KB 4576341 - Administrator update to Visual Studio 2017 version 15.9

Summary

This is an administrator update for the Microsoft Visual Studio 2017 product line. It is intended for centralized IT administrators to easily deploy a Visual Studio update throughout their organization. This update presumes that Visual Studio 2017 is already installed on the computers. Applying this update will not initiate a brand-new installation.

Administrator updates to Visual Studio 2017 serve several purposes:

The Visual Studio 2017 version 15.9 Feature Pack update enables IT admins to intentionally advance client computers in their organization to 15.9, which is the final supported minor version of Visual Studio 2017.
Security updates are designed to keep Visual Studio secure, and they install the latest version of the Visual Studio 2017 product. During the Visual Studio 2017 mainstream support period which spanned from March 2017 through April 2022, security updates only applied to client machines that had the supported 15.9 baseline installed. During the extended support period between May 2022 and April 2027, security updates apply to client machines with any version of Visual Studio 2017 installed.
Quality updates are designed to deliver performance and reliability improvements to Visual Studio 2017. During the Visual Studio 2017 mainstream support period which spanned from March 2017 through April 2022, quality updates only applied to client machines that had the supported 15.9 baseline installed. After that, now that Visual Studio 2017 is in extended support, we will not ship any more independent quality updates for Visual Studio 2017.

Refer to the online documentation for how to Enable administrator updates and Apply administrator updates.

For more information about which baselines are under support during which timeframes, refer to the Visual Studio Product Lifecycle and Servicing page.

For specific details about which fixes are in each version of administrator updates, see the Visual Studio 2017 version 15.9 release notes documentation.

The title of each administrator update describes the applicable version ranges of the update. For example, if the name of the update is "Visual Studio 2017 version 15.9.0 to 15.9.31," then this update will apply to any clients from version 15.9.0 through 15.9.30, and it will update them to 15.9.31.

Administrator update characteristics

The following table lists the key characteristics of the three primary types of Visual Studio 2017 administrator updates: security, feature, and quality.

Characteristic	Security updates	Feature updates	Quality updates
Update Category	Security Updates	Feature Packs	Updates
Available in Microsoft Update Catalog	Yes. Through April 2027	Servicing baseline version 15.9	Yes. Through April 2022
Available in WSUS	The three most recent security updates are automatically available in WSUS	Not by default. You can manually import feature updates from the Update Catalog into SCCM.	Not by default. You can manually import quality updates from the Update Catalog into SCCM.
SKU applicability	All VS 2017 products	Only products licensed for Enterprise use	Only products licensed for Enterprise use
Types of changes included as compared to previous release	Security fixes Quality fixes Starting in May 2022, security updates will include the final Visual Studio 2017 version 15.9 Feature Pack update too.	Feature changes Security fixes Quality fixes	Quality fixes

How to obtain and install administrator updates

Administrator security updates for Visual Studio 2017 version 15.9 will be published regularly on the second Tuesday of every month. These security updates will be available on both the Microsoft Update Catalog and Windows Server Update Services (WSUS) so that they will be automatically available for deployment through standard enterprise management tools such as Microsoft Endpoint Configuration Manager.

Administrator quality updates and feature updates will be available through Microsoft Update Catalog. Enterprise admins can download the update from the catalog and run it directly on a client computer. Alternatively, they can select to Import the Update from the Microsoft Update Catalog into Configuration Manager (SCCM) if they want to deploy it more broadly.

These administrator updates are functionally equivalent to the Visual Studio 2017 updates that are released to and are available on the VisualStudio.com and My.VisualStudio.com websites.

Configuring client computers to receive administrator updates

The complete list of administrator update configuration options is documented online. The most common ones are listed below.

Visual Studio Client Detector Utility

The Visual Studio Client Detector Utility must be installed on the client computers for the administrator updates to be correctly recognized and received. This tool is included together with all recent Visual Studio 2017 updates since May 12, 2020, and it is also available to independently deploy from both WSUS and the Microsoft Update Catalog.

Encoding administrator intent

The client computers must be enabled to receive administrator updates. This step is necessary to make sure that the updates are not unintentionally or accidentally pushed out to unsuspecting client computers.

The AdministratorUpdatesEnabled key is designed for the administrator to encode administrator intent. This key can be in any of the standard Visual Studio locations as described in the Set Defaults for Enterprise Deployments of Visual Studio documentation. Admin access on the client computer is required in order to create and set the value of this key.

To configure the client computer to accept administrator updates, set the AdministratorUpdatesEnabled REG_DWORD key to 1.
If the AdministratorUpdatesEnabled REG_DWORD key is missing or is set to 0, administrator updates will be blocked from applying to the client computer.

Note: In the future, the explicit action of configuring the client computer to accept administrator updates might be relaxed, and the absence of the AdministrativeUpdatesEnabled key will be an implicit opt-in.

Encoding Visual Studio user and developer intent

Users and developers can use a separate AdministratorUpdatesOptOut key to opt out of receiving administrator updates. The purpose of this key is to encode the intent of the Visual Studio user.

To configure the client computer to block administrator updates, set the AdministratorUpdatesOptOut REG_DWORD key to 1. The absence of the key, or a set value of 0, means that the Visual Studio user wants to receive administrator updates to Visual Studio.

Notice that the AdministratorUpdatesOptOut key (for encoding developer intent) is prioritized over the AdministratorUpdatesEnabled key (that encodes IT admin intent). If AdministratorUpdatesOptOut is set to 1, the update will be blocked on the client, even if the AdministratorUpdatesEnabled key is also set to 1. This action assumes that IT admins can access and monitor which developers chose to opt out, and that the two parties can then discuss whose needs are more important. IT admins can always change either key whenever they want.

Also, notice that both registry keys apply to all instances of Visual Studio that might be installed on the computer.

Reports and diagnostics

How to verify that the update was installed

You can use either of these methods to verify that the update was installed correctly:

On the client computer, start Visual Studio 2017 version 15.9, select Help > About, and then verify that the version number matches the last number in the title of the intended update.
Use the vswhere tool to identify the various versions of Visual Studio on the computer. For more information, see Tools for detecting and managing Visual Studio instances.

Error codes

Client error codes are defined on the Applying Administrator Updates page.

Note: Visual Studio must be closed before you install the update. If Visual Studio is open or being used, the update installation will be aborted.

Feedback and support

You can use the following methods to provide feedback about Visual Studio 2017 administrator updates or report issues that affect the updates:

Refer to the Troubleshooting Visual Studio installation and upgrade issues guidance.
Ask questions of the community on the Visual Studio Setup Q&A Forum.
Go to the Visual Studio support page, and check whether your issue is listed in the FAQ. You can also select the Support Link button for chat help.
Leave feedback on the Administrator Update experience here.
Contact your organization’s technical account manager for Microsoft.