Solved

Understanding windows updates / WSUS on windows SBS 2011 standard with GFI Max patching

Posted on 2014-11-02
5
359 Views
Last Modified: 2014-11-10
I am using GFI Max for patching windows computers.

I have an SBS 2011 standard server that I took over a few months ago and installed Max.  I am learning Max, so this may be a Max issue and - or sbs WSUS question.

Max says 6 patches are missing:
6 Missing

Missing Patches
-      Update for Windows Server 2008 R2 x64 Edition (KB2853952)
-      Update for Windows Server 2008 R2 x64 Edition (KB2985461)
-      Update for Windows Server 2008 R2 x64 Edition (KB2888049)
-      Update for Windows Server 2008 R2 x64 Edition (KB2893519)
-      Update for Windows Server 2008 R2 x64 Edition (KB2928562)
Important      Security Update for Windows Server 2008 R2 x64 Edition (KB2922229)

Windows update on the server says the server is up to date:

Windows is up to date | there are no updates available for your computer

Most recent check for updates: today at 3PM
Updates were installed: 1/17/14
You receive updates: managed by your system administrator

1) that updates were installed line is updates installed by windows update, not Max?
2) You receive updates managed by sys admin: is that wsus? Or standard phrases?

There IS a role for WSUS running on the server. But I do no know how to use WSUS and rely on Max.

I was thinking that I could use windows update as a double check to see if Max says the server is patched, I can use windows update to see if it agrees.  But at this point it's the other way around - Max says patches are needed and Windows Update says the server is up to date.

Do I want to disable or uninstall wsus? or something else?
0
Comment
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 3
5 Comments
 
LVL 4

Accepted Solution

by:
Jerry Mills earned 500 total points
ID: 40418618
WSUS updates on a schedule setup by the installer.  What you may be seeing is conflict between scheduling update availability checks by MAX vsus WSUS.

Suggest you run a manual update check on WSUS the MAX and compare results.  To manually perform update check on WSUS you need to:
1. Open 'Windows Update Services' under administrative tools.
2. Right click on 'Synchronizations' and select sync now.
3. Wait for sync to complete.
4. Goto 'Computers' folder tree - find your server then run status report.
5. Goto GFI Max and run report.
6. Compare results.
0
 
LVL 4

Expert Comment

by:Jerry Mills
ID: 40418623
WSUS manual sync
WSUSupdate.jpg
0
 

Author Comment

by:BeGentleWithMe-INeedHelp
ID: 40418776
Thanks jerry.  I'd like to not have to do all those steps though : )

Can I just setup the server to get updates from Microsoft like a desktop would do?  I've shied away from WSUS because of the complexity and even with the complexity, it doesn't patch other apps.

Is there a simple way to disable WSUS or tell the server not to use WSUS for updates?
0
 
LVL 4

Expert Comment

by:Jerry Mills
ID: 40418805
Yes -but you need to remove any domain group policy or local policy for WSUS updates to stop using WSUS.
0
 
LVL 35

Expert Comment

by:Cris Hanna
ID: 40419924
I'm not trying to be rude here, but I'd suggest that if you're shying away from WSUS, running on SBS 2011, then perhaps you don't have a lot of experience with SBS ?   Once it's setup with the wizards...then monthly all you have to do is go in and approve the updates when Microsoft pushes them out.  and there is a detection process in WSUS to only get the updates that are truly needed.  For instance...Maybe you don't want IE11 to be deployed to all workstations.   you can decline it in WSUS.   It takes very little time each month

But yes you can turn off the Group Policies for WSUS and then don't use it...just use GFI...but should only use one or the other
0

Featured Post

Independent Software Vendors: We Want Your Opinion

We value your feedback.

Take our survey and automatically be enter to win anyone of the following:
Yeti Cooler, Amazon eGift Card, and Movie eGift Card!

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Welcome to my series of short tips on migrations. Whilst based on Microsoft migrations the same principles can be applied to any type of migration. My first tip is around source server preparation. No migration is an easy migration, there is a…
I work for a company that primarily works with small businesses as their outsourced IT vendor. As such the majority of these customers utilize some version of Small Business Server. Due to the economics of running a small business, many of these cus…
In an interesting question (https://www.experts-exchange.com/questions/29008360/) here at Experts Exchange, a member asked how to split a single image into multiple images. The primary usage for this is to place many photographs on a flatbed scanner…
Exchange organizations may use the Journaling Agent of the Transport Service to archive messages going through Exchange. However, if the Transport Service is integrated with some email content management application (such as an antispam), the admini…

739 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question