Faulty detection routine for MS08-024 (KB947864)?

I am in the process of validating the April 08 patches and have found that on
numerous machines with IE 7 installed, MS08-024 is not detected as necessary.
I am using ITMU v3 for SMS to deploy these patches, but visiting Windows
Update with the same computer also shows that MS08-024 - Cumulative update
for IE 7 is not needed. None of the machines actually have MS08-024
installed. I have verified this by looking at the version of URLMON.DLL on
these machines and it is older than the 7.0.6000.20772. The version on the
machine is 7.0.6000.20733

Here is the log entry from SMSWusHandler.log showing that MS08-024 is
detected as "INSTALLED". This is not correct. it is not installed. If I
remove the February cumulative update for IE 7, then run the scan again, the
patch is detected as needed. Windows Update is not correctly detecting the
abcense of MS08-024.



This is a Top-level update.
UpdateID={0162a7a8-01e2-416f-adcb-2c68141a7183} SmsWusHandler 4/9/2008
11:39:34 2336 (0x0920)
Leaf-update SmsWusHandler 4/9/2008 11:39:34 2336 (0x0920)
Detected update with ID={6ff686ff-20e8-4dc3-82eb-c8d5e652ce32} for
Product(s) - SmsWusHandler 4/9/2008 11:39:34 2336 (0x0920)
- Windows XP SmsWusHandler 4/9/2008 11:39:34 2336 (0x0920)
Update Title=Cumulative Security Update for Internet Explorer 7 for
Windows XP (KB947864), BulletinID=MS08-024 SmsWusHandler 4/9/2008
11:39:34 2336 (0x0920)
Status=Installed SmsWusHandler 4/9/2008 11:39:34 2336 (0x0920)



And this from ScanWrapper...

Product = Windows XP, BulletinTitle = Cumulative Security Update for
Internet Explorer 7 for Windows XP (KB947864) Software Updates Scan
Tool 4/9/2008 08:03:18 3484 (0x0D9C)
BulletinID = MS08-024, QNumber = 947864, Status = Installed - Software
Updates Scan Tool 4/9/2008 08:03:18 3484 (0x0D9C)



and


Updating Instance with ID = MS08-024, QNumber = 947864, Title = Cumulative
Security Update for Internet Explorer 7 for Windows XP (KB947864) Software
Updates Scan Tool 4/9/2008 08:03:20 3484 (0x0D9C)
Status = Installed Software Updates Scan Tool 4/9/2008 08:03:20 3484 (0x0D9C)
ScanDateTime = 20080409080318.000000+*** Software Updates Scan Tool 4/9/2008
08:03:20 3484 (0x0D9C)
TimeDetected = 20080409080318.000000+*** Software Updates Scan Tool 4/9/2008
08:03:20 3484 (0x0D9C)
TimeApplied = 20080409080318.000000+*** Software Updates Scan Tool 4/9/2008
08:03:20 3484 (0x0D9C)

I forgot to specify that all clients are Windows XP with SP2 x86.

"Todd Miller" wrote:

> I am in the process of validating the April 08 patches and have found that on
> numerous machines with IE 7 installed, MS08-024 is not detected as necessary.
> I am using ITMU v3 for SMS to deploy these patches, but visiting Windows
> Update with the same computer also shows that MS08-024 - Cumulative update
> for IE 7 is not needed. None of the machines actually have MS08-024
> installed. I have verified this by looking at the version of URLMON.DLL on
> these machines and it is older than the 7.0.6000.20772. The version on the
> machine is 7.0.6000.20733
>
> Here is the log entry from SMSWusHandler.log showing that MS08-024 is
> detected as "INSTALLED". This is not correct. it is not installed. If I
> remove the February cumulative update for IE 7, then run the scan again, the
> patch is detected as needed. Windows Update is not correctly detecting the
> abcense of MS08-024.
>
>
>
> This is a Top-level update.
> UpdateID={0162a7a8-01e2-416f-adcb-2c68141a7183} SmsWusHandler 4/9/2008
> 11:39:34 2336 (0x0920)
> Leaf-update SmsWusHandler 4/9/2008 11:39:34 2336 (0x0920)
> Detected update with ID={6ff686ff-20e8-4dc3-82eb-c8d5e652ce32} for
> Product(s) - SmsWusHandler 4/9/2008 11:39:34 2336 (0x0920)
> - Windows XP SmsWusHandler 4/9/2008 11:39:34 2336 (0x0920)
> Update Title=Cumulative Security Update for Internet Explorer 7 for
> Windows XP (KB947864), BulletinID=MS08-024 SmsWusHandler 4/9/2008
> 11:39:34 2336 (0x0920)
> Status=Installed SmsWusHandler 4/9/2008 11:39:34 2336 (0x0920)
>
>
>
> And this from ScanWrapper...
>
> Product = Windows XP, BulletinTitle = Cumulative Security Update for
> Internet Explorer 7 for Windows XP (KB947864) Software Updates Scan
> Tool 4/9/2008 08:03:18 3484 (0x0D9C)
> BulletinID = MS08-024, QNumber = 947864, Status = Installed - Software
> Updates Scan Tool 4/9/2008 08:03:18 3484 (0x0D9C)
>
>
>
> and
>
>
> Updating Instance with ID = MS08-024, QNumber = 947864, Title = Cumulative
> Security Update for Internet Explorer 7 for Windows XP (KB947864) Software
> Updates Scan Tool 4/9/2008 08:03:20 3484 (0x0D9C)
> Status = Installed Software Updates Scan Tool 4/9/2008 08:03:20 3484 (0x0D9C)
> ScanDateTime = 20080409080318.000000+*** Software Updates Scan Tool 4/9/2008
> 08:03:20 3484 (0x0D9C)
> TimeDetected = 20080409080318.000000+*** Software Updates Scan Tool 4/9/2008
> 08:03:20 3484 (0x0D9C)
> TimeApplied = 20080409080318.000000+*** Software Updates Scan Tool 4/9/2008
> 08:03:20 3484 (0x0D9C)
>

Installing IE7 in WinXP SP2 should also install Vbscript and Jbscript v5.7,
hence no WinXP machines running IE7 should be offered MS08-024.

We expect MS08-024 and KB947864 to be updated shortly to include this
pertinent information, Todd.
--
~Robear Dyer (PA Bear)
MS MVP-IE, Mail, Security, Windows Desktop Experience - since 2002
AumHa VSOP & Admin http://aumha.net
DTS-L http://dts-l.net/

Todd Miller wrote:
> I forgot to specify that all clients are Windows XP with SP2 x86.
>
>> I am in the process of validating the April 08 patches and have found
>> that
>> on numerous machines with IE 7 installed, MS08-024 is not detected as
>> necessary. I am using ITMU v3 for SMS to deploy these patches, but
>> visiting Windows Update with the same computer also shows that MS08-024 -
>> Cumulative update for IE 7 is not needed. None of the machines actually
>> have MS08-024 installed. I have verified this by looking at the version
>> of URLMON.DLL on these machines and it is older than the 7.0.6000.20772.
>> The version on the machine is 7.0.6000.20733
>>
>> Here is the log entry from SMSWusHandler.log showing that MS08-024 is
>> detected as "INSTALLED". This is not correct. it is not installed. If I
>> remove the February cumulative update for IE 7, then run the scan again,
>> the patch is detected as needed. Windows Update is not correctly
>> detecting the abcense of MS08-024.
>>
>>
>>
>> This is a Top-level update.
>> UpdateID={0162a7a8-01e2-416f-adcb-2c68141a7183} SmsWusHandler 4/9/2008
>> 11:39:34 2336 (0x0920)
>> Leaf-update SmsWusHandler 4/9/2008 11:39:34 2336 (0x0920)
>> Detected update with ID={6ff686ff-20e8-4dc3-82eb-c8d5e652ce32} for
>> Product(s) - SmsWusHandler 4/9/2008 11:39:34 2336 (0x0920)
>> - Windows XP SmsWusHandler 4/9/2008 11:39:34 2336 (0x0920)
>> Update Title=Cumulative Security Update for Internet Explorer 7 for
>> Windows XP (KB947864), BulletinID=MS08-024 SmsWusHandler 4/9/2008
>> 11:39:34 2336 (0x0920)
>> Status=Installed SmsWusHandler 4/9/2008 11:39:34 2336 (0x0920)
>>
>>
>>
>> And this from ScanWrapper...
>>
>> Product = Windows XP, BulletinTitle = Cumulative Security Update for
>> Internet Explorer 7 for Windows XP (KB947864) Software Updates Scan
>> Tool 4/9/2008 08:03:18 3484 (0x0D9C)
>> BulletinID = MS08-024, QNumber = 947864, Status = Installed - Software
>> Updates Scan Tool 4/9/2008 08:03:18 3484 (0x0D9C)
>>
>>
>>
>> and
>>
>>
>> Updating Instance with ID = MS08-024, QNumber = 947864, Title =
>> Cumulative
>> Security Update for Internet Explorer 7 for Windows XP (KB947864)
>> Software
>> Updates Scan Tool 4/9/2008 08:03:20 3484 (0x0D9C)
>> Status = Installed Software Updates Scan Tool 4/9/2008 08:03:20 3484
>> (0x0D9C) ScanDateTime = 20080409080318.000000+*** Software Updates Scan
>> Tool 4/9/2008 08:03:20 3484 (0x0D9C)
>> TimeDetected = 20080409080318.000000+*** Software Updates Scan Tool
>> 4/9/2008 08:03:20 3484 (0x0D9C)
>> TimeApplied = 20080409080318.000000+*** Software Updates Scan Tool
>> 4/9/2008
>> 08:03:20 3484 (0x0D9C)

[Crossposted to microsoft.public.windows.server.update_services newsgroup]

Please IGNORE my previous, inappropriate reply to this thread.

Start a free Windows Update support incident request:
https://support.microsoft.com/oas/de...spx?gprid=6527

Support for Windows Update:
http://support.microsoft.com/gp/wusupport

There is no-charge for support calls that are associated with security
updates.

For more information about how to contact your local Microsoft subsidiary
for security update support issues, visit the International Support Web
site: http://support.microsoft.com/common/international.aspx

For enterprise customers, support for security updates is available through
your usual support contacts.
--
~Robear Dyer (PA Bear)
MS MVP-Windows (IE, OE, Security, Shell/User)
AumHa VSOP & Admin; DTS-L.net

PA Bear [MS MVP] wrote:
<snip>
> Todd Miller wrote:
>> I forgot to specify that all clients are Windows XP with SP2 x86.
>>
>>> I am in the process of validating the April 08 patches and have found
>>> that
>>> on numerous machines with IE 7 installed, MS08-024 is not detected as
>>> necessary. I am using ITMU v3 for SMS to deploy these patches, but
>>> visiting Windows Update with the same computer also shows that
>>> MS08-024 -
>>> Cumulative update for IE 7 is not needed. None of the machines
>>> actually
>>> have MS08-024 installed. I have verified this by looking at the version
>>> of URLMON.DLL on these machines and it is older than the 7.0.6000.20772.
>>> The version on the machine is 7.0.6000.20733
>>>
>>> Here is the log entry from SMSWusHandler.log showing that MS08-024 is
>>> detected as "INSTALLED". This is not correct. it is not installed. If
>>> I
>>> remove the February cumulative update for IE 7, then run the scan again,
>>> the patch is detected as needed. Windows Update is not correctly
>>> detecting the abcense of MS08-024.
>>>
>>> This is a Top-level update.
>>> UpdateID={0162a7a8-01e2-416f-adcb-2c68141a7183} SmsWusHandler 4/9/2008
>>> 11:39:34 2336 (0x0920)
>>> Leaf-update SmsWusHandler 4/9/2008 11:39:34 2336 (0x0920)
>>> Detected update with ID={6ff686ff-20e8-4dc3-82eb-c8d5e652ce32} for
>>> Product(s) - SmsWusHandler 4/9/2008 11:39:34 2336 (0x0920)
>>> - Windows XP SmsWusHandler 4/9/2008 11:39:34 2336 (0x0920)
>>> Update Title=Cumulative Security Update for Internet Explorer 7 for
>>> Windows XP (KB947864), BulletinID=MS08-024 SmsWusHandler 4/9/2008
>>> 11:39:34 2336 (0x0920)
>>> Status=Installed SmsWusHandler 4/9/2008 11:39:34 2336 (0x0920)
>>>
>>> And this from ScanWrapper...
>>>
>>> Product = Windows XP, BulletinTitle = Cumulative Security Update for
>>> Internet Explorer 7 for Windows XP (KB947864) Software Updates Scan
>>> Tool 4/9/2008 08:03:18 3484 (0x0D9C)
>>> BulletinID = MS08-024, QNumber = 947864, Status = Installed -
>>> Software
>>> Updates Scan Tool 4/9/2008 08:03:18 3484 (0x0D9C)
>>>
>>> and
>>>
>>> Updating Instance with ID = MS08-024, QNumber = 947864, Title =
>>> Cumulative
>>> Security Update for Internet Explorer 7 for Windows XP (KB947864)
>>> Software
>>> Updates Scan Tool 4/9/2008 08:03:20 3484 (0x0D9C)
>>> Status = Installed Software Updates Scan Tool 4/9/2008 08:03:20 3484
>>> (0x0D9C) ScanDateTime = 20080409080318.000000+*** Software Updates Scan
>>> Tool 4/9/2008 08:03:20 3484 (0x0D9C)
>>> TimeDetected = 20080409080318.000000+*** Software Updates Scan Tool
>>> 4/9/2008 08:03:20 3484 (0x0D9C)
>>> TimeApplied = 20080409080318.000000+*** Software Updates Scan Tool
>>> 4/9/2008
>>> 08:03:20 3484 (0x0D9C)

Thanks. I am certain that this is not a problem with my client computers. I
will not have time to consult with Microsoft to fix this problem. I just
wanted to alert the Windows Update group that there was a problem with the
detection logic for this update. I will leave it to the employees of
Microsoft to evaluate and fix the problem.

"PA Bear [MS MVP]" wrote:

> [Crossposted to microsoft.public.windows.server.update_services newsgroup]
>
> Please IGNORE my previous, inappropriate reply to this thread.
>
> Start a free Windows Update support incident request:
> https://support.microsoft.com/oas/de...spx?gprid=6527
>
> Support for Windows Update:
> http://support.microsoft.com/gp/wusupport
>
> There is no-charge for support calls that are associated with security
> updates.
>
> For more information about how to contact your local Microsoft subsidiary
> for security update support issues, visit the International Support Web
> site: http://support.microsoft.com/common/international.aspx
>
> For enterprise customers, support for security updates is available through
> your usual support contacts.
> --
> ~Robear Dyer (PA Bear)
> MS MVP-Windows (IE, OE, Security, Shell/User)
> AumHa VSOP & Admin; DTS-L.net
>
> PA Bear [MS MVP] wrote:
> <snip>
> > Todd Miller wrote:
> >> I forgot to specify that all clients are Windows XP with SP2 x86.
> >>
> >>> I am in the process of validating the April 08 patches and have found
> >>> that
> >>> on numerous machines with IE 7 installed, MS08-024 is not detected as
> >>> necessary. I am using ITMU v3 for SMS to deploy these patches, but
> >>> visiting Windows Update with the same computer also shows that
> >>> MS08-024 -
> >>> Cumulative update for IE 7 is not needed. None of the machines
> >>> actually
> >>> have MS08-024 installed. I have verified this by looking at the version
> >>> of URLMON.DLL on these machines and it is older than the 7.0.6000.20772.
> >>> The version on the machine is 7.0.6000.20733
> >>>
> >>> Here is the log entry from SMSWusHandler.log showing that MS08-024 is
> >>> detected as "INSTALLED". This is not correct. it is not installed. If
> >>> I
> >>> remove the February cumulative update for IE 7, then run the scan again,
> >>> the patch is detected as needed. Windows Update is not correctly
> >>> detecting the abcense of MS08-024.
> >>>
> >>> This is a Top-level update.
> >>> UpdateID={0162a7a8-01e2-416f-adcb-2c68141a7183} SmsWusHandler 4/9/2008
> >>> 11:39:34 2336 (0x0920)
> >>> Leaf-update SmsWusHandler 4/9/2008 11:39:34 2336 (0x0920)
> >>> Detected update with ID={6ff686ff-20e8-4dc3-82eb-c8d5e652ce32} for
> >>> Product(s) - SmsWusHandler 4/9/2008 11:39:34 2336 (0x0920)
> >>> - Windows XP SmsWusHandler 4/9/2008 11:39:34 2336 (0x0920)
> >>> Update Title=Cumulative Security Update for Internet Explorer 7 for
> >>> Windows XP (KB947864), BulletinID=MS08-024 SmsWusHandler 4/9/2008
> >>> 11:39:34 2336 (0x0920)
> >>> Status=Installed SmsWusHandler 4/9/2008 11:39:34 2336 (0x0920)
> >>>
> >>> And this from ScanWrapper...
> >>>
> >>> Product = Windows XP, BulletinTitle = Cumulative Security Update for
> >>> Internet Explorer 7 for Windows XP (KB947864) Software Updates Scan
> >>> Tool 4/9/2008 08:03:18 3484 (0x0D9C)
> >>> BulletinID = MS08-024, QNumber = 947864, Status = Installed -
> >>> Software
> >>> Updates Scan Tool 4/9/2008 08:03:18 3484 (0x0D9C)
> >>>
> >>> and
> >>>
> >>> Updating Instance with ID = MS08-024, QNumber = 947864, Title =
> >>> Cumulative
> >>> Security Update for Internet Explorer 7 for Windows XP (KB947864)
> >>> Software
> >>> Updates Scan Tool 4/9/2008 08:03:20 3484 (0x0D9C)
> >>> Status = Installed Software Updates Scan Tool 4/9/2008 08:03:20 3484
> >>> (0x0D9C) ScanDateTime = 20080409080318.000000+*** Software Updates Scan
> >>> Tool 4/9/2008 08:03:20 3484 (0x0D9C)
> >>> TimeDetected = 20080409080318.000000+*** Software Updates Scan Tool
> >>> 4/9/2008 08:03:20 3484 (0x0D9C)
> >>> TimeApplied = 20080409080318.000000+*** Software Updates Scan Tool
> >>> 4/9/2008
> >>> 08:03:20 3484 (0x0D9C)
>
>

KB947864 is not installing on my system (Vista x64 SP1 Ultimate) (fails to
install) but it *is* being listed as necessary.

I've gotten various different errors in the Event Log ranging from
"Windows Servicing identified that package KB947864(Security Update) is not
applicable for this system"

to

"Windows Servicing failed to complete the process of setting package
KB947864 (Security Update) into Install Requested(Install Requested) state"

"Windows Servicing failed to complete the process of changing update
947864-92_neutral_PACKAGE from package KB947864(Security Update) into
Absent(Absent) state"

"Windows Servicing failed to complete the process of changing update
947864-93_neutral_PACKAGE from package KB947864(Security Update) into
Staged(Staged) state"



"Todd Miller" wrote:

> Thanks. I am certain that this is not a problem with my client computers. I
> will not have time to consult with Microsoft to fix this problem. I just
> wanted to alert the Windows Update group that there was a problem with the
> detection logic for this update. I will leave it to the employees of
> Microsoft to evaluate and fix the problem.
>
> "PA Bear [MS MVP]" wrote:
>
> > [Crossposted to microsoft.public.windows.server.update_services newsgroup]
> >
> > Please IGNORE my previous, inappropriate reply to this thread.
> >
> > Start a free Windows Update support incident request:
> > https://support.microsoft.com/oas/de...spx?gprid=6527
> >
> > Support for Windows Update:
> > http://support.microsoft.com/gp/wusupport
> >
> > There is no-charge for support calls that are associated with security
> > updates.
> >
> > For more information about how to contact your local Microsoft subsidiary
> > for security update support issues, visit the International Support Web
> > site: http://support.microsoft.com/common/international.aspx
> >
> > For enterprise customers, support for security updates is available through
> > your usual support contacts.
> > --
> > ~Robear Dyer (PA Bear)
> > MS MVP-Windows (IE, OE, Security, Shell/User)
> > AumHa VSOP & Admin; DTS-L.net
> >
> > PA Bear [MS MVP] wrote:
> > <snip>
> > > Todd Miller wrote:
> > >> I forgot to specify that all clients are Windows XP with SP2 x86.
> > >>
> > >>> I am in the process of validating the April 08 patches and have found
> > >>> that
> > >>> on numerous machines with IE 7 installed, MS08-024 is not detected as
> > >>> necessary. I am using ITMU v3 for SMS to deploy these patches, but
> > >>> visiting Windows Update with the same computer also shows that
> > >>> MS08-024 -
> > >>> Cumulative update for IE 7 is not needed. None of the machines
> > >>> actually
> > >>> have MS08-024 installed. I have verified this by looking at the version
> > >>> of URLMON.DLL on these machines and it is older than the 7.0.6000.20772.
> > >>> The version on the machine is 7.0.6000.20733
> > >>>
> > >>> Here is the log entry from SMSWusHandler.log showing that MS08-024 is
> > >>> detected as "INSTALLED". This is not correct. it is not installed. If
> > >>> I
> > >>> remove the February cumulative update for IE 7, then run the scan again,
> > >>> the patch is detected as needed. Windows Update is not correctly
> > >>> detecting the abcense of MS08-024.
> > >>>
> > >>> This is a Top-level update.
> > >>> UpdateID={0162a7a8-01e2-416f-adcb-2c68141a7183} SmsWusHandler 4/9/2008
> > >>> 11:39:34 2336 (0x0920)
> > >>> Leaf-update SmsWusHandler 4/9/2008 11:39:34 2336 (0x0920)
> > >>> Detected update with ID={6ff686ff-20e8-4dc3-82eb-c8d5e652ce32} for
> > >>> Product(s) - SmsWusHandler 4/9/2008 11:39:34 2336 (0x0920)
> > >>> - Windows XP SmsWusHandler 4/9/2008 11:39:34 2336 (0x0920)
> > >>> Update Title=Cumulative Security Update for Internet Explorer 7 for
> > >>> Windows XP (KB947864), BulletinID=MS08-024 SmsWusHandler 4/9/2008
> > >>> 11:39:34 2336 (0x0920)
> > >>> Status=Installed SmsWusHandler 4/9/2008 11:39:34 2336 (0x0920)
> > >>>
> > >>> And this from ScanWrapper...
> > >>>
> > >>> Product = Windows XP, BulletinTitle = Cumulative Security Update for
> > >>> Internet Explorer 7 for Windows XP (KB947864) Software Updates Scan
> > >>> Tool 4/9/2008 08:03:18 3484 (0x0D9C)
> > >>> BulletinID = MS08-024, QNumber = 947864, Status = Installed -
> > >>> Software
> > >>> Updates Scan Tool 4/9/2008 08:03:18 3484 (0x0D9C)
> > >>>
> > >>> and
> > >>>
> > >>> Updating Instance with ID = MS08-024, QNumber = 947864, Title =
> > >>> Cumulative
> > >>> Security Update for Internet Explorer 7 for Windows XP (KB947864)
> > >>> Software
> > >>> Updates Scan Tool 4/9/2008 08:03:20 3484 (0x0D9C)
> > >>> Status = Installed Software Updates Scan Tool 4/9/2008 08:03:20 3484
> > >>> (0x0D9C) ScanDateTime = 20080409080318.000000+*** Software Updates Scan
> > >>> Tool 4/9/2008 08:03:20 3484 (0x0D9C)
> > >>> TimeDetected = 20080409080318.000000+*** Software Updates Scan Tool
> > >>> 4/9/2008 08:03:20 3484 (0x0D9C)
> > >>> TimeApplied = 20080409080318.000000+*** Software Updates Scan Tool
> > >>> 4/9/2008
> > >>> 08:03:20 3484 (0x0D9C)
> >
> >

Have you opened a free support incident yet?

M Chweh wrote:
> KB947864 is not installing on my system (Vista x64 SP1 Ultimate) (fails to
> install) but it *is* being listed as necessary.
>
> I've gotten various different errors in the Event Log ranging from
> "Windows Servicing identified that package KB947864(Security Update) is
> not
> applicable for this system"
>
> to
>
> "Windows Servicing failed to complete the process of setting package
> KB947864 (Security Update) into Install Requested(Install Requested)
> state"
>
> "Windows Servicing failed to complete the process of changing update
> 947864-92_neutral_PACKAGE from package KB947864(Security Update) into
> Absent(Absent) state"
>
> "Windows Servicing failed to complete the process of changing update
> 947864-93_neutral_PACKAGE from package KB947864(Security Update) into
> Staged(Staged) state"
>
>
>
> "Todd Miller" wrote:
>
>> Thanks. I am certain that this is not a problem with my client
>> computers.
>> I will not have time to consult with Microsoft to fix this problem. I
>> just
>> wanted to alert the Windows Update group that there was a problem with
>> the
>> detection logic for this update. I will leave it to the employees of
>> Microsoft to evaluate and fix the problem.
>>
>> "PA Bear [MS MVP]" wrote:
>>
>>> [Crossposted to microsoft.public.windows.server.update_services
>>> newsgroup]
>>>
>>> Please IGNORE my previous, inappropriate reply to this thread.
>>>
>>> Start a free Windows Update support incident request:
>>> https://support.microsoft.com/oas/de...spx?gprid=6527
>>>
>>> Support for Windows Update:
>>> http://support.microsoft.com/gp/wusupport
>>>
>>> There is no-charge for support calls that are associated with security
>>> updates.
>>>
>>> For more information about how to contact your local Microsoft
>>> subsidiary
>>> for security update support issues, visit the International Support Web
>>> site: http://support.microsoft.com/common/international.aspx
>>>
>>> For enterprise customers, support for security updates is available
>>> through your usual support contacts.
>>> --
>>> ~Robear Dyer (PA Bear)
>>> MS MVP-Windows (IE, OE, Security, Shell/User)
>>> AumHa VSOP & Admin; DTS-L.net
>>>
>>> PA Bear [MS MVP] wrote:
>>> <snip>
>>>> Todd Miller wrote:
>>>>> I forgot to specify that all clients are Windows XP with SP2 x86.
>>>>>
>>>>>> I am in the process of validating the April 08 patches and have found
>>>>>> that
>>>>>> on numerous machines with IE 7 installed, MS08-024 is not detected as
>>>>>> necessary. I am using ITMU v3 for SMS to deploy these patches, but
>>>>>> visiting Windows Update with the same computer also shows that
>>>>>> MS08-024 -
>>>>>> Cumulative update for IE 7 is not needed. None of the machines
>>>>>> actually
>>>>>> have MS08-024 installed. I have verified this by looking at the
>>>>>> version of URLMON.DLL on these machines and it is older than the
>>>>>> 7.0.6000.20772. The version on the machine is 7.0.6000.20733
>>>>>>
>>>>>> Here is the log entry from SMSWusHandler.log showing that MS08-024 is
>>>>>> detected as "INSTALLED". This is not correct. it is not installed.
>>>>>> If
>>>>>> I
>>>>>> remove the February cumulative update for IE 7, then run the scan
>>>>>> again, the patch is detected as needed. Windows Update is not
>>>>>> correctly detecting the abcense of MS08-024.
>>>>>>
>>>>>> This is a Top-level update.
>>>>>> UpdateID={0162a7a8-01e2-416f-adcb-2c68141a7183} SmsWusHandler
>>>>>> 4/9/2008
>>>>>> 11:39:34 2336 (0x0920)
>>>>>> Leaf-update SmsWusHandler 4/9/2008 11:39:34 2336 (0x0920)
>>>>>> Detected update with ID={6ff686ff-20e8-4dc3-82eb-c8d5e652ce32} for
>>>>>> Product(s) - SmsWusHandler 4/9/2008 11:39:34 2336 (0x0920)
>>>>>> - Windows XP SmsWusHandler 4/9/2008 11:39:34 2336 (0x0920)
>>>>>> Update Title=Cumulative Security Update for Internet Explorer 7 for
>>>>>> Windows XP (KB947864), BulletinID=MS08-024 SmsWusHandler 4/9/2008
>>>>>> 11:39:34 2336 (0x0920)
>>>>>> Status=Installed SmsWusHandler 4/9/2008 11:39:34 2336 (0x0920)
>>>>>>
>>>>>> And this from ScanWrapper...
>>>>>>
>>>>>> Product = Windows XP, BulletinTitle = Cumulative Security Update for
>>>>>> Internet Explorer 7 for Windows XP (KB947864) Software Updates Scan
>>>>>> Tool 4/9/2008 08:03:18 3484 (0x0D9C)
>>>>>> BulletinID = MS08-024, QNumber = 947864, Status = Installed -
>>>>>> Software
>>>>>> Updates Scan Tool 4/9/2008 08:03:18 3484 (0x0D9C)
>>>>>>
>>>>>> and
>>>>>>
>>>>>> Updating Instance with ID = MS08-024, QNumber = 947864, Title =
>>>>>> Cumulative
>>>>>> Security Update for Internet Explorer 7 for Windows XP (KB947864)
>>>>>> Software
>>>>>> Updates Scan Tool 4/9/2008 08:03:20 3484 (0x0D9C)
>>>>>> Status = Installed Software Updates Scan Tool 4/9/2008 08:03:20 3484
>>>>>> (0x0D9C) ScanDateTime = 20080409080318.000000+*** Software Updates
>>>>>> Scan
>>>>>> Tool 4/9/2008 08:03:20 3484 (0x0D9C)
>>>>>> TimeDetected = 20080409080318.000000+*** Software Updates Scan Tool
>>>>>> 4/9/2008 08:03:20 3484 (0x0D9C)
>>>>>> TimeApplied = 20080409080318.000000+*** Software Updates Scan Tool
>>>>>> 4/9/2008
>>>>>> 08:03:20 3484 (0x0D9C)

AFAIK you (and M Chweh, who's problem is similar but not identical to yours)
are the only one to post about this in Windows Update newsgroup. If you
don't contact Support, there's a very good chance it won't be fixed as MS
might not be aware of the issue.

Posts in MS public newsgroups are not necessarily monitored by anyone from
MS Support. I encourage you to use your MS support options, Todd.
--
~PA Bear


Todd Miller wrote:
> Thanks. I am certain that this is not a problem with my client computers.
> I will not have time to consult with Microsoft to fix this problem. I
> just
> wanted to alert the Windows Update group that there was a problem with the
> detection logic for this update. I will leave it to the employees of
> Microsoft to evaluate and fix the problem.
>
> "PA Bear [MS MVP]" wrote:
>
>> [Crossposted to microsoft.public.windows.server.update_services
>> newsgroup]
>>
>> Please IGNORE my previous, inappropriate reply to this thread.
>>
>> Start a free Windows Update support incident request:
>> https://support.microsoft.com/oas/de...spx?gprid=6527
>>
>> Support for Windows Update:
>> http://support.microsoft.com/gp/wusupport
>>
>> There is no-charge for support calls that are associated with security
>> updates.
>>
>> For more information about how to contact your local Microsoft subsidiary
>> for security update support issues, visit the International Support Web
>> site: http://support.microsoft.com/common/international.aspx
>>
>> For enterprise customers, support for security updates is available
>> through
>> your usual support contacts.
>> --
>> ~Robear Dyer (PA Bear)
>> MS MVP-Windows (IE, OE, Security, Shell/User)
>> AumHa VSOP & Admin; DTS-L.net
>>
>> PA Bear [MS MVP] wrote:
>> <snip>
>>> Todd Miller wrote:
>>>> I forgot to specify that all clients are Windows XP with SP2 x86.
>>>>
>>>>> I am in the process of validating the April 08 patches and have found
>>>>> that
>>>>> on numerous machines with IE 7 installed, MS08-024 is not detected as
>>>>> necessary. I am using ITMU v3 for SMS to deploy these patches, but
>>>>> visiting Windows Update with the same computer also shows that
>>>>> MS08-024 -
>>>>> Cumulative update for IE 7 is not needed. None of the machines
>>>>> actually
>>>>> have MS08-024 installed. I have verified this by looking at the
>>>>> version
>>>>> of URLMON.DLL on these machines and it is older than the
>>>>> 7.0.6000.20772.
>>>>> The version on the machine is 7.0.6000.20733
>>>>>
>>>>> Here is the log entry from SMSWusHandler.log showing that MS08-024 is
>>>>> detected as "INSTALLED". This is not correct. it is not installed.
>>>>> If
>>>>> I
>>>>> remove the February cumulative update for IE 7, then run the scan
>>>>> again,
>>>>> the patch is detected as needed. Windows Update is not correctly
>>>>> detecting the abcense of MS08-024.
>>>>>
>>>>> This is a Top-level update.
>>>>> UpdateID={0162a7a8-01e2-416f-adcb-2c68141a7183} SmsWusHandler 4/9/2008
>>>>> 11:39:34 2336 (0x0920)
>>>>> Leaf-update SmsWusHandler 4/9/2008 11:39:34 2336 (0x0920)
>>>>> Detected update with ID={6ff686ff-20e8-4dc3-82eb-c8d5e652ce32} for
>>>>> Product(s) - SmsWusHandler 4/9/2008 11:39:34 2336 (0x0920)
>>>>> - Windows XP SmsWusHandler 4/9/2008 11:39:34 2336 (0x0920)
>>>>> Update Title=Cumulative Security Update for Internet Explorer 7 for
>>>>> Windows XP (KB947864), BulletinID=MS08-024 SmsWusHandler 4/9/2008
>>>>> 11:39:34 2336 (0x0920)
>>>>> Status=Installed SmsWusHandler 4/9/2008 11:39:34 2336 (0x0920)
>>>>>
>>>>> And this from ScanWrapper...
>>>>>
>>>>> Product = Windows XP, BulletinTitle = Cumulative Security Update for
>>>>> Internet Explorer 7 for Windows XP (KB947864) Software Updates Scan
>>>>> Tool 4/9/2008 08:03:18 3484 (0x0D9C)
>>>>> BulletinID = MS08-024, QNumber = 947864, Status = Installed -
>>>>> Software
>>>>> Updates Scan Tool 4/9/2008 08:03:18 3484 (0x0D9C)
>>>>>
>>>>> and
>>>>>
>>>>> Updating Instance with ID = MS08-024, QNumber = 947864, Title =
>>>>> Cumulative
>>>>> Security Update for Internet Explorer 7 for Windows XP (KB947864)
>>>>> Software
>>>>> Updates Scan Tool 4/9/2008 08:03:20 3484 (0x0D9C)
>>>>> Status = Installed Software Updates Scan Tool 4/9/2008 08:03:20 3484
>>>>> (0x0D9C) ScanDateTime = 20080409080318.000000+*** Software Updates
>>>>> Scan
>>>>> Tool 4/9/2008 08:03:20 3484 (0x0D9C)
>>>>> TimeDetected = 20080409080318.000000+*** Software Updates Scan Tool
>>>>> 4/9/2008 08:03:20 3484 (0x0D9C)
>>>>> TimeApplied = 20080409080318.000000+*** Software Updates Scan Tool
>>>>> 4/9/2008
>>>>> 08:03:20 3484 (0x0D9C)

Hi,

You are not alone, I maintain 3 Windows XP SP2 machines with IE7 installed
on them. None of them were offered KB947864 on Patch tuesday, I ended up
having to download it manually and install it on all three machines...

Donald Anadell


"Todd Miller" <> wrote in message
news:B2F24770-D101-4BEC-9D2B-...
>I am in the process of validating the April 08 patches and have found that
>on
> numerous machines with IE 7 installed, MS08-024 is not detected as
> necessary.
> I am using ITMU v3 for SMS to deploy these patches, but visiting Windows
> Update with the same computer also shows that MS08-024 - Cumulative update
> for IE 7 is not needed. None of the machines actually have MS08-024
> installed. I have verified this by looking at the version of URLMON.DLL
> on
> these machines and it is older than the 7.0.6000.20772. The version on
> the
> machine is 7.0.6000.20733
>
> Here is the log entry from SMSWusHandler.log showing that MS08-024 is
> detected as "INSTALLED". This is not correct. it is not installed. If I
> remove the February cumulative update for IE 7, then run the scan again,
> the
> patch is detected as needed. Windows Update is not correctly detecting
> the
> abcense of MS08-024.
>
>
>
> This is a Top-level update.
> UpdateID={0162a7a8-01e2-416f-adcb-2c68141a7183} SmsWusHandler 4/9/2008
> 11:39:34 2336 (0x0920)
> Leaf-update SmsWusHandler 4/9/2008 11:39:34 2336 (0x0920)
> Detected update with ID={6ff686ff-20e8-4dc3-82eb-c8d5e652ce32} for
> Product(s) - SmsWusHandler 4/9/2008 11:39:34 2336 (0x0920)
> - Windows XP SmsWusHandler 4/9/2008 11:39:34 2336 (0x0920)
> Update Title=Cumulative Security Update for Internet Explorer 7 for
> Windows XP (KB947864), BulletinID=MS08-024 SmsWusHandler 4/9/2008
> 11:39:34 2336 (0x0920)
> Status=Installed SmsWusHandler 4/9/2008 11:39:34 2336 (0x0920)
>
>
>
> And this from ScanWrapper...
>
> Product = Windows XP, BulletinTitle = Cumulative Security Update for
> Internet Explorer 7 for Windows XP (KB947864) Software Updates Scan
> Tool 4/9/2008 08:03:18 3484 (0x0D9C)
> BulletinID = MS08-024, QNumber = 947864, Status = Installed - Software
> Updates Scan Tool 4/9/2008 08:03:18 3484 (0x0D9C)
>
>
>
> and
>
>
> Updating Instance with ID = MS08-024, QNumber = 947864, Title = Cumulative
> Security Update for Internet Explorer 7 for Windows XP (KB947864) Software
> Updates Scan Tool 4/9/2008 08:03:20 3484 (0x0D9C)
> Status = Installed Software Updates Scan Tool 4/9/2008 08:03:20 3484
> (0x0D9C)
> ScanDateTime = 20080409080318.000000+*** Software Updates Scan Tool
> 4/9/2008
> 08:03:20 3484 (0x0D9C)
> TimeDetected = 20080409080318.000000+*** Software Updates Scan Tool
> 4/9/2008
> 08:03:20 3484 (0x0D9C)
> TimeApplied = 20080409080318.000000+*** Software Updates Scan Tool
> 4/9/2008
> 08:03:20 3484 (0x0D9C)
>

@Donald only: OP here is not updating his machines via Automatic Updates or
Windows Update website.

Were you depending on Automatic Updates to offer the April updates or did
you attempt to update manually via Windows Update website? If the latter,
when (what time, local) did you attempt to update manually, and did you try
again a few hours later?

No matter how you attempted to update, were any other April 2008 updates
offered?
--
~PA Bear

Donald Anadell wrote:
> You are not alone, I maintain 3 Windows XP SP2 machines with IE7 installed
> on them. None of them were offered KB947864 on Patch tuesday, I ended up
> having to download it manually and install it on all three machines...