Microsoft has been patching users' Windows machines without their knowledge or consent, but claims the updates are “normal” behaviour.
The company said that patches sent to Windows XP and Vista machines without users knowing about them were for the Windows Update mechanism, though it acknowledged it could have been more "transparent" before changing files on user computers.
Microsoft's response came after users expressed concern over updates that were pushed out even when they had turned off the automatic updating feature of Windows Update. The updates were described as "secret" in published reports and on user forums, and users expressed concern that Microsoft would update their files without their knowledge or consent
Microsoft regularly pushes out updates to Windows machines, but will only update the machine without user action if automatic updating is enabled. If it is not, a user must activate Windows Update to upload an update to the machine.
In an email, Microsoft said that the Windows Update service automatically updates itself "from time to time to ensure that it is running the most current technology." "This is normal behaviour, and it has worked this way since the service debuted several years ago," the company said.
However, Microsoft acknowledged that it could have better informed users about how Windows Update behaves, to avoid confusion.
"We could have been clearer on how Windows Update behaves when it updates itself," the company said in its statement. "We’ve received helpful and important feedback on this point, and we are now looking at the best way to clarify [Windows Update's] behaviour to customers so that they can more clearly understand how [it] works."
Despite the faux pas, Microsoft still is encouraging users not to turn off the automatic feature of Windows Update, claiming it's the best way to ensure they get critical updates from the vendor, including those that are security-related.