[Product update] Infrastructure Analysis Tool is now available with Business Accounts.Learn More



Windows Server Update Services (WSUS), previously known as Software Update Services (SUS), is a computer program developed by Microsoft that enables administrators to manage the distribution of updates and hotfixes released for Microsoft products to computers.

Share tech news, updates, or what's on your mind.

Sign up to Post

"Oops, they did it again..." Microsoft proves once more that they don't care about WSUS - it can be safely assumed that they don't test with it.

Incredible. PLEASE UPVOTE THE TECHNET THREAD, so Microsoft becomes aware.
Become a Certified Penetration Testing Engineer
LVL 12
Become a Certified Penetration Testing Engineer

This CPTE Certified Penetration Testing Engineer course covers everything you need to know about becoming a Certified Penetration Testing Engineer. Career Path: Professional roles include Ethical Hackers, Security Consultants, System Administrators, and Chief Security Officers.

Great news! Microsoft has taken another step in fighting the spectre 2 vulnerability and has issued more microcode updates, this time including the CPU types Haswell and Broadwell.
These updates need to be downloaded and installed manually, they will not come automatically!
WSUS admins need to import these manually, too.

The link shows a way to import upates into wsus 10 (server 2016) what would otherwise be impossible due to a bug. Very important for WSUS admins.
Finally: Microcode updates against the Spectre2 vulnerability.
From Microsoft. Not for all OS' (Win10 1709 exclusive), not for all CPUs (but for some skylake CPUs, for example for https://en.wikichip.org/wiki/intel/cores/skylake_s#Skylake_S_Processors and https://en.wikichip.org/wiki/intel/cores/skylake_h#Skylake_H_Processors )
That patch will be updated as more Microcode updates are released.

Important: it does not distribute automatically! It can be imported to WSUS!
LVL 63

Author Comment

Depends which skylake laptop (and CPU) you are talking about. Lenovo will have offered updates for its skylake laptops already, they were quick.
LVL 108

Expert Comment

Yes that could be the reason. Lenovo BIOS was out with the January out-of-band updates.

Microsoft Patch Tuesday February 2018 updates

This month’s update includes patches for 50 vulnerabilities, along with patches for the infamous processor bugs Meltdown and Spectre.

In addition to those patches, Microsoft has also released a patch for a recent zero-day vulnerability for Adobe Flash Player. This update was bundled along with Microsoft’s ADV180004 update last week.

Although this past month didn’t have any major vulnerabilities reported, there was a notable cyberattack. During the inaugural ceremony for the Winter Olympics last week, a wiper malware (similar to NotPetya) took down most of the WAN and LAN networks at the Olympics.

Read more: https://blogs.manageengine.com/desktop-mobile/desktopcentral/2018/02/14/microsoft-patch-tuesday-february-2018-updates.html
Why not WSUS SERVER push update IN CLIENT PC
LVL 27

Expert Comment

by:Brian B
You have entered this as a post, but it looks like you are asking for help. To get the best response from the Experts, you should probably re-submit this as a question using the "ask a question" button at the top of the page, or this link: https://www.experts-exchange.com/askQuestion.jsp

If you do ask a question, please post the link to it back here so others can find your question and help you more quickly.

Please see here for further details: http://support.experts-exchange.com/customer/portal/articles/756544-how-to-succeed-at-ee-as-an-asker
I work in an environment where we have multiple offline WSUS servers. We have an internal process that migrates new downloaded files from our Internet-based WSUS to all of our off-line networks (via one-way transfer network pipes). We can't be the only ones to have to do this.

Is there an COTS product that specializes in this need?
LVL 24

Administrative Comment

by:Andrew Leniart
Hi Colman,

Welcome to Experts Exchange.

What you have done is made a "Post" here.  To get expert help, you need to "Ask a Question" so that more experts are able to see that you need help. Click the Big blue button near the top of your screen.

Ask a Question

The following link also explains more about asking for help at Experts Exchange...

Hope that's helpful.

EE Topic Advisor


Windows Server Update Services (WSUS), previously known as Software Update Services (SUS), is a computer program developed by Microsoft that enables administrators to manage the distribution of updates and hotfixes released for Microsoft products to computers.

Top Experts In