Although this was first released several months back in July (2008), it is very much likely to impact an SBS 2003 installation at some future point in time. The good news is that the fix is fairly simple. You edit a single registry key and add port exclusions in a fairly small list. Voila! Reboot and all is well again.
What is at stake? Several services not working or starting – IAS, Exchange AUTD notification for ActiveSync, LT2P, and IPSEC
**Note the following copied article has been clipped to shorten its length. Follow the link at the very bottom for the full original text.
You may experience many network-related problems after you install the Domain Name System (DNS) security update 953230 (MS08-037) on a computer that is running Windows Small Business Server (SBS), and then you restart the computer.
For example, you may experience any of the following problems.
This problem occurs because the DNS Server service is listening on the UDP port that is required by another service.
To resolve this problem, add the port that is needed by the service to the ReservedPorts registry value. This prevents the DNS Server service from listening on that port. The following ports are known to cause conflicts:
Program that uses the ports
H.323 Gatekeeper (ISA 2000 only)
ISA Server 2000 or ISA Server 2004
ISA Server 2000 only
To configure the ReservedPorts registry value, follow these steps:
Click Start, click Run, type regedit, and then click OK.
Locate and then click the following subkey:
Right-click ReservedPorts, and then click Modify.
Type the range of ports that you want to reserve.
You must type the range of ports in the following format:
Do not replace the existing values. Instead, add the additional values.
To specify a single port, use the same value for x and for y. For example, to specify port 4000, type 4000-4000.
If you specify the continuous ports separately and if one port is reserved and is not used, the next port is not reserved correctly, and the port is used.
ISA Server settings only apply to Small Business Server 2000 or to Windows Small Business Server 2003 Premium Edition.
Note If you receive the following warning message, click OK
Data of type REG_MULTI_SZ cannot contain empty strings.
Registry Editor will remove the empty string found.
Exit Registry Editor, and then restart the computer.
You must restart the computer after you make these changes for the changes to take effect.
If you are using any third-party applications on the server that might require you to use a static UDP port that is higher than port 1024, you should also add it to the list of reserved ports.