Bitten by a Microsoft Patch
I am a fanatic about Windows security. Every Windows box has Zone Alarm, ClamAV, and Spybot. I also have autodownload of Windows patches, but always review them before installation. Most of the time I just allow them to be installed, but I want to see them before they're installed.
I got onto one machine yesterday and found that it had rebooted due to Windows downloading and installing a "high-priority" security patch. Well, I don't really like that, but what can you do?
Then, later in the day, when I tried to go to the web, I got a "cannot connect" error.
Fine, I assumed it was the wireless router. So I rebooted that. Still no connection.
So, I rebooted the machine. Didn't help.
Immediate assumption that I would need to reinstall Windows XP.
Now, let me say a word about that. My last two puzzling failures have ended up being hardware issues, not OS ones -- but my immediate assumption (and I think I'm pretty typical) is that there must be a Windows issue. That says a lot about the general perception of Microsoft products. So, in these two cases, the perception was incorrect.
However, since I was able to ping out of the machine in question, I didn't think it was a hardware issue, so concluded an OS reinstall was in order.
Then, fortuitously, I got an RSS feed article about a new Microsoft patch that disabled web access on machines running Zone Alarm. Two fixes were offered: uninstall the security patch, or reduce the security level on Zone Alarm.
I happily removed the patch, and web access immediately started working. Hurrah!
But, I noticed that Microsoft immediately put a new patch alert up in the taskbar.
And this morning, when I went to the machine, it had rebooted and ... you guessed it, the patch had been reinstalled.
To avoid a Groundhog Day situation, I reduced the security level on Zone Alarm, and web access once again worked.
However, the fact that I have to disable security to workaround this patch is totally unacceptable, and the fact that there's no way for me to avoid having this patch automatically installed is unbelievable. And it's not like Zone Alarm is some obscure use corner case. There are millions of copies of it installed throughout the world.
I've always read stories about organizations bitten by Microsoft patches, but never experienced it myself. Now I have. And it sucks.
Print
I got onto one machine yesterday and found that it had rebooted due to Windows downloading and installing a "high-priority" security patch. Well, I don't really like that, but what can you do?
Then, later in the day, when I tried to go to the web, I got a "cannot connect" error.
Fine, I assumed it was the wireless router. So I rebooted that. Still no connection.
So, I rebooted the machine. Didn't help.
Immediate assumption that I would need to reinstall Windows XP.
Now, let me say a word about that. My last two puzzling failures have ended up being hardware issues, not OS ones -- but my immediate assumption (and I think I'm pretty typical) is that there must be a Windows issue. That says a lot about the general perception of Microsoft products. So, in these two cases, the perception was incorrect.
However, since I was able to ping out of the machine in question, I didn't think it was a hardware issue, so concluded an OS reinstall was in order.
Then, fortuitously, I got an RSS feed article about a new Microsoft patch that disabled web access on machines running Zone Alarm. Two fixes were offered: uninstall the security patch, or reduce the security level on Zone Alarm.
I happily removed the patch, and web access immediately started working. Hurrah!
But, I noticed that Microsoft immediately put a new patch alert up in the taskbar.
And this morning, when I went to the machine, it had rebooted and ... you guessed it, the patch had been reinstalled.
To avoid a Groundhog Day situation, I reduced the security level on Zone Alarm, and web access once again worked.
However, the fact that I have to disable security to workaround this patch is totally unacceptable, and the fact that there's no way for me to avoid having this patch automatically installed is unbelievable. And it's not like Zone Alarm is some obscure use corner case. There are millions of copies of it installed throughout the world.
I've always read stories about organizations bitten by Microsoft patches, but never experienced it myself. Now I have. And it sucks.
Previous Post: What this week's CIO Magazine Tells Us About ITNext Post: Open Source and the War for Talent
What is Tech Briefcase?
TechBriefcase is a new, free service where IT Professionals can Search, Store and Share IT white papers and content like this. Learn more
Bookmark content
Speed up your research efforts with content across the web.
Search and Store
Find the white papers you need. Create folders for any topic.
View Anywhere
Open your briefcase on your iPhone, tablet or desktop. Share with colleagues.
Most Discussed Posts
Cloud computing has emerged as one of the most significant game changers to hit the technology landscape in the past 20 years. With this massive expansion of the cloud, the perception of the IT organization is shifting from a utility player to a change agent. This eBook breaks down five ways progressive organizations are using cloud-based IT Management solutions to help drive innovation and become more strategic, including: adding visibility and analytics, speeding up time-to-value, lowering costs, improving prioritization, and providing a blueprint for future cloud deployments.
Read the white paper to see how IBM helped Citigroup deliver new services and enhancements to their 200 million customers faster.
There are 3 ways to modernize legacy applications: rewrite completely, acquire packaged solutions or migrate existing code. This paper explains why it's best to migrate and how IBM® Rational® software can help.
Accommodating specific lines of business can result in a hybrid ecosystem of applications and servers. The resulting complexity of this architecture makes for an environment that is costly to maintain and difficult to change when addressing new challenges.
This whitepaper will help you to define a mobile device passcode policy. Security managers must attempt to reconcile two opposing goals. They must: 1) create a passcode policy that is strong enough to protect the device if it is lost or stolen, while: 2) not annoying users with needless length or complexity.
This whitepaper, authored by The Radicati Group, looks at the key reasons organizations should consider moving to a cloud-based archiving solution. Email archiving solutions enable organizations to store, monitor, and collect electronic data exchanged by their users to comply with internal policies and regulations.
ATERNITY will showcase a 30-minute demo on how Fortune 500 companies are leveraging its award-winning FPI Platform to deliver a user-centric approach to Proactive IT Management.
For businesses to move forward and tap into the ever-expanding universe of Internet users and network-enabled devices, it's critical to learn how to make the transition to IPv6. Learn the critical steps your organization must take to make a seamless transition-and keep your business world connected.
Learn how IT teams can protect against spear phishing tactics. Harry Sverdlove, chief technology officer of Bit9 offers a frank discussion about spear phishing - the most common technique used in today's advanced attacks.
Learn how to build a solid business case for your migration to Red Hat Enterprise Linux so you can run leaner, innovate faster, be more flexible and own the New Now.
Social media isn't about you; it's about everything around you. As you consider how your customers want to communicate with you, social media is something that can't be ignored. But what should your strategy be? Is social media "just another channel?" What kind of a plan makes sense for your contact center and for your customers? Join our experts as they share their insight and research results.
Hardware tokens were a popular method of strong authentication in past years but the cumbersome provisioning and distribution tasks, high support requirements and replacement costs have limited their growth. The additional log-in steps that hardware tokens require and the resulting user frustrations have limited adoption and make them impractical for larger scale partner and customer applications.
Sponsored Links
