Microsoft apologizes for update blunder

Microsoft has apologized for a Windows Server update that automatically installed the Windows Desktop Search (WDS) tool on users' desktops without approval.

The mistake happened because Microsoft reused the same update package for when WDS was first published in February as an optional update that was only applicable to systems with the search tool previously installed.

Advertisement

This meant organizations that had approved the February update package for a limited number of machines had this week's new update automatically install WDS on all clients because the Windows Server Update Service (WSUS) is set by default to automatically approve update revisions.

One IT manager affected by the update told silicon.com: "I came into the office this morning and found that every one of our desktops and servers which are on WSUS have had the WDS tool automatically installed. We were shocked as we do not automatically approve anything for our systems, unless we have already approved an old version of the same update. So Microsoft has decided to push this directly out, bypassing any approval opportunity we have set. To say the least we are not happy and we're currently reviewing what we are going to do."

In a post on Microsoft's WSUS blog Bobbie Harder, program manager for WSUS, said: "We sincerely regret the inconvenience this has caused and extend a sincere apology to all impacted customers."

Microsoft said it is working to correct the issue and has temporarily suspended the distribution of the search tool through WSUS.

Harder said: "We will make a new package available for WSUS in the near future, but not as an update revision, so you can rely on predictable update behavior with auto-approval settings. We are also working on improving our internal publishing processes to ensure this does not happen again."

Microsoft said customers wanting to uninstall the WDS update revision released this week can do so via the Add/remove programs feature and by following the instructions here.

In a post on Microsoft's WSUS blog Bobbie Harder, program manager for WSUS, said: "We sincerely regret the inconvenience this has caused and extend a sincere apology to all impacted customers."

Microsoft said it is working to correct the issue and has temporarily suspended the distribution of the search tool through WSUS.

Harder said: "We will make a new package available for WSUS in the near future, but not as an update revision, so you can rely on predictable update behavior with auto-approval settings. We are also working on improving our internal publishing processes to ensure this does not happen again."

Microsoft said customers wanting to uninstall the WDS update revision released this week can do so via the Add/remove programs feature and by following the instructions here.

Source

I saw more stealth updates last week, even though, as for many I have the automatic updates feature switched off. Sneakily running under a SVChost process I became curious as to what was using 45% of mu CPU and causing mass IO.

I think I speak for many when I say, although having a patched system is great, having the software rammed down my throat without a choice, or even after declining it is something I feel particularly strongly about.

It certainly does hammer it home that for us MS users we aren't in quite as much control as we would like to think were are.