Microsoft Security Essentials overriding automatic updates group policy

E

Eiolon

Gawd
Joined
Apr 6, 2005
Messages
928
I decided to use Microsoft's anti-virus on a handful of machines. The first problem I've come acrossed is I have group policy set to turn off automatic updates and use a WUS server. All the machines with this new antivirus are getting the updates downloaded to them and when the computer is rebooted/turned off, they are being installed. When I check the automatic update tab, the options are still greyed out with "Turn off Automatic Updates" selected.

I have the option "Install and Restart Computer" turned off so its not visible for someone to select it but its installing them any ways. Is there a way to stop this?
 
MSE relies on Microsoft Updates to get its updates. When installing, if your update services are modified in any way, they will get reset to default by the MSE installation.

MSE is licensed only to be used by home users/home office, not business. Thus..besides breaking the EULA, MSE is not designed to be supported by WSUS.
 
WSUS does not and will never support MSE. WSUS does support Forefront though, which is the enterprise grade MSE (they use the same engine/definitions).
 
bigdogchris said:
WSUS does not and will never support MSE. WSUS does support Forefront though, which is the enterprise grade MSE (they use the same engine/definitions).
Click to expand...

lhernandez said:
It looks like WSUS started supplying updates for MSE this week.
Click to expand...
lawl

I'm shocked. They said they would never do this and I really see no reason too becuase who uses WSUS at home? MSE is supposed to be Home only even though I can't say that I'm 100% in license with that myself.
 
I don't think MSE uses windows update, so it will update itself on it's own regardless of GPO.
 
BBA said:
I don't think MSE uses windows update, so it will update itself on it's own regardless of GPO.
Click to expand...

Sometimes when I run Windows Update, it updates MSE as well. I would assume it can update itself with its own method when Windows Update isn't available, but will use Windows Update if it can.
 
On Vista/7, MSE updates are delivered through Windows Update. I noticed on XP that MSE automatically updates it's definitions about 5 minutes after the system starts. I don't know if it does this on Vista or 7 though but I assume it does.
 
Well its' good to see that it's confirmed to update on it's own shortly after boot ... even on Vista/7 boxes.

Thing is, why does MSFT keep saying it doesn't update through WSUS even though it's all over the Internet now that it does? I see that post was from last year and the recent update to MSE caused that to happen though so it's likely just an outdated FAQ.
 
I'm baffled as to why it would, WSUS is for business/enterprise networks, which is against the licensing for MSE. I know it would <probably> use the same defs//updates as Forefront...which is what business/enterprise networks would use for a Microsoft AV product. And there's probably a relationship in the defs to the MRT (Malicious software Removal Tool) updates which come down once a month.

Following this thread here...there are screen shots which show pics of the new entries in WSUS. And several users stating that MSE updates just fine via WSUS.
http://social.answers.microsoft.com...e/thread/bb583643-627b-4105-9ca4-c57533b7c02b

bigdogchris said:
WSUS does not and will never support MSE. WSUS does support Forefront though, which is the enterprise grade MSE (they use the same engine/definitions).
Click to expand...


See above link. :D
 
BBA said:
I don't think MSE uses windows update
Click to expand...

Incorrect.

bigdogchris said:
On Vista/7, MSE updates are delivered through Windows Update.
Click to expand...

Correct.

If it runs, it will handle it's own updates (if "check for updates before scanning" is allowed). If it's not doing the scheduled tasks (scans/updates), the updates come via Windows Update.

The posed a problem for me because all of my machines run F@h 24/7, so my updates do not automatically install. (I don't want an update rebooting my machine in the middle of a work unit.) That caused an issue, because I would get update notifications every day while MSE was installed, nagging me to DL the definition update for MSE. Eventually I got sick of it enough that I went back to Avast.
 
zero2dash said:
Incorrect.



Correct.

If it runs, it will handle it's own updates (if "check for updates before scanning" is allowed). If it's not doing the scheduled tasks (scans/updates), the updates come via Windows Update.

The posed a problem for me because all of my machines run F@h 24/7, so my updates do not automatically install. (I don't want an update rebooting my machine in the middle of a work unit.) That caused an issue, because I would get update notifications every day while MSE was installed, nagging me to DL the definition update for MSE. Eventually I got sick of it enough that I went back to Avast.
Click to expand...

Yeah, we said that and it runs over both. Thanks The update notifications go away by them selves as it updates from MSE inherently, nothing to even bother with.

Maybe you should read the MS article linked, then repost your thoughts.
 
zero2dash said:
The posed a problem for me because all of my machines run F@h 24/7, so my updates do not automatically install. (I don't want an update rebooting my machine in the middle of a work unit.) That caused an issue, because I would get update notifications every day while MSE was installed, nagging me to DL the definition update for MSE. Eventually I got sick of it enough that I went back to Avast.
Click to expand...

It..uhm...doesn't require reboots. My laptop rarely gets rebooted...perhaps once a month...more realistically, probably once every 2-3 months. Win7Biz. Maybe manually reboot if I know there is a uber critical Windows update. My laptop usually just gets its lid shut many times per day, hibernate/suspend. Yet....here I am this morning, up to date with MSE. Hmmm.

Oh yeah..my gaming computer, XPp, probably gets rebooted once every few months...runs 24x7, same thing though, looked this morning...current defs. Hey..I never rebooted.Also running Folding.

Wifes office computer, XPp...runs 24x7, just looked...current defs..it probably has been rebooted since early March when we moved her desk around. Also running Folding.

etc
etc

I have absolutely no idea why it was a problem with your rigs. What is there to "get sick of"? It's one of the lowest maintenance, simplified interface AV product out there.
 
You must log in or register to reply here.
Back
Top