Skip to content

Add microsoft Update opt-in functionality to MSI #6118

Closed

Description

In the future we plan on supporting security updates through Microsoft Update, for this to work well, the installer should ask users to opt-in to Microsoft Update.

Workflow

  • check existing MU opt-in status
    • If already opt-in to MU, go to the last step
    • if not, go to next step.
  • Show opt-in UI
    • if the user opts out, go to the last step
    • if the user opts in, got to next step
  • Add MU service using WUA API (see examples in a separate section)
  • Configure AU
    • If Windows 10, goto to last step
    • if AU is on, goto last step
    • check OS install type
      • if client OS set AU notification level (see examples in a separate section) to scheduled installs
      • if server OS set AU notification level (see examples in a separate section) to notify before installation
  • Continue with the installation

example how to set AU notification level

PowerShell

https://github.com/PowerShell/xWindowsUpdate/blob/dev/DscResources/MSFT_xWindowsUpdateAgent/MSFT_xWindowsUpdateAgent.psm1#L490

API

https://msdn.microsoft.com/en-us/library/windows/desktop/aa385824(v=vs.85).aspx

example how to add MU service using WUA API

in PowerShell

https://github.com/dsccommunity/xWindowsUpdate/blob/6aab96e94e4a53b817e9f9b7cc403b8036c8b93f/source/DSCResources/MSFT_xWindowsUpdateAgent/MSFT_xWindowsUpdateAgent.psm1#L747

VB

And the documentation: https://msdn.microsoft.com/en-us/library/windows/desktop/aa826676(v=vs.85).aspx

screen layout

example

Here is what the screen should say and look like (icon blurred until we get permission to use them):
image

text

Text Location Comments
Use Microsoft Update to help keep your computer secure and up to date Header
Microsoft Update helps keep your computer secure and up to date for Windows and other Microsoft products, including PowerShell 7. Updates will be delivered based on your current update settings. You can review or change these settings from the Windows Update control panel. Description text… top / middle
Use Microsoft Update when I check for updates (recommended) First radio selection Boldface
I don’t want to use Microsoft Update. Second radio selection
See the Microsoft Update FAQ Bottom left (aligned left), first link. Link (see below for details)
Read the Microsoft Update Privacy Statement Bottom left (aligned left), second link Link (see below for details)

urls

  • Microsoft Update online FAQ URL

http://go.microsoft.com/fwlink/?LinkID=57191​

  • Microsoft Update privacy statement URL

http://go.microsoft.com/fwlink/?LinkID=57190

Activity

  1. TravisEz13 commented on Feb 8, 2018

    @TravisEz13
    MemberAuthor

    chuanjiao10 Can you please restate? I don't understand what you are trying to say.

  2. bergmeister commented on Feb 11, 2018

    @bergmeister
    Contributor

    When auto-update is turned on would that also mean that minor version updates get applied automatically or only patches?

  3. TravisEz13 commented on Feb 12, 2018

    @TravisEz13
    MemberAuthor

    would that also mean that minor version updates get applied automatically or only patches?

    The plan is preliminary (not final), but currently is only to release minor updates which are critical security updates. Other limitations mean, this will likely not happen until after 6.0.2, as I had to make fixes to the MSI in order to make it serviceable using Microsoft Update.

    Note: I assume you mean minor update, and patch in the semantic versioning sense, not the MSI sense.

  4. TravisEz13 commented on Feb 19, 2018

    @TravisEz13
    MemberAuthor

    chuanjiao10 This work item must be done as stated to meet our requirements to release security updates. Your stated aim is unrelated to this issue. Your requirements are new requirements. Please file a new issue.

  5. TravisEz13 commented on Jul 20, 2021

    @TravisEz13
    MemberAuthor

    This is partially done. I don't plan on doing any of the rest of the items.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Metadata

Labels

ComplianceRelated to compliance requirementsIssue-Enhancementthe issue is more of a feature request than a bugResolution-FixedThe issue is fixed.

Type

No type

Projects

No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions