Woody Leonhard's no-bull news, tips and help for Windows, Office and more… Please disable your ad blocker – our (polite!) ads help keep AskWoody going!
Home icon Home icon Home icon Email icon RSS icon
  • Patch Lady – if you do have 1803

    Posted on May 9th, 2018 at 23:25 Susan Bradley Comment on the AskWoody Lounge

    If you do have 1803 on your computer systems, you’ll honestly want to install https://support.microsoft.com/en-us/help/4103721

     

    There are several key fixes in this release:

    1. The issue impacting Chrome and Cortana is fixed.  “Addresses an issue that may cause some devices to stop responding or working when using applications, such as Cortana or Chrome, after installing the Windows 10 April 2018 Update.
    2. Fixes an issue with interaction with Server 2016 Essentials and those who have VPN set up.  The issue manifests itself whereby the Server connector software can’t be installed on 1803 machines if VPN is set up on the server.  Installing this update fixes the side effect.  It may also fix issues with third party vpn software.  “Addresses an issue that prevents certain VPN apps from working on builds of Windows 10, version 1803. These apps were developed using an SDK version that precedes Windows 10, version 1803, and use the public RasSetEntryProperties API.
  • JavaScript equations coming to Excel. What on earth are they thinking?

    Posted on May 9th, 2018 at 13:28 woody Comment on the AskWoody Lounge

    I was going to let this one fly by, but I just can’t.

    If you’re in the Office Insider program, you can now use custom functions in Excel that are written in… my sweet lord… JavaScript.

    The Office Dev Center describes the functions thusly:

    Custom functions (similar to user-defined functions, or UDFs), enable developers to add any JavaScript function to Excel using an add-in. Users can then access custom functions like any other native function in Excel (such as =SUM()). … Custom functions are now available in Developer Preview on Windows, Mac, and Excel Online.

    My jaw dropped when I heard that in the aftermath of a Build presentation yesterday. In fact, I figured I heard it wrong. But no.

    What’s wrong with making JavaScript available as an in-the-sheet programming language? As Lawrence Abrams at BleepingComputer notes, “within hours” a security researcher, Chase Dardaman, figured out a way to put the CoinHive in-browser JavaScript miner inside a spreadsheet.

    As if 25 years of macro malware wasn’t enough.

  • Problems with CredSSP updates CVE-2018-0886 breaking RDP connections

    Posted on May 9th, 2018 at 11:48 woody Comment on the AskWoody Lounge

    Yet another mess.

    @GeekDiver reports:

    Looks like CVE-2018-0886  was included in the cumulative update and is breaking RDP connections and App feeds.   No backward compatibility in CredSSP right now we are dealing with 100 Windows 10 PCs that are affected.   Anyone else seeing this?

    The CVE-2018-0886 article lists every current version of Windows as falling under this patch’s spell.

    Microsoft has an extensive list of errors generated by this update in KB 4093492, which mentions this error and offers a link to https://go.microsoft.com/fwlink/?linkid=866660 — which, in turn, links back to the same article.

    Kinda like chasing your tail. Windows is the productivity OS, right?

    Susan aka Patch Lady note as of 5/9/2018:  Please note the problem is NOT with the update.  Rather the issue is that there’s a mismatch of patching levels.  In March Microsoft released an update that began the process of rolling out an update to CredSSP used in Remote Desktop connection.  In May the updates mandate that a patched machine can’t remote into an unpatched machine.  If you dig into the KB there is a registry workaround to [TEMPORARILY] disable the mandate, but the better and wiser move is to update the server or workstation you are remoting into.  Make sure the “thing” you are remoting into has an update.  Also note that for consumers and home computers you probably won’t see this issue.  This only has impact if you use Remote Desktop connection to remote into another computer.

  • Multiple reports that Windows Update is overriding the “metered connection” setting

    Posted on May 9th, 2018 at 09:39 woody Comment on the AskWoody Lounge

    I’m seeing reports from many different places that Microsoft’s long-standing (unspoken) policy of bypassing cumulative updates on machines with “metered connections” has been broken.

    Specifically, it looks like yesterday’s Win10 1709 cumulative update KB 4103727 — the one that brings Win10 up to build 16299.431 — is being applied on machines that have their internet connections set as “metered.”

    It’s not clear if that’s the case with both Wi-Fi and Ethernet (wired) internet connections.

    It’s also not clear if Win10 1703 is similarly afflicted.

    If true, Win10 Home customers are going to get hit hard — the metered connection approach was the only easy, reliable method I know about for avoiding updates.

    Home users may be forced to disabling wuauserv and/or running third-party cumulative update blockers.

    If you know of someone who’s experiencing a forced cumulative update, please post here and let me know which version of Win10, and whether the metered connection is Wi-Fi or Ethernet.

  • Windows and the inexorable downward slide

    Posted on May 9th, 2018 at 05:12 woody Comment on the AskWoody Lounge

    (click to expand)

    Horace Dediu (Asymco) has a new blog post that you should read, as we’re shuffling deck chairs and playing “Nearer, My God, to Thee.”