Unauthorized Updates??

Hi there,

One day last week when delivering an XP TabletPC to a customer when I went
to shut it down I noticed the little four-colour shield at the top right
hand corner of the Turn Off button and the notice underneath saying 'Click
Turn Off to install important updates and turn off your computer. Click here
to turn off without installing updates.'

Strange since I ALWAYS set Automatic Updates to 'Notify me but don't
automatically download or install them.'

Anyway I just shrugged it off because it was a freshly installed machine and
I thought I must have downloaded them sometime during the
install/setup/configure process.

Today I went to reboot my own TabletPC and the same thing happened. Once
again it is set to 'Notify Only' and I definitely haven't asked for any
updates to be downloaded. I chose to turn off & install but there was no
sign of just what was being updated and the thing hung after the reboot.

When checking further both my XP desktop and MCE2005 PC's exhibited the same
behaviour.

So...just what is going on? If set to notify only but don't download or
install then surely that is what it should do?

--
Thanks & regards,
-pp-

Pheasant Plucker® wrote:
> Hi there,
>
> One day last week when delivering an XP TabletPC to a customer when I went
> to shut it down I noticed the little four-colour shield at the top right
> hand corner of the Turn Off button and the notice underneath saying 'Click
> Turn Off to install important updates and turn off your computer. Click here
> to turn off without installing updates.'
>
> Strange since I ALWAYS set Automatic Updates to 'Notify me but don't
> automatically download or install them.'
>
> Anyway I just shrugged it off because it was a freshly installed machine and
> I thought I must have downloaded them sometime during the
> install/setup/configure process.
>
> Today I went to reboot my own TabletPC and the same thing happened. Once
> again it is set to 'Notify Only' and I definitely haven't asked for any
> updates to be downloaded. I chose to turn off & install but there was no
> sign of just what was being updated and the thing hung after the reboot.
>
> When checking further both my XP desktop and MCE2005 PC's exhibited the same
> behaviour.
>
> So...just what is going on? If set to notify only but don't download or
> install then surely that is what it should do?
>

It seems to be doing that I have had it happen twice, I double
checked to make sure Notify but don't install updates was still
checked and it was but these seem to have a mind of their own lately.
Jeanette

Was the default update source changed from Windows Update to Microsoft
Update and/or was OneCare installed?

Do you find that Automatic Updates is configured to the Automatic setting
now?
--
~Robear Dyer (PA Bear)
MS MVP-IE, Mail, Security, Windows Desktop Experience - since 2002
AumHa VSOP & Admin http://aumha.net
DTS-L http://dts-l.net/


Pheasant Plucker® wrote:
> Hi there,
>
> One day last week when delivering an XP TabletPC to a customer when I went
> to shut it down I noticed the little four-colour shield at the top right
> hand corner of the Turn Off button and the notice underneath saying 'Click
> Turn Off to install important updates and turn off your computer. Click
> here
> to turn off without installing updates.'
>
> Strange since I ALWAYS set Automatic Updates to 'Notify me but don't
> automatically download or install them.'
>
> Anyway I just shrugged it off because it was a freshly installed machine
> and
> I thought I must have downloaded them sometime during the
> install/setup/configure process.
>
> Today I went to reboot my own TabletPC and the same thing happened. Once
> again it is set to 'Notify Only' and I definitely haven't asked for any
> updates to be downloaded. I chose to turn off & install but there was no
> sign of just what was being updated and the thing hung after the reboot.
>
> When checking further both my XP desktop and MCE2005 PC's exhibited the
> same
> behaviour.
>
> So...just what is going on? If set to notify only but don't download or
> install then surely that is what it should do?

Thanks for the replies,

Seems like I am not the only one then...

AFAIK the update source was not changed - in fact I don't know where I would
even find where to alter it and OneCare is definitely not installed on any
of my machines.

Automatic Updates are still set to Notify Only.

The TabletPC is working again but I do not know just what was installed and
I do not want to install these 'mysterious' updates on anything else just in
case...

I did find this old link but surely MS would not make the same mistake
twice - would they?

http://www.theregister.co.uk/2007/09...update_rumors/

Curiouser & curiouser...

Thanks & regards,
-=pp=-


"PA Bear [MS MVP]" <> wrote in message
news:OHqh$u$...
> Was the default update source changed from Windows Update to Microsoft
> Update and/or was OneCare installed?
>
> Do you find that Automatic Updates is configured to the Automatic setting
> now?
> --
> ~Robear Dyer (PA Bear)
> MS MVP-IE, Mail, Security, Windows Desktop Experience - since 2002
> AumHa VSOP & Admin http://aumha.net
> DTS-L http://dts-l.net/
>
>
> Pheasant Plucker® wrote:
> > Hi there,
> >
> > One day last week when delivering an XP TabletPC to a customer when I
went
> > to shut it down I noticed the little four-colour shield at the top right
> > hand corner of the Turn Off button and the notice underneath saying
'Click
> > Turn Off to install important updates and turn off your computer. Click
> > here
> > to turn off without installing updates.'
> >
> > Strange since I ALWAYS set Automatic Updates to 'Notify me but don't
> > automatically download or install them.'
> >
> > Anyway I just shrugged it off because it was a freshly installed machine
> > and
> > I thought I must have downloaded them sometime during the
> > install/setup/configure process.
> >
> > Today I went to reboot my own TabletPC and the same thing happened. Once
> > again it is set to 'Notify Only' and I definitely haven't asked for any
> > updates to be downloaded. I chose to turn off & install but there was no
> > sign of just what was being updated and the thing hung after the reboot.
> >
> > When checking further both my XP desktop and MCE2005 PC's exhibited the
> > same
> > behaviour.
> >
> > So...just what is going on? If set to notify only but don't download or
> > install then surely that is what it should do?
>

> AFAIK the update source was not changed - in fact I don't know where I
> would
> even find where to alter it

When you click on IE Tools | Windows Update, are you taken to Windows Update
website or Microsoft Update website?

There are some updates (including ones you've approved to be downloaded and
installed) that will only install at shutdown to avoid problems. To explore
this any further, we'd need to know what update(s) were downloaded and
approved for install when you saw this prompt at shutdown?

[The Register article you cited is nothing but FUD and has nothing
whatsoever to do with your problem. The incident to which the article
refers happened in late Aug-07 when MS automatically & without notice
updated the Automatic Updates software included in Windows. When you
activated Windows, you agreed to allow MS to this. Admittedly, MS did it in
a ham-fisted manner and suffered from the fallout of having done so without
any notice.]
--
~PA Bear


Pheasant Plucker® wrote:
> Thanks for the replies,
>
> Seems like I am not the only one then...
>
> AFAIK the update source was not changed - in fact I don't know where I
> would
> even find where to alter it and OneCare is definitely not installed on any
> of my machines.
>
> Automatic Updates are still set to Notify Only.
>
> The TabletPC is working again but I do not know just what was installed
> and
> I do not want to install these 'mysterious' updates on anything else just
> in
> case...
>
> I did find this old link but surely MS would not make the same mistake
> twice - would they?
>
> http://www.theregister.co.uk/2007/09...update_rumors/
>
> Curiouser & curiouser...
>
> Thanks & regards,
> -=pp=-
>
>
> "PA Bear [MS MVP]" <> wrote in message
> news:OHqh$u$...
>> Was the default update source changed from Windows Update to Microsoft
>> Update and/or was OneCare installed?
>>
>> Do you find that Automatic Updates is configured to the Automatic setting
>> now?
>> --
>> ~Robear Dyer (PA Bear)
>> MS MVP-IE, Mail, Security, Windows Desktop Experience - since 2002
>> AumHa VSOP & Admin http://aumha.net
>> DTS-L http://dts-l.net/
>>
>>
>> Pheasant Plucker® wrote:
>>> Hi there,
>>>
>>> One day last week when delivering an XP TabletPC to a customer when I
>>> went
>>> to shut it down I noticed the little four-colour shield at the top right
>>> hand corner of the Turn Off button and the notice underneath saying
>>> 'Click
>>> Turn Off to install important updates and turn off your computer. Click
>>> here
>>> to turn off without installing updates.'
>>>
>>> Strange since I ALWAYS set Automatic Updates to 'Notify me but don't
>>> automatically download or install them.'
>>>
>>> Anyway I just shrugged it off because it was a freshly installed machine
>>> and
>>> I thought I must have downloaded them sometime during the
>>> install/setup/configure process.
>>>
>>> Today I went to reboot my own TabletPC and the same thing happened. Once
>>> again it is set to 'Notify Only' and I definitely haven't asked for any
>>> updates to be downloaded. I chose to turn off & install but there was no
>>> sign of just what was being updated and the thing hung after the reboot.
>>>
>>> When checking further both my XP desktop and MCE2005 PC's exhibited the
>>> same
>>> behaviour.
>>>
>>> So...just what is going on? If set to notify only but don't download or
>>> install then surely that is what it should do?

Thanks again for the reply.

"PA Bear [MS MVP]" <> wrote in message
news:...
>
> When you click on IE Tools | Windows Update, are you taken to Windows
Update
> website or Microsoft Update website?
>
This goes to the Microsoft Update website.


> There are some updates (including ones you've approved to be downloaded
and
> installed) that will only install at shutdown to avoid problems. To
explore
> this any further, we'd need to know what update(s) were downloaded and
> approved for install when you saw this prompt at shutdown?
>
I never downloaded or installed any updates at all - when this happened on
the first TabletPC I put it down to my doing just that as I had just
setup/configured the machine so I ignored it.
However it then happened to my own TabletPC, XP Desktop and MCE2005 machines
where I definitely did not request any updates whatsoever.
If I go to update history on the Microsoft Update on the TabletPC I see the
latest update listed thus;
Office 2003 / Security Update for Microsoft Office Excel 2003 (KB943985) v2
This is listed as an Automatic Update
Could this be the one?
The updates prior to the above are dated 13th March and are all listed as
Microsoft Update

> [The Register article you cited is nothing but FUD and has nothing
> whatsoever to do with your problem. The incident to which the article
> refers happened in late Aug-07 when MS automatically & without notice
> updated the Automatic Updates software included in Windows. When you
> activated Windows, you agreed to allow MS to this. Admittedly, MS did it
in
> a ham-fisted manner and suffered from the fallout of having done so
without
> any notice.]
> --
I thought that might be the case but before I asked here I Googled to see if
I could find out more info and from the 'report' it sounded similar to my
issue.
There was something else that has happened that I did not want to mention
previously lest it was not connected and I did not want to sound like a
Conspiracy Theorist ;^)

I have had a call from 2 of our Field Techs who are now unable to import
their work into a custom application - the system has worked fine for over a
year and the Automatic Updates are once again configured for 'Notify only'
and I believe they do not have sufficient user rights to take their own
updates.

I am half-expecting more calls as we have 10 Techs who use this system but I
did not want to jump to conclusions - it may not be related and I am chasing
this issue with the developer...

The work orders are imported through Outlook as regular email via our custom
application and although it looks like the work has imported it hasn't :-(
We had a similar issue when I updated the TabletPC's - our custom
application lost connectivity with Outlook totally
Anyway I am going to leave that theory out of the equation until I have
investigated further.

Thanks & regards,
-=Glyn=-



> ~PA Bear
>
>
> Pheasant Plucker® wrote:
> > Thanks for the replies,
> >
> > Seems like I am not the only one then...
> >
> > AFAIK the update source was not changed - in fact I don't know where I
> > would
> > even find where to alter it and OneCare is definitely not installed on
any
> > of my machines.
> >
> > Automatic Updates are still set to Notify Only.
> >
> > The TabletPC is working again but I do not know just what was installed
> > and
> > I do not want to install these 'mysterious' updates on anything else
just
> > in
> > case...
> >
> > I did find this old link but surely MS would not make the same mistake
> > twice - would they?
> >
> >
http://www.theregister.co.uk/2007/09...update_rumors/
> >
> > Curiouser & curiouser...
> >
> > Thanks & regards,
> > -=pp=-
> >
> >
> > "PA Bear [MS MVP]" <> wrote in message
> > news:OHqh$u$...
> >> Was the default update source changed from Windows Update to Microsoft
> >> Update and/or was OneCare installed?
> >>
> >> Do you find that Automatic Updates is configured to the Automatic
setting
> >> now?
> >> --
> >> ~Robear Dyer (PA Bear)
> >> MS MVP-IE, Mail, Security, Windows Desktop Experience - since 2002
> >> AumHa VSOP & Admin http://aumha.net
> >> DTS-L http://dts-l.net/
> >>
> >>
> >> Pheasant Plucker® wrote:
> >>> Hi there,
> >>>
> >>> One day last week when delivering an XP TabletPC to a customer when I
> >>> went
> >>> to shut it down I noticed the little four-colour shield at the top
right
> >>> hand corner of the Turn Off button and the notice underneath saying
> >>> 'Click
> >>> Turn Off to install important updates and turn off your computer.
Click
> >>> here
> >>> to turn off without installing updates.'
> >>>
> >>> Strange since I ALWAYS set Automatic Updates to 'Notify me but don't
> >>> automatically download or install them.'
> >>>
> >>> Anyway I just shrugged it off because it was a freshly installed
machine
> >>> and
> >>> I thought I must have downloaded them sometime during the
> >>> install/setup/configure process.
> >>>
> >>> Today I went to reboot my own TabletPC and the same thing happened.
Once
> >>> again it is set to 'Notify Only' and I definitely haven't asked for
any
> >>> updates to be downloaded. I chose to turn off & install but there was
no
> >>> sign of just what was being updated and the thing hung after the
reboot.
> >>>
> >>> When checking further both my XP desktop and MCE2005 PC's exhibited
the
> >>> same
> >>> behaviour.
> >>>
> >>> So...just what is going on? If set to notify only but don't download
or
> >>> install then surely that is what it should do?
>

I should also mention that there is a whole host of updates waiting
patiently to be downloaded which is exactly how my system has been
configured and exactly how I would expect it to work...not download some
'unknown' update and then install by 'stealth'...;^)

When you shut down it is too easy to miss the tiny shield at the top right
hand corner of the red Turn Off button and the small text underneath -
before you realise that something has been downloaded you have clicked the
Turn Off button and have gone beyond the point of no return...

Thanks & regards,
-=pp=-




"Pheasant Plucker®" <> wrote in message
news:ul8$...
> Thanks again for the reply.
>
> "PA Bear [MS MVP]" <> wrote in message
> news:...
> >
> > When you click on IE Tools | Windows Update, are you taken to Windows
> Update
> > website or Microsoft Update website?
> >
> This goes to the Microsoft Update website.
>
>
> > There are some updates (including ones you've approved to be downloaded
> and
> > installed) that will only install at shutdown to avoid problems. To
> explore
> > this any further, we'd need to know what update(s) were downloaded and
> > approved for install when you saw this prompt at shutdown?
> >
> I never downloaded or installed any updates at all - when this happened on
> the first TabletPC I put it down to my doing just that as I had just
> setup/configured the machine so I ignored it.
> However it then happened to my own TabletPC, XP Desktop and MCE2005
machines
> where I definitely did not request any updates whatsoever.
> If I go to update history on the Microsoft Update on the TabletPC I see
the
> latest update listed thus;
> Office 2003 / Security Update for Microsoft Office Excel 2003 (KB943985)
v2
> This is listed as an Automatic Update
> Could this be the one?
> The updates prior to the above are dated 13th March and are all listed as
> Microsoft Update
>
> > [The Register article you cited is nothing but FUD and has nothing
> > whatsoever to do with your problem. The incident to which the article
> > refers happened in late Aug-07 when MS automatically & without notice
> > updated the Automatic Updates software included in Windows. When you
> > activated Windows, you agreed to allow MS to this. Admittedly, MS did
it
> in
> > a ham-fisted manner and suffered from the fallout of having done so
> without
> > any notice.]
> > --
> I thought that might be the case but before I asked here I Googled to see
if
> I could find out more info and from the 'report' it sounded similar to my
> issue.
> There was something else that has happened that I did not want to mention
> previously lest it was not connected and I did not want to sound like a
> Conspiracy Theorist ;^)
>
> I have had a call from 2 of our Field Techs who are now unable to import
> their work into a custom application - the system has worked fine for over
a
> year and the Automatic Updates are once again configured for 'Notify only'
> and I believe they do not have sufficient user rights to take their own
> updates.
>
> I am half-expecting more calls as we have 10 Techs who use this system but
I
> did not want to jump to conclusions - it may not be related and I am
chasing
> this issue with the developer...
>
> The work orders are imported through Outlook as regular email via our
custom
> application and although it looks like the work has imported it hasn't :-(
> We had a similar issue when I updated the TabletPC's - our custom
> application lost connectivity with Outlook totally
> Anyway I am going to leave that theory out of the equation until I have
> investigated further.
>
> Thanks & regards,
> -=Glyn=-
>
>
>
> > ~PA Bear
> >
> >
> > Pheasant Plucker® wrote:
> > > Thanks for the replies,
> > >
> > > Seems like I am not the only one then...
> > >
> > > AFAIK the update source was not changed - in fact I don't know where I
> > > would
> > > even find where to alter it and OneCare is definitely not installed on
> any
> > > of my machines.
> > >
> > > Automatic Updates are still set to Notify Only.
> > >
> > > The TabletPC is working again but I do not know just what was
installed
> > > and
> > > I do not want to install these 'mysterious' updates on anything else
> just
> > > in
> > > case...
> > >
> > > I did find this old link but surely MS would not make the same mistake
> > > twice - would they?
> > >
> > >
>
http://www.theregister.co.uk/2007/09...update_rumors/
> > >
> > > Curiouser & curiouser...
> > >
> > > Thanks & regards,
> > > -=pp=-
> > >
> > >
> > > "PA Bear [MS MVP]" <> wrote in message
> > > news:OHqh$u$...
> > >> Was the default update source changed from Windows Update to
Microsoft
> > >> Update and/or was OneCare installed?
> > >>
> > >> Do you find that Automatic Updates is configured to the Automatic
> setting
> > >> now?
> > >> --
> > >> ~Robear Dyer (PA Bear)
> > >> MS MVP-IE, Mail, Security, Windows Desktop Experience - since 2002
> > >> AumHa VSOP & Admin http://aumha.net
> > >> DTS-L http://dts-l.net/
> > >>
> > >>
> > >> Pheasant Plucker® wrote:
> > >>> Hi there,
> > >>>
> > >>> One day last week when delivering an XP TabletPC to a customer when
I
> > >>> went
> > >>> to shut it down I noticed the little four-colour shield at the top
> right
> > >>> hand corner of the Turn Off button and the notice underneath saying
> > >>> 'Click
> > >>> Turn Off to install important updates and turn off your computer.
> Click
> > >>> here
> > >>> to turn off without installing updates.'
> > >>>
> > >>> Strange since I ALWAYS set Automatic Updates to 'Notify me but don't
> > >>> automatically download or install them.'
> > >>>
> > >>> Anyway I just shrugged it off because it was a freshly installed
> machine
> > >>> and
> > >>> I thought I must have downloaded them sometime during the
> > >>> install/setup/configure process.
> > >>>
> > >>> Today I went to reboot my own TabletPC and the same thing happened.
> Once
> > >>> again it is set to 'Notify Only' and I definitely haven't asked for
> any
> > >>> updates to be downloaded. I chose to turn off & install but there
was
> no
> > >>> sign of just what was being updated and the thing hung after the
> reboot.
> > >>>
> > >>> When checking further both my XP desktop and MCE2005 PC's exhibited
> the
> > >>> same
> > >>> behaviour.
> > >>>
> > >>> So...just what is going on? If set to notify only but don't download
> or
> > >>> install then surely that is what it should do?
> >
>
>

"Pheasant Plucker®" <> wrote in message
news:ul8$...

>> There are some updates (including ones you've approved to be downloaded
> and
>> installed) that will only install at shutdown to avoid problems. To
> explore
>> this any further, we'd need to know what update(s) were downloaded and
>> approved for install when you saw this prompt at shutdown?
>>
> I never downloaded or installed any updates at all - when this happened on
> the first TabletPC I put it down to my doing just that as I had just
> setup/configured the machine so I ignored it.
> However it then happened to my own TabletPC, XP Desktop and MCE2005 machines
> where I definitely did not request any updates whatsoever.
> If I go to update history on the Microsoft Update on the TabletPC I see the
> latest update listed thus;
> Office 2003 / Security Update for Microsoft Office Excel 2003 (KB943985) v2
> This is listed as an Automatic Update
> Could this be the one?


Use the WindowsUpdate.log and figure it out. (Ref. KB902093)

In fact, you might find sufficient details in this file:

%windir%\SoftwareDistribution\ReportingEvents.log

E.g. are there any Download events which don't have corresponding
Installation successful events?


HTH

Robert Aldwinckle
---