July’s Patch Tuesday is here

Topic

New Reply

For those of you in business, Microsoft decided that today – of all days – was the day to announce that “Microsoft rebrands Azure Active Directory to
[See the full post at: July’s Patch Tuesday is here]

Susan Bradley Patch Lady/Prudent patcher

2 users thanked author for this post.

lmacri, geekdom

Reply | Quote

Replies

AKB 2000003 has been updated for Group B Win7 and Win8.1 on July 11, 2023.

See #2572804 and #2572805 for information on Win7 and Win8.1 updates (Logged in Member access required).

4 users thanked author for this post.

Pim, abbodi86, Microfix, SueW

Reply | Quote

I uninstalled most of Edge and obtained this app to redirect the Widgets (Yeah, I know) I like to Firefox. I originally zapped Edge completely, but that didn’t work out well.

Mark
Windows 11 Pro

Reply | Quote

Edge is gone on two W10 pro systems here, and has been for over half a year, without any issues, corruptions or violations to the OS.
A combination of a PS scripts,batch file by AveYo via Github, O&O Appbuster and registry editing seen to that.

Windows - commercial by definition and now function...

Reply | Quote

MicroFix,

Could you post the PS scripts please?

May the Forces of good computing be with you!

RG

PowerShell & VBA Rule!
Computer Specs

Reply | Quote

post ammended, no PS Script used .bat file, link as follows:
https://github.com/AveYo/fox/blob/main/Edge_Removal.bat
Updated 4 days ago 🙂
Worked wonders months ago, probably still does given the updates.

Windows - commercial by definition and now function...

1 user thanked author for this post.

RetiredGeek

Reply | Quote

I used that script in the end.  It doesn’t eliminate Edge completely, but leaves enough of it so it can be redirected to Firefox (or your choice of browser).  Originally I zapped Edge completely using Registry and other hacks.

Mark

Windows 11 Pro

Reply | Quote

I didn’t have any issues, except I couldn’t view the Weather Widget and others completely.  I zapped Edge mostly with registry entries.  It took some time to find a solution on the Web that worked.  Some were old entries that were not effective against the changes that MS had made to Edge in the meantime.

Mark

Windows 11 Pro

Reply | Quote

Microfix wrote:

Edge is gone on two W10 pro systems here, and has been for over half a year, without any issues, corruptions or violations to the OS.

I uninstalled Chromium-based Edge using Revo Uninstaller Pro as soon as it became Chromium-based Edge.  No ill effects whatsoever.

Always create a fresh drive image before making system changes/Windows updates; you may need to start over!

We all have our own reasons for doing the things that we do with our systems; we don't need anyone's approval, and we don't all have to do the same things.

We were all once "Average Users".

Computer Specs

1 user thanked author for this post.

TechTango

Reply | Quote

Dustin Child’s Patch Tuesday report is now out Zero Day Initiative — The July 2023 Security Update Review

Reply | Quote

Guinea Pig Update Momentum
Version and build after update: Win11Pro 22H2.22621.1992

WuMgr downloaded and installed:

• 2023-07 Cumulative Update for Windows 11 Version 22H2 for x64-based Systems (KB5028185)
• Windows Malicious Software Removal Tool x64 – v5.115 (KB890830)

Installed without error and the system rebooted without error.
System rebooted four times during update and installation from download to “enter password” was about 40 minutes.

On permanent hiatus {with backup and coffee}
offline▸ Win10Pro 2004.19041.572 x64 i3-3220 RAM8GB HDD Firefox83.0b3 WindowsDefender
offline▸ Acer TravelMate P215-52 RAM8GB Win11Pro 22H2.22621.1265 x64 i5-10210U SSD Firefox106.0 MicrosoftDefender
online▸ Win11Pro 22H2.22621.1992 x64 i5-9400 RAM16GB HDD Firefox116.0b3 MicrosoftDefender

2 users thanked author for this post.

OTtChris, fernlady

Reply | Quote

Hardened Windows user:

KB5028185 Cumulative Update for Windows 11 Version 22H2 for x64-based Systems
KB5028851 Cumulative Update for .NET Framework 3.5 and 4.8.1 for Windows 11, version 22H2 for x64
KB890830 Windows Malicious Software Removal Tool x64 – v5.115

Three restarts, no hiccups, no badging in StartAllBack Start Menu.

Windows 11 Pro Version 22H2 (OS Build 22621.1992)

Always create a fresh drive image before making system changes/Windows updates; you may need to start over!

We all have our own reasons for doing the things that we do with our systems; we don't need anyone's approval, and we don't all have to do the same things.

We were all once "Average Users".

Computer Specs

3 users thanked author for this post.

OTtChris, geekdom, fernlady

Reply | Quote

My NAS (unsupported hardware using Microsoft’s .reg entry) got the push last night:

KB5028851 Cumulative Update for .NET Framework 3.5 and 4.8.1 for Windows 11, version 22H2 for x64
KB5028185 Cumulative Update for Windows 11 Version 22H2 for x64-based Systems
KB890830 Windows Malicious Software Removal Tool x64 – v5.115

No hiccups.

Now running Windows 11 Pro Version 22H2 (OS Build 22621.1992)

Always create a fresh drive image before making system changes/Windows updates; you may need to start over!

We all have our own reasons for doing the things that we do with our systems; we don't need anyone's approval, and we don't all have to do the same things.

We were all once "Average Users".

Computer Specs

2 users thanked author for this post.

OTtChris, geekdom

Reply | Quote

[Microfix]

July update report for W10 Pro 22H2 x86 CU kb5028166

1. No problems during installation, slick.
2. No errors in event viewer.
3. O&O Shutup: No changes made to ANY of my chosen settings (your configuration may vary)
4. SFC = no integrity violations
5. Disk Clean-up (with sagerun switches, as admin) swept away the remnants.
6. DISM checked and ok
7. Winver 22H2 (OS build 19045.3208)

Update:
W10 Pro 22H2 (x64) the same methods and results as above.

Win8.1 Pro (x64) extended..
CU kb5028232 and kb5028859 fitted in like a missing jigsaw piece to a different jigsaw, same shape, different surface detailing.
No integrity violations or errors in EV
All good here for a while 🙂

Windows - commercial by definition and now function...

• This reply was modified 1 year, 10 months ago by Microfix. Reason: Update

2 users thanked author for this post.

Coldheart9020, geekdom

Reply | Quote

Just updated “Canary” as follows:

Edition: Microsoft Windows 10 Pro 64-bit
Version: 2009 22H2
Build: 19045.3208
Installed: 5/25/2023 20:32

Encountered one anomaly upon restart I got this screen with the circle just going round and round.

Task Manager identified it as:

I don’t remember having the Peek function of PowerToys enabled! So I just closed the window and rebooted. It was gone.

I opened PowerToys and sure enough it was set on. I turned it off for now. PowerToys also showed an available update so I used WinGet in PowerShell to update it.

WinGet Update PowerToys

Reboot and all is good.

May the Forces of good computing be with you!

RG

PowerShell & VBA Rule!
Computer Specs

1 user thanked author for this post.

geekdom

Reply | Quote

RetiredGeek wrote:

I got this screen with the circle just going round and round.

The Windows 10 ‘busy cursor’ is also circular, rotates and is part of the pointer scheme in use. These may vary upon scheme selection, I’d think most are familiar with the ‘egg timer’ cursor as an example.

Windows - commercial by definition and now function...

Reply | Quote

Where are the notification badges supposed to be and what do they look like?

On permanent hiatus {with backup and coffee}
offline▸ Win10Pro 2004.19041.572 x64 i3-3220 RAM8GB HDD Firefox83.0b3 WindowsDefender
offline▸ Acer TravelMate P215-52 RAM8GB Win11Pro 22H2.22621.1265 x64 i5-10210U SSD Firefox106.0 MicrosoftDefender
online▸ Win11Pro 22H2.22621.1992 x64 i5-9400 RAM16GB HDD Firefox116.0b3 MicrosoftDefender

Reply | Quote

.NET 6.0.20

.NET 7.0.9

Reply | Quote

geekdom wrote:

Where are the notification badges supposed to be and what do they look like?

If you sign in with a local account the notifications are supposed to show when you click Start then the account icon/picture. I understand the account notifications can be turned off in Settings/Personalisation /Start/Show Account Related Notifications.

1 user thanked author for this post.

geekdom

Reply | Quote

Windows 11 Pro Version 22H2 (OS Build 22621.1992)

2023-07 Cumulative Update for Windows 11 Version 22H2 for x64-based Systems (KB5028185)

2023-07 Cumulative Update for .NET Framework 3.5 and 4.8.1 for Windows 11, version 22H2 for x64 (KB5028851)

2023-07 .NET 7.0.9 Security Update for x64 Client (KB5028706)

2023-07 .NET 6.0.20 Security Update for x64 Client (KB5028705)

Windows Malicious Software Removal Tool x64 – v5.115 (KB890830)

All were installed without issue.

--Joe

2 users thanked author for this post.

OTtChris, geekdom

Reply | Quote

I can’t seem to get “This update improves the sharing of a local file in File Explorer with Microsoft Outlook contacts. You now have the option to quickly email the file to yourself. In addition, loading your contacts from Outlook is better” to work.  Still doesn’t show Outlook or any Outlook Contacts in the Share menu from File Explorer for me on Windows 11.

1 user thanked author for this post.

geekdom

Reply | Quote

UncleRemus83 wrote:

Still doesn’t show Outlook or any Outlook Contacts in the Share menu from File Explorer for me on Windows 11.

Please confirm: Did you install the update?

On permanent hiatus {with backup and coffee}
offline▸ Win10Pro 2004.19041.572 x64 i3-3220 RAM8GB HDD Firefox83.0b3 WindowsDefender
offline▸ Acer TravelMate P215-52 RAM8GB Win11Pro 22H2.22621.1265 x64 i5-10210U SSD Firefox106.0 MicrosoftDefender
online▸ Win11Pro 22H2.22621.1992 x64 i5-9400 RAM16GB HDD Firefox116.0b3 MicrosoftDefender

Reply | Quote

Affirmative.

1 user thanked author for this post.

geekdom

Reply | Quote

UncleRemus83 wrote:

I can’t seem to get “This update improves the sharing of a local file in File Explorer with Microsoft Outlook contacts. You now have the option to quickly email the file to yourself. In addition, loading your contacts from Outlook is better” to work.

Right-click on a file and look at the flyout menu on “Send to”.  “Mail recipient” is one of the options.  Left click on “Mail recipient” and that will open Outlook with the file attached.  Click on “To” in the header and it will open the address book.

Always create a fresh drive image before making system changes/Windows updates; you may need to start over!

We all have our own reasons for doing the things that we do with our systems; we don't need anyone's approval, and we don't all have to do the same things.

We were all once "Average Users".

Computer Specs

Reply | Quote

Windows 7/8.1 got the biggest Security Only update since the start in 2016
the number of updated/added components is the highest since 2018-01 Intel CPU thing

3 users thanked author for this post.

PKCano, SueW, Microfix

Reply | Quote

37 RCE’s, 33 EoP’s, 22 DOS, 19 Info Disclosures, 12 Security feature bypasses and 7 Spoofing vulns fixed in Windows July Updates addressing 130 CVE’s.

Ref: https://www.tenable.com/blog/microsofts-july-2023-patch-tuesday-addresses-130-cves-cve-2023-36884

Then there’s the miscreant crafted Microsoft signed driver issue.
https://msrc.microsoft.com/update-guide/vulnerability/ADV230001

Mitigated in July CU and via MS Defender, a lot of filtered work done since June patch Tuesday.

Wonder if that gets picked up in an OS that isn’t July patched nor uses MS Defender?

Windows - commercial by definition and now function...

2 users thanked author for this post.

Noel Carboni, abbodi86

Reply | Quote

Microfix wrote:

Then there’s the miscreant crafted microsoft signed driver issue.
https://msrc.microsoft.com/update-guide/vulnerability/ADV230001

mitigated in july CU and via MS Defender, alot of filtered work done since June patch tuesday.

Wonder if that gets picked up in the OS that hasn’t July patched nor uses MS Defender…?

Probably not, but it required a separate exploit first:

In these attacks, the attacker gained administrative privileges on compromised systems before using the drivers.

1 user thanked author for this post.

Microfix

Reply | Quote

Noticed that mp4 files no longer play on Windows 10 (x64 22H2) after July Updates using the default “Movies & TV” Microsoft app.  After double-clicking on mp4 file I get a dialog box error listing the file name with path and the message “invalid value for registry”. App never starts.

Also the same “Movies & TV” app does not start if invoked from Start menu.

A Google search shows this problem existed in the past, so may not be a new problem.  FYI, 3rd party video player apps (i.e. VLC, MPC=BE, etc.) still work fine.

Anyone else see this???

Reply | Quote

OK, may have fixed the problem.  After getting to the Movies & TV app “Advanced Options” in the Settings –> App page, and doing a “Repair” and “Reset”, the app now starts from the Start menu.  Apparently the Movies & TV app was NOT the default app for mp4 files after the July Update.  Instead there are a couple of cryptic default apps such as “Microsoft WinRT Storage API” ahead of “Movies & TV” in the “Open as…” menu. So set Movies & TV as the default app in the “Open as…” menu.  Curious why July Update added a reference to WinRT API as this is not a Windows RT machine.  Ugh!!! Caution to all who update their computers.  LOL

Reply | Quote

I am having problems installing the cumulative update for Windows 11.  The update from Windows Update was gigabytes in size and I have a slow connection, so I didn’t want to use that.  But the stand-alone version which was much smaller in size seemed to be incompatible.  I got a message saying it was not for my version of Windows.  There may have been some mix-up in the KB numbers.

The other updates installed normally.

Mark

Windows 11 Pro

Reply | Quote

I don’t believe Windows Update shows download size. If you are using WUMgr instead, it does not necessarily show the correct download size, thus GB information is wrong.

You should check the file name. It needs to contain the correct KBnumber, x64 (not ARM) and be for the correct version and Build. you have.

For Win11 21H2 22000.2176

For Win11 22H2 22621.1992

1 user thanked author for this post.

Mark

Reply | Quote

I haven’t downloaded KB5028185 yet as I wanted to let the dust settle first as per Susan’s advice. The Microsoft Account “notifications/badges” to try to get you to switch from a Local to a Microsoft Account are supposed to appear when you click the account icon/picture on the Start Menu if you sign in with a Local Account – not sure how often. There’s supposed to be an option to turn these off in Settings/Personalization/Start/Show Account Related Notifications  – toggle On/Off.

I’d be grateful if anyone who has installed this update could check if this option to turn off these account popups has appeared?

Thanks.

Reply | Quote

Yes:

Reply | Quote

Hi b.   Thanks for checking that. Much appreciated.

Reply | Quote

bbearren wrote:

Right-click on a file and look at the flyout menu on “Send to”. “Mail recipient” is one of the options. Left click on “Mail recipient” and that will open Outlook with the file attached. Click on “To” in the header and it will open the address book.

That’s the “old” behavior that has always been there but is now made a step harder to do (Right click, Show More Options, Send to).  The hope was that this update would make Outlook an option from just right clicking and clicking “Share” or “Share” from within apps like Snipping Tool.  Alas for me it does nothing.

Reply | Quote

It works like this for me:

Share Files from the File Explorer

To share files with the new File Explorer, select the file, click on the ‘Share’ icon and three options will appear on the screen.

Nearby sharing: You can use this feature to share files with other nearby Windows devices. Just enable the feature on both the devices and share files between the two.

Email a contact: If you have set up the ‘Mail’ app on Windows 11, your contact list will be displayed here and you can share the file over email.

Share with app: This option helps you share files over apps installed on your computer.

How to Use Windows 11 File Explorer

(Only four recent Outlook contacts including myself though, and no “Find more” buttons.)

Reply | Quote

bbearren wrote:

I uninstalled Chromium-based Edge using Revo Uninstaller Pro as soon as it became Chromium-based Edge. No ill effects whatsoever.

You can’t do that now.  I tried on Windows 11 Pro!

Mark

Windows 11 Pro

Reply | Quote

PKCano wrote:

I don’t believe Windows Update shows download size. If you are using WUMgr instead, it does not necessarily show the correct download size, thus GB information is wrong.

You should check the file name. It needs to contain the correct KBnumber, x64 (not ARM) and be for the correct version and Build. you have.

For Win11 21H2 22000.2176

For Win11 22H2 22621.1992

Hi PKCano:

Yes, I was using WUMgr at one time and I couldn’t get it to install them because of download errors it was giving me.  At the end, I gave up.  I think that it was Windows Update that was giving me the file size before I tried WUMgr.

I am pretty sure it was the correct architecture, but it may have been for Windows 10.  I am sure that is what happened with the stand-alone version, but I will try again since I think I have the correct KB number now.

Mark

Windows 11 Pro

Reply | Quote

This is Win10, but I don’t think Win11 shows file size either.
I believe you must have been looking at WUMgr, with inaccurate files sizes.

Reply | Quote

You are probably right.  I don’t seem to get the stock Windows Update.  Either WUMgr or something else is blocking it.  Going to System just shows a box on the right called Windows Update which says “checked X minutes ago” .

I used to get Windows Update by itself when I first used Windows 11.

I think that I will go back to the stand-alone updates as I did for Windows 8.1.

Mark

Reply | Quote

Check these settings in Group Policy:

Computer Configuration\Administrative Templates\Windows Components\Windows Update\Manage end User experience\

Remove access to “Pause” feature

Remove access to use all Windows Update features

If those are turned on, you will not be able to use Windows Update and “Pause”

1 user thanked author for this post.

Mark

Reply | Quote

Hi PK Cano:

Sorry, I didn’t see this before.  I did check Group Policy as you pointed out and neither entry was configured.  I haven’t done much with Group Policy yet.  As you can see from my previous post, I was able to update using KB5028185 instead of KB5028182 from the Microsoft Catalog.

Mark

Reply | Quote

It’s not inaccurate size
since Win10 1809, WUA api return the size for full UUP files set, which include all features and all languages
https://learn.microsoft.com/en-us/answers/questions/1013918/iupdate-get-maxdownloadsize-returning-100s-of-gbs

2 users thanked author for this post.

Alex5723, PKCano

Reply | Quote

Second phase hardening against the BlackLotus UEFI bootkit security flaw.

https://learn.microsoft.com/en-us/windows/release-health/windows-message-center#3125

Take action: July 11, 2023 starts the Second Deployment Phase to address CVE-2023-24932 for devices using Secure Boot

The release of the July 11, 2023 security updates for Windows starts the Second Deployment Phase in KB5025885: How to manage the Windows Boot Manager revocations for Secure Boot changes associated with CVE-2023-24932. KB5025885 contain the manual steps to verify your environment is ready for the changes and steps to enable the security hardening changes to protect against vulnerabilities tracked by CVE-2023-24932 that can bypass the Secure Boot security feature using the BlackLotus UEFI bootkit.

The Second Deployment Phase in updates for Windows released July 11, 2023 or later add the following:
Allow easier, automated deployment of the revocation files (Code Integrity Boot policy and Secure Boot disallow list (DBX)).
New Event Log events will be available to report whether revocation deployment was successful or not.
SafeOS dynamic update package for Window Recovery Environment (WinRE)….

1 user thanked author for this post.

geekdom

Reply | Quote

Alex5723 wrote:

Second phase hardening against the BlackLotus UEFI bootkit security flaw.

Some of us have already completed that.

Always create a fresh drive image before making system changes/Windows updates; you may need to start over!

We all have our own reasons for doing the things that we do with our systems; we don't need anyone's approval, and we don't all have to do the same things.

We were all once "Average Users".

Computer Specs

Reply | Quote

Alex5723 wrote:

Second phase hardening against the BlackLotus UEFI bootkit security flaw.

Thanks for the link to the Windows message center.

On permanent hiatus {with backup and coffee}
offline▸ Win10Pro 2004.19041.572 x64 i3-3220 RAM8GB HDD Firefox83.0b3 WindowsDefender
offline▸ Acer TravelMate P215-52 RAM8GB Win11Pro 22H2.22621.1265 x64 i5-10210U SSD Firefox106.0 MicrosoftDefender
online▸ Win11Pro 22H2.22621.1992 x64 i5-9400 RAM16GB HDD Firefox116.0b3 MicrosoftDefender

Reply | Quote

Success!  Once I found the correct KB number, I was able to install the new Windows 11 July update from the Microsoft Update Catalog.  The listing there was unusual in that part was in English and part in Chinese; never saw that before.  Installation was slow although the package was only ~350MB.

No automatic restart as in Windows 8.1; I had to force one.  Then there were three restarts after that.  I haven’t noticed anything different yet.  Isn’t this supposed to be Moment 3?

This concludes my Windows Updates for this month.

Mark

Windows 11 Pro 22H2

1 user thanked author for this post.

geekdom

Reply | Quote

Mark wrote:

Windows 11 Pro 22H2

Please include the build. It lets us know where you are now.

Microsoft Update Catalog is here:
https://www.catalog.update.microsoft.com/Home.aspx

Is that where you went?

On permanent hiatus {with backup and coffee}
offline▸ Win10Pro 2004.19041.572 x64 i3-3220 RAM8GB HDD Firefox83.0b3 WindowsDefender
offline▸ Acer TravelMate P215-52 RAM8GB Win11Pro 22H2.22621.1265 x64 i5-10210U SSD Firefox106.0 MicrosoftDefender
online▸ Win11Pro 22H2.22621.1992 x64 i5-9400 RAM16GB HDD Firefox116.0b3 MicrosoftDefender

Reply | Quote

Build 22621.1992.

Mark

Windows 11 Pro

1 user thanked author for this post.

geekdom

Reply | Quote

Windows 10 22H2 Pro

Installed July updates. Winver 19045.3208

All is well.

3 users thanked author for this post.

Coldheart9020, geekdom, Fred

Reply | Quote

There is a problem.
After waking from sleep I get login screen instead of auto login.
In netplwiz ‘user must enter…’ is unchecked.

Local account. No password/pin/hello…

Reply | Quote

Did you change computer name or your password?

If so, you need to repeat the auto-login steps:

Enable or Disable Automatically Sign in Account at Startup in Windows 11

Reply | Quote

b wrote:

Did you change computer name or your password?

No.
I don’t use a password.

Reply | Quote

Resolved.

Reply | Quote

Others may encounter the same problem so simply posting “Resolved” doesn’t really help.

Please provide details on how it was resolved.

2 users thanked author for this post.

deuxbits, Microfix

Reply | Quote

Hi Susan:

Windows Update successfully installed the following July 2023 Patch Tuesday updates on my Win 10 Pro v22H2 laptop and I haven’t observed any negative effects so far:

• KB5028166: 2023-07 Cumulative Update for Win 10 Version 22H2 for x64 (OS Build 19045.3208)
• KB5028705: 2023-07 .NET 6.0.20 Update for x64 Client
• KB890830 : Windows Malicious Software Removal Tool x64 – v5.115

The Windows Update session went smoothly, although installation of the KB5028166 monthly Quality update seemed to take a bit longer than usual. My Local Group Policy Editor is configured so that I only receive MS .NET Framework updates that include a security improvement so I did not receive KB5028937 (2023-07 Cumulative Update for .NET Framework 3.5, 4.8 and 4.8.1 for Win 10 Version 22H2: July 11, 2023) this month. That also means that I did not encounter the early “Restart Now” glitch that occurs when Windows Update delivers a MS .NET Framework update with my other my Patch Tuesday updates (see my 16-Jun-2023 post # 2566457 in Ready for June Updates? for one example).
————-
Dell Inspiron 5584 *64-bit Win 10 Pro v22H2 build 19045.3208 * Firefox v115.0.2 * Microsoft Defender v4.18.23050.5-1.1.23060.1005 * Malwarebytes Premium v4.5.32.271-1.0.2051 * Macrium Reflect Free v8.0.7279

2 users thanked author for this post.

Coldheart9020, geekdom

Reply | Quote

Just another Forum Poster wrote:

FYI, since some previous Cumulative .NET updates were never offered via Windows update (they had to be “manually” downloaded and installed), what you should really be asking is whether any AskWoody users who didn’t install the .NET OOB have been offered the July .NET updates?

Is this the .NET situation for anyone here?

Source:
https://www.askwoody.com/forums/topic/july-11-2023-net-framework-cumulative-update-not-offered-by-wu/

On permanent hiatus {with backup and coffee}
offline▸ Win10Pro 2004.19041.572 x64 i3-3220 RAM8GB HDD Firefox83.0b3 WindowsDefender
offline▸ Acer TravelMate P215-52 RAM8GB Win11Pro 22H2.22621.1265 x64 i5-10210U SSD Firefox106.0 MicrosoftDefender
online▸ Win11Pro 22H2.22621.1992 x64 i5-9400 RAM16GB HDD Firefox116.0b3 MicrosoftDefender

Reply | Quote

I hope Susan is aware of this recent announcement by MS:

https://techcommunity.microsoft.com/t5/windows-it-pro-blog/windows-client-roadmap-update-july-2023/ba-p/3871736

Windows 11, version 23H2 will be available as an enablement package

The upcoming Windows 11, version 23H2 shares the same servicing branch and code base as Windows 11, version 22H2. What does it mean for you? If you’re running Windows 11, version 22H2, it will be a simple update to version 23H2 via a small enablement package (eKB). Do you remember updating from Windows 10, version 1903 to 1909? Or how you’ve managed recent updates beginning with Windows 10, version 20H2 through 22H2? It will be that simple. Moreover, since both versions share the same source code, you don’t need to worry about application or device compatibility between the versions.

1 user thanked author for this post.

geekdom

Reply | Quote

Windows 10 22H2 systems.

Full disk images.

Updated using WAU Manager.

No issues so far.

1 user thanked author for this post.

geekdom

Reply | Quote

OldNavyGuy wrote:

Windows 10 22H2 systems.

Please provide the build so we know where you are.

On permanent hiatus {with backup and coffee}
offline▸ Win10Pro 2004.19041.572 x64 i3-3220 RAM8GB HDD Firefox83.0b3 WindowsDefender
offline▸ Acer TravelMate P215-52 RAM8GB Win11Pro 22H2.22621.1265 x64 i5-10210U SSD Firefox106.0 MicrosoftDefender
online▸ Win11Pro 22H2.22621.1992 x64 i5-9400 RAM16GB HDD Firefox116.0b3 MicrosoftDefender

Reply | Quote

FYI

2 Windows 10 Home v22H2 systems (one x64 and another x86 system)
————————————————————————
After Macrium Reflect System Image backup were completed, resumed updates via Windows Update and installed the following:
-Windows Malicious Software Removal Tool x64 (x86) – v5.115 (KB890830)
-2023-07 Cumulative Update for .NET Framework 3.5 and 4.8 for Windows 10 Version 22H2 for x64 (x86) (KB5028853)
-2023-07 Cumulative Update for Windows 10 Version 22H2 for x64 (x86)-based Systems (KB5028166)
-Microsoft .NET Framework 4.8.1 for Windows 10 version 22H2 for x64 (x86)-based Systems (KB5011048)

Windows Update installed the 2023-07 CU .NET Framework 3.5 and 4.8 for Windows 10 Version 22H2 (KB5028853) and Microsoft .NET Framework 4.8.1 for Windows 10 version 22H2 (KB5011048) first and duly prompted for a restart. The other 2 patches were held under the status “Pending Download” due to the “metered connection” status. After the 1st restart, Windows Update proceeded to download and install the other 2 patches after I hit the “Download” button.

2nd restart later a “check for updates” via Windows Update then proceeded to install the following:
-2023-07 Cumulative Update for .NET Framework 3.5 and 4.8.1 for Windows 10 Version 22H2 for x64 (x86) (KB5028849)

Prior OS Build 19045.3086 (Build as at June 13, 2023 — KB5027215)
New OS Build 19045.3208

1) I have NOT installed any of the June .NET framework OOB updates.
2) Both my Windows 10 Home v22H2 systems (one x64 and another x86 system) were offered their respective July 2023 CU .Net Framework patches first while on the .NET Framework 3.5 and 4.8 installation AND then after the upgrade to .NET Framework 3.5 and 4.8.1 were completed.
3) So far nothing untoward to report. Both Windows 10 Home systems are running stable since patching 3 days ago.

HTH.

1 user thanked author for this post.

geekdom

Reply | Quote

I think Microsoft screwed up the reboot detection this month.  I am getting reports that systems are rebooting twice and possibly three times (once for the main update, once for the .net and one for .net core).  It should be only a single reboot.

Susan Bradley Patch Lady/Prudent patcher

Reply | Quote

Unless the host device OS has ‘file integrity’ errors prior to patching, critical to the patching process or target files.
The importance of file integrity often gets overlooked on assumptions..

Windows - commercial by definition and now function...

Reply | Quote

Remember Windows 10 22H2 is only receiving security updates now so it’s the stable/boring version of Windows.

I assume you gestured “air quotes” when typing “stable/boring”.

Perhaps we could say that it is the most stable of the several “current” choices. It’s certainly not more stable than Windows 7 or even 8.1 became.

From my perspective, “boring” – presuming you mean “least likely to become autonomously a new problem to solve” – is not a bad thing.

-Noel

3 users thanked author for this post.

Microfix, samak, Fred

Reply | Quote

Yep, boring is good. I look forward to it.

Windows 10 Home 22H2, Acer Aspire TC-1660 desktop + LibreOffice, non-techie

3 users thanked author for this post.

Microfix, geekdom, Fred

Reply | Quote

Noel Carboni wrote:

I assume you gestured “air quotes” when typing “stable/boring”.

• Stable
• Boring
• Dependable
• Reliable
• Consistent
• Usable

Let’s hear it for dull and fuddy-duddy.

On permanent hiatus {with backup and coffee}
offline▸ Win10Pro 2004.19041.572 x64 i3-3220 RAM8GB HDD Firefox83.0b3 WindowsDefender
offline▸ Acer TravelMate P215-52 RAM8GB Win11Pro 22H2.22621.1265 x64 i5-10210U SSD Firefox106.0 MicrosoftDefender
online▸ Win11Pro 22H2.22621.1992 x64 i5-9400 RAM16GB HDD Firefox116.0b3 MicrosoftDefender

1 user thanked author for this post.

windbg

Reply | Quote

geekdom wrote:

OldNavyGuy wrote:

Windows 10 22H2 systems.

Please provide the build so we know where you are.

19045.3208

 

 

1 user thanked author for this post.

geekdom

Reply | Quote

Noel Carboni wrote:

From my perspective, “boring” – presuming you mean “least likely to become autonomously a new problem to solve” – is not a bad thing.

how many people have longed for this? stable & usable

* _ ... _ *

2 users thanked author for this post.

geekdom, samak

Reply | Quote

Just a little question in regards to pc rebooting many times when installing updates for people: I have a desktop pc and let windows 10 do the updates itself. It installs the updates and then the button says “click to reboot” under the updates. It never does it by itself. Do people click the button before the updates are done installing or is this a settings issue or different version of windows issue?

Reply | Quote

Jim wrote:

Do people click the button before the updates are done installing or is this a settings issue or different version of windows issue?

If you are installing multiple updates at the same time, wait until all updates are installed prior to clicking the reboot button. If one or more updates are in progress when you reboot, your reboot will interrupt the update progress (which will likely start again after the reboot). However, it’s not a good idea to mess with the dog while it’s eating.

On permanent hiatus {with backup and coffee}
offline▸ Win10Pro 2004.19041.572 x64 i3-3220 RAM8GB HDD Firefox83.0b3 WindowsDefender
offline▸ Acer TravelMate P215-52 RAM8GB Win11Pro 22H2.22621.1265 x64 i5-10210U SSD Firefox106.0 MicrosoftDefender
online▸ Win11Pro 22H2.22621.1992 x64 i5-9400 RAM16GB HDD Firefox116.0b3 MicrosoftDefender

2 users thanked author for this post.

IT Manager Geek, lmacri

Reply | Quote

Jim wrote:

Do people click the button before the updates are done installing or is this a settings issue or different version of windows issue?

Hi Jim:

Further to geekdom’s advice in post # 2573724, please note that I sometimes see Windows Update prompt me to restart my system before all available updates have finished installing, but this only happens when a MS .NET Framework update is included with my other Patch Tuesday updates (i.e., around the 2nd Tuesday of each month). Here’s a sample image I captured during my November 2022 Patch Tuesday Updates:

When I see the pop up in my system tray to restart my system I always go to Settings | Update & Security | Windows Update first and just confirm that all my available updates have finished installing before I click the “Restart Now” button.
————
Dell Inspiron 15 5584 * 64-bit Win 10 Pro v22H2 build 19045.3208 * Firefox v115.0.2 * Microsoft Defender v4.18.23050.5-1.1.23060.1005 * Malwarebytes Premium v4.5.33.272-1.0.2069 * Macrium Reflect Free v8.0.7279

Reply | Quote

Thank you geekdom and Imacri.

When I update I always remain on the windows update page pictured in Imacis post so I can see if the pc is done updating or not, thats why its a little strange to me that people click restart before updates are done. If one however is not on that page monitoring the process and is prompted via the warning tab to restart I can understand why people click restart. MS seem to notify its users a little to often and I now understand why people complain about this.

Jim.

Reply | Quote

lmacri wrote:

Further to geekdom’s advice in post # 2573724, please note that I sometimes see Windows Update prompt me to restart my system before all available updates have finished installing, but this only happens when a MS .NET Framework update is included with my other Patch Tuesday updates

This will never happen if you use WUmgr.

I always get first restart after installing all updates.
Updates continue to 30% after which there is a second restart with updates to 100% and into login desktop.
Sometimes I get a “cleanup” screen before getting to the desktop.

Reply | Quote

Sometimes I use Microsoft Update Catalog. Sometimes I use WUMgr. Sometimes I use Windows Update. It’s good to have multiple methods of performing a task.

On permanent hiatus {with backup and coffee}
offline▸ Win10Pro 2004.19041.572 x64 i3-3220 RAM8GB HDD Firefox83.0b3 WindowsDefender
offline▸ Acer TravelMate P215-52 RAM8GB Win11Pro 22H2.22621.1265 x64 i5-10210U SSD Firefox106.0 MicrosoftDefender
online▸ Win11Pro 22H2.22621.1992 x64 i5-9400 RAM16GB HDD Firefox116.0b3 MicrosoftDefender

Reply | Quote

Am I reading this correctly? – The “fix” for the following vulnerability is to add registry keys? (we don’t have Intune, nor do we run Defender for Office)

Notice that Bleeping Computer’s article https://www.bleepingcomputer.com/news/microsoft/microsoft-july-2023-patch-tuesday-warns-of-6-zero-days-132-flaws/

indicates that CVE-2023-36884 Office and Windows HTML Remote Code Execution Vulnerability  which is under active exploit does not have an associated security patch/fix?

Instead they talk about various methods to mitigate this attack. One of which is adding registry key(s)

HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_BLOCK_CROSS_PROTOCOL_FILE_NAVIGATION

Where one needs to add the names of various Office applications that one would want to block from creating a child process. And of course test this so that benign creation of child processes by these applications are not afflicted.

I do not have this registry key in HKLM. There is no “Internet Explorer” branch past …\Policies\Microsoft

Internet Explorer?!

Basic research is what I am doing when I don't know what I am doing - Werner Von Braun

Reply | Quote

looks like KB5028166 for Win10 seems to be a troublemaker

Neowin – KB5028166 is causing system issues, break Secure Channel, forces Synology to release a patch

Reply | Quote

KB5028166 causing lot of grief

According to reports on Reddit, Windows 10 users have reportedly noticed a system slowdown after installing the latest update. The issue extends to apps in general, including Microsoft’s own apps as well as games with users reporting a drop in frame rates.

Unfortunately, that’s not all as reports also suggest KB5028166 causing network issues for Windows 10 users. These issues include problems connecting to the internet and missing Bluetooth drivers after installing the latest update.

If that was not all, Microsoft’s latest update seems to have hit enterprise customers as well. As pointed out by u/luckman212 on Synology’s subreddit, users are facing issues establishing a secure channel after upgrading their system, causing them to lose connection with their Network Attached Storage (NAS).

Long story short, Microsoft released some updates for Win10/11 this month that destroyed the ability for our fully patched Win10 22H2 clients to establish a secure channel with the domain controller running on our Synology. The reason I even discovered this was users complaining about not being able to connect via Remote Desktop (RDP) anymore (NLA errors).

Unfortunately, the issue forced Synology to release an emergency patch to fix the issue. According to the company, the issues impacts users who have Synology Directory Server package installed and have domains created by Synology Directory Server…

Reply | Quote

Also reported on Windows Latest – Windows 10 KB5028166 issues; games lag, broken enterprise network

1 user thanked author for this post.

Alex5723

Reply | Quote

I had one problem with the July patches on my Win 10 Pro 22H2 system.

The patches installed yesterday around 10:00 and I rebooted.  This morning I got a notice to schedule a reboot, so I looked for the reason why.  At 4:49 this morning KB5028937 2023-07 Cumulative Update for .NET Framework 3.5, 4.8 and 4.8.1 for Windows 10 Version 22H2 for x64 was re-installed.  I assume that patch was installed correctly yesterday when I installed the other patches.  There’s also an Event Log 19 entry “Installation successful for this patch”.  Did MS re-issue this patch?

I also just noticed an Event Log 19 entry at the same time yesterday – “Installation Successful: Windows successfully installed the following update: 9WZDNCRFHVQM-MICROSOFT.WINDOWSCOMMUNICATIONSAPPS”.  What is this update?  It did not appear yesterday in the list of updates being downloaded and installed.

Reply | Quote

bsfinkel wrote:

I got a notice to schedule a reboot, so I looked for the reason why. At 4:49 this morning KB5028937 2023-07 Cumulative Update for .NET Framework 3.5, 4.8 and 4.8.1 for Windows 10 Version 22H2 for x64 was re-installed.

Hi bsfinkel:

Many users noticed that installation of this month’s .NET Framework update required more than one system restart to install. See Susan Bradley’s AskWoody Newsletter ISSUE 20.30.1 of 25-Jul-2025 which states “…As a result of its impact on the business community, Microsoft is offering up these optional .NET updates. However, the reboot sequence isn’t quite right, and it triggers a reboot separately from the Windows updates. You may see two or three reboots this month. Nothing is wrong per se — it won’t hurt the operating system or your computer. Just be aware that you may see more reboots than normal this month.”

bsfinkel wrote:

I also just noticed an Event Log 19 entry at the same time yesterday – “Installation Successful: Windows successfully installed the following update: 9WZDNCRFHVQM-MICROSOFT.WINDOWSCOMMUNICATIONSAPPS”. What is this update?

My Win 10 Reliability Monitor show that I received that same 9WZDNCRFHVQM-MICROSOFT.WINDOWSCOMMUNICATIONSAPPS patch on 25-Jul-2023.

That’s an update for Windows’s built-in Mail and Calendar UWP (Microsoft Store) app, and if you launch your Microsoft Store app and click the Library tab you’ll see that update was delivered via the Microsoft Store, and not Windows Update.

————
Dell Inspiron 5584 * 64-bit Win 10 Pro v22H2 build 19045.3208 * Firefox v115.0.2 * Microsoft Defender v4.18.23050.9-1.1.23060.1005 * Malwarebytes Premium v4.5.33.272-1.0.2069 * Macrium Reflect Free v8.0.7279

Reply | Quote

I did notice today that during the manual reboot (on my schedule, not MS’s schedule) there were multiple reboots.  After I did a disk backup (post-install), and I compared a dir listing with yesterday’s; there were files that had changed.  But I am unfamiliar with the .NET files.  The changed files have a timestamp of 4:49 this morning, so something changed with the .NET patch install this morning.

Reply | Quote

Hardened Windows user:

KB5028254 Cumulative Update Preview for Windows 11 Version 22H2 for x64-based Systems.

Three restarts, no hiccups.

Windows 11 Pro Version 22H2 (OS Build 22621.2070)

Always create a fresh drive image before making system changes/Windows updates; you may need to start over!

We all have our own reasons for doing the things that we do with our systems; we don't need anyone's approval, and we don't all have to do the same things.

We were all once "Average Users".

Computer Specs

Reply | Quote