Microsoft has announced it will upgrade Windows' update mechanism later this month, a warning that comes nearly a year after the company issued a similar upgrade without informing users.
Last September, reports of Microsoft conducting a "stealth" update of its Windows Update (WU) service angered users and put the company on the defensive.
"Beginning at the end of this month and continuing over the next few months, we'll be rolling out an infrastructure update to the Windows Update agent," said Michelle Haven, a product manager in the Windows Update group, in a posting to the team's blog late last Thursday.
Haven went on to say that the update, which would affect both Microsoft's back-end update infrastructure as well as the client-side software necessary to use WU directly or access it through a Windows Server Update Services (WSUS) server. She also said users would see few, if any, visible changes in the WU software or process, but that scanning performance would improve. "We've invested heavily in reducing the amount of time it takes the Windows Update agent to scan to see if new updates are available," she said. "We've seen some instances of the scan times on some machines decreasing almost 20 per cent."
Microsoft revises the WU infrastructure and client software annually, said Haven.
Haven's pre-release announcement was in stark contrast to last year, when users raised a ruckus after discovering that Microsoft had updated files related to the Windows Update client even when they had disabled the operating systems' automatic installation option.
Microsoft's response then was that it had engaged in the practice before, and the client-side software needed to be updated -- no matter what the user settings -- in order to guarantee receipt of future security patches.
Haven made the same case last week. "To avoid a false sense of security, the Windows Update client automatically checks for and installs any available infrastructure updates anytime a system uses the Windows Update service, independent of the settings for how it handles updates," she said.
The only setting that will not result in the WU client software being updated, Haven added, is the "off" option, which is labeled "Turn off Automatic Updates" in Windows XP and "Never check for updates" in Windows Vista.
Some users weren't happy, even with Microsoft's advance notice. "It [is] unfortunate you didn't take the opportunity of XP SP3/Vista SP1 to fix this obviously incorrect behavior and regain users' trust, especially after the contraversy [sic] this caused back in September," said a user identified only as "thingy" in a comment to Haven's post. "As it is, you are still ignoring an explicit user instruction to 'don't download or install things on my machine without my permission'."
Last year, after the initial reports of WU's stealth updating, Microsoft acknowledged it could have done a better job informing users. "The point of this explanation," said Nate Clinton, a WU program manager in September 2007, "is not to suggest that we were as transparent as we could have been; to the contrary, people have told us that we should have been clearer on how Windows Update behaves when it updates itself.
Read up on the latest ideas and technologies from companies that sell hardware, software and services. Simplify, Integrate and Secure: Providing Secure Access to Server-based Information and Resources Across Platforms
Simplify, Integrate and Safeguard Your Business with Secure Web Business Enablement
Everything you need to know about email and web security (but were afraid to ask)
Simplify and Secure: Managing User Identities Throughout their Lifecycles
BT saves more than £15 million and improves customer services with comprehensive Identity & Access Management
Dude! You Say I Need an Application-Layer Firewall?!
Radicati Market Quadrant 2008 on Corporate Web Security
Refresh your AUP: Top tips to ensure your acceptable use policy is fit for purpose
Zones provide focussed content from Computerworld and leading technology partners.Security Management
Protect your critical IT assets, achieve sustainable regulatory compliance, reduce IT administration costs and enable new business opportunities with our IT security solutions.
IT Security as a business enabler?
Download Whitepaper
|
Success Stories
Australian Unity minimises costs and maximises productivity with single sign-on for 1,400 users
Australian Unity needed to address its business and security risks including user management and application security management. The company chose an enterprise single sign-on (ESSO) solution and discovered increased employee productivity, reduced help desk costs and elevated data protection.
Download the full Success Story
BT saves more than £15 million and improves customer services with comprehensive Identity & Access Management
To enable future growth and ensure its services remain competitive, BT needed to build closer relationships with its customers and suppliers. Discover how the company is now performing over 36 million transactions a day with their improved Identity & Access Management Solution.
Download the full Success Story
Identity & Access Management
Simplify and Secure: Managing User Identities Throughout their Lifecycles
Organisations are constantly challenged to keep pace with ongoing changes to users and their roles, responsibilities and requirements. Discover how CA can help you create a unified approach for managing users identities, providing them with timely and appropriate access to applications and information.
Download Whitepaper
Simplify, Integrate and Safeguard Your Business with Secure Web Business Enablement
Modern organisations are required to aggressively expand the number and type of Web applications and services provided to customers, partners and employees. Discover how to automate, delegate and centralise your key processes and services including user administration, access policies, auditing and compliance by reading on.
Download Whitepaper
Simplify, Integrate and Secure: Providing Secure Access to Server-based Information and Resources Across Platforms
Distributed servers are a powerful asset in any company’s infrastructure. Over time, most organisations have acquired a variety of different platforms and are relying on them to house an increased amount of critical applications, processes and data. Read on to discover how you can achieve a consistently higher level of server access security across multiple platforms including virtual hosts and guest operating systems.
Download Whitepaper












