locked
Server 2008 R2 - Not seeing security update 2018-01 in WSUS or Microsoft Update RRS feed

  • Question

  • So, I have a few Server 2008 R2 systems that aren't seeing 2018-01 in either WSUS or when I check against Microsoft Update.  They see other updates, though.  In WSUS, the updates shows as "Not Applicable"

    When I manually download the MSU, it lets me install (e.g. kb4056894).

    I checked, and the AV reg setting is correct:

    Key="HKEY_LOCAL_MACHINE"Subkey="SOFTWARE\Microsoft\Windows\CurrentVersion\QualityCompat"
    Value Name="cadca5fe-87d3-4b96-b7fb-a231484277cc"
    Type="REG_DWORD”
    Data="0x00000000”

    This was probably set by SCEP, which is the AV protection we use.

    Anything else I can check or am missing?

    Friday, January 26, 2018 11:08 PM

All replies

  • Hi,

    Is that server is using AMD processor ?

    If yes , have you installed "KB4073578" first :

    https://support.microsoft.com/en-us/help/4056897/windows-7-update-kb4056897

    Best Regards,

    Elton


    Please remember to mark the replies as answers if they help.
    If you have feedback for TechNet Subscriber Support, contact tnmff@microsoft.com.

    Monday, January 29, 2018 8:56 AM
  • These are all VMs in VMWare, I guess I should have specified.  Intel processors on the hosts.  My 2012 R2 and 2016 VMs all got the update with no issue.

    Now that I think about it...since these are older VMs, the VM Hardware version may come into play.  Does somebody with VMWare experience know if, say VM Version 8 may have issues versus a machine with VM Version 11?

    Monday, January 29, 2018 6:42 PM
  • We are having the exact same issue. I have opened up a support case with Microsoft, but I am curious if anyone else has any ideas on what the issue may be?
    Tuesday, February 13, 2018 8:28 PM
  • We had old regkeys and folders of Symantec Endpoint on our servers. After cleanup the windows updates appeared.

    Symantec Cleanup Tool (download at the end of the Page): https://support.symantec.com/en_US/article.HOWTO124983.html 

    Wednesday, February 14, 2018 1:48 PM
  • We had old regkeys and folders of Symantec Endpoint on our servers. After cleanup the windows updates appeared.

    Symantec Cleanup Tool (download at the end of the Page): https://support.symantec.com/en_US/article.HOWTO124983.html 

    This was the exact problem.  I meant to come back and update this.

    After clearing out the remnants of an old Symantec product (uninstalled years ago), the systems were able to pick up updates again.  It was a beast to track down, since all my systems were showing as compliant.

    Friday, February 16, 2018 9:44 PM