How can I push out Office updates, office 2016 and 2019?
2 Likes
Hi Scott. Software updates would be done through Chocolatey. Chocolatey Software | Packages
If you donât find a suitable package here, then youâd need to build a script to update it and schedule that out.
Updates are handled by Office itself in those versions, not Windows/Syncro. If automatic updates are not enabled already (typically are) you can do so with GPO or registry entry: Automatic updating for Microsoft Office is not enabled - Office 365 | Microsoft Learn You can force a check for update on click to run editions with:
âC:\Program Files\Common Files\microsoft shared\ClickToRun\OfficeC2RClient.exeâ /update user displaylevel=false forceappshutdown=true
1 Like
I added the registry keys to have Windows updates run and also include other Microsoft products and that worked, but now the registry entries have gone away and automatic updates are turned off (they were there 12 hours ago). Is this caused by Syncro doing the Windows Updates? And Office 2016 is not ClickToRun so it doesnât do the updates itself, it does it with the Windows updates.
I wouldnât think Syncro would interfere with the office registry keys but I havenât tested. 2016 can be click to run or MSI depending on your licensing I believe. If your is MSI then yes youâd need to manage them via Syncro like other updates or turn off the patch management and let Windows do it (assuming Microsoft Update is enabled, probably needed for either to work). windows - How to make "Give me updates for other Microsoft products" enabled again? - Super User
I am having the same issue. I have confirmed that Syncro policies that have Windows Patch Management enabled, disables âReceive Updates for Other Microsoft Productsâ in Windows Update Advanced Settings. I believe itâs done via group policy and then it locks the setting so that it cannot be toggled back on.
On the machine you can use gpedit to turn the policy back on to fix it temporarily, however once Syncro syncs again, the feature is toggled off and locked again.
Syncro policies that do not have Windows Patch Management do not have this behavior.
In the Windows Patch Management editor in Syncro, there is no way to manage this option.
The end result is that Office 2010, 2013 and 2016 do NOT receive updates at all with no work around other then editing group polices manually on the device. This can be hard to do with hundreds if not thousands of workstations affected.
Iâm going to submit a support ticket to see if we can get an option to turn this setting off in Syncro.
1 Like
Thank you, I also submitted a case just now.
Same issue with Office 2016 ProPlus Open (NOT the C2R version). The default answer of âuse Chocolateyâ does not wwork, ssince Chocolatey does not have a package for 2016 ProPlus Open License.
I agree with [ask.jeremy] and others⌠furthermore I think that this affects more than just Microsoft Office. There are many Microsoft programs that receive updates under the âReceive Updates for Other Microsoft Productsâ Checkbox. I feel like this issue needs to be waived in front of the programmers. It feels like just a simple oversight in the Syncro setup of MS updates.
2 Likes
I wanted to add that Iâm having a similar issue as well. Office 2016 is not updating on Syncro-managed clients because the box for enabling Microsoft products to update is greyed out. I can override this by going into group policy manager on the affected system and configure the Windows Update GPO but obviously that defeats the purpose of an RMM solution.
Updateing this in hopes of getting a response from Syncro. This is a big oversight that needs to be adressed urgently
Here is what support said to me:
Thanks for reaching out.
The Agent does make registry changes that block changing update settings which result in blocking updates from other Microsoft products on most Windows OS versions. While currently deploying updated software like Office, it would need to be done through Chocolatey or Scripting in Syncro.
Chocolatey does get installed along with our Third-Party Patch Management Policy. Here is a link to our Knowledge Base has information on Chocolatey: 3rd Party Patch Management FAQ
Typically our Clients manage this through scripting or disable Windows Patch Management and manage all updates by scripts
A few reference links for managing Office updates
Sorry for our limitation on this, Iâll be sure to will pass on the information to our Product Team for review and consideration.
Kindly let us know if you have additional questions. Thank you.
MC Botha
Support Agent
+1 415-523-6363
help@syncromsp.com
1 Like
Ok, I have a workaround. Not perfect, but better than what we have.
********** THIS DOES NOT WORK FOR C2R VERSIONS **********
- Microsoft releases a monthly patch for Office. Search for <> <> Update for Microsoft Office
**For example April 2022 Update for Microsoft Office. This shows you BOTH of Office 2013 and 2013 updates - Download the 32 or 64 bit version as appropriate to your environment. Or both. I have verified that running the incorrect version will only generate a âno compatible productâ warning
- The command line switches for these are found at this microsoft webpage
I have also submitted a script for review which writes the files from your own file library, then runs both the 32 and 64 bit
CAUTION: This is a point fix. You would need to do a check once per month for the latest Office monthly rollup, and then update your script.
As always, we cannot guarantee the suitability of this process for your environment. No warranty implied or offered. Your mileage may vary.
2 Likes
Just reviving this topic that seemed to go nowhere. To recap:
-Syncro agent does not update MS Office or other programs
-Syncro agent actually breaks the functionality of the OS that would otherwise update MS Office
-There is no reason for the agent to turn off updating of Office and other products, just an oversight.
So when can we get this fixed? This is a major issue. I am now in the position with a large client that a 3rd party is going to be auditing our MS Security score, and one of the items on the report is âUpdate MS Officeâ
But I canât do that because my RMM tool breaks that functionality even though it has no reason to.
Whatâw worse is this does not seem to be an easy workaround such as scripting 20H2 or something. All the MS articles about keeping Office up to date reference the built in machine level update, or WSUS/SCCM which obviously I donât have or else I would not need an RMM.
Can we get an updatefrom Syncro on this? This is not a feature request, or a nice to have. Itâs an urgent bug fix that is required.
1 Like
Office should continue to automatically update itself, unless you have a very outdated version of Office 2016 that required a particular KB to update (Microsoft issue, not a Syncro issue), meaning it wouldnât grab those via Windows Updates. Itâs actually specific to Outlook I believe, as the rest of the apps should be updating regularly. Anything before this version would be affected: 16.0.4266.1001. The KB Microsoft released to resolve that is HERE.
To be clear, we donât âbreakâ the ability to download these updates. In order to manage Windows Updates properly Windows Updates must be disabled and handled through our agent. You canât have âotherâ Microsoft applications enabled while updates are disabled. If updates werenât disabled, Windows would do its own thing (including rebooting itself) regardless of what your asset policy says.
Andy - I can demonstrate the following, and reproduce it on demand:
- a windows workstation that has windows updates AND âupdate other Microsoft productsâ both selected
- update for windows and other products both work as expected
- We install the Syncro agent, and deploy an update policy
- Windows udpates continue to work. âUpdate other Microsoft Productsâ stops working.
By definition, this is âbreaking itâ. We take something that works, add your product, now it does not work.
We are not trying to have âotheer microsoft prroductsâ enabled while disabling OS updates.
Once again, I am happy to demonstrate this. We can reproduce the same results at any time.
1 Like
Yeah as I explained above in order for Syncro to manage Windows Updates it needs to disable them and control them directly through Microsoft APIs. If we didnât disable the automatic updates on the endpoint directly, the endpoint would continue to update the OS on its own and weâd have no ability to manage it. There is no way on the endpoint to have Office updates enabled, and primary Windows update functionality disabled.
Again, the scenario you described where you are unable to update Office should only occur with the outdated Office 2016 version I referenced above, otherwise, Office should be able to update itself. If you are seeing this behavior on newer versions of Office then I would reach out to support so they can have a look. Otherwise, if you update your Office 2016 to ensure itâs a newer version that the one I referenced above (16.0.4266.1001) this should resolve your issue.
As referenced above Office 2016 Professional Plus is NOT an outdated version of Office (see Microsoft Office 2016 - Microsoft Lifecycle | Microsoft Learn forr confirmation). It is current and still under mainstream support
The problem is that Click-To-Run (C2R) versions (like those from Office 365) will update automatically and is therefore covered by the scenario you describe. Pro Plus is not a C2R version, it is a volume license version. And as mentioned above, Chocolatey does not have the ability to update 2016 ProPlus.
Therefore there is a gap in the coveragerr provided by the Syncro product. If you turn on the Windows update function in Syncro, and it manages Windows operating system patches, that same function TURNS OFF updates for ProPlus contained within the application. It disables the âupdate other microsoft productsâ function.
No matter how many times you try to spin this around, I can demonstrate what we are talking about. I can provie that you have a bug in your system. Not with outdated software, but with valid, current Office software.
1 Like
So weâre talking about two different things. Office 2016 has not hit its end-of-life period, but you can have an out-of-date version of Office 2016 as Iâve described above. Not processing updates for 2016, for example, means itâs out of date. This is akin to saying an application is vulnerable to attack because it hasnât been updated (out of date), but that doesnât mean upgrading to an entirely new version of the application (e.g. Office 2021). Can you please send me a screenshot of the version number on your Office 2016 install from an affected machine please?
- Windows 2016 ProPlus fully up to date
- Updates are managed by the âUpdate Other Microsoft Productsâ function
- Install Syncro
- âUpdate Other Microsoft Productsâ funciton is turned off
- Updates for 2016 ProPlus no longer happen
I donât see why this is confusing