roycruse

They say its a microsoft thing.... but no one has commented on this post where I point out clearly that it is easy to identify the updates as "OPTIONAL DRIVER" updates and not recommended updates. no one has once explained why these fields cannot be used to differentiate the optional from reccomended updates and no one has explained what the error in the api output actually is. this is all just smoke and mirrors - if theres a genuine error in the api output - just tell me what it is ???????

Any movement on this... The windows update warning is worse than useless as it is. This is especially frustrating seeing as i have given clear examples above on how the existing microsoft api output can clearly distinguish these updates as both "Driver" and "Optional" so just sitting on your hands waiting for microsoft is not really an excuse when you could implement a fix right now with no changes from microsoft.

This is good news - i look forward to the updated and fixed version many thanks

Can I ask what has been reported to microsoft ? I don't know much about this API but a quick look at the documentation shows me that the "DeploymentAction" field which is 4 on all the updates in my example... 4 = "Optional Installation" Also the "Type" field which are all 2 in my above example... 2 = "Driver" So to me these updates are flagged as optional driver updates so the fact eset is listing them as recommended seems to be a bug your end ? apologies if im mistaken but it looks like microsoft hasn't responded as there isn't an issue... What criteria does your software use to determine its a recommended update ?

Hi, Is there an update on this? I assume there is an actual issue with the ESET software? seeing as no one came back after I posted the output above saying it was windows doing something wrong.

heres the output from the PC on that second example Funny how windows knows they are not recommended and displays them in the optiponal section though isnt it ? PS C:\Users\royadmin> $searcher = New-Object -ComObject Microsoft.Update.Searcher $objSearchResult = $Searcher.Search("IsInstalled=0") foreach($objUpdate in $objSearchResult.Updates) { Write-Host ( " UpdateID : {" + $objUpdate.Identity.UpdateID + "}" ) Write-Host ( " RevisionNumber : " + $objUpdate.Identity.RevisionNumber ) Write-Host ( " InstallationBehavior : " + "CanRequestUserInput=" + $objUpdate.InstallationBehavior.CanRequestUserInput + ", Impact=" + $objUpdate.InstallationBehavior.Impact + ", RebootBehavior=" + $objUpdate.InstallationBehavior.RebootBehavior + ", RequiresNetworkConnectivity=" + $objUpdate.InstallationBehavior.RequiresNetworkConnectivity ) $objUpdate } UpdateID : {f2e6e529-6ad9-4963-82c7-350cafdde54f} RevisionNumber : 2 InstallationBehavior : CanRequestUserInput=True, Impact=0, RebootBehavior=2, RequiresNetworkConnectivity=False Title : Intel Corporation - Storage Controller - Intel(R) 8 Series/C220 Chipset Family SATA AHCI Controller AutoSelectOnWebSites : False BundledUpdates : System.__ComObject CanRequireSource : False Categories : System.__ComObject Deadline : DeltaCompressedContentAvailable : False DeltaCompressedContentPreferred : True Description : Intel Corporation Storage Controller software update released in July, 2015 EulaAccepted : True EulaText : HandlerID : hxxp://schemas.microsoft.com/msus/2002/12/UpdateHandlers/WindowsDriver Identity : System.__ComObject Image : InstallationBehavior : System.__ComObject IsBeta : False IsDownloaded : False IsHidden : False IsInstalled : False IsMandatory : False IsUninstallable : False Languages : System.__ComObject LastDeploymentChangeTime : 25/08/2018 00:00:00 MaxDownloadSize : 9077123 MinDownloadSize : 0 MoreInfoUrls : System.__ComObject MsrcSeverity : RecommendedCpuSpeed : 0 RecommendedHardDiskSpace : 0 RecommendedMemory : 0 ReleaseNotes : SecurityBulletinIDs : System.__ComObject SupersededUpdateIDs : System.__ComObject SupportUrl : hxxp://support.microsoft.com/select/?target=hub Type : 2 UninstallationNotes : UninstallationBehavior : UninstallationSteps : System.__ComObject KBArticleIDs : System.__ComObject DeploymentAction : 4 DownloadPriority : 2 DownloadContents : System.__ComObject DriverClass : Storage DriverHardwareID : pci\ven_8086&dev_8c02&subsys_18e9103c DriverManufacturer : Intel Corporation DriverModel : Intel(R) 8 Series/C220 Chipset Family SATA AHCI Controller DriverProvider : Intel Corporation DriverVerDate : 13/07/2015 00:00:00 DeviceProblemNumber : 0 DeviceStatus : 25165834 RebootRequired : False IsPresent : False CveIDs : System.__ComObject BrowseOnly : False WindowsDriverUpdateEntries : System.__ComObject PerUser : False AutoSelection : 1 AutoDownload : 2 UpdateID : {98125a04-378a-4142-b423-b4394b560dac} RevisionNumber : 2 InstallationBehavior : CanRequestUserInput=True, Impact=0, RebootBehavior=2, RequiresNetworkConnectivity=False Title : Realtek Semiconductor Corp. - MEDIA - 12/19/2017 12:00:00 AM - 6.0.1.8328 AutoSelectOnWebSites : False BundledUpdates : System.__ComObject CanRequireSource : False Categories : System.__ComObject Deadline : DeltaCompressedContentAvailable : False DeltaCompressedContentPreferred : True Description : Realtek Semiconductor Corp. MEDIA driver update released in December 2017 EulaAccepted : True EulaText : HandlerID : hxxp://schemas.microsoft.com/msus/2002/12/UpdateHandlers/WindowsDriver Identity : System.__ComObject Image : InstallationBehavior : System.__ComObject IsBeta : False IsDownloaded : False IsHidden : False IsInstalled : False IsMandatory : False IsUninstallable : False Languages : System.__ComObject LastDeploymentChangeTime : 27/08/2018 00:00:00 MaxDownloadSize : 139334801 MinDownloadSize : 0 MoreInfoUrls : System.__ComObject MsrcSeverity : RecommendedCpuSpeed : 0 RecommendedHardDiskSpace : 0 RecommendedMemory : 0 ReleaseNotes : SecurityBulletinIDs : System.__ComObject SupersededUpdateIDs : System.__ComObject SupportUrl : hxxp://support.microsoft.com/select/?target=hub Type : 2 UninstallationNotes : UninstallationBehavior : UninstallationSteps : System.__ComObject KBArticleIDs : System.__ComObject DeploymentAction : 4 DownloadPriority : 2 DownloadContents : System.__ComObject DriverClass : Sound DriverHardwareID : hdaudio\func_01&ven_10ec&dev_0221&subsys_103c18e9 DriverManufacturer : Realtek DriverModel : Realtek High Definition Audio DriverProvider : Realtek Semiconductor Corp. DriverVerDate : 19/12/2017 00:00:00 DeviceProblemNumber : 0 DeviceStatus : 25174026 RebootRequired : False IsPresent : False CveIDs : System.__ComObject BrowseOnly : False WindowsDriverUpdateEntries : System.__ComObject PerUser : False AutoSelection : 1 AutoDownload : 2 UpdateID : {3caa73f7-9e5c-4838-b423-f12ef6743e76} RevisionNumber : 2 InstallationBehavior : CanRequestUserInput=True, Impact=0, RebootBehavior=2, RequiresNetworkConnectivity=False Title : Dell Inc. - Monitor, Other hardware - DELL E1913S (Analog) AutoSelectOnWebSites : False BundledUpdates : System.__ComObject CanRequireSource : False Categories : System.__ComObject Deadline : DeltaCompressedContentAvailable : False DeltaCompressedContentPreferred : True Description : Dell Inc. Monitor, Other hardware software update released in July, 2013 EulaAccepted : True EulaText : HandlerID : hxxp://schemas.microsoft.com/msus/2002/12/UpdateHandlers/WindowsDriver Identity : System.__ComObject Image : InstallationBehavior : System.__ComObject IsBeta : False IsDownloaded : False IsHidden : False IsInstalled : False IsMandatory : False IsUninstallable : False Languages : System.__ComObject LastDeploymentChangeTime : 12/09/2018 00:00:00 MaxDownloadSize : 24856 MinDownloadSize : 0 MoreInfoUrls : System.__ComObject MsrcSeverity : RecommendedCpuSpeed : 0 RecommendedHardDiskSpace : 0 RecommendedMemory : 0 ReleaseNotes : SecurityBulletinIDs : System.__ComObject SupersededUpdateIDs : System.__ComObject SupportUrl : hxxp://support.microsoft.com/select/?target=hub Type : 2 UninstallationNotes : UninstallationBehavior : UninstallationSteps : System.__ComObject KBArticleIDs : System.__ComObject DeploymentAction : 4 DownloadPriority : 2 DownloadContents : System.__ComObject DriverClass : OtherHardware DriverHardwareID : monitor\deld050 DriverManufacturer : Dell Inc. DriverModel : DELL E1913S (Analog) DriverProvider : Dell Inc. DriverVerDate : 12/07/2013 00:00:00 DeviceProblemNumber : 0 DeviceStatus : 25190410 RebootRequired : False IsPresent : False CveIDs : System.__ComObject BrowseOnly : False WindowsDriverUpdateEntries : System.__ComObject PerUser : False AutoSelection : 1 AutoDownload : 2 UpdateID : {9c87c563-85d3-4637-b4b1-06b2d546b83e} RevisionNumber : 2 InstallationBehavior : CanRequestUserInput=True, Impact=0, RebootBehavior=2, RequiresNetworkConnectivity=False Title : Dell Inc. - Bus Controllers and Ports, Display - Dell P2210H(Digital) AutoSelectOnWebSites : False BundledUpdates : System.__ComObject CanRequireSource : False Categories : System.__ComObject Deadline : DeltaCompressedContentAvailable : False DeltaCompressedContentPreferred : True Description : Dell Inc. Bus Controllers and Ports, Display software update released in May, 2009 EulaAccepted : True EulaText : HandlerID : hxxp://schemas.microsoft.com/msus/2002/12/UpdateHandlers/WindowsDriver Identity : System.__ComObject Image : InstallationBehavior : System.__ComObject IsBeta : False IsDownloaded : False IsHidden : False IsInstalled : False IsMandatory : False IsUninstallable : False Languages : System.__ComObject LastDeploymentChangeTime : 14/09/2018 00:00:00 MaxDownloadSize : 23961 MinDownloadSize : 0 MoreInfoUrls : System.__ComObject MsrcSeverity : RecommendedCpuSpeed : 0 RecommendedHardDiskSpace : 0 RecommendedMemory : 0 ReleaseNotes : SecurityBulletinIDs : System.__ComObject SupersededUpdateIDs : System.__ComObject SupportUrl : hxxp://support.microsoft.com/select/?target=hub Type : 2 UninstallationNotes : UninstallationBehavior : System.__ComObject UninstallationSteps : System.__ComObject KBArticleIDs : System.__ComObject DeploymentAction : 4 DownloadPriority : 2 DownloadContents : System.__ComObject DriverClass : OtherHardware DriverHardwareID : monitor\deld025 DriverManufacturer : Dell Inc. DriverModel : Dell P2210H(Digital) DriverProvider : Dell Inc. DriverVerDate : 21/05/2009 00:00:00 DeviceProblemNumber : 0 DeviceStatus : 25190410 RebootRequired : False IsPresent : False CveIDs : System.__ComObject BrowseOnly : False WindowsDriverUpdateEntries : System.__ComObject PerUser : False AutoSelection : 1 AutoDownload : 2 UpdateID : {15733374-4870-4bd3-9183-e0115ae41b35} RevisionNumber : 1 InstallationBehavior : CanRequestUserInput=True, Impact=0, RebootBehavior=2, RequiresNetworkConnectivity=False Title : Realtek - Net - 12/6/2018 12:00:00 AM - 10.32.1206.2018 AutoSelectOnWebSites : False BundledUpdates : System.__ComObject CanRequireSource : False Categories : System.__ComObject Deadline : DeltaCompressedContentAvailable : False DeltaCompressedContentPreferred : True Description : Realtek Net driver update released in December 2018 EulaAccepted : True EulaText : HandlerID : hxxp://schemas.microsoft.com/msus/2002/12/UpdateHandlers/WindowsDriver Identity : System.__ComObject Image : InstallationBehavior : System.__ComObject IsBeta : False IsDownloaded : False IsHidden : False IsInstalled : False IsMandatory : False IsUninstallable : False Languages : System.__ComObject LastDeploymentChangeTime : 04/06/2019 00:00:00 MaxDownloadSize : 443089 MinDownloadSize : 0 MoreInfoUrls : System.__ComObject MsrcSeverity : RecommendedCpuSpeed : 0 RecommendedHardDiskSpace : 0 RecommendedMemory : 0 ReleaseNotes : SecurityBulletinIDs : System.__ComObject SupersededUpdateIDs : System.__ComObject SupportUrl : hxxp://support.microsoft.com/select/?target=hub Type : 2 UninstallationNotes : UninstallationBehavior : System.__ComObject UninstallationSteps : System.__ComObject KBArticleIDs : System.__ComObject DeploymentAction : 4 DownloadPriority : 2 DownloadContents : System.__ComObject DriverClass : Networking DriverHardwareID : pci\ven_10ec&dev_8168&subsys_18e9103c&rev_0c DriverManufacturer : Realtek DriverModel : Realtek PCIe GbE Family Controller DriverProvider : Realtek DriverVerDate : 06/12/2018 00:00:00 DeviceProblemNumber : 0 DeviceStatus : 25174026 RebootRequired : False IsPresent : False CveIDs : System.__ComObject BrowseOnly : False WindowsDriverUpdateEntries : System.__ComObject PerUser : False AutoSelection : 1 AutoDownload : 2

Another example

Definitely something malfunctioning here - not sure if its windows or ESET or a bit of both

yes the ESET built in policy has that setting turned off

There is no notification on the client - i am seeing the notification in the management console only This is probably due to me applying the "reduced interaction" proifile to the clients Is there another way to bring this up from the eset antivirus app on the client

Ive narrowed the issue down to OPTIONAL DRIVER UPDATES even though eset is set to only notify about Recommended Updates And there are NO recommended updates to install on the computers... I get this alert... Going into optional updates then driver updates and installing all the optional drivers does clear the alert... So how do i go about IDing which is the problematic update and why its reporting to ESET that its a recommended security update when it doesn't appear in windows that way ?

I just want to hide/disable these 2 specific messagase for this specific computer from showing up in the Management Console In my mind a permanently red alert is less useful than no alert as it is masking any other potential issues from being obvious straight away. Im working towards a console with no Alerts showing so that i can more easily spot when there is a real issue. I want to be able to check my dashboard and instantly see if theres anything to investigate. So his computer being red permanently is of no use. He works with SSL certs etc on a regular basis and ESETS handling of SSL stuff gets in his way.

Hi I have created a policy for one of our users (a developer) who wanted the HTTP & HTTPS Scanners disabled. The problem is with this policy assigned to his computer it then has 2 permanent Alerts even though its a result of my manual action. Is there a way to disable these two scanners without creating the permanent alerts.

So is there a log file of what is provided by Windows to Endpoint ???