Helping people with computers... one answer at a time.
You can make sure that Windows is up-to-date by either enabling Automatic Updates or by visiting the Windows Update web site.
How do I make sure that Windows is up-to-date?
•
It seems like every week there's news about some newly discovered vulnerability or bug fix in Windows. And of course the stories tell us that we should all rush out and install the fixes immediately or the world will come to and end.
Or something like that.
In fact, Microsoft does announce updates weekly. With that rapid a rate, how should you stay on top of things and make sure that your system is up to date?
There are several options.
•
Microsoft provides a service that runs on your machine and - on terms you control - automatically checks for Windows updates. Once found, it can then download and install them for you.
The specific labels vary slight across Windows versions, but to configure automatic update click on Windows Update in the Windows Control Panel.
In Windows 7, this is the Windows Update options dialog:
You have four basic options controlling how Automatic Update works:
-
Never check for updates - as you might expect this basically turns the Automatic Update feature off.
-
Check for updates but let me choose whether to download and install them - with this setting, Windows Update will only check the Microsoft site for updates, and if there are any that apply to your machine, it will alert you, and nothing more. You can then choose to download and install, or not.
-
Download updates but let me choose whether to install them - with this approach, Windows Update will check the Microsoft site for updates and actually download any that apply. Once downloaded, you're notified that they're available and can initiate the install at your convenience.
-
Install updates automatically - finally, you can just have Windows Update do it all, on a schedule you can define. Check, download, and install as soon as updates are available. (Note that depending on the updates you receive, your machine may be rebooted as part of this process.)
In Windows 7 you can also control whether or not the process should include both important and recommended updates, or just important. (You can still receive important and other updates by visiting the Windows Update web site, which I'll discuss below.)
Windows 7 also allows you to specify that all users can install system updates via Windows Update, and wether or not Windows Update should also update other Microsoft software on your machine (aka "Microsoft Update" as opposed to just "Windows Update").
For what it's worth, I like to know what's happening to my machine(s) before it happens so I typically select the "Download, but let me choose" option.
Many people find the concept of Automatic Updates a little too spooky or intrusive. Others just want to have even more control over exactly what happens when. And of course there are folks who are using older versions of Windows.
For all these people there's the Windows Update web site.
The first time you visit Windows Update, it'll download a component onto your machine that handles the inspection of your current Windows versions. That list is then compared against the latest releases and you'll informed of the differences. You can then select which components to install.
(This is an update to an article originally published in 2004.)
Article C2024 - December 6, 2009
Leo A. Notenboom has been playing with computers since he
was required to take a programming class in 1976. An 18 year career as a programmer at Microsoft soon followed.
After "retiring" in 2001, Leo started Ask Leo! in 2003 as a place for answers
to common computer and technical questions. More about Leo.
On my XP I have Windows Update turned off.
Posted by: Richard Brobert at December 8, 2009 4:31 PMI understand that Microsoft releases updates on Tuesday.
By Friday Microsoft has fixed all the bugs in the updates that third party testers have reported.
On Friday afternoon I go to Windows Update and only download the high priority updates.
Windows update is only the appetizer. Avoiding updates to other popular applications is just as dangerous as not having anti-virus software.
Secunia's PSI is very complete, but its also complex and wants to run constantly in the background.
They also offer a simpler online product, one that doesn't have to be installed at all - the OSI or Online Software Inspector. For an intro to that service see
Free, Comprehensive Windows Patch Notification: Secunia
It requires Java and it doesn't check as many applications as PSI. But, with the 80/20 rule, its probably good enough. My experience has been that it's hard enough to get a clean bill of health from OSI.
The Windows 7 option about allowing all users to install bug fixes (excuse me, "changes") means that a standard/restricted Windows 7 user can install patches without any UAC interruption. If this is off, then a standard user needs to supply an admin password to install patches.
Posted by: Michael Horowitz at December 8, 2009 10:10 PMWindows Update, in Automatic Mode, does not always load all of the critical updates.
It seems that some of the Updates require a more recent Windows Genuine Authorization check before they will download & install. Also, Service Packs will not install automatically.
A recent laptop with Vista did not have any SPs installed. It took about four hours to download and install these over a wireless cable-based ISP connection.
Personally, I turn Windows (Microsoft) Update off, and run it manually. Otherwise, it runs automatically at bootup - and hogs resources - and I'd rather have a working PC faster. I don't mind being out of date for a week or two if I get lazy with these updates.
Now my antivirus - that is the only program I allow for automatic updates.
Great website Leo - thanks as always!
Posted by: Robert M. at December 14, 2009 11:26 AMMy college teacher informed me Microsoft reserves 10% of your bandwith and it is better to use the Windows update from all programs once a week on Thursday. Windows releases proper updates weekly and you do not get hot fixes. The weekly updates are full update and not hot fixes. A pc with hotfixes is not all that good, the fixes are often not correct and you are sent another hot fix to any errors. We were advised to turn off automatic updates and to ensure you manually install all updates either from Windows Update link or search Microsoft and download and install manually from the downloads.
Hope I was informed correctly and this helps to clear the pros and cons of automatic updates
17-Dec-2009
For getting windows updates from command line, see http://www.wuinstall.com
You can turn off automatic updates and get the updates when you want them, via command line
Posted by: xeox at December 22, 2009 3:42 PM