- This topic has 2 replies, 2 voices, and was last updated 6 years, 10 months ago by .
-
Posts
-
Hey Doug,
I’m currently in the process of trying to patch our Windows 10 systems for the Intel vulnerability that was released yesterday. When choosing Download and Install Updates from Batch Patch, the results do not have this update. When I run Windows Updates manually on the system, this update (KB4056892) is found and installs. Is there any reason why it’s not detecting through Batch Patch. Under Tools – Settings Windows Update I have ‘All’ software updates and ‘All’ driver updates selected. And everything in the Update Classification Filtering section is checked. Also the following is set: ‘Only install updates that were published/approved at least 0 days ago’
Because I have systems that can’t access the internet, I have Enable ‘cached mode’ selected as well as Enable offline mode.
Offline mode utilizes the WsusScn2.cab file that Microsoft publishes on a monthly basis. This file contains the metadata for security updates that allows the Windows Update Agent to determine which updates are available for the computer in question without requiring internet access or a WSUS to perform the scan. When you scan for Windows Updates using the control panel interface on the computer, it does an online scan for available updates against Microsoft’s public update servers, not the WsusScn2.cab file. The WsusScn2.cab file will never contain *all* updates that the public update servers contain. The WsusScn2.cab file generally contains all security updates and service packs along with various other updates that Microsoft deems important enough to include. When they release an out-of-band patch, such as the KB4056892 that you are referencing, it will appear on their public update servers before they publish a new WsusScn2.cab file that also contains the update. If you want to apply the update to systems that do not have internet or WSUS access before Microsoft publishes a new WsusScn2.cab file, then you would have to download the update manually from the Microsoft catalog, and then you can deploy it to target systems using the BatchPatch ‘Deploy’ feature, following this example:
Remotely Deploy a Standalone .MSU Update to Multiple Computers
- You must be logged in to reply to this topic.