wsus 3.0 and 816093 update for ms virtual machine Drew <drew[ at ]drew.com> 6/6/2007 12:43:04 PM Hi All: Is there something unusual on WSUS 3.0 and a Microsoft Virtual Java Machine update with the number of 816093? I have about a dozen clients whose machines report needing this update in WSUS 3.0. I've approved the update for all and if you look at each of the machines' status, they all show that Approval is set to Install and that Status is Downloaded. However, after two weeks, this update is still not getting installed. Since I've just started, I've got WSUS scheduled to do installs every night at 3am so it should have had plenty of time after a couple of weeks to install. I hate to ignore this because its the last update leaving these handful of machines from getting the lovely full green sphere (all updates installed) under status. Any help is appreciated! Drew

Re: wsus 3.0 and 816093 update for ms virtual machine "Lawrence Garvin \(MVP\)" <onsitech[ at ]community.nospam> 6/6/2007 12:56:10 PM "Drew" <drew[ at ]drew.com> wrote in message news:utad639r1u6agtcf0l20e8rkdpkj6dor62[ at ]4ax.com... [Quoted Text] > Is there something unusual on WSUS 3.0 and a Microsoft Virtual Java > Machine update with the number of 816093? Not with WSUS 3.0 per se, but definitely with the detection engine... and an ancient issue at that! :-) Why won't update 816093 install? http://wsusinfo.onsitechsolutions.com/articles/004.htm -- Lawrence Garvin, M.S., MCTS, MCP Independent WSUS Evangelist MVP-Software Distribution (2005-2007) https://mvp.support.microsoft.com/profile=30E00990-8F1D-4774-BD62-D095EB07B36E Everything you need for WSUS is at http://technet2.microsoft.com/windowsserver/en/technologies/featured/wsus/default.mspx And, almost everything else is at http://wsusinfo.onsitechsolutions.com .....

Re: wsus 3.0 and 816093 update for ms virtual machine Drew <drew[ at ]drew.com> 6/6/2007 4:29:28 PM Thanks Lawrence! By the way, what all categories of updates are you grabbing during WSUS synchs? I'm only getting Critical Updates and Security Updates per an IT policy. I've set these to be automatically approved for all machines so that updates aren't held if I'm out of town or just forget! Does this seem like a good plan? Drew On Wed, 6 Jun 2007 07:56:10 -0500, "Lawrence Garvin \(MVP\)" <onsitech[ at ]community.nospam> wrote: [Quoted Text] >"Drew" <drew[ at ]drew.com> wrote in message >news:utad639r1u6agtcf0l20e8rkdpkj6dor62[ at ]4ax.com... > >> Is there something unusual on WSUS 3.0 and a Microsoft Virtual Java >> Machine update with the number of 816093? > >Not with WSUS 3.0 per se, but definitely with the detection engine... and an >ancient issue at that! :-) > > >Why won't update 816093 install? >http://wsusinfo.onsitechsolutions.com/articles/004.htm

Re: wsus 3.0 and 816093 update for ms virtual machine "Lawrence Garvin \(MVP\)" <onsitech[ at ]community.nospam> 6/7/2007 1:18:18 AM "Drew" <drew[ at ]drew.com> wrote in message news:9snd63pnb3fl3rg06ag2nnuf0jsdj1l2f0[ at ]4ax.com... [Quoted Text] > By the way, what all categories of updates are you grabbing during > WSUS synchs? I'm only getting Critical Updates and Security Updates > per an IT policy I synchronize everything except Drivers. Why would your IT policy *restrict* the types of updates you synchronize via WSUS. Methinks the author of your policy doesn't understand Windows Server Update Services. You might email them the WSUS Overview for further reading. :-) > I've set these to be automatically approved for all machines so that > updates aren't held if I'm out of town or just forget! And the policy allows *THAT*??? Who deals with the aftermath if you're out of town and an update breaks all of the desktops in the organization? > Does this seem like a good plan? No. Dozens and dozens of tomes have been written about proper and effective patch management policy. Microsoft didn't invent them, and WSUS didn't invent them. But WSUS certainly provides the tools to implement a patch management policy based on best practices that have been documented for several years. I'd suggest starting with an *indepedent* source for patch management policy. Rewrite the one you have, because [a] a POLICY should never dictate conditions specific to the implementation of that policy, and [b] it would seem the policy is missing out on addressing a large portion of the patches you'll find it necessary to install. -- Lawrence Garvin, M.S., MCTS, MCP Independent WSUS Evangelist MVP-Software Distribution (2005-2007) https://mvp.support.microsoft.com/profile=30E00990-8F1D-4774-BD62-D095EB07B36E Everything you need for WSUS is at http://technet2.microsoft.com/windowsserver/en/technologies/featured/wsus/default.mspx And, almost everything else is at http://wsusinfo.onsitechsolutions.com .....