News, tips, advice, support for Windows, Office, PCs & more. Tech help. No bull. We're community supported by donations from our Plus Members, and proud of it
Home icon Home icon Home icon Email icon RSS icon
  • MS-Defcon 2 – Here comes December

    Posted on Susan Bradley Comment on the AskWoody Lounge

    Home Forums AskWoody blog MS-Defcon 2 – Here comes December

    Viewing 21 reply threads
    • Author
      Posts
      • #2318108
        Susan Bradley
        Manager

        Microsoft is out with their December releases.  The blog post today focuses on something that a LOT of us complained about last month:  The lack of in
        [See the full post at: MS-Defcon 2 – Here comes December]

        Susan Bradley Patch Lady

        8 users thanked author for this post.
      • #2318110
        PKCano
        Manager

        AKB 2000003 has been updated for Group B Win7 (ESU) and Win8.1 on December 8, 2020.

        There is a Security-only Update for those with Win7 ESU subscriptions.
        There was no December IE11 CU for Win7.

        December Rollup KB4592471 Download 32-bit or 64-bit for those with Win7 ESU subscriptions.

        You must have at least the August Servicing Stack KB4570673 previously installed to receive these updates)

        There is a December Servicing Stack  KB4592510 – Download 32-bit or 64-bit for those with Win7 ESU subscriptions.

        There is a revised Licensing Preparation Package KB4575903 dated 7/29/2020 for Win7 ESU subscriptions, if you need it.

        There were no .NET updates listed for Win7.

        7 users thanked author for this post.
        • #2318140
          Microfix
          AskWoody MVP

          Martin Brinkmann over on ghacks has his usual thorough overview.
          Note: W10 version 1903 has reached end of servicing today, 8th December 2020


          No problem can be solved from the same level of consciousness that created IT- AE
          2 users thanked author for this post.
        • #2318267
          Moonbear
          AskWoody Lounger

          @PKCano

          Shouldn’t the the KB number for the December SSU download links be 4592510 instead of 4592501?

          Hovering over the link is the only way I noticed the difference

          • This reply was modified 1 month, 2 weeks ago by Moonbear.
          1 user thanked author for this post.
      • #2318115
        geekdom
        AskWoody Plus

        Make your backups now:

        Sometimes defer, pause, hide may not function well.
        Sometimes you click: Check for Updates.
        Sometimes there are new unannounced update rules.
        Sometimes updates are confusing.

        Every day is backup day.

        ———

        Windows 2004 TestBeta
        December 8, 2020

        Checked for updates with WuMgr:
        2020-12 Cumulative Update for Windows 10 Version 2004 for x64-based Systems (KB4592438)

        Installed update from WuMgr:
        2020-12 Cumulative Update for Windows 10 Version 2004 for x64-based Systems (KB4592438)

        I was prompted to reboot, so I rebooted without error, and checked for updates again using WuMgr. There were no further updates.

        Using WuMgr, 2020-12 Cumulative Update for Windows 10 Version 2004 for x64-based Systems (KB4592438) showed under installed updates.

        Beta Work {Got backup and coffee}
        offline▸ Win10Pro 2004.19041.572 x64 i3-3220 RAM8GB HDD Firefox83.0b3 WindowsDefender TRV=1909 WuMgr
        offline▸ Win10Pro 20H2.19042.685 x86 Atom N270 RAM2GB HDD WindowsDefender WuMgr GuineaPigVariant
        online▸ Win10Pro 2004.19041.746 x64 i5-9400 RAM16GB HDD Firefox86.0b2 WindowsDefender TRV=2004 WuMgr
      • #2318120
        Seff
        AskWoody Plus

        “WHY are we still getting Office 2010 updates when it is officially out of support as of October 2020?”

        Maybe they’re getting a bit nervous about the success and broadening appeal of 0patch? Every 0patched typically Windows 7 machine is potentially a non-upgrade to Windows 10. And yet, by the same token, every Office 2010 installation that they themselves keep maintained is potentially a non-upgrade to Office 365.

        It is a strange thing, certainly.

        • #2318129
          abbodi86
          AskWoody_MVP

          No it’s not

          as i remember, Office 2007 got 3 months updates after EOS
          call it generosity, call it delayed security fixes, it’s sill a good thing 🙂

          5 users thanked author for this post.
        • #2318152
          Geo
          AskWoody Plus

          I used 0Patch when I had my W7 machine and I still use it with W10.

      • #2318175
        rebop2020
        AskWoody Plus

        I am  looking forward to your recommendations on the Office 2010 patches. Especially since they seem like vulnerabilities and I recently told Windows Update NOT to check for other Microsoft products. I use Office 2010 every day.

        2 users thanked author for this post.
        • #2318265
          Susan Bradley
          Manager

          I would flip it back to all products.  This ensures that anything you have installed will get updates.

          Susan Bradley Patch Lady

          1 user thanked author for this post.
          • #2318279
            rebop2020
            AskWoody Plus

            Thanks. I shall.

             

            So hard to figure out what the right thing to do is for any of this…

            1 user thanked author for this post.
      • #2318194
        DriftyDonN
        AskWoody Plus

        nothing offered today on any of my units….

      • #2318199
        Fred
        AskWoody Plus

        Installed the december20 updates/patches/repairs “windows10.0-kb4592449-x64_aa193efa8432018464d6173c497ce3de71a581e2[.]msu”
        W10Pro64 v.1909 is now up to build:18363.1256
        It’s a pitty that Microsoft doen’t give the detailed info of the repairs….. this time it looks better/okay(?) with some graphical hickcups

        What security patches were made is a mystery to me; does anyone has a clue?
        —besides  https://thehackernews.com/2020/12/microsoft-releases-windows-update-dec.html?utm_source=social_share

        ~ ~ ~
        • This reply was modified 1 month, 2 weeks ago by Fred.
        1 user thanked author for this post.
      • #2318224
        Pim
        AskWoody Plus

        Besides Office 2010 updates it is also noteworthy that Win10 v1809 received an update. Originally EOL for v1809 was planned for May 2020, but because of the pandemic this has been extended to November 2020. But this month an update was released for v1809, after the official EOL.

        ASRock Beebox J3160 - Win7 Ultimate x64
        Asus VivoPC VC62B - Win7 Ultimate x64
        Dell Latitude E6430 - Win7 Ultimate x64
        Dell Latitude XT3 - Vista Ultimate x86 (still...)
        Asus H170 Pro Gaming - Win10 Pro 1809 x64

        • #2318262
          abbodi86
          AskWoody_MVP

          v1809/v1803 Enterprise/Education editions are still supported until May 2021

          i also would not be surprised if v1809 Pro/Home get December updates
          it will not be the first time they don’t stick ti EOS date precisely

          1 user thanked author for this post.
          Pim
          • #2318299
            Pim
            AskWoody Plus

            I see. I just checked and saw that on my v1809 Pro system there were no updates, so it is apparently only for Enterprise/education.

            ASRock Beebox J3160 - Win7 Ultimate x64
            Asus VivoPC VC62B - Win7 Ultimate x64
            Dell Latitude E6430 - Win7 Ultimate x64
            Dell Latitude XT3 - Vista Ultimate x86 (still...)
            Asus H170 Pro Gaming - Win10 Pro 1809 x64

            1 user thanked author for this post.
            • #2318414
              EP
              AskWoody_MVP

              @Pim

              fwwaahahaha – I guess the KB4592440 CU for v1809 only works for Enterprise/Education AND LTSC 2019 editions (using the very latter)

              try downloading & installing KB4592440 manually from MS Catalog and check on your 1809 pro system if it works or if it does not (and says “not applicable”) [or perhaps fails with “we couldn’t complete the updates – undoing changes” message]

              • This reply was modified 1 month, 2 weeks ago by EP.
              1 user thanked author for this post.
              Pim
            • #2318435
              abbodi86
              AskWoody_MVP

              Since Enterprise/Education editions are based on CBS ProfessionalEdition, i believe you can still install 1809 LCU manually on Pro edition

              similar to 1803 Pro, although it EOL was in November 2019, you can still install LCU manually

              1 user thanked author for this post.
              Pim
              • #2318447
                Pim
                AskWoody Plus

                Thanks for responding EP and abbodi86. I just tried that and it failed. After the reboot I got the message “We couldn’t complete the updates. Undoing changes. Don’t turn off your computer”. I will try one more time, but it would seem it is not possible.

                ASRock Beebox J3160 - Win7 Ultimate x64
                Asus VivoPC VC62B - Win7 Ultimate x64
                Dell Latitude E6430 - Win7 Ultimate x64
                Dell Latitude XT3 - Vista Ultimate x86 (still...)
                Asus H170 Pro Gaming - Win10 Pro 1809 x64

                2 users thanked author for this post.
              • #2318497
                abbodi86
                AskWoody_MVP

                Yeah, i just inspected KB4592440 cab file, and they added “Microsoft-Client-Licensing-SupplementalServicing” component, which will prevent installation on Pro

                they added the same component for v1607 and v1703 LCU too, but not v1803

                this component restriction can be bypassed in the same concept as Win7 ESU

                W10UI update installer script already have that concept, you may give it a try
                https://github.com/abbodi1406/WHD/raw/master/scripts/W10UI_8.9.zip
                just place KB4592440 msu file next to the script, run as admin and then press zero 0 to start

                3 users thanked author for this post.
              • #2318501
                Pim
                AskWoody Plus

                Thank you abbodi86! I will certainly try it (probably tomorrow (Dutch time)) and report back. Thanks again!

                ASRock Beebox J3160 - Win7 Ultimate x64
                Asus VivoPC VC62B - Win7 Ultimate x64
                Dell Latitude E6430 - Win7 Ultimate x64
                Dell Latitude XT3 - Vista Ultimate x86 (still...)
                Asus H170 Pro Gaming - Win10 Pro 1809 x64

              • #2319195
                Pim
                AskWoody Plus

                @abbodi86 I can confirm that I was able to install KB4592440 using your script. Thanks! I can now wait a few more months before upgrading to a newer Windows 10 version.

                Does the script also install .NET updates? This month there was no .NET update, so I could not test that.

                Thanks again for your help and your script!

                ASRock Beebox J3160 - Win7 Ultimate x64
                Asus VivoPC VC62B - Win7 Ultimate x64
                Dell Latitude E6430 - Win7 Ultimate x64
                Dell Latitude XT3 - Vista Ultimate x86 (still...)
                Asus H170 Pro Gaming - Win10 Pro 1809 x64

                1 user thanked author for this post.
              • #2319197
                abbodi86
                AskWoody_MVP

                @Pim
                I don’t think they restrict .NET updates (i just checked KB4585207 for v1607)
                but if they do, then the script would be able to handle it in the same way

                1 user thanked author for this post.
                Pim
              • #2318561
                EP
                AskWoody_MVP

                that Microsoft-Client-Licensing-SupplementalServicing component might have also been added to the latter 1709 CUs as well.

                speaking of 1803, the KB4537795 CU from late Feb. 2020 was the last one to actually install on 1803 home/pro editions. the next CU from Mar. 2020 (KB4540689) would produce a “not applicable” message when attempting to install on 1803 Home/Pro and would only work with enterprise/education editions of 1803

                btw, no problems installing KB4592440 CU on my bedroom pc (an old HP desktop computer) running LTSC 2019 (just went right to the desktop after the working on updates 100% message)

                edit – maybe ask doriel if he’s still running 1809 lately – last time I checked, he was running 1809 enterprise on at least one of his machines.

                • This reply was modified 1 month, 2 weeks ago by EP.
              • #2318566
                abbodi86
                AskWoody_MVP

                I just checked KB4580328, it doesn’t have the commponent

                yes, launching msu file directly will not work for Pro
                you must extract the cab file and install it with Dism.exe /Add-Package

                Core (Home) edition is totally blocked

      • #2318234
        CraigS26
        AskWoody Plus

        I see ONLY the Dec CU in wushowhide “HideBox” but the Auto-Chk for Updates is dragging its feet; Images ready & Never have an issue with CU’s…….

        IF you then clk Check for Updates in Settings Do You get only what you see in wushowhide Now, or Might there be drivers, etc. loaded that are Not shown? Oops, just remembered I have in GP a setting Not to Install Drivers, BUT are there any other Uh-Oh’s to expect?

        W10 Pro 20H2 / Hm-Stdnt Ofce '16 C2R / HP Envy Desktop-Ethernet/ 12 GB / 256G SSD + 1 TB HDD / i5-8400 Coffee Lake/ GP=2 + FtrU=Semi-Annual + Feature Defer = 1 + QU=0

        • This reply was modified 1 month, 2 weeks ago by CraigS26.
        • This reply was modified 1 month, 2 weeks ago by CraigS26.
        • #2318252
          WCHS
          AskWoody Plus

          Oops, just remembered I have in GP a setting Not to Install Drivers,…

          Don’t depend on this GP setting to prevent drivers from appearing in a ‘Download/install’ or in a ‘Check for Updates.’ I have this GP setting and a driver sometimes appears anyway, although I am able to head it off at the pass by hiding it since I have GP=2, notify download/install.

          This is to say that “Check for updates” is taking a risk.

          4 users thanked author for this post.
          • #2318416
            EP
            AskWoody_MVP

            CraigS26 & WCHS:

            use “metered” internet connections (set both WiFi and Ethernet/LAN connections to metered)

            I check for updates and I either get no driver updates listed or if they do they don’t get automatically installed, cuz of metered connections

            2 users thanked author for this post.
      • #2318246
        bbearren
        AskWoody MVP

        I got

        KB4592438 Cumulative Update for Windows 10 Version 20H2 for x64-based Systems

        installed after my Active hours (8:00 AM to 2:00AM).  I had clicked “Check for updates” in the late evening yesterday, but it hadn’t shown up at that time.

        Everything is working normally, nothing to report.

        Create a fresh drive image before making system changes/Windows updates, in case you need to start over!
        "When you're troubleshooting, start with the simple and proceed to the complex."—M.O. Johns
        "Experience is what you get when you're looking for something else."—Sir Thomas Robert Deware

        1 user thanked author for this post.
      • #2318247
        Carl D
        AskWoody Lounger

        Decided to take the usual early plunge into this month’s updates (making sure I have a Macrium image to revert back to if needed, of course).

        I was offered the usual cumulative update and Windows Defender updates but… what’s this? There was also a .NET Preview Update as well????

        What is it with these preview updates? Please take the hint MS – I don’t want them, especially on Patch Tuesday!! And, I don’t believe most “normal” users want them either. Isn’t that what the Insider Program is supposed to be for – testing updates before releasing them to the “general masses” on Patch Tuesday?

        Anyway… I shut the Windows Update session down before any updates were installed and I’m back to where I was before I checked for updates (thanks to my Macrium image) and I’m going to stay there until these preview updates turn into “regular” ones.

        Gigabyte GA-B250M-D3H Motherboard, Intel i5-7600 CPU, 32GB RAM, NVIDIA GeForce GTX 1050 Graphics Card, 1x Samsung 860 EVO 250GB SSD, 1x Samsung 850 EVO 250GB SSD, Windows 10 Professional 20H2 64bit.

        1 user thanked author for this post.
      • #2318250
        CraigS26
        AskWoody Plus

        Daily Auto-Chk finally showed the Update. Oddly, for my 1909-64 Only KB4592449 Dec CU installed and I don’t see the SSU in Control Panel History as is usual – or MSRT. I clk’d to Update 2016 Office ’16 C2R.

        All went rapidly and without issue.

        W10 Pro 20H2 / Hm-Stdnt Ofce '16 C2R / HP Envy Desktop-Ethernet/ 12 GB / 256G SSD + 1 TB HDD / i5-8400 Coffee Lake/ GP=2 + FtrU=Semi-Annual + Feature Defer = 1 + QU=0

        • This reply was modified 1 month, 2 weeks ago by CraigS26.
      • #2318281
        Alex5723
        AskWoody Plus

        I’m going to stay there until these preview updates turn into “regular” ones.

        That will happen on Jan. 2021 patch Tuesday.
        Use WUmgr to hide preview updates.

        1 user thanked author for this post.
        • #2318337
          Carl D
          AskWoody Lounger

          Thanks, Alex.

          First time I have ever seen preview updates released at exactly the same time as Patch Tuesday updates. Hope this isn’t the “new normal” from now on.

          This whole idea of treating Windows users as unpaid beta testers (especially Windows 10 Professional users) is starting to become a little tiresome after all these years.

          Gigabyte GA-B250M-D3H Motherboard, Intel i5-7600 CPU, 32GB RAM, NVIDIA GeForce GTX 1050 Graphics Card, 1x Samsung 860 EVO 250GB SSD, 1x Samsung 850 EVO 250GB SSD, Windows 10 Professional 20H2 64bit.

          1 user thanked author for this post.
          • #2318356
            WCHS
            AskWoody Plus

            First time I have ever seen preview updates released at exactly the same time as Patch Tuesday updates.

            I’m still on 1909 and I’ve filtered out these .NET previews by setting the GUI Feature Update deferral to 1 (and not 365, because I have TRV=1909). The GUI is gone in 2004 and 20H2, but to accomplish the same, take a look at using GP following the instructions and screenshots at AKB 2000016 Guide, Section 5, Method 2, Group Policy settings under Windows Update for Business > enabling Select when Preview Builds and Feature Updates are received, etc, (screenshots are at #2275043)

            4 users thanked author for this post.
        • #2318342
          Carl D
          AskWoody Lounger

          Funny thing is – its actually last month’s .NET preview???

          Maybe it’ll disappear in the next day or so?

          preview

          Gigabyte GA-B250M-D3H Motherboard, Intel i5-7600 CPU, 32GB RAM, NVIDIA GeForce GTX 1050 Graphics Card, 1x Samsung 860 EVO 250GB SSD, 1x Samsung 850 EVO 250GB SSD, Windows 10 Professional 20H2 64bit.

          Attachments:
          • #2318346
            Susan Bradley
            Manager

            You clicked on check for updates?  Check for updates in Windows 10 is “please install anything including .net preview updates”.

             

             

            Susan Bradley Patch Lady

            2 users thanked author for this post.
            • #2318348
              Carl D
              AskWoody Lounger

              Hi, Susan.

              Yes, I did. I have updates blocked with Windows Update Blocker until just after Patch Tuesday every month. But, I’ve never seen any preview updates appear until this month.

              I’ll start using WUmgr from now on as Alex suggested.

              Gigabyte GA-B250M-D3H Motherboard, Intel i5-7600 CPU, 32GB RAM, NVIDIA GeForce GTX 1050 Graphics Card, 1x Samsung 860 EVO 250GB SSD, 1x Samsung 850 EVO 250GB SSD, Windows 10 Professional 20H2 64bit.

      • #2318285
        Alex5723
        AskWoody Plus

        i also would not be surprised if v1809 Pro/Home get December updates

        1809 got Dec. KB4592440

        • #2318300
          Pim
          AskWoody Plus

          Did you get it? My v1809 Pro system did not.

          ASRock Beebox J3160 - Win7 Ultimate x64
          Asus VivoPC VC62B - Win7 Ultimate x64
          Dell Latitude E6430 - Win7 Ultimate x64
          Dell Latitude XT3 - Vista Ultimate x86 (still...)
          Asus H170 Pro Gaming - Win10 Pro 1809 x64

          • #2318417
            EP
            AskWoody_MVP

            that’s because 1809 Home/Pro editions went EOL in November 2020.

            KB4594442 and KB4586839 seem to be the last updates you can install on Home & Pro 1809

            see one of my posts above – get KB4592440 from MS Update Catalog and try to install it

            • This reply was modified 1 month, 2 weeks ago by EP.
      • #2318292
        Microfix
        AskWoody MVP

        No problems here so far with SMQR’s: Win8.1 Pro x64/ Win7 Pro ESU x86
        no telemetry re-activation with this months patches on either OS,
        event viewer logs clean and local canon scanner/ printer working as intended.


        No problem can be solved from the same level of consciousness that created IT- AE
        1 user thanked author for this post.
      • #2318296
        Matthew
        AskWoody Plus
        1 user thanked author for this post.
      • #2318302
        anonymous
        Guest

        Is the Windows update download stuck at 100% quite common?

        Happened on my works PC few month back, and now my personal PC. Reboot fixed it in both instances

        • #2318311
          PKCano
          Manager

          Are you referring to Windows 10?
          I have seen this happen in Win10. Usually, if you just leave it alone. it will resolve itself eventually.

          • #2318314
            anonymous
            Guest

            Yea Win10, left it for 30 mins, nothing. Task Manager wasnt showing any activity to suggest it was installing

      • #2318400
        anonymous
        Guest

        x3 W10 20H2. All good.

        I deploy ‘2020 12’ & ‘.NET Framework’ syntax in the Microsoft Update Catalog, to view Updates.
        https://www.catalog.update.microsoft.com/Search.aspx?q=2020-12

        MS has rearranged a couple of URL items, that I use to interrogate Updates.
        Microsoft Security Response Center. https://www.microsoft.com/en-us/msrc?rtc=1
        Security Update Guide. https://msrc.microsoft.com/update-guide

      • #2318457
        anonymous
        Guest

        Did anyone get the .net preview update offered? Mine installed, but isn’t in the list of installed updates. However half way through installation Windows told me to reboot the machine to finish updates. Bit odd half way through installation. I didn’t as didn’t want to break anything while it was still installing.

        Just seems odd as there is no record of the update installing

        • #2318486
          b
          AskWoody Plus

          Preview updates are normally listed under Other updates, not Quality updates.

      • #2318551
        anonymous
        Guest

        I miss the old days when the notice to block updates was posted a day or two before patch Tuesday. I assume we will get the all clear to install December patches sometime after Christmas but before the January updates are released?

        • #2318554
          PKCano
          Manager

          That sounds about right.

          1 user thanked author for this post.
        • #2318589
          Susan Bradley
          Manager

          This month based on how the calendar lands, the all clear will come at the end of the month.  See I see the start of the month to be when I make sure I am locked down.  The non security Office updates came out on the first Tuesday of the month (12/1) which is why I put the Defcon 2 at that time.  Otherwise for those with Office 2016 (non click to run) you might end up with those updates installed if you don’t put the block on it.  The old days are still here, I’m just being extra sure that you won’t get ANY updates installed until you want them.  It’s all due to how the first Tuesday of the month hit right on the first Office non security patching day.

          Susan Bradley Patch Lady

          1 user thanked author for this post.
      • #2318577
        anonymous
        Guest

        Win 10 Pro 1909 64 bit.   Downloaded December CU KB4592449 from MS Update catalog, standalone installed OK, test machine stable for 2 days.

      • #2319014
        L95
        AskWoody Plus

        Susan:  For people such as myself who were planning on using 0Patch to patch Office 2010 once the end-of-life date was reached for the security updates,   is it OK for us to wait on installing 0Patch until Microsoft actually stops issuing the security patches for Office 2010?   The end-of life date was in October,  but as discussed in postings above,  Microsoft is still sending out security updates and might do so for one or more months to come (see posting above by abbodi86 which said   “as i remember, Office 2007 got 3 months updates after EOS”).   So I’m inclined to simply wait on installing 0Patch  until the security updates from Microsoft stop,  if you think it’s OK to do so.  I will appreciate your response.

        • #2319019
          PKCano
          Manager

          Yes, you can wait to start 0patch until MS stops updating Office 2010 for Office 2010 patches.
          But don’t forget, 0patch Pro also patches other software as well.

          1 user thanked author for this post.
          L95
          • #2319040
            L95
            AskWoody Plus

            PK:  Thanks for your response.  In my case,  I’ve been relying on my Windows 7 Extended Security Updates for patching my operating system,  and so my intent was to get 0Patch only for purposes of patching Office software.

            • #2319159
              Paul T
              AskWoody MVP

              Given the cost of W7ESU I would seriously consider dumping it in favour of 0patch.

              cheers, Paul

              1 user thanked author for this post.
              • #2319519
                EP
                AskWoody_MVP

                the prices of W7ESU will go up in years 2021 and 2022 so switching to 0patch would be a better option

    Viewing 21 reply threads

    Please follow the -Lounge Rules- no personal attacks, no swearing, and politics/religion are relegated to the Rants forum.

    Reply To: MS-Defcon 2 – Here comes December

    You can use BBCodes to format your content.
    Your account can't use Advanced BBCodes, they will be stripped before saving.

?
This website collects data via Google Analytics. Click here to opt in. Click here to opt out.
×