Topic
  • No replies
cglimson
cglimson
20 Posts

Pinned topic Why some Microsoft KBs do not have IBM Endpoint Manager Fixlets

‏2014-07-17T07:35:57Z |

You might be wondering why some Microsoft updates do not have equivalent IBM Endpoint Manager (IEM) Fixlets. This has to do with special types of updates that Microsoft has released. You might need to install subsequent updates depending on certain conditions that Microsoft detailed in the bulletins of these special updates. IBM Endpoint Manager, in turn, releases Fixlets based on these conditions set by Microsoft and on the content that are released in the Microsoft Download Center.

The following tables list such special case updates. The last columns list the 'missing' updates, which are available only in WSUS, Intune, or System Center Configuration Manager (SSCM). The third columns includes updates released through the Microsoft Download Center and those that have equivalent IEM Fixlets.

  System Use the following KB's for systems that have KB2919355 update installed
(Has equivalent IEM content released)
Update the following KB's for systems without KB2919355
(Updates are available only in WSUS, Intune, or SCCM)
MS14-031 Windows 8.1 or Windows Server 2012 R2 2957189 2961858
MS14-033 Windows 8.1 or Windows Server 2012 R2 2939576 2966631
MS14-035 Windows 8.1 or Windows Server 2012 R2 2957689 2963950
MS14-036 Windows 8.1 or Windows Server 2012 R2 2964736, 2964718 2965155, 2965161
MS14-037 Windows 8.1 or Windows Server 2012 R2 2962872 2963952
MS14-038 Windows 8.1 or Windows Server 2012 R2 2971850 2974286
MS14-039 Windows 8.1 or Windows Server 2012 R2 2973201 2973906
MS14-040 Windows 8.1 or Windows Server 2012 R2 2961072 2973408
MS14-041 Windows 8.1 or Windows Server 2012 R2 2972280 2973932

 

KB2919355 is a Cumulative Update and IBM Endpoint Manager has provided content in mid-May and early June 2014:

  • KB2919355: Windows RT 8.1, Windows 8.1, and Windows Server 2012 R2 Update - KB2919355 - Windows Server 2012 R2 (x64)    (ID: 291935525)
  • KB2919355: Windows RT 8.1, Windows 8.1, and Windows Server 2012 R2 Update - KB2919355 - Windows 8.1 Gold    (ID: 291935513)
  • KB2919355: Windows RT 8.1, Windows 8.1, and Windows Server 2012 R2 Update - KB2919355 - Windows 8.1 Gold (x64)    (ID: 291935501)

 

  • KB2919355: Windows RT 8.1, Windows 8.1, and Windows Server 2012 R2 Update - KB2919355 - Windows 8.1 Gold (x64)    (ID: 291935501)

 

Bulletin System Use the following KB's for systems that have KB2919355 update installed
(Has equivalent IEM content released)
Update the following KB's for systems without KB2919355
(Updates are available only in WSUS, Intune, or SCCM)
MS14-035 Windows 7 or Windows Server 2008 R2 2957689 2963950
MS14-037 Windows 7 or Windows Server 2008 R2 2962872 2963952

 

KB2929437 is a Security Update and IBM Endpoint Manager has provided content during the April 2014 Patch Tuesday:

  • MS14-018: Cumulative Security Update for Internet Explorer - IE 11 - KB2929437 - Windows Server 2008 R2 SP1 (x64)    (ID: 1401877)
  • MS14-018: Cumulative Security Update for Internet Explorer - IE 11 - KB2929437 - Windows 7 SP1 (x64)    (ID: 1401875)
  • MS14-018: Cumulative Security Update for Internet Explorer - IE 11 - KB2929437 - Windows 7 SP1    (ID: 1401873)

 

How is it that there are no equivalent IEM Fixlets?

There are some Microsoft KBs that do not have IBM Endpoint Manager Fixlets because of the way Microsoft structured their releases. IBM Endpoint Manager closely follows these conditions that are set by Microsoft and releases Fixlets based on the content released in the Microsoft Download Center. If Microsoft does not release an update through the Microsoft Download Center, Fixlet(s) will not be released for this update. Microsoft channels other than MS Download Center are not accessible to IBM Endpoint Manager.

One example of a "missing" KB is KB2965155, which is under bulletin MS14-036. MS14-036 states that KB2965155 is the update for systems that do not have KB2919355 installed.
KB2919355, a cumulative and pre-requisite update that is important for Windows 8.1 and Server 2012, was released in April 2014. IBM Endpoint Manager has published content for this update. (Note: We strongly suggest that you install KB2919355).

KB2919355 contains the following information:


Windows RT 8.1, Windows 8.1, and Windows Server 2012 R2 Update is a cumulative update that includes all previous released security updates and non-security updates. In addition to previous updates, it includes improvements such as improved Internet Explorer 11 compatibility for enterprise applications, usability improvements, extended mobile device management and improved hardware support.

Important  All future security and non-security updates for Windows RT 8.1, Windows 8.1, and Windows Server 2012 R2 require this update to be installed. We recommend that you install this update on your Windows RT 8.1, Windows 8.1, or Windows Server 2012 R2-based computer in order to receive continued future updates.

In the bulletin page MS14-036, the following information were stated:

  • Updates 2964736 and 2964718 are for systems that already have the 2919355 (Windows 8.1 Update) update installed.
  • Updates 2965155 and 2965161 are for systems without the 2919355 update installed. Note that the 2965155 and 2965161 updates are only available for customers managing updates using Windows Server Update Services (WSUS), Windows Intune, or System Center Configuration Manager.
     

Following the conditions in this case, users who already installed KB2919355 will need to install KB2964736 and KB2964718. IBM Endpoint Manager has published content for KB2964736 and KB2964718.

Users whose operating systems are without KB2919355 must install 2965155 and 2965161. However, these updates are not available through the Microsoft Download Center and have no equivalent Fixlet content. You might have to get the update directly from Microsoft Support. For more information, you can refer to the respective KB's subsection called "How to obtain help and support for this security update".
 

As per the Microsoft blog post: http ://b logs .win dows .com /win dows /b/s prin gboa rd/a rchi ve/2 014/ 04/1 6/wi ndow s-8- 1-up date -and -wsu s-av aila bili ty-a nd-a djus ted- time line .asp x, Microsoft allows users to defer the installation of certain updates (for example, KB2919355) for 120 days. During that period, Microsoft released other critical updates such as KB2961858 and KB2966631. These updates are not available in the Microsoft Download Center and they can be installed only through WSUS, Intune, or System Center Configuration Manager (SCCM). After 120 days, support for KB2965155 and 2965161 ceases and users are strongly advised to go back to installing KB2919355. As the blog indicates, all customers managing updates using WSUS, Windows Intune, or SCCM have until August 12 to apply the new updates.

 

What's the next step?
We highly suggest installing KB2919355 and KB2929437, if you have not yet done so, to continue receiving updates.

 

Do you have questions? Reply to this post for further inquiries or for comments.