Security Update MS10-019 (KB979309) is not visible in the System Center Configuration Manager 2007 console for the following operating systems:
Windows Server 2008
Windows Server 2008 R2
NOTE This security update is visible for the Itanium versions of the above mentioned operating systems.
KB979309 bundles another update, KB978601, for the affected operating systems and is superseded by KB2653956. By design in Configuration Manager, no superseded updates are synced. This causes a condition where the update KB978601 is not synced because KB979309 contains this KB for the above operating systems. KB979309 is not synced because it has been superseded by KB2653956.
NOTE This may not affect all System Center 2012 Configuration Manager customers. In this version of the product, there is an option that allows for syncing of superseded updates and by default keep them for 3 months. If that option is chosen then this issue will not occur in System Center 2012 Configuration Manager.
There are two workarounds available to deploy the update for these Operating Systems.
1. Download the update manually and deploy it using a System Center Configuration Manager package. You will need to configure the command line for the program properly so that it installs silently and does not prompt for user input.
2. Approve the update in WSUS, ensuring that the group policies are configured to allow the clients to scan at a schedule and install the updates from WSUS.
For more information on how to deploy using System Center Configuration Manager packages, see Tasks for Software Distribution
For more information on how to approve the update in WSUS, see Approve and Deploy Updates in WSUS 3.0
For the most current version of this article please see the following:
J.C. Hornbeck | System Center & Security Knowledge Engineer
App-V Team blog: http://blogs.technet.com/appv/
ConfigMgr Support Team blog: http://blogs.technet.com/configurationmgr/
DPM Team blog: http://blogs.technet.com/dpm/
MED-V Team blog: http://blogs.technet.com/medv/
Orchestrator Support Team blog: http://blogs.technet.com/b/orchestrator/
Operations Manager Team blog: http://blogs.technet.com/momteam/
SCVMM Team blog: http://blogs.technet.com/scvmm
Server App-V Team blog: http://blogs.technet.com/b/serverappv
Service Manager Team blog: http://blogs.technet.com/b/servicemanager
System Center Essentials Team blog: http://blogs.technet.com/b/systemcenteressentials
WSUS Support Team blog: http://blogs.technet.com/sus/
The Forefront Server Protection blog: http://blogs.technet.com/b/fss/
The Forefront Endpoint Security blog : http://blogs.technet.com/b/clientsecurity/
The Forefront Identity Manager blog : http://blogs.msdn.com/b/ms-identity-support/
The Forefront TMG blog: http://blogs.technet.com/b/isablog/
The Forefront UAG blog: http://blogs.technet.com/b/edgeaccessblog/