Microsoft KB Archive/887012

= Why you may be prompted to restart your computer after you install a security update on a Windows-based computer =

Article ID: 887012

Article Last Modified on 12/3/2007

-

APPLIES TO


 * Microsoft Windows Server 2003, Datacenter Edition (32-bit x86)
 * Microsoft Windows Server 2003, Enterprise Edition (32-bit x86)
 * Microsoft Windows Server 2003, Standard Edition (32-bit x86)
 * Microsoft Windows Server 2003, Web Edition
 * Microsoft Windows Server 2003, Datacenter Edition for Itanium-Based Systems
 * Microsoft Windows Server 2003, Enterprise Edition for Itanium-based Systems
 * Microsoft Windows Server 2003, Datacenter x64 Edition
 * Microsoft Windows Server 2003, Enterprise x64 Edition
 * Microsoft Windows Server 2003, Standard x64 Edition
 * Microsoft Windows XP Professional x64 Edition
 * Microsoft Windows XP Professional
 * Microsoft Windows XP Home Edition
 * Microsoft Windows XP Media Center Edition 2005
 * Microsoft Windows XP Media Center Edition 2004
 * Microsoft Windows XP Media Center Edition 2002
 * Microsoft Windows XP Tablet PC Edition 2005
 * Microsoft Windows XP Tablet PC Edition
 * Microsoft Windows Small Business Server 2003 Premium Edition
 * Microsoft Windows Small Business Server 2003 Standard Edition
 * Microsoft Small Business Server 2000 Standard Edition
 * Microsoft BackOffice Server 4.5
 * Microsoft BackOffice Server 4.0
 * Microsoft Windows 2000 Professional Edition
 * Microsoft Windows 2000 Server
 * Microsoft Windows 2000 Advanced Server
 * Microsoft Windows 2000 Datacenter Server
 * Microsoft Windows Advanced Server, Limited Edition
 * Microsoft Windows Datacenter Server Limited Edition
 * Microsoft Windows NT 4.0
 * Microsoft Windows NT Advanced Server 3.1
 * Microsoft Windows NT Server 4.0 Standard Edition
 * Microsoft Windows NT Server 4.0 Enterprise Edition
 * Microsoft Windows NT Workstation 4.0 Developer Edition

-





INTRODUCTION
This article describes why you may be prompted to restart your Microsoft Windows-based computer after you install a security update.



Why you may be prompted to restart your computer
After you install a security update, you may be prompted to restart your computer if one of the following conditions is true:
 * The security update updates a DLL that is loaded in one or more processes that are required by Windows. The security update cannot be completed while the DLL is loaded. Therefore, the security update must stop the process that causes the DLL to be loaded. Stopping the process will unload the DLL that is required to complete the update. However, the process in which the DLL is loaded cannot be stopped while Windows is running. For example, the security update that is described in security bulletin MS04-011 updates many DLLs that are loaded in core operating system processes that cannot be stopped without shutting down Windows.
 * The security update updates an .exe file that is currently running as a process that is required by Windows. The update cannot be completed while this process is running. However, you cannot force this process to stop unless you shut down Windows. For example, Csrss.exe is a required process in Windows.
 * The security update updates a device driver that is currently being used and that is required by Windows. The update cannot be completed while this device driver is being used. However, you cannot unload this device driver unless you shut down Windows. For example, Disk.sys is a device driver that is required by Windows.
 * The security update makes changes to the registry. These changes require that you restart your computer.
 * The security update makes changes to registry entries that are read only when you start your computer.

How to reduce your chances of being prompted to restart your computer
To reduce your chances of being prompted to restart your computer after you install a security update, you can try to end the processes use the files that are being updated by the security update.

To determine whether files that are being updated by a security update are being used by your computer, you can use Process Explorer from Sysinternals to examine how the files are being used and by what processes they are being used. You may be able to stop the services or to end the processes that are using the files. For more information about Process Explorer, visit the following Sysinternals Web site:

http://www.microsoft.com/technet/sysinternals/default.mspx

Microsoft provides third-party contact information to help you find technical support. This contact information may change without notice. Microsoft does not guarantee the accuracy of this third-party contact information. For more information about Process Explorer, click the following article number to view the article in the Microsoft Knowledge Base:

242131 How to display a list of processes that have files open

Except for our own products, Microsoft does not endorse or recommend this product over others in the same area. We provide this information only as a convenience for our customers and, excepting our own products, do not provide warranties of any kind, either express or implied. The warranties that we do not provide include but are not limited to the implied warranties of merchantability or fitness for a particular purpose.

How to suppress the message to restart your computer
To suppress the message to restart your computer, use a command-line switch. The command-line switch that you use depends on the installer that is used by the security update. For more information about command-line switches for Windows and IExpress software update packages, click the following article numbers to view the articles in the Microsoft Knowledge Base:

262841 Command-line switches for Windows software update packages

197147 Command-line switches for IExpress software update packages

When you use Windows Installer, a security update that uses the .msi or the .msp file name extension is installed on your computer. For additional information about command-line options that are used by Windows Installer, visit the following Microsoft Web site:

http://msdn2.microsoft.com/en-us/library/aa367988.aspx

Important In certain cases, you must restart your computer to fully apply the security update. Your computer may remain vulnerable if the security update is not fully applied.



Technical support for x64-based versions of Microsoft Windows
Your hardware manufacturer provides technical support and assistance for x64-based versions of Windows. Your hardware manufacturer provides support because an x64-based version of Windows was included with your hardware. Your hardware manufacturer might have customized the installation of Windows with unique components. Unique components might include specific device drivers or might include optional settings to maximize the performance of the hardware. Microsoft will provide reasonable-effort assistance if you need technical help with your x64-based version of Windows. However, you might have to contact your manufacturer directly. Your manufacturer is best qualified to support the software that your manufacturer installed on the hardware.

For product information about Microsoft Windows XP Professional x64 Edition, visit the following Microsoft Web site:

http://www.microsoft.com/windowsxp/64bit/default.mspx

For product information about x64-based versions of Microsoft Windows Server 2003, visit the following Microsoft Web site:

http://www.microsoft.com/windowsserver2003/64bit/x64/default.mspx

The third-party products that this article discusses are manufactured by companies that are independent of Microsoft. Microsoft makes no warranty, implied or otherwise, regarding the performance or reliability of these products.

Additional query words: Winx64 Windowsx64 64-bit 64bit

Keywords: kbwinservnetwork kbsecurityservices kbhowto KB887012

-

[mailto:TECHNET@MICROSOFT.COM Send feedback to Microsoft]

© Microsoft Corporation. All rights reserved.