Google Groups no longer supports new Usenet posts or subscriptions. Historical content remains viewable.
Dismiss

Can download auto-updates but can't install without shutdown

19 views
Skip to first unread message

John

unread,
Aug 13, 2009, 8:45:51 PM8/13/09
to
I have three computers. All are running XP/SP3 and are kept current
with respect to Windows Updates. All three have auto-update set for
"Notify me when updates are available, but let me decide when to
download and install."

On two of the three computers, I get the shield in the tray saying
that updates are available, then after I download I get the shield
again saying updates are ready, click to install.

The third computer used to work the same way until maybe a month or
two ago, then it changed. Now, on this third computer, I get the
shield in the tray saying that updates are available, but then after I
download the shield disappears and doesn't come back. But when I go
to Turn Off Computer there's a shield on the Shutdown icon and a
message saying "Click to install important updates and then shut
down."

The other two computers work the way they always did, only this third
one is different. Does anybody know how to get it back to working
like it used to, so I don't have to shut down in order to get the
updates installed?

Reply-to address is real
John

PA Bear [MS MVP]

unread,
Aug 13, 2009, 8:57:38 PM8/13/09
to

See
http://groups.google.com/group/microsoft.public.windowsupdate/msg/7d510d20cae32847
--
~Robear Dyer (PA Bear)
MS MVP-IE, Mail, Security, Windows Client - since 2002
www.banthecheck.com

PA Bear [MS MVP]

unread,
Aug 13, 2009, 9:09:33 PM8/13/09
to

With the Notify Only option (and sometimes with any of the others) enabled,
you'll only see AU's "Updates are ready to be installed" icon when all of
the updates you've approved have downloaded.

If some but not all of the Approved updates have download, you may encounter
a "Click to install important updates and then shut down" button when you go
to turn off your computer. Using it will install the already-downloaded
updates but there's no way of knowing which updates you're installing.

Absent any serious numerical Errors in your windowsupdate.log (cf.
http://support.microsoft.com/kb/902093), you may be seeing a delay caused by
excessive demand on the servers ("Update is not allowed to download due to
regulation"). It can take up to 7 days or more (sometimes much more) for
all Automatic Update users to get new updates when so many have been
released on the second Tuesday of a given month. See...

Updates are not downloaded or the "Automatic Updates" icon does not display
the status of downloads when you enable the Automatic Updates service
http://support.microsoft.com/default.aspx/kb/910340

Microsoft Update Product Team Blog: Update Notifications and
Install-at-Shutdown Behavior:
http://blogs.technet.com/mu/archive/2009/06/26/update-notifications-and-install-at-shutdown.aspx

Much ado about nothing
http://msmvps.com/blogs/bradley/archive/2009/06/25/seems-like-muchado-about-nothing-to-try-to-get-people-to-turn-off-updating.aspx

In most cases, you can install all of the updates via Windows/Microsoft
Update website (WinXP) or by running Windows Update manually (Vista)
instead: Understand that by doing so, you're pushing all other Automatic
Updates users further back in the queue (which may explain, at least in
part, why Automatic Updates hasn't brought them in for you yet).
--
~PA Bear
www.banthecheck.com

PA Bear [MS MVP] wrote:
> See
> http://groups.google.com/group/microsoft.public.windowsupdate/msg/7d510d20cae32847

Tim Meddick

unread,
Aug 13, 2009, 10:12:39 PM8/13/09
to
John,
I have often found this but, it does no harm.

It is just a fact that, sometimes, the shield icon just disappears when it should
remain so you can click on it to install the Updates straight away. After
downloading completes, the icon sort of "flickers" and then is gone.

I don't know if it caused by some inability to complete all the downloads as
described in the google.groups post cited by "P.A.Bear", or not.

But, conversely, if the icon remains in the taskbar, but you ignore it, on turning
off your PC you will also find the "shield" displayed on the shutdown icon as you
described.

So it is a "normal" feature.

However, I have found that, after the download completes and if the shield
disappears, typing :

wuauclt.exe

...into the "Run" box and then after waiting a few moments.

The icon should then re-appear in the taskbar again...

You are then able to click on it to install updates immediately

==

Cheers, Tim Meddick, Peckham, London. :-)


"John" <fakea...@nowhere.com> wrote in message
news:fnc985tb71bm247u6...@4ax.com...

MowGreen

unread,
Aug 14, 2009, 2:36:32 PM8/14/09
to
Tim Meddick wrote:

> John,
> I have often found this but, it does no harm.
>
> It is just a fact that, sometimes, the shield icon just disappears when
> it should remain so you can click on it to install the Updates straight
> away. After downloading completes, the icon sort of "flickers" and then
> is gone.
>
> I don't know if it caused by some inability to complete all the
> downloads as described in the google.groups post cited by "P.A.Bear", or
> not.
>
> But, conversely, if the icon remains in the taskbar, but you ignore it,
> on turning off your PC you will also find the "shield" displayed on the
> shutdown icon as you described.
>
> So it is a "normal" feature.
>
> However, I have found that, after the download completes and if the
> shield disappears, typing :
>
> wuauclt.exe
>
> ...into the "Run" box and then after waiting a few moments.
>
> The icon should then re-appear in the taskbar again...
>
> You are then able to click on it to install updates immediately
>
> ==
>
> Cheers, Tim Meddick, Peckham, London. :-)


PABear is correct when he relates this issue's cause to all of the
updates not being downloaded. MS is aware of this issue as we've
submitted numerous WindowsUpdate.logs that show a system ready to
install updates on Shutdown but the update icon does not appear prior to
Shutdown because 1 or more NON-security updates have not been downloaded.

2009-08-13 12:13:19:921 1284 b1c AU AU found 10 updates for install at
shutdown
2009-08-13 12:13:19:937 1912 7a4 Misc =========== Logging initialized
(build: 7.2.6001.788, tz: -0700) ===========
2009-08-13 12:13:19:937 1912 7a4 Misc = Process: C:\WINDOWS\Explorer.EXE
2009-08-13 12:13:19:937 1912 7a4 Misc = Module:
C:\WINDOWS\system32\wuaueng.dll
2009-08-13 12:13:19:937 1912 7a4 Shutdwn Install at shutdown: found
updates to install

This part of the log shows all of the Security updates for August and
the monthly MRT release (considered non-Security content) as being
downloaded and ready to install

2009-08-13 12:11:47:031-0700 1 189 102
{00000000-0000-0000-0000-000000000000} 0 0 AutomaticUpdates Success
Content Install Installation Ready: The following updates are downloaded
and ready for installation. To install the updates, an administrator
should log on to this computer and Windows will prompt with further
instructions: - Security Update for Windows XP (KB973815) - Windows
Malicious Software Removal Tool - August 2009 (KB890830) - Security
Update for Windows XP Service Pack 3 (KB973540) - Security Update for
Windows XP (KB973354) - Security Update for Windows XP (KB973507) -
Security Update for Windows XP (KB973869) - Security Update for Windows
XP (KB956744) - Security Update for Windows XP (KB971557) - Security
Update for Windows XP (KB971657) - Security Update for Windows XP (KB960859)

The update that was not downloaded due to *regulation*, is considered
non-Security content by MS

2009-08-13 14:39:03:705 1284 4c0 DnldMgr Regulation:
{9482F4B4-E343-43B6-B170-9A65BC822C77} - Update
6564DE2C-47B7-462A-AB65-6EB3D7EC7C03 is "PerUpdate" regulated and can
NOT download. Sequence 4343 vs AcceptRate 500.

Further investigation of the WU.log shows that Update
6564DE2C-47B7-462A-AB65-6EB3D7EC7C03 is KB968389


2009-08-13 12:10:58:203 1284 ff4 DnldMgr * Updates to download = 1
2009-08-13 12:10:58:203 1284 c1c AU AU initiated download, updateId =
{EC1F4A29-8828-4FBE-B101-5A89321D8E7F}.100, callId =
{09CC2AA6-A76F-4435-93A3-67D0DA42D732}
2009-08-13 12:10:58:203 1284 ff4 Agent * Title = Update for Windows
XP (KB968389)
2009-08-13 12:10:58:203 1284 ff4 Agent * UpdateId =
{36B59501-1963-455B-9985-81E6AF53AE0E}.100
2009-08-13 12:10:58:203 1284 ff4 Agent * Bundles 1 updates:
2009-08-13 12:10:58:203 1284 ff4 Agent *
{6564DE2C-47B7-462A-AB65-6EB3D7EC7C03}.100

Extended Protection for Authentication
http://support.microsoft.com/kb/968389

Why this update is considered non-Security content when the KB article
clearly states

> This security update modifies the SSPI in order to enhance the way Windows authentication works so
> that credentials are not easily forwarded when Integrated Windows Authentication (IWA) is enabled.

is beyond my comprehension - http://support.microsoft.com/kb/894199

> New non-security content:
> Update for Windows Server 2008, Windows Vista, Windows Server 2003, and Windows XP (KB968389)


MowGreen
===============
*-343-* FDNY
Never Forgotten
===============

Tim Meddick

unread,
Aug 14, 2009, 4:37:23 PM8/14/09
to
...and you ignored my potential solution to the problem of the disappearance of the
"shield" icon - because?

Notwithstanding *how* or *why* the problem arises...

==

Cheers, Tim Meddick, Peckham, London. :-)


"MowGreen" <mowg...@nowandzen.com> wrote in message
>
> < clipped >


>
> PABear is correct when he relates this issue's cause to all of the updates not
> being downloaded. MS is aware of this issue as we've submitted numerous
> WindowsUpdate.logs that show a system ready to install updates on Shutdown but the
> update icon does not appear prior to Shutdown because 1 or more NON-security
> updates have not been downloaded.
>

> < clipped >

Shenan Stanley

unread,
Aug 14, 2009, 5:10:45 PM8/14/09
to
On Aug 14, 9:37 pm, "Tim Meddick" <timmedd...@gawab.com> wrote:
> ...and you ignored my potential solution to the problem of the disappearance of the
> "shield" icon - because?
>
> Notwithstanding *how* or *why* the problem arises...
>

She always does. She is a one time prostitute serving Microsoft's
Most Valuable Professionals with their sexual requirement. I am one
of the beneficiaries of her services. She is fat, ugly and above all
smelly. YOU HAVE BEEN WARNED!

--
Shenan Stanley
MS-MVP
--
How To Ask Questions The Smart Way http://www.catb.org/~esr/faqs/smart-questions.html


>
> "MowGreen" <mowgr...@nowandzen.com> wrote in message


>
> >  < clipped >
>
> > PABear is correct when he relates this issue's cause to all of the updates not
> > being downloaded. MS is aware of this issue as we've submitted numerous
> > WindowsUpdate.logs that show a system ready toinstallupdates onShutdownbutthe

> > update icon does not appear prior toShutdownbecause 1 or more NON-security


> > updates have not been downloaded.
>
> >  < clipped >
>
> >Why this update is considered non-Security content when the KB article clearly
> >states
>
> >> This security update modifies the SSPI in order to enhance the way Windows
> >> authentication works so that credentials are not easily forwarded when Integrated
> >> Windows Authentication (IWA) is enabled.
>

> > is beyond my comprehension -http://support.microsoft.com/kb/894199


>
> >> New non-security content:
> >> Update for Windows Server 2008, Windows Vista, Windows Server 2003, and Windows XP
> >> (KB968389)
>
> > MowGreen
> > ===============
> >  *-343-*  FDNY
> > Never Forgotten

> > ===============- Hide quoted text -
>
> - Show quoted text -

Tim Meddick

unread,
Aug 14, 2009, 5:42:14 PM8/14/09
to
Is she fuckable? Hell I have no problem putting a bag over her head.

--
Cheers, Tim littledick, Peckham, London. :-(


"Shenan Stanley" <newsh...@gmail.com> wrote in message
news:3536e2f1-38bd-49a2...@r38g2000yqn.googlegroups.com...

Tim Meddick

unread,
Aug 14, 2009, 5:56:04 PM8/14/09
to

For the benefit of other decent users of this group - this is NOT Shenan Stanley - a
well liked and respected contributor of these groups.

But, a warped individual whose need to be accepted in some way, compels them to
imitate others and hide behind their names...

==

Cheers, Tim Meddick, Peckham, London. :-)

"Shenan Stanley" <newsh...@gmail.com> wrote in message
news:3536e2f1-38bd-49a2...@r38g2000yqn.googlegroups.com...

PA Bear [MS MVP]

unread,
Aug 14, 2009, 6:13:45 PM8/14/09
to
MowGreen wrote:
<snippage>

> PABear is correct when he relates this issue's cause to all of the
> updates not being downloaded. MS is aware of this issue as we've
> submitted numerous WindowsUpdate.logs that show a system ready to
> install updates on Shutdown but the update icon does not appear prior to
> Shutdown because 1 or more NON-security updates have not been downloaded.
<mowsnippage>

> The update that was not downloaded due to *regulation*, is considered
> non-Security content by MS
>
> 2009-08-13 14:39:03:705 1284 4c0 DnldMgr Regulation:
> {9482F4B4-E343-43B6-B170-9A65BC822C77} - Update
> 6564DE2C-47B7-462A-AB65-6EB3D7EC7C03 is "PerUpdate" regulated and can
> NOT download. Sequence 4343 vs AcceptRate 500.
>
> Further investigation of the WU.log shows that Update
> 6564DE2C-47B7-462A-AB65-6EB3D7EC7C03 is KB968389
<even mowsnippage>

> Extended Protection for Authentication
> http://support.microsoft.com/kb/968389
>
> Why this update is considered non-Security content when the KB article
> clearly states
>
>> This security update modifies the SSPI in order to enhance the way
>> Windows
>> authentication works so that credentials are not easily forwarded when
>> Integrated Windows Authentication (IWA) is enabled.
>
> is beyond my comprehension - http://support.microsoft.com/kb/894199

And reading the "Mow Information" section of
http://support.microsoft.com/kb/968389 tells us that the user must then
perform a Reg hack "to enable Extended Protection" after installing the
update.

QED: How is John Q. Public supposed to know that?

QED: Does every John Q. Public worldwide need to install this update and
proceed to do a Reg hack?
--
~BroBear
www.banthecheck.com

Jim

unread,
Aug 15, 2009, 7:43:02 AM8/15/09
to

One forger here again .

John

unread,
Aug 15, 2009, 4:31:49 PM8/15/09
to

Thanks, Robear.

Yes, that seems to have been the case. I waited a few more days and
now the shield is back in the tray indicating "Updates ready, click to
install."

It's not a problem, I guess, but I wonder why this happens so
consistently on one computer and never on the other two?

PA Bear [MS MVP]

unread,
Aug 15, 2009, 7:32:04 PM8/15/09
to

Bad luck and/or bad timing, basically. Sometimes you eat the bear &
sometimes the bear eats you. <w>

YW & thanks for your feedback.

MowGreen

unread,
Aug 17, 2009, 1:20:48 PM8/17/09
to
Because most Users will not be running commands to install Security
updates that have been downloaded by AU and are ready to install while
the system waits for 'non-Security content' to be downloaded.
BTW, the command can be shortened to "wuauclt" without adding the .exe
extension, Tim.

> I don't know if it caused by some inability to complete all the downloads as described in the
> google.groups post cited by "P.A.Bear", or not.

All I was attempting to convey was that PABear's assertion is correct
and we've documented it, not to deny that your workaround circumvents
the "bad" behavior of AU.


MowGreen
==============-


*-343-* FDNY
Never Forgotten
===============

0 new messages