topic CSA with windows update in Network Security

CSA with windows update

firestartest — Sun, 10 Mar 2019 09:16:15 GMT

Has anybody got a robust solution to fix windows update issues.

When a user runs windows update they are prompted to allow the application. Choosing YES seems to allow windows update to work.

After updates are applied and the PC is rebooted, the user receives messages that IEXPLORE tried to run CMD.EXE and was denied.

Add remove programs in control panel and the registry confirm the updates are installed. However, windows update says that the updates have not installed.

I think the CMD.EXE completes some sort of tidying up before it classes the install as finished.

Is this fixable with dynamic app class rules? If so, what does anyone use? I have read some users using IEXPLORE in a rule and some using SVHOST.

Thanks,

Re: CSA with windows update

gfullage — Tue, 08 Feb 2005 22:56:56 GMT

Try this, I've had success with this on my system, but as with anything make sure you test it first on a test system somewhere:

Application control rule:

Take the following action: Allow when current applications in wuauclt.exe application class (@system\wuauclt.exe) attempts to run windows-update-exes class (**\wutemp\**\*.exe and **\program files\windowsupdate\wuaudnld.tmp\cabs\**\*.exe).

Re: CSA with windows update

firestartest — Thu, 17 Feb 2005 13:14:52 GMT

What about when a user wants to manually run WindowsUpdate from a web browser? I have tried adding IEXPLORE.EXE to the apps which seems to allow the update to install but I still get some issues.

It seems that when you initially goto the windowsupdate site and click scan, iexplore wants to run cmd.exe.

Do you notice this happening on your setup?