eWeek says Microsoft will release a security roll-up for Windows 2000 this week. The roll-up package replaces Windows 2000 SP5, which was recently scrapped. You'll need to have SP4 already installed to apply the rollup. It will be available via Windows Update, SUS, et al.

It's scary how time flies...Windows 2000 is five years old now - wow... Speakimng of which, mainstram support for Windows 2000 ends on June 30th, when the OS goes in to "extended support" mode (which means you pay for support pretty much no matter what).

Information from Microsoft's web site to answer questions people have asked in email and elsewhere:

Windows 2000 Server and Windows 2000 Advanced Server support dates:

• Mainstream Support ends June 30, 2005
• Extended Support ends June 30, 2010

Mainstream support includes:

• Incident support (no-charge incident support, paid incident support, support charged on an hourly basis, support for warranty claims)
• Security update support
• The ability to request non-security hotfixes

Extended support includes:

• Paid support
• Security update support at no additional cost
• Non-security related hotfix support requires a separate Extended Hotfix Support contract to be purchased. Per-fix fees also apply.
• Microsoft will not accept requests for warranty support, design changes, or new features during the Extended support phase.
• Extended support is not available for Consumer, Hardware, Multimedia, and Business Solutions.

Complete Windows lifecycle dates are listed here. Other products also listed here.

Not running on Windows Server 2003 yet? Make the move now and you'll be glad you did - if you haven't tried it, you seriously don't know what you're missing. Not to mention the fact that most every substantial future network security enhancement from Microsoft will rely on the back-end of Windows Server 2003.

And for those still on NT4 - Your version expired long ago, and it's replacement is entering the old folks' home. Time to get with the program and secure your little world.