Anyone else having WSUS report meltdown patches as not-applicable on Windows 7 machines ?

davehurlbert

WSUS is reporting the meltdown/spectre patches as not-applicable on about 50% of our Windows 7 workstations.  We use Sophos AV and the registry key is present, but the patches won't install via Solarwinds PM.  I can manually download the patches from Microsoft and manually install them on individual machines.

Anyone else having this issue?

davehurlbert

Solution:

Our company previously used Symantec Endpoint protection.  The Symantec uninstaller left all kinds of garbage on around 50% of the workstations.  Microsoft detected the presence of some of the unsupported Symantec EP and would not make the Meltdown/Spectre security patches visible to the affected machines, even though we had a supported Sophos AV installed and the QualityCompat registry key was present.

Used the Symantec "CleanWipe" utility to clean up the crud left behind from the Symantec uninstaller.  Then the workstations were able to see the Microsoft patches.

https://support.symantec.com/en_US/article.HOWTO124983.html

Dave