Patch Management

Component of the
Home Computer Security Baseline

Patch Management is the art and science of fixing the security holes programmers have left in the software that runs on your computer.

Normally with patch management one thinks about Microsoft Windows operating system. But that's not the whole story. Hopefully you use an alternative browser for your internet surfing and most likely you have had to install "Java" at some point or another also.

Even Microsoft Office has security flaws discovered and will offer a patch to correct the problem.

Not only is Windows Update not enough, but you may not want to use it at all!

• Windows Updates (or Microsoft Update) will insist on installing a program called Genuine Advantage. With GA, Microsoft wants to assure themselves, I mean assure you, that your copy of Windows is legitimate (like you really care as long as it's operating properly). Unfortunately, the behavior of this program has been classified by some experts as malware!
• Windows Updates occasionally will download a HUGE update that can tie up your internet connection for long periods of time. Some of these, like Windows XP Service Pack 2, can be HUGE. What if you don't have high speed broadband? It will just keep trying to download forever, with the user wondering what in heaven's name is going on. The next download of this type is likely to be Internet Explorer v7.

What? "If I don't use Windows update, do I have to do everything manually?" No.

Here's 2 solutions:
For non-technical, keep it simple type folks: Use Windows Update. Go to the Automatic Updates applet in the control panel of Windows. Select "notify, but do not download". Then YOU can choose if there are updates that you would rather pass on, either due to size of the update or functionality.

For the in depth types: Download Shavlik's NetChk Protect. They have three levels of service, one is free, another is free for a year, and the third is promised to be kept to a reasonable price. These products receive high accolades. And unlike Windows Update, Shavlik checks other programs such as Microsoft Office.

June 2007: For the last several months, IT specialists have been battling a problem with SVCHOST.exe gobbling up 100% of a PC's computing power. The problem seems to have been caused by Microsoft Update client software bugs. That's one reason I recommend staying with Windows Update and NOT upgrading to Microsoft Update.

If you try to use Microsoft Live Messenger service, you have no choice but to get Microsoft Update. Beware.

It's VERY disappointing that it is taking Microsoft so long to come up with a fix; and a fix that it doesn't take an expert to install! 

Remember! Patch Management is not OPTIONAL

In order to keep your PC protected from threats, security updates must be done. Whether you do them manually or use Windows Updates or a program like Shavlik, make sure your computer is patched properly at all times. Enhancements or features that have no bearing on security are optional, but not the security updates.

Return from Patch Management to Home Computer Security Baseline