Microsoft provides users with good mechanisms for downloading updates, including its automated Windows and Office Update sites, and Windows XP’s built-in Automatic Update feature. But what if you have no (or a very slow) Internet connection, if you’re a system administrator, or you reinstall Windows regularly? In any of these cases, it makes sense to download Microsoft’s important updates manually and burn them onto a CD, so that you have easy access to them, or to save you from repeatedly downloading the same files.

Unfortunately, despite Microsoft's claims that it is committed to the security of users of its products, the company has refused to allow us to include its free updates on our cover CDs for the past year. But the least we can do is provide this quick guide to manually downloading Microsoft updates.

Windows XP
Windows XP Service Pack 1. A must to keep on hand, SP1 includes many security improvements and bug fixes for XP, and some user interface changes. Most importantly, it includes Internet Explorer 6 Service Pack 1 which, among other things, fixes a vulnerability in Outlook Express that is exploited by some viruses. You’ll find the download and links to more information at http://www.microsoft.com/downloads/details.aspx?FamilyID=83e4e879-fa3a-48bf-ade5-023443e29d78&displaylang=en.

Blaster Worm Critical Security Patch. The patch fixes a vulnerability exploited by this virus. The worst of the Blaster Worm epidemic is over, but we still strongly recommend installing this patch. If you are installing or reinstalling Windows, you should install this patch before connecting to the Internet. Go to http://www.microsoft.com/downloads/details.aspx?FamilyID=2354406c-c5b6-44ac-9532-3de40f69c074&displaylang=en.

Update Rollup 1 for Windows XP. Another essential update, this one conveniently includes all the critical updates released after Service Pack 1, up until October 14, 2003. You’ll find the update at http://www.microsoft.com/downloads/details.aspx?FamilyID=d531bf00-d7be-48e3-abcc-961602bd72c2&displaylang=en.

Keep up to date and find other Windows XP updates at
http://www.microsoft.com/downloads/search.aspx?displaylang=en&categoryid=7.

Windows 98 and 95
August 7, 2003 Security Update for Windows 98 and 98 SE. Fixes a recently discovered vulnerability that could allow an attacker to execute code on your system. Go to http://www.microsoft.com/downloads/details.aspx?FamilyId=71EC81DD-9E86-4956-94F5-B6E020348569&displaylang=en.

Full list of updates. There are also several other critical and recommended updates for Windows 98, which you can find at http://www.microsoft.com/windows98/downloads/corporate.asp.

Windows 95 updates. Go to http://www.microsoft.com/windows95/downloads/ for a listing of these updates.

Windows 2000
Microsoft provides dozens of updates and four service packs for Windows 2000. Fortunately, you don’t have to install them all to ensure the operating system is as secure as possible. Simply download and install the most recent service pack, SP4, although you will then need to install all the critical updates released since SP4. For more information and access to all the downloads, go to http://www.microsoft.com/windows2000/downloads/servicepacks/default.asp.


Internet Explorer
Internet Explorer 6 Service Pack 1. This includes many bug fixes, including some that fix vulnerabilities in Internet Explorer 6 and Outlook Express 6 that could be exploited by viruses or hackers. Windows XP users need only install Windows XP Service Pack 1, because it includes Internet Explorer 6 SP1. However, for users of other versions of Windows, IE6 SP1 is an essential update. Go to http://www.microsoft.com/windows/ie/downloads/critical/ie6sp1/default.asp.

Internet Explorer critical updates. Microsoft has released several important ‘cumulative’ updates since the release of Internet Explorer 6 SP1 in September 2002. It’s recommended that you install these updates because they fix other bugs and vulnerabilities in IE6. You’ll find a full list at http://www.microsoft.com/windows/ie/downloads/critical/default.asp.

Updates for earlier versions. You can find the service packs and critical updates for earlier versions of Internet Explorer at http://www.microsoft.com/windows/ie/downloads/archive/default.asp.

Microsoft Office
It’s vital to keep Microsoft Office applications up to date as well, particularly with email viruses targeting vulnerabilities in Outlook. Again, there are dozens of updates available for the various versions of Office, but the easiest way ensure your applications are as secure as possible is to download and install the most recent service pack for your version of Office, and then the critical security updates released since that service pack. You can find the updates for the following versions of Office at:

Office 2003: http://office.microsoft.com/officeupdate/downloads.aspx?CategoryID=CD010224941033&CTT=4&Origin=ES790020041033.

Office XP: http://office.microsoft.com/officeupdate/downloads.aspx?CategoryID=CD010224911033&CTT=98.

Office 97: http://office.microsoft.com/officeupdate/downloads.aspx?CategoryID=CD010224961033&CTT=98.

Keep up to date with the latest Office updates at http://office.microsoft.com/OfficeUpdate/default.aspx?displaylang=EN.

Other useful sites
Download Center. To search or keep up to date with all Microsoft downloads, go to http://www.microsoft.com/downloads/search.aspx?displaylang=en.

TechNet Download site. This is aimed at system administrations, but it’s a great resource for anyone who manually downloads updates: http://www.microsoft.com/technet/treeview/default.asp?url=/technet/downloads/itdownloads/Default.asp.

Service Pack site. You can find a list of all Microsoft service packs and related updates at http://support.microsoft.com/default.aspx?ID=FH;EN-US;sp&FR=0&SD=GN&LN=EN-US&CT=SD&SE=NONA.

Windows XP/2000 Automatic Updates. Even if you’re diligent in manually downloading updates, we strongly recommend that you use Microsoft’s automated updating services as well, to ensure you install any critical updates that you miss. If you use Windows XP or 2000, keep the Automatic Update feature switched on. You can learn how to schedule updates at http://support.microsoft.com/default.aspx?scid=kb;en-us;327838.

Windows and Office Update sites. If you use an earlier version of Windows, visiting http://windowsupdate.microsoft.com/ daily is the easiest way to keep up to date. Office users can do likewise at http://office.microsoft.com/officeupdate/mainCatalog.aspx?CTT=98. For a full list of Microsoft’s update services, go to
http://www.microsoft.com/downloads/updateservices.aspx?displaylang=en.

Complain to Microsoft. Finally, if you disagree with Microsoft’s policy of not allowing PC User (and other magazines) to regularly distribute its free updates on cover CDs, you can register your complaint at http://register.microsoft.com/contactus30/feedback.asp. Make sure you select the Australian office from the drop-down list.