Why need to patch or update windows
Windows Update is a service provided by Microsoft that provides updates for the Microsoft Windows operating system and its installed components.
There are different kinds of updates. Security updates or critical updates protect against vulnerabilities to malware and security exploits
A patch is a piece of software designed to fix problems with, or update a computer program or its supporting data. This includes fixing security vulnerabilities and other bugs, and improving the usability or performance.
Programmers publish and apply patches in various forms. Because proprietary software authors withhold their source code, their patches are distributed as binary executables instead of source.
Patch management is the process of using a strategy and plan of what patches should be applied to which systems at a specified time.
Security updates are routinely provided on the second Tuesday of each month, Patch Tuesday(Patch Tuesday begins at 17:00 or 18:00 UTC. Sometimes there is an extraordinary Patch Tuesday, 14 days after the regular Patch Tuesday), but can be provided whenever a new update is urgently required to prevent a newly discovered or prevalent exploit targeting Windows users. Windows Update can be configured to install critical updates automatically so long as the computer is connected to the Internet,without the user needing to install them manually, or even be aware that an update is required.
Patch Management keeps your Windows Clients current with the latest security updates from Microsoft.
Microsoft web site to update
Critical Update Notification Tool/Utility
Shortly after the release of Windows 98, Microsoft released a Critical Update Notification Tool (later called Critical Update Notification Utility) through Windows Update, which installed a background tool on the user’s computer that checked the Windows Update web site on a regular schedule for new updates that have been marked as “Critical”. By default, this check occurred every five minutes, and when Internet Explorer was started, though the user could configure the next check to occur only at certain times of the day or on certain days of the week.
With the release of Windows Me in 2000, Microsoft introduced Automatic Updates as a replacement for the Critical Update Notification tool. Unlike its predecessor, Automatic Updates includes the ability to download and install updates without using a web browser. Instead of the five minute schedule used by its predecessor, the Automatic Updates client checks the Windows Update servers once a day. The user is given the option to download available updates then prompt the user to install them, or to notify the user prior to downloading any available updates.
In Windows Vista, Windows Server 2008, and Windows 7, the web site is no longer used to provide a user interface for selecting and downloading updates. In its place, the Automatic Updates control panel has been expanded to provide similar functionality. Support for Microsoft Update is also built into the operating system, but is turned off by default. The revised Windows Update can also be set to automatically download and install both Important and Recommended updates. In prior versions of Windows,such updates were only available through the Windows Update web site.