General Patching Guidelines Draft

Topic

New Reply

This thread is currently a rough draft for general patching guidelines. When a final version is complete, I will request rough draft removal and this draft should disappear.

As an explanation, in an earlier thread:

woody wrote:

We’ll be addressing that in the site re-design (say, in the next month or so). There are different needs for different groups of users — most people need a green light/red light system, while advanced users and admins face a more nuanced situation.

Emphasis will be placed on user skills and DEFCON number:

• backups and usage
• restore points
• rebooting

The above three criterion will be used to determine user skills and some instruction or links will be provided for making backups, using restore points, and booting up.

My goal is to make this instruction sheet readable and useful — one that those at all skill levels can use to determine if patching is safer for them.

My understanding is that there will be different DEFCON levels for each Windows operating system. My own skills are limited to Windows 7, but I will attempt to include information on how to block updates until ready, make backups, boot up, and set and use restore points with references and links to the AskWoody site and applicable to all operating systems.

Source for some preliminary conversation:
https://www.askwoody.com/forums/topic/patch-lady-issues-with-out-of-band-on-1607/#post-241977

Carpe Diem {with backup and coffee}
offline▸ Win10Pro 2004.19041.572 x64 i3-3220 RAM8GB HDD Firefox83.0b3 WindowsDefender
offline▸ Acer TravelMate P215-52 RAM8GB Win11Pro 22H2.22621.1265 x64 i5-10210U SSD Firefox106.0 MicrosoftDefender
online▸ Win11Pro 22H2.22621.1778 x64 i5-9400 RAM16GB HDD Firefox114.0b8 MicrosoftDefender

4 users thanked author for this post.

Fred, Pepsiboy, SueW, Elly

Reply | Quote

Replies

This topic remains a work in process. Specifics need to be provided for Windows backup and recovery, restore points, and when to employ these methods. Phrasing is currently awkward and will be revised as necessary.

Carpe Diem {with backup and coffee}
offline▸ Win10Pro 2004.19041.572 x64 i3-3220 RAM8GB HDD Firefox83.0b3 WindowsDefender
offline▸ Acer TravelMate P215-52 RAM8GB Win11Pro 22H2.22621.1265 x64 i5-10210U SSD Firefox106.0 MicrosoftDefender
online▸ Win11Pro 22H2.22621.1778 x64 i5-9400 RAM16GB HDD Firefox114.0b8 MicrosoftDefender

1 user thanked author for this post.

Elly

Reply | Quote

General Patching Guidelines
Version 1.1

This thread is currently a rough draft for general patching guidelines. When a final version is complete, I will request rough draft removal and this draft should disappear.

As an explanation, in an earlier thread, woody wrote:
We’ll be addressing that in the site re-design (say, in the next month or so). There are different needs for different groups of users — most people need a green light/red light system, while advanced users and admins face a more nuanced situation.

Emphasis will be placed on user skills and DEFCON number.

Definitions and Windows versions will be provided. Instructions and links will be provided for:
– blocking updates
– backups and usage
– restore points
– rebooting

The above criterion will be used to determine user skills.

My goal is to make this instruction sheet readable and useful — one that those at all skill levels can use to determine if patching is safer for them.

My understanding is that there will be different DEFCON levels for each Windows operating system. My own skills are limited to Windows 7, but I will attempt to include information on how to block updates until ready, make backups, boot up, and set and use restore points with references and links to the AskWoody site and applicable to all operating systems.

This topic remains a work in process. Specifics need to be provided for Windows backup and recovery, restore points, and when to employ these methods. Phrasing is currently awkward and will be revised as necessary.

Definitions
– GWX
– Seekers

Windows Versions
– Windows 7
– Windows 8.1
– Windows 10
https://docs.microsoft.com/en-us/windows/windows-10/release-information

Blocking Updates

– Windows 7 GWX Blockers Third-Party Software
Never10
https://www.grc.com/never10.htm
GWX Control Panel
http://blog.ultimateoutsider.com/2015/08/using-gwx-stopper-to-permanently-remove.html

– Windows 10 Update Blockers Third-Party Software
Windows Update MiniTool
https://www.majorgeeks.com/files/details/windows_update_minitool.html
WUMgr
https://github.com/DavidXanatos/wumgr

– Whole Banana All Windows Update Blockers
https://www.computerworld.com/article/3331304/microsoft-windows/microsoft-is-yanking-patches-already-make-sure-automatic-update-is-disabled.html

Backup Information

Information on backups will be provided starting with Windows backup instruction including:

how to create system image
how to create a system repair disc
how to use the system repair disc to boot and system image to restore files on an inert computer

Other reliable backup packages will be listed as options, but no instruction will be provided regarding third-party backup packages.

Prior to patching, make backups and know how to use them in the event of computer failure.

Restore Points

Instructions will be provided for:

turning on restore points
setting restore points
using restore points

Restore points restore software to a previous state.
Restore points do not restore data.

Prior to patching, a restore point should be made with understanding of usage.

Booting Up

Complete instructions for computer boot failure were provided by mrbrian this link:
https://www.askwoody.com/forums/topic/2000009-getting-out-of-a-no-boot-situation-after-installing-windows-updates/

Have a plan, and make sure you can employ at least one method of rebooting an uncooperative computer.

Sources
https://www.askwoody.com/forums/topic/patch-lady-issues-with-out-of-band-on-1607/#post-241977
https://www.askwoody.com/forums/topic/brinkmann-horowitz-are-remnants-of-the-despised-gwx-gets-windows-10-campaign-still-on-your-win7-computer/#post-311060
https://www.askwoody.com/forums/topic/is-yesterdays-net-preview-kb-4481031-being-pushed-onto-1809-machines/#post-315830
https://www.askwoody.com/forums/topic/patch-lady-new-releases-for-windows-10/#post-220122
https://www.askwoody.com/forums/topic/how-to-absolutely-positively-block-the-forced-upgrade-to-win10-1809/#post-313005
https://www.askwoody.com/forums/topic/windows-update-manager-wumgr/

Carpe Diem {with backup and coffee}
offline▸ Win10Pro 2004.19041.572 x64 i3-3220 RAM8GB HDD Firefox83.0b3 WindowsDefender
offline▸ Acer TravelMate P215-52 RAM8GB Win11Pro 22H2.22621.1265 x64 i5-10210U SSD Firefox106.0 MicrosoftDefender
online▸ Win11Pro 22H2.22621.1778 x64 i5-9400 RAM16GB HDD Firefox114.0b8 MicrosoftDefender

3 users thanked author for this post.

Elly, Lars220, wavy

Reply | Quote

The scope of this topic has changed.

Future direction of this topic will include for everyone:

1. Methods of rebooting your computer when normal reboot fails after update.

2. Methods for restoring your computer when your computer is corrupted after update.

These two steps will be mandatory recommendations. Prior to any updates, you must know how to reboot and recover system.

 

Carpe Diem {with backup and coffee}
offline▸ Win10Pro 2004.19041.572 x64 i3-3220 RAM8GB HDD Firefox83.0b3 WindowsDefender
offline▸ Acer TravelMate P215-52 RAM8GB Win11Pro 22H2.22621.1265 x64 i5-10210U SSD Firefox106.0 MicrosoftDefender
online▸ Win11Pro 22H2.22621.1778 x64 i5-9400 RAM16GB HDD Firefox114.0b8 MicrosoftDefender

2 users thanked author for this post.

Elly, Lars220

Reply | Quote

Further notes:

• These days, regardless of operating system and version, it’s best to defer updates until DEFCON-3 is issued. For each operating system, the means of deferring updates differs (usually from moment to moment).
• There are two methods of reading the DEFCON rating:

— Susan Bradley method
— Woody Leonhardt method

Susan Bradley method is related to system administrators who are responsible for installing or maintaining multiple computers for a large group of people. System administrators must be informed and test thoroughly prior to mass installation. System administrators are skilled computer practitioners and generally job related.

Woody Leonhardt method works with individuals whose skill sets vary from plugging in a computer to building a computer. The approach is more cautious and it’s best not to be ahead of the curve unless you like testing (with the risk of borking your computer).

If I have missed how these two methods are employed, please let me know here. It’s important to know that patching mom’s machine is not quite the same as patching the entire company’s machines.

Master Patch List is at the top of AskWoody for handy reference.

Carpe Diem {with backup and coffee}
offline▸ Win10Pro 2004.19041.572 x64 i3-3220 RAM8GB HDD Firefox83.0b3 WindowsDefender
offline▸ Acer TravelMate P215-52 RAM8GB Win11Pro 22H2.22621.1265 x64 i5-10210U SSD Firefox106.0 MicrosoftDefender
online▸ Win11Pro 22H2.22621.1778 x64 i5-9400 RAM16GB HDD Firefox114.0b8 MicrosoftDefender

1 user thanked author for this post.

SueW

Reply | Quote

At this point, Susan Bradley makes recommendations separately from Woody’s DEFCON system, identifying known problems, but relying on the system administrators to make their own decisions regarding implementation (but I could have that wrong). They have the expertise to take Susan’s information and apply it to their own situation, and do not need hand holding.

The normal people without IT training are the ones that follow Woody’s DEFCON system, and rely on the step by step directions, whether for home or small business use… and these systems run Home or Pro, what ever the Windows version.

Non-techy Win 10 Pro and Linux Mint experimenter

1 user thanked author for this post.

geekdom

Reply | Quote

See #2276254 for the question.

Carpe Diem {with backup and coffee}
offline▸ Win10Pro 2004.19041.572 x64 i3-3220 RAM8GB HDD Firefox83.0b3 WindowsDefender
offline▸ Acer TravelMate P215-52 RAM8GB Win11Pro 22H2.22621.1265 x64 i5-10210U SSD Firefox106.0 MicrosoftDefender
online▸ Win11Pro 22H2.22621.1778 x64 i5-9400 RAM16GB HDD Firefox114.0b8 MicrosoftDefender

Reply | Quote

[geekdom]

MS-DEFCON Curve

Those who have a limited skill set will probably always automatically patch immediately.

Those who are beta testers will want to patch immediately

Those between limited skill set and beta testers will want to follow the MS-DEFCON rating.

Carpe Diem {with backup and coffee}
offline▸ Win10Pro 2004.19041.572 x64 i3-3220 RAM8GB HDD Firefox83.0b3 WindowsDefender
offline▸ Acer TravelMate P215-52 RAM8GB Win11Pro 22H2.22621.1265 x64 i5-10210U SSD Firefox106.0 MicrosoftDefender
online▸ Win11Pro 22H2.22621.1778 x64 i5-9400 RAM16GB HDD Firefox114.0b8 MicrosoftDefender

• This reply was modified 3 years, 11 months ago by geekdom.
• This reply was modified 3 years, 11 months ago by geekdom.
• This reply was modified 3 years, 11 months ago by geekdom.
• This reply was modified 3 years, 11 months ago by geekdom.
• This reply was modified 3 years, 11 months ago by geekdom.

1 user thanked author for this post.

wavy

Reply | Quote

Do you wish this guideline finished? Does it have merit if revised and abbreviated?

Windows 10 patching went complicated; Windows 7 patching went special limited edition; and Windows 8 I don’t know if it behaves like Windows 7, Windows 10, or a hybrid.

Carpe Diem {with backup and coffee}
offline▸ Win10Pro 2004.19041.572 x64 i3-3220 RAM8GB HDD Firefox83.0b3 WindowsDefender
offline▸ Acer TravelMate P215-52 RAM8GB Win11Pro 22H2.22621.1265 x64 i5-10210U SSD Firefox106.0 MicrosoftDefender
online▸ Win11Pro 22H2.22621.1778 x64 i5-9400 RAM16GB HDD Firefox114.0b8 MicrosoftDefender

Reply | Quote

Hi @Geekdom-

This might be better addressed as a series, because the individual parts are so large (even though needed). I think it would be worthwhile to address as very specific (even to title) topics that you have currently identified in outline, as relating to updating (the better to be accessed reliably through searching)… but because of the fluid nature of the entire update process, it would be incredibly difficult to make one comprehensive article that applies to all the operating systems. Maybe provide a reference article that you will update with links to appropriate current topics and AskWoody references? Then target filling in the individual topics that aren’t summarized well elsewhere? That will allow you to add/delete as particular parts are outdated by Microsoft churning the update process.

Even when you look at what is common for all operating systems, it generally relates to backing up, delayed implementation, and recovery from problems… and still, each OS has its own specific needs, options, and terminology… and each of those is its own topic. The changing terminology, alone, is a moving target, with W10.

I think that non-techies do need thorough, step by step instructions, with a little more detail and explanation than the update references that PKCano and Susan maintain… but there is far too much to say about each thing you’ve outlined to include it all in a single topic, as appealing as it sounds in theory. As a non-techy, I get easily confused when there are too many options, too much information…

Two things I try to review my topics on (not regular postings, I know I say too much)… KISS (Keep it Simple S*****) and comparing it to a bikini (credit a long ago English teacher) which is large enough to cover the subject, but small enough to be interesting. They also need to be clearly titled, and tagged.

Given your familiarity with Windows 7, perhaps start with a summary of current options for maintaining updating (or Group W) for it, now that EOL options have stabilized? That, alone, following your outline, would be big for a topic… but Windows 7 isn’t going to change much at this point, the terminology is fixed, and options are clearly identified.

The number of repeat, basic questions are evidence that AskWoody would benefit from an article that points people in the correct directions, that clarifies without assuming prior familiarity with the resources here… but the scope is just too big regarding updating for all.

You would be heroic if it could be achieved… so, worthwhile vision… but I’d hesitate to encourage you to attempt it in one gulp…

Non-techy Win 10 Pro and Linux Mint experimenter

1 user thanked author for this post.

geekdom

Reply | Quote

[geekdom]

Elly wrote:

I think that non-techies do need thorough, step by step instructions, with a little more detail and explanation than the update references that PKCano and Susan maintain…

Basic computer understanding is missing; there’s a huge gap in terminology use.

Operating system? Version? Update? Memory? Hard drive? Drivers? It’s another language to the uninitiated. Toss in a few problems and it’s techo-babble over the top beyond comprehension. First, you work past a user’s stand-in-place panic to the point where answers are a match with the question. If there are instructions on what to do ahead of time and how to anticipate problems, it will go a long way to resolving problems and easing stand-in-place panic.

It’s learning what to do before problems occur and problems always occur. Not if, when.

Carpe Diem {with backup and coffee}
offline▸ Win10Pro 2004.19041.572 x64 i3-3220 RAM8GB HDD Firefox83.0b3 WindowsDefender
offline▸ Acer TravelMate P215-52 RAM8GB Win11Pro 22H2.22621.1265 x64 i5-10210U SSD Firefox106.0 MicrosoftDefender
online▸ Win11Pro 22H2.22621.1778 x64 i5-9400 RAM16GB HDD Firefox114.0b8 MicrosoftDefender

• This reply was modified 2 years, 11 months ago by geekdom.
• This reply was modified 2 years, 11 months ago by geekdom.
• This reply was modified 2 years, 11 months ago by geekdom.
• This reply was modified 2 years, 11 months ago by geekdom.

1 user thanked author for this post.

Elly

Reply | Quote