SMS SUS and Update Rollup 1 for XP (826939)

From: Brian Mays (bmays_at_STEINMART.COM)
Date: 10/30/03

  • Next message: Dragos Ruiu: "CanSecWest/core04 Call For Papers" 
    Date:         Thu, 30 Oct 2003 10:56:16 -0500
To: NTBUGTRAQ@LISTSERV.NTBUGTRAQ.COM

    Russ,

    I have an update from Microsoft regarding this issue.

    Earlier, I sent in an email to the list trying to determine if there was
    something that I could do to fix the problem with the rollup not showing up
    in the SMS SUS reports as installed. I called Microsoft Professional
    Support Services and they told me that this was an issue that would be
    looked into and that a work around would be to distribute the individual
    security updates included in the rollup package as a "group" via the
    "Distribute Software Updates" wizard in SMS. This way each individual
    update is listed in the registry and in the Add/Remove Programs window.

    Basically, it looks like "rollup" packages will pose a problem for anyone
    who is using SMS SUS or other third-party tools to deploy and "report" on
    critical updates. The rollup packages remove registry entries for updates,
    which are included in the rollup, that were applied previously. This
    procedure makes some scanning tools register the previous updates as "Not
    Installed".

    Brian Mays
    Manager of Network Systems
    Stein Mart, Inc.
    Jacksonville, FL

    -----
    Marcus Ranum's new book "The Myth of Homeland Security" is now out and
    is available from http://www.amazon.com/ranum In this hard-hitting
    review of the homeland security business, Ranum shows us how the problem
    is vastly harder than it's being made to sound, and how special
    interests, *** covering, and bureaucracy are threatening to derail any
    chance of making progress.
    -----

  • Next message: Dragos Ruiu: "CanSecWest/core04 Call For Papers"