(From his current newsletter - Monday, Aug 16, 2004)

1) Go Slow With XP's SP2

Many readers are wondering what to do about XP's SP2, which is starting
to trickle out in a limited release. But over the next few weeks, just
about all XP users will be offered the download in a carefully sequenced
rollout designed to prevent the overload of Microsoft's servers.

When you're offered SP2, my advice is: Do nothing; wait a bit.

SP2 is huge--- so big it's almost a whole new version of XP. Like any
new version of any OS, it *will* contain bugs, and it *will* cause
trouble on some setups. The more complex and/or nonstandard your setup
is, the greater the likelihood of a problem.

Plus, there's no "must have right now" element to SP2: Much of SP2 is
designed to force uninformed (or just plain lazy!) PC users to use basic
security--- to stay current with updates, to use a firewall, etc. (These
are the users running the unpatched/unprotected systems that allow most
worms/viruses to spread.)

But odds are, if you're reading this newsletter, you already know about
and are using pretty good security practices, such as good firewall,
antivirus and anti-spyware tools, and you're keeping up to date with
Critical Updates. If that's the case, you won't gain a lot by rushing
into SP2.

Instead, wait a bit--- even as much as a month or two--- to let the
worst problems with SP2 come to light and be fixed on other user's PCs.
Again, as long as you're already using the kinds of security tools and
techniques we discuss in this newsletter every week (example:
http://www.informationweek.com/840/langa.htm), there's no need to rush
into SP2.

I'm not the only one suggesting this "go slow" approach. See, for
example these other authors:

http://www.scotsnewsletter.com/60.htm

But if you absolutely must try it as soon as you can, MAKE A FULL IMAGE
BACKUP OF YOUR SYSTEM! (There, I hope that got your attention! <g>) You
can use a free trial version of BootIt for example (
http://www.terabyteunlimited.com/ ), and have a bulletproof way to roll
your system back to pre-SP2 condition if things don't work out. Note that
standard uninstall, backup or roll-back tools (like Go Back) may NOT
suffice for an update of this size and scope. If you want to be 100% sure
you can undo SP2 in its totality, you *must* use a heavy-duty imaging tool. See
http://search.atomz.com/search/?sp-q=imaging&sp-a=0008002a-sp00000000 .

But for most of us, the answer's simpler: Relax! Take a break, and let
others blaze a trail for you! Eventually, SP2 will be worth installing,
but for most of us--- almost everyone--- there's no particular need for,
or benefit from, being an early adopter.