Jump to content

Operating System Updates Available (BUT THEY ARE NOT)


roycruse
 Share

Recommended Posts

Hi,

I have this Alert against nearly all my computers/laptops

Operating system updates available  There are operating system updates available for your computer. They should be installed to ensure protection. Security notification Security product Other June 20, 2022 09:37:12 Warning

I have run ALL windows updates against the computer from the computer end, from the ESET Management Console with and without all the options such as accepting EULA and Rebooting etc etc.

No matter what I do the best i can get is after a reboot the alert goes away for a short time then i check again an hour later and its back...

How do you find out exactly what this update is ???

and How do you stop this from happening ???

A system that gives you false positive warning on 90% of your computers is really useless as I cannot tell if there's really anything to action or not without checking every computer manually anyway.

 

Anyone got any help they can give please ?

Link to comment
Share on other sites

  • Administrators

The list of available Windows updates is provided by the operating system and then reported by Endpoint.

Does changing the severity to "recommended updates" or "important updates" make a difference?

image.png

Link to comment
Share on other sites

13 minutes ago, Marcos said:

The list of available Windows updates is provided by the operating system and then reported by Endpoint.

So is there a log file of what is provided by Windows to Endpoint ???

Link to comment
Share on other sites

  • Administrators

Windows only tells if there are updates available. To find out what updates are missing, run this PowerShell script:
 

$searcher = New-Object -ComObject Microsoft.Update.Searcher

$objSearchResult = $Searcher.Search("IsInstalled=0")
foreach($objUpdate in $objSearchResult.Updates)
{
    $objUpdate
}

 

Link to comment
Share on other sites

Ive narrowed the issue down to OPTIONAL DRIVER UPDATES

even though eset is set to only notify about Recommended Updates

image.thumb.png.abd812d8f540f2e56d6775c3c637b688.png

And there are NO recommended updates to install on the computers... I get this alert...    Going into optional updates then driver updates and installing all the optional drivers does clear the alert...

So how do i go about IDing which is the problematic update and why its reporting to ESET that its a recommended security update when it doesn't appear in windows that way ?

Link to comment
Share on other sites

  • Administrators

Please provide a screenshot of the System updates window displayed after clicking "More info" under the notification on the client:

image.png

Link to comment
Share on other sites

There is no notification on the client - i am seeing the notification in the management console only

This is probably due to me applying the "reduced interaction" proifile to the clients

Is there another way to bring this up from the eset antivirus app on the client

Link to comment
Share on other sites

  • Administrators

Please temporarily apply a policy that will enforce displaying the notification on the client so that you could take a screenshot of the available updates.

Link to comment
Share on other sites

  • Administrators

Looks as if Windows reported the optional updates as recommended. Please provide the output of running this script, you can upload it as a file.

$searcher = New-Object -ComObject Microsoft.Update.Searcher
$objSearchResult = $Searcher.Search("IsInstalled=0")
foreach($objUpdate in $objSearchResult.Updates)
{
	Write-Host ( "                       UpdateID : {" + $objUpdate.Identity.UpdateID + "}" )
	Write-Host ( "                 RevisionNumber : " + $objUpdate.Identity.RevisionNumber )
	Write-Host ( "           InstallationBehavior : " + "CanRequestUserInput=" + $objUpdate.InstallationBehavior.CanRequestUserInput + ", Impact=" + $objUpdate.InstallationBehavior.Impact + ", RebootBehavior=" + $objUpdate.InstallationBehavior.RebootBehavior + ", RequiresNetworkConnectivity=" + $objUpdate.InstallationBehavior.RequiresNetworkConnectivity )
	$objUpdate
}

 

Link to comment
Share on other sites

heres the output from the PC on that second example

Funny how windows knows they are not recommended and displays them in the optiponal section though isnt it ?

 

PS C:\Users\royadmin> $searcher = New-Object -ComObject Microsoft.Update.Searcher
$objSearchResult = $Searcher.Search("IsInstalled=0")
foreach($objUpdate in $objSearchResult.Updates)
{
	Write-Host ( "                       UpdateID : {" + $objUpdate.Identity.UpdateID + "}" )
	Write-Host ( "                 RevisionNumber : " + $objUpdate.Identity.RevisionNumber )
	Write-Host ( "           InstallationBehavior : " + "CanRequestUserInput=" + $objUpdate.InstallationBehavior.CanRequestUserInput + ", Impact=" + $objUpdate.InstallationBehavior.Impact + ", RebootBehavior=" + $objUpdate.InstallationBehavior.RebootBehavior + ", RequiresNetworkConnectivity=" + $objUpdate.InstallationBehavior.RequiresNetworkConnectivity )
	$objUpdate
}
                       UpdateID : {f2e6e529-6ad9-4963-82c7-350cafdde54f}
                 RevisionNumber : 2
           InstallationBehavior : CanRequestUserInput=True, Impact=0, RebootBehavior=2, RequiresNetworkConnectivity=False


Title                           : Intel Corporation - Storage Controller - Intel(R) 8 Series/C220 Chipset Family SATA AHCI Controller
AutoSelectOnWebSites            : False
BundledUpdates                  : System.__ComObject
CanRequireSource                : False
Categories                      : System.__ComObject
Deadline                        : 
DeltaCompressedContentAvailable : False
DeltaCompressedContentPreferred : True
Description                     : Intel Corporation Storage Controller software update released in July, 2015
EulaAccepted                    : True
EulaText                        : 
HandlerID                       : hxxp://schemas.microsoft.com/msus/2002/12/UpdateHandlers/WindowsDriver
Identity                        : System.__ComObject
Image                           : 
InstallationBehavior            : System.__ComObject
IsBeta                          : False
IsDownloaded                    : False
IsHidden                        : False
IsInstalled                     : False
IsMandatory                     : False
IsUninstallable                 : False
Languages                       : System.__ComObject
LastDeploymentChangeTime        : 25/08/2018 00:00:00
MaxDownloadSize                 : 9077123
MinDownloadSize                 : 0
MoreInfoUrls                    : System.__ComObject
MsrcSeverity                    : 
RecommendedCpuSpeed             : 0
RecommendedHardDiskSpace        : 0
RecommendedMemory               : 0
ReleaseNotes                    : 
SecurityBulletinIDs             : System.__ComObject
SupersededUpdateIDs             : System.__ComObject
SupportUrl                      : hxxp://support.microsoft.com/select/?target=hub
Type                            : 2
UninstallationNotes             : 
UninstallationBehavior          : 
UninstallationSteps             : System.__ComObject
KBArticleIDs                    : System.__ComObject
DeploymentAction                : 4
DownloadPriority                : 2
DownloadContents                : System.__ComObject
DriverClass                     : Storage
DriverHardwareID                : pci\ven_8086&dev_8c02&subsys_18e9103c
DriverManufacturer              : Intel Corporation
DriverModel                     : Intel(R) 8 Series/C220 Chipset Family SATA AHCI Controller
DriverProvider                  : Intel Corporation
DriverVerDate                   : 13/07/2015 00:00:00
DeviceProblemNumber             : 0
DeviceStatus                    : 25165834
RebootRequired                  : False
IsPresent                       : False
CveIDs                          : System.__ComObject
BrowseOnly                      : False
WindowsDriverUpdateEntries      : System.__ComObject
PerUser                         : False
AutoSelection                   : 1
AutoDownload                    : 2

                       UpdateID : {98125a04-378a-4142-b423-b4394b560dac}
                 RevisionNumber : 2
           InstallationBehavior : CanRequestUserInput=True, Impact=0, RebootBehavior=2, RequiresNetworkConnectivity=False
Title                           : Realtek Semiconductor Corp. - MEDIA - 12/19/2017 12:00:00 AM - 6.0.1.8328
AutoSelectOnWebSites            : False
BundledUpdates                  : System.__ComObject
CanRequireSource                : False
Categories                      : System.__ComObject
Deadline                        : 
DeltaCompressedContentAvailable : False
DeltaCompressedContentPreferred : True
Description                     : Realtek Semiconductor Corp. MEDIA  driver update released in  December 2017
EulaAccepted                    : True
EulaText                        : 
HandlerID                       : hxxp://schemas.microsoft.com/msus/2002/12/UpdateHandlers/WindowsDriver
Identity                        : System.__ComObject
Image                           : 
InstallationBehavior            : System.__ComObject
IsBeta                          : False
IsDownloaded                    : False
IsHidden                        : False
IsInstalled                     : False
IsMandatory                     : False
IsUninstallable                 : False
Languages                       : System.__ComObject
LastDeploymentChangeTime        : 27/08/2018 00:00:00
MaxDownloadSize                 : 139334801
MinDownloadSize                 : 0
MoreInfoUrls                    : System.__ComObject
MsrcSeverity                    : 
RecommendedCpuSpeed             : 0
RecommendedHardDiskSpace        : 0
RecommendedMemory               : 0
ReleaseNotes                    : 
SecurityBulletinIDs             : System.__ComObject
SupersededUpdateIDs             : System.__ComObject
SupportUrl                      : hxxp://support.microsoft.com/select/?target=hub
Type                            : 2
UninstallationNotes             : 
UninstallationBehavior          : 
UninstallationSteps             : System.__ComObject
KBArticleIDs                    : System.__ComObject
DeploymentAction                : 4
DownloadPriority                : 2
DownloadContents                : System.__ComObject
DriverClass                     : Sound
DriverHardwareID                : hdaudio\func_01&ven_10ec&dev_0221&subsys_103c18e9
DriverManufacturer              : Realtek
DriverModel                     : Realtek High Definition Audio
DriverProvider                  : Realtek Semiconductor Corp.
DriverVerDate                   : 19/12/2017 00:00:00
DeviceProblemNumber             : 0
DeviceStatus                    : 25174026
RebootRequired                  : False
IsPresent                       : False
CveIDs                          : System.__ComObject
BrowseOnly                      : False
WindowsDriverUpdateEntries      : System.__ComObject
PerUser                         : False
AutoSelection                   : 1
AutoDownload                    : 2

                       UpdateID : {3caa73f7-9e5c-4838-b423-f12ef6743e76}
                 RevisionNumber : 2
           InstallationBehavior : CanRequestUserInput=True, Impact=0, RebootBehavior=2, RequiresNetworkConnectivity=False
Title                           : Dell Inc. - Monitor, Other hardware - DELL E1913S (Analog)
AutoSelectOnWebSites            : False
BundledUpdates                  : System.__ComObject
CanRequireSource                : False
Categories                      : System.__ComObject
Deadline                        : 
DeltaCompressedContentAvailable : False
DeltaCompressedContentPreferred : True
Description                     : Dell Inc. Monitor, Other hardware software update released in July, 2013
EulaAccepted                    : True
EulaText                        : 
HandlerID                       : hxxp://schemas.microsoft.com/msus/2002/12/UpdateHandlers/WindowsDriver
Identity                        : System.__ComObject
Image                           : 
InstallationBehavior            : System.__ComObject
IsBeta                          : False
IsDownloaded                    : False
IsHidden                        : False
IsInstalled                     : False
IsMandatory                     : False
IsUninstallable                 : False
Languages                       : System.__ComObject
LastDeploymentChangeTime        : 12/09/2018 00:00:00
MaxDownloadSize                 : 24856
MinDownloadSize                 : 0
MoreInfoUrls                    : System.__ComObject
MsrcSeverity                    : 
RecommendedCpuSpeed             : 0
RecommendedHardDiskSpace        : 0
RecommendedMemory               : 0
ReleaseNotes                    : 
SecurityBulletinIDs             : System.__ComObject
SupersededUpdateIDs             : System.__ComObject
SupportUrl                      : hxxp://support.microsoft.com/select/?target=hub
Type                            : 2
UninstallationNotes             : 
UninstallationBehavior          : 
UninstallationSteps             : System.__ComObject
KBArticleIDs                    : System.__ComObject
DeploymentAction                : 4
DownloadPriority                : 2
DownloadContents                : System.__ComObject
DriverClass                     : OtherHardware
DriverHardwareID                : monitor\deld050
DriverManufacturer              : Dell Inc.
DriverModel                     : DELL E1913S (Analog)
DriverProvider                  : Dell Inc.
DriverVerDate                   : 12/07/2013 00:00:00
DeviceProblemNumber             : 0
DeviceStatus                    : 25190410
RebootRequired                  : False
IsPresent                       : False
CveIDs                          : System.__ComObject
BrowseOnly                      : False
WindowsDriverUpdateEntries      : System.__ComObject
PerUser                         : False
AutoSelection                   : 1
AutoDownload                    : 2

                       UpdateID : {9c87c563-85d3-4637-b4b1-06b2d546b83e}
                 RevisionNumber : 2
           InstallationBehavior : CanRequestUserInput=True, Impact=0, RebootBehavior=2, RequiresNetworkConnectivity=False
Title                           : Dell Inc. - Bus Controllers and Ports, Display - Dell P2210H(Digital)
AutoSelectOnWebSites            : False
BundledUpdates                  : System.__ComObject
CanRequireSource                : False
Categories                      : System.__ComObject
Deadline                        : 
DeltaCompressedContentAvailable : False
DeltaCompressedContentPreferred : True
Description                     : Dell Inc. Bus Controllers and Ports, Display software update released in May, 2009
EulaAccepted                    : True
EulaText                        : 
HandlerID                       : hxxp://schemas.microsoft.com/msus/2002/12/UpdateHandlers/WindowsDriver
Identity                        : System.__ComObject
Image                           : 
InstallationBehavior            : System.__ComObject
IsBeta                          : False
IsDownloaded                    : False
IsHidden                        : False
IsInstalled                     : False
IsMandatory                     : False
IsUninstallable                 : False
Languages                       : System.__ComObject
LastDeploymentChangeTime        : 14/09/2018 00:00:00
MaxDownloadSize                 : 23961
MinDownloadSize                 : 0
MoreInfoUrls                    : System.__ComObject
MsrcSeverity                    : 
RecommendedCpuSpeed             : 0
RecommendedHardDiskSpace        : 0
RecommendedMemory               : 0
ReleaseNotes                    : 
SecurityBulletinIDs             : System.__ComObject
SupersededUpdateIDs             : System.__ComObject
SupportUrl                      : hxxp://support.microsoft.com/select/?target=hub
Type                            : 2
UninstallationNotes             : 
UninstallationBehavior          : System.__ComObject
UninstallationSteps             : System.__ComObject
KBArticleIDs                    : System.__ComObject
DeploymentAction                : 4
DownloadPriority                : 2
DownloadContents                : System.__ComObject
DriverClass                     : OtherHardware
DriverHardwareID                : monitor\deld025
DriverManufacturer              : Dell Inc.
DriverModel                     : Dell P2210H(Digital)
DriverProvider                  : Dell Inc.
DriverVerDate                   : 21/05/2009 00:00:00
DeviceProblemNumber             : 0
DeviceStatus                    : 25190410
RebootRequired                  : False
IsPresent                       : False
CveIDs                          : System.__ComObject
BrowseOnly                      : False
WindowsDriverUpdateEntries      : System.__ComObject
PerUser                         : False
AutoSelection                   : 1
AutoDownload                    : 2

                       UpdateID : {15733374-4870-4bd3-9183-e0115ae41b35}
                 RevisionNumber : 1
           InstallationBehavior : CanRequestUserInput=True, Impact=0, RebootBehavior=2, RequiresNetworkConnectivity=False
Title                           : Realtek - Net - 12/6/2018 12:00:00 AM - 10.32.1206.2018
AutoSelectOnWebSites            : False
BundledUpdates                  : System.__ComObject
CanRequireSource                : False
Categories                      : System.__ComObject
Deadline                        : 
DeltaCompressedContentAvailable : False
DeltaCompressedContentPreferred : True
Description                     : Realtek Net  driver update released in  December 2018
EulaAccepted                    : True
EulaText                        : 
HandlerID                       : hxxp://schemas.microsoft.com/msus/2002/12/UpdateHandlers/WindowsDriver
Identity                        : System.__ComObject
Image                           : 
InstallationBehavior            : System.__ComObject
IsBeta                          : False
IsDownloaded                    : False
IsHidden                        : False
IsInstalled                     : False
IsMandatory                     : False
IsUninstallable                 : False
Languages                       : System.__ComObject
LastDeploymentChangeTime        : 04/06/2019 00:00:00
MaxDownloadSize                 : 443089
MinDownloadSize                 : 0
MoreInfoUrls                    : System.__ComObject
MsrcSeverity                    : 
RecommendedCpuSpeed             : 0
RecommendedHardDiskSpace        : 0
RecommendedMemory               : 0
ReleaseNotes                    : 
SecurityBulletinIDs             : System.__ComObject
SupersededUpdateIDs             : System.__ComObject
SupportUrl                      : hxxp://support.microsoft.com/select/?target=hub
Type                            : 2
UninstallationNotes             : 
UninstallationBehavior          : System.__ComObject
UninstallationSteps             : System.__ComObject
KBArticleIDs                    : System.__ComObject
DeploymentAction                : 4
DownloadPriority                : 2
DownloadContents                : System.__ComObject
DriverClass                     : Networking
DriverHardwareID                : pci\ven_10ec&dev_8168&subsys_18e9103c&rev_0c
DriverManufacturer              : Realtek
DriverModel                     : Realtek PCIe GbE Family Controller
DriverProvider                  : Realtek
DriverVerDate                   : 06/12/2018 00:00:00
DeviceProblemNumber             : 0
DeviceStatus                    : 25174026
RebootRequired                  : False
IsPresent                       : False
CveIDs                          : System.__ComObject
BrowseOnly                      : False
WindowsDriverUpdateEntries      : System.__ComObject
PerUser                         : False
AutoSelection                   : 1
AutoDownload                    : 2

 

Link to comment
Share on other sites

Hi,

Is there an update on this?

I assume there is an actual issue with the ESET software? seeing as no one came back after I posted the output above saying it was windows doing something wrong.

 

Link to comment
Share on other sites

  • Administrators

I was told that the issue was reported to Microsoft months ago without any solution from them so far.

Link to comment
Share on other sites

Can I ask what has been reported to microsoft ?

I don't know much about this API but a quick look at the documentation shows me that the "DeploymentAction" field which is 4 on all the updates in my example...    4 = "Optional Installation"

Also the "Type" field which are all 2 in my above example...    2 = "Driver"

So to me these updates are flagged as optional driver updates so the fact eset is listing them as recommended seems to be a bug your end ?

apologies if im mistaken but it looks like microsoft hasn't responded as there isn't an issue...

What criteria does your software use to determine its a recommended update ?

Link to comment
Share on other sites

  • 1 month later...
  • Administrators

We've had a call with Microsoft. Thanks to the information in this topic they understood what the issue was so we hope a proper solution will available in the forthcoming weeks.

Link to comment
Share on other sites

45 minutes ago, Marcos said:

We've had a call with Microsoft. Thanks to the information in this topic they understood what the issue was so we hope a proper solution will available in the forthcoming weeks.

This is good news - i look forward to the updated and fixed version :) many thanks

Link to comment
Share on other sites

  • 1 month later...

Any movement on this...    The windows update warning is worse than useless as it is.

This is especially frustrating seeing as i have given clear examples above on how the existing microsoft api output can clearly distinguish these updates as both "Driver" and "Optional"

so just sitting on your hands waiting for microsoft is not really an excuse when you could implement a fix right now with no changes from microsoft.

 

Link to comment
Share on other sites

  • Administrators

This is Microsoft's thing which we cannot influence and it's their turn now.

A quote by our developer:
"We had a call with Microsoft. It's clear to the person I spoke with what the issue is (thanks to this thread: https://forum.eset.com/topic/32774-operating-system-updates-available-but-they-are-not/), so hopefully within the next few weeks we'll have a proper response with a resolution."

Link to comment
Share on other sites

On 6/27/2022 at 1:27 PM, roycruse said:

Can I ask what has been reported to microsoft ?

I don't know much about this API but a quick look at the documentation shows me that the "DeploymentAction" field which is 4 on all the updates in my example...    4 = "Optional Installation"

Also the "Type" field which are all 2 in my above example...    2 = "Driver"

So to me these updates are flagged as optional driver updates so the fact eset is listing them as recommended seems to be a bug your end ?

apologies if im mistaken but it looks like microsoft hasn't responded as there isn't an issue...

What criteria does your software use to determine its a recommended update ?

They say its a microsoft thing....    but no one has commented on this post where I point out clearly that it is easy to identify the updates as "OPTIONAL DRIVER" updates and not recommended updates.     no one has once explained why these fields cannot be used to differentiate the optional from reccomended updates and no one has explained what the error in the api output actually is.   this is all just smoke and mirrors - if theres a genuine error in the api output - just tell me what it is ???????    

Edited by roycruse
Link to comment
Share on other sites

Guest
This topic is now closed to further replies.
 Share

  • Recently Browsing   0 members

    • No registered users viewing this page.
×
×
  • Create New...