Hi. Installing MS16-100 on Win2012 and Win2012R2 fails, but installing KB3172729 from Windows Update has no problems. But even if I install it With WU it shows as missing/applicable in Bigfix.
Any advise on how to get this patch installed With Bigfix? I have even installed all batches in WU, but still this is reported as applicable.
Hi Narveg,
You need to deploy the latest servicing stack update before installing MS16-100. The KB to install is written as Important Note on the Fixlet’s description.
Let us know again, or open a PMR should you still encounter errors.
Thanks!
To install the Patch MS16-100 , you need to install the Prerequisite patch to get it Complete.
The patch is unspecified in bigfix.
317342401 3173424: Servicing stack update for Windows 8.1 and Windows Server 2012 R2 - Windows Server 2012 R2 - KB3173424 (x64) Unspecified Patches for Windows
That’s right, the prerequisite patch is not a security patch thus does not carry a MSRC severity level (i.e. Source Severity = Unspecified).
Thank You for your replies, I will test out
I deployed the KB3173424 patch on a few Win2012R2 servers, followed by a reboot (status succeeded). Then I deployed the MS16-100 to the same servers, which ends in Failed status.
From the logfile I can see following:
At 15:43:16 +0100 - mailboxsite (http://bigfix:52311/cgi-bin/bfgather.exe/mailboxsite13999624)
Relevant - (fixlet:151217)
Relevant - MS16-100: Security Update for Secure Boot - Windows Server 2012 R2 - KB3172729 (x64) (fixlet:151218)
At 15:43:17 +0100 -
ActionLogMessage: (action:151217) Action signature verified for Execution
ActionLogMessage: (action:151217) starting group action
ActionLogMessage: (action:151217) starting sub action
ActionLogMessage: (group:151217,action:151218) ending sub action
ActionLogMessage: (action:151217) ending group action (completed)
At 15:43:17 +0100 - mailboxsite (http://bigfix:52311/cgi-bin/bfgather.exe/mailboxsite13999624)
Not Relevant - (fixlet:151217)
At 15:43:26 +0100 - mailboxsite (http://bigfix:52311/cgi-bin/bfgather.exe/mailboxsite13999624)
Not Relevant - MS16-100: Security Update for Secure Boot - Windows Server 2012 R2 - KB3172729 (x64) (fixlet:151218)
At 15:43:41 +0100 -
Report posted successfully
A bit confusing why it says Relevant, and a few Seconds later says Not Relevant. Any suggestions why it Fails?
Failed MS16-100: Security Update for Secure Boot - Windows Server 2012 R2 - KB3172729 (x64)