MS-Defcon 2 – Here comes December

[Susan Bradley]

Microsoft is out with their December releases.  The blog post today focuses on something that a LOT of us complained about last month:  The lack of in
[See the full post at: MS-Defcon 2 – Here comes December]

Susan Bradley Patch Lady

8 users thanked author for this post.

skeptamistic, rontpxz81, Pim, Fred, SueW, abbodi86, Kirsty, geekdom

Reply | Quote

[PKCano]

AKB 2000003 has been updated for Group B Win7 (ESU) and Win8.1 on December 8, 2020.

There is a Security-only Update for those with Win7 ESU subscriptions.
There was no December IE11 CU for Win7.

December Rollup KB4592471 Download 32-bit or 64-bit for those with Win7 ESU subscriptions.

You must have at least the August Servicing Stack KB4570673 previously installed to receive these updates)

There is a December Servicing Stack  KB4592510 – Download 32-bit or 64-bit for those with Win7 ESU subscriptions.

There is a revised Licensing Preparation Package KB4575903 dated 7/29/2020 for Win7 ESU subscriptions, if you need it.

There were no .NET updates listed for Win7.

7 users thanked author for this post.

jburk07, skeptamistic, SueW, lanceboil, Fred, Microfix, abbodi86

Reply | Quote

[Microfix]

Martin Brinkmann over on ghacks has his usual thorough overview.
Note: W10 version 1903 has reached end of servicing today, 8th December 2020

No problem can be solved from the same level of consciousness that created IT- AE

2 users thanked author for this post.

skeptamistic, Fred

Reply | Quote

[Moonbear]

@PKCano

Shouldn’t the the KB number for the December SSU download links be 4592510 instead of 4592501?

Hovering over the link is the only way I noticed the difference

• This reply was modified 1 month, 2 weeks ago by Moonbear.

1 user thanked author for this post.

PKCano

Reply | Quote

[geekdom]

Make your backups now:

Sometimes defer, pause, hide may not function well.
Sometimes you click: Check for Updates.
Sometimes there are new unannounced update rules.
Sometimes updates are confusing.

Every day is backup day.

———

Windows 2004 TestBeta
December 8, 2020

Checked for updates with WuMgr:
2020-12 Cumulative Update for Windows 10 Version 2004 for x64-based Systems (KB4592438)

Installed update from WuMgr:
2020-12 Cumulative Update for Windows 10 Version 2004 for x64-based Systems (KB4592438)

I was prompted to reboot, so I rebooted without error, and checked for updates again using WuMgr. There were no further updates.

Using WuMgr, 2020-12 Cumulative Update for Windows 10 Version 2004 for x64-based Systems (KB4592438) showed under installed updates.

Beta Work {Got backup and coffee}
offline▸ Win10Pro 2004.19041.572 x64 i3-3220 RAM8GB HDD Firefox83.0b3 WindowsDefender TRV=1909 WuMgr
offline▸ Win10Pro 20H2.19042.685 x86 Atom N270 RAM2GB HDD WindowsDefender WuMgr GuineaPigVariant
online▸ Win10Pro 2004.19041.746 x64 i5-9400 RAM16GB HDD Firefox86.0b2 WindowsDefender TRV=2004 WuMgr

Reply | Quote

[Seff]

“WHY are we still getting Office 2010 updates when it is officially out of support as of October 2020?”

Maybe they’re getting a bit nervous about the success and broadening appeal of 0patch? Every 0patched typically Windows 7 machine is potentially a non-upgrade to Windows 10. And yet, by the same token, every Office 2010 installation that they themselves keep maintained is potentially a non-upgrade to Office 365.

It is a strange thing, certainly.

Reply | Quote

[abbodi86]

No it’s not

as i remember, Office 2007 got 3 months updates after EOS
call it generosity, call it delayed security fixes, it’s sill a good thing 🙂

5 users thanked author for this post.

jburk07, Pim, SueW, lanceboil, Microfix

Reply | Quote

[Geo]

I used 0Patch when I had my W7 machine and I still use it with W10.

Reply | Quote

[rebop2020]

I am  looking forward to your recommendations on the Office 2010 patches. Especially since they seem like vulnerabilities and I recently told Windows Update NOT to check for other Microsoft products. I use Office 2010 every day.

2 users thanked author for this post.

rontpxz81, RTEsysadmin

Reply | Quote

[Susan Bradley]

I would flip it back to all products.  This ensures that anything you have installed will get updates.

Susan Bradley Patch Lady

1 user thanked author for this post.

RTEsysadmin

Reply | Quote

[rebop2020]

Thanks. I shall.

 

So hard to figure out what the right thing to do is for any of this…

1 user thanked author for this post.

RTEsysadmin

Reply | Quote

[DriftyDonN]

nothing offered today on any of my units….

Reply | Quote

[Fred]

Installed the december20 updates/patches/repairs “windows10.0-kb4592449-x64_aa193efa8432018464d6173c497ce3de71a581e2[.]msu”
W10Pro64 v.1909 is now up to build:18363.1256
It’s a pitty that Microsoft doen’t give the detailed info of the repairs….. this time it looks better/okay(?) with some graphical hickcups

What security patches were made is a mystery to me; does anyone has a clue?
—besides  https://thehackernews.com/2020/12/microsoft-releases-windows-update-dec.html?utm_source=social_share

~ ~ ~

• This reply was modified 1 month, 2 weeks ago by Fred.

1 user thanked author for this post.

rontpxz81

Reply | Quote

[Pim]

Besides Office 2010 updates it is also noteworthy that Win10 v1809 received an update. Originally EOL for v1809 was planned for May 2020, but because of the pandemic this has been extended to November 2020. But this month an update was released for v1809, after the official EOL.

ASRock Beebox J3160 - Win7 Ultimate x64
Asus VivoPC VC62B - Win7 Ultimate x64
Dell Latitude E6430 - Win7 Ultimate x64
Dell Latitude XT3 - Vista Ultimate x86 (still...)
Asus H170 Pro Gaming - Win10 Pro 1809 x64

Reply | Quote

[abbodi86]

v1809/v1803 Enterprise/Education editions are still supported until May 2021

i also would not be surprised if v1809 Pro/Home get December updates
it will not be the first time they don’t stick ti EOS date precisely

1 user thanked author for this post.

Pim

Reply | Quote

[Pim]

I see. I just checked and saw that on my v1809 Pro system there were no updates, so it is apparently only for Enterprise/education.

ASRock Beebox J3160 - Win7 Ultimate x64
Asus VivoPC VC62B - Win7 Ultimate x64
Dell Latitude E6430 - Win7 Ultimate x64
Dell Latitude XT3 - Vista Ultimate x86 (still...)
Asus H170 Pro Gaming - Win10 Pro 1809 x64

1 user thanked author for this post.

abbodi86

Reply | Quote

[EP]

@Pim

fwwaahahaha – I guess the KB4592440 CU for v1809 only works for Enterprise/Education AND LTSC 2019 editions (using the very latter)

try downloading & installing KB4592440 manually from MS Catalog and check on your 1809 pro system if it works or if it does not (and says “not applicable”) [or perhaps fails with “we couldn’t complete the updates – undoing changes” message]

• This reply was modified 1 month, 2 weeks ago by EP.

1 user thanked author for this post.

Pim

Reply | Quote

[abbodi86]

Since Enterprise/Education editions are based on CBS ProfessionalEdition, i believe you can still install 1809 LCU manually on Pro edition

similar to 1803 Pro, although it EOL was in November 2019, you can still install LCU manually

1 user thanked author for this post.

Pim

Reply | Quote

[Pim]

Thanks for responding EP and abbodi86. I just tried that and it failed. After the reboot I got the message “We couldn’t complete the updates. Undoing changes. Don’t turn off your computer”. I will try one more time, but it would seem it is not possible.

ASRock Beebox J3160 - Win7 Ultimate x64
Asus VivoPC VC62B - Win7 Ultimate x64
Dell Latitude E6430 - Win7 Ultimate x64
Dell Latitude XT3 - Vista Ultimate x86 (still...)
Asus H170 Pro Gaming - Win10 Pro 1809 x64

2 users thanked author for this post.

Lawrence Patterson, abbodi86

Reply | Quote

[abbodi86]

Yeah, i just inspected KB4592440 cab file, and they added “Microsoft-Client-Licensing-SupplementalServicing” component, which will prevent installation on Pro

they added the same component for v1607 and v1703 LCU too, but not v1803

this component restriction can be bypassed in the same concept as Win7 ESU

W10UI update installer script already have that concept, you may give it a try
https://github.com/abbodi1406/WHD/raw/master/scripts/W10UI_8.9.zip
just place KB4592440 msu file next to the script, run as admin and then press zero 0 to start

3 users thanked author for this post.

GoneToPlaid, Microfix, Pim

Reply | Quote

[Pim]

Thank you abbodi86! I will certainly try it (probably tomorrow (Dutch time)) and report back. Thanks again!

ASRock Beebox J3160 - Win7 Ultimate x64
Asus VivoPC VC62B - Win7 Ultimate x64
Dell Latitude E6430 - Win7 Ultimate x64
Dell Latitude XT3 - Vista Ultimate x86 (still...)
Asus H170 Pro Gaming - Win10 Pro 1809 x64

Reply | Quote

[Pim]

@abbodi86 I can confirm that I was able to install KB4592440 using your script. Thanks! I can now wait a few more months before upgrading to a newer Windows 10 version.

Does the script also install .NET updates? This month there was no .NET update, so I could not test that.

Thanks again for your help and your script!

ASRock Beebox J3160 - Win7 Ultimate x64
Asus VivoPC VC62B - Win7 Ultimate x64
Dell Latitude E6430 - Win7 Ultimate x64
Dell Latitude XT3 - Vista Ultimate x86 (still...)
Asus H170 Pro Gaming - Win10 Pro 1809 x64

1 user thanked author for this post.

abbodi86

Reply | Quote

[abbodi86]

@Pim
I don’t think they restrict .NET updates (i just checked KB4585207 for v1607)
but if they do, then the script would be able to handle it in the same way

1 user thanked author for this post.

Pim

Reply | Quote

[EP]

that Microsoft-Client-Licensing-SupplementalServicing component might have also been added to the latter 1709 CUs as well.

speaking of 1803, the KB4537795 CU from late Feb. 2020 was the last one to actually install on 1803 home/pro editions. the next CU from Mar. 2020 (KB4540689) would produce a “not applicable” message when attempting to install on 1803 Home/Pro and would only work with enterprise/education editions of 1803

btw, no problems installing KB4592440 CU on my bedroom pc (an old HP desktop computer) running LTSC 2019 (just went right to the desktop after the working on updates 100% message)

edit – maybe ask doriel if he’s still running 1809 lately – last time I checked, he was running 1809 enterprise on at least one of his machines.

• This reply was modified 1 month, 2 weeks ago by EP.

Reply | Quote

[abbodi86]

I just checked KB4580328, it doesn’t have the commponent

yes, launching msu file directly will not work for Pro
you must extract the cab file and install it with Dism.exe /Add-Package

Core (Home) edition is totally blocked

Reply | Quote

[CraigS26]

I see ONLY the Dec CU in wushowhide “HideBox” but the Auto-Chk for Updates is dragging its feet; Images ready & Never have an issue with CU’s…….

IF you then clk Check for Updates in Settings Do You get only what you see in wushowhide Now, or Might there be drivers, etc. loaded that are Not shown? Oops, just remembered I have in GP a setting Not to Install Drivers, BUT are there any other Uh-Oh’s to expect?

W10 Pro 20H2 / Hm-Stdnt Ofce '16 C2R / HP Envy Desktop-Ethernet/ 12 GB / 256G SSD + 1 TB HDD / i5-8400 Coffee Lake/ GP=2 + FtrU=Semi-Annual + Feature Defer = 1 + QU=0

• This reply was modified 1 month, 2 weeks ago by CraigS26.
• This reply was modified 1 month, 2 weeks ago by CraigS26.

Reply | Quote

[WCHS]

CraigS26 wrote:

Oops, just remembered I have in GP a setting Not to Install Drivers,…

Don’t depend on this GP setting to prevent drivers from appearing in a ‘Download/install’ or in a ‘Check for Updates.’ I have this GP setting and a driver sometimes appears anyway, although I am able to head it off at the pass by hiding it since I have GP=2, notify download/install.

This is to say that “Check for updates” is taking a risk.

4 users thanked author for this post.

rontpxz81, RTEsysadmin, CraigS26, Coldheart9020

Reply | Quote

[EP]

CraigS26 & WCHS:

use “metered” internet connections (set both WiFi and Ethernet/LAN connections to metered)

I check for updates and I either get no driver updates listed or if they do they don’t get automatically installed, cuz of metered connections

2 users thanked author for this post.

CraigS26

Reply | Quote

[bbearren]

I got

KB4592438 Cumulative Update for Windows 10 Version 20H2 for x64-based Systems

installed after my Active hours (8:00 AM to 2:00AM).  I had clicked “Check for updates” in the late evening yesterday, but it hadn’t shown up at that time.

Everything is working normally, nothing to report.

Create a fresh drive image before making system changes/Windows updates, in case you need to start over!

"When you're troubleshooting, start with the simple and proceed to the complex."—M.O. Johns

"Experience is what you get when you're looking for something else."—Sir Thomas Robert Deware

Computer Specs

1 user thanked author for this post.

rontpxz81

Reply | Quote

[Carl D]

Decided to take the usual early plunge into this month’s updates (making sure I have a Macrium image to revert back to if needed, of course).

I was offered the usual cumulative update and Windows Defender updates but… what’s this? There was also a .NET Preview Update as well????

What is it with these preview updates? Please take the hint MS – I don’t want them, especially on Patch Tuesday!! And, I don’t believe most “normal” users want them either. Isn’t that what the Insider Program is supposed to be for – testing updates before releasing them to the “general masses” on Patch Tuesday?

Anyway… I shut the Windows Update session down before any updates were installed and I’m back to where I was before I checked for updates (thanks to my Macrium image) and I’m going to stay there until these preview updates turn into “regular” ones.

Gigabyte GA-B250M-D3H Motherboard, Intel i5-7600 CPU, 32GB RAM, NVIDIA GeForce GTX 1050 Graphics Card, 1x Samsung 860 EVO 250GB SSD, 1x Samsung 850 EVO 250GB SSD, Windows 10 Professional 20H2 64bit.

1 user thanked author for this post.

RTEsysadmin

Reply | Quote

[CraigS26]

Daily Auto-Chk finally showed the Update. Oddly, for my 1909-64 Only KB4592449 Dec CU installed and I don’t see the SSU in Control Panel History as is usual – or MSRT. I clk’d to Update 2016 Office ’16 C2R.

All went rapidly and without issue.

W10 Pro 20H2 / Hm-Stdnt Ofce '16 C2R / HP Envy Desktop-Ethernet/ 12 GB / 256G SSD + 1 TB HDD / i5-8400 Coffee Lake/ GP=2 + FtrU=Semi-Annual + Feature Defer = 1 + QU=0

• This reply was modified 1 month, 2 weeks ago by CraigS26.

Reply | Quote

[WCHS]

CraigS26 wrote:

…I don’t see the SSU…

I don’t believe that there is an SSU this month (December 2020) for the CU. MS Bulletin for KB4592449 lists SSU KB4586863, released Nov 10.

2 users thanked author for this post.

Geo, CraigS26

Reply | Quote

[Susan Bradley]

There isn’t.  Off the top of my head I believe it’s Win7 and 2004/20h2 only.

Susan Bradley Patch Lady

Reply | Quote

[b]

CraigS26 wrote:

… I don’t see … MSRT.

MSRT is only released in May, August, November, February:

Microsoft releases the MSRT on a quarterly cadence

1 user thanked author for this post.

CraigS26

Reply | Quote

[Alex5723]

Carl D wrote:

I’m going to stay there until these preview updates turn into “regular” ones.

That will happen on Jan. 2021 patch Tuesday.
Use WUmgr to hide preview updates.

1 user thanked author for this post.

Carl D

Reply | Quote

[Carl D]

Thanks, Alex.

First time I have ever seen preview updates released at exactly the same time as Patch Tuesday updates. Hope this isn’t the “new normal” from now on.

This whole idea of treating Windows users as unpaid beta testers (especially Windows 10 Professional users) is starting to become a little tiresome after all these years.

Gigabyte GA-B250M-D3H Motherboard, Intel i5-7600 CPU, 32GB RAM, NVIDIA GeForce GTX 1050 Graphics Card, 1x Samsung 860 EVO 250GB SSD, 1x Samsung 850 EVO 250GB SSD, Windows 10 Professional 20H2 64bit.

1 user thanked author for this post.

rontpxz81

Reply | Quote

[WCHS]

Carl D wrote:

First time I have ever seen preview updates released at exactly the same time as Patch Tuesday updates.

I’m still on 1909 and I’ve filtered out these .NET previews by setting the GUI Feature Update deferral to 1 (and not 365, because I have TRV=1909). The GUI is gone in 2004 and 20H2, but to accomplish the same, take a look at using GP following the instructions and screenshots at AKB 2000016 Guide, Section 5, Method 2, Group Policy settings under Windows Update for Business > enabling Select when Preview Builds and Feature Updates are received, etc, (screenshots are at #2275043)

4 users thanked author for this post.

skeptamistic, Perq, rontpxz81, Carl D

Reply | Quote

[Carl D]

Funny thing is – its actually last month’s .NET preview???

Maybe it’ll disappear in the next day or so?

Gigabyte GA-B250M-D3H Motherboard, Intel i5-7600 CPU, 32GB RAM, NVIDIA GeForce GTX 1050 Graphics Card, 1x Samsung 860 EVO 250GB SSD, 1x Samsung 850 EVO 250GB SSD, Windows 10 Professional 20H2 64bit.

Attachments:

You must be logged in to access attached files.

Reply | Quote

[Susan Bradley]

You clicked on check for updates?  Check for updates in Windows 10 is “please install anything including .net preview updates”.

 

 

Susan Bradley Patch Lady

2 users thanked author for this post.

RTEsysadmin, Carl D

Reply | Quote

[Carl D]

Hi, Susan.

Yes, I did. I have updates blocked with Windows Update Blocker until just after Patch Tuesday every month. But, I’ve never seen any preview updates appear until this month.

I’ll start using WUmgr from now on as Alex suggested.

Gigabyte GA-B250M-D3H Motherboard, Intel i5-7600 CPU, 32GB RAM, NVIDIA GeForce GTX 1050 Graphics Card, 1x Samsung 860 EVO 250GB SSD, 1x Samsung 850 EVO 250GB SSD, Windows 10 Professional 20H2 64bit.

Reply | Quote

[Alex5723]

abbodi86 wrote:

i also would not be surprised if v1809 Pro/Home get December updates

1809 got Dec. KB4592440

Reply | Quote

[Pim]

Did you get it? My v1809 Pro system did not.

ASRock Beebox J3160 - Win7 Ultimate x64
Asus VivoPC VC62B - Win7 Ultimate x64
Dell Latitude E6430 - Win7 Ultimate x64
Dell Latitude XT3 - Vista Ultimate x86 (still...)
Asus H170 Pro Gaming - Win10 Pro 1809 x64

Reply | Quote

[EP]

that’s because 1809 Home/Pro editions went EOL in November 2020.

KB4594442 and KB4586839 seem to be the last updates you can install on Home & Pro 1809

see one of my posts above – get KB4592440 from MS Update Catalog and try to install it

• This reply was modified 1 month, 2 weeks ago by EP.

Reply | Quote

[Microfix]

No problems here so far with SMQR’s: Win8.1 Pro x64/ Win7 Pro ESU x86
no telemetry re-activation with this months patches on either OS,
event viewer logs clean and local canon scanner/ printer working as intended.

No problem can be solved from the same level of consciousness that created IT- AE

1 user thanked author for this post.

DrBonzo

Reply | Quote

[Matthew]

The Computer World article is out at https://www.computerworld.com/article/3600669/december-patch-tuesday-round-up-winding-down-for-the-year.html.

1 user thanked author for this post.

SueW

Reply | Quote

[anonymous]

Is the Windows update download stuck at 100% quite common?

Happened on my works PC few month back, and now my personal PC. Reboot fixed it in both instances

Reply | Quote

[PKCano]

Are you referring to Windows 10?
I have seen this happen in Win10. Usually, if you just leave it alone. it will resolve itself eventually.

Reply | Quote

[anonymous]

Yea Win10, left it for 30 mins, nothing. Task Manager wasnt showing any activity to suggest it was installing

Reply | Quote

[anonymous]

x3 W10 20H2. All good.

I deploy ‘2020 12’ & ‘.NET Framework’ syntax in the Microsoft Update Catalog, to view Updates.
https://www.catalog.update.microsoft.com/Search.aspx?q=2020-12

MS has rearranged a couple of URL items, that I use to interrogate Updates.
Microsoft Security Response Center. https://www.microsoft.com/en-us/msrc?rtc=1
Security Update Guide. https://msrc.microsoft.com/update-guide

Reply | Quote

[anonymous]

Did anyone get the .net preview update offered? Mine installed, but isn’t in the list of installed updates. However half way through installation Windows told me to reboot the machine to finish updates. Bit odd half way through installation. I didn’t as didn’t want to break anything while it was still installing.

Just seems odd as there is no record of the update installing

Reply | Quote

[b]

Preview updates are normally listed under Other updates, not Quality updates.

Reply | Quote

[anonymous]

I miss the old days when the notice to block updates was posted a day or two before patch Tuesday. I assume we will get the all clear to install December patches sometime after Christmas but before the January updates are released?

Reply | Quote

[PKCano]

That sounds about right.

1 user thanked author for this post.

SueW

Reply | Quote

[Susan Bradley]

This month based on how the calendar lands, the all clear will come at the end of the month.  See I see the start of the month to be when I make sure I am locked down.  The non security Office updates came out on the first Tuesday of the month (12/1) which is why I put the Defcon 2 at that time.  Otherwise for those with Office 2016 (non click to run) you might end up with those updates installed if you don’t put the block on it.  The old days are still here, I’m just being extra sure that you won’t get ANY updates installed until you want them.  It’s all due to how the first Tuesday of the month hit right on the first Office non security patching day.

Susan Bradley Patch Lady

1 user thanked author for this post.

SueW

Reply | Quote

[anonymous]

Win 10 Pro 1909 64 bit.   Downloaded December CU KB4592449 from MS Update catalog, standalone installed OK, test machine stable for 2 days.

Reply | Quote

[L95]

Susan:  For people such as myself who were planning on using 0Patch to patch Office 2010 once the end-of-life date was reached for the security updates,   is it OK for us to wait on installing 0Patch until Microsoft actually stops issuing the security patches for Office 2010?   The end-of life date was in October,  but as discussed in postings above,  Microsoft is still sending out security updates and might do so for one or more months to come (see posting above by abbodi86 which said   “as i remember, Office 2007 got 3 months updates after EOS”).   So I’m inclined to simply wait on installing 0Patch  until the security updates from Microsoft stop,  if you think it’s OK to do so.  I will appreciate your response.

Reply | Quote

[PKCano]

Yes, you can wait to start 0patch until MS stops updating Office 2010 for Office 2010 patches.
But don’t forget, 0patch Pro also patches other software as well.

1 user thanked author for this post.

L95

Reply | Quote

[L95]

PK:  Thanks for your response.  In my case,  I’ve been relying on my Windows 7 Extended Security Updates for patching my operating system,  and so my intent was to get 0Patch only for purposes of patching Office software.

Reply | Quote

[Paul T]

Given the cost of W7ESU I would seriously consider dumping it in favour of 0patch.

cheers, Paul

1 user thanked author for this post.

Alex5723

Reply | Quote

[EP]

the prices of W7ESU will go up in years 2021 and 2022 so switching to 0patch would be a better option

Reply | Quote

[Author]

Posts