1 Update: View Control Security
• PowerPoint 2000 SR1 Security Update: Extended Parsing Vulnerability
• Word 2000 Security Update: Macro Vulnerability
• Word 2000 Update: April 25, 2002
• Word 2000 Update: October 16, 2002

---

 Note    Office 2000 SP3 includes the Outlook 2000 SR1 Extended E-mail Security Update, which changes the way Outlook handles certain types of e-mail attachments. The new e-mail attachment handling behavior is customizable, however, so you can specify the types of attachments to block or support. For more information, see Cannot access attachments in the Microsoft Knowledge Base.

---

---

Toolbox   The full-file version of Office 2000 SP3 consists of three Windows Installer patch files (MSP format) packaged in a self-extracting executable (O2ksp3a.exe). You can find this downloadable file on the Office 2000 Resource Kit Downloads page.

Localized versions of this service pack are listed later in this article in the section titled "Localized versions of the Office 2000 SP3 update."

Requirements for an Office 2000 SP3 deployment

Before you install Office 2000 SP3 on either an administrative installation point or a stand-alone computer, the current installation of Office 2000 must be updated to version SR1 or SR1a. The SR1 update is a prerequisite for the fixes contained in SP3, as it provides a broad set of enhancements to the original release of Office 2000.

If you attempt to install the SP3 update on a computer without SR1, a message will be displayed advising you to install SR1 before proceeding. For more information on the SR1 update, see Deploying Office 2000 Service Release 1 in the Office Resource Kit Journal.

Office 2000 SP3 will apply to the following Office 2000 suites and applications:

• Microsoft Access 2000 SR1
• Microsoft Access Runtime 2000 SR1
• Microsoft Excel 2000 SR1
• Microsoft FrontPage® 2000 SR1
• Microsoft Office 2000 Developer
• Microsoft Office 2000 SR1 Premium
• Microsoft Office 2000 SR1 Professional
• Microsoft Office 2000 SR1 Small Business
• Microsoft Office 2000 SR1 Standard
• Microsoft Outlook® 2000 SR1
• Microsoft PowerPoint® 2000 SR1
• Microsoft Publisher 2000 SR1
• Microsoft Word 2000 SR1

If you are using the Office 2000 SR1 MultiLanguage Pack, you will need to deploy both the core Office 2000 SP3 update, as well as the Office 2000 Service Pack 3 for Office 2000 SR1 MultiLanguage Pack. The SP3 for MultiLanguage Pack will be available at a later date from the Office Resource Kit Web site.

Office 2000 SP3 supports either Windows Installer 1.1 or 2.0 for both client and full-file versions of the update.

Strategies for updating your Office 2000 installations

The recommended method for distributing the Office 2000 SP3 update is first to update your administrative installation point, and then recache and reinstall Office 2000 on your users' computers to apply the changes. This is the standard update procedure presented for all previous Office 2000 updates, and it's still the most effective way to distribute software in a controlled environment. Details on using this method are covered later in this article in the section titled "Applying Office 2000 SP3 to an administrative installation point."

An alternative to the administrative update strategy is to apply the binary (client) version of Office 2000 SP3 directly to users' computers within your organization. This approach may be useful if you have experienced synchronization problems between your administrative installation points and your client computers. Details on this strategy are covered in the topic Distributing Office 2000 Client Updates to Users. The client version of Office 2000 SP3 is available from the Office Update Web site.

A third option is to apply the full-file updates directly to client computers. This method is an efficient way to ensure that all users have the most current version of the software when you do not know which updates users have applied. In addition, users can apply a full-file patch even if they do not have access to the administrative source. However, these client computers remain out of sync with the updated source until they reinstall Office 2000 from the original installation point.

Details on this strategy, and a more complete comparison of the three update methods, can be found in the article Strategies for Updating Office 2000 Installations.

Applying Office 2000 SP3 to an administrative installation point

The full-file administrative update files for Office 2000 SP3 are Microsoft Windows Installer patches (MSP files) you apply to your administrative share by using a command line with specific parameters. The following table lists the MSP files.

---

 Note    For best results, the update should be applied from the computer that contains the administrative installation point. Make sure the files on the administrative installation point are not in use when you apply the update. Copy the updated administrative installation image to all installation points after you back up any custom transform, Setup.ini, or other custom files.

---

To apply Office 2000 SP3 to an administrative installation point

1. Download O2ksp3a.exe and double-click the file name to extract the MSP files.
2. Connect to the administrative installation point.

   Note that you must have write access to the administrative installation point on the server and the appropriate privileges to carry out the task.

3. On the Start menu, click Run and then type the command line for Windows Installer with the appropriate options for the update. Use the following syntax:

   [start] msiexec /p [path\name of update MSP file] 
   /a [path\name of MSI file]
   SHORTFILENAMES=TRUE /qb /L*v [path\name of log file]
   

You must run the command line separately for each MSP file you apply to the administrative installation point — you cannot reference multiple MSP files on the same command line. The following table describes the command-line options.

Updating client computers from an administrative installation point

After you update your administrative installation point, you must recache and reinstall Office 2000 SP3 on client computers that use the administrative image. Any new client installations from the administrative installation image will automatically include Office 2000 SP3.

---

 Note    If you originally installed Office 2000 on a client computer from an administrative installation point, you must follow the recache and repair procedure to update that client. If you update the client directly by using the end-user patch from the Office Update Web site, the client and administrative images become out-of-sync, which may cause future updates to fail.

---

Office 2000 SP3 and Microsoft Access

If Access 2000 is installed on client computers that use the administrative image, you will need to carry out the following steps before recaching and reinstalling Office 2000 SP3.

1. Locate the three acwz*.mde files on the client computers. The English version of Office 2000 installs these files in C:\Program Files\Microsoft Office\Office\1033 by default. The files are: acwztool.mde, acwzmain.mde, and acwzlib.mde.
2. Rename the three files from acwz*.mde files to acwz*.old, keeping the files in the same location. You can do this by right-clicking each file, selecting Rename, and typing the new file name. Or, in the command line, you can type ren acwz*.mde acwz*.old.
3. Update the existing client installations using the instructions listed below.

Running the installation script

To update an existing client installation from an administrative installation point, run the following command line on the client computer:

start msiexec /i [path to updated .msi file on the admin image]
REINSTALL=[list of features] 
UPGRADEWITHRECACHE=TRUE REINSTALLMODE=vomu /qb

You can run this command line by creating a logon script, distributing it as a batch file, deploying it by using Systems Management Server, or using other software installation tools. The following table describes the command-line options.

For Office 2000 SP3, the value for [list of features] varies by product. You can specify the appropriate value for your product version, or optionally, you can substitute the parameter REINSTALL=ALL to reinstall all Office 2000 components on the client computer. The values for the different Office 2000 products are as follows:

Microsoft Publisher 2000

CD2NonBootFiles,ClipGalleryFiles,MSDrawFiles,ProductFiles,
PubPrimary,SpellingFiles,TCWord6ExportFiles,WebPublFiles

Microsoft Access 2000

ACCESSFiles,ACCESSNonBootFiles,AccessWizards,
ClipGalleryFiles,DeveloperWizards,GRAPHFiles,GrammarFiles,
MSVisualDesignTool,OfficeWebComponents,PhotoEditorFiles,
ProductFiles,ProductNonBootFiles,QueryFiles,SpellingFiles,
SpellingFiles_ESN,TCWord6ExportFiles,ThesaurusFiles,WebDiscussFiles,
WebPublFiles

Microsoft FrontPage 2000

ClipGalleryFiles,FPClientFiles,FPClientNonBootFiles,
FPLangSupport,FPWecCom,ProductFiles,ProductNonBootFiles,
SpellingFiles,SpellingFiles_ESN,TCWord6ExportFiles,
ThesaurusFiles,WebPublFiles

Microsoft Outlook 2000

ClipGalleryFiles,GRAPHFiles,GrammarFiles,OUTLOOKFiles,
OUTLOOKNonBootFiles,OutlookCDO,OutlookCcMailImporter,
OutlookDVFiles,OutlookHelpFiles,OutlookHelpFiles_SR1Patch,
OutlookImportExportFiles,OutlookMAPI,OutlookMAPICONTAB,
OutlookMAPIEMS,OutlookMAPIIMEP,OutlookMAPILDAP,OutlookMAPIPST,
OutlookMAPIPST95,OutlookMessaging,OutlookOMI,PhotoEditorFiles,
ProductFiles,ProductNonBootFiles,QueryFiles,SpellingFiles,
SpellingFiles_ESN,TCWord6ExportFiles,ThesaurusFiles,
WebDiscussFiles,WebPublFiles

Microsoft PowerPoint 2000

ClipGalleryFiles,GRAPHFiles,GrammarFiles,PPTFiles,
PPTNonBootFiles,PhotoEditorFiles,ProductFiles,
ProductNonBootFiles,QueryFiles,SpellingFiles,SpellingFiles_ESN,
TCWord6ExportFiles,ThesaurusFiles,WebDiscussFiles,WebPublFiles

Microsoft Office 2000 Premium CD 1

ACCESSFiles,ACCESSNonBootFiles,AccessWizards,
ClipGalleryFiles,DeveloperWizards,EXCELFiles,EXCELNonBootFiles,
ExcelAddInEuroToolFiles,ExcelAddinATPFiles,ExcelAddinSolverFiles,
ExcelHelpFiles,FPClientFiles,FPClientNonBootFiles,FPLangSupport,
FPWecCom,GRAPHFiles,GrammarFiles,MSVisualDesignTool,
OUTLOOKFiles,OUTLOOKNonBootFiles,OfficeWebComponents,OutlookCDO,
OutlookCcMailImporter,OutlookDVFiles,OutlookHelpFiles,
OutlookHelpFiles_SR1Patch,OutlookImportExportFiles,OutlookMAPI,
OutlookMAPICONTAB,OutlookMAPIEMS,OutlookMAPIIMEP,
OutlookMAPILDAP,OutlookMAPIPST,OutlookMAPIPST95,
OutlookMessaging,OutlookOMI,PPTFiles,PPTNonBootFiles,
PhotoEditorFiles,ProductFiles,ProductNonBootFiles,QueryFiles,
SpellingFiles,SpellingFiles_ESN,TCWord6ExportFiles,ThesaurusFiles,
WORDFiles,WORDNonBootFiles,WebDiscussFiles,WebPublFiles

Microsoft Office 2000 Premium CD 2

AccessRuntimeMaster,CD2NonBootFiles,ClipGalleryFiles,
MSDrawFiles,ProductFiles,PubPrimary,SBCMNonBootFiles,
SpellingFiles,TCWord6ExportFiles,WebPublFiles

Microsoft Office 2000 Professional

ACCESSFiles,ACCESSNonBootFiles,AccessWizards,
ClipGalleryFiles,DeveloperWizards,EXCELFiles,EXCELNonBootFiles,
ExcelAddInEuroToolFiles,ExcelAddinATPFiles,ExcelAddinSolverFiles,
ExcelHelpFiles,GRAPHFiles,GrammarFiles,MSVisualDesignTool,
OUTLOOKFiles,OUTLOOKNonBootFiles,OfficeWebComponents,OutlookCDO,
OutlookCcMailImporter,OutlookDVFiles,OutlookHelpFiles,
OutlookHelpFiles_SR1Patch,OutlookImportExportFiles,OutlookMAPI,
OutlookMAPICONTAB,OutlookMAPIEMS,OutlookMAPIIMEP,OutlookMAPILDAP,
OutlookMAPIPST,OutlookMAPIPST95,OutlookMessaging,OutlookOMI,
PPTFiles,PPTNonBootFiles,PhotoEditorFiles,ProductFiles,
ProductNonBootFiles,QueryFiles,SpellingFiles,SpellingFiles_ESN,
TCWord6ExportFiles,ThesaurusFiles,WORDFiles,
WORDNonBootFiles,WebDiscussFiles,WebPublFiles

Microsoft Office 2000 Small Business

ClipGalleryFiles,EXCELFiles,EXCELNonBootFiles,
ExcelAddInEuroToolFiles,ExcelAddinATPFiles,ExcelAddinSolverFiles,
ExcelHelpFiles,GRAPHFiles,GrammarFiles,OUTLOOKFiles,
OUTLOOKNonBootFiles,OutlookCDO,OutlookCcMailImporter,
OutlookDVFiles,OutlookHelpFiles,OutlookHelpFiles_SR1Patch,
OutlookImportExportFiles,OutlookMAPI,OutlookMAPICONTAB,
OutlookMAPIEMS,OutlookMAPIIMEP,OutlookMAPILDAP,OutlookMAPIPST,
OutlookMAPIPST95,OutlookMessaging,OutlookOMI,PhotoEditorFiles,
ProductFiles,ProductNonBootFiles,QueryFiles,SpellingFiles,
SpellingFiles_ESN,TCWord6ExportFiles,ThesaurusFiles,WORDFiles,
WORDNonBootFiles,WebDiscussFiles,WebPublFiles

Microsoft Office 2000 Standard

ClipGalleryFiles,EXCELFiles,EXCELNonBootFiles,
ExcelAddInEuroToolFiles,ExcelAddinATPFiles,ExcelAddinSolverFiles,
ExcelHelpFiles,GRAPHFiles,GrammarFiles,OUTLOOKFiles,
OUTLOOKNonBootFiles,OfficeWebComponents,OutlookCDO,
OutlookCcMailImporter,OutlookDVFiles,OutlookHelpFiles,
OutlookHelpFiles_SR1Patch,OutlookImportExportFiles,OutlookMAPI,
OutlookMAPICONTAB,OutlookMAPIEMS,OutlookMAPIIMEP,OutlookMAPILDAP,
OutlookMAPIPST,OutlookMAPIPST95,OutlookMessaging,OutlookOMI,
PPTFiles,PPTNonBootFiles,PhotoEditorFiles,ProductFiles,
ProductNonBootFiles,QueryFiles,SpellingFiles,SpellingFiles_ESN,
TCWord6ExportFiles,ThesaurusFiles,WORDFiles,WORDNonBootFiles,
WebDiscussFiles,WebPublFiles

Microsoft Word 2000

ClipGalleryFiles,GRAPHFiles,GrammarFiles,
PhotoEditorFiles,ProductFiles,ProductNonBootFiles,
QueryFiles,SpellingFiles,SpellingFiles_ESN,TCWord6ExportFiles,
ThesaurusFiles,WORDFiles,WORDNonBootFiles,WebDiscussFiles,
WebPublFiles

Microsoft Excel 2000

ClipGalleryFiles,EXCELFiles,EXCELNonBootFiles,
ExcelAddInEuroToolFiles,ExcelAddinATPFiles,ExcelAddinSolverFiles,
ExcelHelpFiles,GRAPHFiles,GrammarFiles,PhotoEditorFiles,
ProductFiles,ProductNonBootFiles,QueryFiles,SpellingFiles,
SpellingFiles_ESN,TCWord6ExportFiles,ThesaurusFiles,
WebDiscussFiles,WebPublFiles

Microsoft Access 2000 Runtime

AccessRuntimeMaster

Applying Office 2000 SP3 under Windows 2000 or Windows XP

If your administrative installation point and all of your client computers are running Microsoft Windows 2000 or Windows XP, you can use IntelliMirror® technology to manage the installation of the update.

---

 Note    Be sure to test all software updates in a controlled setting before modifying your administrative installation point or deploying the new version throughout your organization.

---

To deploy a QFE fix or update under Windows 2000 or Windows XP

1. Apply the update (MSP file) to the original Office administrative installation point.

   You will need to run the command line separately if you apply more than one MSP file to the administrative installation point — you cannot reference multiple MSP files on the same command line.

2. Open the Software Installation snap-in within the Group Policy Object (GPO) that you are using to manage the existing Office installation.
3. In the details pane, right-click the Office package, point to All Tasks, and then click Redeploy application.

   The next time the Group Policy is applied to the designated users or computer groups, the updated files are copied to the computers.

Note that you can redeploy a package only if it is being managed by Group Policy — that is, only if you originally installed it by using IntelliMirror software installation and maintenance, or if you brought it into a managed state under Windows 2000 or Windows XP.

Applying the Outlook 2000 SR1 View Control Security update

The full-file administrative update files for Office 2000 Service Pack 3 (SP3) also include the Outlook 2000 SR1 View Control Security update (Outlctlx.exe), which can be only applied to client installations because it does not utilize Windows Installer patching technology. The ActiveX® control designed for this patch is not part of the original product, so there is no reference to these files in the Data1.msi. Therefore, you will need to distribute the update by a method such as a file server, e-mail attachment, or logon script. For more information, see Outlook 2000 SR-1 View Control Security Update in the Office Resource Kit.

Localized versions of the Office 2000 SP3 update

Localied versions of the Office 2000 SP3 update are available in the following languages and can be downloaded from the Office XP Resource Kit Localized Tools page:

Files changed by the Office 2000 SP3 update

The following table lists the files changed by the full-file version of the Office 2000 SP3 update. If you need to confirm whether a share has been updated, you can check a file version number.

Related links

For an overview of the Office 2000 Service Pack 3 for MUI Pack update, see Description of the Office 2000 Service Pack 3 (SP3) in the Microsoft Knowledge Base.

For general information on applying an administrative update, see Deploying Product Updates from an Administrative Installation Point in the Office XP Resource Kit.