Questions

Microsoft security updates

Tags:
+
0 Votes
Locked

Microsoft security updates

softvice
I have been wondering about Microsoft eternal security updates for XP. Could they not have finished developing XP before launching Vista. My question is: do I really have to download all the updates if I am using a broadband router with a built in firewall as well as an up to date antivirus software? The updates are costing me a fortune in bandwidth as I have to update 4 PC's on the network and each one downloads it's own updates. Is there a way to download the updates and save it to deploy to the other PC's on the network later?
  • +
    0 Votes
    deetee2000

    The Update service uses BITS to download the updates from a server on the Internet, so it shouldn't impact your network's performance that much even with 4 clients all pulling down updates. I'd suggest either scanning your internal network for possible virus/spyware or revise your network layout? Also, you could schedule the downloads to occur during off hours.

    +
    0 Votes
    Info-Safety, LLC

    Security updates patch exploitable flaws in the operating system. New exploits are developed every day, and MS patches the OS as time and priorities permit. You should always keep your OS patched with the latest security updates. These will keep coming until MS discontinues support.

    Shavlik Technologies' HFNetChkPro is one patch management package.

    I hope this helps.

    Craig Herberg
    http://info-safety.com

    +
    0 Votes
    TheChas

    Yes, you can manually download most patches and deploy them across multiple computers.

    I burn a CD and deploy patches for my clients that have only dial up available.

    There are 3 methods to get the updates.
    Subscribe to the TechNet Security Email.
    That way, you get email notification of security updates and links to the related knowledge base articles. Most of the articles have links to downloads for the patches.

    The next method is to use the Windows Update Catalog.

    http://v4.windowsupdate.microsoft.com/catalog/en/default.asp?allowv4cat=true

    This page allows you to download some patches that are not available from download links.

    The final method is to use the Downloads page at Microsoft.com and select the downloads you need.

    As to your main question, even with a firewall, there are risks that exploit security holes that can get past a firewall. I would not connect an unpatched system to a network.

    As to your secondary question, there is no way to fully test all the ways that the code in an operating system could be comprised. As with any product, there are always things that could be done to make it better. There comes a point where the cost of development exceeds the expected return on the product.

    Chas

    +
    0 Votes
    softvice

    Thanks for the tips. I had a look at the various websites and will certainly make use of it. I still wonder why Microsoft do not supply a "SP3" CD with all updates etc. since SP2 came out in 2004. I had to do a reinstall of Win XP after a major hardware upgrade and had to re download all the updates and patches as the system reverted back to native SP2 status.

    +
    0 Votes
    Absolutely

    http://articles.techrepublic.com.com/5100-10877-6150784.html

    The old saw about things that seem too good to be true, also applies to some that seem too onerous to be true. When you're about to undertake an IT task that seems unbelievably time-consuming, somebody has probably also found, and posted, a shortcut somewhere on the Internet. Many of the good ones end up here.

    +
    0 Votes
    TheChas

    There was a news article the other day that Service Pack 3 for XP is scheduled for some time in 2008.

    Chas

  • +
    0 Votes
    deetee2000

    The Update service uses BITS to download the updates from a server on the Internet, so it shouldn't impact your network's performance that much even with 4 clients all pulling down updates. I'd suggest either scanning your internal network for possible virus/spyware or revise your network layout? Also, you could schedule the downloads to occur during off hours.

    +
    0 Votes
    Info-Safety, LLC

    Security updates patch exploitable flaws in the operating system. New exploits are developed every day, and MS patches the OS as time and priorities permit. You should always keep your OS patched with the latest security updates. These will keep coming until MS discontinues support.

    Shavlik Technologies' HFNetChkPro is one patch management package.

    I hope this helps.

    Craig Herberg
    http://info-safety.com

    +
    0 Votes
    TheChas

    Yes, you can manually download most patches and deploy them across multiple computers.

    I burn a CD and deploy patches for my clients that have only dial up available.

    There are 3 methods to get the updates.
    Subscribe to the TechNet Security Email.
    That way, you get email notification of security updates and links to the related knowledge base articles. Most of the articles have links to downloads for the patches.

    The next method is to use the Windows Update Catalog.

    http://v4.windowsupdate.microsoft.com/catalog/en/default.asp?allowv4cat=true

    This page allows you to download some patches that are not available from download links.

    The final method is to use the Downloads page at Microsoft.com and select the downloads you need.

    As to your main question, even with a firewall, there are risks that exploit security holes that can get past a firewall. I would not connect an unpatched system to a network.

    As to your secondary question, there is no way to fully test all the ways that the code in an operating system could be comprised. As with any product, there are always things that could be done to make it better. There comes a point where the cost of development exceeds the expected return on the product.

    Chas

    +
    0 Votes
    softvice

    Thanks for the tips. I had a look at the various websites and will certainly make use of it. I still wonder why Microsoft do not supply a "SP3" CD with all updates etc. since SP2 came out in 2004. I had to do a reinstall of Win XP after a major hardware upgrade and had to re download all the updates and patches as the system reverted back to native SP2 status.

    +
    0 Votes
    Absolutely

    http://articles.techrepublic.com.com/5100-10877-6150784.html

    The old saw about things that seem too good to be true, also applies to some that seem too onerous to be true. When you're about to undertake an IT task that seems unbelievably time-consuming, somebody has probably also found, and posted, a shortcut somewhere on the Internet. Many of the good ones end up here.

    +
    0 Votes
    TheChas

    There was a news article the other day that Service Pack 3 for XP is scheduled for some time in 2008.

    Chas