I love this site, and I often check the Download -> OS Update section to see if there are new updates for my Windows 2000 system. It makes sense that you should apply SP3 before anything else and then of course post SP3 fixes when updating a new Windows 2000 install, but why do you recommend old security related fixes etc. to be applied in between? Like "Erroneous VeriSign-Issued Digital Certificates Pose Spoofing Hazard" (Updated 29/08/2001). I thought they were included in SP3? I am not sure I fully understand the order of the updates. Could someone please clarify.