I work for a local-government IT department in the DC area. We're on IE7, but we have automatic updates turned off. At first, a few years ago, it was because t

I work for a local-government IT department in the DC area. We're on IE7, but we have automatic updates turned off. At first, a few years ago, it was because there was one specific update that broke our Oracle software, so everything got turned off. Now, we keep them off because of inertia. We started pushing out selected security updates in the last few months because the security folks insisted. Oddly, it's our policy to install the full set of updates (except IE8) to all machines that have issues. We also update our images with all the latest stuff from Microsoft Updates.