Patched XP Pro SP1 vs. XP Pro SP2

[Guest]

So you have two machines:
one with XP Pro SP2 plus current security and critical patches applied.
one with SP1 plus all currect security and critical patches applied.

which machine is more secure? Assume Windows Firewall is not needed due to
a corporate firewall.

We are currently including SP2 on newly deployed computers, and have been
for a while. We are trying to decide if we should devote resources to
upgrading SP1 machines, or let SP1 phase out slowly as part of our hardware
upgrade cycle. All machines have current MS security and critical patches
applied via a patch management application. Just under one third of our
machines are at SP2. Thoughts? Thank you.

Jack.

 

[GTS]

SP2 is more secure, and I see little sense in 'devoting resources' to
maintaining some machines with SP1.

 

[Jupiter Jones [MVP]]

Jack;
First, as time goes on, more and more will require Service Pack 2, Windows
Defender is one example.
You may find more new hardware and software is unsupported without the
latest Service Pack.
Changing OSs as hardware is upgraded is normally acceptable but it is
usually not a good reason to wait that long for Critical Updates especially
Service Packs.
If that time frame is months to possibly a year at the very most, possibly,
except the plan should have had the transition completed long ago.
But many use computers for years, making waiting unacceptable.
There are some safely still using Windows 95, there are others dangerously
avoiding the latest Service Pack.
The specific use of the computer is a major factor determining what is
needed.
Generally I say if someone asks: If you need to ask, you need the update.
Only those intimately aware of their computer and security circumstances are
best qualified to determine if they do not need a Service Pack as well as
most other Critical Updates.

All versions of Windows XP include a firewall.

Also see:
http://support.microsoft.com/windowsxpsp2
http://support.microsoft.com/default.aspx?scid=kb;en-us;835935

 

[Steven L Umbach]

XP is definitely more secure particularly in the way it handles RPC calls,
Internet Explorer, and with the plethora of extra Group Policy options.
Having said that only you can make the decision on where to place your
resources and for you SP1 may be perfectly adequate especially if you do not
need the benefits of the extra Group Policy options for Windows Firewall,
Internet Explorer, etc. --- Steve