"install important updates" at Windows XP SP3 shutdown - huh?

[foobar5]

I have XP SP3.

When I went to shut my computer down tonight, instead of the normal
standby, turn off, restart popup, I had that, but there was a Windows
security shield superimposed on the turn off icon, and a message at
the bottom of the popup saying "Click Turn Off to install important
updates and turn off your computer. Click here to turn off without
installing updates."

This scares and weirds me out.

I have Windows set up to download updates automatically, but only
install after I review/approve the updates. But the little yellow
Updates shield isn't showing in my system tray area.

I went to Windows update and the last activity was September 9, when
these updates were installed:

* Windows Malicious Software Removal Tool - September 2008 (KB890830)
* Windows XP Security Update for Windows XP (KB938464)
* Windows XP Security Update for Windows XP (KB954154)

There was no notation for anything being pushed to my computer since.

So what's being pushed to my machine and is this normal? My daily AVG
scan detected no viruses today. I opted to shut my computer down
without installing the unspecified updates, but upon restarting, I'm
still getting that alert when I try to shut down.

My questions:

1. What's Windows asking me to install?

2. Why am I only being told that it wants to install something,
without it telling me specifically what?

3. How do I review the proffered software and either approve it for
installation or permanently reject it?

4. Anything else I should be aware of or looking for here?

 

[Harry Johnston [MVP]]

When I went to shut my computer down tonight, instead of the normal
standby, turn off, restart popup, I had that, but there was a Windows
security shield superimposed on the turn off icon, and a message at
the bottom of the popup saying "Click Turn Off to install important
updates and turn off your computer. Click here to turn off without
installing updates."

Start by looking in WindowsUpdate.log (usually found in c:\windows). If you
have trouble interpreting it, post the last hundred lines or so here.

Harry.

 

[larry_lavaughn]

I am having the same issue. I know that the update trying to install is the
..NET SP1 update, which had been installed months ago, but had been subverted
by an installation of another application using it's own version of this same
program. The application in question for me was the Comrade IM used in
GameSpy Arcade. I don't know how to get around it either.

 

[Gary Brandenburg]

The log on Windows Update is showing the "installed" updates(or attempts) & not the
ones waiting to be installed.
Today is what's known as *Patch Tuesday* which is always on the 2nd Tuesday of the
month,so the updates at shutdown,are legit. Apparently they've already been
downloaded & are waiting to be installed,on your machine.
If you're not seeing the update shield in the system tray,you can go to the Windows
Update site & get them that way.

~Gary

 

[foobar5]

Start by looking in WindowsUpdate.log (usually found in c:\windows). If you
have trouble interpreting it, post the last hundred lines or so here.

Harry.

There are around 1300 pieces of activity in my
c:\windows\windowsupdate.log for 2008-10-14. There are already 51
activities for 2008-10-15 and the day is young!

http://www.megaupload.com/?d=1ME2YPEQ has the file as it currently
exists.

FWIW, my c:\windows directory has 16 files from 2008-09-09 (September
patch Tuesday), one from 2008-09-23, and the following from
2008-10-14:

* KB956390-IE7.log
* setupapi.log
* SchedLgU.Txt
* bootstat.dat
* wiaservc.log
* wiadebug.log
* 0.log (NOTE: zero-length file)

And there's the WindowsUpldate.log, which was time stamped 04:51 this
morning, from when I got on. As I said, 51 entries in it.

A cursory scan of the logs shows nothing too weird. I'm guessing that
KB956390 related to IE7 is the only thing it's trying to install.

Still feel funny about how Windows is just pushing an update or
updates on me without telling me what they are.

 

[foobar5]

The log on Windows Update is showing the "installed" updates(or attempts) & not the
ones waiting to be installed.
Today is what's known as *Patch Tuesday* which is always on the 2nd Tuesday of the
month,so the updates at shutdown,are legit. Apparently they've already been
downloaded & are waiting to be installed,on your machine.
If you're not seeing the update shield in the system tray,you can go to the Windows
Update site & get them that way.

~Gary

I have a longer response upthread, with a link to
http://www.megaupload.com/?d=1ME2YPEQ (my WindowsUpdate log, for
anyone wishing to peruse it), plus a listing of the content of my
c:\Windows folder dated 10-14, the date in question.

When I try to retrieve Windows updates from Windows Update, I get the
Software Upgrade for Some Windows Components Required screen. This
smacks of ignorance and superstition and worse, but years ago,
installing one of the components on my computer caused some
significant problems. Probably a onetime fluke, but I've been a "if
it ain't broke, don't fix it" guy ever since.

Windows update also tells me, correctly, that "Your computer is set to
receive notifications when new updates are available. " and then I
pick which updates to install and when. I can't remember the last
time I declined an update, but I like having that smidge of control.

I'm mostly looking for other people who've gotten this situation I
described in my original post (people who got it on 10-14-2008), and
what their experiences have been. Not to mention why Windows is
trying to sneak an update by me (apparently).

 

[foobar5]

There are around 1300 pieces of activity in my
c:\windows\windowsupdate.log for 2008-10-14. There are already 51
activities for 2008-10-15 and the day is young!

http://www.megaupload.com/?d=1ME2YPEQ has the file as it currently
exists.

FWIW, my c:\windows directory has 16 files from 2008-09-09 (September
patch Tuesday), one from 2008-09-23, and the following from
2008-10-14:

* KB956390-IE7.log
* setupapi.log
* SchedLgU.Txt
* bootstat.dat
* wiaservc.log
* wiadebug.log
* 0.log (NOTE: zero-length file)

And there's the WindowsUpldate.log, which was time stamped 04:51 this
morning, from when I got on. As I said, 51 entries in it.

A cursory scan of the logs shows nothing too weird. I'm guessing that
KB956390 related to IE7 is the only thing it's trying to install.

Still feel funny about how Windows is just pushing an update or
updates on me without telling me what they are.

Okay, more weirdness.

I downloaded IE7-WindowsXP-KB956390-x86-ENU.exe directly from MS.
Installed that and restarted computer and no problems.

BUT... it doesn't show up in my update history when I run Windows
Update, and I'm still getting the "Click Turn Off to install important
updates and turn off your computer. Click here to turn off without
installing updates." message when I try to shut down or restart.

Perhaps these lines from my WindowsUpdate.log might be of interest:

2008-10-15 06:00:17:359 988 be4 Agent * Added
update {3DE030BB-2666-44F6-9B15-E02FE518833F}.100 to search result
2008-10-15 06:00:17:359 988 be4 Agent * Added
update {424B1C8F-742A-4614-8012-1BB25B527706}.100 to search result
2008-10-15 06:00:17:359 988 be4 Agent * Added
update {650F9FB5-032E-41BB-B31B-4210AC074F8B}.102 to search result
2008-10-15 06:00:17:359 988 be4 Agent * Added
update {25EE37D4-1EB2-4546-843F-AD0AC80BC14E}.104 to search result
2008-10-15 06:00:17:359 988 be4 Agent * Added
update {33A7EDF1-2350-4102-8082-9540EFF65704}.102 to search result
2008-10-15 06:00:17:359 988 be4 Agent * Added
update {8FD536A6-5577-432D-8031-3369530913DC}.102 to search result
2008-10-15 06:00:17:359 988 be4 Agent * Added
update {336530D3-9AE4-42DF-9606-4FB35D46CEFC}.102 to search result
2008-10-15 06:00:17:359 988 be4 Agent * Found 7
updates and 42 categories in search; evaluated appl. rules of 278 out
of 661 deployed entities

Still not seeing yellow Windows Update shield in my system tray.

 

[PA Bear [MS MVP]]

Since 09 Sept-08, have you (a) installed Windows Live OneCare or (b) changed
your default update source from Windows Update to Microsoft Update?

Related:

1.
http://blogs.technet.com/mu/archive/2008/10/02/windows-update-and-automatic-reboots.aspx

2. http://blogs.technet.com/mu/archive/2008/07/18/windows-search-4.aspx

Free unlimited installation and compatibility support is available for
Windows XP, but only for Service Pack 3 (SP3), until 14 Apr-09. Chat and
e-mail support is available only in the United States and Canada. Go to
http://support.microsoft.com/oas/default.aspx?gprid=1173 | select "Windows
XP" then select "Windows XP Service Pack 3"

 

[MowGreen [MVP]]

I downloaded IE7-WindowsXP-KB956390-x86-ENU.exe directly from MS.
Updates installed *manually* will only show in the System Event log and
be listed in ARP. [Add/Remove Programs]

I can't access the log you posted at megaupload.com.
Windows Update needs to update the Windows Update Agent from time to
time. Perhaps that's what's occurring:
http://blogs.technet.com/mu/archive/2008/07/03/upcoming-update-to-windows-update.aspx

The WU.log shows which V. of the Windows Update Agent that is installed:

2008-10-15 11:50:22:834 3712 a5c Misc =========== Logging initialized
(build: 7.2.6001.784, tz: -0700) ===========

If the build: is a lower Version than what is required, it *should*
attempt to update it. This updating can fail if security software does
not allow it. Perhaps it's attempting to install on Shutdown as said sec
software is inhibiting it's installation whilst it's still running ?


2008-10-14 11:52:22:794 3116 c24 Setup *********** Setup: Checking
whether self-update is required ***********
2008-10-14 11:52:22:794 3116 c24 Setup * Inf file:
D:\WINDOWS\SoftwareDistribution\WebSetup\wsus3setup.inf
2008-10-14 11:52:22:884 3116 c24 Setup Update NOT required for
D:\WINDOWS\system32\cdm.dll: target version = 7.2.6001.784, required
version = 7.2.6001.784
2008-10-14 11:52:22:884 3116 c24 Setup Update NOT required for
D:\WINDOWS\system32\wuapi.dll: target version = 7.2.6001.784, required
version = 7.2.6001.784
2008-10-14 11:52:22:894 3116 c24 Setup Update NOT required for
D:\WINDOWS\system32\wuapi.dll.mui: target version = 7.2.6001.784,
required version = 7.2.6001.784
2008-10-14 11:52:22:904 3116 c24 Setup Update NOT required for
D:\WINDOWS\system32\wuauclt.exe: target version = 7.2.6001.784, required
version = 7.2.6001.784
2008-10-14 11:52:22:904 3116 c24 Setup Update NOT required for
D:\WINDOWS\system32\wuaucpl.cpl: target version = 7.2.6001.784, required
version = 7.2.6001.784
2008-10-14 11:52:22:914 3116 c24 Setup Update NOT required for
D:\WINDOWS\system32\wuaucpl.cpl.mui: target version = 7.2.6001.784,
required version = 7.2.6001.784
2008-10-14 11:52:22:914 3116 c24 Setup Update NOT required for
D:\WINDOWS\system32\wuaueng.dll: target version = 7.2.6001.784, required
version = 7.2.6001.784
2008-10-14 11:52:22:924 3116 c24 Setup Update NOT required for
D:\WINDOWS\system32\wuaueng.dll.mui: target version = 7.2.6001.784,
required version = 7.2.6001.784
2008-10-14 11:52:22:924 3116 c24 Setup Update NOT required for
D:\WINDOWS\system32\wucltui.dll: target version = 7.2.6001.784, required
version = 7.2.6001.784
2008-10-14 11:52:22:934 3116 c24 Setup Update NOT required for
D:\WINDOWS\system32\wucltui.dll.mui: target version = 7.2.6001.784,
required version = 7.2.6001.784
2008-10-14 11:52:22:944 3116 c24 Setup Update NOT required for
D:\WINDOWS\system32\wups.dll: target version = 7.2.6001.784, required
version = 7.2.6001.784
2008-10-14 11:52:22:954 3116 c24 Setup Update NOT required for
D:\WINDOWS\system32\wups2.dll: target version = 7.2.6001.784, required
version = 7.2.6001.784

If you check Automatic Updates in the Control Panel, you'll see this:

(Turning on Automatic Updates may automatically update Windows Update
software first, before any other updates.)

If you don't Trust Windows Update to update the WUA, the only recourse
you have is to turn off Automatic Updates.


MowGreen [MVP 2003-2009]
===============
*-343-* FDNY
Never Forgotten
===============

 

[foobar5]

Updates installed *manually* will only show in the System Event log and
be listed in ARP. [Add/Remove Programs]

I can't access the log you posted at megaupload.com.
Windows Update needs to update the Windows Update Agent from time to
time. Perhaps that's what's occurring:
http://blogs.technet.com/mu/archive/2008/07/03/upcoming-update-to-windows-update.aspx

The WU.log shows which V. of the Windows Update Agent that is installed:

2008-10-15 11:50:22:834 3712 a5c Misc =========== Logging initialized
(build: 7.2.6001.784, tz: -0700) ===========

(sorry, snipped quite a bit from your post)

An edited version of my Windows Update log (activity in the past
several days) can be limited downloaded (10 downloads, expiration on
10/18) from
http://www.filemail.com/dl.aspx[ZZZZZZZZZZZZZZZZZ]?id=MKKLBFYRMCANPEI
(cut the brackets and the z's to make the URL work).

My WUA build is the same as yours, 7.2.6001.784, according to my log.

How do I find out what updates Windows is trying to install? Since
they're evidently on my computer somewhere, where can I find them?

 

[foobar5]

Since 09 Sept-08, have you (a) installed Windows Live OneCare or (b) changed
your default update source from Windows Update to Microsoft Update?

No and no.

 

[foobar5]

Okay, I have another XP SP3 computer in my house. This one has full
automatic updates set up on it (Windows downloads and installs updates
automatically, with no user intervention or vetting).

I checked the Windows Update history on that computer, and seven
updates were installed today; none of them worrisome - just really the
usual security updates.

So I manned up and authorized my computer to install the updates and
shut down. It went through the normal Windows shutdown sequence, but
then with the sky blue screen still there, I saw "Installing update 1
of 6, 2 of 6, etc." Then the computer shut down.

I restarted and now the shutdown dialog doesn't have the nag to
install updates.

According to Windows Update, the following installed on my computer:

* Windows XP Security Update for Windows XP (KB956803)
* Windows XP Cumulative Security Update for ActiveX Killbits for for
Windows XP (KB956391)
* Windows XP Security Update for Windows XP (KB957095)
* Windows XP Security Update for Windows XP (KB954211)
* Windows XP Security Update for Windows XP (KB956841)
* Windows XP Windows Malicious Software Removal Tool - October 2008
(KB890830)

The only difference between these six and the seven on the other
computer was KB956390, an IE7-related update that I'd manually
installed 12 hours earlier.

So I guess I'm good for four more weeks.

But still, why did Windows all of a sudden shield me from normal
details of these updates? As I've said, there was no yellow "updates
are ready" shield in my notification area, and the nag on the shutdown
dialog supplied no details of what it was trying to do.

BTW MowGreen, even after these updates, my WUA build remains
7.2.6001.784

I'm going to try changing my Windows update setting (from "Download
updates for me but let me choose when to install them" to "Notify me
but don't automatically download or install them") and see if that
gets Windows behaving as I'd like. But I'll probably have to wait
four weeks to see.

 

[PA Bear [MS MVP]]

[Please stick to one (1) thread in one (1) newsgroup. Thanks.]

 

[Robert Aldwinckle]

I have XP SP3.

When I went to shut my computer down tonight, instead of the normal
standby, turn off, restart popup, I had that, but there was a Windows
security shield superimposed on the turn off icon, and a message at
the bottom of the popup saying "Click Turn Off to install important
updates and turn off your computer. Click here to turn off without
installing updates."

I wasn't aware that there may be a "click here to turn off without
installing" option. Last time I saw this I could reboot using the Restart
button and then achieve that effect by waiting for the boot prompt to show
and then power down manually before the restart went any further...

OIC. It's a link in the dialog, not another button. Thanks.

Another potential option I think would be to stop the wuauserv service
before shutting down. Perhaps that's what that link in the dialog now does? <eg>

Yes! Stopping the wuauserv service prevents those additions to the
Shutdown dialog. Thank you for making me find this!

That also stopped the wuauclt.exe which was running.
I wonder if restarting wuauserv again will restart that
and make the tool reappear in the SysTray?...

That might be the trick. It was there and then it disappeared.
My Always Show is now marking: Downloading updates: 0%
I don't think that is what it was showing when I marked it.

Ok. So now I'll try turning off the Notification area customization
and making my Taskbar not Auto-Hide and then restart wuauserv...
Nope. This time wuauclt.exe came and went without even flashing
in the Notification area. (Almost as if it knew I was ready to play
whackamole with it. <eg>)

One last try. wuauclt.exe has come and gone again.
So, instead of restarting wuauserv this time I'll try Run...

wuauclt.exe /detectnow

Still ready to pounce on the Taskbar if the icon flashes again... ; )

No luck. Wish I knew what factor(s) made it flash that first time
I restarted wuauserv.

I suppose I could also try restarting explorer.exe, perhaps even seeing
if Run As... Administrator is available... ; }

No change with a new explorer. Thwarted by Security/Obscurity
to make it Run As... Administrator.

This scares and weirds me out.

Have fun with it. It's all a game... ; )

I have Windows set up to download updates automatically, but only
install after I review/approve the updates. But the little yellow
Updates shield isn't showing in my system tray area.

I went to Windows update and the last activity was September 9, when
these updates were installed:

* Windows Malicious Software Removal Tool - September 2008 (KB890830)
* Windows XP Security Update for Windows XP (KB938464)
* Windows XP Security Update for Windows XP (KB954154)

There was no notation for anything being pushed to my computer since.

A better thing to look at is the ReportingEvents.log
(in %windir%\SoftwareDistribution)

So what's being pushed to my machine and is this normal?

Normal? Apparently.

My daily AVG
scan detected no viruses today. I opted to shut my computer down
without installing the unspecified updates, but upon restarting, I'm
still getting that alert when I try to shut down.

My questions:

1. What's Windows asking me to install?

All the things it has completely downloaded
that you haven't specifically blocked from being installed.
So, since you haven't had an AU icon to use, that probably

2. Why am I only being told that it wants to install something,
without it telling me specifically what?

Look in ReportingEvents.log. Alternatively, it appears you could find
the same information using the Event Viewer. E.g. open the System log
and filter on Source: Windows Update Agent.

3. How do I review the proffered software and either approve it for
installation or permanently reject it?

You have to get the AU icon back and doubleclick it.
Otherwise you have to use the WU or MU web site's
Custom button.

4. Anything else I should be aware of or looking for here?

Try using bitsadmin (in a cmd window) to see if a download
has been suspended.

http://www.microsoft.com/communitie...3ce428-ab52-4110-9f31-76c093f918a4&sloc=en-us

(Alt-7 search for
bitsadmin suspend
)


However, I suspect that another reason for the tool missing from
the "notification area" is that some of the messages about updates
which haven't yet been installed are including text like this:

<extract>
Description:
Installation Ready: The following updates are downloaded and ready for
installation. To install the updates, an administrator should log on to this
computer and Windows will prompt with further instructions:
</extract>

One thing that I try to do, not always successfully, is make sure that
the AU icon is marked Always Show. However, that is really just to make
it more usable whenever it is there to use. Having now seen that there
is an option in the shut down dialog to avoid all installs I suspect that
what we are seeing was designed, with the removal of the icon from the
SysTray deliberate.


HTH

Robert Aldwinckle
---

 

[MowGreen [MVP]]

All successful updates done via Automatic Updates are recorded in the
ReportingEvents.log located in
WINDOWS\SoftwareDistribution

Updates to Root Certificates are done via AU if you chosen that option
in Control Panel > Add/Remove Programs > Add/Remove Windows Components >
See if Update Root Certificates is checked. If it is, entries for Root
Cert updates show in the Application Event log, the Source being
crypt32.

IF the WUA was updated, then the WU.log shows that. Since I do that
manually, can't say if it will show in the System Event log, but if it
does, the Source would be WindowsUpdateAgent.

MowGreen [MVP 2003-2009]
===============
*-343-* FDNY
Never Forgotten
===============

I downloaded IE7-WindowsXP-KB956390-x86-ENU.exe directly from MS.
Installed that and restarted computer and no problems.

BUT... it doesn't show up in my update history when I run Windows
Update,

Updates installed *manually* will only show in the System Event log and
be listed in ARP. [Add/Remove Programs]

I can't access the log you posted at megaupload.com.
Windows Update needs to update the Windows Update Agent from time to
time. Perhaps that's what's occurring:
http://blogs.technet.com/mu/archive/2008/07/03/upcoming-update-to-windows-update.aspx

The WU.log shows which V. of the Windows Update Agent that is installed:

2008-10-15 11:50:22:834 3712 a5c Misc =========== Logging initialized
(build: 7.2.6001.784, tz: -0700) ===========

(sorry, snipped quite a bit from your post)

An edited version of my Windows Update log (activity in the past
several days) can be limited downloaded (10 downloads, expiration on
10/18) from
http://www.filemail.com/dl.aspx[ZZZZZZZZZZZZZZZZZ]?id=MKKLBFYRMCANPEI
(cut the brackets and the z's to make the URL work).

My WUA build is the same as yours, 7.2.6001.784, according to my log.

How do I find out what updates Windows is trying to install? Since
they're evidently on my computer somewhere, where can I find them?

 

[Guest]

All successful updates done via Automatic Updates are recorded in the
ReportingEvents.log located in
WINDOWS\SoftwareDistribution

Updates to Root Certificates are done via AU if you chosen that option
in Control Panel > Add/Remove Programs > Add/Remove Windows Components >
See if Update Root Certificates is checked. If it is, entries for Root
Cert updates show in the Application Event log, the Source being
crypt32.

IF the WUA was updated, then the WU.log shows that. Since I do that
manually, can't say if it will show in the System Event log, but if it
does, the Source would be WindowsUpdateAgent.

MowGreen [MVP 2003-2009]
===============
*-343-* FDNY
Never Forgotten
===============

I'm not sure what the above means (my bad, my dumb), sorry.

Let me ask you - where would I find the updates that have been
downloaded to my computer? Not just the location, but the names of
the updates (KBxxxxx for example, or SP3)?

 

[MowGreen [MVP]]

All updates that are downloaded via Automatic Updates appear in the
WindowsUpdate.log, located in the WINDOWS directory. The most recent
entries are at the bottom of the log.

How to read the Windowsupdate.log file
http://support.microsoft.com/kb/902093

From my previous post below, what don't you understand ?
I'd be happy to explain whatever it is that puzzles you.

MowGreen [MVP 2003-2009]
===============
*-343-* FDNY
Never Forgotten
===============

All successful updates done via Automatic Updates are recorded in the
ReportingEvents.log located in
WINDOWS\SoftwareDistribution

Updates to Root Certificates are done via AU if you chosen that option
in Control Panel > Add/Remove Programs > Add/Remove Windows Components >
See if Update Root Certificates is checked. If it is, entries for Root
Cert updates show in the Application Event log, the Source being
crypt32.

IF the WUA was updated, then the WU.log shows that. Since I do that
manually, can't say if it will show in the System Event log, but if it
does, the Source would be WindowsUpdateAgent.

MowGreen [MVP 2003-2009]
===============
*-343-* FDNY
Never Forgotten
===============

I'm not sure what the above means (my bad, my dumb), sorry.

Let me ask you - where would I find the updates that have been
downloaded to my computer? Not just the location, but the names of
the updates (KBxxxxx for example, or SP3)?

 

[Guest]

All updates that are downloaded via Automatic Updates appear in the
WindowsUpdate.log, located in the WINDOWS directory. The most recent
entries are at the bottom of the log.

How to read the Windowsupdate.log file
http://support.microsoft.com/kb/902093

From my previous post below, what don't you understand ?
I'd be happy to explain whatever it is that puzzles you.

MowGreen [MVP 2003-2009]
===============
*-343-* FDNY
Never Forgotten
===============

What I'm stuck on from your earlier post was stuff like "Updates to
Root Certificates" - Not sure what a RC is or what the purpose of one
is.

What I'm curious about now (I plead guilty to making my questions
slightly moving targets):

- When updates are downloaded to my computer, where are they kept as
they wait install?
- Once I see these updates, how do I look at the file/folder names and
research what they are? I assume they're not named with a KB name or
something user-friendly.
- If I'm not getting the yellow shield that normally gives me control
over which updates to install and when, how can I delete the updates I
don't want, without hosing the computer?
- I had one update once that would go through the motions of
installing, but it repeatedly failed. How can I tell Windows to
download a brand new copy of this update, and log it through the
Windows Update history in IE?

Does http://blogs.techrepublic.com.com/window-on-windows/?p=779 seem
useful in terms of my regaining control over my Windows updates?
Again, I had it configured to notify me of updates and let me pick
which to install, but Windows this month shielded me from seeing what
it was trying to do. I followed the steps in that link, but I assume
I'll have to wait until November 11 to see if they work.

 

[MowGreen [MVP]]

http://support.microsoft.com/kb/931125

The table that is included in this article lists the third-party commercial certification authorities
(CAs) that are trusted by Microsoft. As a Windows user, you can use the listed CAs for secure
e-commerce.
CAs validate the identity and entitlement of an applicant. In this process, the applicant is issued a
digital certificate. You can use digital certificates to prove the identity of a remote person or a
remote resource.

Root Certs are used in the updating process to validate that the updates
are indeed, from Microsoft. The updates are signed digitally with a Root
Cert.

Adding additional root certificates to your computer enables you to use Extended Validation (EV)
certificates in Internet Explorer 7, a greater range of security enhanced Web browsing, encrypted
e-mail, and security enhanced code delivery

Answers to the other questions inline:

All updates that are downloaded via Automatic Updates appear in the
WindowsUpdate.log, located in the WINDOWS directory. The most recent
entries are at the bottom of the log.

How to read the Windowsupdate.log file
http://support.microsoft.com/kb/902093

From my previous post below, what don't you understand ?
I'd be happy to explain whatever it is that puzzles you.

MowGreen [MVP 2003-2009]
===============
*-343-* FDNY
Never Forgotten
===============

What I'm stuck on from your earlier post was stuff like "Updates to
Root Certificates" - Not sure what a RC is or what the purpose of one
is.

What I'm curious about now (I plead guilty to making my questions
slightly moving targets):

- When updates are downloaded to my computer, where are they kept as
they wait install?
WINDOWS\SoftwareDistribution\Download

- Once I see these updates, how do I look at the file/folder names and
research what they are? I assume they're not named with a KB name or
something user-friendly.

The subfolders in Download are randomly named. You can open them to see
what the KBxxxxxx.cat is to determine the KB of the update.
If you've set Automatic Updates to " Notify me but don't ... " or, "
Download updates for me but ... ", when the yellow shield appears in the
Notification Area you can click on it and then see the KB number of
which updates are being offered. There is also a link to the KB article
available.

- If I'm not getting the yellow shield that normally gives me control
over which updates to install and when, how can I delete the updates I
don't want, without hosing the computer?

Answered already in your follow up post.
http://blogs.techrepublic.com.com/window-on-windows/?p=779

- I had one update once that would go through the motions of
installing, but it repeatedly failed. How can I tell Windows to
download a brand new copy of this update, and log it through the
Windows Update history in IE?

Stop the associcated Services, as shown in the URL above.

Does http://blogs.techrepublic.com.com/window-on-windows/?p=779 seem
useful in terms of my regaining control over my Windows updates?
Again, I had it configured to notify me of updates and let me pick
which to install, but Windows this month shielded me from seeing what
it was trying to do. I followed the steps in that link, but I assume
I'll have to wait until November 11 to see if they work.

I repeat, all Automatic Updating is shown in the WU.log, even the
updating of the software components that are required to update the system..
There is no need to rename/delete the entire Software Distribution
folder to remove unwanted updates. They are located in the Download folder.

MowGreen [MVP 2003-2009]
===============
*-343-* FDNY
Never Forgotten
===============

 

[Guest]

I repeat, all Automatic Updating is shown in the WU.log, even the
updating of the software components that are required to update the system..
There is no need to rename/delete the entire Software Distribution
folder to remove unwanted updates. They are located in the Download folder.

Okay, this question is embarrassingly 101, but I did follow the
instructions in the techrepublic blog linked to above (basically,
after stopping three associated services, renaming the Software
Distribution folders in \windows and in \windows\system32, and
renaming the \windows\system32\catroot2 folder, then restarting the
services).

And now when I try to review my update history via Windows Update in
IE, this message appears: "You have not yet installed updates from
this website or by turning on automatic updating on your computer. To
select and install updates now, go to our Home page. "

Is that because WU update history sees nothing yet in the
newly-created Software Distribution and/or catroot2 folders?

I assume that once I start installing updates, they'll show up, but
instead of having a history going back to the beginning of my XP
installation, I'll have a history going back to the renaming of the
folders. Correct?