More WSUSOU and Windows 10 problems

[cdgoldin]

Re: WSUS Offline 10.8:

1) Why, when I select "Include Windows Defender definitions", does Updategenerator.exe ALWAYS tell me "Skipped download/validation of Windows Defender definition files (x86) due to 'same day' rule" (even though these definitions change at least daily, and I only run WSUSOU once a week?

2) On September 29, 2016, M$ released "Cumulative Update (KB3194496)", yet WSUSOU has NOT provided this update to date, even though the following files were available from the Windows Update Catalog on 10/05/2016:

windows10.0-kb3194496-x64_2cacef6b46462af81d957d5b883f32665aad56e.cab
windows10.0-kb3194496-x86_f5ab829a5d2fad9d62797df46ab6ea95cfd78e6.cab

3) On October 18, 2016, M$ released "Update for Windows 10 Version 1607 (kb3199209)", yet WSUSOU has not provided this update to date, even though the following files were available from the Windows Update Catalog on 10/19/2016:

windows10.0-kb3199209-x64_3af43438b2a10b119d096ed6f085ab037c2362e.msu
windows10.0-kb3199209-x86_b87026e30a070cdaa6e3ada32337a150c77900f.msu

4) On October 27, 2016, M$ released kb3197954 and kb3199986, yet WSUSOU did not provide them, even though the following files were available from the Windows Update Catalog on 10/28/2016:

windows10.0-kb3197954-x64_74819c01705e7a4d0f78cc0fbd7bed6240642b0.msu
windows10.0-kb3197954-x86_71319a1cc17dc9c90bf2f6fe17074535c6f715d.msu
windows10.0-kb3199986-x64_5d4678c30de2de2bd775073b061d0b3b2e5c3be.msu
windows10.0-kb3199986-x86_bf0ba5d3aba65e64d1c3bbe309e2ef67831c26f.msu

5) What's the point of running WSUSOU (which now takes over an hour) if we have to manually download the files we need regardless?

6) On 10/28/2106, WSUSOU DID provide the following TWO update files:

Directory of h:\WSUSoffline\client\w100\glb

10/25/2016 17:19 10,219,166 windows10.0-kb3201860-x86_2457117ae1e74d956d12dd84acc74332f5509d89.cab
10/25/2016 17:07 10,217,434 windows10.0-kb3201860-x86_95841b6110cd8c614d2ac421c1c986524d68b9f3.cab
10/25/2016 17:08 10,217,914 windows10.0-kb3201860-x86_d335830dcaf5c422b4f30dd441f4134a4a7d3ff0.cab

Directory of h:\WSUSoffline\client\w100-x64\glb

10/25/2016 17:18 21,116,937 windows10.0-kb3201860-x64_76b2785dfb80f7fc1101942cbcc61a1c90b9f5ee.cab
10/25/2016 17:20 21,122,074 windows10.0-kb3201860-x64_8ad6a8b2b935d037a07c650642e3824ca3293107.cab
10/25/2016 17:17 21,113,251 windows10.0-kb3201860-x64_8b6259b6743f19fa7a3a95aeef6c86570669fab0.cab
10/25/2016 17:09 21,118,565 windows10.0-kb3201860-x64_db91222b6b88a2a49fb15d89f63b7ef9ef642140.cab

Why are there three x86 and four x64 .cab files for this update, when the Windows Update Catalog only shows a single file (of approximately the same size as each of your seven cab files) for each operating system?

[harry]

Answer to 6):

KB3201860 [Security update for Adobe Flash Player]

1. x86
   
   • for Windows 10 (v1507)
   • for Windows 10 v1511
   • for Windows 10 v1607
2. x64
   
   • for Windows 10 (v1507)
   • for Windows 10 v1511
   • for Windows 10 v1607 / Windows Server 2016
   • for Windows Server 2016 Technical Preview 5

I don't know which update belongs to which version and UpdateGenarator.exe (DownloadUpdates.cmd) does not know also.

[hbuhrmester]

Question 1)

The message "Windows Defender definition files" doesn't look right for Windows 10.

The Windows Defender definition files (wddefs) are only meant for the original Windows Defender, which was built-in to Windows Vista and Windows 7.

Windows 8.0, 8.1 and 10 all use the same virus definition files as Microsoft Security Essentials (msse). Therefore, these definition files should be downloaded.

Did you select any other updates besides Windows 10?

Could you check, which of the following files are actually present, and what are their file modification dates?

Code: Select all

..\client\wddefs\x86-glb\mpas-fe.exe
..\client\msse\x86-glb\mpam-fe.exe
..\client\md\hashes-wddefs.txt
..\client\md\hashes-msse.txt

Questions 2 - 5)

WSUS Offline Update gets its information about security updates from the file "package.xml", which is extracted from the catalog file "wsusscn2.cab". None of the kb numbers kb3194496, kb3199209, kb3197954 or kb3199986 can be found in this file.

So the point is, that WSUS Offline Update is for downloading and installing security updates only. If you check against Windows Update Catalog, this site will always list more updates, possibly including telemetry spyware, which nobody wants anyway.

It was always this way: viewtopic.php?f=7&t=172

The user Cababs may provide some extended download lists here: viewtopic.php?f=2&t=4182

[cdgoldin]

Question 1)

The message "Windows Defender definition files" doesn't look right for Windows 10.

The Windows Defender definition files (wddefs) are only meant for the original Windows Defender, which was built-in to Windows Vista and Windows 7.

Windows 8.0, 8.1 and 10 all use the same virus definition files as Microsoft Security Essentials (msse). Therefore, these definition files should be downloaded.

Did you select any other updates besides Windows 10?

Could you check, which of the following files are actually present, and what are their file modification dates?

Code: Select all

..\client\wddefs\x86-glb\mpas-fe.exe
..\client\msse\x86-glb\mpam-fe.exe
..\client\md\hashes-wddefs.txt
..\client\md\hashes-msse.txt

OK, I was/am confused. I have selected Windows 7 (x86 and x64), Windows 10 (x86 and x64), C++ and .NET, Service Packs, MSSE, Defender, and Office 2007. The "skipped download ... due to 'same day' rule" message only appears (for MSSE) during the W10 and (for MSSE and Defender) during the Office download routines:

Wed 10/26/2016 10:04:46.57 - Info: Starting WSUS Offline Update download (v. 10.8) for w61 glb
Wed 10/26/2016 10:04:46.59 - Info: Option /includedotnet detected
Wed 10/26/2016 10:04:46.63 - Info: Option /includemsse detected
Wed 10/26/2016 10:04:46.67 - Info: Option /includewddefs detected
...
Wed 10/26/2016 10:11:50.19 - Info: Downloaded/validated Microsoft Security Essentials files
...
Wed 10/26/2016 10:12:16.90 - Info: Downloaded/validated Windows Defender definition files...

Wed 10/26/2016 10:18:19.13 - Info: Starting WSUS Offline Update download (v. 10.8) for w61-x64 glb
Wed 10/26/2016 10:18:19.15 - Info: Option /includedotnet detected
Wed 10/26/2016 10:18:19.18 - Info: Option /includemsse detected
Wed 10/26/2016 10:18:19.22 - Info: Option /includewddefs detected
...
Wed 10/26/2016 10:21:04.94 - Info: Downloaded/validated Microsoft Security Essentials files
...
Wed 10/26/2016 10:21:29.02 - Info: Downloaded/validated Windows Defender definition files
...
Wed 10/26/2016 10:27:57.29 - Info: Starting WSUS Offline Update download (v. 10.8) for w100 glb
Wed 10/26/2016 10:27:57.31 - Info: Option /includedotnet detected
Wed 10/26/2016 10:27:57.37 - Info: Option /includemsse detected
Wed 10/26/2016 10:27:57.41 - Info: Option /includewddefs detected
...
Wed 10/26/2016 10:29:09.53 - Info: Skipped download/validation of Microsoft Security Essentials files (x86) due to 'same day' rule
...
Wed 10/26/2016 10:34:34.51 - Info: Starting WSUS Offline Update download (v. 10.8) for w100-x64 glb
Wed 10/26/2016 10:34:34.53 - Info: Option /includedotnet detected
Wed 10/26/2016 10:34:34.58 - Info: Option /includemsse detected
Wed 10/26/2016 10:34:34.63 - Info: Option /includewddefs detected
...
Wed 10/26/2016 10:35:31.91 - Info: Skipped download/validation of Microsoft Security Essentials files (x64) due to 'same day' rule
...
Wed 10/26/2016 10:49:32.70 - Info: Starting WSUS Offline Update download (v. 10.8) for ofc glb
Wed 10/26/2016 10:49:32.73 - Info: Option /includedotnet detected
Wed 10/26/2016 10:49:32.79 - Info: Option /includemsse detected
Wed 10/26/2016 10:49:32.86 - Info: Option /includewddefs detected
...
Wed 10/26/2016 10:50:30.00 - Info: Skipped download/validation of Microsoft Security Essentials files (x86) due to 'same day' rule
...
Wed 10/26/2016 10:50:40.03 - Info: Skipped download/validation of Windows Defender definition files (x86) due to 'same day' rule
...
Wed 10/26/2016 11:01:56.39 - Info: Starting WSUS Offline Update download (v. 10.8) for o2k7 enu
Wed 10/26/2016 11:01:56.42 - Info: Option /includedotnet detected
Wed 10/26/2016 11:01:56.49 - Info: Option /includemsse detected
Wed 10/26/2016 11:01:56.65 - Info: Option /includewddefs detected
...
Wed 10/26/2016 11:02:52.78 - Info: Skipped download/validation of Microsoft Security Essentials files (x86) due to 'same day' rule
...
Wed 10/26/2016 11:03:02.70 - Info: Skipped download/validation of Windows Defender definition files (x86) due to 'same day' rule

I didn't realize that "the Windows Defender definition files (wddefs) are only meant for the original Windows Defender..." or that "Windows ... 10 [uses] the same virus definition files as Microsoft Security Essentials (msse). Therefore, these definition files should be downloaded."

However, I have also selected "Microsoft Security Essentials", and the W10 "defender" definitions do not appear to be updated by WSUSOU. Perhaps they have simply been superseded by more recent files by the time I finish downloading with WSUSOU and try to update my various systems?

I understand now that the logs for the W100 and W100-x64 download show "Skipped .... due to 'same day' rule" for the MSSE files because they were already downloaded during the W61 procedures.

All four files referenced are present. These are their modification dates (which corresponds to the download date and time):

..\client\wddefs\x86-glb\mpas-fe.exe = 10/28/2016 09:04:48
..\client\msse\x86-glb\mpam-fe.exe = 10/28/2016 09:05:00
..\client\md\hashes-wddefs.txt = 10/28/2016 10:53:33
..\client\md\hashes-msse.txt = 10/28/2016 10:53:11

Questions 2 - 5)

WSUS Offline Update gets its information about security updates from the file "package.xml", which is extracted from the catalog file "wsusscn2.cab". None of the kb numbers kb3194496, kb3199209, kb3197954 or kb3199986 can be found in this file.

So the point is, that WSUS Offline Update is for downloading and installing security updates only. If you check against Windows Update Catalog, this site will always list more updates, possibly including telemetry spyware, which nobody wants anyway.

It was always this way: viewtopic.php?f=7&t=172

The user Cababs may provide some extended download lists here: viewtopic.php?f=2&t=4182

OK. I can continue to manually download anything WSUSOU misses (that I consider worth having), as I don't understand the procedure for adding download links.

Thank you for the information.

[hbuhrmester]

Now the download log looks okay to me: There are downloads for both Microsoft Security Essentials and for Windows Defender definition files, for both x86 and x64. These are four different downloads, and they all succeeded.

Then the same downloads should not be tried again on the same day, and so they are all skipped for Windows 10 and Office 2007.

The old Windows Defender definition files can't be used for Windows 10. If you select "Windows Defender definition files" in combination with Windows 10, the download script will treat is as if you selected "Microsoft Security Essentials files" instead.

If you select both "Windows Defender definition files" and "Microsoft Security Essentials files" in combination with Windows 10, you will only get "Microsoft Security Essentials files". This is, what you can see for w100 and w100-x64.

So, this is confusing, but I think this is how it is supposed to work.