I spend a lot of time reading what other people have to say about Windows. Through the years, I’ve found that a lot of the most common advice from so-called Windows experts is misleading or flat-out wrong. In Windows XP Inside Out, Second Edition, Carl, Craig, and I directly addressed many of these myths in sections entitled “Reality Check.” (You might be surprised by the number of myths we shatter in this book!)
One of the most common rants I’ve read lately is from experts advising experienced Windows XP users to turn off Automatic Updates and handle the job of patching Windows by downloading updates directly. This is a Very Bad idea. Here’s why.
After my recent post on overcoming SP2 problems, I received an e-mail message from an old friend who works on the Windows team. He makes a good case for why every Windows user should have Automatic Updates turned on.
By way of background, the two most common killer problems that afflict SP2 are caused by (1) a piece of rogue software called TVMedia, which causes a blue-screen (STOP) error when you restart your computer after installing SP2l; and (2) an outdated BIOS on a computer running a Pentium 4 chip based on Prescott C-0 processor stepping, which causes your computer to hang when you restart after installing SP2.
It’s important to note in both cases that the problem is external. The real solution is updating your BIOS or getting rid of the spyware, but that’s cold comfort when your computer has stopped working and trying to install SP2 was the last thing you did.
OK, Microsoft identified these problems within a very short time after releasing SP2 to the world and came up with fixes to prevent the blue-screen errors and hangs. I’ll let my friend at Microsoft explain what happened:
Windows Update (WU) and Automatic Update (AU) can detect a machines configuration (regkeys and files installed) which is how we know when to offer specific security updates, when they have been installed, etc. (privacy note: WU downloads a blob of data that describes the fixes available and their respective requirements and the local machine actually scans itself, its not scanned by the server.) As soon as we became aware of these two issues in August, we immediately put “safety blocks” on WU and AU so that SP2 would not be offered to anyone with either of the two conditions you note, and documented it in a KB article.
Then, as we developed, tested and signed off on the specific fixes later, we then posted those fixes on WU/AU, and modified the detection logic. Thus, if a customer has tvmedia or the problematic Pentium chips, the updates are offered up front, instead of SP2. Once they are installed where needed, SP2 shows up via WU or AU. So a simple test is to go to Windows Update if you see SP2, then you dont have an issue. If you dont see SP2, but see one of these two packages, install it and then go back to WU. For the AU customer, this will happen automatically on the first day, the updates are installed, and on the next day, SP2 starts downloading.
Each of these updates is only offered to machines that needs them, not to the general population. This is one of the reasons we encourage average users to install SP2 via WU/AU, in addition to the download size savings.
Ironically, the people who have Windows Update and Automatic Update disabled are MOST likely to be bit by this issue. The nightmare scenario, in fact, is for an expert user to try to outsmart the system by downloading SP2 directly and then installing it manually. If you try to do this on a system that is afflicted with either of these problems, and you didn’t install one of the two patches designed to prevent the problem, the results will be ugly.
For those who prefer to be conservative about patches, it is easy to configure Automatic Update so that it downloads any necessary patches but doesn’t automatically install them. Instead, you get a notification in the taskbar alerting you that new patches are available. Click the icon to see the full list, read all the details, and decide for yourself whether you want to install them.