Deploying Updates with Windows Update and Automatic Updates

On This Page

	Introduction
	Using Windows Update and Automatic Updates to Apply Security Patches
	Related Information

Introduction

Updates help shield your computer from vulnerabilities, viruses, worms, and other threats as they are discovered. Use Windows Update and Automatic Updates to download and install the latest security updates.

Windows Update is a tool that scans a Windows-based computer, searching for all applicable critical, important, or moderate Windows updates. At the Windows Update Web site, a computer running Windows can be evaluated against a known list of applicable updates to determine which updates are needed for that computer. Those updates can then be installed from this Web site. The Automatic Updates feature is included in Microsoft Windows 2000 and Microsoft Windows XP. This feature allows you to configure computers to automatically download and install critical updates, on a schedule that you create.

The steps in this document show you how to use Windows Update and Automatic Updates to apply security patches.

IMPORTANT: All the step-by-step instructions included in this document were developed by using the Start menu that appears by default when you install your operating system. If you have modified your Start menu, the steps might differ slightly.

Before You Begin

The recommendations in this document are for client computers running Windows 2000 or Windows XP that are either stand-alone workstations or computers that are part of a workgroup environment. If your computers are part of a Windows network connected to a Windows-based server computer, it is recommended that you use Software Update Services (SUS) 1.0 or SUS 2.0 to manage the installation of operating system patches, rather than use the instructions included in this document.

Requirements

To use Windows Update and Automatic Update, you must:

•	Be logged on as a local administrator on the computer.
•	Have a connection to the Internet.

Using Windows Update and Automatic Updates to Apply Security Patches

This section provides the following step-by-step instructions for scanning your computer and applying pertinent security patches.

•	Set up your update schedule.
•	Use the Windows Update Web site to scan your computer.

•

To set up your update Schedule 1. Click Start, and then click Control Panel. 2. If your computer is running Windows XP, double-click System. (Note: Depending on which Control Panel View displays, you might need to first click Performance and then Maintenance before seeing the System option.) If your computer is running Windows 2000, the Automatic Updates option is displayed directly in Control Panel (not under System). 3. Click Automatic Updates and then select Keep my computer up to date. 4. Select a setting. It is recommended that you select the option to Automatically download the updates, and install them on the schedule that I specify; then set the schedule for your convenience. Your screen will look similar to the following: IMPORTANT: You can set the automatic download time for any time, day or night. Just be sure your computer is on at that time. To avoid slow-downs, you should select a time when you will not be using the computer yourself. If you set up Automatic Updates to notify you, or if you forget to leave your computer on, a notification balloon on the Windows desktop taskbar is displayed. Click the notification balloon to review and install the updates.

Using Windows Update to Update Your Computer with the Latest Security Patches

You can manually update your computer at any time by using the Microsoft Windows Update Web site. Use Windows Update to download items such as security fixes, critical updates, the latest Help files, drivers, and Internet products. New content is added to the site regularly, so you can always get the most recent updates and fixes to protect your computer and keep it running smoothly.

You can scan your computer using Windows Update and review a tailored selection of updates that apply only to the items on your computer.

Any update that Microsoft considers critical to the operation of your operating system, programs, or hardware is classified as a "critical update" and is automatically selected for you to install. Critical updates are provided to help resolve known issues and protect your computer from known security vulnerabilities.

•

To use Windows Update to scan your computer 1. Click Start, click All Programs, and click Windows Update to go to the Windows Update Web site. 2. Click Scan for Updates. Windows Update scans your computer and displays a pre-selected list of critical updates, including security updates and service packs. Note: Slower modems might take several hours to download all recommended updates the first time you use Windows Update. Download times vary depending on modem speed and how many updates your computer needs. To reduce download times, run Windows Update downloads when you are not using your computer for other Internet-related tasks. Under Pick updates to install, click Critical Updates and Service Packs. Windows Update then creates a list of the updates that are appropriate for your computer. As you browse through the available updates in each category, click Add to select the update of your choice and add it to the collection of updates you want to install. You can also read a full description of each item by clicking the Read more link. Critical updates are selected for download automatically. 3. Click Review and install updates. 4. Select updates and then click Install Now. You might have to restart your computer after installing the updates.

Related Information

For more information about Windows Update and Automatic Updates, see the following:

•	For more information about Windows Update, see "Securing Windows XP Clients" on the Windows XP Security Guide Web site.
•	For more information about protecting your computer, see "Protect Your PC" on the Microsoft Web site.
•	For more details about using Windows Update to secure your computer, see "To change settings for automatic updating" on the Microsoft TechNet Web site.

For information about related technologies, see "Deploying Patches with Software Update Services 1.0" and "Software Update Services 2.0 Overview" in the Security Guidance Kit.