MBSA doesn't show that Rollup 1 is missing; WSUS and
the PCs do.

MBSA shows MSXML and MDAC as Okay.

What does Windows Update look at specifically to flag Rollup 1
as "Needed"? I know there's a lot of stuff that's updated
by it, but it seems some reg entry or file version check
is the key to all this. If it's installed prior to rollup 1,
all is well. If it isn't, you're in the "Needed" loop. Installing
it afterward doesn't repair the damage.

In the end, the question is: are our systems secure or not?

Jim Van Sickler

"Robert Aldwinckle" wrote:

> "Tom Bean" <tbean@newsgroup.nospam> wrote in message
> news:uLAlHA%234FHA.1148@tk2msftngp13.phx.gbl...
> >I am being told by Windows Update that updates are ready for my computer and
> > when I click on the icon it tells me that I need to install "Update Rollup 1
> > for Windows 2000 SP4". As soon as the installation completes, the Windows
> > Update icon reappears telling me I need to install "Update Rollup 1 for
> > Windows 2000 SP4".
> >
> > This has been going on for at least two weeks. I have read the messages
> > about updating MDAC & XML and have done so but continue to get hounded by
> > Windows Update.
> >
> > Does anyone have any idea how I can get this cycle to stop?
>
>
> Have you tried seeing what MBSA 1.2.1 thinks?
> That is what gave Dave Hawley the clue that he had some prerequisites
> missing. Perhaps you have a different set of missing prerequisites?
> Etc.
>
> In general the symptom you are getting means that you have an inconsistency
> in the state of your module versions and the state of your registry
> which you are either going to have to identify and fix or attempt
> to repair blindly by using such tricks as uninstalling already installed
> updates or components or (less advisedly) trying to use a force option.
> Etc.
>
>
> >
> > Thanks,
> > Tom
>
>
> Good luck
>
> Robert Aldwinckle
> ---
>
>
>

"Jim Van Sickler" <vansickj - eodc _at_ kaman c0m> wrote in message
news:1BAD623F-3152-44C0-AAA0-3AD50140771A@microsoft.com...
> MBSA doesn't show that Rollup 1 is missing; WSUS and
> the PCs do.


Is that with the rollup installed or not?
Try uninstalling it and then see what MBSAcli (from the command line)
thinks (with full file checking and all possible diagnostics requested).


>
> MBSA shows MSXML and MDAC as Okay.

You're testing the possibility that there may be some other (undocumented)
prerequisites that the rollup assumes. E.g. MDAC and MSXML are just
the ones that Dave Hawley found for his case.


>
> What does Windows Update look at specifically to flag Rollup 1
> as "Needed"? I know there's a lot of stuff that's updated
> by it, but it seems some reg entry or file version check
> is the key to all this.

Don't know. Ever since MBSA 2.0 the implementation has been even
more obscure than it was with HfNetChk. Torgeir has hinted (elsewhere)
that if you are a scripting wizard you could get some equivalent details out of
the new XMLOUT option.

I mentioned some of this to Dave Hawley when I was working with him:

http://www.microsoft.com/communities...4-6754993ebac3

Notice the More... at the bottom of the page. It goes on to another page.


> If it's installed prior to rollup 1,
> all is well. If it isn't, you're in the "Needed" loop. Installing
> it afterward doesn't repair the damage.
>
> In the end, the question is: are our systems secure or not?


I suspect it mostly depends on which modules have regressed versions.
If the non-regressed versions include all critical updates you probably
have a secure system.


HTH

Robert
---

Robert,

I started to uninstall the rollup but a warning message popped up saying my
system might not work if I removed the rollup. Is removing the rollup going
to cause problems with my system?

It seems that someone from Microsoft should be able to definitively answer
the questions about why the rollup doesn't think it is installed.

Tom

"Robert Aldwinckle" <robald@techemail.com> wrote in message
news:uMJnn6c5FHA.4036@TK2MSFTNGP11.phx.gbl...
> "Jim Van Sickler" <vansickj - eodc _at_ kaman c0m> wrote in message
> news:1BAD623F-3152-44C0-AAA0-3AD50140771A@microsoft.com...
>> MBSA doesn't show that Rollup 1 is missing; WSUS and
>> the PCs do.
>
>
> Is that with the rollup installed or not?
> Try uninstalling it and then see what MBSAcli (from the command line)
> thinks (with full file checking and all possible diagnostics requested).
>
>
>>
>> MBSA shows MSXML and MDAC as Okay.
>
> You're testing the possibility that there may be some other (undocumented)
> prerequisites that the rollup assumes. E.g. MDAC and MSXML are just
> the ones that Dave Hawley found for his case.
>
>
>>
>> What does Windows Update look at specifically to flag Rollup 1
>> as "Needed"? I know there's a lot of stuff that's updated
>> by it, but it seems some reg entry or file version check
>> is the key to all this.
>
> Don't know. Ever since MBSA 2.0 the implementation has been even
> more obscure than it was with HfNetChk. Torgeir has hinted (elsewhere)
> that if you are a scripting wizard you could get some equivalent details
> out of
> the new XMLOUT option.
>
> I mentioned some of this to Dave Hawley when I was working with him:
>
> http://www.microsoft.com/communities...4-6754993ebac3
>
> Notice the More... at the bottom of the page. It goes on to another
> page.
>
>
>> If it's installed prior to rollup 1,
>> all is well. If it isn't, you're in the "Needed" loop. Installing
>> it afterward doesn't repair the damage.
>>
>> In the end, the question is: are our systems secure or not?
>
>
> I suspect it mostly depends on which modules have regressed versions.
> If the non-regressed versions include all critical updates you probably
> have a secure system.
>
>
> HTH
>
> Robert
> ---
>
>

"Tom Bean" <tbean@newsgroup.nospam> wrote in message
news:%23t5jymg5FHA.1032@TK2MSFTNGP11.phx.gbl...
> Robert,
>
> I started to uninstall the rollup but a warning message popped up saying my
> system might not work if I removed the rollup. Is removing the rollup going
> to cause problems with my system?


Did you read Dave Hawley's thread? It looks as if he was able to
uninstall and reinstall safely in several different ways. YMMV.


>
> It seems that someone from Microsoft should be able to definitively answer
> the questions about why the rollup doesn't think it is installed.
>
> Tom


My experience is that they don't do diagnosis as long as they think
there is a sufficiently strong "hammer" to try. Sometimes the "hammer"
ends up demolishing the thing you would like to repair and you are
advised to rebuild. <EG>


Good luck

Robert
---

I uninstalled and reinstalled Update Rollup 1 for Windows 2000 SP4 but after
restarting, Windows Update still tells me I need to install Update Rollup 1
for Windows 2000 SP4.

As you suggested, I ran MBSA and all it tells me in the Update Rollups and
Service Packs section is that Update Rollup 1 for Windows 2000 SP4 is
missing. Now it has a yellow X instead of the red X it had earlier. All
entries in the Current Update Compliance section have green check marks.

In other words, I see nothing that gives me a clue as to why my system
doesn't think Update Rollup 1 for Windows 2000 SP4 is not installed.

Any other ideas?

Tom

"Robert Aldwinckle" <robald@techemail.com> wrote in message
news:%23rLDd9h5FHA.1716@TK2MSFTNGP10.phx.gbl...
> "Tom Bean" <tbean@newsgroup.nospam> wrote in message
> news:%23t5jymg5FHA.1032@TK2MSFTNGP11.phx.gbl...
> > Robert,
> >
> > I started to uninstall the rollup but a warning message popped up saying
my
> > system might not work if I removed the rollup. Is removing the rollup
going
> > to cause problems with my system?
>
>
> Did you read Dave Hawley's thread? It looks as if he was able to
> uninstall and reinstall safely in several different ways. YMMV.
>
>
> >
> > It seems that someone from Microsoft should be able to definitively
answer
> > the questions about why the rollup doesn't think it is installed.
> >
> > Tom
>
>
> My experience is that they don't do diagnosis as long as they think
> there is a sufficiently strong "hammer" to try. Sometimes the "hammer"
> ends up demolishing the thing you would like to repair and you are
> advised to rebuild. <EG>
>
>
> Good luck
>
> Robert
> ---
>
>

"Tom Bean" <tbean@newsgroup.nospam> wrote in message
news:uI5IOl75FHA.1032@TK2MSFTNGP11.phx.gbl
....
> Any other ideas?

>> Did you read Dave Hawley's thread?


>I uninstalled and reinstalled Update Rollup 1 for Windows 2000 SP4 but after
> restarting, Windows Update still tells me I need to install Update Rollup 1
> for Windows 2000 SP4.
>
> As you suggested, I ran MBSA and all it tells me in the Update Rollups and
> Service Packs section is that Update Rollup 1 for Windows 2000 SP4 is
> missing. Now it has a yellow X instead of the red X it had earlier.
....


That looks as if you are using the new MBSA and not the old one that
Dave had to use. The tools that I had hoped he could use apparently
don't exist (e.g. /hf /v /z options for mbsacli and the /verbose switch
on the update's command line) so if MBSA 1.2.1 doesn't give you the
same clues that it gave to him the only thing left it seems is the sort
of brute force analysis that I also suggested to him in that thread.

For newer, more refined, techniques see also other recent threads
elsewhere in this newsgroup about the same issue.
Keywords: FileMon RegMon Milleseconds


An alternative to doing your own diagnosis is waiting for someone like
Dave to come along and find a new solution. In my experience his type
is rarely seen in here. We need more trailblazers like that.


Good luck

Robert
---