Windows Secrets newsletter confirms my suspicions. Many companies and individuals require prior notification before any files are changed, so I explain today how you can completely prevent silent installs, if you wish. Reaction from Microsoft to the article was almost immediate. In a post the same day on the Microsoft Update Product Team Blog, program manager Nate Clinton confirmed that updates to Windows Update itself are performed without notifying users. This is true even if users specify Let me choose when to install them or Notify me but don't automatically download or install (two of the four options available to users). In his statement, Clinton acknowledged that the silent file writes are not what users expect after they disable automatic installs: "The point of this explanation is not to suggest that we were as transparent as we could have been; to the contrary, people have told us that we should have been clearer on how Windows Update behaves when it updates itself. This is helpful and important feedback, and we are now looking at the best way to clarify WU's behavior to customers so that they can more clearly understand how WU works." http://windowssecrets.com/links/rwf...s-update-keeps-itself-up-to-date.aspx#1950960
In a series of three blog posts, Wilcox wrote that nothing in the Windows Update Privacy Statement gives Microsoft "permission to update without user consent" (Sept. 12); that "the silent downloads also raise questions about ownership" of users' PCs (Sept. 13); and that Microsoft was using the existence of its employees' blog posts "to avoid answering tough questions the news media might ask about privacy and Windows Update" (Sept. 14). Adding more from Windows Secrets here- One blog, Nynaeve, recounted yet another downside to the silent updates. The patching process had awakened the blogger's portable computer from standby mode at 3:00 a.m. while stored in an insulated laptop bag. Because the update process failed to put the computer back into standby after the installation, the laptop's battery was exhausted by the time the writer discovered the problem later that day. Furthermore, the fact that the computer was running in a bag for so long could damage the machine and might even pose a fire hazard.
Windows Secrets states to prevent all this- turn OFF Auto Updates in Automatic Updates or Security Center located in the Windows control panel. That could cause bootup warnings the newsletter says. "There's no evidence that these files are harmful or cause any software conflicts." Except maybe burn your laptop up when its suspended in a bag. By the way, our neighbors house burnt down recently and the firemen blamed it on a computer downloading while unattended. That's not what other neighbors thought.
How to put an end to silent updates, according to WINDOWS SECRETS- You know that changing settings in your computer can cause undesirable results, so document any changes you make, AND don't hold me responsible for following any of this advice. [wazzat]. It's important to note that there is no reason to remove or roll back the updated support files that Windows Update may have installed on a PC. There's no evidence that these files are harmful or cause any software conflicts. Furthermore, if you use a corporate patch management solution, such as Microsoft's WSUS (Windows Server Update Services), you circumvent Windows Update and no files will be installed by WU. But if you're an individual or a small business using Windows Update (or its enhanced sibling, Microsoft Update), you may be concerned about Microsoft installing patches before you've had a chance to research their reliability. In that case, you can completely turn off the Automatic Updates Agent, thereby preventing updates or even notifications from occurring. If you take this step, you'll become solely responsible for learning about new Microsoft patches yourself. I'll explain below how to adapt to this situation. In the meantime, here's how to turn off Automatic Updates and prevent stealth installs: In Windows XP, take these steps: Step 1. Open Control Panel and launch Automatic Updates (in the Security Center category). Step 2. Select Turn off Automatic Updates. Click OK. In Windows Vista, take these steps: Step 1. Open Control Panel and launch Windows Update (in the System and Maintenance category). Step 2. In the left pane, click Change settings. Step 3. Click Never check for updates (not recommended). Click OK. Step 4. Click Continue, if prompted by User Account Control. With Automatic Updates turned off, Windows Update will still update itself (and notify you of patches), but only when you manually launch Windows Update and give your consent. What to do about repeated boot-up warnings Turning off Automatic Updates can cause Windows Security Alert pop-up balloons to appear in the taskbar tray every time you log on. (See Figure 1.) Figure 1. Turning off Automatic Updates causes scary error balloons featuring a red shield. If this bothers you, Windows XP allows you to suppress any warnings that relate to Automatic Updates. You can also do this in Vista but, unfortunately, the newer OS forces you to turn off all security alerts just to suppress the Automatic Updates warnings. To eliminate the warning balloons about Automatic Updates in both XP and Vista, take these steps: Step 1. Double-click the red shield icon in the taskbar, or open the Control Panel and launch the Security Center. Step 2. In the left pane or box, click Change the way Security Center alerts me. Step 3. In XP, uncheck Automatic Updates and click OK. In Vista, select the second or third option. Use Secunia's Software Inspector to check for updates With the Windows Update Agent turned off, how will you know if you have the latest security patches and updates you need? First, read the Windows Secrets Newsletter that comes out two days after Patch Tuesday. Look in our paid section for descriptions of any patches that are reported to have negative side-effects, and use our recommended workarounds if any problems might affect you. (How to get the paid version.) Then, to check for needed updates to Windows and dozens of other programs, use the Secunia Software Inspector. This free service was described in the Aug. 16 and Sept. 6 issues of Windows Secrets. Once you know what updates you need, you can visit the Microsoft Update Web site, which offers updates for both Windows and Microsoft Office. The Secunia report includes a link to Microsoft's site and other update sites so you don't even have to bookmark them. Users don't expect Microsoft to be perfect. But because of the company's very human mistakes with some previous updates, many customers understandably want to do their homework before installing every patch Microsoft offers. If the company's own software settings can't be trusted to provide that level of control, users will continue to seek alternatives.
hmmm actually i read some of what you have said and thanks for taking time to warn others, i have noticed exactly what you said about something going on while you are doing nothing so i installed a firewall called sygate and i dont have to turn off my windows update and get the antivirus annoying warnings to turn on the windows update i notice that sygate doesnt allow windows update untill you exit the firewall its strange but thats what happened to me.
Ok Muslim, thanks for reminding me that I'm using XP firewall and have F-Secure disabled. Microsoft wouldn't reject its own communications? Haven't checked the settings, duh.
