Default automatic approvals (in light of KB3001652) considered harmful

In case you didn't know, your WSUS server adds a "default automatic approval" rule that causes it to automatically approve critical and security updates.   If you still have that enabled, you should remove it ASAP. It burned
me.
To remove the rule, go to Options in your WSUS console then "automatic Approvals", select the rule and Remove it.
This month, Microsoft released the Critical update KB3001652 (to Visual Studio tools for Microsoft Office 2010, a run-time library for third-party applications) which caused many systems to hang.
Microsoft quickly revoked the update, but if your (i.e. my) WSUS server has the default automatic approval rule, the bad update (since it is "Critical") is automatically approved then downloaded to any workstation with an application
that uses the library.
When users go to shut their computers down when they leave work, the bad update starts and never stops, continuing all night. And leaving them frozen out when they come in in the morning.   The only recourse is to power off.

Well, the problem here is that Microsoft made a mistake. New revisions shall not contain new binaries.
See this article:
Managing changes from a WSUS Server
"Auto-reapprove revisions. By default, when a new revision of an approved update is synchronized to the WSUS server we move the approval
to the new revision. Normally this is what customers want, since new revisions never contain new binaries, just fixes to the metadata that describe how to automate the installation of the update."
An even more serious problem IMO is that MS revoked the update but they did not immediately distribute new metadata to expire the update. In fact they have not updated the metadata yet.
Rolf Lidvall, Swedish Radio (Ltd)

Similar Messages

I Myicrosoft Office Web Access for my email. However, it automatically uses the "light" version. Is there any way round this?

I use Microsoft office web access for my email. However it automatically used the light version which doesn't come with all the features. Is there any way around this?

No. The "heavy" version requires using ActiveX controls and Windows services. No way to run those on an iPad.

Output types not defaulted automatically

Hi experts,
I have problems on two areas:
1. Upon creation of Sales order, the output type was not defaulted automatically for picking list.
2. In Outbound delivery after PGI, it does not default output type for Delivery
My settings are:-
In config. - VP01 Define print parameters in Sales (for selected output types)
In master data - VV11, VV21 and VV31 all setup by output type and key combination Sales Organization/Order Type.
Any clue where I have gone wrong or missed out?
Regards
PSK

Hi there,
For those output types check what are the default values --> dispach time. It should be "send immediately which saving the application". Only tehn the O/p will trigger immediately. Else you will have to rpocess RSNAST00 prog.
Also check if the condition records are maintainted properly & printers are asigned in condition record --> communications.
Regards,
Sivanand

JimP: Drawing Architecture: Retained Mode Considered Harmful

Gentlepersons,
I think that I'm beginning to understand how Flash/Flex's drawing architecture works. My current understanding is described in this blog post:
Retained Mode Considered Harmful
If you understand Flash/Flex's drawing architecture, I'd welcome your comments on -- and corrections to! -- this blog post.
On the other hand, if you're an experienced programmer but you're having trouble understanding how drawing works in Flash/Flex, then perhaps you'll learn something by reading this post (and, especially, from the comments on and corrections to it).
Thanks! :-)
JimP

How to convert '$'(Default automatic) in Euro in export sales order Pricing

Dear all,
while creating Export sales order system automatically pick pricing in Dollars USD , how to change currency other than USD on sales order like EURO or JPY.
1. can it be done automatically?
2. if not how can i make system calculate entire pricing on diffrent currencies.
Thanks n' Rgds,
Gaurav

Dear JJ
Thanks for Prompt response.
Further,my client wants that Default currency should be set as USD but as the customer of Client is Billed in both USD and EURO. though major of his Billing will b in USD. as according to u i have to change Customer data(sales area) every time i change currency...
Is there any procedure for changing currency only on to sales Oder, without changing Cust. Master Data.
Rgds,
Gaurav

Default Automatic Association to "No" when using Outlook Integration

In R14 the Automatic Association was turned off (Set to "No"), in R15 it is turned "On" (Set to Yes) by default.
Is there any way users can manually choose what default they would like to have.

I am currently on R15 with my use of OEI and Siebel CRM On Demand and my Automatic Association defaults to No. Make sure un-install your current version of OEI and download the latest version from your Siebel CRM On Demand.

How do you set a default automatic email notification using Dreamweaver?

Hello:
I am currently creating a form on a webpage using Adobe Dreamweaver. This form is used for users to register for an event and I would like when they are finished filling out the form that the 'Submit' button autmatically sends that information from the form to a default email address. This button would not send the user to Outlook, it would just automatically send the information to the recipient address. I've seen a few websites that have this capability so I'm pretty sure that it is possible to do it, I just don't know how. Much help would be appreciated!!

You will need a script to process the form - generally a FormMail script.
Firstly check with your hosting service, most hosts offer such a free formmail script on their servers. Either check the hosts' FAQ pages or contact the host directly and ask them how to implement this on your site.
It's then a matter or adding a bit of code to the <form> tag to get the form to send to whatever email address you specify.
If the host doesn't support such a script (which would very unusual and I wouldn't host with them for this reason :-) then you may need to look at a rd party form processing service.
Nadia
Adobe® Community Expert : Dreamweaver
http://twitter.com/nadiap
Unique CSS Templates |Tutorials |SEO Articles
http://www.DreamweaverResources.com
http://csstemplates.com.au/

Automatic Approvals don't Approve

I have an Automatic Approval that includes Definition Updates and Office 2010. I've noticed that my WSUS doesn't want to. approve any of them for some reason. My rule looks like this:
Looking at the latest June definition update, it's not approved. Are my rules done incorrectly?
Orange County District Attorney

I've actually got lots of them that are not auto-approved. Many are older security updates. When I first setup the WSUS server, I did a synchronization before configuring auto-approvals. I'm sure the many updates that are not approved are because of this.
I understand that anything synchronized before this won't be retroactively approved.
I've run every report I could find to locate all my Not Approved updates but WSUS just doesn't want to show them to me. I've been trying to get into the WID database and see if the tables reveal anything but I haven't been able to get the database cracked
open correctly. I realize this is not the right way to do it but short of reinstalling WSUS, I'm stuck.
We use this stand-alone WSUS server to create Win7 and Win8 images and during the creation ( with MDT 2013 ) we update the base images with everything that's needed from WSUS. When we finally deploy the images, we use SCCM 2012 to further manage the systems.
What I'm finding is that after creating our base image and deploying it, SCCM scans it and finds over 60 security updates that WSUS didn't install during the initial image creation. I've had to manually search and approve each one of the updates so we can
finally create a fully patched, base image.
Not as much fun as I'd like to have. Would love to find out a better way of finding all the Not Approved updates.
Orange County District Attorney

How do I get default/automatic reminders or alarms for every new event?

I want to set a preference so that all the new calendar events have an alarm or reminder that I have to clear after I get the reminder. At least a daily reminder list or even repeating alarms starting 2 hours before the event.
Is there a way to do this in the IpHONE calendar preferences or settings; do I have to change it in iCal then sync and that preference will transfer? I've been through every setting menu on the iPhone&Calendar as well as peeking into the settings in iCal.,
Does anyone know how to do this?
-Cryptic

I would like to second this as a common frustration. Migrating from other phones with calendar features I was surprised to miss my first appointment. I would expect to look under settings > mail, contacts,calendars, calendar and see a setting for default appointment reminder so that every time I create an appointment in a hurry I don't have to remember to set a reminder safe in the knowledge it set it to 15 mins on my behalf.

My backlit keyboard will not go off automaticaly i have the box checked but it still doesn't turn on and off. i am having to do it using the f5 and f6 keys. anyone know how to make it work automatically in low light?

i am having a problem with my back lit keyboard on my 13in mac book pro. i have the box checked in the keyboard setting for auto so the keyboard should turn on and off in low light conditions but it doesnt. anyone know how i can getit to work properly?

I have taken it back to the Apple store genius bar, but they say they don't see anything wrong. Well unless you use it all day and experience the problems when they happen, you wont see anything wrong. But there are lots wrong with it. But this would be the same store as I purchased the phone. And they backed up my old Iphone 4, but were not able to get anything to load back onto my new phone. So, I lost pretty much everything. But over time, some of my contacts have started showing up, although i am still missing over 800 of them.

0FISCPER defaults automatically in the Aggregate level

Hi guys,
I have a strange situation where I have 0FISCPER, 0FISCPER3, and 0FISCYEAR in my planning cube, but I only want 0FISCPER3, and 0FISCYEAR in my aggregate level.
For some reason, when I enter the 0FISCPER3 and 0FISCYEAR in the aggregate, the system automatically inserts the 0FISCPER characteristic in there as well. The quick solution is obviously to take the 0FISCPER out of the planning cube, but I want it in the planning so it can derive the value from 0FISCPER3 and 0FISCYEAR.
If I leave 0FISCPER in the aggregate level, then the system will need a value for it during the query design (or my cells will be locked), however, I do not want it in my Query.
So how can I make the system to stop inserting 0FISCPER in my aggregate, so I only have 0FISCPER3 and 0FISCYEAR in my aggregate.
Thanks
Edited by: Ehab Mansour on Sep 18, 2008 9:43 AM

Hi,
Thanks so much for your information Gregor.
But this is all very confusing for me, this is the first time I've come across this concept of "Exception aggregation".
My situation is as follows, and let me know if you have any suggestions:
I have a IP planning cube, which is a copy of the Cost Center Activity cube. With this copy, the only time characteristics I required and kept in my planning cube, was 0FISCPER3, 0FISCYEAR, and 0FISCVARIANT, but I took OUT of the cube 0CALDAY, and 0FISCPER.
Then I created my Aggregate level in IP based on this cube. Then I did a check, and it said everything was consistent, and activated it.
Then using query designer I created a query Key figures were Activity Quantity, and row characteristics were Cost Center and Activity type. Time characteristics used were 0FISCPER3, 0FISCYEAR, and 0FISCVARIANT.
When I executed my query, I got the following message:
"Exception aggregation reference characteristic 0CALDAY not in info provider", and it seems like my query is locked, maybe as a result of this.
1) Does this mean I need 0CALDAY in the cube?
2) if the above is yes, then it will prompt me to put it in the Aggregation level as well, and if it's in the aggregation level, then it's going to expect me to give it a value in the query (otherwise it will lock), which I don't want to do.
Why does it need the 0CALDAY in the cube?
Can you suggest some options for this. Is there a way I can avoid having 0CALDAY in the cube and aggregate level? OR do I just leave it in the query, and find an SAP Exit variable that will just automatically populate this for me?
Sorry if I've repeated myself.

MBP Won't Sleep automatically. Sleep light on. Not pulsing. Drive spinning.

I can get my new MBP SR to sleep when I tell it to but it won't sleep when it's supposed to according to my Energy Saver preferences.
Instead of sleeping, the screen goes dark and the sleep light stays on at medium - no pulsing. I can hear the hard drive still spinning. I tried changing my screen saver to one of the original Apple settings (Computer Name) but that didn't help. I'm going to try throwing away my Energy Saver prefs.
Any suggestions?
BTW - I took a closer look and I was a bit surprised at how many posts there are for the MacBook Pro on the Apple.com discussions. The most posts per day of any model by far. I know its a very popular Mac but this model seems to have more problems than we are able to solve. That worries me. Anybody else noticing this?
-Todd

I had exactly the same issue and needed three hours to find out the reason. It was the Bluetooth Mighty Mouse. I had to disselect the *third option* in the *bluetooth preferences*. I have a German-language OS X so I don't know the exactly expression but it affects the ability for bluetooth devices to weak up the system.
If you have EyeTV 2: This application must not be running. If you have scheduled recordings that doesn't matter it will record anyway: It will wake up the Mac - record the thing - go to sleep again.
I have several devices connected to the MBP: Three external enclosures with harddisk drives (2xFW800, 1xUSB without sleep function), EyeTV 610, speakers - all those things did not prevent the system for going to sleep. All those devices can be left attached - up and running. The FW harddisks will go to sleep the USB not.

Assert Considered Harmful

"Do not use assertions to check the parameters of a public method".
Statement source: http://java.sun.com/j2se/1.4/docs/guide/lang/assert.html
I could not disagree more with that statement. I would support it if they qualified that by saying that if an API provides an internal service where the context is known and the acceptibility of arguments known, feel free to assert. The same rationale applied to protected or package visibility can be used in that case. Where you should not use pre-condition argument asserts is when the context cannot be known: you are distributing an API for general use.

"I think that the reason to avoid using assertions for
parameter checking in public methods is because
assertion can be disabled".
That would also be an argument for not using asserts
on methods with package or protected visibility, too.
However, nobody has suggested we not use asserts in
those cases. Asserts are extremely beneficial when
checking package and protected method arguments. They
are equally beneficial with public method arguments. Okay. I'll suggest that you not use asserts to check parameters of protected methods. This is because those methods can be called by classes that extend the class, and thus can be written by other programmers.
In general, it's okay to use asserts to check package methods, because only one programmer or the programmers on one team will be calling the method. Presumably, the programmers working on that package will have assertions enabled for the package while working on the code, and therefore will find where they call the method with bad parameters.
Consider having a method with package scope and adding
asserts to quickly ferret out problems with its usage
within an application. Now add "public" to the front
of it. The visibility changed, you therefore remove
the asserts and add IllegalArgumentException? Why? In
fact you would not and should not remove the asserts
in the vast majority of cases. You should in fact use
asserts even when starting out as a public method, in
the vast majority of cases. The small minority of
cases, where you are publishing an API for general
distribution, should not use asserts but rather an
IAE. Obviously HUGE numbers of developers use
generally distributed APIs but most programmers are
writing applications and services and internal APIs. I agree that if code will always be used internally, it's okay to use asserts rather than exceptions to check parameters. However, code meant for internal use for a short time has an uncanny way of living on for years and being distributed more widely than planned... ;-)

1.4.2_06 Hotspot Considered Harmful

The following 23-line program, containing no library calls and nothing even remotely "tricky", consitently crashes the JVM on every Linux or Windows box we ve tried it on. We tried filing a bug report, but since someone once fixed a problem (5009717) generating the same error code some time back in an early 1.5 beta, this is a "duplicate" (despite the fact that it's on a 1.4 build apparently released after the previous bug was closed). A later attachment to the above bug report suggests that at least one other user has hit this, though.
It is possible to make the problem "disappear" by rearranging the code, but our testing suggests that how long it takes to crop up is a function of Hotspot's optimization heuristics, so it's not easy be sure if you've avoided the problem or just pushed it one iteration past the number of times you've tested some particular path. In other words, you can't trust it.
We're telling our customers to avoid 1.4.2_06 entirely because of this issue. We are big Java advocates in our company and industry and find it most painful and embarassing to have to tell people using our software that the (at this writing) current version of the Java 1.4 environment is
unfit for use and we don't know when (or if) it will ever be fixed.
// run this on 1.4.2_06
public class GoodbyeWorld {
public static double func1(){
    double r = 0;
    for (int i = 0; i < 1; i++)
      r += func2();
    return r;
public static double func2(){
    double[] a = {0};
    double r = 0;
    for (int i = 0; i < 1; i++)
      r = a;
return r;
public static void main(String[] argv) {
for (int i = 0; i < 1000; i++)
func1(); // System.out.println("i["+i+"]=" + func1());
$ java -version
java version "1.4.2_06"
Java(TM) 2 Runtime Environment, Standard Edition (build 1.4.2_06-b03)
Java HotSpot(TM) Client VM (build 1.4.2_06-b03, mixed mode)
$ java GoodbyeWorld
# HotSpot Virtual Machine Error, Internal Error
# Please report this error at
# http://java.sun.com/cgi-bin/bugreport.cgi
# Java VM: Java HotSpot(TM) Client VM (1.4.2_06-b03 mixed mode)
# Error ID: 43113F2652414D452D41503F491418160E435050005C
# Problematic Thread: prio=1 tid=0x080a8eb0 nid=0x7954 runnable
Heap at VM Abort:
Heap
def new generation   total 576K, used 156K [0x44770000, 0x44810000, 0x44c50000)
eden space 512K, 30% used [0x44770000, 0x447971c0, 0x447f0000)
from space 64K,   0% used [0x447f0000, 0x447f0000, 0x44800000)
to   space 64K,   0% used [0x44800000, 0x44800000, 0x44810000)
tenured generation   total 1408K, used 0K [0x44c50000, 0x44db0000, 0x48770000)
   the space 1408K,   0% used [0x44c50000, 0x44c50000, 0x44c50200, 0x44db0000)
compacting perm gen total 4096K, used 975K [0x48770000, 0x48b70000, 0x4c770000)
   the space 4096K, 23% used [0x48770000, 0x48863f80, 0x48864000, 0x48b70000)

Thank you for the test case. I was able to reproduce this on solaris-i586, windows-i586, and on linux-i586. The crash is specific to the -client compiler and the i586 architecture. The expanded text of the Error-ID string is:
    43113F2652414D452D41503F491418160E435050005C
Decodes to:
    c1_FrameMap_i486.cpp, 92The test case works fine using -server (or -Xint) on i586, and it works fine using both -client and -server on SPARC systems.
I opened Bug-ID 6215242 on this issue. Look for is on the Bug-Parade in a day or two.

Hyphenated package names considered harmful?

The other day I glanced at the Package Making HOWTO on the Wiki, and I happened to notice a passage stating that package names should not be hyphenated. However, I notice that a number of existing packages do have hyphenated names.
So what's the deal? Should we really avoid hyphens, and if so, why?
(BTW, I'm with the LISPers on this issue: hyphens are fairly natural to type and are thus cool; underscores are an abomination, so I'd really like to use hyphens).

My mistake... long time ago.
Its the $pkgver and $pkgrel that should not contain hyphens. Names are ok.
hyphenate away. I'll update the wiki.
Dusty

Default automatic approvals (in light of KB3001652) considered harmful

Similar Messages

Maybe you are looking for