A Better Way To Patch?A Better Way To Patch?

In an attempt to get more small companies to update their computers against cyberattacks, Microsoft last week started testing software for Windows machines that can distribute antivirus patches more efficiently. But the technology won't arrive until later this year.

In its final form, Windows Update Services will be able to apply Microsoft-issued security patches for Windows, Office, and Microsoft's database and E-mail programs automatically. "The key for customers is getting these patches down," says Microsoft senior VP Bob Muglia. "The biggest issue right now is that when we issue a patch, it can take them weeks to get it installed."

Security flaws in Microsoft products have left companies susceptible to Internet-borne viruses and worms. Michael Cherry, an analyst at the research company Directions on Microsoft, says unprotected computers can affect others as well. "If company A doesn't patch all its servers, company B can be harmed."

But more automation won't fix Microsoft's patching problem, says Tim Stettheimer, CIO at St. Vincent's Hospital in Birming- ham, Ala. "There's no way I'll let them at my servers--the risk is too high," he says. "Patching with Microsoft has been a huge headache for us."