Feeds

Three quarters of corporate PCs shun SP2

Holding back as 12 April deadline looms

  • alert
  • submit to reddit

SANS - Survey on application security programs

Only a quarter of corporate PCs running Windows XP have upgraded to SP2 (Service Pack 2), according to a survey out this week. The study by asset management outfit AssetMetrix - published days before the deadline for holding back on SP2 installation expires on 12 April - paints a picture of a lack of preparation for a major change in corporate computing infrastructures.

AssetMetrix surveyed more than 136,000 PCs across 251 North American corporations and found only 24 per cent of Windows XP PCs had been upgraded to SP2. When Microsoft launched its heavily-touted security upgrade in August 2004 it offered firms the opportunity to "hold off" the automatic installation of SP2 while still receiving security patches for eight months. That suspension expires on 12 April, when Microsoft's Automatic Update service will deliver SP2 to firms.

"Microsoft allowed a significant period of time to accommodate companies' demand to test and validate Windows XP SP2 within their IT infrastructure," said Steve O'Halloran, managing director of AssetMetrix Research Labs. "Based on our research, a substantial number of companies have yet to decide whether to accept or embargo Windows XP SP2. To date, we have observed that 40 per cent of companies using Windows XP have actively avoided upgrading to SP2, and only 7 per cent have actively accepted it. The other 52 per cent of the companies showed no direction or policy towards SP2, and may find themselves having support issues by allowing multiple editions of Windows XP to exist in their infrastructure."

Users still reluctant to deploy XP SP2 after then will have to stop using automatic updates after 12 April but that creates a number of possible issues, including possible incompatibilities with future products such as Internet Explorer 7, or a potential support gap when Microsoft support for Windows XP Service Pack 1 is withdrawn in September 2006. ®

Related stories

Corporates can delay XP SP2 auto-update
XP SP2 glitches to trip up one in 10 upgrades - report
Gates: security concerns propel IE7 launch

High performance access to file storage

More from The Register

next story
Obama allows NSA to exploit 0-days: report
If the spooks say they need it, they get it
Samsung Galaxy S5 fingerprint scanner hacked in just 4 DAYS
Sammy's newbie cooked slower than iPhone, also costs more to build
Putin tells Snowden: Russia conducts no US-style mass surveillance
Gov't is too broke for that, Russian prez says
Snowden-inspired crypto-email service Lavaboom launches
German service pays tribute to Lavabit
Mounties always get their man: Heartbleed 'hacker', 19, CUFFED
Canadian teen accused of raiding tax computers using OpenSSL bug
One year on: diplomatic fail as Chinese APT gangs get back to work
Mandiant says past 12 months shows Beijing won't call off its hackers
Call of Duty 'fragged using OpenSSL's Heartbleed exploit'
So it begins ... or maybe not, says one analyst
prev story

Whitepapers

Top three mobile application threats
Learn about three of the top mobile application security threats facing businesses today and recommendations on how to mitigate the risk.
Combat fraud and increase customer satisfaction
Based on their experience using HP ArcSight Enterprise Security Manager for IT security operations, Finansbank moved to HP ArcSight ESM for fraud management.
The benefits of software based PBX
Why you should break free from your proprietary PBX and how to leverage your existing server hardware.
Five 3D headsets to be won!
We were so impressed by the Durovis Dive headset we’ve asked the company to give some away to Reg readers.
SANS - Survey on application security programs
In this whitepaper learn about the state of application security programs and practices of 488 surveyed respondents, and discover how mature and effective these programs are.