News, tips, advice, support for Windows, Office, PCs & more. Tech help. No bull. We're community supported by donations from our Plus Members, and proud of it
Home icon Home icon Home icon Email icon RSS icon

Blog Archives

  • The case against knee-jerk installation of Windows patches

    Posted on June 16th, 2019 at 21:12 woody Comment on the AskWoody Lounge

    I finally had a chance to put together a manifesto for a heretical position I’ve taken publicly for more than a decade:

    Windows Automatic update is for chumps

    Yes, you have to get patched sooner or later (although Group W holdouts will disagree), your Sainted Aunt Martha should be on auto updates, and a tiny number of patches have to go in right away. But in the vast majority cases, for the vast majority of people, installing patches as soon as they roll out just doesn’t make sense.

    Unless you have a staff charged with vetting patches, it’s much smarter to crowdsource patch beta testing. Don’t get pushed into blindly taking what comes out the auto update chute.

    Details in Computerworld Woody on Windows.

  • June 2019 non-Security Office updates are available

    Posted on June 4th, 2019 at 12:44 PKCano Comment on the AskWoody Lounge

    The June 2019 non-Security Office updates have been released Tuesday, June 4, 2019. They are not included in the DEFCON4 approval for the May 2019 patches. Unless you have a specific need to install them, you should wait until Susan Bradley (Patch Lady) approves them and any problems have been reported.

    Remember, Susan’s patching sequence and  recommendations are based on a business environment that has IT support and may have time constraints on the updating process. Consumer patching should be more cautious due to limited technical and mechanical resources. The latter is the reason for the AskWoody DEFCON system.

    Office 2013

    Update for Skype for Business 2015 KB4464593

    Office 2016

    Update for Microsoft Excel 2016 KB4464578
    Update for Microsoft Office 2016 KB4464539
    Update for Microsoft Office 2016 KB4464579
    Update for Microsoft Office 2016 Language Interface Pack KB4464581
    Update for Microsoft Outlook 2016 KB4464585
    Update for Microsoft Project 2016  KB4464589
    Update for Skype for Business 2016 KB4464576

    There were no non-security listings for Office 2007 (which is out of support) or Office 2010.
    Updates are for the .msi version (persistent). Office 365 and C2R are not included.
    Security updates for all supported versions of Microsoft Office are released on the second Tuesday of the month (Patch Tuesday).

  • Patch Lady – seeing Outlook authentication issues

    Posted on May 11th, 2019 at 23:24 Susan Bradley Comment on the AskWoody Lounge

    On a private facebook group and on this thread in a Microsoft forum I’ve been seeing issues where Outlook via Office 365 is having issues authenticating.  I’m not quite sure of the trigger.  I don’t think it’s due to updates.  But the symptoms are that suddenly Outlook can’t authenticate and an error message that references a trusted platform module

    “”something went wrong” error that Trusted Platform Module has malfunctioned, error code 80090016.  The server message is “Keyset does not exist Keyset does not exist”

    There are a couple of ways around the issue.

    1. Build a new profile.  Icky but it works.
    2.  Enable multi factor authentication (which is wise to do anyway)
    3. Clear out the TPM chip cache (it appears some corruption is occurring which messes up the authentication)
    4. Or use this registry setting:

    Shut down Outlook and set the following registry key. (Disables modern authentication)
    HKCU\SOFTWARE\Microsoft\Office\16.0\Common\Identity\
    REG_DWORD
    EnableADAL
    0

  • Running SharePoint Server? Better get your patches brought up to date

    Posted on May 10th, 2019 at 08:16 woody Comment on the AskWoody Lounge

    I just got a tip from @SimonZerafa, referencing a tweet from Kevin Beaumont:

    The exposure occurs in SharePoint Server 2010, 2013, 2016 and 2019. Microsoft released patches in February and March of this year. If you’re running SharePoint Server, make sure you follow the fine print at the bottom of the Security Update Guide and install both patches for SharePoint Server 2010 and 2013.

  • Microsoft yanks buggy Office 2016 non-security patch KB 4462238

    Posted on May 8th, 2019 at 09:41 woody Comment on the AskWoody Lounge

    It’s only been out for 24 hours or so. Why, you may ask, did they pull it? The KB article gives the answer:

    Notice

    After this update is installed, clicking a hyperlink in an Office application, such as Word, PowerPoint, Excel, or Outlook, may cause the application to stop working. If you experience this issue, you can uninstall the update by following the instructions in the “More information” section.

    That’s kind of a tiny, inconsequential bug that would never show up in testing, right?

    Thx @gborn

  • May 2019 non-Security Office Updates have been released

    Posted on May 7th, 2019 at 13:03 PKCano Comment on the AskWoody Lounge

    The May 2019 non-Security Office updates have been released Tuesday, May 7, 2019. They are not included in the DEFCON4 approval for the April 2019 patches. Unless you have a specific need to install them, you should wait until Susan Bradley (Patch Lady) approves them and any problems have been reported.

    Remember, Susan’s patching sequence and  recommendations are based on a business environment that has IT support and may have time constraints on the updating process. Consumer patching should be more cautious due to limited technical and mechanical resources. The latter is the reason for the AskWoody DEFCON system.

    Office 2010

    Update for Microsoft Outlook 2010 KB4464524

    Office 2013

    Update for Microsoft Office 2013 KB4011677
    Update for Microsoft Outlook 2013 KB4464546
    Update for Microsoft Word 2013 KB4464545
    Update for Skype for Business 2015 KB4464547

    Office 2016

    Update for Microsoft Excel 2016 KB4464550
    Update for Microsoft Office 2016 KB2902717
    Update for Microsoft Office 2016 KB4461441
    Update for Microsoft Office 2016 KB4461477
    Update for Microsoft Office 2016 KB4462119
    Update for Microsoft Office 2016 KB4462238 has been pulled
    Update for Microsoft Office 2016 KB4462243
    Update for Microsoft Office 2016 KB4464538
    Update for Microsoft Office 2016 KB4464552
    Update for Microsoft Office 2016 Language Interface Pack KB4464537
    Update for Microsoft Outlook 2016 KB4464540
    Update for Microsoft PowerPoint 2016 KB4464533
    Update for Microsoft Project 2016 KB4464541
    Update for Microsoft Visio 2013 KB4462113
    Update for Skype for Business 2016 KB4464532

    There were no non-security listings for Office 2007 (which is out of support).
    Updates are for the .msi version (persistent). Office 365 and C2R are not included.
    Security updates for all supported versions of Microsoft Office are released on the second Tuesday of the month (Patch Tuesday).

    UPDATE: Update for Microsoft Office 2016 KB4462238 has been pulled

  • April 2019 non-Security Office Updates are available

    Posted on April 2nd, 2019 at 13:53 PKCano Comment on the AskWoody Lounge

    The April 2019 non-Security Office updates have been released Tuesday, April 2, 2019. They are not included in the DEFCON4 approval for the March 2019 patches. Unless you have a specific need to install them, you should wait until Susan Bradley (Patch Lady) approves them and any problems have been reported.

    Remember, Susan’s patching sequence and  recommendations are based on a business environment that has IT support and may have time constraints on the updating process. Consumer patching should be more cautious due to limited technical and mechanical resources. The latter is the reason for the AskWoody DEFCON system.

    Office 2010

    Update for Microsoft Outlook 2010 KB3114559

    Office 2013

    Update for Microsoft Office 2013 KB4462203
    Update for Microsoft Office 2013 KB4462200
    Update for Microsoft Outlook 2013 KB4464507
    Update for Microsoft Project 2013 KB4462136
    Update for Microsoft Visio 2013 KB4464505
    Update for Skype for Business 2015 (Lync 2013) KB4462207
    Update for Microsoft Word 2013 KB4462140

    Office 2016

    Update for Microsoft Office 2016 KB4011666
    Update for Microsoft Office 2016 KB4462116
    Update for Microsoft Office 2016 KB4464501
    Update for Microsoft Office 2016 KB4462239
    Update for Microsoft Office 2016 KB4418380
    Update for Microsoft Office 2016 Language Interface Pack KB4462241
    Update for Microsoft Outlook 2016 KB4464502
    Update for Microsoft PowerPoint 2016 KB4462235
    Update for Microsoft Project 2016 KB4464503
    Update for Skype for Business 2016 KB4462234
    Update for Microsoft Word 2016 KB4462240

    There were no non-security listings for Office 2007 (which is out of support).
    Updates are for the .msi version (persistent). Office 365 and C2R are not included.
    Security updates for all supported versions of Microsoft Office are released on the second Tuesday of the month (Patch Tuesday).

    Details in Computerworld Woody on Windows. Off with their heads!

  • Patch Watch: Office 365 – The trendy new phishing target

    Posted on March 25th, 2019 at 06:48 woody Comment on the AskWoody Lounge

    Here phishy, phishy, phishy…..

    Attacking Windows 10 is so yesterday. Malicious hackers have known for some time that phishing is a fruitful and cheap method for stealing data. And the bigger the mark, the better the returns. So it should be no surprise that Office 365 has become a tempting target.

    Patch Lady Susan Bradley offers the first in a series of articles about Office 365’s vulnerable underbelly, and what you can to do protect yourself and your organization.

    Details in this week’s AskWoody Plus Newsletter 16.11.0, out this morning to AskWoody Plus Members.