Discussion Locked

Skip updates - what are the risks?

0 helpful
3 replies
Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.

My enviroment:
A number of Win95 with Pent 100 MHZ and IE 5.5
A number of Win98 with Pent 233 MHZ and IE 5.5
A number of Win2K with IE 5.5
A Win NT 4.0 server for logins and file storage.
No Updates or service packs has been added since
august2002 to any of these. Now my boss is probably going to decide that no updates or service packs is going to be added this summer either. Due to budget cuts. What are the risks??

3 replies

by areets

Unfortunately, you'll not know until it is propably too late. You'll need to assess what the danger is and what is the recovery process and time envolved.

There is an online automatic updating for MS software, so why not make use of it.

SBS =Sustained Business Stability

TSP

by timwalsh

All updates and service packs are FREE to download. Not sure I understand what budget cuts have to do with any decision on whether or not to install updates.

Granted, there are many updates that are questionable as to whether you need them. However those updates that fall in the area of Critical Updates or Security-related updates gerally are released to patch newly-found security holes in a given operating system.

If your network is not connected to the Internet in ANY way, there probably aren't any risks associated with not installing these types of updates. If your network is connected to the Internet (even if only by dial-up), unless you have a VERY ROBUST and CURRENT firewall installed, you run great risk of a hacker gaining access to and possibly control over your network unless you install these OS Critical updates and security patches as they are released.

Service packs can be a different story. Generally, service packs do several things for you. They will usually include program enhancements as well as a roll-up of fixes for bugs found since the last service pack. They will also provide a roll-up of critical updates and security patches released since the last service pack. You could make an argument against applying service packs if your OS(es) are currently stable AND you are regularly applying critical updates and security patches.

by joseph moore

Well, I know that the WebDAV vulnerability in IIS that was a hot item about 2 months ago did have a patch for NT4. So, if you are running a NT4 IIS web server, you need this patch.
Without it, your IIS web server could be compromised using a tool that is out there that exploits the WebDAV vulnerability. So, this is a good patch to have.
The point I am trying to make is that as long as Microsoft releases patches for the older operating systems, then you need to keep patching the systems.
Goto windowsupdate.microsoft.com on your machines and see what patches are needed. Then load the patches.
Unfortunately, patch management is probably gonna wind up on people's resumes as time goes on. It is going to develop into a valid IT job skill.
Keep patching those systems!

This discussion is closed to new replies.