What features does Service Pack 2 provide?

Windows Security Center
First, Windows Security Center provides a central location for viewing security status, changing security settings, and learning more about security issues. Accessed from the Control Panel, it shows the status of three important security components —ICF (Internet Connection Firewall), Automatic Updates, and Anti-virus software. It also serves as a starting point for getting to other security-related areas and for finding security-related support and resources.

Now ON by default, the ICF automatically protects against intruders accessing your computer from the Internet. There are significant enhancements to this version. In earlier versions, there was a small delay in activating the firewall as the network started, leaving the computer vulnerable. The new ICF uses a boot-time filter to prevent attacks during this time. Once ICF is running, it loads its settings and removes the boot-time filters.

The new ICF allows exceptions. For example, a security alert might be produced by a multi-player Internet game using ports blocked by ICF. These ports are blocked by default since they are often the same ports used by hackers and worms to enter a computer. The ICF may be set to open the port only when the game is being played and close it when the game is shut down.

Windows Security Center also checks Automatic Update settings, defaulting to “Automatically download recommended updates for my computer and install…” If Automatic Updates is turned off or the settings are other than those recommended, it alerts the user. It also looks for Anti-virus software, checking if it is up-to-date and providing real-time scanning.

If any of these security components is missing or has settings that degrade computer security, Windows Security Center places a red shield icon in the notification area and displays an alert at log on. Clicking the icon or alert opens Windows Security Center, where a proposed resolution to the problem is offered.

Internet Explorer (IE) Enhancements
IE comes with its own pop-up blocker. It can allow pop-ups from some sites while blocking others. It’s turned ON by default, allowing pop-ups when the site generating the pop-up is in the list of Allowed sites, the pop-up opens from a site listed in the Trusted Sites or Local Intranet zones, and when ActiveX controls from a site open the pop-up. The Information Bar provides warnings about what is being blocked, with options for viewing the content, maintaining the restriction, and adjusting the settings involved. All warnings appear below the toolbar, above the page in view, and disappear with the next navigation.

Add-ons, like third-party tool bars and ActiveX controls, may cause browser instability and are a security risk. For instance, an add-on can record Web activity and report it to an unknown central server. With the new Add-on Manager, a user may view and control the list of add-ons loaded by IE. Before Service Pack 2, specialized software was needed to identify and remove add-ons. Now, information is available on how often an add-on has been used as well as the name of the add-on's publisher. There’s also an option for updating ActiveX controls, to keep them up-to-date, preventing system and security issues.

Outlook Express Enhancements
The new Outlook Express helps users avoid repeat spam by preventing them from unknowingly validating their e-mail addresses to spammers. References to images are often hidden inside messages. When the message containing the image is opened, previous versions of Outlook Express automatically contacted remote Web servers to download and display the image. The replying server then validates the e-mail address, adding it to a list, and sending the addresses on the list additional spam. The Don't Download External HTML Content option, enabled by default, prevents Outlook Express from contacting a Web server to download external content without explicit permission. The user has the option to download the content or not, or turn this feature off.

Should I upgrade to Windows XP Service Pack 2?

Service Pack 2 doesn’t come without its problems. An on-line survey by the SANS Institute showed that while 46% of respondents haven’t had a problem with SP2; 27% have had small problems; and 8% have had big problems that they could fix. Another 8% reported major problems they hadn’t corrected, and 7% had to rebuild from scratch.

In Microsoft’s Knowledge Base Article (KBA) 842242, they admit “some programs seem to stop working after you install Windows XP Service Pack 2." They provide a list of such applications. Many problems are related to default ports blocked by ICF. Microsoft KBA 875357 provides instructions for reconfiguring ICF to support these application problems.

It's normal to expect the installation of new software with so much added security to cause problems with some applications. These problems should be relatively easy for administrators to solve by becoming familiar with and properly managing the new features enabled by Service Pack 2. A successful upgrade to Service Pack 2 will require proper testing and getting hands-on familiarity with its new settings and features.

Until next time…