Dylan Greene dot com

May contain nuts.

Windows Update is like... going to the Dentist...

September 26, 2003 11:49 AM

Windows Update is like going to the Dentist: It's tedious and sometimes painful, but those that avoid going today because they feel fine end up going through a more painful and expensive process down the road.

Keeping our computers up to date should not be as tedious and painful as a dentist visit. Being up to date should be as simple and automatic as the fluoride in our drinking water.

What I think needs to be fixed:

- Never require reboots. If I'm updating a mission critical server, I don't want suffer downtime. If I'm updating my personal machine, I don't want to have to wait for my machine to reboot. The Windows sub-system is probably componentized to the point that individual systems should be able to restart if needed. I don't mind Windows pausing for 10 seconds while it does an "internal restart", but all of my apps better be where I left them and how I left them.

- Never require multiple WindowsUpdate.com visits in one sitting. I can't stand when I choose a bunch of items to update, and then it says "This update must be installed separatly from other updates." Why not? Install one, then install the next one. Duh.

- Never require a visit to WindowsUpdate.com after a fresh Windows installation. After installing Windows XP on a fresh machine, I had to spend about an hour making about eight visits to WindowsUpdate.com just to get all of the updates. During the install it even asked if it should look online for newer files, which I said yes. Users expect their install to be the latest and greatest. Don't give them a stale install that requires hours of patching right out of the box.

- Never make the user read. Users don't read, we're too busy with other things on our minds, like our real jobs. Windows Update should be graphical. Show me three things when I visit WindowsUpdate.com: What updates I'm missing, a image of my computer, and a Go button. I press go and then I see updates moving into my computer as they are downloaded and installed. Users don't know what a KB# is. They don't know what RPC is. They don't know what DirectX is. Just give it to them.

- Never require IT admins to use Windows Update. IT admins are picky. They don't want you to install the latest Service Packs the day they come out because their weird phone dialier they force you to use to dial in from home doesn't work with it. Give admins their own tool. After searching around I found Microsoft System Update Services, which lets IT admins choose what updates go to which machines and automatically deploy them. Microsoft: Why don't you advertise this tool on WindowsUpdate.com? There are so many irrate IT admins that are ready to move their entire enterprise to Linux just to spite you, and all you do is hide these great tools in your deeply nested web site.

- Never require a random visit to WindowsUpdate.com. Did you know that the .NET Framework 1.1 is available? DirectX 9? Maybe you do because you visit Windows Update regulary and I know what they are. But what about the typical user? They don't know what those are. If they need them, just give it to them. The only cost is the time it takes to download.

- Never release software that can't be updated via Windows Update. Everything Microsoft sells should be easily updated via Windows Update. There is a hard to find, hardly known about, strangly hidden Office Update (there's a link from WindowsUpdate but it's not obvious. This should not be a separate web site. This should be one tool. And it should update everything I've ever purchased from Microsoft from Office 2003 to Microsoft Flight Simulator 2004.

- Never require an install to use Windows Update. For some reason, the Windows Update ActiveX control used on WindowsUpdate is not included with Windows. Why not? Not only should this be included, but this should be self-updated via Windows Update. A user should never have to see the confusing and abused ActiveX "Are you sure you trust us?" certificate screen. What if a user doesn't trust Microsoft, but they still want to update their computer?

- Never give the user a choice for critical updates. This might sound scary, but I constantly see people hitting "remind me later" to the Windows Critical Update dialog that pops up. They are afraid of doing, or don't want to be bothered about something that doesn't relate to their job. Just install it.

- Never install anything that can't be undone. Okay, so sometimes you might not want to install a patch. Maybe you are testing your software and want to see if it runs on a machine with older settings. (Well ideally, that shouldn't be possible, see the note before this one.) That's why there is undo. Today this feature is in the Control Panel in the Add/Remove programs program. This is the wrong place for it. Windows Updates are not programs. They are updates. If I use Windows Update to update my machine, I should be able to use Windows Update to undo updates. There should also be a similar tool on my own machine.

- Finally, Help users who aren't able to use Windows Update. A blog entry I posted on how to fix error 0X800A138F has had over 10,000 visitors since I posted it a month ago, which is about 9,500 more than a typical blog entry for me. Windows Update simply gave users Error 0X800A138F if it wasn't able to download the update list. The site does not say what to do if you get this error, or even link to a page that could be of help, or even link to a way to contact Microsoft incase the problem is on their side. In thise case, it ends up that the update list was moved to an Akamai servers that have been known to be ad servers, a server which many people block to prevent getting as many ads and pop-up ads. Some people got the same error because their IE wasn't set to any particular language, so Windows Update didn't know what language updates to give. Instead of automatically using an alternate server or asking the user for their language, Windows Update just gave error 0X800A138F.

Fix these problems and Windows Update will no longer be like going to the dentist. Perhaps people won't even care when a new security hole is found because their computers will be updated before the press even has time to report about it.

Comments

Even critical updates need to be optional. One of the last critical updates to my system made IE stop working with proxy servers, and one on my wife's system made it stop working with DHCP. To be brutal, MS doesn't test these well enough to make them amndatory....

James - that's why I require an "Undo" for any patch. You wouldn't know if it would effect your system or not without trying it first.
Often times the reason a system stops working correctly after an update is because of 3rd party software, like buggy spyware. If updates were manditory and automatic, the people at the 3rd party companies who's software stopped working or causes other problems would instantly realize the conflict and either fix their software or notify Microsoft. Microsoft could then quickly issue an automatic re-patch and your system would be working again.

You need to be careful about automatically giving users non-essential software (like the .NET Framework) - if users are on a pay-for-bandwidth-used connection, they might not be that pleased...

Tom - I agree. Add to my list: The ability to easily order an inexpensive CD with all necessary updates. The CD should cost no more than the cost to burn the CD and ship it.

My biggest gripe: inability to save the downloads or designate a local update server. I've just finished installing 24 brand new XP workstations, and they all needed critical updates and such. Wouldn't the world benefit if the admin at that site could set up a server there to act as their local proxy for any/all updates? That way only one computer gets all the updates, not 24 - less bandwidth on the net, and less load on M$'s servers.
But what do I know, I'm just a Mac guy...

"Never make users read. Users don't read." This is actually not true in all cases. I have been on the other side of the two way mirror for a few usability studies and have learned that older people or people that are less computer-savvy tend to read all the text on the page (for example, I once watched a woman read an entire privacy statement).
I don't disagree with your main point, but I would say "focus on usability" would be a better way to put it.

Reply to #5
I use a transparent HTTP proxy and it works to cache MS updates, but they should be kept in a directory similar to the way IE stores its files that it downloads. You could then patch many computers from the same location and not waste any bandwidth.

Brian Sullivan has some more great ideas:
http://radio.weblogs.com/0127028/stories/2003/10/16/microsoftSecurityIdeas.html
My personal favorite is offering Windows Update CD's at 7-11's for those without highspeed connections.

One feature I would like to see on windowsupdate is the ability to hide updates from future scans. For example, there is an update for windows messenger that keeps coming up on a machine at my office, this particular machine will NEVER use windows messenger so I would like a way to hide the update. Maybe this isn't the best thing to do but I always felt that you should not install updates that you do not need.(ie if it ain't broke, don't fix it)

This may be helpful for the handful of us that went through all the fixes and still could not get the Windows Update site to work. I found a site that has been repacking the windows update files and distributing them as a free download with its own installation client.

The site is AutoPatcher.com

They update their program mothly with the latest Patches and have a cumulative download as well as "lite" versions that have only the updates for the last month.

Best of all is that once I used their program to install the updates, the Windows Update site was then fine on my computer. I guess I just needed the right update - go figure.

For those that my last did not help... installing Cisco VPN may do the trick.

In response to Tim Macrina - as I remember the Messenger update is not a critical update and is listed in the 'Win98/ME/XP updates' section.

If you look down the list on the left of your page, there is a link to 'Personalize Windows Update'.

Clicking here allows you to remove unwanted updates (except critical ones).

I too have problems with updates - I have a PC here now which, after scanning, says there are two Critical Updates and after downloading and installing them, they appear next time I scan again?

Any ideas on that one?

HTH

I think when that happens there is an error applying the update to you system, that is why when you rescan for updates, it looks over your critical files and versions and sees those files at the older version.

go here:

http://v4.windowsupdate.microsoft.com/troubleshoot/

all ur windows update problems solved here. check it out.

here is another good site for windows update help:

http://www.updatexp.com/main-index.html

Re comment #5 above and others: IF you don;t want to keep downloading the updates every time you build a new machine, all you have to do is download them all once then patch them from one of your own machines on your own network. It's much quicker, you have more control and you can add reg entries to all users which makes them treat your server as the windows update server. Check out Microsoft WUS (great name huh?) at http://www.winnetmag.com/Windows/Article/ArticleID/41969/41969.html and also on Microsoft's site at http://www.microsoft.com/windowsserversystem/sus/default.mspx I think it's free as well.

You guys seem to gripe before you search, alot of those things can be done..such as ordering update CDs and choosing which updates are hidden and such...It's not your fault, I see it in practically everyone these days, especially those that likes to think they know alot about computers, but dont have the qualification or background to support their claims other than the fact that they poke around at things on it from time to time. People are always quicker to complain and assume that what they want isnt there before they try to find out how to do it themselves. Seek and yee shall find...or maybe a more current idea...Google and yee shall find...

You can solve all you rproblems and not use windows.

Is there a way to make Windows Update look for it's files on a CD? I don't mind the updater itself, but I don't want to have to manually install everything. Especially since most machines require different updates.

Sootah - yes, you can order a free Windows Update CD from Microsoft.

And where does Microsoft publish that CD order form? They did once but I haven't seen it since and that was long time ago.

Oh amnd if AOL can leave CDs all of the place, even the US Post Office. Why can't Microsoft? Perhaps they could make a deal with Microsoft??

Sorry I meant Microsoft could make a deal with AOL.. It could have AOL on it aAND the lastest Windows updates. People could choice to install or not install AOL or the updates.

bad comparison , really inappropriate, I prefer a brush and regular brushing rather then inasive action of the dantist which on top of it always leave a negative attitude towards yourself as incabable .... updates are the attributes of the game , cancle them now and you will have significantly less amount of problems later

ok

Your Comments
Name:
Email address (optional):
Home page, blog, or journal (optional):
Comments:

Related Posts

Category: Microsoft
Category: Bugs
Category: Ideas