forums.wsusoffline.net

Hi there .

While installing and updating a Server 2012 R2 at work I saw that WOU installs KB3038936 which is "August 2015 anti-malware update for Windows Defender", and although that's successful, it installs this update over and over again (because it's missing over and over again). This should be avoided because by default there is no Windows Defender on Windows Server (2012 [R2]). Maybe WOU could check for the Windows edition or check for the existence of a service named "WinDefend" something.

I added KB3038936 to the custom exclude list because we don't use Windows Defender on any machines at work.

Regards
Dalai

Hi.

I just wonder how to check for defender service depending on the kb-Id...

Cheers,
Torsten

The service name is static, it's not changed by an update. Well, until MS renames the service ...

I just checked - the service is called "WinDefend" in Windows 8.1 as well as Win10 1809. There is no such service on Server 2012 R2. So checking with

Code: Select all

sc query WinDefend

if the service exists should be enough.

Regards
Dalai

Windows Defender is „WinDefend“ on the following systems (I checked):
- w60
- w2k8
- w61
- w2k8r2
- w63
- w100 (all public builds up to 17763)
- w2k16 (14393)
- w2k19 (17763)

After thinking some more about it, I think I know what you mean: How do you know if a regular KB update is for Windows Defender before installing it? Actually, I have no idea, except compiling a (static) list WOU can compare against. Yes, this would mean maintaining and updating such list every once in a while.

Regards
Dalai