Windows update problems

[bj daniels]

I am trying to enable automatic windows updates on my domain. I set the
group policy (at the domain level) and if I go the properties of any
comptuer I can see that it is set to automatically apply updates daily.
However, it doesn't seem to be working. On my workstation for example, I
just went to windows update and saw 2 critical updates that have not been
loaded (one from yesterday and one from a week ago).

When I go to the windows update site my self - everything works fine. Could
it be a security issue. is it possible my computers cannot get to Windows
update through my ISA server if noone is logged on. Is it possible to set
an account they should use to install and get throught the ISA server?

thanks for any help you can provide

bj daniels
(e-mail address removed)

 

[purplehaz]

Just because it's listed on windows update does not mean it wasn't installed
by the auto-update. Windows update frequently shows updates that have
already been installed over and over and over. It's a bug. Check your
windows folder to see if the updates were installed or not. If they are
listed under the windows folder(you might have to have hidden folders set to
show) and they still show on windows update then try this:
Possible solutions:

1 - Delete or rename the folder c:\windows\system32\catroot2

Then do the updates again.



2 - Start/stop the auto-update service.

Start, control panel, administrative tools, services, right click automatic
updates, click stop. Right click again, click start.

 

[bj daniels]

I'll look into that - I was using Add/remove programs to check, and the
updates were not there.

bj

 

[purplehaz]

That's a good place to check except that some updates don't have uninstalls
and would not be listed in there. Best to look in windows folder. If they
are not there, then it may be the ISA server, but that's not my field of
expertise, I can't offer much help with that.

 

[bj daniels]

I looked - the updates are not there.

bj

Just because it's listed on windows update does not mean it wasn't installed
by the auto-update. Windows update frequently shows updates that have
already been installed over and over and over. It's a bug. Check your
windows folder to see if the updates were installed or not. If they are
listed under the windows folder(you might have to have hidden folders set to
show) and they still show on windows update then try this:
Possible solutions:

1 - Delete or rename the folder c:\windows\system32\catroot2

Then do the updates again.



2 - Start/stop the auto-update service.

Start, control panel, administrative tools, services, right click automatic
updates, click stop. Right click again, click start.

 

[markus bauer]

I am trying to enable automatic windows updates on my domain. I set the
group policy (at the domain level) and if I go the properties of any
comptuer I can see that it is set to automatically apply updates daily.
However, it doesn't seem to be working. On my workstation for example, I
just went to windows update and saw 2 critical updates that have not been
loaded (one from yesterday and one from a week ago).

I did not test it myself, but I read about two things you should
pay attention to:

1. You need to tell the auto update the time when it should work (eg. 11:00
am).
2. The client must be active at this time.

I´m not sure if this is your problem ?!

Regards

Markus

 

[WJ]

Daniels,

1. You need to configure AutoUpdate from the Control Panel/AutoUpdate
(Windows 2000) or Control Panel/System/Autoupdate (WinXP/2003). The default
time and day are set at 3:00AM every day if you do not specify. Auto means
no interactive message involved.

2. You will enable "Auto Update" service from the Windows/Service applet. I
set to "Automatic" so that at boot time, it is automatically turned on..

3. Leave your workstation/server on at all time.

4. Fire up IE every morning when you enter your office and click "Windows
Update" link.

5. Click "View Installation History" (I assume that your boxes are XP and or
W2K). This will show all the patches that you and or autoupdate have applied
so far.

As far as ISA, if you can manually download a given patch to your
server/workstation using system or admin account successfully, then auto
update should work just fine. Because, I think, AU uses port 80 to get to MS
site.

John Webb

 

[bj daniels]

have done all that stuff. The ISA does require username/password to get
through.

does anyone have experience with SUS (software update service) - I installed
the server and it seems to bring in all the updates, but everytime I try
installing the client - I get a version error (wrong version of windows) -
and I know I have the right version (I have tried on w2k (all sp levels),
wXP, w2003, etc). Anyone else have this problem??

bj