Hi,
We would like to make sure that servers that use our software are kept reasonably current with Windows Updates, at least those updates related to the technologies we use. It would be nice if somehow when the app was being installed if we could check to see if the current system was up to date.
We accomplish this somewhat by only permitting the newest release of each OS version in "Launch Conditions -> System". For example, presently we only allow Windows Server 2008 R1, Service Pack 1 and do not allow users to install on a 2008 R2 machine without that service pack.
We would like to do something similar, but for Windows Updates -- that would not allow them to install or upgrade unless their server was up to date with at least the important updates that we would specify.
Is there any way to do this?
Suggested Articles
Re: Requiring Windows Updates
Hi,
I'm afraid that we do not have predefined support for this. However, you can create your own custom action that checks if the latest Windows Updates are installed and displays an error message if they are not installed.
Best regards,
Eusebiu
I'm afraid that we do not have predefined support for this. However, you can create your own custom action that checks if the latest Windows Updates are installed and displays an error message if they are not installed.
Best regards,
Eusebiu
Re: Requiring Windows Updates
Hi,
Thanks, I think that's the way we'll need to go. It looks like we can use these registry settings:
• Last checked: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update\Results\Detect
• Last attempted: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update\Results\Download
• Last Updated: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update\Results\Install
First, all we get is that “updates have been considered/tried/installed” and when – not very much to go on. We couldn’t keep up with the individual updates even if we had that information (there have been 1,131 updates to Windows Server 2008 R2 core, .NET and SQL Server 2008 R2 just in the recent past).
I think this is mostly a psychological issue and not a technology issue, anyway. It’s about getting the right balance of scaring them into doing their updates (as in, saying that we know that you are behind in your updates and we might not be able to support your application) and not scaring them away entirely.
Has anyone done something like this and would be willing to share the code?
Thanks,
Rob
Thanks, I think that's the way we'll need to go. It looks like we can use these registry settings:
• Last checked: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update\Results\Detect
• Last attempted: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update\Results\Download
• Last Updated: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update\Results\Install
First, all we get is that “updates have been considered/tried/installed” and when – not very much to go on. We couldn’t keep up with the individual updates even if we had that information (there have been 1,131 updates to Windows Server 2008 R2 core, .NET and SQL Server 2008 R2 just in the recent past).
I think this is mostly a psychological issue and not a technology issue, anyway. It’s about getting the right balance of scaring them into doing their updates (as in, saying that we know that you are behind in your updates and we might not be able to support your application) and not scaring them away entirely.
Has anyone done something like this and would be willing to share the code?
Thanks,
Rob
Re: Requiring Windows Updates
Hi Rob,
Unfortunately we didn't code something like this before and I'm sure it is not simple. You can take a look on the Windows Update Agent API articles which might help you and also try to search for relevant information on the net.
Best regards,
Eusebiu
Unfortunately we didn't code something like this before and I'm sure it is not simple. You can take a look on the Windows Update Agent API articles which might help you and also try to search for relevant information on the net.
Best regards,
Eusebiu