October 24, 2006

Administrators concerned that XP SP3 will be axed

The ship date, delayed to 2008, puts Service Pack 3 rollout within months of cut-off date for mainstream support

With Microsoft Corp. now saying that its next major service pack for Windows XP will not ship until 2008, some Windows users are wondering whether the software upgrade will ever be released.

"The fear is Service Pack 3 will just get killed off," said Jeff Centimano, an IT consultant with Levi, Ray & Shoup Inc., based in Kansas City, Missouri, who says that he's heard concerns from administrators since late last week, when Microsoft announced "preliminary" plans to ship SP 3 in the first half of 2008, later than previously expected.

That puts the update within months of the early 2009 cut-off date for mainstream support for the XP operating system, and users like Centimano are now concerned that Microsoft may not feel that a Service Pack 3 is worth the effort.

"That's exactly how it worked out for Windows 2000," Centimano said.

In late 2004, Microsoft scrapped a planned Service Pack 5 for Windows 2000 Server, electing to instead release an "update rollup" of security-related patches for the operating system.

Windows XP administrators say that dropping Service Pack 3 would make their lives harder. "A service pack has been quality assurance-tested with all of the hot fixes together as one installation package," said Ethan Allen, a quality assurance lead with a Seattle-based technology company. "If you were to take 500 hot fixes and install them one by one, eventually you might run into problems because they weren't all QA'd [quality assurance tested] as one package."

Microsoft bills these rollup releases as easier to install, but they don't include as many features as a full service pack, users say.

Directions on Microsoft Analyst Michael Cherry agreed that Microsoft may very well decide to drop XP Service Pack 3. "It absolutely could happen. Microsoft is under no obligation to produce any service packs, ever," he said. "They feel that because these fixes are available through the auto-update that there's less need to create a service pack."

Cherry believes that now that Microsoft has mastered the art of releasing its security patches in a predictable, monthly cycle, it should consider releasing service packs on a regular basis -- once a year, perhaps.

"The thing that I don't understand," he said, "is on one hand Microsoft seems to promote the concept that customers want predictable release cycles for operating systems, yet Microsoft also seems to say that customers don't care how random the release of a service pack is."

Through its public relations agency, Microsoft declined to allow its executives to be interviewed for this story.

Others see a financial motive behind the delay. "They're going to let users kind of sit there without anything new on XP for a while, because they want you to move to Vista," said Allen, who also maintains the Hotfix.net Web site.

Allen, who published an early release of Service Pack 3 on his Web site last year, believes that Microsoft will ultimately release the software. But, he said that the planned four-year gap between XP SP 2 and SP 3 is too long.

"Microsoft is trying to focus more on trying to make a bunch of money than on providing users with fixes for their system," he said.



 

Sign up to receive Security Resource Alerts

Subscribe to the Security Central Newsletter

The one-stop resource center for IT professionals.

White Paper

CA Security Management Solutions

A comprehensive security management solution can help you streamline, as well as grow, your current or evolving business. In this way, a strategic security approach can help you increase your competitiveness in these challenging market conditions.

Download now! »

White paper

Beyond Compliance: The Significant Benefits of Log Management

Find out how you can effectively collect, normalize and archive enterprise-wide, security-related data that is invaluable for security investigation and compliance reporting.

Download now! »

Webcast

Integrated Identity Compliance: Enabling Cost-Effective Role-Based Compliance

This session focuses on the intersection of role management and identity compliance, and addresses the importance of identity compliance in enterprise governance and the challenges that organizations may face in achieving it.

View now! »
©1994-2009 Infoworld, Inc.