I have been asked to look into deploying a patch that was pulled from our rollout schedule after IIS issues were identified after this patch was deployed on some servers. the patch has now been updated and is now called KB973917-V2 and looks like we can now deploy this however i am wondering if this patch is still required as the MSBA tool does not detect this as a required patch. also it looks like to get the most out of this patch extra configuration items are needed to be done on both the server and client to enable the extended protection anyway so is there any need for this to be installed on external facing webservers?

You d better get this update installed. Use punctuation next time, or its hard to undertand.

Thanks, i was ideally looking for a reason why this needs to be installed though. especially when the MSBA doesnt see this as a required patch.