WSUS Offline Update 11.4 download issue

WSUS Offline Update 11.4 download issue

Postby Mutha96 » 18.07.2018, 10:23

there is situation, the affected KB4338818 has been downloaded via WSUS Offline Update, it means that the check box of "Use security only updates instead of quality rollups" is checked, but the rollup update has been downloaded too (KB4338818 ). My temporary solution was exclude mentioned KB...
Mutha96
 
Posts: 2
Joined: 18.07.2018, 10:08

Re: WSUS Offline Update 11.4 download issue

Postby boco » 18.07.2018, 12:49

The checkbox only sets the installation preference, download is unaffected.
Microsoft update catalog: http://catalog.update.microsoft.com/v7/site/
Windows Install media download: https://support.microsoft.com/en-us/help/15088/windows-create-installation-media
boco
 
Posts: 2007
Joined: 24.11.2009, 18:00
Location: Germany

Re: WSUS Offline Update 11.4 download issue

Postby Mutha96 » 18.07.2018, 15:42

Ok, for example: I will open the UpdateGenerator.exe and check the check boxes what I need includ mentioned check box, quallity rollups is downloaded with others seciruty updates, then I will start offline update on client server, the rollup update is corectlly installed with other KBs (this rollup KB delete all my IP4 settings - server is not reachable--->thank you good job :) )
Mutha96
 
Posts: 2
Joined: 18.07.2018, 10:08

Re: WSUS Offline Update 11.4 download issue

Postby boco » 19.07.2018, 01:09

If the security-only checkbox is enabled, WOU modifies the UpdateInstaller.ini and sets the switch for installing only the security packages. While the Rollup is downloaded, it should never be installed with the switch present in the INI.

However, the switch only works correctly if the WOU admin updates the online static lists to recognize and hide the full Rollups*. This month's update was delayed due to the admin being sick. The updated lists are now online and will be applied to your WOU if you do a new download run.


*Thank Microsoft for their decision that full Rollups supersede all security-only packages. An automatic exclusion isn't possible, therefore.
Microsoft update catalog: http://catalog.update.microsoft.com/v7/site/
Windows Install media download: https://support.microsoft.com/en-us/help/15088/windows-create-installation-media
boco
 
Posts: 2007
Joined: 24.11.2009, 18:00
Location: Germany

Re: WSUS Offline Update 11.4 download issue

Postby hbuhrmester » 19.07.2018, 03:19

boco wrote:*Thank Microsoft for their decision that full Rollups supersede all security-only packages. An automatic exclusion isn't possible, therefore.


This is old news. It was changed by Microsoft in December 2016:

More on Windows 7 and Windows 8.1 servicing changes

UPDATE: 12/5/2016: In November 2016, the Security Monthly Quality Rollups were released as superseding the Security Only Quality updates. This resulted in an impact to customers deploying the Security Only Quality updates, using tools that cannot easily deploy superseded updates, such as System Center Configuration Manager 2007. Based on customer feedback, this supersedence has been changed in December 2016. Please review the updates below if this impacts your deployment scenarios.

(...) UPDATED 12/5/2016: Starting in December 2016, monthly rollups will not supersede security only updates. The November 2016 monthly rollup will also be updated to not supersede security only updates. Installing the latest monthly rollup will ensure the PC is compliant for all security updates released in the new servicing model."

https://blogs.technet.microsoft.com/win ... g-changes/


We had this discussion before: viewtopic.php?f=4&t=6897

The current situations seems to be, that without proper configuration, both sets of update rollups will be downloaded and installed.


Edit: The Microsoft blog post was moved. The new URL is:

More on Windows 7 and Windows 8.1 servicing changes
https://techcommunity.microsoft.com/t5/ ... a-p/166783
hbuhrmester
 
Posts: 315
Joined: 11.10.2013, 21:59

Re: WSUS Offline Update 11.4 download issue

Postby boco » 19.07.2018, 05:12

Of course this is old news. Still want to kick them in the nuts for this whole shit. And a few more for Windows 10, although this would require iron boots with spikes.

Oh, by the way, beginning September 2018, you can count Server 2008 in. Welcome to the Club!

viewtopic.php?f=5&t=8227
Microsoft update catalog: http://catalog.update.microsoft.com/v7/site/
Windows Install media download: https://support.microsoft.com/en-us/help/15088/windows-create-installation-media
boco
 
Posts: 2007
Joined: 24.11.2009, 18:00
Location: Germany


Return to Download

Who is online

Users browsing this forum: No registered users and 8 guests