WSUS and WD Definition Updates

[Guest]

I have WSUS configured to update WD and WD definition updates, in addition to
multiple other products. The install seems to download and run on the
machine, and shows this in the c:\windows\windowsupdate.log file. However,
as far as I can tell, WD does not actually update or at least it doesn't
display the updated information in Help/About. All other WSUS updates run on
the machine just fine.

I'm hoping to roll this out to ~550 machines very soon, so manual updates
will not be an option. Any help would be appreciated.

Thanks,

ajh

 

[ANONYMOUS]

I'm hoping to roll this out to ~550 machines very soon, so manual updates
will not be an option. Any help would be appreciated.

Personally, I wouldn't deploy a beta product on ~550 machines! Beta
products are just for testing purposes not for day to day use in a
business. There is no official support for beta products (except this
NG) and auto-update is still a matter of lottery!. You can see the
problems people are facing on this NG.

hth

 

[Bill Sanderson MVP]

I strongly agree with your other reply. Here's the step-by-step we have on
how to get WSUS configured properly, though:
---------------------
We've a new step by step, courtesy of Dave Mills from
microsoft.public.windows.server.update_services.


"Why don't I see any Windows Defender Updates in WSUS"

Definition updates for Windows Defender are available via WSUS but have to
be
added in the WSUS console before they become available (as does any product
or
classification that is added to the list made available by Microsoft).

First you must add the Product "Windows Update" to the list of Products and
"Definition Updates" to the list of classification. You do this in the WSUS
admin console/Options/Synchronisation Options.

Next you must arrange for any updates to be available for detections. By
default
the update metadata will be downloaded with the approval set to "Not
Approved"
so no clients will see the updates. You can change this default behaviour
on the
Options/Automatic Approval Options page. Simply add "Definition Updates" to
the
classifications list under "Approve for Detection". If you wish your can
also
approve for installation in the pane below. Please note though that update
metadata already downloaded will retain the status "Not Approved", only new
updates with be set to "Detect" or "Install" by these rules.

Finally if you want to change the approval of existing updates in the
metadata
you must do so manually in the WSUS admin console. To do this in the WSUS
Updates page create a "custom view", call it "Windows Defender" maybe and
select
the "Windows Defender" product. Chose the classifications you want although
there is little reason not to select all of them. Save the Custom View then
run
the report selecting "Any Approval" and "Any Time" and then click Apply to
list
the updates. You can then change the approval status as required for each
update.

Remember to decline superceded updates from time to time so that the
downloaded
content can be removed during normal housekeeping.

 

[Guest]

I feel that I have WSUS configured correctly. My issue is that the pattern
update says that it installs (per C:\WINDOWS\windowsupdate.log), but it
either doesn't truely install or it is installed but is being reported as a
prior version within WD.

REPORT EVENT: {9674E0E3-7D0B-4CE8-83C1-E0B673373935} 2006-05-22
06:06:14-0400 1 183 101 {A876323C-BD33-4937-931E-093ADBEE5D42} 100 0 AutomaticUpdates Success Content
Install Installation Successful: Windows successfully installed the following
update: Definition Update 1.14.1459.12 for BETA Windows Defender (KB915597)

 

[Bill Sanderson MVP]

Sorry for the misinterpretation. Indeed, that is a different issue, and
still being worked on by Microsoft. The workaround, for the present, is to
use the troubleshooting steps in this document:
http://support.microsoft.com/?kbid=918355

(of which, I suspect, the workaround steps in the linked KB 915105 are most
likely to be useful to you.) Microsoft is aware of this issue and we should
see results before long.

--