Server 2003 - Windows Update vs. MBSA for pre-SP1 Hotfixes

Recently ran WU (and MU) against a clean W2K3 Std box and as expected
it showed I needed SP1 and ~23 other hotfixes (all post-SP1
presumably). However, when I run MBSA 2.0 it shows, as expected, SP1
is needed but also that 47 security fixes are missing.

I'm almost 100% certain that the difference in hotfixes are the pre-sp1
fixes and that WU (MU) is not showing them, but have no concrete
evidence such as a KB, etc... to prove my case. In this scenario there
is an application conflict with SP1 and we need to install all security
fixes up to this point (presumably 47 of them).

Any pointes are appreciated.

Thanks in advance,

Ryan

I've encountered something similar.

I've just built two new W2K3 servers and applied Windows Update to it.
First comes Windows Installer 3.1 v2 and then a list of updates required
(around 28). When I rerun Windows Update at the end of the process, no
updates are listed as needed. However, MBSA 2.0 (when executed both locally
and remotely) indicates that I need another 24 updates. What's happening
here?

Victor

You're conclusions are 100% accurate, Ryan, but the proof is not in
any document, but rather in the actual performance of the WU/MU
website.

The reason this happens is because MBSA shows you ALL of the update
that are not installed.

When you go to WU/MU, you are only shown SP1 and the post-SP1
updates. You are not shown the pre-SP1 updates, because you're being
offered the SP1 instead of those pre-SP1 updates.

If you were to decline the SP1 at WU/MU and rescan your system,
you'll find that WU/MU will then show you all 47 missing updates for
Windows Server 2003 RTM.


<> wrote in message
news: oups.com...
| Recently ran WU (and MU) against a clean W2K3 Std box and as
expected
| it showed I needed SP1 and ~23 other hotfixes (all post-SP1
| presumably). However, when I run MBSA 2.0 it shows, as expected,
SP1
| is needed but also that 47 security fixes are missing.
|
| I'm almost 100% certain that the difference in hotfixes are the
pre-sp1
| fixes and that WU (MU) is not showing them, but have no concrete
| evidence such as a KB, etc... to prove my case. In this scenario
there
| is an application conflict with SP1 and we need to install all
security
| fixes up to this point (presumably 47 of them).
|
| Any pointes are appreciated.
|
| Thanks in advance,
|
| Ryan
|