Another complaint about KB 4023057

[woodyDa Boss]

Earlier today I had a tweet from Help4me who’s frustrated that we’re still stuck at MS-DEFCON 2: https://twitter.com/help4me666/status/958404040475455
[See the full post at: Another complaint about KB 4023057]

5 users thanked author for this post.

Elly,

Tiernan,

JDeC,

SueW,

WildBill

[PKCanoDa Boss]

I thought I had this patch hidden on one of my 1703’s, but it showed again in WU. Used wushowhide to hide it again – no, it was still in WU. Repeated hidings didn’t work, it kept coming back in WU like a bad Penny (and this with WU set to notify download/install).

I think this is the sister to KB2952664 in Win7. How many versions have we seen?

3 users thanked author for this post.

Elly,

woody,

JDeC

[anonymous]

On the occasion that you hide something with WUShowHide, sometimes it may still show but will silently fail to install for lack of existence. Recently I was able to reboot and the hidden update was removed from the ‘to download list’. I’m still using Windows 10, 1607 so you may have more trouble.

I forget how many revisions exist.

If there is newly appearing KB number for which you cannot download a file from the Update Catalog it is likely to be a feature update related thing or cause some other trouble.

[ch100AskWoody_MVP]

If I remember well, KB4023057 was and still is one of the most weird and unexplained updates in the recent times. This update has never been offered to WSUS, but only to Windows Update. This would indicate that it meant for unmanaged end-users and unmanaged small business users.
My understanding was that it was meant to facilitate a smooth upgrade to 1703, but it is offered on Windows Update also to Windows 10 Enterprise LTSB version 1607 and Windows 2016 Server which is LTSB version 1607 as well, which are normally not upgraded to the next major version and an upgrade is not offered on any regular channel.
This patch may be harmless, but why it was released and where it actually applies, it is still a mystery. @abbodi86 is likely to have the right explanation, even if this covers only partially what this patch does.
https://support.microsoft.com/en-us/help/4023057/update-to-windows-10-versions-1507-1511-1607-and-1703-for-update-relia

2 users thanked author for this post.

Elly,

AlexEiffel

[PKCanoDa Boss]

An Anonymous poster reported KB4073543 showing up in Windows Update on Win10 1703. The patch was issued 1/29/2018. In conjunction with KB4023057 and considering the description, I wonder if it has anything to do with pushing 1703 to 1709 unbidden.

This update includes new stability improvements for the update components in Windows 10 Version 1703.

The update components include files and resources that work together with the servicing stack engine in Windows 10. These components make sure that quality updates are installed seamlessly and that they improve the reliability and security of Windows 10.

Only certain builds of Windows 10 Version 1703 require this update. Devices that are running those builds will automatically get the update downloaded and installed through Windows Update.

This update is also offered directly to Windows Update Client for some devices that do not have the most recent updates installed.

https://support.microsoft.com/en-us/help/4073543/updates-to-windows-10-version-1703-update-components-january-29-2018

2 users thanked author for this post.

Elly,

RamRod

[RamRodAskWoody Lounger]

Still fat and sassy on 1511. But WU shows me 4023057 at least once per month. I talked about it here a while back. I use WUSHOWHIDE to hide it, it is hidden, until…it pops up again. I interpret this to MS’s way of forcing an upgrade. The info on the update says it is for update reliability. Them’s code words to me. Code that the enemy, my former ally, is storming my computing gates and wants to do nasty unbidden things to my computing experience. I continue to run WUSHOWHIDE daily blocking just about everything. I update Windows Defender manually everyday at the same time. Love/tolerate 1511. At least it’s a known for the time being. Will upgrade on my schedule unless MS does something really underhanded. Vigilance!

4 users thanked author for this post.

HiFlyer,

Elly,

SueW,

Cybertooth

[Bill C.AskWoody Lounger]

Thanks for the link to the Horowitz blog.

Sounds to me like a new Microsoft “Get GWX+” moment.

As Pink Floyd said, “Another Brink in the Wall” against Windows 10 for me. I keep hoping they will hear the voices of the users, but no. 2 Friends, one a senior, another in their 30s, just bought 12″ iPad Pros for their email and websearching. Why? Their Windows 10 PCs were too hard to keep running and kept changing (plus for serious work they have work provided and supported laptops).

[PKCanoDa Boss]

Resistance is futile.

1 user thanked author for this post.

ch100

[CybertoothAskWoody Lounger]

I will not be assimilated!!!  😉

 

6 users thanked author for this post.

HiFlyer,

Elly,

Charlie,

SueW,

Ascaris,

WildBill

[RamRodAskWoody Lounger]

In one sense resistance is futile – eventually my hardware will die and force replacement. That will usher in the latest version of WinX. Can’t take 1511 with me. Of course I know I can’t stay on 1511 forever – and I don’t want to. I’m merely trying to control my own computing experience. I’ll resist as long as it is profitable for me to do so. As my Dad always said – Anything taken to an extreme is ridiculous. That goes both ways MS.

[AscarisAskWoody_MVP]

RamRod wrote:

That will usher in the latest version of WinX.

As did my recent purchase of a cheap ultraportable laptop… but then I ushered it right back out again, just as I did with my other laptop when I bought it with Vista preinstalled in 2008.  One got Linux Mint, one XP, respectively (and I note that I am using the latter laptop now to write this, also under Linux).

I’ve never bought a desktop pre-assembled, so they never came with any OS.  The OS was just one of many components to be separately sourced and obtained.  I’d built many PCs, for myself and lots of others, before I ever bought my first laptop, which (due to its nature) has to be pre-assembled.  By then, the idea of the OS being distinct from the hardware was well-ingrained.  It’s nice if the OS it comes with is usable, but if not, it’s not the end of the world.

Now that I think about it, the laptop before the Vista one came with XP Home, and I put XP Pro on it, so that one didn’t keep its as-configured OS either.  The last one that I used with its preinstalled OS was a HP ZE4805, so old that it didn’t have USB 2 ports.  Must have been around 2003!

It might bother some people to have to pay the “Microsoft tax” twice, but really, it’s only once.  When Dell began offering one of their laptops with Linux instead of Windows, a lot of Linux fans were thrilled and couldn’t wait to get one… and they were shocked to find that they cost more than the Windows version of the same PC, not less.  It was only a slight premium, perhaps $20, but they had expected to pay less.  Dell, as the story goes, told them that the crapware (my term, not theirs) that comes with nearly every Windows PC subsidizes the Windows licensing cost.

I’m not sure how long 1511 will remain viable anyway.  Isn’t the MS policy to support a version of 10 for 18 months?  It should be well past its end of support date even now, unless you were fortunate enough to be able to get the LTSB edition that MS tells us is only for highly specialized applications like POS machines and ATMs; the rest of us can’t do without all these new “features” they keep forcung on us (even if we’d really, really rather do without them).

Group "L" (KDE Neon Linux, based on Ubuntu 18.04)

1 user thanked author for this post.

Elly

[RamRodAskWoody Lounger]

Somehow I’ve managed to avoid updates beyond 1511. I use WUSHOWHIDE religiously. I keep my network connection set to metered. I use Spybot Anti-Beacon and shut down almost every option it presents. I understand that 1511 is out of support – so what?

[AscarisAskWoody_MVP]

RamRod wrote:

I understand that 1511 is out of support – so what?

The usual… security threats.  As risky as patching can be these days (with end users being the de facto beta testers now), it’s still something most of us recognize as a necessary evil, and the lack of such patches in the future for 7 and 8.1 is the primary reason those two versions of Windows are seen as being on borrowed time.  When people make references (within the context of operating systems) to 2020, they don’t even have to explain why that year… it’s the year that the most popular Windows version, Windows 7, stops being supported with security patches.  For most people, this means “end of the line” for 7.

I can understand wanting to join group “N,” as I think it is called, but to do so is to go in the opposite direction of Windows 10.  Windows 10 equals lots of updates, lots of change, with not much control over them.  Group N equals no updates, no change, thus total control.  The desire for that much control (which I understand; I desire it myself) means that the versions of Windows that didn’t attempt to usurp control from the owner (meaning anything prior to 10) are the much more typical choices for a group “N” approach.

That’s all… just an unusual choice.  It’s your computer; I am not one of those people who will try to tell you that you have a duty to keep it updated if you don’t want to.  If anything, I would blame Microsoft for making “group N” into the least-bad option for so many people.

Group "L" (KDE Neon Linux, based on Ubuntu 18.04)

4 users thanked author for this post.

HiFlyer,

Cascadian,

windows7forever,

Elly

[anonymous]

I saw this update today been installed for the 3d time in 3 weeks, seems to actually be something weekly. After every install, I get a series of events 7023 in the logs. Have the feeling Microsoft is completely lost in what it’s doing or trying to do. Happy my main production machine is not running on Windows anymore since a couple of weeks, it gives me badly needed rest.

4 users thanked author for this post.

HiFlyer,

Elly,

witp,

Cybertooth

[abbodi86AskWoody_MVP]

KB4023057 = Remediation Shell (known as WaaSMedic in version 1709)

fix and reset update-related parts to their “supported” configuration
i.e. restore registry settings, services status, schedule tasks, clear disk space, launch UpdateAssistant.exe if installed

mainly it’s ment to pave the way to receive the latest updates, whether quality updates, or feature update to latest Windows 10 version

it’s a msi package not a regular update, doesn’t require a reboot

it has more than 12 releases so far

———–

other updates also facilitate the upgrade in a way or another

KB4021701 (1507) KB4021702 (1511) – KB4049411 (1607) – KB4073543 (1703)
the update components (Windows Update Agent, Update Orchestrator, Delivery Optimization, BITS)

KB4033631
the Compatibility Appraiser (equivalent to the famous KB2952664/KB2976978)

KB4056254
OS Remediation System Service (OSRSS)

KB4023814
Update Assistant tool (aka Windows10Upgrader.exe)
equivalent to Media Creation Tool, which will download and prepare the ESD file for upgrade, in case you hid/block the upgrade through WU

———–

you do not need any of those updates if you intend to stay on your current Windows 10 version, or want to upgrade on your terms

• This reply was modified 11 months, 3 weeks ago by
  
   abbodi86.
• This reply was modified 11 months, 3 weeks ago by
  
   abbodi86.
• This reply was modified 11 months, 3 weeks ago by
  
   abbodi86.
• This reply was modified 11 months, 3 weeks ago by
  
   abbodi86.
• This reply was modified 10 months, 2 weeks ago by
  
   abbodi86.

14 users thanked author for this post.

anita.yk,

Microfix,

Seattle27,

JDeC,

Noel Carboni,

HiFlyer,

Elly,

ch100,

woody,

dononline,

RamRod,

Cascadian,

MrBrian,

PKCano

[ch100AskWoody_MVP]

It does not come on WSUS though. I am wondering why, if from a pure engineering point of view is such a desirable update.

[abbodi86AskWoody_MVP]

Probably it will mess with WSUS policy settings

and as you described it, it’s for unmanaged users whom “mess” with their update settings 😀

2 users thanked author for this post.

Elly,

ch100

[ch100AskWoody_MVP]

I got this one instead
https://support.microsoft.com/en-us/help/4074608/servicing-stack-update-for-windows-10-version-1709-january-30-2018
which is on WSUS but not on WU, although according to the KB it should be.
The documentation says: “This update doesn’t replace a previously released update”, while WSUS supersedence metadata indicates that KB4074608 supersedes KB4058702 and KB4054022.

• This reply was modified 11 months, 3 weeks ago by
  
   ch100.

2 users thanked author for this post.

PKCano,

woody

[abbodi86AskWoody_MVP]

We already clarified that SSU is bundled with CU in version 1709 🙂

you may notice that 1709 SSU has a distinguished version (i.e. 16299.122.1.0), not the generic version like other updates before (i.e. 10.0.1.2)

it won’t listed in WU history, but you can find it in Installed Updates

KB articles are mostly geberic regarding the replacement

• This reply was modified 11 months, 3 weeks ago by
  
   abbodi86.

3 users thanked author for this post.

ch100,

woody,

PKCano

[anonymous]

I have a question.  When one looks at the 1709 updates on the Catalog site, SSU is classified as a “Critical Update,” but the CU is classified as a just an “Update.”

If in 1709 SSU is bundled with CU, shouldn’t the classification of the SSU supersede that of the CU thus making both the SSU and CU “Critical Updates?”

[MrBrianAskWoody_MVP]

“KB4023057 = Remediation Shell (known as WaaSMedic in version 1709)”

What is this WaasMedic? and Why it required to connect internet and make changes on MY COMPUTER?

3 users thanked author for this post.

Elly,

woody,

ch100

[Terry MuenchAskWoody Lounger]

As if the Spectre/Meltdown nightmare wasn’t enough to deal with …

I want to thank the author also for this excellent post re: the WUP ‘enhancements’ that M$ won’t divulge any details about. This is the first post I have found that explains the recent flood of KBs with Remediation, new Service ‘osrss’, etc.

The author says “you do not need any of those updates if you intend to stay on your current Windows 10 version, or want to upgrade on your terms.” Be warned that if you install KB4023057 and KB4056254 you won’t be able to uninstall them. At least, I have not found a way.

 

[MrBrianAskWoody_MVP]

For the sake of completeness, there is also KB4021702.

Here are links to all of these update KB articles:

https://support.microsoft.com/en-us/help/4021701/
https://support.microsoft.com/en-us/help/4021702/
https://support.microsoft.com/en-us/help/4049411/
https://support.microsoft.com/en-us/help/4073543/
https://support.microsoft.com/en-us/help/4033631/windows-10-update-kb4033631
https://support.microsoft.com/en-us/help/4056254/windows-10-update-facilitation-service
https://support.microsoft.com/en-us/help/4023057/update-to-windows-10-versions-1507-1511-1607-and-1703-for-update-relia
https://support.microsoft.com/en-us/help/4023814/some-versions-of-windows-10-display-a-notification-to-install-the-late

1 user thanked author for this post.

abbodi86

[Bill C.AskWoody Lounger]

@pkcano: Yes, I do believe you are correct if you are wedded to the Windows universe.

But there are other Borgs out there for individual users, some orderly and controlled, others more open (or chaotic depending on personal tastes and definitions).

I am using a Windows 10 laptop in Airplane Mode (all connectivity turned off) for organizational productivity work that does not require online access, but does require absolute reliability with existing peripherals. I find it fine for that work. It is only when you try to change settings (like to truely turn off when you shut down) that I have to search and use in internal help feature. I have gotten in the habit of removing the battery to prevent it from being 100% drained by a feature.

1 user thanked author for this post.

Elly

[Jan K.AskWoody Lounger]

Don’t know what to trust anymore.

Really?

Well, then there’s no help for you! (see what I did there? 😀 )

But seriously, just follow the Defcon system. Skim the posts, follow Woody and gang’s recommendations and you’re safe.

Trust me, you’re in both good and caring hands.

But really…

Woody’s recommendations versus Microsoft’s recommendated updates?
And who to trust?

If you’ve been around since the happy GWX days and has followed the fantastic festival of pacthes since then, it really should be easy to pick side…

Otoh, if you have doubt in Woody, why not just press “Update now”?
I dare you! 😀

9 users thanked author for this post.

HiFlyer,

Elly,

Charlie,

SueW,

Tiernan,

JDeC,

WildBill,

Cascadian

[CascadianAskWoody Lounger]

You wrote that so well, with just the right cadence. I stifled a shiver on your last line.

1 user thanked author for this post.

HiFlyer

[RamRodAskWoody Lounger]

Don’t be cruel. Things move plenty fast in the Windows world and it’s not easy to keep up. Trust is necessary, yet hard to generate let alone maintain. Everyone simply wants a good computing experience – for the computer and OS to recede and information to flow.

1 user thanked author for this post.

HiFlyer

[MrBrianAskWoody_MVP]

From a comment at Windows 10: What is REMSH.exe for?: ‘The ETL files in the log folder for REMSH are readable by “Microsoft Message Analyzer” and show information like this […]’

[PKCanoDa Boss]

The description at the end of Born’s article for KB4023057 is the same as I posted above for KB4073543

Me thinks more forced upgrades are in the offing!!!

[RamRodAskWoody Lounger]

That’s what I suspect too. I’m staying on 1511 as an experiment – to see if MS will actually force an upgrade. First they will demonstrate that they have the capability. Second the will. Third they will demonstrate the contempt they have for this virtual customer (virtual customers are users of their software wherein no transfer of $ occurs in the procurement or maintenance of said software). Ain’t science great!

[abbodi86AskWoody_MVP]

anonymous wrote:

I have a question. When one looks at the 1709 updates on the Catalog site, SSU is classified as a “Critical Update,” but the CU is classified as a just an “Update.”

If in 1709 SSU is bundled with CU, shouldn’t the classification of the SSU supersede that of the CU thus making both the SSU and CU “Critical Updates?”

SSU is a companion update in the terms of UUP delivery mechanism in 1709, it’s not actually bundled or part of CU, they are completely separated updates

i believe all SSUs are classified “Critical Update” due to their nature (the engine that process all other updates)
whereas CUs are classified based on the most recent fixes, security fix “Security Update”, or quality fixes “Updates”

2 users thanked author for this post.

ch100,

woody

[ch100AskWoody_MVP]

The CU in question is an “Update” because it should be seen as a “Preview Update” to use the language known from Windows 7 and Windows 8.x.
Any Windows 10 released out of band and available in the Catalog only is the equivalent of a Preview Update and this is what most people participating here do not understand. The Catalog is not for those who are looking for in detail advice here, but it is useful at the informational level for everyone. Those who are technical enough to understand and use the Catalog effectively are only a few here and it is very obvious who they are. Everyone else should use only Windows Update as this is the only mechanism available to end users which takes care of supersedence and the correct order of installation of the updates.

1 user thanked author for this post.

PKCano

[SteveTreeAskWoody Lounger]

I’ve had update off on my Win 10 box over 1 month.

Using Windows Update Blocker, Windows update service is switched off and the off state is protected (verified just now). Windows update is saying it is having problems updating the machine. Despite that, KB 4023057 installed this morning (and did not manage to start the update service).

Presumably, the update is squirreled away somewhere on the hard drive for occasions when Windows cannot make update do its thing.  That’s probably good for Fred Average who never looks at update and trusts Microsoft via default.

 

Group A (but Telemetry disabled Tasks and Registry)
Win 7 64 Pro desktop
Win 10 32 Home portable

[Author]

Posts