Daily definition updates August 1-August 15

[Guest]

Yes--you don't need to know anything about that stuff--if you apply what is
offered on the day you see the offer, you will be up to date.

That sounds good to me. Thank you Bill, and thank you, Bitman. So all I need
is to trust in Windows update. Good.

(You think this four-leaf clover, and the rabbit's foot good luck charm
won't make any difference, then?)

 

[Bill Sanderson MVP]

Ever thought about what that rabbit's luck was like?
--

 

[Guest]

Right after it ate that four leaf clover...

Ever thought about what that rabbit's luck was like?

 

[JRosenfeld]

You may have already seen our blog posting on this but I wanted to
echo it here since it may raise some questions.
http://blogs.technet.com/antimalware/archive/2006/08/01/444384.aspx

Over the next two weeks we will be testing a new definition update
process and, as part of the test, we will be delivering signatures
daily Monday through Friday through August 15. After the 15th
updates will return to the current schedule of twice weekly.

If you have feedback on this change you can post it in follow up to
this message or email it to (e-mail address removed).

Jeff

Here it is Wednesday 2 August 23.18 GMT. My last update is dated 30 July
(1.14.1639.16). I just checked Microsoft Updates (express). No updates are
offered.
According to the notice I should have had one on 1 August, a second one
today. Am I missing something?

 

[Bill Sanderson MVP]

Your situation matches mine, and others that I've talked to, fwiw.

--

 

[Guest]

Same Here,
It's 9:25 pm in Chicago. Nothing!
I've been checking to see if anyone has posted a link to the update but not
yet.

?:-(
Tim

 

[Guest]

I found myself approving def. updates in WSUS almost daily (I use that to
roll-out defs to systems here at a corporate LAN) and decided to check the
blog and forum.

Testing this is fine, but raises questions: with the monthly release of
patches ('Patch Tuesday') I've setup a testing procedure and roll-out
schedule for this. WD updates were more frequent, and thus less tested and
approved soon(er).
With daily updates, there is not much room for testing and deciding to
roll-out or not.
I could stick to my own schedule and skip daily defs and only approve once
every 'x' days, but the bottomline is that much more work is involved to push
WD defs.

How about not releasing them as new defs each time, but as an updated
version of a previous definition update. I can then automatically have them
approved by WSUS.

Michel

 

[Bill Sanderson MVP]

FWIW, in fact, the daily updates seen so far have all been delta
updates--i.e. the files contain just changes over the previous Full update.
The Delta's are cumulative, however--which is good and bad in your
situation--it doesn't matter if you skip one, the next one gets you up to
date, but each new one might contain a False Positive that would affect your
systems.

 

[Guest]

Dial-up user

Automatic Update fails to download signature automatically this week. Today
I saw the yellow shield on notification area but in a few seconds it
suddenly disappeared and never download signature again.

 

[Guest]

You may have already seen our blog posting on this but I wanted to echo it
here since it may raise some questions.
http://blogs.technet.com/antimalware/archive/2006/08/01/444384.aspx

Over the next two weeks we will be testing a new definition update process
and, as part of the test, we will be delivering signatures daily Monday
through Friday through August 15. After the 15th updates will return to the
current schedule of twice weekly.

If you have feedback on this change you can post it in follow up to this
message or email it to (e-mail address removed).

Jeff

 

[Guest]

Ever since the new def update process was introduced, our WSUS server cannot
complete download of def updates anymore (as of Aug. 1). The server would
mark synchronisation as complete. But the update itself is marked as "failed
to download". The Applog on the server mentions eacht time we try to
redownload a definition the following error: ID 364: cert authentication
failure. Then it mentions the definition it tried to download and the content
folder the definition was supposed to be safed.
We run WSUS 2.0.0.2620 on a W2K SP4 Server. The server connects through a
Linux proxy (squid) to the internet. So far it ran well. And all the other
updates download successfully. (Last successful def: 1.14.1637.1, first
unsuccessful: 1.14.1639.16)
Any idea why the download of just the defintion updates and only since Aug.
1 fails?

 

[Bill Sanderson MVP]

This may be irrelevant, but your mention of "cert failure" brought to mind
that some users have mentioned that adding a "root certificates"
update--which is an optional non-critical update at Windows Update to their
systems has fixed update problems in recent times.

So you may want to look at this--I'm not certain where this update is needed
(if it is at all!) in your situation--at the WSUS server, or at the clients,
or both--but it is a small update and easily tested, I'd think.

If this does in fact change the situation, documentation in the form of logs
to Steve Dodson would be in order.