By Ina Fried, 12 August 2004 08:55
NEWS Although Microsoft recommends that consumers turn on Automatic Update to get the latest version of Windows, the company is offering to let companies temporarily block such upgrades.
The tool, which is posted on Microsoft's website, allows companies that have Automatic Update running on their machines to leave the feature on, while temporarily blocking Service Pack 2 (SP2).
"While recognising the security benefits of Windows XP SP2, some organizations have requested the ability to temporarily disable delivery of this update," Microsoft said on its website. The company says the blocking tool will give companies up to four months to perform the upgrade on their own before automatically installing SP2.
Microsoft's recommendation has been for businesses to test SP2 as they would test other big operating system upgrades to make sure that there are no problems with custom applications and other software.
Barry Goffe, a group manager in Microsoft's Windows client unit, said: "We're encouraging our organisational customers - government, education, corporations - to start testing and to deploy the service pack as quickly as possible," adding, "there are application compatibility consequences and we want to make sure customers are aware of those within their environment before they upgrade."
That recommendation has been echoed by computer makers and others, with IBM sending out a memo telling its employees not to install the update because of potential incompatibilities. Many CIOs say they, too, plan to go slow in adding SP2 to their machines.
Microsoft finalised the security-oriented upgrade last week, posting a tool online this week that allows businesses to upgrade their machines. Microsoft plans soon to start pushing SP2 onto machines that have Windows' automatic update feature turned on.
A lot of companies use tools other than Automatic Update to keep their machines up and running, though some businesses, often smaller companies, use Automatic Update as a means of keeping Windows PCs up to date. However, even many large companies use it for some machines, such as field sales-force laptops that may not connect to the network.
"Last week, we started to get a lot of feedback from customers that they weren't completely prepared to have the machines for which [Automatic Update] is turned on start to receive SP2," Goffe said. "They were asking us, 'Is there a way for us to block this?'"
The tool Microsoft came up with, which changes a registry setting to block SP2, is based on one Microsoft used internally to roll out different versions of SP2 within Microsoft during the product's testing phase.
This is the first time Microsoft has had to deal with this particular issue. In the past, Automatic Update was not designed to handle large updates, such as service packs.
Although Goffe said Microsoft was glad to make the tool available, he said the company would actually prefer that large companies use a free Microsoft program called Software Update Services. That program uses the built-in automatic update feature within Windows, but redirects corporate machines to an internal server rather than pointing to Microsoft's servers. As a result, Goffe said, IT departments gain the ability to decide when all updates are installed.
"That's by far the best solution," he said.
Ina Fried writes for CNET News.com
Comments
There are 11 comments. Join the discussion
1. anonymous
Where can we find this patch to disable auto update downloading SP2 for XP
2. anonymous
It has problems with some of our newer applications.
Requires me to touch every system after reboot, what a royal pain!
My advise to the CIO was to forget it, that we would continue to protect assets with existing enterprise firewall and desktop antivirus.
I am the IT for a Federal Agency.
3. anonymous
Try here
http://www.microsoft.com/technet/prodtechnol/winxppro/maintain/sp2aumng.mspx
4. Sjoerd
XP SP2 causes problems with Novell ZENworks remote control of workstations. Microsoft offer a workaround in manually starting services but this is highly unsatisfactory!
5. Bill Holland
More trouble than it is worth.
Yet another of MS products that has not been tested against other major applications. A majot Headache!!!
6. John K
The tools to stop windows update auto installing are here
http://www.microsoft.com/technet/prodtechnol/winxppro/maintain/sp2aumng.mspx
Using this and SUS should help ease the roll out of what can be a huge file
To download SP2 for network installs go here...
http://www.microsoft.com/downloads/details.aspx?FamilyId=049C9DBE-3B8E-4F30-8245-9E368D3CDB5A&displaylang=en
be warned though it is a large file
7. Chris Harrison
Microsoft do have a tough time of things. They get criticised for not having tight enough security, then when they tighten things up people complain that increased security prevents all their applications from working correctly.
And how worrying is it that someone in IT for a federal agency recommends against installing security improvements because he has to 'touch' every box? It’s called work my friend, it may be unpleasant but you can’t avoid it forever.
8. Ion Castro
Which branch of Microsoft do you work for Chris Harrison?
Some of us are a bit fed up with buying expensive broken software
9. I Leadley
MS deserve most of the abuse they receive. How can they call it SP2 when automatic update has already suggested dozens of patches? It should be SP357+. A decent firewall at day one would have saved many problems. Considering what MS originally said of XP and how secure it was, it's a joke. Nearly every update says a hacker can take control of your machine.
You dont own your PC, you mearly rent it off Mr Gates!
10. anonymous
how can i uninstall xp 2 service pack
11. anonymous
How do I uninstall XP Service Pack 2? I have a Cannon F50 Multipass printer that I cannot get the computer to work with. It has worked with this computer for almost three years and since the Service Pack was installed I can't get my printer to load. What needs to be done to correct thsi problem? Thank you.