Woody Leonhard's no-bull news, tips and help for Windows, Office and more… Please disable your ad blocker – our (polite!) ads help keep AskWoody going!
Home icon Home icon Home icon Email icon RSS icon
  • 2000003: Ongoing list of "Group B" monthly updates for Win7 and 8.1

    Home Forums Knowledge Base 2000003: Ongoing list of "Group B" monthly updates for Win7 and 8.1

    This topic contains 0 replies, has 1 voice, and was last updated by  woody 1 week ago.

    • Author
      Posts
    • #98061

      woody
      Da Boss

      AKB2000003 Ongoing list of “Group B” monthly Security-only updates for Win7 and 8.1

      By @pkcano

      Published 21 May 2017 rev 2.02

      IMPORTANT: Most Win7 and 8.1 customers would be well advised to install the Monthly Rollups as they appear. Your life will be much simpler. If you’re willing to bite the hand that feeds you, though, you can consider joining “Group B” and installing monthly Security-Only updates. There’s a full description of Group A and Group B in the patchocalypse article.

      “Group B” Security-Only patches are not cumulative. In order to be protected, you must install all of them. Every. Single. One. By hand. More than that, you have to install them in chronological order — the October patch, followed by the November patch, followed by the December patch, and so on.

      If you’re in Group B, you want to avoid telemetry patches.

      The most obvious offenders for Win7 are

      KB2952664/KB3150513
      KB3021917
      KB3022345
      KB3068708
      KB3080149

      And for Win 8.1, avoid:

      KB2976978/KB3150513
      KB3044374
      KB3068708
      KB3080149

      If you see one of those patches in your list of updates, UNCHECK the box next to the patch, so it won’t be installed.

      Here are the Security-only patches, starting in October 2016, when the “patchocalypse” took effect. Make sure you download and install the version that matches the “bittedness” of your machine. As of March 1, 2017 there is also a download patch for IE11. The patches for IE11 ARE CUMULATIVE.

      In general, when the time comes (which is to say, when the MS-DEFCON level reaches 3, 4 or 5), here’s how to install the Security-Only patches for Win 7 and 8.1.

      Step B1: Get your settings right.

      In Win7, click Start > Control Panel. In Win 8.1, press Win-X and choose Control Panel. Click System and Security. Under Windows Update, click the link marked “Turn automatic updating on or off.” Make sure Windows Update is set to “Never check for updates (not recommended),” then check the box marked “Give me updates for Microsoft products and check for new optional Microsoft software when I update Windows.” Uncheck the box marked “Give me recommended updates the same way I receive important updates” (yes, Group B is different from Group A), and click OK.

      Step B2. Get the Security-only patches and the Cumulative Update for IE11. 

      Download any patches in the following list that you haven’t yet installed. Choose Control Panel\Administrative Tools\Services. Scroll down, highlight the Windows Update Service, then at the top left click “Stop.” Double-click on the downloaded MSU file, and let the installer run its course. IF you have multiple security-only updates to install you do not have to reboot between installations, just close the box and install the next. Install the IE11 update last. Reboot the computer.

      Step B3: Check for updates.

      Back in the Control Panel, under Windows Update, click the link to Check for Updates. (You may have to click Check for Updates a second time.) The check takes many minutes. If it takes many hours, follow these steps.

      Step B4: Get rid of the Monthly Rollup.

      Click the links to look at the Important and Optional updates. Don’t check any unchecked boxes. If you see any entries marked “Monthly Quality Rollup,” uncheck the boxes — if you’re in Group B, you don’t want them. For heaven’s sake don’t ever check anything marked “Preview.” Be sure to uncheck any telemetry-related updates listed above. If you see any “Security and Quality Rollup for .Net Framework” boxes checked, leave them checked.

      Step B5: Get rid of problematic updates.

      The list of problematic updates changes every month, so you’ll have to watch the main AskWoody blog page for details. Look for MS-DEFCON posts; they’re clearly marked. In general, if you have no intention of updating this machine to Win10 in the near future, look for KB3150513 and uncheck the box.

      Step B5: Install the patches.

      Click the button marked Install Updates and follow the instructions. You’ll end up with Office patches, .Net patches, possible Adobe Flash fixes, Security Essentials update, and the usual MSRT scanner. After the reboot, you’re done.

      * * * * * * * * * * *

      For Windows 7:

      Oct 2016 KB 3192391 – Download 32-bit or 64-bit

      Nov 2016 KB 3197867 – Download 32-bit or 64-bit

      Dec 2016 KB 3205394 – Download 32-bit or 64-bit

      Jan 2017 KB 3212642 – Download 32-bit or 64-bit

      Feb 2017 – No security-only patches were issued

      Mar 2017 KB 4012212 – Download 32-bit or 64-bit
      Mar 2017 (IE11) KB 4012204 – Download 32-bit or 64-bit
      Mar 2017 (IE11 Hotfix if you run CRM 2011) KB 4016446 – Download 32-bit or 64-bit

      Apr 2017 KB 4015546 – Download 32-bit or 64-bit
      Apr 2017 (IE11) KB 4014661 – Download 32-bit or 64-bit

      May 2017 KB 4019263 – Download 32-bit or 64-bit
      May 2017 (IE11) KB 4018271 – Download 32-bit or 64-bit

      For Windows 8.1:

      Oct 2016 KB 3192392  – Download 32-bit or 64-bit

      Nov 2016 KB 3197873 – Download 32-bit or 64-bit

      Dec 2016 KB 3205400 – Download 32-bit or 64-bit

      Jan 2017 – No security-only patches were issued

      Feb 2017 – No security-only patches were issued

      Mar 2017 KB 4012213 – Download 32-bit or 64-bit
      Mar 2017 (IE) KB 4012204 – Download 32-bit or 64-bit
      Mar 2017 (IE Hotfix if you run CRM 2011) KB 4016446 – Download 32-bit or 64-bit

      Apr 2017 KB 4015547 – Download 32-bit or 64-bit
      Apr 2017 (IE11) KB4014661 – Download 32-bit or 64-bit

      May 2017 KB 4019213 – Download 32-bit or 64-bit
      May 2017 (IE11) KB 4018271 – Download 32-bit or 64-bit

       

      This is the official list. Comments are always welcome, but I’ve moved them to a separate Topic so folks won’t get confused.

      • This topic was modified 2 months, 3 weeks ago by  woody.
      • This topic was modified 2 months, 3 weeks ago by  woody.
      • This topic was modified 2 months, 3 weeks ago by  PKCano.
      • This topic was modified 2 months, 3 weeks ago by  woody.
      • This topic was modified 2 months, 2 weeks ago by  Kirsty.
      • This topic was modified 2 months, 2 weeks ago by  Kirsty.
      • This topic was modified 2 months, 2 weeks ago by  PKCano.
      • This topic was modified 2 months, 1 week ago by  PKCano.
      • This topic was modified 2 months ago by  PKCano.
      • This topic was modified 1 month, 2 weeks ago by  PKCano.
      • This topic was modified 1 month, 2 weeks ago by  PKCano.
      • This topic was modified 1 month, 2 weeks ago by  PKCano.
      • This topic was modified 2 weeks, 4 days ago by  PKCano.
      • This topic was modified 1 week ago by  woody.
      • This topic was modified 1 week ago by  woody.
      • This topic was modified 1 week ago by  woody.
      • This topic was modified 1 week ago by  woody.
      • This topic was modified 1 week ago by  PKCano.
      • This topic was modified 1 week ago by  PKCano.
      • This topic was modified 6 days, 16 hours ago by  woody.
      • This topic was modified 6 days, 15 hours ago by  PKCano.
      • This topic was modified 6 days, 15 hours ago by  PKCano.
      • This topic was modified 6 days, 15 hours ago by  PKCano.
      Total of 37 users thanked author for this post. Here are last 20 listed.

    The topic ‘2000003: Ongoing list of "Group B" monthly updates for Win7 and 8.1’ is closed to new replies.

    10 Responses to “2000003: Ongoing list of "Group B" monthly updates for Win7 and 8.1”

    1. […] There are no security-only patches this month. Since security-only patches are NOT cumulative, you have to download and install each month’s patches separately. There’s a full list of security-only patches with download links in the AskWoody Knowledge Base article AKB 2000002. […]

    2. […] or 8.1 in February. There’s a big jumble of KB numbers and download links involved. AskWoody AKB article 2000003, maintained by PKCano, lists them […]

    3. […] or 8.1 in February. There’s a big jumble of KB numbers and download links involved. AskWoody AKB article 2000003, maintained by PKCano, lists them […]

    4. […] your system to either Group A or Group B. There’s a full description at PKCano’s AKB 2000003, but if you only want the download links, look at this […]

    5. […] your system to either Group A or Group B. There’s a full description at PKCano’s AKB 2000003, but if you only want the download links, look at this […]

    6. […] your system to either Group A or Group B. There’s a full description at PKCano’s AKB 2000003, but if you only want the download links, look at this […]

    7. […] Explorer patches. There’s a big jumble of KB numbers and download links involved. AskWoody AKB article 2000003, maintained by PKCano, lists them […]

    8. […] Explorer patches. There’s a big jumble of KB numbers and download links involved. AskWoody AKB article 2000003, maintained by PKCano, lists them […]

    9. […] Explorer patches. There’s a big jumble of KB numbers and download links involved. AskWoody AKB article 2000003, maintained by PKCano, lists them […]

    10. […] are interested in which patches to avoid and which to grab manually if you haven’t updated in some time check out this.   For older models like XP and 8? Windows decided to think of you this time. In an unprecedented […]