For links to every topic in this issue, scroll down to the Index

Free scan: increase your PC speed now PC Pitstop's Free Optimize Scan will automatically diagnose problems with your PC and give you a custom report detailing issues that are hurting your PC's performance. Scan your PC for free today! www.pcpitstop.com

Be more productive in Microsoft Outlook Save time in Outlook with these powerful utilities: Attachment Save — automatically save attachments when e-mail arrives, Schedule Recurring E-mail — send regularly occurring e-mails, and more. See our entire list of 36 powerful add-ins on our Web site. www.SperrySoftware.com

Backup your data with ZipBackup Finally, a backup program that is easy to use. ZipBackup's Wizard makes backups a snap for beginners. Filtering, scheduling, and disk spanning make it a powerful tool for experts. For a limited time, Windows Secrets readers receive 25% off. www.zipbackup.com

See your ad here

Contents  Index

Do-it-yourself home renovations Highly recommended site for anyone who wants to build a set of stairs, construct a backyard shed, deck, picnic table, gazebo, dog house, etc., or even build a house. Get e-mailed answers to your questions about your own project from an expert. www.daveosborne.com

Get your product seen by 270,000 readers Does your company offer a product or service? Now you can place an ad in the Windows Secrets Newsletter and be seen by more than 270,000 active buyers of PC hardware and software. Bid as much or as little as you like to get the ideal ad placement. www.WindowsSecrets.com

See your ad here

By Scott Dunn Microsoft has confirmed Windows Secrets' Sept. 13 story that Windows Update periodically installs certain files even if you've selected a "do not install" option. Many companies and individuals require prior notification before any files are changed, so I explain today how you can completely prevent silent installs, if you wish.

• "The point of this explanation is not to suggest that we were as transparent as we could have been; to the contrary, people have told us that we should have been clearer on how Windows Update behaves when it updates itself. This is helpful and important feedback, and we are now looking at the best way to clarify WU's behavior to customers so that they can more clearly understand how WU works."
  

• "Your comments are completely understandable and I'm making sure the WU team is well aware of how the community feels on this issue. You'll note in Nate's post (the one I linked to) that we freely admit to having fallen down on this issue and that we can, and should, do better when it comes to behaviors of this type and the necessary disclosure of same. Please know that we hear what you have to say and are taking your feedback seriously. (I, for one, want to avoid similar events in the future, as reactive posts such as this one are not what I want to spend my time blogging about.)"
  

• "The situation I am describing is *exactly* the same thing as happens with a out of the box XP SP2 install, you see a WU update available and nothing more. Once you install WU, you see the dozens of other updates available. Works great in theory, and in practice.
  
  "There is absolutely no excuse for updating executable code on a customer's machine when the customer has selected a choice of 'but let me choose whether to install them.' Period. Full stop. No exceptions."
  

• "But all of those details shouldn't obscure the bottom line: According to the evidence assembled by Windows Secrets, these updates were silently downloaded and installed, without notifying end users, even in cases where those end users had specifically told Microsoft, through their PC settings, not to install updates without letting them choose to do so."
  

How to put an end to silent updates

It's important to note that there is no reason to remove or roll back the updated support files that Windows Update may have installed on a PC. There's no evidence that these files are harmful or cause any software conflicts.

Furthermore, if you use a corporate patch management solution, such as Microsoft's WSUS (Windows Server Update Services), you circumvent Windows Update and no files will be installed by WU.

But if you're an individual or a small business using Windows Update (or its enhanced sibling, Microsoft Update), you may be concerned about Microsoft installing patches before you've had a chance to research their reliability. In that case, you can completely turn off the Automatic Updates Agent, thereby preventing updates or even notifications from occurring.

If you take this step, you'll become solely responsible for learning about new Microsoft patches yourself. I'll explain below how to adapt to this situation. In the meantime, here's how to turn off Automatic Updates and prevent stealth installs:

In Windows XP, take these steps:

Step 1. Open Control Panel and launch Automatic Updates (in the Security Center category).

Step 2. Select Turn off Automatic Updates. Click OK.

In Windows Vista, take these steps:

Step 1. Open Control Panel and launch Windows Update (in the System and Maintenance category).

Step 2. In the left pane, click Change settings.

Step 3. Click Never check for updates (not recommended). Click OK.

Step 4. Click Continue, if prompted by User Account Control.

With Automatic Updates turned off, Windows Update will still update itself (and notify you of patches), but only when you manually launch Windows Update and give your consent.

What to do about repeated boot-up warnings

Turning off Automatic Updates can cause Windows Security Alert pop-up balloons to appear in the taskbar tray every time you log on. (See Figure 1.)


Figure 1. Turning off Automatic Updates causes scary error balloons featuring a red shield.

If this bothers you, Windows XP allows you to suppress any warnings that relate to Automatic Updates. You can also do this in Vista but, unfortunately, the newer OS forces you to turn off all security alerts just to suppress the Automatic Updates warnings.

To eliminate the warning balloons about Automatic Updates in both XP and Vista, take these steps:

Step 1. Double-click the red shield icon in the taskbar, or open the Control Panel and launch the Security Center.

Step 2. In the left pane or box, click Change the way Security Center alerts me.

Step 3. In XP, uncheck Automatic Updates and click OK. In Vista, select the second or third option.

Use Secunia's Software Inspector to check for updates

With the Windows Update Agent turned off, how will you know if you have the latest security patches and updates you need?

First, read the Windows Secrets Newsletter that comes out two days after Patch Tuesday. Look in our paid section for descriptions of any patches that are reported to have negative side-effects, and use our recommended workarounds if any problems might affect you. (How to get the paid version.)

Then, to check for needed updates to Windows and dozens of other programs, use the Secunia Software Inspector. This free service was described in the Aug. 16 and Sept. 6 issues of Windows Secrets.

Once you know what updates you need, you can visit the Microsoft Update Web site, which offers updates for both Windows and Microsoft Office. The Secunia report includes a link to Microsoft's site and other update sites so you don't even have to bookmark them.

Users don't expect Microsoft to be perfect. But because of the company's very human mistakes with some previous updates, many customers understandably want to do their homework before installing every patch Microsoft offers. If the company's own software settings can't be trusted to provide that level of control, users will continue to seek alternatives.

Have a tip about Windows? Readers receive a gift certificate for a book, CD, or DVD of their choice for sending tips we printed. Send us your tips via the Windows Secrets contact page.

Contents  Index

By Virginia Culler The Sept. 13 issue of Windows Secrets reported that Windows Update sometimes installs files without notice, even if auto-install has supposedly been disabled. Many readers are dismayed to learn that their control over their computers is compromised and are asking how they can prevent this in the future.

• "Would you be able to publish a list of DNS names and IP addresses that Microsoft uses for Windows Update? I want to block the IP addresses in my router firewall, and I want to disable the DNS names (just in case they change the IP addresses of Windows Update) in my DNS server."
  

• "Be secure by default. Application settings that could compromise user security should be switched off by default. Make users aware of the implications of changing these settings within the context of using the application and before the changes are committed."
  

• "A Trojan Horse meets the definition of virus that most people use, in the sense that it attempts to infiltrate a computer without the user's knowledge or consent."
  

• "It states in the EULA that Microsoft has every right to do whatever it wants to its operating system. You have limited rights and only those rights that Microsoft gives you, and Microsoft may add, change, or delete them as it pleases. When you buy a computer with the Microsoft operating system, you agree to these terms."
  

• "The Software features described below are enabled by default to connect via the Internet to Microsoft computer systems automatically, without separate notice to you. You consent to the operation of these features, unless you choose to switch them off or not use them."
  

• "It is not necessary to change rendering engines; simply reporting that you are using IE appears sufficient for the Windows updates I have tried.
  
  "The Firefox add-on User Agent Switcher lets you select what browser you wish to report to the world. Select IE 7, and Windows Update seems to work fine."
  

Contents  Index

Contents  Index

In this video spoof from the Codename Longhorn era, the former Windows Vista design team traces the steps consumers might take in customizing the user interface. (Everyone loves dogs, right? Right???) Recently posted on the istartedsomething blog, this video's hilarious ending will speak to those of us who have experienced a user interface as more of a nightmare than a dream. Play the video

Contents  Index

Contents  Index

• Visit our Unsubscribe page.
  

Contents  Index