我有多个运行在Azure上的Windows Server 2012 R2(IaaS VM)。 我们通过Ansible在这些服务器上执行月度维护,包括Windows更新(推荐和关键更新)。
这适用于我们90%以上的服务器,但有些服务器一直声称,他们从来没有任何要下载/安装的东西:
2016-06-07 13:09:14Z Creating Windows Update session... 2016-06-07 13:09:14Z Create Windows Update searcher... 2016-06-07 13:09:14Z Search criteria: (IsInstalled = 0 AND CategoryIDs contains '0FA1201D-4330-4FA8-8AE9-B877473B6441') OR (IsInstalled = 0 AND CategoryIDs contains 'E6CF1350-C01B-414D-A61F-263D14D133B4') 2016-06-07 13:09:14Z Searching for updates to install in category IDs 0FA1201D-4330-4FA8-8AE9-B877473B6441 E6CF1350-C01B-414D-A61F-263D14D133B4... 2016-06-07 13:10:51Z Creating update collection... 2016-06-07 13:10:51Z Found 0 updates <--- !!! this is not right !!! 2016-06-07 13:10:51Z Calculating pre-install reboot requirement... 2016-06-07 13:10:52Z Scheduled job completed with output: Name Value ---- ----- reboot_required False changed False updates {} installed_update_count 0 found_update_count 0
任何想法如何得到这些推荐的更新下载?
编辑 – 看起来这是一个Azure的问题,我联系了支持,他们检查并设法更新一个失败的服务器…现在所有的服务器都得到更新:
2016-06-27 07:36:25Z Creating Windows Update session... 2016-06-27 07:36:25Z Create Windows Update searcher... 2016-06-27 07:36:25Z Search criteria: (IsInstalled = 0 AND CategoryIDs contains '0FA1201D-4330-4FA8-8AE9-B877473B6441') OR (IsInstalled = 0 AND CategoryIDs contains 'E6CF1350-C01B-414D-A61F-263D14D133B4') 2016-06-27 07:36:25Z Searching for updates to install in category IDs 0FA1201D-4330-4FA8-8AE9-B877473B6441 E6CF1350-C01B-414D-A61F-263D14D133B4... 2016-06-27 07:36:55Z Creating update collection... 2016-06-27 07:36:55Z Found 11 updates 2016-06-27 07:36:55Z Adding update 725ba22c-7559-49d3-bfbd-d51622148d0c - Cumulative Security Update for Internet Explorer 11 for Windows Server 2012 R2 (KB3160005) 2016-06-27 07:36:55Z Adding update d299f2c3-98fc-4266-ba0c-0c600fbcd70e - Security Update for Windows Server 2012 R2 (KB3161561) 2016-06-27 07:36:55Z Adding update d9f4e1b5-4477-4d83-8c27-111ce0e88dd8 - Security Update for Windows Server 2012 R2 (KB3159398) 2016-06-27 07:36:55Z Adding update ffffb2de-746f-45ec-989e-31c322837654 - Security Update for Windows Server 2012 R2 (KB3164035) 2016-06-27 07:36:55Z Adding update 5f64a7d0-006a-472e-996c-0cc66d6a8c9c - Security Update for Windows Server 2012 R2 (KB3161664) 2016-06-27 07:36:55Z Adding update 67a00639-09a1-4c5f-83ff-394e7601fc03 - Security Update for Windows Server 2012 R2 (KB3161949) 2016-06-27 07:36:55Z Adding update 96bb2a20-1151-46a5-90a8-51d8fd0b0d40 - Security Update for Windows Server 2012 R2 (KB3161958) 2016-06-27 07:36:55Z Adding update 686a00df-9ffb-4c1d-89b9-e19b46459f27 - Security Update for Windows Server 2012 R2 (KB3164033) 2016-06-27 07:36:55Z Adding update b62535f0-d013-4c32-97fd-deda038637b0 - Security Update for Windows Server 2012 R2 (KB3157569) 2016-06-27 07:36:55Z Adding update 8ec013ae-5302-471d-a369-b4fa407bc088 - Security Update for Windows Server 2012 R2 (KB3164294) 2016-06-27 07:36:55Z Adding update ba0f75ff-19c3-4cbd-a3f3-ef5b5c0f88bf - Security Update for Windows Server 2012 R2 (KB3162343)
您是使用自己的WSUS服务器,还是仅使用公共Windows Update服务器?
2014年4月,这个非秒,每月汇总被释放。 对于未来的任何更新都是必要的。 https://support.microsoft.com/en-us/kb/2919355
所有将来针对Windows RT 8.1,Windows 8.1和Windows Server 2012 R2的安全和非安全更新都需要安装此更新。
这是一种拙劣的,并创造了其他问题…
请参阅https://support.microsoft.com/en-us/kb/2959977
某些已安装Windows 8.1和Windows Server 2012 R2更新(KB 2919355)的计算机将停止扫描…
根据您的2012 R2安装介质的发行date,2919335可能会也可能不会。 有一些DISM命令将其添加到旧媒体,我认为它已被纳入2014年4月以后发布的媒体。