- home
- reviews
- news
- downloads
- cnet tv
HOLIDAY HELP DESK: Broadcasting live at 1:00 p.m., PT
- log in
- join CNET
- welcome,
- my profile
- log out

Editors' Picks

SP2: To install or not to install

Editors' picks

After a series of delays, Microsoft has unveiled its security-minded update to Windows XP, known as Service Pack 2. But for some in the business world, the response is "not so fast," as the software giant moves to iron out some kinks. Various holes, flaws and compatibility concerns are topping the list of reasons not to put SP2 installation on the to-do list--at least not yet.
August 25, 2004

The good

On the plus side, SP2 should improve controls in the Outlook e-mail program, bolster security in the Internet Explorer browser and provide users with more information and input over numerous security functions in the operating system.

Enterprise Windows IT Microsoft gets good grades on SP2
BBC News Key Windows update fully rolls out
CNET Reviews CNET editor's review
PCWorld Windows XP's big fix
Windows-Help.net Microsoft Windows XP Service Pack 2 review
CNET News.com Microsoft's blast from the past
CNET News.com AMD says its chips can boost PC security

The bad

About 50 software applications and games may encounter problems with SP2, and these aren't obscure programs. The list includes antivirus applications from Symantec, network management software made by Computer Associates International and multimedia tools from Macromedia. Microsoft also acknowledges that several of its own products, including Visual Studio .Net, Operations Manager, SQL Server and Systems Management Server software, must be tweaked to work properly with SP2.

CNET News.com After delays, Windows security update ready to go
CRN More vendors report SP2 woes
CNET News.com Microsoft lists SP2 conflicts
NewsFactor Network Holes reported in Windows XP SP2 update
BBC News Holes found in Windows XP update
CNET News.com Drag-and-drop flaw mars Microsoft's latest update

Microsoft responds

Amid negative reports, Microsoft moves quickly to limit the damage. While downplaying a report about SP2 flaws, the company begins issuing "hot fix" patches. It also tries to downplay expectations for the update, saying "there is no silver bullet" that will thwart future attacks.

NewsFactor Network Microsoft rebuts SP2 flaw reports
PCWorld Microsoft patches the patch
eWeek Microsoft: 'No silver bullet' for security problems

News to use

Still uncertain about whether you need to install SP2 soon, this last set of links could provide the answer. Microsoft has posted information tailored for consumers or developers and included tools for installing it on several networked computers.

CRM Daily Microsoft Advises I.T. Managers on SP2 Pro Problems
Microsoft Microsoft's Windows XP Service Pack 2 resources for IT professionals
eWeek Microsoft Corp.'s Windows XP Service Pack 2
CNET News.com Stumbling over SP2
Microsoft Watch Winding your way through the SP2 distribution maze
PCWorld Microsoft sends XP SP2 home

Audio and Video

Will SP2 protect your system?
When Microsoft's Service Pack 2 is finally released, will the new firewall feature offer adequate protection? Which processors will work with the update? ZDNet's David Berlind asks Rich Kaplan, vice president of Microsoft's Security Business & Technology unit.

Microsoft reveals efforts to close windows of vulnerability
Expected for release later this year, Microsoft XP Service Pack 2 focuses on three areas of security: default firewalls, automatic updates and scanning for current virus protection. At CeBit America in New York, Microsoft's Greg Sullivan tells ZDNet's David Berlind that while SP2 is a security improvement for Windows, it's just the first step in a continual fight against network threats.

Gates emphasizes security in Windows update
At the RSA Conference in San Francisco, Microsoft Chairman Bill Gates shows off an improved firewall and other security features that will be part of the upcoming Service Pack 2 for Windows XP.

Insight on Microsoft's proactive security endeavor
A Gartner expert weighs in on Bill Gates' RSA Conference announcement of Microsoft's new, "proactive" approach for network security.

Add a Comment (Log in or register) (32 Comments)

Haven't Microsoft been unfair giving us the impression SP2 was available?
by August 25, 2004 11:43 AM PDT: I think the majority of us have been SO frustrated the past week worrying as to why SP2 wasn't downloading when the update page had given the impression it was. I even emailed the support team regarding the lack of download box and even though they replied they failed to point out it wasn't available to EVERYONE.
Microsoft may have made pc's more widespread in the World, but they surely should not mislead us like that.Especially as the user will think that as a conseqeunce of not having the update they are vulnerable to the new malware that will inevitably occur taking advantage of people who haven't got it !; Like this Reply to this comment

Haven't Microsoft been unfair giving us the impression SP2 was available?
by August 25, 2004 11:43 AM PDT: I think the majority of us have been SO frustrated the past week worrying as to why SP2 wasn't downloading when the update page had given the impression it was. I even emailed the support team regarding the lack of download box and even though they replied they failed to point out it wasn't available to EVERYONE.
Microsoft may have made pc's more widespread in the World, but they surely should not mislead us like that.Especially as the user will think that as a conseqeunce of not having the update they are vulnerable to the new malware that will inevitably occur taking advantage of people who haven't got it !; Like this Reply to this comment

What??
by Smarterdanu August 25, 2004 12:43 PM PDT: What do you mean? Only so many people can download it at once, even Microsoft doesn't have enough server power to let everyone with XP to download SP2 at once. They'll get to you. Or it's downloading in the background already...; Like this Reply to this comment

What??
by Smarterdanu August 25, 2004 12:43 PM PDT: What do you mean? Only so many people can download it at once, even Microsoft doesn't have enough server power to let everyone with XP to download SP2 at once. They'll get to you. Or it's downloading in the background already...; Like this Reply to this comment

"Trustworthy" computing?
by August 25, 2004 12:45 PM PDT: How can we trust a company that somehow manages to release a product that isn't even compatible with a lot of their own mainstream products? Where I work, we do not recommend anyone install SP2 if you have an nvidia video card, any of the 50 apps, or care anything about your computers functionality. While it adds a lot "when it works", there is much too much risk in things breaking for it to be worth installing yet.; Like this Reply to this comment

"Trustworthy" computing?
by August 25, 2004 12:45 PM PDT: How can we trust a company that somehow manages to release a product that isn't even compatible with a lot of their own mainstream products? Where I work, we do not recommend anyone install SP2 if you have an nvidia video card, any of the 50 apps, or care anything about your computers functionality. While it adds a lot "when it works", there is much too much risk in things breaking for it to be worth installing yet.; Like this Reply to this comment

Just say no to beta testing
by August 25, 2004 2:09 PM PDT: I typically recommend to clients to wait at least 3-6 months before applying Microsoft updates like this. Security updates are applied as soon as feasible and as appropriate; but I have convinced most clients that they are better off waiting and not beta testing another Microsoft update. Being an early adopter of this SP is tantamount to beta testing. Now, there may be compelling reasons to be an early adopter; but people should understand the risks and benefits and then decide. There's no penalty for being prudent (at least not yet).

Good luck!; Like this Reply to this comment

Just say no to beta testing
by August 25, 2004 2:09 PM PDT: I typically recommend to clients to wait at least 3-6 months before applying Microsoft updates like this. Security updates are applied as soon as feasible and as appropriate; but I have convinced most clients that they are better off waiting and not beta testing another Microsoft update. Being an early adopter of this SP is tantamount to beta testing. Now, there may be compelling reasons to be an early adopter; but people should understand the risks and benefits and then decide. There's no penalty for being prudent (at least not yet).

Good luck!; Like this Reply to this comment

SP2 is fine! don't believe the media!
by August 25, 2004 2:47 PM PDT: SP2 works fine. I've thrown it at every machine I come across and I'm a network manager for over 1000 nodes. Everything works. It hasn't broken an application yet. Someday, the media will tire of bashing Microsoft's every move. And all of these "managers" that are putting SP2 on hold, it makes me wonder if they've actually tested it. Somehow I doubt it. Oh well. Some of us have tested it for months, know it well and we know it works.; Like this Reply to this comment

SP2 is fine! don't believe the media!
by August 25, 2004 2:47 PM PDT: SP2 works fine. I've thrown it at every machine I come across and I'm a network manager for over 1000 nodes. Everything works. It hasn't broken an application yet. Someday, the media will tire of bashing Microsoft's every move. And all of these "managers" that are putting SP2 on hold, it makes me wonder if they've actually tested it. Somehow I doubt it. Oh well. Some of us have tested it for months, know it well and we know it works.; Like this Reply to this comment

SP2 is fine
by August 25, 2004 3:22 PM PDT: I think any home user who is concerned about the security of his/her home computer should install this product a.s.a.p. I installed it with just a few problems which was easily resolved.; Like this Reply to this comment

SP2 is fine
by August 25, 2004 3:22 PM PDT: I think any home user who is concerned about the security of his/her home computer should install this product a.s.a.p. I installed it with just a few problems which was easily resolved.; Like this Reply to this comment

Acceptable
by Earl Benser August 25, 2004 3:30 PM PDT: If you think that a PC with XP, IE and OE is a first class computer
combination, then go for SP2. You are probaby going to need it.; Like this Reply to this comment

Acceptable
by Earl Benser August 25, 2004 3:30 PM PDT: If you think that a PC with XP, IE and OE is a first class computer
combination, then go for SP2. You are probaby going to need it.; Like this Reply to this comment

Wait
by August 25, 2004 4:19 PM PDT: I think Network administrator and Regular users should wait for this SP2 until it became perfect ( when Microsoft relase a patch ) til that time keep reading about the conflect that the SP2 make with your currently OS (which has been made ironkly by Microsoft); Like this Reply to this comment

Wait
by August 25, 2004 4:19 PM PDT: I think Network administrator and Regular users should wait for this SP2 until it became perfect ( when Microsoft relase a patch ) til that time keep reading about the conflect that the SP2 make with your currently OS (which has been made ironkly by Microsoft); Like this Reply to this comment