Why you may be prompted to restart your computer after you install a security update on a Windows-based computer
Why you may be prompted to restart your computerAfter you install a security update, you may be prompted to restart your computer if one of the following conditions is true:
- The security update updates a DLL that is loaded in one or more processes that are required by Windows. The security update cannot be completed while the DLL is loaded. Therefore, the security update must stop the process that causes the DLL to be loaded. Stopping the process will unload the DLL that is required to complete the update. However, the process in which the DLL is loaded cannot be stopped while Windows is running. For example, the security update that is described in security bulletin MS04-011 updates many DLLs that are loaded in core operating system processes that cannot be stopped without shutting down Windows.
- The security update updates an .exe file that is currently running as a process that is required by Windows. The update cannot be completed while this process is running. However, you cannot force this process to stop unless you shut down Windows. For example, Csrss.exe is a required process in Windows.
- The security update updates a device driver that is currently being used and that is required by Windows. The update cannot be completed while this device driver is being used. However, you cannot unload this device driver unless you shut down Windows. For example, Disk.sys is a device driver that is required by Windows.
- The security update makes changes to the registry. These changes require that you restart your computer.
- The security update makes changes to registry entries that are read only when you start your computer.
How to reduce your chances of being prompted to restart your computerTo reduce your chances of being prompted to restart your computer after you install a security update, you can try to end the processes use the files that are being updated by the security update.
To determine whether files that are being updated by a security update are being used by your computer, you can use Process Explorer from Sysinternals to examine how the files are being used and by what processes they are being used. You may be able to stop the services or to end the processes that are using the files. For more information about Process Explorer, visit the following Sysinternals Web site:
How to suppress the message to restart your computerTo suppress the message to restart your computer, use a command-line switch. The command-line switch that you use depends on the installer that is used by the security update.For more information about command-line switches for Windows and IExpress software update packages, click the following article numbers to view the articles in the Microsoft Knowledge Base:
Technical support for x64-based versions of Microsoft WindowsYour hardware manufacturer provides technical support and assistance for x64-based versions of Windows. Your hardware manufacturer provides support because an x64-based version of Windows was included with your hardware. Your hardware manufacturer might have customized the installation of Windows with unique components. Unique components might include specific device drivers or might include optional settings to maximize the performance of the hardware. Microsoft will provide reasonable-effort assistance if you need technical help with your x64-based version of Windows. However, you might have to contact your manufacturer directly. Your manufacturer is best qualified to support the software that your manufacturer installed on the hardware.
For product information about Microsoft Windows XP Professional x64 Edition, visit the following Microsoft Web site:
Applies ToThis article applies to all currently supported Microsoft operating systems.
Article ID: 887012 - Last Review: 05/23/2014 07:44:00 - Revision: 7.0
- kbwinservnetwork kbsecurityservices kbhowto KB887012