Operating System Updates Available (BUT THEY ARE NOT)

[roycruse 0]

Hi,

I have this Alert against nearly all my computers/laptops

Operating system updates available

There are operating system updates available for your computer. They should be installed to ensure protection.

Security notification

Security product

Other

June 20, 2022 09:37:12

Warning

I have run ALL windows updates against the computer from the computer end, from the ESET Management Console with and without all the options such as accepting EULA and Rebooting etc etc.

No matter what I do the best i can get is after a reboot the alert goes away for a short time then i check again an hour later and its back...

How do you find out exactly what this update is ???

and How do you stop this from happening ???

A system that gives you false positive warning on 90% of your computers is really useless as I cannot tell if there's really anything to action or not without checking every computer manually anyway.

 

Anyone got any help they can give please ?

[Marcos 5,070]

The list of available Windows updates is provided by the operating system and then reported by Endpoint.

Does changing the severity to "recommended updates" or "important updates" make a difference?

[roycruse 0]

13 minutes ago, Marcos said:

The list of available Windows updates is provided by the operating system and then reported by Endpoint.

So is there a log file of what is provided by Windows to Endpoint ???

[Marcos 5,070]

Windows only tells if there are updates available. To find out what updates are missing, run this PowerShell script:
 

$searcher = New-Object -ComObject Microsoft.Update.Searcher

$objSearchResult = $Searcher.Search("IsInstalled=0")
foreach($objUpdate in $objSearchResult.Updates)
{
    $objUpdate
}

 

[roycruse 0]

Ive narrowed the issue down to OPTIONAL DRIVER UPDATES

even though eset is set to only notify about Recommended Updates

And there are NO recommended updates to install on the computers... I get this alert...    Going into optional updates then driver updates and installing all the optional drivers does clear the alert...

So how do i go about IDing which is the problematic update and why its reporting to ESET that its a recommended security update when it doesn't appear in windows that way ?

[Marcos 5,070]

Please provide a screenshot of the System updates window displayed after clicking "More info" under the notification on the client:

[roycruse 0]

There is no notification on the client - i am seeing the notification in the management console only

This is probably due to me applying the "reduced interaction" proifile to the clients

Is there another way to bring this up from the eset antivirus app on the client

[Marcos 5,070]

Couldn't it be that you have applied a policy with these settings?

[roycruse 0]

yes the ESET built in policy 

has that setting turned off

[Marcos 5,070]

Please temporarily apply a policy that will enforce displaying the notification on the client so that you could take a screenshot of the available updates.

[roycruse 0]

 

[roycruse 0]

Definitely something malfunctioning here - not sure if its windows or ESET or a bit of both 

[Marcos 5,070]

Looks as if Windows reported the optional updates as recommended. Please provide the output of running this script, you can upload it as a file.

$searcher = New-Object -ComObject Microsoft.Update.Searcher
$objSearchResult = $Searcher.Search("IsInstalled=0")
foreach($objUpdate in $objSearchResult.Updates)
{
	Write-Host ( "                       UpdateID : {" + $objUpdate.Identity.UpdateID + "}" )
	Write-Host ( "                 RevisionNumber : " + $objUpdate.Identity.RevisionNumber )
	Write-Host ( "           InstallationBehavior : " + "CanRequestUserInput=" + $objUpdate.InstallationBehavior.CanRequestUserInput + ", Impact=" + $objUpdate.InstallationBehavior.Impact + ", RebootBehavior=" + $objUpdate.InstallationBehavior.RebootBehavior + ", RequiresNetworkConnectivity=" + $objUpdate.InstallationBehavior.RequiresNetworkConnectivity )
	$objUpdate
}

 

[roycruse 0]

Another example

 

 

 

 

[roycruse 0]

heres the output from the PC on that second example

Funny how windows knows they are not recommended and displays them in the optiponal section though isnt it ?

 

PS C:\Users\royadmin> $searcher = New-Object -ComObject Microsoft.Update.Searcher
$objSearchResult = $Searcher.Search("IsInstalled=0")
foreach($objUpdate in $objSearchResult.Updates)
{
	Write-Host ( "                       UpdateID : {" + $objUpdate.Identity.UpdateID + "}" )
	Write-Host ( "                 RevisionNumber : " + $objUpdate.Identity.RevisionNumber )
	Write-Host ( "           InstallationBehavior : " + "CanRequestUserInput=" + $objUpdate.InstallationBehavior.CanRequestUserInput + ", Impact=" + $objUpdate.InstallationBehavior.Impact + ", RebootBehavior=" + $objUpdate.InstallationBehavior.RebootBehavior + ", RequiresNetworkConnectivity=" + $objUpdate.InstallationBehavior.RequiresNetworkConnectivity )
	$objUpdate
}
                       UpdateID : {f2e6e529-6ad9-4963-82c7-350cafdde54f}
                 RevisionNumber : 2
           InstallationBehavior : CanRequestUserInput=True, Impact=0, RebootBehavior=2, RequiresNetworkConnectivity=False


Title                           : Intel Corporation - Storage Controller - Intel(R) 8 Series/C220 Chipset Family SATA AHCI Controller
AutoSelectOnWebSites            : False
BundledUpdates                  : System.__ComObject
CanRequireSource                : False
Categories                      : System.__ComObject
Deadline                        : 
DeltaCompressedContentAvailable : False
DeltaCompressedContentPreferred : True
Description                     : Intel Corporation Storage Controller software update released in July, 2015
EulaAccepted                    : True
EulaText                        : 
HandlerID                       : hxxp://schemas.microsoft.com/msus/2002/12/UpdateHandlers/WindowsDriver
Identity                        : System.__ComObject
Image                           : 
InstallationBehavior            : System.__ComObject
IsBeta                          : False
IsDownloaded                    : False
IsHidden                        : False
IsInstalled                     : False
IsMandatory                     : False
IsUninstallable                 : False
Languages                       : System.__ComObject
LastDeploymentChangeTime        : 25/08/2018 00:00:00
MaxDownloadSize                 : 9077123
MinDownloadSize                 : 0
MoreInfoUrls                    : System.__ComObject
MsrcSeverity                    : 
RecommendedCpuSpeed             : 0
RecommendedHardDiskSpace        : 0
RecommendedMemory               : 0
ReleaseNotes                    : 
SecurityBulletinIDs             : System.__ComObject
SupersededUpdateIDs             : System.__ComObject
SupportUrl                      : hxxp://support.microsoft.com/select/?target=hub
Type                            : 2
UninstallationNotes             : 
UninstallationBehavior          : 
UninstallationSteps             : System.__ComObject
KBArticleIDs                    : System.__ComObject
DeploymentAction                : 4
DownloadPriority                : 2
DownloadContents                : System.__ComObject
DriverClass                     : Storage
DriverHardwareID                : pci\ven_8086&dev_8c02&subsys_18e9103c
DriverManufacturer              : Intel Corporation
DriverModel                     : Intel(R) 8 Series/C220 Chipset Family SATA AHCI Controller
DriverProvider                  : Intel Corporation
DriverVerDate                   : 13/07/2015 00:00:00
DeviceProblemNumber             : 0
DeviceStatus                    : 25165834
RebootRequired                  : False
IsPresent                       : False
CveIDs                          : System.__ComObject
BrowseOnly                      : False
WindowsDriverUpdateEntries      : System.__ComObject
PerUser                         : False
AutoSelection                   : 1
AutoDownload                    : 2

                       UpdateID : {98125a04-378a-4142-b423-b4394b560dac}
                 RevisionNumber : 2
           InstallationBehavior : CanRequestUserInput=True, Impact=0, RebootBehavior=2, RequiresNetworkConnectivity=False
Title                           : Realtek Semiconductor Corp. - MEDIA - 12/19/2017 12:00:00 AM - 6.0.1.8328
AutoSelectOnWebSites            : False
BundledUpdates                  : System.__ComObject
CanRequireSource                : False
Categories                      : System.__ComObject
Deadline                        : 
DeltaCompressedContentAvailable : False
DeltaCompressedContentPreferred : True
Description                     : Realtek Semiconductor Corp. MEDIA  driver update released in  December 2017
EulaAccepted                    : True
EulaText                        : 
HandlerID                       : hxxp://schemas.microsoft.com/msus/2002/12/UpdateHandlers/WindowsDriver
Identity                        : System.__ComObject
Image                           : 
InstallationBehavior            : System.__ComObject
IsBeta                          : False
IsDownloaded                    : False
IsHidden                        : False
IsInstalled                     : False
IsMandatory                     : False
IsUninstallable                 : False
Languages                       : System.__ComObject
LastDeploymentChangeTime        : 27/08/2018 00:00:00
MaxDownloadSize                 : 139334801
MinDownloadSize                 : 0
MoreInfoUrls                    : System.__ComObject
MsrcSeverity                    : 
RecommendedCpuSpeed             : 0
RecommendedHardDiskSpace        : 0
RecommendedMemory               : 0
ReleaseNotes                    : 
SecurityBulletinIDs             : System.__ComObject
SupersededUpdateIDs             : System.__ComObject
SupportUrl                      : hxxp://support.microsoft.com/select/?target=hub
Type                            : 2
UninstallationNotes             : 
UninstallationBehavior          : 
UninstallationSteps             : System.__ComObject
KBArticleIDs                    : System.__ComObject
DeploymentAction                : 4
DownloadPriority                : 2
DownloadContents                : System.__ComObject
DriverClass                     : Sound
DriverHardwareID                : hdaudio\func_01&ven_10ec&dev_0221&subsys_103c18e9
DriverManufacturer              : Realtek
DriverModel                     : Realtek High Definition Audio
DriverProvider                  : Realtek Semiconductor Corp.
DriverVerDate                   : 19/12/2017 00:00:00
DeviceProblemNumber             : 0
DeviceStatus                    : 25174026
RebootRequired                  : False
IsPresent                       : False
CveIDs                          : System.__ComObject
BrowseOnly                      : False
WindowsDriverUpdateEntries      : System.__ComObject
PerUser                         : False
AutoSelection                   : 1
AutoDownload                    : 2

                       UpdateID : {3caa73f7-9e5c-4838-b423-f12ef6743e76}
                 RevisionNumber : 2
           InstallationBehavior : CanRequestUserInput=True, Impact=0, RebootBehavior=2, RequiresNetworkConnectivity=False
Title                           : Dell Inc. - Monitor, Other hardware - DELL E1913S (Analog)
AutoSelectOnWebSites            : False
BundledUpdates                  : System.__ComObject
CanRequireSource                : False
Categories                      : System.__ComObject
Deadline                        : 
DeltaCompressedContentAvailable : False
DeltaCompressedContentPreferred : True
Description                     : Dell Inc. Monitor, Other hardware software update released in July, 2013
EulaAccepted                    : True
EulaText                        : 
HandlerID                       : hxxp://schemas.microsoft.com/msus/2002/12/UpdateHandlers/WindowsDriver
Identity                        : System.__ComObject
Image                           : 
InstallationBehavior            : System.__ComObject
IsBeta                          : False
IsDownloaded                    : False
IsHidden                        : False
IsInstalled                     : False
IsMandatory                     : False
IsUninstallable                 : False
Languages                       : System.__ComObject
LastDeploymentChangeTime        : 12/09/2018 00:00:00
MaxDownloadSize                 : 24856
MinDownloadSize                 : 0
MoreInfoUrls                    : System.__ComObject
MsrcSeverity                    : 
RecommendedCpuSpeed             : 0
RecommendedHardDiskSpace        : 0
RecommendedMemory               : 0
ReleaseNotes                    : 
SecurityBulletinIDs             : System.__ComObject
SupersededUpdateIDs             : System.__ComObject
SupportUrl                      : hxxp://support.microsoft.com/select/?target=hub
Type                            : 2
UninstallationNotes             : 
UninstallationBehavior          : 
UninstallationSteps             : System.__ComObject
KBArticleIDs                    : System.__ComObject
DeploymentAction                : 4
DownloadPriority                : 2
DownloadContents                : System.__ComObject
DriverClass                     : OtherHardware
DriverHardwareID                : monitor\deld050
DriverManufacturer              : Dell Inc.
DriverModel                     : DELL E1913S (Analog)
DriverProvider                  : Dell Inc.
DriverVerDate                   : 12/07/2013 00:00:00
DeviceProblemNumber             : 0
DeviceStatus                    : 25190410
RebootRequired                  : False
IsPresent                       : False
CveIDs                          : System.__ComObject
BrowseOnly                      : False
WindowsDriverUpdateEntries      : System.__ComObject
PerUser                         : False
AutoSelection                   : 1
AutoDownload                    : 2

                       UpdateID : {9c87c563-85d3-4637-b4b1-06b2d546b83e}
                 RevisionNumber : 2
           InstallationBehavior : CanRequestUserInput=True, Impact=0, RebootBehavior=2, RequiresNetworkConnectivity=False
Title                           : Dell Inc. - Bus Controllers and Ports, Display - Dell P2210H(Digital)
AutoSelectOnWebSites            : False
BundledUpdates                  : System.__ComObject
CanRequireSource                : False
Categories                      : System.__ComObject
Deadline                        : 
DeltaCompressedContentAvailable : False
DeltaCompressedContentPreferred : True
Description                     : Dell Inc. Bus Controllers and Ports, Display software update released in May, 2009
EulaAccepted                    : True
EulaText                        : 
HandlerID                       : hxxp://schemas.microsoft.com/msus/2002/12/UpdateHandlers/WindowsDriver
Identity                        : System.__ComObject
Image                           : 
InstallationBehavior            : System.__ComObject
IsBeta                          : False
IsDownloaded                    : False
IsHidden                        : False
IsInstalled                     : False
IsMandatory                     : False
IsUninstallable                 : False
Languages                       : System.__ComObject
LastDeploymentChangeTime        : 14/09/2018 00:00:00
MaxDownloadSize                 : 23961
MinDownloadSize                 : 0
MoreInfoUrls                    : System.__ComObject
MsrcSeverity                    : 
RecommendedCpuSpeed             : 0
RecommendedHardDiskSpace        : 0
RecommendedMemory               : 0
ReleaseNotes                    : 
SecurityBulletinIDs             : System.__ComObject
SupersededUpdateIDs             : System.__ComObject
SupportUrl                      : hxxp://support.microsoft.com/select/?target=hub
Type                            : 2
UninstallationNotes             : 
UninstallationBehavior          : System.__ComObject
UninstallationSteps             : System.__ComObject
KBArticleIDs                    : System.__ComObject
DeploymentAction                : 4
DownloadPriority                : 2
DownloadContents                : System.__ComObject
DriverClass                     : OtherHardware
DriverHardwareID                : monitor\deld025
DriverManufacturer              : Dell Inc.
DriverModel                     : Dell P2210H(Digital)
DriverProvider                  : Dell Inc.
DriverVerDate                   : 21/05/2009 00:00:00
DeviceProblemNumber             : 0
DeviceStatus                    : 25190410
RebootRequired                  : False
IsPresent                       : False
CveIDs                          : System.__ComObject
BrowseOnly                      : False
WindowsDriverUpdateEntries      : System.__ComObject
PerUser                         : False
AutoSelection                   : 1
AutoDownload                    : 2

                       UpdateID : {15733374-4870-4bd3-9183-e0115ae41b35}
                 RevisionNumber : 1
           InstallationBehavior : CanRequestUserInput=True, Impact=0, RebootBehavior=2, RequiresNetworkConnectivity=False
Title                           : Realtek - Net - 12/6/2018 12:00:00 AM - 10.32.1206.2018
AutoSelectOnWebSites            : False
BundledUpdates                  : System.__ComObject
CanRequireSource                : False
Categories                      : System.__ComObject
Deadline                        : 
DeltaCompressedContentAvailable : False
DeltaCompressedContentPreferred : True
Description                     : Realtek Net  driver update released in  December 2018
EulaAccepted                    : True
EulaText                        : 
HandlerID                       : hxxp://schemas.microsoft.com/msus/2002/12/UpdateHandlers/WindowsDriver
Identity                        : System.__ComObject
Image                           : 
InstallationBehavior            : System.__ComObject
IsBeta                          : False
IsDownloaded                    : False
IsHidden                        : False
IsInstalled                     : False
IsMandatory                     : False
IsUninstallable                 : False
Languages                       : System.__ComObject
LastDeploymentChangeTime        : 04/06/2019 00:00:00
MaxDownloadSize                 : 443089
MinDownloadSize                 : 0
MoreInfoUrls                    : System.__ComObject
MsrcSeverity                    : 
RecommendedCpuSpeed             : 0
RecommendedHardDiskSpace        : 0
RecommendedMemory               : 0
ReleaseNotes                    : 
SecurityBulletinIDs             : System.__ComObject
SupersededUpdateIDs             : System.__ComObject
SupportUrl                      : hxxp://support.microsoft.com/select/?target=hub
Type                            : 2
UninstallationNotes             : 
UninstallationBehavior          : System.__ComObject
UninstallationSteps             : System.__ComObject
KBArticleIDs                    : System.__ComObject
DeploymentAction                : 4
DownloadPriority                : 2
DownloadContents                : System.__ComObject
DriverClass                     : Networking
DriverHardwareID                : pci\ven_10ec&dev_8168&subsys_18e9103c&rev_0c
DriverManufacturer              : Realtek
DriverModel                     : Realtek PCIe GbE Family Controller
DriverProvider                  : Realtek
DriverVerDate                   : 06/12/2018 00:00:00
DeviceProblemNumber             : 0
DeviceStatus                    : 25174026
RebootRequired                  : False
IsPresent                       : False
CveIDs                          : System.__ComObject
BrowseOnly                      : False
WindowsDriverUpdateEntries      : System.__ComObject
PerUser                         : False
AutoSelection                   : 1
AutoDownload                    : 2

 

[roycruse 0]

Hi,

Is there an update on this?

I assume there is an actual issue with the ESET software? seeing as no one came back after I posted the output above saying it was windows doing something wrong.

 

[Marcos 5,070]

I was told that the issue was reported to Microsoft months ago without any solution from them so far.

[roycruse 0]

Can I ask what has been reported to microsoft ?

I don't know much about this API but a quick look at the documentation shows me that the "DeploymentAction" field which is 4 on all the updates in my example...    4 = "Optional Installation"

Also the "Type" field which are all 2 in my above example...    2 = "Driver"

So to me these updates are flagged as optional driver updates so the fact eset is listing them as recommended seems to be a bug your end ?

apologies if im mistaken but it looks like microsoft hasn't responded as there isn't an issue...

What criteria does your software use to determine its a recommended update ?

[Marcos 5,070]

We've had a call with Microsoft. Thanks to the information in this topic they understood what the issue was so we hope a proper solution will available in the forthcoming weeks.

[roycruse 0]

45 minutes ago, Marcos said:

We've had a call with Microsoft. Thanks to the information in this topic they understood what the issue was so we hope a proper solution will available in the forthcoming weeks.

This is good news - i look forward to the updated and fixed version  many thanks

[roycruse 0]

Any movement on this...    The windows update warning is worse than useless as it is.

This is especially frustrating seeing as i have given clear examples above on how the existing microsoft api output can clearly distinguish these updates as both "Driver" and "Optional"

so just sitting on your hands waiting for microsoft is not really an excuse when you could implement a fix right now with no changes from microsoft.

 

[Marcos 5,070]

This is Microsoft's thing which we cannot influence and it's their turn now.

A quote by our developer:
"We had a call with Microsoft. It's clear to the person I spoke with what the issue is (thanks to this thread: https://forum.eset.com/topic/32774-operating-system-updates-available-but-they-are-not/), so hopefully within the next few weeks we'll have a proper response with a resolution."

[roycruse 0]

On 6/27/2022 at 1:27 PM, roycruse said:

Can I ask what has been reported to microsoft ?

I don't know much about this API but a quick look at the documentation shows me that the "DeploymentAction" field which is 4 on all the updates in my example...    4 = "Optional Installation"

Also the "Type" field which are all 2 in my above example...    2 = "Driver"

So to me these updates are flagged as optional driver updates so the fact eset is listing them as recommended seems to be a bug your end ?

apologies if im mistaken but it looks like microsoft hasn't responded as there isn't an issue...

What criteria does your software use to determine its a recommended update ?

They say its a microsoft thing....    but no one has commented on this post where I point out clearly that it is easy to identify the updates as "OPTIONAL DRIVER" updates and not recommended updates.     no one has once explained why these fields cannot be used to differentiate the optional from reccomended updates and no one has explained what the error in the api output actually is.   this is all just smoke and mirrors - if theres a genuine error in the api output - just tell me what it is ???????    

Edited September 2, 2022 by roycruse