Why So Many Windows Updates
Why Are There So Many Windows Updates
Sometimes it seems like updates for your Windows PC are sprouting as quickly as the dandelions in the spring time. Here’s a look at why there are so many updates. The primary driver behind all updates is to improve security. Windows Update has been installing updates not only daily, but over and over the same day. I update, it says it was successful then when I shut down to computer it installs the updates again. I restart the computer and the same 6 updates are there again. Is it Microsoft doing so many daily updates (18-24 a day) or is it my computer that is not working in this area. Apr 9, 2019 - Patch Tuesday is the day updates are released for Microsoft software. See How Do I Install Windows Updates? If you're new to this or need.
Joe Tindale, one of our top gun WSUS Support Escalation Engineers, recently wrote up a good explanation on why the updates offered by Windows Update or Microsoft Update may differ from the number reported by WSUS as being ‘Needed’. If you’ve ever seen this and wondered why then take a look below:Issue: You may see a difference in between the number of updates offered via Microsoft Update and the updates reported by WSUS as needed.Example: We took a machine and scanned that machine against Microsoft Update (MU) and then created a report within WSUS to list all the “needed” updates. WSUS reported 31 updates as “needed” but MU offered less. Here are some examples of where they differed:907417. There is a discrepancy between how WSUS detects the needed updates and Windows Update detects them. Case in point: We ran the Microsoft Baseline Security Analyzer against a workstation right after we released the current batch of Microsoft patches in WSUS.
Everything WSUS had offered was approved. The Baseline Security Analyzer came up with 4 patches WSUS didn't even list: KB974234, KB969559, KB973709, and KB954430. The catagories in WSUS these 4 patches fell under were checked, so WSUS should have detected we needed them. A search of WSUS under ALL PATCHES, under both Declined (Show Any) and All Except Declined (Show Any) did not find those four patches, so WSUS never detected/downloaded them. Makes me wonder how many other patches we've trusted WSUS to give us that is didn't.