WSUS is not properly patching computers, Microsoft says

Microsoft Security is warning IT customers that Windows Server Update Services 3.0 Service Pack 1 is not properly installing patches on machines that also have Office 2003 installed -- or even just components of Office 2003 installed. In addition, this problem may occur for systems that also have the following products installed: Windows Small Business Server 2003 (Windows SBS) with the WSUS component upgraded from WSUS 2 to WSUS 3, System Center Essentials 2007, System Center Configuration Manager 2007.

Ironically, the problem is that the patch Microsoft Security issued on June 30 to fix exactly this problem -- WSUS's failure to work -- is itself faulty. According to the Microsoft Security blog, that WSUS fix "does not correctly elevate privileges, which are required for the installation to complete. ...Additionally, the update does not place an entry in Add or Remove Programs, and cannot be uninstalled. Microsoft has identified the packaging inconsistencies in the current update and is investigating options to resolve them."

Microsoft has issued a patch to fix the patch of its automatic patching system. It has also identified and documented a manual workaround for those that can't install the patch. Information on the new WSUS update and the workaround can be found here.

Visit the Microsoft Subnet home page for more news, blogs, podcasts.
More Microsoft Subnet blog posts:
Microsoft and Google say they want privacy regulation for Internet advertisers
Microsoft pushes "claims based" ID mgt with beta Zermatt tool
Microsoft SaaS pricing for Exchange, SharePoint revealed
Microsoft's Imagine Cup winners announced
Bad for Diane, perhaps good for VMware users