Allow packages on Windows client to be newer than latest in win_repo

[eliasp]

When a Windows client updates its packages to a newer version than the latest version available in the win_repo, applying the state will not succeed for this client.

A way to allow clients to update packages by themselves is required, otherwise a situation like this will occur:

• Latest microsoft.securityessentials in win_repo is 4.4.304.0.
• Client updates through Windows Update to 4.5.216.0.
• Applying the state for this client results in:

          ID: microsoft.securityessentials
    Function: pkg.installed
      Result: False
     Comment: The following packages failed to install/update: microsoft.securityessentials=4.4.304.0.
     Changes:

[UtahDave]

Thanks for opening this issue. I've assigned it to myself.

I think this totally makes sense.

[UtahDave]

Hm. This isn't a Windows specific issue. I think all OSes will exhibit this same behavior. @terminalmage what do you think the proper behavior should be in this type of situation?

[terminalmage]

No, this isn't something that is a problem for other platforms. @eliasp I'm guessing you're pinning the version number in your SLS file? It'd be helpful if you posted the actual SLS you're using, as well as the version of Salt you are running. This is actually pretty basic troubleshooting information, without which it can be difficult to narrow down the issue.

[eliasp]

Sorry for leaving out some details.
I'm not pinning the version, using only this SLS:

microsoft.securityessentials:
    pkg:
        - installed

Master is on 2014.0
Minion is on 2014.1 (amd64, Win 7 Enterprise, en_US)

The win_repo definition for microsoft.securityessentials:

microsoft.securityessentials:
    4.4.304.0:
        installer: http://mse.dlservice.microsoft.com/download/A/3/8/A38FFBF2-1122-48B4-AF60-E44F6DC28BD8/enus/amd64/mseinstall.exe
        full_name: Microsoft Security Essentials 
        reboot: False
        install_flags: ' /s /runwgacheck'
        msiexec: False
        uninstaller: '%PROGRAMFILES%/Microsoft Security Client/Setup.exe'
        uninstall_flags: ' /s /u'

[eliasp]

Fixed in #12670

[eliasp]

I was wrong - re-opening + working on a fix.