Page 1 of 2

9.2.1 delete some old (but needed for Windows XP) updates

PostPosted: 18.08.2014, 11:13
by off
Deleted ..\client\win\glb\directx_Jun2010_redist.exe !!!

Deleted ..\client\w2k3-x64\enu\ie7-windowsserver2003.windowsxp-kb2936068-x64-enu_d3a48f2652934f716110dd5046f0216e3eb5e2c6.exe
Deleted ..\client\w2k3-x64\enu\windowsserver2003.windowsxp-kb2850869-x64-enu_16754943ba5d7b9934d6ad6c9c8ca8aee2433950.exe
Deleted ..\client\w2k3-x64\enu\windowsserver2003.windowsxp-kb2868626-x64-enu_1b970febbd5adf54ee0cbaee6d259c434355a615.exe
Deleted ..\client\w2k3-x64\enu\windowsserver2003.windowsxp-kb2875783-x64-enu_a67fa24c28b1d7ac37266b3886de9a0d68923bb1.exe
Deleted ..\client\w2k3-x64\enu\windowsserver2003.windowsxp-kb2876331-x64-enu_5036f9d207ecdf383f6f1cfd4d3a1871098cfcb3.exe
Deleted ..\client\w2k3-x64\enu\windowsserver2003.windowsxp-kb2916036-x64-enu_b6cfe5df0b5179ce703938c40d103f3085e50d89.exe
Deleted ..\client\w2k3-x64\enu\windowsserver2003.windowsxp-kb2930275-x64-enu_c9767b12bf3e2e73c9038c57b43eea3ca7ed398a.exe
Deleted ..\client\w2k3-x64\enu\windowsserver2003.windowsxp-kb2936068-x64-enu_a1bf25f9108f8b537e3cc78f7787db9fe7b41aa5.exe

Deleted ..\client\wxp\rus\windowsxp-kb2862772-x86-rus_4442accdf1b76b7c0079ba88aece79f3e7591326.exe

Deleted ..\client\w2k3-x64\rus\ie7-windowsserver2003.windowsxp-kb2936068-x64-rus_d0020671ba1b990567990f13d4b53c61d3c896c4.exe
Deleted ..\client\w2k3-x64\rus\ie8-windowsserver2003.windowsxp-kb2936068-x64-rus_6fbeba66aa392ae84306be90d92465dc6c48b0a7.exe
Deleted ..\client\w2k3-x64\rus\msxml6-kb2758696-rus-amd64_7ded429bfd7d006d99d039c958e022c058100fba.exe
Deleted ..\client\w2k3-x64\rus\windowsserver2003.windowsxp-kb2761226-x64-rus_322c70d210d57177d89c8ce8c9f5ae925130caa1.exe
Deleted ..\client\w2k3-x64\rus\windowsserver2003.windowsxp-kb2850869-x64-rus_bb89c3f4d647c512e23dc8633195e72b2ba655a0.exe
Deleted ..\client\w2k3-x64\rus\windowsserver2003.windowsxp-kb2868626-x64-rus_f7e6536e0fa04e072e44ba332f144df6c3b68cfa.exe
Deleted ..\client\w2k3-x64\rus\windowsserver2003.windowsxp-kb2875783-x64-rus_cbe6d0d6aac0ff3f1b0ef58b256c5169c196da56.exe
Deleted ..\client\w2k3-x64\rus\windowsserver2003.windowsxp-kb2876331-x64-rus_599d6a8f8e2b01c1cb17a26586c28266df4d2a13.exe
Deleted ..\client\w2k3-x64\rus\windowsserver2003.windowsxp-kb2916036-x64-rus_0bf59dc584191b356c671f4cf19273c5cc8d6c79.exe
Deleted ..\client\w2k3-x64\rus\windowsserver2003.windowsxp-kb2930275-x64-rus_b5c333211a0b111e41a79350c36d87b960574dec.exe
Deleted ..\client\w2k3-x64\rus\windowsserver2003.windowsxp-kb2936068-x64-rus_80225564b368f27f952df4f3d1534dbffab454cc.exe

Seems that many XP x64 security updates will be superceded till 2003 Server EoS, so should include it in exclude list

Re: 9.2.1 delete some old (but needed for Windows XP) update

PostPosted: 18.08.2014, 15:07
by WSUSUpdateAdmin
Hi.

Windows XP is not supported any longer, neither the x86 nor the x64 edition!
I guess that's why Microsoft marked many updates *windowsserver2003.windowsxp-*-x64* as superseded.

Anyway, WOU updates Server 2003 x64 fine:
Code: Select all
Starting WSUS Offline Update (v. 9.3.1+ (r609)) at 15:32:11,02...
Checking user's privileges...
Determining system's properties...
Found Microsoft Windows version: 5.2.3790.0 (w2k3 x64 deu sp2)
Checking medium content...
Medium build date: 18.08.2014
Medium supports Microsoft Windows (w2k3 x64 deu).
Checking Windows Service Pack version...
Checking Windows Update Agent version...
Checking Windows Installer version...
Checking Windows Script Host version...
Checking Internet Explorer version...
Checking Trusted Root Certificates' version...
Installing most recent update for Trusted Root Certificates...
Verifying integrity of ..\win\glb\rootsupd.exe...
hashdeep64.exe: Audit passed
Installing ..\win\glb\rootsupd.exe...
Checking Revoked Root Certificates' version...
Installing most recent update for Revoked Root Certificates...
Verifying integrity of ..\win\glb\rvkroots.exe...
hashdeep64.exe: Audit passed
Installing ..\win\glb\rvkroots.exe...
Checking C++ Runtime Libraries' installation state...
Installing most recent C++ 2008 x64 Runtime Library...
Verifying integrity of ..\cpp\vcredist2008_x64.exe...
hashdeep64.exe: Audit passed
Installing ..\cpp\vcredist2008_x64.exe...
Installing most recent C++ 2008 x86 Runtime Library...
Verifying integrity of ..\cpp\vcredist2008_x86.exe...
hashdeep64.exe: Audit passed
Installing ..\cpp\vcredist2008_x86.exe...
Checking Windows Defender installation state...
Checking state of service 'Windows Update'...
Verifying integrity of Windows Update catalog file...
hashdeep64.exe: Audit passed
15:33:08,44 - Listing ids of missing updates (please be patient, this will take
a while)...
15:37:59,38 - Done.
Listing ids of installed updates...
Listing update files...
Info: Skipping update kb951847 (.NET Framework 3.5 Service Pack 1) due to matchi
ng black list entry.
Info: Skipping update kb890830 (Malicious Software Removal Tool) due to matching
 black list entry.
Installing updates...
Installing update 1 of 125...
...

If you miss DirectX redist within v. 9.2.1, please create a file ...\static\custom\StaticDownloadLinks-win-x86-glb.txt and add the following line to it:
Code: Select all
http://download.microsoft.com/download/8/4/A/84A35BF1-DAFE-4AE8-82AF-AD2AE20B6B14/directx_Jun2010_redist.exe

Regards
T. Wittrock

Re: 9.2.1 delete some old (but needed for Windows XP) update

PostPosted: 30.08.2014, 22:56
by Izibia
Thank you, I was missing DirectX redist with Win XP too.

But I am getting another problem with WSUSOU 9.2.1 and Win XP:
The Installer's log shows
"Update kb2917500 (id: 4285282c-adab-4943-8cf1-0aedd811d542) not found"

Maybe it is related to this problem:
http://answers.microsoft.com/en-us/wind ... b7366da2dc
?
Any idea how to fix it?

Re: 9.2.1 delete some old (but needed for Windows XP) update

PostPosted: 31.08.2014, 12:25
by aker
Add kb2917500 to .\client\exclude\custom\ExcludeList.txt.

Re: 9.2.1 delete some old (but needed for Windows XP) update

PostPosted: 31.08.2014, 13:23
by Izibia
Do you mean the download link of kb2917500
( http://download.microsoft.com/download/ ... kroots.exe )
is included in the file StaticDownloadLinks-win-x86-glb.txt, and so kb2917500 may be excluded?

But why Windows autoupdate offers kb2917500 after I run the WSUSOU installer?

client\md\hashes-win-glb.txt includes this line:
199944,839d944528e2802125746c671b7bc661,4ed3130eaf7c0163590982fdcaf145640e5a12ba,7af387b9593dc7e13ed36cf79d6860f4361a943def775b130638035ae3961b27,..\win\glb\rvkroots.exe
but it seems to be related to another version of rvkroots.exe, because the one of kb2917500 has this size: 200016

Re: 9.2.1 delete some old (but needed for Windows XP) update

PostPosted: 31.08.2014, 17:21
by aker
The version wsusou installs is more recent.
It is caused by a bug in wsusscn2.cab, that wsusou lists the old rvkroots.exe as missing, when the newer one is installed.

Re: 9.2.1 delete some old (but needed for Windows XP) update

PostPosted: 01.09.2014, 00:35
by Izibia
Oh, it looks the installed version of rvkroots.inf is from 2014-07-14 ... so wsusoffline will update rvkroots even in the future (in case it is re-generated), and even if the support from Microsoft ended?


aker wrote:Add kb2917500 to .\client\exclude\custom\ExcludeList.txt.
So the reason of this advice is just to remove the warning from the log?

Re: 9.2.1 delete some old (but needed for Windows XP) update

PostPosted: 01.09.2014, 08:32
by aker
wsusou will update rvkroots as long as MS provides download links for it.

And yes, this line is just for silencing the warning.

Re: 9.2.1 delete some old (but needed for Windows XP) update

PostPosted: 01.09.2014, 09:44
by WSUSUpdateAdmin
Please follow viewtopic.php?f=7&t=4196.

With the latest version of wsusscn2.cab, the determination of superseded updates will fail within v. 9.2.1 (see viewtopic.php?f=3&t=4390), and I won't fix it.

RTW

Re: 9.2.1 delete some old (but needed for Windows XP) update

PostPosted: 01.09.2014, 23:47
by Izibia
So even after April 2014 it has sense to re-run UpdateGenerator with Windows XP, so that Trusted and Revoked Root Certificates are re-updated.
(and it looks one could extract the ":InstallTRCerts" part from wsusou for this specific purpose ...)

Is there anything else that wsusou keeps re-updating even after April 2014?