the simple fix for many orgs, is to just block windowsupdate.microsoft.com on thr proxy or dns server, until SP2 gets tested.
The unmanaged/unmanageable companies are the ones that cause many problems to the internet as a whole... no AV, no techies, just out with their stuff blowing in the wind
