Security Patches Only

[jwaltrip]

Is there a way to restrict this tool to only patch Windows Security patches?

I patched a server, and it also patched SharePoint, which made the SharePoint admins irate.

Any way to restrict this?

[aker]

wsusou updates Windows & Office based on wsusscn2.cab. It will (except for some static definitions) just install security updates.
viewtopic.php?f=7&t=172

Please post the content of C:\Windows\wsusofflineupdate.log, so I can take a look at it.

[jwaltrip]

Code: Select all

Sat 05/17/2014  9:11:00.84 - Info: Starting WSUS Offline Update (v. 9.2.1)
Sat 05/17/2014  9:11:00.84 - Info: Used path "X:\cmd\" on SDALHVMSPD1 (user: da-jim.waltrip)
Sat 05/17/2014  9:11:00.87 - Info: Option /updatercerts detected
Sat 05/17/2014  9:11:00.95 - Info: Option /updatecpp detected
Sat 05/17/2014  9:11:01.00 - Info: Option /verify detected
Sat 05/17/2014  9:11:09.33 - Info: Found Microsoft Windows version 6.2.9200.16628 (w62 x64 enu sp0)
Sat 05/17/2014  9:11:09.33 - Info: Found Microsoft Windows Software Licensing Management Tool info...
Sat 05/17/2014  9:11:09.33 - Info: Name: Windows(R), ServerStandard edition
Sat 05/17/2014  9:11:09.33 - Info: Description: Windows(R) Operating System, RETAIL channel
Sat 05/17/2014  9:11:09.33 - Info: Partial Product Key: R3G9J
Sat 05/17/2014  9:11:09.33 - Info: License Status: Licensed
Sat 05/17/2014  9:11:09.39 - Info: Found Windows Update Agent version 7.8.9200.16731
Sat 05/17/2014  9:11:09.39 - Info: Found Windows Installer version 5.0.9200.16384
Sat 05/17/2014  9:11:09.39 - Info: Found Windows Script Host version 5.8.9200.16775
Sat 05/17/2014  9:11:09.39 - Info: Found Internet Explorer version 9.10.9200.16843
Sat 05/17/2014  9:11:09.39 - Info: Found Trusted Root Certificates' version 0.0.0.0
Sat 05/17/2014  9:11:09.40 - Info: Found Revoked Root Certificates' version 0.0.0.0
Sat 05/17/2014  9:11:09.40 - Info: Found Microsoft Data Access Components version 6.2.9200.16384
Sat 05/17/2014  9:11:09.40 - Info: Found Microsoft DirectX core version 9.0c (4.09.00.0904)
Sat 05/17/2014  9:11:09.40 - Info: Found Microsoft Silverlight version 5.1.30214.0
Sat 05/17/2014  9:11:09.40 - Info: Found Windows Media Player version 0.0.0.0
Sat 05/17/2014  9:11:09.42 - Info: Found Remote Desktop Client version 6.2.9200.16465
Sat 05/17/2014  9:11:09.42 - Info: Found Microsoft .NET Framework 3.5 version 3.5.30729.4926
Sat 05/17/2014  9:11:09.42 - Info: Found Windows PowerShell version 2.0
Sat 05/17/2014  9:11:09.42 - Info: Found Microsoft .NET Framework 4 version 4.5.50709
Sat 05/17/2014  9:11:09.42 - Info: Found Windows Management Framework version 3.0
Sat 05/17/2014  9:11:09.42 - Info: Found Windows Defender definitions version 0.0.0.0
Sat 05/17/2014  9:11:09.43 - Info: Medium build date: 05/15/2014
Sat 05/17/2014  9:11:09.47 - Info: Medium supports Microsoft Windows (w62 x64 glb)
Sat 05/17/2014  9:11:11.81 - Info: Installed ..\win\glb\rootsupd.exe
Sat 05/17/2014  9:11:12.84 - Info: Installed ..\win\glb\rvkroots.exe
Sat 05/17/2014  9:11:13.78 - Info: Detected state of service 'Windows Update': Running (start mode: Manual)
Sat 05/17/2014  9:13:07.78 - Warning: Update kb2929891 (id: 81384129-ce9e-43eb-9b68-cc5c46298387) not found
Sat 05/17/2014  9:15:40.79 - Info: Installed ..\w62-x64\glb\windows8-rt-kb2936068-x64_f5277ce116ee736b20a911752b4b9db0625d4d86.cab
Sat 05/17/2014  9:19:17.61 - Info: Installed ..\w62-x64\glb\windows8-rt-kb2871997-v6-x64_721cf3c9fe1b6f021f1e94454f3a3fc5a5c51c61.cab
Sat 05/17/2014  9:20:03.74 - Info: Installed ..\w62-x64\glb\windows8-rt-kb2931357-x64_c2cd0a5fa783418d13c3738121ac25ea9e5e7632.cab
Sat 05/17/2014  9:20:55.83 - Info: Installed ..\w62-x64\glb\windows8-rt-kb2931367-x64_0404f136ac9420ce9b9f5e6eb40ebbccbab99164.cab
Sat 05/17/2014  9:21:29.07 - Info: Installed ..\w62-x64\glb\windows8-rt-kb2920189-x64_3360385a5f5e439f6c53b56b0d4ef318bdcd447d.cab
Sat 05/17/2014  9:23:25.10 - Info: Installed ..\w62-x64\glb\windows8-rt-kb2926765-x64_b841c909fc9f19d72bfc2f32823fd6580211f69a.cab
Sat 05/17/2014  9:24:58.06 - Info: Installed ..\w62-x64\glb\windows8-rt-kb2953522-x64_5c85b487c9df3796a35cc9ad9f898b813081ba70.cab
Sat 05/17/2014  9:24:58.10 - Info: Installed 7 updates
Sat 05/17/2014  9:24:58.14 - Info: Installation successful
Sat 05/17/2014  9:24:58.15 - Info: Ending WSUS Offline Update


[aker]

I checked all updates wsusou installed.
All of them are Windows updates / updates for the trusted & revoked certificates.
I couldn't find any SharePoint update.

[boco]

Maybe WU installed it. As WSUSOU has to start the WU service, there is a short window where it might have slipped through.