WD not updating from WSUS or Microsoft Update

[Guest]

Having a problem here. I recently installed Windows Defender into my test
lab and ran into a big problem. I use WSUS to update the computers. And
they are programed through Group Policy. Windows Defender will not report
status of needed updates to the WSUS server, while Windows Anti-spyware does.
The WSUS server has the Windows Defender updates available, but since it
does not see a computer having WD it does not send them out. Plus trying to
manually update from Microsoft Update fails too. Any help?

 

[Bill Sanderson MVP]

Windows Defender is designed to update from WSUS, natively--so I believe you
are missing an administrative setting on the WSUS server.

The best post I have in these groups giving these settings is this one, from
Cheong:
-------------------
If your windows update is pointing to your local WSUS, then you must include
the Windows Defender in synchronization setting.
In Products selection, please include Windows Defender
In Update classifications, please include Definition Updates

You must synchronize the server and approve the definition for clients to
get the latest definition.
----------------------

I've seen some posts with information in the public WSUS group:

http://www.microsoft.com/technet/co...crosoft.public.windows.server.update_services

but I don't have a specific to show you.

 

[Guest]

Well the problem got figured out. I was having problems even using Microsoft
Update, and it mentioned the TLS for IE advanced settings. I have never had
this on before, with any computer, and still don't have it on in most of the
computers. But as soon as I enabled TLS on that computer, WSUS udated,
saying that I needed the Windows Installer 3.1 and then it stated that I
needed 23 more updates. I am not sure why the TLS selection on that specific
computer is making a difference but it is.

 

[Bill Sanderson MVP]

Thanks. I don't know enough about browser protocols to know what's going on
here. It is possible that something related to this KB article:

http://support.microsoft.com/default.aspx?scid=kb;en-us;811834

is involved.

Yes--the updated installer and probably others of those 23 updates are
prerequisites for Defender updates to be received and to function properly.

Nice troubleshooting!

I should have made it clear that WU/AU functioning correctly is a basic
prerequisite to Defender updates.

--