Stealth Windows Updates

The Windows Update client software silently updates itself, even on computers for which the user has opted out of automatic update installation. Most large companies will not be affected by this behavior, which was discovered by users during a recent round of updates. However, the incident raises doubts about the trustworthiness of Microsoft’s online services and the company’s stated policies for managing them.

Updating the Updater

Many consumers and small businesses rely on the free Microsoft Update online service to update Microsoft software, including Windows and Office, and on Windows Update to update the OS, rather than using the more complex Windows Server Update Services or System Center Configuration Manager products. Both free online services rely on Windows Update (also known as Automatic Update), a client that maintains the Microsoft software on their computers.

However, a number of updates distributed through Microsoft’s online update services have caused problems when installed. For example, two patches released in Aug. 2006 were faulty and had to be reissued multiple times. One went through two versions, and the other three, in less than a month. Consequently, sophisticated users often take advantage of Windows Update client options to download and notify but not install updates or to only notify the user when updates are available. Users can then wait to review the updates and see if there are any reported problems before installing them.