JSI Tip 7410. Windows product updates hang, or consume significant CPU resources?

When you try to install a critical update, rollup, hotfix, or security patch, Update.exe may use all or most of your CPU resources.

This behavior will occur if the update uses Update.exe version, which requires the Debug Programs user right (SeDebugPrivilege), AND you have revoked this right from administrators.

NOTE: SeDebugPrivilege is granted to administrators and to Local System by default.

NOTE: You can expand the update package (package.exe - x) to check the Properties of Update.exe.

NOTE: Microsoft has updated ms03-042, ms03-043, and ms03-045 to include Update.exe version, which does NOT require SeDebugPrivilege.

To workaround this issue, either download the updated packages, or grant the Administrators group the Debug Programs user right.

Hide comments


  • Allowed HTML tags: <em> <strong> <blockquote> <br> <p>

Plain text

  • No HTML tags allowed.
  • Web page addresses and e-mail addresses turn into links automatically.
  • Lines and paragraphs break automatically.