Comments on: Microsoft Update Troubles Again

By: James

James — Mon, 19 Nov 2007 16:47:02 +0000

After some trouble like this we decided to get rid of wsus entirely. From some advice and good reccomendations we switched to a 3rd party solution - desktop authority. It works really good in our environment. This week we updated this solution to a new version 7.7 that has some useful enhancements including more powerful patching and updating. Now it supports multi-lingual patch distribution, different patch type filters and patch rollback. It's pretty cool.

By: Matt

Matt — Thu, 15 Nov 2007 04:09:45 +0000

I apologize for two posts, I pressed the wrong button

Combined with McAfee’s resident virus protection, the search indexing was destroying performance. This was frustrating as about 95% of our users have absolutely no use for it at all. The uninstall command you have provided will come in incredibly useful. Thanks.

By: Matt

Matt — Thu, 15 Nov 2007 04:07:06 +0000

The company I work for was affected by this issue. We have approximately 1200 desktops and it was pushed out to all of them. We fit the criteria as one of our administrators previously noticed that it didn’t affect anything, so he approved it. Combined with McAfee

By: Alex

Alex — Wed, 07 Nov 2007 04:07:30 +0000

Haven’t seen it yet, but I only automatically approve critical patches and security updates.

By: Radar Detector

Radar Detector — Wed, 07 Nov 2007 00:40:33 +0000

I find windows updates very annoying and it’s true that the updates are not necessary most of the time.

Thanks for the very useful tips.

By: Michel Zehnder

Michel Zehnder — Tue, 06 Nov 2007 15:19:48 +0000

Scott,

Yes, we fit the criteria listed on the blog entry.
I’ve initially approved the update because some users have WDS installed and want to use it, so my interest is to keep it up to date (but of corse not force it to all machines).

/Michel

By: slowe

slowe — Tue, 06 Nov 2007 11:58:50 +0000

Michel,

Have you read the response by the WSUS team on their blog? I’m curious to see if you “fit” the criteria they laid out, i.e., had a previous WDS update approved and auto-approve revisions enabled. It would be interesting to see how many users really fall into the situation described by the WSUS team…or how many users just had WDS forced onto their systems.

By: Michel Zehnder

Michel Zehnder — Tue, 06 Nov 2007 09:52:24 +0000

Yes, we were affected by this.
A User stated that WDS was installed by WSUS on his Laptop, and he asked that I unapprove the update because it keeps installing itself if he uninstalls WDS.

This got my attention and I found myself having WDS on all machines in our Organization (of course, including Servers) We’re lucky that we are only a small Organization (~35 Clients) and the damage can be controlled with little effort, but I don’t want to be the admin who controls like 1000 desktops, and I definitely don’t want to be at the helpdesk there

I hope we don’t have to be worried about on each patch day that something may go wrong, and we may end up having pushed out some Software on all Computers

Let’s hope Microsoft learns something out of this.

Regards
Michel