Export (0) Print
Expand All

Incomplete Updates check

Published: December 16, 2009

Applies To: Forefront Client Security

The Incomplete Updates SSA check determines whether the scanned computer has a software update installed that requires a system restart that has not taken place. The update may not be providing the intended protection until the restart occurs.

This check takes advantage of an improvement found in Update.exe version 6.1.22.0. The installer uses the following registry key to indicate when a restart is required after installation or removal of a software update such as a security update, critical update, or hotfix:

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Updates\UpdateExeVolatile

This SSA check uses the UpdateExeVolatile registry key to identify when an update is in an incomplete state. However, updates using an older version of the installer do not use this registry key. For more information about Update.exe and the improvement used by this check, see Description of the new features in the package installer for Windows software updates (http://go.microsoft.com/fwlink/?linkid=45291).

This SSA check also does not evaluate updates packaged using Windows Installer, but the check can sometimes use the following registry key to determine whether a restart is required. If this key exists and has files listed within it, a restart is pending:

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session Manager\PendingFileRenameOperations

Resolutions for potentially unacceptable scores

In general, it is recommended that a computer be restarted immediately following the installation of security updates, both for protection and stability of the system.

Review the results message associated with the score. If the message indicates that a restart is required to complete an update, restart the scanned computer.

Scoring and results

The following table shows how Client Security determines the score resulting from performing this check. You can use the results message for each score to determine the recommended resolution.

 

Score Value of registry key UpdateExeVolatile Value of registry key PendingFileRenameOperations Results message

Medium

3

Not applicable

Both a software update installation and a software update removal are awaiting a system restart. If the incomplete update is a security update, then the system may be at risk until it is restarted.

  

2

Not applicable

A software update installation is awaiting a system restart. If the incomplete update is a security update, then the system may be at risk until it is restarted.

  

1

Not applicable

A software update removal is awaiting a system restart. If the incomplete update is a security update, then the system may be at risk until it is restarted.

Low

0 or missing

Not applicable

A system restart is not currently required.

Error

Greater than 3

Not applicable

An invalid value was returned for the setting used to determine whether a system restart is required after a software update installation.

Informational

0 or missing

Exists and contains value

A previous software update installation was not completed. The system must be restarted to finish the installation. If the incomplete installation was a security update, then the system may be at risk until it is restarted.

Was this page helpful?
(1500 characters remaining)
Thank you for your feedback
Show:
© 2014 Microsoft