Although Microsoft recommends that consumers turn on Automatic Update to get the latest version of Windows, the company is offering to let companies temporarily block such upgrades

The tool, which is posted on Microsoft's Web site, allows companies that have Automatic Update running on their machines to leave the feature on, while temporarily blocking Service Pack 2 (SP2). "While recognizing the security benefits of Windows XP SP2, some organizations have requested the ability to temporarily disable delivery of this update," Microsoft said on its Web site. The company says the blocking tool will give companies up to four months to perform the upgrade on their own before automatically installing SP2. Microsoft's recommendation has been for businesses to test SP2 as they would test other big operating system upgrades to make sure that there are no problems with custom applications and other software. "We're encouraging our organizational customers--government, education, corporations--to start testing and to deploy the service pack as quickly as possible," said Barry Goffe, a group manager in Microsoft's Windows client unit. But, he added, "there are application compatibility consequences and we want to make sure customers are aware of those within their environment before they upgrade." That recommendation has been echoed by computer makers and others, with IBM sending out a memo telling its employees not to install the update because of potential incompatibilities. Many CIOs say they, too, plan to go slow in adding SP2 to their machines. Microsoft finalized the security-oriented upgrade last week, posting a tool online this week that allows businesses to upgrade their machines. Microsoft plans soon to start pushing SP2 onto machines that have Windows' automatic update feature turned on.