Recent updates are unchecked in Windows Update. Why?

[Anak]

Not to worry about the newness, it'll grow on you.

You've been runnin' 7Ult for several years, and this is your first hiccup?

Did it fail or did you get scared, and thought, maybe I should just get rid of it before it caused problems?
Couldn't of been more than a day or so........

Some patches can cause problems, but the user is supposed to know what is on the system, and adjust accordingly.

 

[EoinCuinn]

My last two issues were hard drive failures, which ended up being a dodgy batch of Seagate 500g's from China.

Other than that (touch wood) I have had a brilliant time on 7 Ultimate, I love it. This is my gaming rig, and its performance is excellent.

As for the update, I am going to try it again tonight. It crashed restarting overnight (my updates are on a schedule twice a week) and I think it might actually be a corrupt update, as opposed to a dodgy update from MS.

We just moved, and we got our broadband connected on Tuesday, and I got my main machine cabled through the floor yesterday, so it was the first chance the machine has up to update since the 22nd of December last year. Made it easy to see exactly what caused the issue, it was pretty much instantaneous. I'll report back in the morning whether I cop the same problem

 

[Anak]

Hope you, the missus, and family are doing well after the move.

You can Reset Windows Update, but that seems like a drastic measure.

What I would do is to try and snick up on it this weekend, and in a quiet moment, do the download.

If it still doesn't work, just hide it for a while, then come back to it every now and then.

 

[bru]

My Windows Update shows the same thing, KB2585542 listed as imprtant but not checked. Seems kind of strange.

I see other have checked and installed it but I also see some have had trouble with it.

Not sure how to proceed.

 

[Tortuga]

My Windows Update shows the same thing, KB2585542 listed as imprtant but not checked. Seems kind of strange.

I see other have checked and installed it but I also see some have had trouble with it.

Not sure how to proceed.

Same thing on mine it's unchecked. I have not installed any updates yet, I try to give them about a week before I take the plunge.

 

[Anak]

Take the plunge!

Here is what KB2585542 secures: Microsoft Security Bulletin MS12-006 - Important : Vulnerability in SSL/TLS Could Allow Information Disclosure (2643584)

Some more information, and Fix-It's, if you have problems: MS12-006: Vulnerability in SSL/TLS could allow information disclosure: January 10, 2012

I know, the numbers are different. Microsoft does that when they update or change information on an update.

 

[bru]

Found a comment from Microsoft who calls it "throttling". I think I will wait a bit on this one.

Although we don't generally use the word 'throttling' externally, that's exactly what \
this is. An unchecked update in the WUapp (Windows Update Control Panel applet) is \
an indication of an update that's being throttled (publicly called, "gradually \
releasing update x over a period of time").

Updates are generally throttled when they are (a) major releases that need to be \
gradually deployed (like a major version upgrade for Internet Explorer), (b) when \
there are potential quality issues found in the first day or two of release (so we \
can slow the deployment while we gather data to assess the scope of an issue), or - \
as in this case - (c) we don't want to hit every Windows consumer PC on the planet \
at an inopportune time (like during the holidays) - but still give tech-savvy admins \
the ability to release the update (through WSUS/SMS/SCCM or by checking the box in \
WUapp).

 

[Anak]

bru, could you give the link to that comment?

 

[bru]

The person seemed a bit confused. She referred to KB2585542 as an "Office File Validation" which I don't think it is. Seeing as how it is a security update I am still a bit unclear/concerned as to why MS does not have it checked for installation.

http://marc.info/?l=patchmanagement&m=132536109306522&w=2

 

[Anak]

Thank you for the link bru!

I know of Susan Bradley very well, and her efforts in deciphering Windows Updates.
With her network of IT Professionals, and Adminstrators she is well aware of knowing how Updates can affect the Operating System.
She is like a "Clearing House" for updates, much like Brian Marsden was for the IAU Minor Planet Center


IMHO, I think I can explain why there seems to be some confusion why this was called an "Office File Validation" even though it is listed as a security update.

This link points to:
'Technical Advisory - Windows patch triggers errors with Kerio Outlook Connector' - MARC
Which is a Microsoft Office (MO) third-party app that helps exchange information across different platforms, thus the Office File Validation listing. Cross platform email, calendars and contacts for the mobile workforce | Kerio Connect | Kerio
It is designed for users that prefer not to use Microsoft Exchange, (ME)


This link points to the update as a Vulnerability in SSL/TLS Could Allow Information Disclosure (2643584)
What is TLS/SSL?: Logon and Authentication, and that is why this update can also be called a security update.

A recent Microsoft Windows update KB2585542 (released on Tuesday, January 10, 2012) produces numerous errors with Kerio Outlook Connector (Offline Edition) and may result in Outlook being unable to send mail. This bug only affects Windows users running any version of Outlook with the Kerio Outlook Connecter.

Source: SSL error (mails are not sent) with MS KB2585542 installed Kerio KB

To boil all this down, it means that any small buisness system that is using Kerio instead of ME to help exchange, think input, information between all of its mobil devices, and MO which has Outlook intergrated, should reconsider applying the update because as of the moment it will cause errors.

Microsoft (MS) has no way of knowing who does or does not use Kerio, and that is why the KB2585542 was not checked or in MS terms throttled.
So if you do not use Kerio with Outlook it would be okay to update with KB2585542.

 

[Borg 386]

Thanx for the info, I was curious about why it wasn't checked. As usual, before I do updates, I create system image, just in case...but I also usually wait a couple days to see if any problems pop up with the updates.

 

[forkboy]

So it looks like we finally have an answer as to why not all important updates are always checked! This has drove me crazy for ages. I presume if I don't manually check this update I can forgot about it and Microsoft will check it and it will install itself when they're ready.

 

[Animal5150]

I had the same update unchecked. I took all updates (including unchecked) and no problems. I did however take a couple updates at a time and the unchecked one by itself.

 

[legacy7955]

Here's something everybody might find interesting it comes DIRECTLY from a Doug Neal a MS update software engineer. Susan Bradley, a Community Moderator over at the Microsoft Answers forums posted this.

-----------------------------------------------------------------------------------------------------------------------------------
What you are seeing is "throttling" or an update that it not being flagged by Microsoft as optional.
In the case of Office file validation, it is optional.
They may at a later date after they see that there's no problems with the update, go back and reflag it and precheck the box.

http://marc.info/?l=patchmanagement&m=132536109306522&w=2

Although we don't generally use the word 'throttling' externally, that's exactly what \
this is. An unchecked update in the WUapp (Windows Update Control Panel applet) is \
an indication of an update that's being throttled (publicly called, "gradually \
releasing update x over a period of time"). This only affects the consumer \
scenarios: automatic update (AU) and Windows/Microsoft Update (WU/MU). And usually \
only the tech savvy folks would see it since they would need to open WUapp, see the \
update and notice it's unchecked). Enterprise scenarios (WSUS, SMS, SCCM, SBS, SCE, \
MBSA) and the MU Catalog are not affected since there's no concept of throttling \
(local admins like you have this control).

Updates are generally throttled when they are (a) major releases that need to be \
gradually deployed (like a major version upgrade for Internet Explorer), (b) when \
there are potential quality issues found in the first day or two of release (so we \
can slow the deployment while we gather data to assess the scope of an issue), or - \
as in this case - (c) we don't want to hit every Windows consumer PC on the planet \
at an inopportune time (like during the holidays) - but still give tech-savvy admins \
the ability to release the update (through WSUS/SMS/SCCM or by checking the box in \
WUapp).

A throttled update can be seen in the LOGs as the "regulation server" not permitting \
the download of the update. Of course, if you interactively check the checkbox in \
WUapp, you will circumvent the regulation server (throttling) and receive the update \
anyway.

doug neal
Microsoft Update (MU)

 

[bru]

Here's something everybody might find interesting it comes DIRECTLY from a Doug Neal a MS update software engineer. Susan Bradley, a Community Moderator over at the Microsoft Answers forums posted this.

http://marc.info/?l=patchmanagement&m=132536109306522&w=2

Posted that same link earlier in this thread . Don't go there today, he's participating in the blackout.

 

[bru]

So it looks like we finally have an answer as to why not all important updates are always checked! This has drove me crazy for ages. I presume if I don't manually check this update I can forgot about it and Microsoft will check it and it will install itself when they're ready.

I specifically asked that question of Susan but never got a response. I'm not exactly sure if what you describe will eventually happen.

Some have reported problems that they think they can trace to this update. Others no issue. I haven't installed it yet but it is a security update so I wish MS would figure it out.

 

[Animal5150]

So it looks like we finally have an answer as to why not all important updates are always checked! This has drove me crazy for ages. I presume if I don't manually check this update I can forgot about it and Microsoft will check it and it will install itself when they're ready.

I specifically asked that question of Susan but never got a response. I'm not exactly sure if what you describe will eventually happen.

Some have reported problems that they think they can trace to this update. Others no issue. I haven't installed it yet but it is a security update so I wish MS would figure it out.

Bru I installed it on to Win 7 PC's without any issues.

 

[bru]

Lo and behold today WU has KB2585542 checked and ready for installation. Curious if anyone else who did not install it also now has it checked.

I have to think it was done because I posted about how ridiculous the situation was on MS Answers. It seems someone actually listened.

 

[HammerHead]

Blind Hog Finds Acorn

I read this thread and was aware of some updates not being checked while others would be. I don't know where in the H___ I got this idea but I thought they were to be installed one at a time by their self. So I have always done the checked ones and then one at a time the unchecked ones.

:roflmao:

 

[Anak]

Generally the throttled ones will not cause a problem, but as in the case of this one: http://www.sevenforums.com/windows-updates-activation/214257-feb-14-ms-bad-update.html it could cause a problem if you have silverlight, whether or not you actually use it..