Windows Update

Windows 8.1 is more secure than previous versions of Windows, but you may have noticed that Microsoft isn’t going so far as to say, “You don’t need an antivirus program anymore.” The hackers will have a much harder time of it, but with so many million lines of code to explore, they’re sure to break in somehow.

Microsoft and other security researchers constantly find new security holes—and as soon as they’re found, Microsoft rushes a patch out the door to fix it. But creating a patch is one thing; actually getting that patch installed on multiple millions of copies of Windows around the world is another thing entirely.

Note

In fact, it’s Microsoft’s patches that usually alert hackers to the presence of security holes in the first place! They exploit the fact that not everyone has the patch in place instantly. (Which brings up the question: Should Microsoft even be creating the patches? But that’s another conversation.)

That’s where Windows Update comes in. When Microsoft releases a security fix, it gets delivered straight to your PC and automatically installed. (If you want, you can first review the fix before installing it, although few people have enough knowledge to judge its value.)

Windows Update doesn’t deliver patches just to Windows itself; it can also send you better drivers for your hardware and patches to other Microsoft products, notably Office.

As shown in Figure 21-12, Windows Update has two front ends: one at the desktop, and one in TileWorld.

Microsoft figures most people would like these updates to arrive as quietly and automatically as possible. But you can override that assumption.

To adjust how updates work, open the Windows Update screen of the Control Panel (Figure 21-12), and then click “Change settings.” You wind up at the box shown in Figure 21-13.

The four options here correspond to four levels of trust people have in Microsoft, the mother ship:

Microsoft hates it when people choose anything but the first option, because it leaves them potentially open to security holes. On the other hand, patches have sometimes been known to be a bit buggy, so some people like to do a Google search on any new patch before installing it.

Notice, at the bottom of Figure 21-13, that there are several sections, two of which affect which updates are downloaded: There’s one for recommended updates, and one for Microsoft Update. A recommended update, in Microsoft lingo, is an update that isn’t required to keep your PC safe or to keep your operating system from blowing up but that can solve “non-critical problems and help enhance your computing experience.” That’s usually an updated driver or a Windows bug fix or feature enhancement. Turn on recommended updates if you want them to be included in Windows Update.

The Microsoft Update section delivers updates for other Microsoft software on your PC, notably Microsoft Office.

There’s a lot more to Windows Update than these basics, though. You can take a look at all the updates installed on your PC, for example, and you can even uninstall an update. And you can also restore the mysterious-sounding “hidden updates.”

To begin, get back to the screen shown in Figure 21-12 at top. The left side of the screen includes these links:

If an update winds up making life with your PC worse instead of better, you can remove it. Head to Control Panel→Programs→View Installed Updates, click an update, and then select Uninstall.

There’s one problem with this action: The next time Windows Updates does its job, it will reinstall the update you just removed.

The workaround is to hide the update so that it doesn’t get downloaded and installed again. Open Windows Update, and then click “Check for updates.”

After Windows finds updates, click “View available updates.” Right-click the update you don’t want; select “Hide update.” From now on, Windows Update ignores that update.

If, later, you change your mind, click “Restore hidden updates,” select the update you want installed, and then click Restore.