Jump to content

Operating System Updates Available (BUT THEY ARE NOT)


Recommended Posts

Hi,

I have this Alert against nearly all my computers/laptops

Operating system updates available  There are operating system updates available for your computer. They should be installed to ensure protection. Security notification Security product Other June 20, 2022 09:37:12 Warning

I have run ALL windows updates against the computer from the computer end, from the ESET Management Console with and without all the options such as accepting EULA and Rebooting etc etc.

No matter what I do the best i can get is after a reboot the alert goes away for a short time then i check again an hour later and its back...

How do you find out exactly what this update is ???

and How do you stop this from happening ???

A system that gives you false positive warning on 90% of your computers is really useless as I cannot tell if there's really anything to action or not without checking every computer manually anyway.

 

Anyone got any help they can give please ?

Link to comment
Share on other sites

  • Administrators

The list of available Windows updates is provided by the operating system and then reported by Endpoint.

Does changing the severity to "recommended updates" or "important updates" make a difference?

image.png

Link to comment
Share on other sites

13 minutes ago, Marcos said:

The list of available Windows updates is provided by the operating system and then reported by Endpoint.

So is there a log file of what is provided by Windows to Endpoint ???

Link to comment
Share on other sites

  • Administrators

Windows only tells if there are updates available. To find out what updates are missing, run this PowerShell script:
 

$searcher = New-Object -ComObject Microsoft.Update.Searcher

$objSearchResult = $Searcher.Search("IsInstalled=0")
foreach($objUpdate in $objSearchResult.Updates)
{
    $objUpdate
}

 

Link to comment
Share on other sites

Ive narrowed the issue down to OPTIONAL DRIVER UPDATES

even though eset is set to only notify about Recommended Updates

image.thumb.png.abd812d8f540f2e56d6775c3c637b688.png

And there are NO recommended updates to install on the computers... I get this alert...    Going into optional updates then driver updates and installing all the optional drivers does clear the alert...

So how do i go about IDing which is the problematic update and why its reporting to ESET that its a recommended security update when it doesn't appear in windows that way ?

Link to comment
Share on other sites

There is no notification on the client - i am seeing the notification in the management console only

This is probably due to me applying the "reduced interaction" proifile to the clients

Is there another way to bring this up from the eset antivirus app on the client

Link to comment
Share on other sites

  • Administrators

Looks as if Windows reported the optional updates as recommended. Please provide the output of running this script, you can upload it as a file.

$searcher = New-Object -ComObject Microsoft.Update.Searcher
$objSearchResult = $Searcher.Search("IsInstalled=0")
foreach($objUpdate in $objSearchResult.Updates)
{
	Write-Host ( "                       UpdateID : {" + $objUpdate.Identity.UpdateID + "}" )
	Write-Host ( "                 RevisionNumber : " + $objUpdate.Identity.RevisionNumber )
	Write-Host ( "           InstallationBehavior : " + "CanRequestUserInput=" + $objUpdate.InstallationBehavior.CanRequestUserInput + ", Impact=" + $objUpdate.InstallationBehavior.Impact + ", RebootBehavior=" + $objUpdate.InstallationBehavior.RebootBehavior + ", RequiresNetworkConnectivity=" + $objUpdate.InstallationBehavior.RequiresNetworkConnectivity )
	$objUpdate
}

 

Link to comment
Share on other sites

heres the output from the PC on that second example

Funny how windows knows they are not recommended and displays them in the optiponal section though isnt it ?

 

PS C:\Users\royadmin> $searcher = New-Object -ComObject Microsoft.Update.Searcher
$objSearchResult = $Searcher.Search("IsInstalled=0")
foreach($objUpdate in $objSearchResult.Updates)
{
	Write-Host ( "                       UpdateID : {" + $objUpdate.Identity.UpdateID + "}" )
	Write-Host ( "                 RevisionNumber : " + $objUpdate.Identity.RevisionNumber )
	Write-Host ( "           InstallationBehavior : " + "CanRequestUserInput=" + $objUpdate.InstallationBehavior.CanRequestUserInput + ", Impact=" + $objUpdate.InstallationBehavior.Impact + ", RebootBehavior=" + $objUpdate.InstallationBehavior.RebootBehavior + ", RequiresNetworkConnectivity=" + $objUpdate.InstallationBehavior.RequiresNetworkConnectivity )
	$objUpdate
}
                       UpdateID : {f2e6e529-6ad9-4963-82c7-350cafdde54f}
                 RevisionNumber : 2
           InstallationBehavior : CanRequestUserInput=True, Impact=0, RebootBehavior=2, RequiresNetworkConnectivity=False


Title                           : Intel Corporation - Storage Controller - Intel(R) 8 Series/C220 Chipset Family SATA AHCI Controller
AutoSelectOnWebSites            : False
BundledUpdates                  : System.__ComObject
CanRequireSource                : False
Categories                      : System.__ComObject
Deadline                        : 
DeltaCompressedContentAvailable : False
DeltaCompressedContentPreferred : True
Description                     : Intel Corporation Storage Controller software update released in July, 2015
EulaAccepted                    : True
EulaText                        : 
HandlerID                       : hxxp://schemas.microsoft.com/msus/2002/12/UpdateHandlers/WindowsDriver
Identity                        : System.__ComObject
Image                           : 
InstallationBehavior            : System.__ComObject
IsBeta                          : False
IsDownloaded                    : False
IsHidden                        : False
IsInstalled                     : False
IsMandatory                     : False
IsUninstallable                 : False
Languages                       : System.__ComObject
LastDeploymentChangeTime        : 25/08/2018 00:00:00
MaxDownloadSize                 : 9077123
MinDownloadSize                 : 0
MoreInfoUrls                    : System.__ComObject
MsrcSeverity                    : 
RecommendedCpuSpeed             : 0
RecommendedHardDiskSpace        : 0
RecommendedMemory               : 0
ReleaseNotes                    : 
SecurityBulletinIDs             : System.__ComObject
SupersededUpdateIDs             : System.__ComObject
SupportUrl                      : hxxp://support.microsoft.com/select/?target=hub
Type                            : 2
UninstallationNotes             : 
UninstallationBehavior          : 
UninstallationSteps             : System.__ComObject
KBArticleIDs                    : System.__ComObject
DeploymentAction                : 4
DownloadPriority                : 2
DownloadContents                : System.__ComObject
DriverClass                     : Storage
DriverHardwareID                : pci\ven_8086&dev_8c02&subsys_18e9103c
DriverManufacturer              : Intel Corporation
DriverModel                     : Intel(R) 8 Series/C220 Chipset Family SATA AHCI Controller
DriverProvider                  : Intel Corporation
DriverVerDate                   : 13/07/2015 00:00:00
DeviceProblemNumber             : 0
DeviceStatus                    : 25165834
RebootRequired                  : False
IsPresent                       : False
CveIDs                          : System.__ComObject
BrowseOnly                      : False
WindowsDriverUpdateEntries      : System.__ComObject
PerUser                         : False
AutoSelection                   : 1
AutoDownload                    : 2

                       UpdateID : {98125a04-378a-4142-b423-b4394b560dac}
                 RevisionNumber : 2
           InstallationBehavior : CanRequestUserInput=True, Impact=0, RebootBehavior=2, RequiresNetworkConnectivity=False
Title                           : Realtek Semiconductor Corp. - MEDIA - 12/19/2017 12:00:00 AM - 6.0.1.8328
AutoSelectOnWebSites            : False
BundledUpdates                  : System.__ComObject
CanRequireSource                : False
Categories                      : System.__ComObject
Deadline                        : 
DeltaCompressedContentAvailable : False
DeltaCompressedContentPreferred : True
Description                     : Realtek Semiconductor Corp. MEDIA  driver update released in  December 2017
EulaAccepted                    : True
EulaText                        : 
HandlerID                       : hxxp://schemas.microsoft.com/msus/2002/12/UpdateHandlers/WindowsDriver
Identity                        : System.__ComObject
Image                           : 
InstallationBehavior            : System.__ComObject
IsBeta                          : False
IsDownloaded                    : False
IsHidden                        : False
IsInstalled                     : False
IsMandatory                     : False
IsUninstallable                 : False
Languages                       : System.__ComObject
LastDeploymentChangeTime        : 27/08/2018 00:00:00
MaxDownloadSize                 : 139334801
MinDownloadSize                 : 0
MoreInfoUrls                    : System.__ComObject
MsrcSeverity                    : 
RecommendedCpuSpeed             : 0
RecommendedHardDiskSpace        : 0
RecommendedMemory               : 0
ReleaseNotes                    : 
SecurityBulletinIDs             : System.__ComObject
SupersededUpdateIDs             : System.__ComObject
SupportUrl                      : hxxp://support.microsoft.com/select/?target=hub
Type                            : 2
UninstallationNotes             : 
UninstallationBehavior          : 
UninstallationSteps             : System.__ComObject
KBArticleIDs                    : System.__ComObject
DeploymentAction                : 4
DownloadPriority                : 2
DownloadContents                : System.__ComObject
DriverClass                     : Sound
DriverHardwareID                : hdaudio\func_01&ven_10ec&dev_0221&subsys_103c18e9
DriverManufacturer              : Realtek
DriverModel                     : Realtek High Definition Audio
DriverProvider                  : Realtek Semiconductor Corp.
DriverVerDate                   : 19/12/2017 00:00:00
DeviceProblemNumber             : 0
DeviceStatus                    : 25174026
RebootRequired                  : False
IsPresent                       : False
CveIDs                          : System.__ComObject
BrowseOnly                      : False
WindowsDriverUpdateEntries      : System.__ComObject
PerUser                         : False
AutoSelection                   : 1
AutoDownload                    : 2

                       UpdateID : {3caa73f7-9e5c-4838-b423-f12ef6743e76}
                 RevisionNumber : 2
           InstallationBehavior : CanRequestUserInput=True, Impact=0, RebootBehavior=2, RequiresNetworkConnectivity=False
Title                           : Dell Inc. - Monitor, Other hardware - DELL E1913S (Analog)
AutoSelectOnWebSites            : False
BundledUpdates                  : System.__ComObject
CanRequireSource                : False
Categories                      : System.__ComObject
Deadline                        : 
DeltaCompressedContentAvailable : False
DeltaCompressedContentPreferred : True
Description                     : Dell Inc. Monitor, Other hardware software update released in July, 2013
EulaAccepted                    : True
EulaText                        : 
HandlerID                       : hxxp://schemas.microsoft.com/msus/2002/12/UpdateHandlers/WindowsDriver
Identity                        : System.__ComObject
Image                           : 
InstallationBehavior            : System.__ComObject
IsBeta                          : False
IsDownloaded                    : False
IsHidden                        : False
IsInstalled                     : False
IsMandatory                     : False
IsUninstallable                 : False
Languages                       : System.__ComObject
LastDeploymentChangeTime        : 12/09/2018 00:00:00
MaxDownloadSize                 : 24856
MinDownloadSize                 : 0
MoreInfoUrls                    : System.__ComObject
MsrcSeverity                    : 
RecommendedCpuSpeed             : 0
RecommendedHardDiskSpace        : 0
RecommendedMemory               : 0
ReleaseNotes                    : 
SecurityBulletinIDs             : System.__ComObject
SupersededUpdateIDs             : System.__ComObject
SupportUrl                      : hxxp://support.microsoft.com/select/?target=hub
Type                            : 2
UninstallationNotes             : 
UninstallationBehavior          : 
UninstallationSteps             : System.__ComObject
KBArticleIDs                    : System.__ComObject
DeploymentAction                : 4
DownloadPriority                : 2
DownloadContents                : System.__ComObject
DriverClass                     : OtherHardware
DriverHardwareID                : monitor\deld050
DriverManufacturer              : Dell Inc.
DriverModel                     : DELL E1913S (Analog)
DriverProvider                  : Dell Inc.
DriverVerDate                   : 12/07/2013 00:00:00
DeviceProblemNumber             : 0
DeviceStatus                    : 25190410
RebootRequired                  : False
IsPresent                       : False
CveIDs                          : System.__ComObject
BrowseOnly                      : False
WindowsDriverUpdateEntries      : System.__ComObject
PerUser                         : False
AutoSelection                   : 1
AutoDownload                    : 2

                       UpdateID : {9c87c563-85d3-4637-b4b1-06b2d546b83e}
                 RevisionNumber : 2
           InstallationBehavior : CanRequestUserInput=True, Impact=0, RebootBehavior=2, RequiresNetworkConnectivity=False
Title                           : Dell Inc. - Bus Controllers and Ports, Display - Dell P2210H(Digital)
AutoSelectOnWebSites            : False
BundledUpdates                  : System.__ComObject
CanRequireSource                : False
Categories                      : System.__ComObject
Deadline                        : 
DeltaCompressedContentAvailable : False
DeltaCompressedContentPreferred : True
Description                     : Dell Inc. Bus Controllers and Ports, Display software update released in May, 2009
EulaAccepted                    : True
EulaText                        : 
HandlerID                       : hxxp://schemas.microsoft.com/msus/2002/12/UpdateHandlers/WindowsDriver
Identity                        : System.__ComObject
Image                           : 
InstallationBehavior            : System.__ComObject
IsBeta                          : False
IsDownloaded                    : False
IsHidden                        : False
IsInstalled                     : False
IsMandatory                     : False
IsUninstallable                 : False
Languages                       : System.__ComObject
LastDeploymentChangeTime        : 14/09/2018 00:00:00
MaxDownloadSize                 : 23961
MinDownloadSize                 : 0
MoreInfoUrls                    : System.__ComObject
MsrcSeverity                    : 
RecommendedCpuSpeed             : 0
RecommendedHardDiskSpace        : 0
RecommendedMemory               : 0
ReleaseNotes                    : 
SecurityBulletinIDs             : System.__ComObject
SupersededUpdateIDs             : System.__ComObject
SupportUrl                      : hxxp://support.microsoft.com/select/?target=hub
Type                            : 2
UninstallationNotes             : 
UninstallationBehavior          : System.__ComObject
UninstallationSteps             : System.__ComObject
KBArticleIDs                    : System.__ComObject
DeploymentAction                : 4
DownloadPriority                : 2
DownloadContents                : System.__ComObject
DriverClass                     : OtherHardware
DriverHardwareID                : monitor\deld025
DriverManufacturer              : Dell Inc.
DriverModel                     : Dell P2210H(Digital)
DriverProvider                  : Dell Inc.
DriverVerDate                   : 21/05/2009 00:00:00
DeviceProblemNumber             : 0
DeviceStatus                    : 25190410
RebootRequired                  : False
IsPresent                       : False
CveIDs                          : System.__ComObject
BrowseOnly                      : False
WindowsDriverUpdateEntries      : System.__ComObject
PerUser                         : False
AutoSelection                   : 1
AutoDownload                    : 2

                       UpdateID : {15733374-4870-4bd3-9183-e0115ae41b35}
                 RevisionNumber : 1
           InstallationBehavior : CanRequestUserInput=True, Impact=0, RebootBehavior=2, RequiresNetworkConnectivity=False
Title                           : Realtek - Net - 12/6/2018 12:00:00 AM - 10.32.1206.2018
AutoSelectOnWebSites            : False
BundledUpdates                  : System.__ComObject
CanRequireSource                : False
Categories                      : System.__ComObject
Deadline                        : 
DeltaCompressedContentAvailable : False
DeltaCompressedContentPreferred : True
Description                     : Realtek Net  driver update released in  December 2018
EulaAccepted                    : True
EulaText                        : 
HandlerID                       : hxxp://schemas.microsoft.com/msus/2002/12/UpdateHandlers/WindowsDriver
Identity                        : System.__ComObject
Image                           : 
InstallationBehavior            : System.__ComObject
IsBeta                          : False
IsDownloaded                    : False
IsHidden                        : False
IsInstalled                     : False
IsMandatory                     : False
IsUninstallable                 : False
Languages                       : System.__ComObject
LastDeploymentChangeTime        : 04/06/2019 00:00:00
MaxDownloadSize                 : 443089
MinDownloadSize                 : 0
MoreInfoUrls                    : System.__ComObject
MsrcSeverity                    : 
RecommendedCpuSpeed             : 0
RecommendedHardDiskSpace        : 0
RecommendedMemory               : 0
ReleaseNotes                    : 
SecurityBulletinIDs             : System.__ComObject
SupersededUpdateIDs             : System.__ComObject
SupportUrl                      : hxxp://support.microsoft.com/select/?target=hub
Type                            : 2
UninstallationNotes             : 
UninstallationBehavior          : System.__ComObject
UninstallationSteps             : System.__ComObject
KBArticleIDs                    : System.__ComObject
DeploymentAction                : 4
DownloadPriority                : 2
DownloadContents                : System.__ComObject
DriverClass                     : Networking
DriverHardwareID                : pci\ven_10ec&dev_8168&subsys_18e9103c&rev_0c
DriverManufacturer              : Realtek
DriverModel                     : Realtek PCIe GbE Family Controller
DriverProvider                  : Realtek
DriverVerDate                   : 06/12/2018 00:00:00
DeviceProblemNumber             : 0
DeviceStatus                    : 25174026
RebootRequired                  : False
IsPresent                       : False
CveIDs                          : System.__ComObject
BrowseOnly                      : False
WindowsDriverUpdateEntries      : System.__ComObject
PerUser                         : False
AutoSelection                   : 1
AutoDownload                    : 2

 

Link to comment
Share on other sites

Hi,

Is there an update on this?

I assume there is an actual issue with the ESET software? seeing as no one came back after I posted the output above saying it was windows doing something wrong.

 

Link to comment
Share on other sites

  • Administrators

I was told that the issue was reported to Microsoft months ago without any solution from them so far.

Link to comment
Share on other sites

Can I ask what has been reported to microsoft ?

I don't know much about this API but a quick look at the documentation shows me that the "DeploymentAction" field which is 4 on all the updates in my example...    4 = "Optional Installation"

Also the "Type" field which are all 2 in my above example...    2 = "Driver"

So to me these updates are flagged as optional driver updates so the fact eset is listing them as recommended seems to be a bug your end ?

apologies if im mistaken but it looks like microsoft hasn't responded as there isn't an issue...

What criteria does your software use to determine its a recommended update ?

Link to comment
Share on other sites

Join the conversation

You can post now and register later. If you have an account, sign in now to post with your account.
Note: Your post will require moderator approval before it will be visible.

Guest
Reply to this topic...

×   Pasted as rich text.   Paste as plain text instead

  Only 75 emoji are allowed.

×   Your link has been automatically embedded.   Display as a link instead

×   Your previous content has been restored.   Clear editor

×   You cannot paste images directly. Upload or insert images from URL.

 Share

  • Recently Browsing   0 members

    • No registered users viewing this page.
×
×
  • Create New...