WindowsUpdateLog Reporting

The following shows reporting taking place out of Windows Uopdate Log.

2006-07-04 19:55:49 1352 5a4 Report *********** Report: Initializing static
reporting data ***********
2006-07-04 19:55:49 1352 5a4 Report * OS Version = 5.1.2600.2.0.65792
2006-07-04 19:55:49 1352 5a4 Report * Computer Brand = Acer
2006-07-04 19:55:49 1352 5a4 Report * Computer Model = TravelMate 800
2006-07-04 19:55:49 1352 5a4 Report * Bios Revision = 3A15
2006-07-04 19:55:49 1352 5a4 Report * Bios Name = Rev 1.0 XXX
2006-07-04 19:55:49 1352 5a4 Report * Bios Release Date =
2003-03-01T00:00:00
2006-07-04 19:55:49 1352 5a4 Report * Locale ID = 1033
2006-07-04 19:55:49 1352 5a4 Agent *********
2006-07-04 19:55:49 1352 5a4 Agent ** END ** Agent: Finding updates
[CallerId =

AutomaticUpdates]
2006-07-04 19:55:49 1352 5a4 Agent *************
2006-07-04 19:55:49 1352 3ec AU >>## RESUMED ## AU: Search for updates
[CallId =

{5271DEC5-3ACD-49FB-815C-6D09D80FF172}]
2006-07-04 19:55:49 1352 3ec AU # 0 updates detected
2006-07-04 19:55:49 1352 3ec AU #########
2006-07-04 19:55:49 1352 3ec AU ## END ## AU: Search for updates [CallId
= {5271DEC5-

3ACD-49FB-815C-6D09D80FF172}]
2006-07-04 19:55:49 1352 3ec AU #############
2006-07-04 19:55:49 1352 3ec AU AU setting next detection timeout to
2006-07-05 04:42:52
2006-07-04 19:55:54 1352 5a4 Report REPORT EVENT: {E727065D-D0E9-42EC-B195-

40684632AC23} 2006-07-04 19:55:49+0930 1 147 101 {00000000-0000-0000-0000-

000000000000} 0 0 AutomaticUpdates Success Software Synchronization Agent
has finished

detecting items.
2006-07-04 22:30:12 1352 558 Report Uploading 1 events using cached cookie,
reporting URL =

http://stats.update.microsoft.com/Re...ebService.asmx
2006-07-04 22:30:24 1352 558 Report Reporter successfully uploaded 1 events.
2006-07-04 22:47:19 1352 350 AU AU found 0 updates for install at shutdown
2006-07-04 22:47:19 2620 aa4 Misc =========== Logging initialized (build:
5.8.0.2469, tz:

+0930) ===========


Where does the reportung get sent to?

Does this data get uploaded to Microsoft?

--
Rob

Rob wrote:

> The following shows reporting taking place out of Windows Uopdate Log.
>
> 2006-07-04 19:55:49 1352 5a4 Report *********** Report: Initializing static
> reporting data ***********
> 2006-07-04 19:55:49 1352 5a4 Report * OS Version = 5.1.2600.2.0.65792
> 2006-07-04 19:55:49 1352 5a4 Report * Computer Brand = Acer
> 2006-07-04 19:55:49 1352 5a4 Report * Computer Model = TravelMate 800
> 2006-07-04 19:55:49 1352 5a4 Report * Bios Revision = 3A15
> 2006-07-04 19:55:49 1352 5a4 Report * Bios Name = Rev 1.0 XXX
> 2006-07-04 19:55:49 1352 5a4 Report * Bios Release Date =
> 2003-03-01T00:00:00
> 2006-07-04 19:55:49 1352 5a4 Report * Locale ID = 1033
> 2006-07-04 19:55:49 1352 5a4 Agent *********
> 2006-07-04 19:55:49 1352 5a4 Agent ** END ** Agent: Finding updates
> [CallerId =
>
> AutomaticUpdates]
> 2006-07-04 19:55:49 1352 5a4 Agent *************
> 2006-07-04 19:55:49 1352 3ec AU >>## RESUMED ## AU: Search for updates
> [CallId =
>
> {5271DEC5-3ACD-49FB-815C-6D09D80FF172}]
> 2006-07-04 19:55:49 1352 3ec AU # 0 updates detected
> 2006-07-04 19:55:49 1352 3ec AU #########
> 2006-07-04 19:55:49 1352 3ec AU ## END ## AU: Search for updates [CallId
> = {5271DEC5-
>
> 3ACD-49FB-815C-6D09D80FF172}]
> 2006-07-04 19:55:49 1352 3ec AU #############
> 2006-07-04 19:55:49 1352 3ec AU AU setting next detection timeout to
> 2006-07-05 04:42:52
> 2006-07-04 19:55:54 1352 5a4 Report REPORT EVENT: {E727065D-D0E9-42EC-B195-
>
> 40684632AC23} 2006-07-04 19:55:49+0930 1 147 101 {00000000-0000-0000-0000-
>
> 000000000000} 0 0 AutomaticUpdates Success Software Synchronization Agent
> has finished
>
> detecting items.
> 2006-07-04 22:30:12 1352 558 Report Uploading 1 events using cached cookie,
> reporting URL =
>
> http://stats.update.microsoft.com/Re...ebService.asmx
> 2006-07-04 22:30:24 1352 558 Report Reporter successfully uploaded 1 events.
> 2006-07-04 22:47:19 1352 350 AU AU found 0 updates for install at shutdown
> 2006-07-04 22:47:19 2620 aa4 Misc =========== Logging initialized (build:
> 5.8.0.2469, tz:
>
> +0930) ===========
>
>
> Where does the reportung get sent to?
>
> Does this data get uploaded to Microsoft?
>

It gets sent to the Event Viewer on your system. Go to Start > Run > type in

eventvwr.msc

Click OK
Click on System in the left frame to see the Events in the right frame.


MowGreen [MVP 2003-2007]
===============
*-343-* FDNY
Never Forgotten
===============

Thanks, for the reply, which is 50% complete as the answer only covered the
1st part of the question.

The second part is what I really need to know, how much of this data is
uploaded to Microsoft?

For instance normal error conditions give us the option of sendng or not
sending data to Microsoft, howevers certain "events" such as WGA and
Validation don't give us the option , it happens automatically.

Where are these events logged showing that Microsoft is reading the data on
our PCs?




--
Rob


"MowGreen [MVP]" wrote:

> Rob wrote:
>
> > The following shows reporting taking place out of Windows Uopdate Log.
> >
> > 2006-07-04 19:55:49 1352 5a4 Report *********** Report: Initializing static
> > reporting data ***********
> > 2006-07-04 19:55:49 1352 5a4 Report * OS Version = 5.1.2600.2.0.65792
> > 2006-07-04 19:55:49 1352 5a4 Report * Computer Brand = Acer
> > 2006-07-04 19:55:49 1352 5a4 Report * Computer Model = TravelMate 800
> > 2006-07-04 19:55:49 1352 5a4 Report * Bios Revision = 3A15
> > 2006-07-04 19:55:49 1352 5a4 Report * Bios Name = Rev 1.0 XXX
> > 2006-07-04 19:55:49 1352 5a4 Report * Bios Release Date =
> > 2003-03-01T00:00:00
> > 2006-07-04 19:55:49 1352 5a4 Report * Locale ID = 1033
> > 2006-07-04 19:55:49 1352 5a4 Agent *********
> > 2006-07-04 19:55:49 1352 5a4 Agent ** END ** Agent: Finding updates
> > [CallerId =
> >
> > AutomaticUpdates]
> > 2006-07-04 19:55:49 1352 5a4 Agent *************
> > 2006-07-04 19:55:49 1352 3ec AU >>## RESUMED ## AU: Search for updates
> > [CallId =
> >
> > {5271DEC5-3ACD-49FB-815C-6D09D80FF172}]
> > 2006-07-04 19:55:49 1352 3ec AU # 0 updates detected
> > 2006-07-04 19:55:49 1352 3ec AU #########
> > 2006-07-04 19:55:49 1352 3ec AU ## END ## AU: Search for updates [CallId
> > = {5271DEC5-
> >
> > 3ACD-49FB-815C-6D09D80FF172}]
> > 2006-07-04 19:55:49 1352 3ec AU #############
> > 2006-07-04 19:55:49 1352 3ec AU AU setting next detection timeout to
> > 2006-07-05 04:42:52
> > 2006-07-04 19:55:54 1352 5a4 Report REPORT EVENT: {E727065D-D0E9-42EC-B195-
> >
> > 40684632AC23} 2006-07-04 19:55:49+0930 1 147 101 {00000000-0000-0000-0000-
> >
> > 000000000000} 0 0 AutomaticUpdates Success Software Synchronization Agent
> > has finished
> >
> > detecting items.
> > 2006-07-04 22:30:12 1352 558 Report Uploading 1 events using cached cookie,
> > reporting URL =
> >
> > http://stats.update.microsoft.com/Re...ebService.asmx
> > 2006-07-04 22:30:24 1352 558 Report Reporter successfully uploaded 1 events.
> > 2006-07-04 22:47:19 1352 350 AU AU found 0 updates for install at shutdown
> > 2006-07-04 22:47:19 2620 aa4 Misc =========== Logging initialized (build:
> > 5.8.0.2469, tz:
> >
> > +0930) ===========
> >
> >
> > Where does the reportung get sent to?
> >
> > Does this data get uploaded to Microsoft?
> >
>
> It gets sent to the Event Viewer on your system. Go to Start > Run > type in
>
> eventvwr.msc
>
> Click OK
> Click on System in the left frame to see the Events in the right frame.
>
>
> MowGreen [MVP 2003-2007]
> ===============
> *-343-* FDNY
> Never Forgotten
> ===============
>

> The second part is what I really need to know, how much of this data is
> uploaded to Microsoft?

None that I'm aware of. Then again, I don't work for MS.
I'm under the impression it is just sent to the Event Viewer.


MowGreen [MVP 2003-2007]
===============
*-343-* FDNY
Never Forgotten
===============


Rob wrote:

> Thanks, for the reply, which is 50% complete as the answer only covered the
> 1st part of the question.
>
> The second part is what I really need to know, how much of this data is
> uploaded to Microsoft?
>
> For instance normal error conditions give us the option of sendng or not
> sending data to Microsoft, howevers certain "events" such as WGA and
> Validation don't give us the option , it happens automatically.
>
> Where are these events logged showing that Microsoft is reading the data on
> our PCs?
>
>
>
>