Microsoft Changes Its Tune on Porting SP2 FixesBy Channel Insider Staff | Posted 2004-09-23 Email Print
Re-Thinking HR: What Every CIO Needs to Know About Tomorrow's Workforce
Microsoft had told developers privately earlier this year of plans to port some SP2 fixes to older versions of Windows. Now, the company says it has no such intent.Microsoft has been reticent to commit publicly on how, when and whether it would make the browser-specific security fixes that it delivered as part of Windows XP Service Pack 2 available to users of older versions of Windows.
But this week, the Redmond software vendor issued a definitive statement regarding its back-porting intentions. The decision: No SP2 fixesnot even ones such as the SP2 pop-up blocker or the ActiveX control blockerwill be offered for users of older versions of Windows and IE (Internet Explorer).
Microsoft's message is that if you want any of these features, you must upgrade to Windows XP and/or Windows XP Tablet Edition running SP2. Next year, Microsoft will make the appropriate SP2 security fixes, including some of the IE ones, available to Windows Server 2003 users via Service Pack 1.
When asked of these plans, a Microsoft spokesman provided the following statement: "We never committed to back-porting technologies. Our commitment has been to provide the greatest possible level of security to all our customers. We will continue to do this for IE and for previous versions of Windows.
"Trying to retrofit older technologieswhich were never designed with the current environment in mindwith current advancements creates a set of challenges that makes it difficult for customers to deploy and doesn't provide a level of security that we feel confident in providing to our customers," the spokesman said.
"Based on these conclusions, Microsoft's resources are focused on keeping customers current with latest security updates and developing new products that will make them safer and more productive," he added.
Some Microsoft customers said they see the company's refusal to back-port SP2 security fixes to older versions of Windows and IE as little more than Microsoft's attempt to force users to upgrade to Windows XP. Quite a number of enterprises are still running older versions of Windows, especially Windows 2000, on the desktop.
Microsoft's decision not to port SP2 fixes to Windows 2000, in particular, doesn't sit well with Michael Cherry, senior analyst with a Kirkland, Wash.-based research outfit called Directions on Microsoft.
"I don't really think they have any requirement to make any fixes or changes available on the old 9.X code base of Windows 98 and Windows ME," Cherry said. But "the one version of Windows that I have a problem with is Windows 2000, which I believe is still in mainstream support.
"There may be technical reasons why adopting the changes in IE to Windows 2000 is difficult, but Microsoft should be able to overcome this. After all, they own the code for both products," Cherry said.