Windows offline scan produces different results

Hello experts,

I am running into a strange problem on of of my systems. Whenever I run WUA
scan for missing patches (using WUA APIs), I never get Windows 2008 SP2
64-bit SE ( KB948465) recommended. However, on the same machine running
Automatic Updates shows SP2 as recommended.

I dont think it is because of wsusscn2.cab file that I am using for offline
scan since it contains SP2 patch Update ID in package.xml. This cab file is
from last month (November 2009). Interestingly, the same wsusscn2.cab file
works fine on a similar system and shows SP2 as missing.

What is even more puzzling is that when I use the latest wsusscn2.cab file
on this system then SP2 *is* shown as missing.

I cant figure out why SP2 is not shown missing when using november cab file
but shows as missing when using the latest cabfile.

Here is a snippet from WindowsUpdate.log:

November cabfile: --> SP2 NOT recommended
---------------------------------------------------------
2009-12-10 11:54:24:031 976 84c Agent *************
2009-12-10 11:54:24:031 976 84c Agent ** START ** Agent: Finding updates
[CallerId = ]
2009-12-10 11:54:24:031 976 84c Agent *********
2009-12-10 11:54:24:031 976 84c Agent * Online = Yes; Ignore download
priority = No
2009-12-10 11:54:24:031 976 84c Agent * Criteria = "(IsInstalled=0 and
Type='Software') or (IsInstalled=0 and Type='Driver')"
2009-12-10 11:54:24:031 976 84c Agent * ServiceID =
{FFE2F38C-C351-49B4-B7C3-726E8B6D2EEC} Third party service
2009-12-10 11:54:24:031 2912 808 COMAPI <<-- SUBMITTED -- COMAPI: Search
[ClientId = <NULL>]
2009-12-10 11:54:24:031 976 84c Agent * Search Scope = {Machine}
2009-12-10 11:54:29:148 976 84c PT +++++++++++ PT: Synchronizing server
updates +++++++++++
2009-12-10 11:54:29:148 976 84c PT + Offline serviceId =
{FFE2F38C-C351-49B4-B7C3-726E8B6D2EEC}
2009-12-10 11:54:29:148 976 84c PT WARNING: Cached cookie has expired or
new PID is available
2009-12-10 11:54:40:957 976 84c PT +++++++++++ PT: Synchronizing extended
update info +++++++++++
2009-12-10 11:54:40:957 976 84c PT + Offline serviceId =
{FFE2F38C-C351-49B4-B7C3-726E8B6D2EEC}
2009-12-10 11:54:43:983 976 84c OfflSnc WARNING: Failed to add file to the
FileLocationList with 0x80240013
2009-12-10 11:54:44:249 976 84c Agent * Found 0 updates and 41 categories
in search; evaluated appl. rules of 434 out of 565 deployed entities
2009-12-10 11:54:44:311 976 84c Agent *********
2009-12-10 11:54:44:311 976 84c Agent ** END ** Agent: Finding updates
[CallerId = ]
2009-12-10 11:54:44:311 976 84c Agent *************
---------------------------------------------------------

December cabfile --> SP2 is RECOMMENDED
-----------------------------------------------------------
2009-12-10 11:53:35:031 976 84c Agent *************
2009-12-10 11:53:35:031 976 84c Agent ** START ** Agent: Finding updates
[CallerId = ]
2009-12-10 11:53:35:031 976 84c Agent *********
2009-12-10 11:53:35:031 1760 2cc COMAPI <<-- SUBMITTED -- COMAPI: Search
[ClientId = <NULL>]
2009-12-10 11:53:35:031 976 84c Agent * Online = Yes; Ignore download
priority = No
2009-12-10 11:53:35:031 976 84c Agent * Criteria = "(IsInstalled=0 and
Type='Software') or (IsInstalled=0 and Type='Driver')"
2009-12-10 11:53:35:031 976 84c Agent * ServiceID =
{C2F11DB3-AF6C-4A7F-BB33-51E639A29542} Third party service
2009-12-10 11:53:35:031 976 84c Agent * Search Scope = {Machine}
2009-12-10 11:53:40:288 976 84c PT +++++++++++ PT: Synchronizing server
updates +++++++++++
2009-12-10 11:53:40:288 976 84c PT + Offline serviceId =
{C2F11DB3-AF6C-4A7F-BB33-51E639A29542}
2009-12-10 11:53:40:288 976 84c PT WARNING: Cached cookie has expired or
new PID is available
2009-12-10 11:53:53:189 976 84c PT +++++++++++ PT: Synchronizing extended
update info +++++++++++
2009-12-10 11:53:53:189 976 84c PT + Offline serviceId =
{C2F11DB3-AF6C-4A7F-BB33-51E639A29542}
2009-12-10 11:53:56:387 976 84c OfflSnc WARNING: Failed to add file to the
FileLocationList with 0x80240013
2009-12-10 11:53:56:715 976 84c Agent * Added update
{56E25ED4-8D4A-4E8C-81D8-CC71983C58E0}.103 to search result
2009-12-10 11:53:56:715 976 84c Agent * Found 1 updates and 42 categories
in search; evaluated appl. rules of 442 out of 583 deployed entities
2009-12-10 11:53:56:778 976 84c Agent *********
2009-12-10 11:53:56:778 976 84c Agent ** END ** Agent: Finding updates
[CallerId = ]
2009-12-10 11:53:56:778 976 84c Agent *************
-----------------------------------------------------------

Is it possible that some cache needs to be cleared in order for it to work
with november's cab file? Any tips greatly appreciated.

Thanks.

"wds" <> wrote in message
news:A7BE229B-B255-4271-9ABF-...

> I dont think it is because of wsusscn2.cab file that I am using for
> offline
> scan since it contains SP2 patch Update ID in package.xml. This cab file
> is
> from last month (November 2009). Interestingly, the same wsusscn2.cab
> file
> works fine on a similar system and shows SP2 as missing.
>
> What is even more puzzling is that when I use the latest wsusscn2.cab file
> on this system then SP2 *is* shown as missing.
>
> I cant figure out why SP2 is not shown missing when using november cab
> file
> but shows as missing when using the latest cabfile.

Truly, it doesn't really matter. The instructions for using the offline cab
file are to use the *latest* cab file.

Suffice it to say the "official", and best, explanation you're going to get
for your situation is that you're not using the latest cab file, and you've
already proven this to be true.



--
Lawrence Garvin, M.S., MCITP:EA, MCDBA, MCSA
Principal/CTO, Onsite Technology Solutions, Houston, Texas
Microsoft MVP - Software Distribution (2005-2009)

My Blog: http://onsitechsolutions.spaces.live.com
Microsoft WSUS Website: http://www.microsoft.com/wsus
My MVP Profile: http://mvp.support.microsoft.com/pro...awrence.Garvin