The Promise--And Problems--Of The New Windows Update

TechWeb - InformationWeek ^ | July 12, 2004 | Fred Langa

[Eagle9]

XP and Windows 2000 users soon will get a new version of Windows Update. Here's the full story, and remember, this is beta software, so be careful, Fred Langa says.

A new version of Windows Update is about to debut. It first appeared as part of the prerelease versions of Service Pack 2 for XP, which is still in beta as of this writing. But the Update software was separately released on its own in a free public beta about two weeks ago. The new Update process (comprising the software that resides on your PC and a new Update site that coordinates with that software) has different defaults and behaves differently from the Update you're probably used to: I suggest you read all the way through this article before deciding whether or not to try the beta on your system.

(click image for larger view)
Screen One The new Update site sports a fresh look and requires installation of a new Update applet.

But beta or not, one way or another, you're going to have to deal with these changes to Windows Update. In the next weeks or months, the final form of this software will be offered to you either as a normal Windows Update for XP and Windows 2000 or as part of the final released SP2 for XP. Once the software is complete and out of beta, Microsoft will work hard to get you to use it, so it's worth the time to learn about it now. Let's take a look:

When you click to the new Update site from Windows XP or 2000, you'll immediately notice that Update looks different. (See Screen One.)

	(click image for larger view)
	Screen Two The new Update site and software may initially require several steps to get set up fully, but the process is straightforward and reasonably well-explained.

When the Update site loads, you'll see a new site layout and graphic design, and you'll be offered a download of the new Update applet, which is mandatory if you wish to use the new site and features.

By the way, the new Update site and process is, at least for now, only for Windows XP and 2000. If you access the new Update site from Windows ME or 98, nothing happens; those versions of Windows revert to the current (old) Update software and site.

But XP and Win2K bring you to the new site. Your initial access to the new site may require several incremental downloads to install the new Update applet and then to install a catalog of available updates. (See Screen Two.)

(click image for larger view)
Screen Three The new Update offers you two major subchoices: Express or Custom installation of updates, giving you either a highly automated or a more manual approach to managing updates for your PC.

Once the new Update software is fully installed and running, you'll reach your first decision point: You must choose between Express and Custom installs for the updates you'll be downloading. The Express Install searches for and installs only "High Priority" updates, roughly analogous to what used to be called "Critical Updates." The Custom Install gives you more flexibility and potentially offers you more Updates: Not only the High Priority updates, as above, but also "Optional Updates," roughly analogous to the "Recommended Updates" in the old Update process. (See Screen Three.)

Note the "Automatic Update" panel in Screen Three. The new Update software defaults to full automatic mode: With no user input required, the software will detect, download, and install whatever updates it deems appropriate for your PC. This setting is convenient for some but can cause problems for others. We'll explore this more fully in a short while.

Unlike the old (current) Windows Update, which tends to be terse and fairly uninformative about the updates it offers, the new Update is far more friendly and open, with plain-English explanations of what the updates are and what they do. (See Screen Four.) And if the explanatory text is still insufficient, a "Details" pull-down provides additional information. (See Screen Five.)

(click image for larger view)				(click image for larger view)
Screen Four The new Update tries to explain the benefits of any available downloads more clearly than the classic Update does...				Screen Five ... with fuller, more technical explanations, including links to relevant Knowledgebase files, available via a "Details" pull-down.

Select An Update Mode

The actual update process hasn't changed much from that of the classic Update, although the appearance of the dialog boxes has been freshened. (See Screen Six and Seven.)

As we mentioned previously, the new Update process is quite conservative: Its default settings assume that everyone will want all "High Priority" (aka "Critical") updates to be downloaded and installed as soon as they're available, with no user input, intervention, or vetting.

(click image for larger view)				(click image for larger view)
Screen Six The new Update installation dialogs function much the same as those in the classic Update process...				Screen Seven ...... but the dialogs have been visually updated to match the look of the new Update site.

This may indeed be a good default choice for "average" users, as many of them never download or install any updates at all! (Witness the many worms in the last year or so that exploited Windows security holes that had been detected and fully patched before the worms were released: The worms succeeded solely because tens of millions of PCs had not been updated, and thus remained vulnerable.)

But odds are, if you're reading this text, you're not exactly an average user, and the default settings may not be ideal for you. That's because, sometimes, security patches introduce new problems or create new instabilities and conflicts. It's been fairly common practice among more experienced users to delay installing security patches for at least several days, so that any unexpected problems with the patch could come to light. In other words, let other users be the guinea pigs for new updates and patches!

Although the new Update defaults to "install everything automatically as soon as it's available," you can fairly easily tame it and thus remain in control of when and how updates will be detected, downloaded, and installed, as Screen Eight shows.

	(click image for larger view)
	Screen Eight The Automatic Update dialog shown here, plus the Settings and Administrator Options in the left-hand navigation bar of the main Update window, provide welcome flexibility in controlling what updates will be detected, downloaded, and installed on your PC.

The Automatic Update agent itself has four modes: It can operate in the default fully automated mode; it can detect and download new update items but not install them until you've given your explicit permission; it can merely inform you of new updates without actually downloading or installing anything; or it can be turned off completely.

Any of the options except the fully automatic one are fine for security-conscious users: These options put you in charge of what gets loaded onto your PC; you can postpone installation of new updates until you're reasonably sure the software is stable and worthwhile. But for casual users, the "set and forget" default mode is probably safer.

You can adjust the Automatic Update Agent settings at any time by clicking on "Pick a time to install updates" in the Automatic Update information panel that appears on the upper right portion of the main Update window. (See Screen Three.) Once the time-setting dialog opens, click on the "More Options" button and you'll then see the full, four-option Automatic Update dialog, as shown in Screen Eight. You also can reach the same dialog by clicking on the "Configure Automatic Updates" link that may appear at the end of an update, as shown in Screen Seven. As is usual with Windows, there are multiple ways to accomplish any given task, and the one that's "right" is whatever works for you.

The Update site itself also offers some additional customizations and controls: The "Settings" option lets you pick.

 

 

Beta Means Unfinished

The new Update seems promising, but there are a couple of caveats:

First, although everything ran smoothly on the six systems I tried it on, this is beta--which is to say, unfinished--software. There almost surely are bugs, and the software may change in major ways before final release. It's always wise to prepare for the worst with any beta software: Don't install it on any machine unless you have a full, current, and bulletproof means of rolling the system back to the way it was before you installed the beta. (For an example, see this article.)

Second, if you do install this beta, take a moment to adjust the Automatic Update agent, as described above, or you may find yourself getting more than you bargained for. For example, if you use XP, and if you accept the default for full automatic installation, then you may find yourself unexpectedly test-driving not just the new Update, but also the huge, potentially problematic beta version of XP's Service Pack 2, which is one of the updates available through the new Update agent. (We'll cover SP2 in future articles, closer to its release date.) To prevent this kind of surprise, turn off or restrict Automatic Updates so that, at the very least, you get to approve which updates are allowed to install on your PC.

Finally, whether or not you try the beta, this new Update (or something very much like it) is almost certainly in your future. You may wish to bookmark this article or otherwise make note of it so you can return here at the appropriate time to refresh yourself on the options the new Update offers.

But for now, please join the discussion: Have you tried the new Update? What has your experience been? Has any of your installed software been broken or adversely affected by the Update Agent or the "sniffing" routines used by the agent to detect and catalog what's on a PC? Have you found instances where Update suggested inappropriate software or failed to report necessary updates? Please share your knowledge by joining in the discussion!

---

To discuss this column with other readers, please visit Fred Langa's forum on the Listening Post.

To find out more about Fred Langa, please visit his page on the Listening Post.

[ThinkDifferent]

For example, if Mac ported it's OS to the x86 processor; I would expect them to take marketshare by storm.

Microsoft would respond by immediately discontinuing Office for the Mac. That's a battle neither Apple nor MS wants at this time.

I (personally) have witnessed the Mac OS running on x86 processors in the early 90's.

Ah, Star Trek. Never saw that, but I did run Rhapsody (which became the first version Mac OS X Server) on a PC and it was quite good. (I also ran it in Virtual PC on Mac OS 9, just to see if it would work, which it did).

[Bush2000]

I've seen the list. It's a yawner - except for the NX support. That is the most interesting technical development.

The issue isn't whether you find the update boring, HAL. Clearly, based on that list, it contains a lot of major new functionality. People can run your comments through the usual "expunge-Microsoft-hatred" filter and draw their own conclusions. As for me, I'm glad that I don't have to open my wallet to Jobs just to get security updates and wrapping that fish along with a few apps that Apple acquired by buying some shmoe company.

[Bush2000]

That's specific to your situation, and should be treated as such each and every time.

I only pointed it out because it contradicted your previous statement:

" That may be true for windows boxes, but there is no reason to ignore patching a linux box. There is not the risk of breakage that exists with windows patches."

[HipShot]

I used examples to point out that you are indeed correct about the nature of some patches, but they can be managed.

Windows patches, OTOH, often break entirely unrelated things and often introduce new security issues.

[alexandria]

Microsoft does not charge for any updates whatsoever.

Excuse please, you did not pay for your upgrade to Windows XP from say Windows 2000 or ME?
Apple is the same as Microsoft in the respect that you pay for "system" upgrades but not updates.

[Eagle9]

I do like that IE blocks popups now, but for most of my work, I use Firefox.

Same here. I use Firefox, almost exclusively.

[HAL9000]

Clearly, based on that list, it contains a lot of major new functionality.

Congratulations on getting some new features in Windows that shipped in Mac OS X years ago.

As for me, I'm glad that I don't have to open my wallet to Jobs just to get security updates and wrapping that fish along with a few apps that Apple acquired by buying some shmoe company.

The last major update Apple charged for was in 2003, and the next one will be in 2005. That is a reasonable interval. It's not mandatory to purchase updates - many users are happy with the older versions - but the latest version (Panther) has a very high adoption rate with Mac users.

Mac OS X now has 12 million users, and seems to be well on the way to 20 million in the future.

[Eagle9]

That has to be a real headache. I wish that I could help ....

[Musket]

Thanks. I'm gonna Google around on it when I get some time.

[Bush2000]

Congratulations on getting some new features in Windows that shipped in Mac OS X years ago.

Congratulations to Apple for repackaging BSD features. /SARCASM

The last major update Apple charged for was in 2003, and the next one will be in 2005. That is a reasonable interval. It's not mandatory to purchase updates - many users are happy with the older versions - but the latest version (Panther) has a very high adoption rate with Mac users.

Keep your wallet handy.

Mac OS X now has 12 million users, and seems to be well on the way to 20 million in the future.

No way, there aren't that many metrosexuals...

[N3WBI3]

umm no,

The difference between OS10.1 and OS10.2 is equivelant to the Difference betwenn NT5 and NT5.1 or have they started making XP a free update to 2000?

[N3WBI3]

Call it a corporate line if you want, but that doesn't change the fact that I've received every update for Win2000 since Feb 2000, major and minor, free of charge.

Ok and this differs from Linux how? I have never paid for a Linux update..

Red Hat only offered support on any given distribution for one year.

Gee I better call them and tell them the patches I am getting from the legacy project should be taken off the site because you say they only give them out a year.

A couple of problems with that statement.

1) Redhat is not *Linux* its a company that sells Linus Products, like Suse..

2) Its just plain wrong, Redhat offers one year of helpdesk support, the produce the updates going back to RedHat 7.2 which is more than three years old.

3) In addition to this the YUM servers receive updates directly from the projects (like FireFox) so if there is an update you get it.

4) Finally Major updates (like the new versions) are Free.

After that, they force you to upgrade to the next version. And that's even for their paying customers, like me.

Again that Bunk Im running AS2.1 servers that are still being updated through RHN and will be for the next three years (at least).

Of course, we know how they dumped their desktop line OS altogether, leaving many left in the lurch

Oh yea, no desktop edition of Redhat Nothing to see here move along. They may have change their pricing model (which did tick me off) but they still offer a desktop edition. In addition to this there is Fedora Which is a redhat offering for free, and which picked up where redhat 9 left off.

Dont know too much about Mac but my Mother and Wife seem to get updates for free...