This white paper provides step-by-step instructions on how to check for, download and install the latest Microsoft security patches, and how to configure your machine to automatically update itself in future. These instructions form part of the Microsoft Security Guidance Kit 2004.
Getting started
Prerequisites and preparation
Updates help shield your computer from vulnerabilities, viruses, worms, and other threats as they are discovered. Use Windows Update and Automatic Updates to download and install the latest security updates.
Windows Update is a tool that scans a Windows-based computer, searching for all applicable critical, important, or moderate Windows updates. At the Windows Update Web site, a computer running Windows can be evaluated against a known list of applicable updates to determine which updates are needed for that computer. Those updates can then be installed from this Web site. The Automatic Updates feature is included in Microsoft Windows 2000 and Microsoft Windows XP. This feature allows you to configure computers to automatically download and install critical updates, on a schedule that you create.
The steps in this document show you how to use Windows Update and Automatic Updates to apply security patches.
Requirements
To use Windows Update and Automatic Update, you must:
Be logged on as a local administrator on the computer.
Have a connection to the Internet.
Manual Update
Using Windows Update to Update Your Computer with the Latest Security Patches
You can manually update your computer at any time by using the Microsoft Windows Update Web site. Use Windows Update to download items such as security fixes, critical updates, the latest Help files, drivers, and Internet products. New content is added to the site regularly, so you can always get the most recent updates and fixes to protect your computer and keep it running smoothly.
You can scan your computer using Windows Update and review a tailored selection of updates that apply only to the items on your computer.
Any update that Microsoft considers critical to the operation of your operating system, programs, or hardware is classified as a "critical update" and is automatically selected for you to install. Critical updates are provided to help resolve known issues and protect your computer from known security vulnerabilities.
To use Windows Update to scan your computer:
Click Start, click All Programs, and click Windows Update to go to the Windows Update Web site. If the Windows Update link is missing, start Internet Explorer, click on the Tools menu and select Windows Update.
Click Scan for Updates. Windows Update scans your computer and displays a pre-selected list of critical updates, including security updates and service packs.
Note: Slower modems might take several hours to download all recommended updates the first time you use Windows Update. Download times vary depending on modem speed and how many updates your computer needs. To reduce download times, run Windows Update downloads when you are not using your computer for other Internet-related tasks.
Under Pick updates to install, click Critical Updates and Service Packs. Windows Update then creates a list of the updates that are appropriate for your computer. As you browse through the available updates in each category, click Add to select the update of your choice and add it to the collection of updates you want to install. You can also read a full description of each item by clicking the Read more link. Critical updates are selected for download automatically.
Click Review and install updates.
Select updates and then click Install Now. You might have to restart your computer after installing the updates.
Automatic Updates
Configuring an update scehdule
The Windows Automatic Updates service can automatically determine which updates your computer needs and then download and install them on a schedule. Activation of this service is highly recommended.
To set your update schedule:
Click Start, and then click Control Panel.
If your computer is running Windows XP, double-click System. (Note: Depending on which Control Panel view displays, you might need to first click Performance and then Maintenance before seeing the System option.) If your computer is running Windows 2000, the Automatic Updates option is displayed directly in Control Panel (not under System).
Click Automatic Updates and then select Keep my computer up to date.
Select a setting. It is recommended that you select the option to Automatically download the updates, and install them on the schedule that I specify; then set the schedule for your convenience.
IMPORTANT: You can set the automatic download time for any time, day or night. Just be sure your computer is on at that time. To avoid slow-downs, you should select a time when you will not be using the computer yourself. If you set up Automatic Updates to notify you, or if you forget to leave your computer on, a notification balloon on the Windows desktop taskbar is displayed. Click the notification balloon to review and install the updates.
Getting started
Prerequisites and preparation
Updates help shield your computer from vulnerabilities, viruses, worms, and other threats as they are discovered. Use Windows Update and Automatic Updates to download and install the latest security updates.
Windows Update is a tool that scans a Windows-based computer, searching for all applicable critical, important, or moderate Windows updates. At the Windows Update Web site, a computer running Windows can be evaluated against a known list of applicable updates to determine which updates are needed for that computer. Those updates can then be installed from this Web site. The Automatic Updates feature is included in Microsoft Windows 2000 and Microsoft Windows XP. This feature allows you to configure computers to automatically download and install critical updates, on a schedule that you create.
The steps in this document show you how to use Windows Update and Automatic Updates to apply security patches.
Requirements
To use Windows Update and Automatic Update, you must:
Be logged on as a local administrator on the computer.
Have a connection to the Internet.
Manual Update
Using Windows Update to Update Your Computer with the Latest Security Patches
You can manually update your computer at any time by using the Microsoft Windows Update Web site. Use Windows Update to download items such as security fixes, critical updates, the latest Help files, drivers, and Internet products. New content is added to the site regularly, so you can always get the most recent updates and fixes to protect your computer and keep it running smoothly.
You can scan your computer using Windows Update and review a tailored selection of updates that apply only to the items on your computer.
Any update that Microsoft considers critical to the operation of your operating system, programs, or hardware is classified as a "critical update" and is automatically selected for you to install. Critical updates are provided to help resolve known issues and protect your computer from known security vulnerabilities.
To use Windows Update to scan your computer:
Click Start, click All Programs, and click Windows Update to go to the Windows Update Web site. If the Windows Update link is missing, start Internet Explorer, click on the Tools menu and select Windows Update.
Click Scan for Updates. Windows Update scans your computer and displays a pre-selected list of critical updates, including security updates and service packs.
Note: Slower modems might take several hours to download all recommended updates the first time you use Windows Update. Download times vary depending on modem speed and how many updates your computer needs. To reduce download times, run Windows Update downloads when you are not using your computer for other Internet-related tasks.
Under Pick updates to install, click Critical Updates and Service Packs. Windows Update then creates a list of the updates that are appropriate for your computer. As you browse through the available updates in each category, click Add to select the update of your choice and add it to the collection of updates you want to install. You can also read a full description of each item by clicking the Read more link. Critical updates are selected for download automatically.
Click Review and install updates.
Select updates and then click Install Now. You might have to restart your computer after installing the updates.
Automatic Updates
Configuring an update scehdule
The Windows Automatic Updates service can automatically determine which updates your computer needs and then download and install them on a schedule. Activation of this service is highly recommended.
To set your update schedule:
Click Start, and then click Control Panel.
If your computer is running Windows XP, double-click System. (Note: Depending on which Control Panel view displays, you might need to first click Performance and then Maintenance before seeing the System option.) If your computer is running Windows 2000, the Automatic Updates option is displayed directly in Control Panel (not under System).
Click Automatic Updates and then select Keep my computer up to date.
Select a setting. It is recommended that you select the option to Automatically download the updates, and install them on the schedule that I specify; then set the schedule for your convenience.
IMPORTANT: You can set the automatic download time for any time, day or night. Just be sure your computer is on at that time. To avoid slow-downs, you should select a time when you will not be using the computer yourself. If you set up Automatic Updates to notify you, or if you forget to leave your computer on, a notification balloon on the Windows desktop taskbar is displayed. Click the notification balloon to review and install the updates.