Microsoft Delays SP2 Delivery--Again

Written by: Joris Evers, IDG News Service

Microsoft is giving users more time to prepare for Windows XP (news - web sites) Service Pack 2 by extending the time a special registry key will prevent PCs from automatically downloading and installing the mammoth update. Faced with concerns from IT professionals, Microsoft last month made available a tool that allows users to set a Windows registry key that instructs the system to skip downloading and installing SP2 for 120 days, but still download other critical updates. Microsoft has now doubled that period to 240 days, Microsoft told select customers in an e-mail message this week. The change was made in response to customer feedback. The blocking mechanism will now prevent Automatic Updates (AU) and Windows Update (WU) from delivering SP2 to Windows computers until April 12, 2005, according to the e-mail.
"Beginning on Tuesday 12 April 2005 AU and WU will deliver SP2 regardless of the presence of the blocking mechanism," Microsoft writes. April 12 is also the day Microsoft has scheduled a monthly security update, according to the note. The extension is Microsoft's latest move to help users deal with SP2. The software maker earlier postponed automatic distribution of the service pack to PCs running Windows XP Professional Edition so users had more time to install the blocking mechanism. Microsoft has also published many documents detailing the changes SP2 makes to Windows XP and potential application compatibility problems.
Users Pleased Thomas Smith, manager of desktop engineering at a large Houston-based company that he asked not to be named, is happy about the extension. "Microsoft is finally listening to its customers. This is a big thing they have done to help us out," he says. Smith manages about 5000 Windows XP desktops. The registry key has been installed on more than half of those, he says. "This extension is going to allow us to do more extensive testing, along with giving us time to change our applications to work with SP2, if needed," Smith says.
SP2 is more than the usual roll-up of bug fixes and updates; it makes significant changes to Windows in the name of increased security. As a result, SP2 can render existing applications inoperable. Because of those changes, many businesses want to hold off on installing the update and are taking time for testing. Automatic Updates initially did not give users that flexibility.
Although Microsoft advises consumers to enable the Automatic Updates feature in Windows, the company recommends businesses use patch management tools such as its Systems Management Server (SMS) and Software Update Services (SUS) or third-party products.
The initial schedule called for Microsoft to begin pushing out the already delayed SP2 via Automatic Updates to all editions of Windows XP on Monday, August 16. Systems running Windows XP Home Edition finally started downloading SP2 on Wednesday, August 18 and distribution to Windows XP Professional Edition started on Wednesday, August 25. As implied by the edition names, Windows XP Home Edition is meant for home users, while the Professional Edition is aimed at businesses and more demanding users.
Microsoft has labeled SP2 a "critical" update and urges all Windows XP users to install it as soon as possible. The software maker expects about 100 million PCs to be updated by October via Automatic Updates alone.

German teen indicted over Sasser computer worm

VERDEN, Germany (AFP) - German prosecutors indicted an 18-year-old student on suspicion of creating the Sasser computer worm that paralyzed millions of computers around the world last spring. The suspect, identified only as Sven J., is charged with computer sabotage, data manipulation and disruption of public systems for allegedly hatching the worm, which produced millions of dollars in damages after spreading at lightning speed over the Internet.
Prosecutors in this northern German town said that 143 victims had filed charges and that the suspect could face up to five years in prison if convicted. It was not yet clear when his trial would begin. The teenager was arrested in May after a raid on his parents' house in Rotenburg, a small town in the northern state of Lower Saxony, turned up incriminating evidence.
Acting on a tip from computer giant Microsoft, which offered a 250,000-dollar reward for the conviction of the mastermind behind the worm, investigators seized several items from the house, including the suspect's personal computer. He admitted during questioning to writing the Sasser program and authorities believe he may also be behind another destructive worm named Netsky, which surfaced in February. "The computer worms caused damage worldwide. There is no doubt about that," said chief prosecutor Helmut Trentmann. Trentmann said, however, that major companies had not come forward to file charges against Sven J. which had made the prosecution more difficult. "We have the tip of the iceberg. But we have not received any reports from major listed companies that were surely also affected." The Sasser worm struck on May 1, and in less than a week affected thousands of companies and as many as 18 million computers worldwide, forcing some businesses to shut temporarily in order to debug their systems.