Microsoft aims to prevent another patch disaster by issuing update-blocking tool

NETWORK WORLD NEWSLETTER: DAVE KEARNS ON WINDOWS NETWORKING TIPS
06/29/05
Today's focus: Microsoft aims to prevent another patch disaster
by issuing update-blocking tool

Dear security.world@gmail.com,

In this issue:

* Microsoft releases tools to block auto download of Windows
  Server 2003 SP 1
* Links related to Windows Networking Tips
* Featured reader resource
_______________________________________________________________
This newsletter is sponsored by Oracle
Boost the quantity and quality of customer interactions!

How can companies get a fuller, sharper picture of their
customers to boost the quantity and quality of customer
interactions? By creating a standardized customer-data model via
an "information grid." IDC analyst Stephen Hendrick explains how
to achieve a "360-degree view" of customers for better selling
and marketing.
http://www.fattail.com/redir/redirect.asp?CID=107453
_______________________________________________________________
LICENSE TO KILL

Mainstream companies are starting to reap benefits from
harnessing unused computing power. By lashing together sometimes
hundreds of servers to create a powerful grid, businesses are
using their technology better. But software licensing,
organizational and cultural issues, and data management can be
barriers to grid adoption. Find out how to overcome these
barriers - click here:
http://www.fattail.com/redir/redirect.asp?CID=107404
_______________________________________________________________

Today's focus: Microsoft aims to prevent another patch disaster
by issuing update-blocking tool

By Dave Kearns

You're an experienced network manager. You're also an
experienced desktop manager (even if it's only your own
desktop). When it comes to administering Microsoft's patches and
fixes for your desktop operating system (either at home or in
the office), do you let it happen automatically, without your
knowledge as a background task? Neither do I.

When Windows XP service pack 2 was released last year, it was
quickly discovered that: a) it was being automatically
downloaded and installed by corporate machines behind the
enterprise firewall; and b) it broke a number of applications.
This resulted in: a) enterprise network bandwidth being sucked
up by simultaneous service pack downloads; b) help desks being
deluged with phone calls because strange things (either the
update, the broken apps, or both) were happening on users'
desktops; and c) a large number of calls to important people at
Microsoft from some of its biggest customers screaming for
relief. Some organizations went as far as completely closing
down Internet access to prevent the service pack from being
downloaded.

Microsoft responded with some workarounds to prevent the
automatic download and update that seemed to, for the moment,
satisfy corporate clients. Redmond evidently learned from this
fiasco.

Last week, Microsoft director of product management for the
Windows Server division, Samm DiStasio announced the
availability of not one, but three different tools to block the
automatic download and installation of Windows Server 2003
Support Pack 1. (While Win 2K3 SP1 was released some months ago,
it's being held back from automatic update until July 1.)

<aside> I've known DiStasio for quite a few years; he used to
spend many an hour explaining to me why eDirectory was superior
to Active Directory. Of course, he was a marketing exec at
Novell at the time. But I do still have some juicy quotes I
could use!</aside>

According to the Network World story by John Fontana (
<http://www.networkworld.com/nlwnt2901> ), the tools are a
Microsoft signed executable, a script and an ADM template.

The story reports that: "The executable creates a registry key
with a switch that will block or unblock the download of the
service pack while allowing all other patches and fixes to be
downloaded. The script will do the same thing as the registry
key, but Microsoft says it allows users to specify a block or
unblock on a specific machine name. The third option is the ADM
template, which works in conjunction with Active Directory's
group policy technology. The template includes new group policy
settings to block or unblock delivery of the service pack."

Microsoft did warn that the executable and the script were only
tested as stand-alone command-line tools, not with any systems
management tools or remote execution mechanisms. The tools are
designed to keep Windows Server 2003 SP1 off the automatic
update cycle until March 30, 2006.

Why anyone would have automatic update turned on for servers is
beyond me, but fortunately Microsoft foresaw that at least some
folks might and is providing the tools to overcome that
oversight. Thanks Microsoft.
_______________________________________________________________
To contact: Dave Kearns

Dave Kearns is a writer and consultant in Silicon Valley. He's
written a number of books including the (sadly) now out of print
"Peter Norton's Complete Guide to Networks." His musings can be
found at Virtual Quill <http://www.vquill.com/>.

Kearns is the author of three Network World Newsletters: Windows
Networking Tips, Novell NetWare Tips, and Identity Management.
Comments about these newsletters should be sent to him at these

respective addresses: <mailto:windows@vquill.com>,
<mailto:netware@vquill.com>, <mailto:identity@vquill.com>.

Kearns provides content services to network vendors: books,
manuals, white papers, lectures and seminars, marketing,
technical marketing and support documents. Virtual Quill
provides "words to sell by..." Find out more by e-mail at
<mailto:info@vquill.com>
_______________________________________________________________
This newsletter is sponsored by Oracle
Boost the quantity and quality of customer interactions!

How can companies get a fuller, sharper picture of their
customers to boost the quantity and quality of customer
interactions? By creating a standardized customer-data model via
an "information grid." IDC analyst Stephen Hendrick explains how
to achieve a "360-degree view" of customers for better selling
and marketing.
http://www.fattail.com/redir/redirect.asp?CID=107452
_______________________________________________________________
ARCHIVE LINKS

Breaking Windows networking news from Network World, updated
daily: http://www.networkworld.com/topics/windows.html

Operating Systems Research Center:
http://www.networkworld.com/topics/operating-systems.html

Archive of the Windows Networking Tips newsletter:
http://www.networkworld.com/newsletters/nt/index.html
_______________________________________________________________
FEATURED READER RESOURCE
CALL FOR ENTRIES: 2005 ENTERPRISE ALL-STAR AWARDS

Network World is looking for entries for its inaugural
Enterprise All-Star Awards program. The Enterprise All-Star
Awards will honor user organizations that demonstrate
exceptional use of network technology to further business
objectives. Network World will honor dozens of user
organizations from a wide variety of industries, based on a
technology category. Deadline: July 8. Enter today:
<http://www.networkworld.com/survey/easform.html?net>
_______________________________________________________________
May We Send You a Free Print Subscription?
You've got the technology snapshot of your choice delivered
at your fingertips each day. Now, extend your knowledge by
receiving 51 FREE issues to our print publication. Apply
today at http://www.subscribenw.com/nl2

International subscribers click here:
http://nww1.com/go/circ_promo.html
_______________________________________________________________
SUBSCRIPTION SERVICES

To subscribe or unsubscribe to any Network World e-mail
newsletters, go to:
<http://www.nwwsubscribe.com/Changes.aspx>

To change your e-mail address, go to:
<http://www.nwwsubscribe.com/ChangeMail.aspx>

Subscription questions? Contact Customer Service by replying to
this message.

This message was sent to: security.world@gmail.com
Please use this address when modifying your subscription.
_______________________________________________________________

Have editorial comments? Write Jeff Caruso, Newsletter Editor,
at: <mailto:jcaruso@nww.com>

Inquiries to: NL Customer Service, Network World, Inc., 118
Turnpike Road, Southborough, MA 01772

For advertising information, write Kevin Normandeau, V.P. of
Online Development, at: <mailto:sponsorships@nwfusion.com>

Copyright Network World, Inc., 2005