Microsoft IT Professional Certification Boot Camps

WSUS is not properly patching computers, Microsoft says
Microsoft Security is warning IT customers that Windows Server Update Services 3.0 Service Pack 1 is not properly installing patches on machines that also have Office 2003 installed — or even just components of Office 2003 installed. In addition, this problem may occur for systems that also have the following products installed: Windows Small Business Server 2003 (Windows SBS) with the WSUS component upgraded from WSUS 2 to WSUS 3, System Center Essentials 2007, System Center Configuration Manager 2007.

Ironically, the problem is that the patch Microsoft Security issued on June 30 to fix exactly this problem — WSUS’s failure to work — is itself faulty. According to the Microsoft Security blog, that WSUS fix “does not correctly elevate privileges, which are required for the installation to complete. …Additionally, the update does not place an entry in Add or Remove Programs, and cannot be uninstalled. Microsoft has identified the packaging inconsistencies in the current update and is investigating options to resolve them.”

Microsoft has issued a patch to fix the patch of its automatic patching system. It has also identified and documented a manual workaround for those that can’t install the patch. Information on the new WSUS update and the workaround can be found here.