Developers at Microsoft Corp. may be celebrating that they finished work on Service Pack 2 for Windows XP , but IT departments around the world now face the question of whether they should update their systems.
IBM, for one, is holding off on installing the security-focused update for Windows XP. In a note headlined "To patch -- or not to patch," posted Aug. 6 on its corporate intranet, IBM told employees not to download SP2 when it becomes available because of compatibility issues. A copy of the note was obtained by IDG News Service.
"While this patch may be good news for other Microsoft Windows XP owners, IBM is directing XP users not to install SP2," the note states. With close to 400,000 desktops, IBM is a very large Microsoft customer.
"IBM's large number of Web applications will need to be tested and some modified to work correctly with SP2. Currently, some high-profile, business-critical applications are also known to conflict with SP2," IBM said in the note. "When the current issues and concerns have been addressed, IBM will deploy a customized version of SP2."
An IBM spokeswoman declined to comment on internal IT issues.
A Microsoft spokesman said the company believes IBM's recommendation to its employees is prudent.
"Microsoft would expect any well-run IT organization to make the same recommendation," he said. The company has "recommended all along that customers thoroughly test SP2 before deploying it" to ensure compatibility and avoid unforeseen problems, he said.
IBM alerted its users on the same day Microsoft announced the release to manufacturing of the service pack. The Windows XP update will be available soon through downloads, retail distribution and free CDs, as well as on new PCs. A network installation package will be available for enterprise users.
SP2 for Windows XP is more than the usual package of bug fixes and updates. Microsoft has made a trade-off, focusing on security at the expense of compatibility. As a result, SP2 can render existing applications inoperable.
Broad Changes
IBM isn't the only company showing evidence of compatibility problems with XP SP2; Microsoft's own software is also affected. The vendor recently released an update for Microsoft CRM 1.2 because SP2 will prevent the original application from running correctly.
Because of Microsoft's broad changes, analysts have compared the XP service pack to a Windows upgrade rather than a simple update. Business users typically take much longer to install a new version of Windows than a service pack because of compatibility testing.
Thomas Smith, manager of desktop engineering at a large Houston-based company that he asked not be identified, said he hopes to equip his 5,000 desktops with a customized version of the service pack before Microsoft pushes it out on Windows Update.
Many of the desktops Smith manages are scattered throughout North America and use common high-speed Internet connections such as DSL or cable. Although the company uses a remote management tool supplied by Altiris Inc., Smith said he relies on Windows Update for patching. If the standard Windows XP SP2 distribution is applied to his machines, it will block access to several corporate Web applications, he said.
Microsoft will help users in Smith's position, said Barry Goffe, a group manager in Microsoft's Windows group. The software maker plans to offer simple ways to set a unique registry key on XP desktops that will instruct the systems to skip SP2 but still download other critical updates through Windows Update and Automatic Update, Goffe said. "We want to give customers some breathing room," he said.
Nevertheless, Microsoft is urging all users to install SP2 as soon as they can, Goffe said. "This is not about fun and games," he said. "SP2 is about improving the security of our customers' infrastructure. We have spent a lot of time making sure that this delivers a lot of value to all our customers. We're urging all customers to deploy SP2 as soon as possible."
Business users obviously need to test, but Microsoft can't be blamed if users are now unpleasantly surprised by SP2, said Michael Cherry, an analyst at Directions on Microsoft Inc. in Kirkland, Wash.
"Microsoft has been more than forthcoming about the number of changes in this service pack and making it available for testing," Cherry said. "I would say to IT departments that they want to get their testing done quickly because there are significant improvements in this service pack, and I am not sure you would want to forgo those."
Evers writes for the IDG News Service. Computerworld's Todd R. Weiss contributed to this story.