AKB2000003 Ongoing list of “Group B” monthly Security-only updates for Win7 and 8.1

By @pkcano

Published 11 Jul 2017 rev 2.04

IMPORTANT: Most Win7 and 8.1 customers would be well advised to install the Monthly Rollups as they appear. Your life will be much simpler. If you’re willing to bite the hand that feeds you, though, you can consider joining “Group B” and installing monthly Security-Only updates. There’s a full description of Group A and Group B in the patchocalypse article.

“Group B” Security-Only patches are not cumulative. In order to be protected, you must install all of them. Every. Single. One. By hand. More than that, you have to install them in chronological order — the October patch, followed by the November patch, followed by the December patch, and so on.

If you’re in Group B, you want to avoid telemetry patches.

The most obvious offenders for Win7 are

KB2952664/KB3150513
KB3021917
KB3022345
KB3068708
KB3080149

And for Win 8.1, avoid:

KB2976978/KB3150513
KB3044374
KB3068708
KB3080149

If you see one of those patches in your list of updates, UNCHECK the box next to the patch, so it won’t be installed.

Here are the Security-only patches, starting in October 2016, when the “patchocalypse” took effect. Make sure you download and install the version that matches the “bittedness” of your machine. As of March 1, 2017 there is also a download patch for IE11. The patches for IE11 ARE CUMULATIVE.

In general, when the time comes (which is to say, when the MS-DEFCON level reaches 3, 4 or 5), here’s how to install the Security-Only patches for Win 7 and 8.1.

Step B1: Get your settings right.

In Win7, click Start > Control Panel. In Win 8.1, press Win-X and choose Control Panel. Click System and Security. Under Windows Update, click the link marked “Turn automatic updating on or off.” Make sure Windows Update is set to “Never check for updates (not recommended),” then check the box marked “Give me updates for Microsoft products and check for new optional Microsoft software when I update Windows.” Uncheck the box marked “Give me recommended updates the same way I receive important updates” (yes, Group B is different from Group A), and click OK.

Step B2. Get the Security-only patches and the Cumulative Update for IE11. 

Download any patches in the following list that you haven’t yet installed. Choose Control Panel\Administrative Tools\Services. Scroll down, highlight the Windows Update Service, then at the top left click “Stop.” Double-click on the downloaded MSU file, and let the installer run its course. IF you have multiple security-only updates to install you do not have to reboot between installations, just close the box and install the next. Install the IE11 update last. Reboot the computer.

Step B3: Check for updates.

Back in the Control Panel, under Windows Update, click the link to Check for Updates. (You may have to click Check for Updates a second time.) The check takes many minutes. If it takes many hours, follow these steps.

Step B4: Get rid of the Monthly Rollup.

Click the links to look at the Important and Optional updates. Don’t check any unchecked boxes. If you see any entries marked “Monthly Quality Rollup,” uncheck the boxes — if you’re in Group B, you don’t want them. For heaven’s sake don’t ever check anything marked “Preview.” Be sure to uncheck any telemetry-related updates listed above. If you see any “Security and Quality Rollup for .Net Framework” boxes checked, leave them checked.

Step B5: Get rid of problematic updates.

The list of problematic updates changes every month, so you’ll have to watch the main AskWoody blog page for details. Look for MS-DEFCON posts; they’re clearly marked. In general, if you have no intention of updating this machine to Win10 in the near future, look for KB3150513 and uncheck the box.

Step B5: Install the patches.

Click the button marked Install Updates and follow the instructions. You’ll end up with Office patches, .Net patches, possible Adobe Flash fixes, Security Essentials update, and the usual MSRT scanner. After the reboot, you’re done.

* * * * * * * * * * *

For Windows 7:

Oct 2016 KB 3192391 – Download 32-bit or 64-bit

Nov 2016 KB 3197867 – Download 32-bit or 64-bit

Dec 2016 KB 3205394 – Download 32-bit or 64-bit

Jan 2017 KB 3212642 – Download 32-bit or 64-bit

Feb 2017 – No security-only patches were issued

Mar 2017 KB 4012212 – Download 32-bit or 64-bit
Mar 2017 (IE11) KB 4012204 – Download 32-bit or 64-bit
Mar 2017 (IE11 Hotfix if you run CRM 2011) KB 4016446 – Download 32-bit or 64-bit

Apr 2017 KB 4015546 – Download 32-bit or 64-bit
Apr 2017 (IE11) KB 4014661 – Download 32-bit or 64-bit

May 2017 KB 4019263 – Download 32-bit or 64-bit
May 2017 (IE11) KB 4018271 – Download 32-bit or 64-bit

Jun 2017 KB 4022722 – Download 32-bit or 64-bit
Jun 2017 (IE11) KB 4021558 – Download 32-bit or 64-bit

Jul 2017 KB 4025337 – Download 32bit or 64bit
Jul 2017 (IE11) KB 4025252 – Download 32bit or 64bit

For Windows 8.1:

Oct 2016 KB 3192392  – Download 32-bit or 64-bit

Nov 2016 KB 3197873 – Download 32-bit or 64-bit

Dec 2016 KB 3205400 – Download 32-bit or 64-bit

Jan 2017 – No security-only patches were issued

Feb 2017 – No security-only patches were issued

Mar 2017 KB 4012213 – Download 32-bit or 64-bit
Mar 2017 (IE) KB 4012204 – Download 32-bit or 64-bit
Mar 2017 (IE Hotfix if you run CRM 2011) KB 4016446 – Download 32-bit or 64-bit

Apr 2017 KB 4015547 – Download 32-bit or 64-bit
Apr 2017 (IE11) KB4014661 – Download 32-bit or 64-bit

May 2017 KB 4019213 – Download 32-bit or 64-bit
May 2017 (IE11) KB 4018271 – Download 32-bit or 64-bit

Jun 2017 KB 4022717 – Download 32-bit or 64-bit
Jun 2017 (IE11) KB 4021558 – Download 32-bit or 64-bit

Jul 2017 KB 4025333 – Download 32bit or 64bit
Jul 2017 (IE11) KB 4025252 – Download 32bit or 64bit

This is the official list. Comments are always welcome, but I’ve moved them to a separate Topic so folks won’t get confused.

• This topic was modified 4 months, 4 weeks ago by  woody.
• This topic was modified 4 months, 4 weeks ago by  woody.
• This topic was modified 4 months, 4 weeks ago by  PKCano.
• This topic was modified 4 months, 3 weeks ago by  woody.
• This topic was modified 4 months, 2 weeks ago by  Kirsty.
• This topic was modified 4 months, 2 weeks ago by  Kirsty.
• This topic was modified 4 months, 2 weeks ago by  PKCano.
• This topic was modified 4 months, 1 week ago by  PKCano.
• This topic was modified 4 months ago by  PKCano.
• This topic was modified 3 months, 2 weeks ago by  PKCano.
• This topic was modified 3 months, 2 weeks ago by  PKCano.
• This topic was modified 3 months, 2 weeks ago by  PKCano.
• This topic was modified 2 months, 2 weeks ago by  PKCano.
• This topic was modified 2 months, 1 week ago by  woody.
• This topic was modified 2 months, 1 week ago by  woody.
• This topic was modified 2 months, 1 week ago by  woody.
• This topic was modified 2 months, 1 week ago by  woody.
• This topic was modified 2 months, 1 week ago by  PKCano.
• This topic was modified 2 months, 1 week ago by  PKCano.
• This topic was modified 2 months, 1 week ago by  woody.
• This topic was modified 2 months, 1 week ago by  PKCano.
• This topic was modified 2 months, 1 week ago by  PKCano.
• This topic was modified 1 month, 2 weeks ago by  PKCano.
• This topic was modified 2 weeks, 2 days ago by  PKCano.
• This topic was modified 2 weeks, 2 days ago by  PKCano.
• This topic was modified 2 weeks, 2 days ago by  PKCano.

Total of 41 users thanked author for this post. Here are last 20 listed.

Psylii, Janie8, zero2dash, JKR, Northwest Rick, Charlie, frapper, dhardyindr, Dave, David F, SusanA, FakeNinja, owdrtn, grams, grayslady, jelson, LeaningTowardsLinux, TheWatch, Steve