MBSA is stating Automatic Updates are not configured correctly

[[e-mail]]

I have configured Automatic Updates to download and install
automatically both manuall and through GPO. MBSA is still reporting
that Automatic updates is not configured correctly. I am using MBSA
Version 1.2.1 (1.2.4013.0.

Any help would be appreciated

[Doug Neal [MSFT]]

Can you provide exact steps for what you are doing, what the results are and
what you expect the results to be - including any errors or warning mesages
that you are seeing?
--
Doug Neal [MSFT]
***@online.microsoft.com

This posting is provided "AS IS" with no warranties, and confers no rights.

If newsgroup discussion with experts and MVPs is unable to solve a problem
to your satisfaction, feel free to contact PSS for the Microsoft Baseline
Security Analyzer (MBSA) at the following link:
http://support.microsoft.com/default.aspx?scid=fh;en-us;Prodoffer20a

This e-mail address does not receive e-mail, but is used for newsgroup
postings only.

Post by ***@nospam.com
I have configured Automatic Updates to download and install
automatically both manuall and through GPO. MBSA is still reporting
that Automatic updates is not configured correctly. I am using MBSA
Version 1.2.1 (1.2.4013.0.
Any help would be appreciated

[[e-mail]]

Hi-

Thanks for your quick response.

This is what I am doing:

Logging into Server as Adminsitrator.

Right Click My Computer
Select Properties
Select Automatic Updates
Select and Check off "Keep My Computer Up to Date..."
Select and Check off "Automatically download the updates..."
Select everyday
Select 3:00am
Click OK.

Run the MBSA against the server with default options.

I do not receive any errors but the report stats that Windows Automatic
Updates is not configured correctly and this cause the MBSA report to
be flags as severe risks. I am expecting this to go away once
configured as it has on previous servers.

I have run throught this on 4 server today. Two servers scanned fine
and two still have the message. I have tried the same situation as
above using a GPO setting also with the same result.

Thanks,

[Doug Neal [MSFT]]

Thank you for continuing to work with us to track down this issue. We have
not been able to reproduce the same issue in-house except when the following
registry key (or all keys from this node) were missing:

HKLM\Microsoft\Windows\Current Version\WindowsUpdate\Auto Update\AUOptions


You may want to try the steps below to resolve the problem:


Summarized Resolution Steps:

1.. Delete all registry keys under: HKLM\Microsoft\Windows\Current
Version\WindowsUpdate\Auto Update\
2.. Configure "Automatic Updates" to download updates automatically (every
day at 3am).


Detailed Resolution Steps:

1.. Start à Run à type "regedit"
2.. Click OK
3.. Find the following registry node on the left-hand window:
HKLM\Microsoft\Windows\Current Version\WindowsUpdate\Auto Update\
4.. Select all registry keys on the right-hand windows except for:
(Default)
5.. From the menu: Edit à Delete
6.. Click YES
7.. Right-click on "My Computer"
8.. Select Properties
9.. Select the "Automatic Updates" tab
10.. Select "Automatic (recommended)"
11.. Select "Every day"
12.. Select "3:00am"
13.. Click OK
I hope tht helps. If you continue to have a problem, please write back with
the results of the steps above and let us know if you have a SUS 1.0 agent
installed on the client machine. Thank you
--
Doug Neal [MSFT]
***@online.microsoft.com

This posting is provided "AS IS" with no warranties, and confers no rights.

If newsgroup discussion with experts and MVPs is unable to solve a problem
to your satisfaction, feel free to contact PSS for the Microsoft Baseline
Security Analyzer (MBSA) at the following link:
http://support.microsoft.com/default.aspx?scid=fh;en-us;Prodoffer20a

This e-mail address does not receive e-mail, but is used for newsgroup
postings only.

Post by ***@nospam.com
Hi-
Thanks for your quick response.
Logging into Server as Adminsitrator.
Right Click My Computer
Select Properties
Select Automatic Updates
Select and Check off "Keep My Computer Up to Date..."
Select and Check off "Automatically download the updates..."
Select everyday
Select 3:00am
Click OK.
Run the MBSA against the server with default options.
I do not receive any errors but the report stats that Windows Automatic
Updates is not configured correctly and this cause the MBSA report to
be flags as severe risks. I am expecting this to go away once
configured as it has on previous servers.
I have run throught this on 4 server today. Two servers scanned fine
and two still have the message. I have tried the same situation as
above using a GPO setting also with the same result.
Thanks,