roycruse 0 Posted June 20, 2022 Share Posted June 20, 2022 Hi, I have this Alert against nearly all my computers/laptops Operating system updates available There are operating system updates available for your computer. They should be installed to ensure protection. Security notification Security product Other June 20, 2022 09:37:12 Warning I have run ALL windows updates against the computer from the computer end, from the ESET Management Console with and without all the options such as accepting EULA and Rebooting etc etc. No matter what I do the best i can get is after a reboot the alert goes away for a short time then i check again an hour later and its back... How do you find out exactly what this update is ??? and How do you stop this from happening ??? A system that gives you false positive warning on 90% of your computers is really useless as I cannot tell if there's really anything to action or not without checking every computer manually anyway. Anyone got any help they can give please ? Link to comment Share on other sites More sharing options...
Administrators Marcos 4,839 Posted June 20, 2022 Administrators Share Posted June 20, 2022 The list of available Windows updates is provided by the operating system and then reported by Endpoint. Does changing the severity to "recommended updates" or "important updates" make a difference? Link to comment Share on other sites More sharing options...
roycruse 0 Posted June 20, 2022 Author Share Posted June 20, 2022 13 minutes ago, Marcos said: The list of available Windows updates is provided by the operating system and then reported by Endpoint. So is there a log file of what is provided by Windows to Endpoint ??? Link to comment Share on other sites More sharing options...
Administrators Marcos 4,839 Posted June 20, 2022 Administrators Share Posted June 20, 2022 Windows only tells if there are updates available. To find out what updates are missing, run this PowerShell script: $searcher = New-Object -ComObject Microsoft.Update.Searcher $objSearchResult = $Searcher.Search("IsInstalled=0") foreach($objUpdate in $objSearchResult.Updates) { $objUpdate } Link to comment Share on other sites More sharing options...
roycruse 0 Posted June 22, 2022 Author Share Posted June 22, 2022 Ive narrowed the issue down to OPTIONAL DRIVER UPDATES even though eset is set to only notify about Recommended Updates And there are NO recommended updates to install on the computers... I get this alert... Going into optional updates then driver updates and installing all the optional drivers does clear the alert... So how do i go about IDing which is the problematic update and why its reporting to ESET that its a recommended security update when it doesn't appear in windows that way ? Link to comment Share on other sites More sharing options...
Administrators Marcos 4,839 Posted June 22, 2022 Administrators Share Posted June 22, 2022 Please provide a screenshot of the System updates window displayed after clicking "More info" under the notification on the client: Link to comment Share on other sites More sharing options...
roycruse 0 Posted June 22, 2022 Author Share Posted June 22, 2022 There is no notification on the client - i am seeing the notification in the management console only This is probably due to me applying the "reduced interaction" proifile to the clients Is there another way to bring this up from the eset antivirus app on the client Link to comment Share on other sites More sharing options...
Administrators Marcos 4,839 Posted June 22, 2022 Administrators Share Posted June 22, 2022 Couldn't it be that you have applied a policy with these settings? Link to comment Share on other sites More sharing options...
roycruse 0 Posted June 22, 2022 Author Share Posted June 22, 2022 yes the ESET built in policy has that setting turned off Link to comment Share on other sites More sharing options...
Administrators Marcos 4,839 Posted June 22, 2022 Administrators Share Posted June 22, 2022 Please temporarily apply a policy that will enforce displaying the notification on the client so that you could take a screenshot of the available updates. Link to comment Share on other sites More sharing options...
roycruse 0 Posted June 22, 2022 Author Share Posted June 22, 2022 Link to comment Share on other sites More sharing options...
roycruse 0 Posted June 22, 2022 Author Share Posted June 22, 2022 Definitely something malfunctioning here - not sure if its windows or ESET or a bit of both Link to comment Share on other sites More sharing options...
Administrators Marcos 4,839 Posted June 22, 2022 Administrators Share Posted June 22, 2022 Looks as if Windows reported the optional updates as recommended. Please provide the output of running this script, you can upload it as a file. $searcher = New-Object -ComObject Microsoft.Update.Searcher $objSearchResult = $Searcher.Search("IsInstalled=0") foreach($objUpdate in $objSearchResult.Updates) { Write-Host ( " UpdateID : {" + $objUpdate.Identity.UpdateID + "}" ) Write-Host ( " RevisionNumber : " + $objUpdate.Identity.RevisionNumber ) Write-Host ( " InstallationBehavior : " + "CanRequestUserInput=" + $objUpdate.InstallationBehavior.CanRequestUserInput + ", Impact=" + $objUpdate.InstallationBehavior.Impact + ", RebootBehavior=" + $objUpdate.InstallationBehavior.RebootBehavior + ", RequiresNetworkConnectivity=" + $objUpdate.InstallationBehavior.RequiresNetworkConnectivity ) $objUpdate } Link to comment Share on other sites More sharing options...
roycruse 0 Posted June 22, 2022 Author Share Posted June 22, 2022 Another example Link to comment Share on other sites More sharing options...
roycruse 0 Posted June 22, 2022 Author Share Posted June 22, 2022 heres the output from the PC on that second example Funny how windows knows they are not recommended and displays them in the optiponal section though isnt it ? PS C:\Users\royadmin> $searcher = New-Object -ComObject Microsoft.Update.Searcher $objSearchResult = $Searcher.Search("IsInstalled=0") foreach($objUpdate in $objSearchResult.Updates) { Write-Host ( " UpdateID : {" + $objUpdate.Identity.UpdateID + "}" ) Write-Host ( " RevisionNumber : " + $objUpdate.Identity.RevisionNumber ) Write-Host ( " InstallationBehavior : " + "CanRequestUserInput=" + $objUpdate.InstallationBehavior.CanRequestUserInput + ", Impact=" + $objUpdate.InstallationBehavior.Impact + ", RebootBehavior=" + $objUpdate.InstallationBehavior.RebootBehavior + ", RequiresNetworkConnectivity=" + $objUpdate.InstallationBehavior.RequiresNetworkConnectivity ) $objUpdate } UpdateID : {f2e6e529-6ad9-4963-82c7-350cafdde54f} RevisionNumber : 2 InstallationBehavior : CanRequestUserInput=True, Impact=0, RebootBehavior=2, RequiresNetworkConnectivity=False Title : Intel Corporation - Storage Controller - Intel(R) 8 Series/C220 Chipset Family SATA AHCI Controller AutoSelectOnWebSites : False BundledUpdates : System.__ComObject CanRequireSource : False Categories : System.__ComObject Deadline : DeltaCompressedContentAvailable : False DeltaCompressedContentPreferred : True Description : Intel Corporation Storage Controller software update released in July, 2015 EulaAccepted : True EulaText : HandlerID : hxxp://schemas.microsoft.com/msus/2002/12/UpdateHandlers/WindowsDriver Identity : System.__ComObject Image : InstallationBehavior : System.__ComObject IsBeta : False IsDownloaded : False IsHidden : False IsInstalled : False IsMandatory : False IsUninstallable : False Languages : System.__ComObject LastDeploymentChangeTime : 25/08/2018 00:00:00 MaxDownloadSize : 9077123 MinDownloadSize : 0 MoreInfoUrls : System.__ComObject MsrcSeverity : RecommendedCpuSpeed : 0 RecommendedHardDiskSpace : 0 RecommendedMemory : 0 ReleaseNotes : SecurityBulletinIDs : System.__ComObject SupersededUpdateIDs : System.__ComObject SupportUrl : hxxp://support.microsoft.com/select/?target=hub Type : 2 UninstallationNotes : UninstallationBehavior : UninstallationSteps : System.__ComObject KBArticleIDs : System.__ComObject DeploymentAction : 4 DownloadPriority : 2 DownloadContents : System.__ComObject DriverClass : Storage DriverHardwareID : pci\ven_8086&dev_8c02&subsys_18e9103c DriverManufacturer : Intel Corporation DriverModel : Intel(R) 8 Series/C220 Chipset Family SATA AHCI Controller DriverProvider : Intel Corporation DriverVerDate : 13/07/2015 00:00:00 DeviceProblemNumber : 0 DeviceStatus : 25165834 RebootRequired : False IsPresent : False CveIDs : System.__ComObject BrowseOnly : False WindowsDriverUpdateEntries : System.__ComObject PerUser : False AutoSelection : 1 AutoDownload : 2 UpdateID : {98125a04-378a-4142-b423-b4394b560dac} RevisionNumber : 2 InstallationBehavior : CanRequestUserInput=True, Impact=0, RebootBehavior=2, RequiresNetworkConnectivity=False Title : Realtek Semiconductor Corp. - MEDIA - 12/19/2017 12:00:00 AM - 6.0.1.8328 AutoSelectOnWebSites : False BundledUpdates : System.__ComObject CanRequireSource : False Categories : System.__ComObject Deadline : DeltaCompressedContentAvailable : False DeltaCompressedContentPreferred : True Description : Realtek Semiconductor Corp. MEDIA driver update released in December 2017 EulaAccepted : True EulaText : HandlerID : hxxp://schemas.microsoft.com/msus/2002/12/UpdateHandlers/WindowsDriver Identity : System.__ComObject Image : InstallationBehavior : System.__ComObject IsBeta : False IsDownloaded : False IsHidden : False IsInstalled : False IsMandatory : False IsUninstallable : False Languages : System.__ComObject LastDeploymentChangeTime : 27/08/2018 00:00:00 MaxDownloadSize : 139334801 MinDownloadSize : 0 MoreInfoUrls : System.__ComObject MsrcSeverity : RecommendedCpuSpeed : 0 RecommendedHardDiskSpace : 0 RecommendedMemory : 0 ReleaseNotes : SecurityBulletinIDs : System.__ComObject SupersededUpdateIDs : System.__ComObject SupportUrl : hxxp://support.microsoft.com/select/?target=hub Type : 2 UninstallationNotes : UninstallationBehavior : UninstallationSteps : System.__ComObject KBArticleIDs : System.__ComObject DeploymentAction : 4 DownloadPriority : 2 DownloadContents : System.__ComObject DriverClass : Sound DriverHardwareID : hdaudio\func_01&ven_10ec&dev_0221&subsys_103c18e9 DriverManufacturer : Realtek DriverModel : Realtek High Definition Audio DriverProvider : Realtek Semiconductor Corp. DriverVerDate : 19/12/2017 00:00:00 DeviceProblemNumber : 0 DeviceStatus : 25174026 RebootRequired : False IsPresent : False CveIDs : System.__ComObject BrowseOnly : False WindowsDriverUpdateEntries : System.__ComObject PerUser : False AutoSelection : 1 AutoDownload : 2 UpdateID : {3caa73f7-9e5c-4838-b423-f12ef6743e76} RevisionNumber : 2 InstallationBehavior : CanRequestUserInput=True, Impact=0, RebootBehavior=2, RequiresNetworkConnectivity=False Title : Dell Inc. - Monitor, Other hardware - DELL E1913S (Analog) AutoSelectOnWebSites : False BundledUpdates : System.__ComObject CanRequireSource : False Categories : System.__ComObject Deadline : DeltaCompressedContentAvailable : False DeltaCompressedContentPreferred : True Description : Dell Inc. Monitor, Other hardware software update released in July, 2013 EulaAccepted : True EulaText : HandlerID : hxxp://schemas.microsoft.com/msus/2002/12/UpdateHandlers/WindowsDriver Identity : System.__ComObject Image : InstallationBehavior : System.__ComObject IsBeta : False IsDownloaded : False IsHidden : False IsInstalled : False IsMandatory : False IsUninstallable : False Languages : System.__ComObject LastDeploymentChangeTime : 12/09/2018 00:00:00 MaxDownloadSize : 24856 MinDownloadSize : 0 MoreInfoUrls : System.__ComObject MsrcSeverity : RecommendedCpuSpeed : 0 RecommendedHardDiskSpace : 0 RecommendedMemory : 0 ReleaseNotes : SecurityBulletinIDs : System.__ComObject SupersededUpdateIDs : System.__ComObject SupportUrl : hxxp://support.microsoft.com/select/?target=hub Type : 2 UninstallationNotes : UninstallationBehavior : UninstallationSteps : System.__ComObject KBArticleIDs : System.__ComObject DeploymentAction : 4 DownloadPriority : 2 DownloadContents : System.__ComObject DriverClass : OtherHardware DriverHardwareID : monitor\deld050 DriverManufacturer : Dell Inc. DriverModel : DELL E1913S (Analog) DriverProvider : Dell Inc. DriverVerDate : 12/07/2013 00:00:00 DeviceProblemNumber : 0 DeviceStatus : 25190410 RebootRequired : False IsPresent : False CveIDs : System.__ComObject BrowseOnly : False WindowsDriverUpdateEntries : System.__ComObject PerUser : False AutoSelection : 1 AutoDownload : 2 UpdateID : {9c87c563-85d3-4637-b4b1-06b2d546b83e} RevisionNumber : 2 InstallationBehavior : CanRequestUserInput=True, Impact=0, RebootBehavior=2, RequiresNetworkConnectivity=False Title : Dell Inc. - Bus Controllers and Ports, Display - Dell P2210H(Digital) AutoSelectOnWebSites : False BundledUpdates : System.__ComObject CanRequireSource : False Categories : System.__ComObject Deadline : DeltaCompressedContentAvailable : False DeltaCompressedContentPreferred : True Description : Dell Inc. Bus Controllers and Ports, Display software update released in May, 2009 EulaAccepted : True EulaText : HandlerID : hxxp://schemas.microsoft.com/msus/2002/12/UpdateHandlers/WindowsDriver Identity : System.__ComObject Image : InstallationBehavior : System.__ComObject IsBeta : False IsDownloaded : False IsHidden : False IsInstalled : False IsMandatory : False IsUninstallable : False Languages : System.__ComObject LastDeploymentChangeTime : 14/09/2018 00:00:00 MaxDownloadSize : 23961 MinDownloadSize : 0 MoreInfoUrls : System.__ComObject MsrcSeverity : RecommendedCpuSpeed : 0 RecommendedHardDiskSpace : 0 RecommendedMemory : 0 ReleaseNotes : SecurityBulletinIDs : System.__ComObject SupersededUpdateIDs : System.__ComObject SupportUrl : hxxp://support.microsoft.com/select/?target=hub Type : 2 UninstallationNotes : UninstallationBehavior : System.__ComObject UninstallationSteps : System.__ComObject KBArticleIDs : System.__ComObject DeploymentAction : 4 DownloadPriority : 2 DownloadContents : System.__ComObject DriverClass : OtherHardware DriverHardwareID : monitor\deld025 DriverManufacturer : Dell Inc. DriverModel : Dell P2210H(Digital) DriverProvider : Dell Inc. DriverVerDate : 21/05/2009 00:00:00 DeviceProblemNumber : 0 DeviceStatus : 25190410 RebootRequired : False IsPresent : False CveIDs : System.__ComObject BrowseOnly : False WindowsDriverUpdateEntries : System.__ComObject PerUser : False AutoSelection : 1 AutoDownload : 2 UpdateID : {15733374-4870-4bd3-9183-e0115ae41b35} RevisionNumber : 1 InstallationBehavior : CanRequestUserInput=True, Impact=0, RebootBehavior=2, RequiresNetworkConnectivity=False Title : Realtek - Net - 12/6/2018 12:00:00 AM - 10.32.1206.2018 AutoSelectOnWebSites : False BundledUpdates : System.__ComObject CanRequireSource : False Categories : System.__ComObject Deadline : DeltaCompressedContentAvailable : False DeltaCompressedContentPreferred : True Description : Realtek Net driver update released in December 2018 EulaAccepted : True EulaText : HandlerID : hxxp://schemas.microsoft.com/msus/2002/12/UpdateHandlers/WindowsDriver Identity : System.__ComObject Image : InstallationBehavior : System.__ComObject IsBeta : False IsDownloaded : False IsHidden : False IsInstalled : False IsMandatory : False IsUninstallable : False Languages : System.__ComObject LastDeploymentChangeTime : 04/06/2019 00:00:00 MaxDownloadSize : 443089 MinDownloadSize : 0 MoreInfoUrls : System.__ComObject MsrcSeverity : RecommendedCpuSpeed : 0 RecommendedHardDiskSpace : 0 RecommendedMemory : 0 ReleaseNotes : SecurityBulletinIDs : System.__ComObject SupersededUpdateIDs : System.__ComObject SupportUrl : hxxp://support.microsoft.com/select/?target=hub Type : 2 UninstallationNotes : UninstallationBehavior : System.__ComObject UninstallationSteps : System.__ComObject KBArticleIDs : System.__ComObject DeploymentAction : 4 DownloadPriority : 2 DownloadContents : System.__ComObject DriverClass : Networking DriverHardwareID : pci\ven_10ec&dev_8168&subsys_18e9103c&rev_0c DriverManufacturer : Realtek DriverModel : Realtek PCIe GbE Family Controller DriverProvider : Realtek DriverVerDate : 06/12/2018 00:00:00 DeviceProblemNumber : 0 DeviceStatus : 25174026 RebootRequired : False IsPresent : False CveIDs : System.__ComObject BrowseOnly : False WindowsDriverUpdateEntries : System.__ComObject PerUser : False AutoSelection : 1 AutoDownload : 2 Link to comment Share on other sites More sharing options...
roycruse 0 Posted June 27, 2022 Author Share Posted June 27, 2022 Hi, Is there an update on this? I assume there is an actual issue with the ESET software? seeing as no one came back after I posted the output above saying it was windows doing something wrong. Link to comment Share on other sites More sharing options...
Administrators Marcos 4,839 Posted June 27, 2022 Administrators Share Posted June 27, 2022 I was told that the issue was reported to Microsoft months ago without any solution from them so far. Link to comment Share on other sites More sharing options...
roycruse 0 Posted June 27, 2022 Author Share Posted June 27, 2022 Can I ask what has been reported to microsoft ? I don't know much about this API but a quick look at the documentation shows me that the "DeploymentAction" field which is 4 on all the updates in my example... 4 = "Optional Installation" Also the "Type" field which are all 2 in my above example... 2 = "Driver" So to me these updates are flagged as optional driver updates so the fact eset is listing them as recommended seems to be a bug your end ? apologies if im mistaken but it looks like microsoft hasn't responded as there isn't an issue... What criteria does your software use to determine its a recommended update ? Link to comment Share on other sites More sharing options...
Administrators Marcos 4,839 Posted July 29, 2022 Administrators Share Posted July 29, 2022 We've had a call with Microsoft. Thanks to the information in this topic they understood what the issue was so we hope a proper solution will available in the forthcoming weeks. Link to comment Share on other sites More sharing options...
roycruse 0 Posted July 29, 2022 Author Share Posted July 29, 2022 45 minutes ago, Marcos said: We've had a call with Microsoft. Thanks to the information in this topic they understood what the issue was so we hope a proper solution will available in the forthcoming weeks. This is good news - i look forward to the updated and fixed version many thanks Link to comment Share on other sites More sharing options...
roycruse 0 Posted September 2, 2022 Author Share Posted September 2, 2022 Any movement on this... The windows update warning is worse than useless as it is. This is especially frustrating seeing as i have given clear examples above on how the existing microsoft api output can clearly distinguish these updates as both "Driver" and "Optional" so just sitting on your hands waiting for microsoft is not really an excuse when you could implement a fix right now with no changes from microsoft. Link to comment Share on other sites More sharing options...
Administrators Marcos 4,839 Posted September 2, 2022 Administrators Share Posted September 2, 2022 This is Microsoft's thing which we cannot influence and it's their turn now. A quote by our developer: "We had a call with Microsoft. It's clear to the person I spoke with what the issue is (thanks to this thread: https://forum.eset.com/topic/32774-operating-system-updates-available-but-they-are-not/), so hopefully within the next few weeks we'll have a proper response with a resolution." Link to comment Share on other sites More sharing options...
roycruse 0 Posted September 2, 2022 Author Share Posted September 2, 2022 (edited) On 6/27/2022 at 1:27 PM, roycruse said: Can I ask what has been reported to microsoft ? I don't know much about this API but a quick look at the documentation shows me that the "DeploymentAction" field which is 4 on all the updates in my example... 4 = "Optional Installation" Also the "Type" field which are all 2 in my above example... 2 = "Driver" So to me these updates are flagged as optional driver updates so the fact eset is listing them as recommended seems to be a bug your end ? apologies if im mistaken but it looks like microsoft hasn't responded as there isn't an issue... What criteria does your software use to determine its a recommended update ? They say its a microsoft thing.... but no one has commented on this post where I point out clearly that it is easy to identify the updates as "OPTIONAL DRIVER" updates and not recommended updates. no one has once explained why these fields cannot be used to differentiate the optional from reccomended updates and no one has explained what the error in the api output actually is. this is all just smoke and mirrors - if theres a genuine error in the api output - just tell me what it is ??????? Edited September 2, 2022 by roycruse Link to comment Share on other sites More sharing options...
Recommended Posts