Windows update probs

[JAZ]

I saw in the news forum that some new patches have been released so I headed over to windows update to grab them but Im having a problem with it :rant:
It scans ok and says theres 5 critical updates I need (3 security/1 critical/1 cumulative)
It will then try to instal them but I get a box poping up saying "the software you are installing has not passed windows logo testing to verify its compatability with windows xp, this software will not be installed.Contact your system admin" on 3 of the updates and that the other 2 have installed ok, however if I go back & re-scan it still says theres the same 5 updates needed.
I did a fresh instal the otherday & grabbed a load of security updates with no problems but there was a couple of driver updates I also needed (sound & monitor) & they also said "this driver has not been signed" which I thought was strange seeing as how I was getting them from the windows update site on which the drivers are supposed to be signed but as they installed ok I thought no big deal.
What the hecks going on with it, any ideas?
I went to my driver signing option & put it so it should instal unsinged drivers without moaning at me when I do so but it has no effect, I only set one user on this comp so assume Im logged in as an admin.
Please help :cheers:

[ginipig]

Ageeks post (http://www.short-media.com/forum/showpost.php?p=125704&postcount=5) explains how you can retrieve the patches and store them locally.

[Gobbles]

windows update is having issues. It does not effect all machines but I got several servers on my racks and half update the other half dont.

Gobbles

[Straight_Man]

windows update is having issues. It does not effect all machines but I got several servers on my racks and half update the other half dont.

Gobbles

One thing Microsoft is strongly encouraging is for each person with a LAN to grab ONE set for the LAN. Second, they have a patch checker that will tell you what patches are missing from particular machines. Patches are interpendent on each other, and order of install is important. The software for patch checking is free, and there is newer version out for you to get, available on Technet. Use security_check as a technet search keyword or a KB search keyword, the links to that software will be in a KB article or on the Security subsite of Microsoft. GENERAL rule is to apply oldest patches first, then newest, machine by machine, until all patches are current.


There are two major problems with update right now. FIRST, Microsoft has properly stressed that everyone needs these patches, for NT O\Ss as a class(NT SP6 through Server 2003 all need parts or all of this patch set). Seocnd, they are version and in some cases SP level before patching dependent, as to what exact archive you apply. SECOND, Microsoft has two complete webfeed gens going now, they are migrating things to mspx from asp, and this needs things soem of your servers might not have on them to succeed in updating. One such is the XML 4.0 parser, which itself IS a patch. Second, you need the newest security checker.

What you are seeing is a surface symptom of patch heck, and the latest patch checking software, which is available free, will give you a specific list by server of the things needed. IT IS INTENDED for servers especially. It will look at what is on server, and then look at what patches exist, and then tell you in a possibly long printout what to apply and tries to tell you in what order by server service. Those links are subject to change, the keyword will hold to find that kind of thing for your servers.

It is a patching dep "heck" resolver, among other things-- does not fix it for you, gives you a printout on what to use to fix dep problems it detects, and how to get current with security patches.

John D.

[JAZ]

Ok thanks everyone, I had no problem getting the files from the ms update site so that wasnt the problem.
I finally found out why they wouldnt install, as I did a fresh instal of XP the otherday I went a bit mad turning off lots of the services & it seems that since I turned off the cryptographic service that was making the updates fail.
Oh well live & learn :crazy:
thanks for all suggestions though everyone :thumbup