2830477: Update for RemoteApp and Desktop Connections feature is available for Windows - KB2574819 - Windows 7 SP1 (x64)
It goes through and finishes, but after reboot it shows relevant again. I’ve isolated the code to be this:
(
exists
file
“cng.sys”
whose
(((
exists
value
“FileVersion”
whose
(
it
as
lowercase
contains
“qfe”
OR
it
as
lowercase
contains
“ldr”
)
of
version blocks
of
it
)
AND
((version
of
it
=
“6.1.7601.21000”
AND
version
of
it
<
“6.1.7601.22099”
)))
OR
((
exists
value
“FileVersion”
whose
(
not
(
it
as
lowercase
contains
“qfe”
OR
it
as
lowercase
contains
“ldr”
))
of
version blocks
of
it
)
AND
((version
of
it
=
“6.1.7601.17000”
AND
version
of
it
<
“6.1.7601.17940”
))))
of
it
)
of
(folder
“drivers”
of
system x64 folder)
My cng.sys file is version 6.1.7601.17919. I show the patch as installed when checking “view installed updates”. Also, I viewed the original exit code of the install and it was 0.
Does the version of cng.sys ever change? I ran this update and, after reboot, the version changed to 6.1.7601.17940.
It is not surprising that the Fixlet is relevant given that your version is between …17000 and …17940.
Either 1) the Fixlet is looking for the wrong version, 2) your cng.sys is not getting updated properly, or 3) after reboot it is getting reverted back to the earlier version.
Is it just happening on one box or many?
Also, maybe try applying this fix instead:
2830477: Update for RemoteApp and Desktop Connections feature is available for Windows - KB2857650 - Windows 7 SP1 (x64) N/A Patches for Windows (English)
Lastly, do you have RDP server running on this Win7 box? (If yes, that might be the problem, see the known issues from MS in the KB notes.)
All the related fixes to 2830477 installed fine and show non-relevant now. This particular patch, though, shows relevant after a mass push. I will try to uninstall the patch and then reinstall the patch manually (rebooted as required and checking versions of file) to see if I can find the issue.
I have removed and manually patched, but the cng.sys is not getting updated across the board. We do not have any RDP servers running on any of our Win7 boxes as far as I’m aware.
I’m tempted to find a copy of this file that meets the requirements and overwrite the “wrong” file version in a test environment to see what happens.
Maybe you can try to use the Microsoft Update Readiness Tool(KB947821) to correct the system if you suspect the cng.sys file being corrupted or “wrong”.
Fixlets for KB947821 are available in IEM Patching support site.
I uninstalled the patch and then I pushed that to my test machine. I then pushed the patch again and it still fails. That file just does not want to upgrade to the new version. It is that way on ~900 machines, so I guess I’m stuck.
Our Win7 x64 machines also show cng.sys 6.1.7601.17919. At the same time, they also show KB2574819 as already installed in the installed updates list under Programs and Features. After installing KB2857650 manually, I was able to install KB2830477, and it did not complain about missing prerequisites. The KB2830477 Knowledge Base article does list KB2574819 and KB2857650 as prerequsites for KB2830477. After all three patches are installed, cng.sys is still on 6.1.7601.17919. I see that the Knowledge Base article for KB2574819 does list 6.1.7601.17940 for cng.sys, so there’s obviously a mistake somewhere on the Microsoft side – either the KB2574819 patch isn’t updating cng.sys like it is supposed to, or the KB article is wrong about the expected file versions. After creating a custom fixlet based on KB2574819 and deleting only the cng.sys portion of the relevance, we have zero (0) relevant computers. Hope this helps!
The only problem with this is when I run Web Reports or look at dashboards, this will still show up as missing/needing to be applied because the original will still show relevant. Is there a way to hide it from the reporting or would i just need to manually adjust?