HP t5570e Using Microsoft® Baseline Security Analyzer 2.2 and Windows - Page 17

Localizations MBSA releases are available for German, Japanese, and French. The WSUSSCN2.CAB file is localized to all supported languages and is automatically downloaded and used by the tool for any client language or locale being scanned. Results are stored in the report based on the MBSA installation language. Issues Problems discovered during the scoping of this project: • Microsoft is not supporting the Nobackup feature for WES 7 Security Updates. This is a crucial and impacting change, as the addition of monthly Security Updates expands the Image footprint from month to month. • The current catalog files must be downloaded from the Internet before an OFF-line mode scan. It is strongly recommended that these files be downloaded on a weekly basis to ensure that the current security database is being used for scanning. • Installation history (explicitly installed/effectively installed) no longer reflects those updates that have been superseded by another update. The behavior of this feature follows the behavior for missing updates, where only the most recent non-superseded update is shown. • Workaround: Refer to the bulletin, fixlist, or TechNet search page to identify each previous bulletin that has been included in the update in question from the Current Update Compliance listing. Using Windows Update on WES 7 Introduction This section discusses the pros and cons of enabling Windows Update on HP Windows Embedded Standard 7 (WES 7) images. The section also covers the level of support Microsoft and HP have for Windows Update and what the customer can expect if Windows Update is enabled on HP thin clients. It concludes with some special notes regarding installing WES 7 QFEs with a write filter enabled. Audience This section is intended for technical audiences and implies a working knowledge of editing the system registry, reconfiguring HP thin client utilities, and modifying aspects of the WES 7 operating system. The section does not include detailed instructions needed to complete each modification, as ample information is available in the public domain to achieve the desired results. Overview Microsoft has included full support for Windows Update in WES 7. In prior versions of Windows Embedded operating systems, the Windows Update website would not always recognize Windows XP Embedded clients and some, but not all, QFEs or updates would be available for download. One drawback to Windows Update on WES 7 is that the in-box Windows Update client is not write filter-aware, and it does not know to manage the write filers if they are enabled. 17