MS-DEFCON 3: Get the October patches installed

Topic

New Reply

We’re seeing some funny business with the ancillary patches this month, but the mainstream Windows cumulative updates and Office patches look good to
[See the full post at: MS-DEFCON 3: Get the October patches installed]

12 users thanked author for this post.

HiFlyer, Morty, jburk07, LHiggins, deuce120, abbodi86, SueW, Coldheart9020, rontpxz81, geekdom, ymo1965, Alex5723

Reply | Quote

Replies

Even “good things” must come to an end, so I took advantage of the MS-DEFCON raise to finally update my Windows 10 1809 Home system to 1909. I used a build 18363.592 ISO to perform an in-place update and everything went fine.

Once the update to 1909 was complete I plugged back in the ethernet cable and ran wushowhide and hid the following patches:
– KB4580980 – 2020-10 Preview Cumulative Update for .NET Framework 3.5 and 4.8 for 1909
– KB4584229 – 2020-10 – Microsoft Edge Update for Windows 10 1909
– Samsung printer 4/22/2009 – 10.0.17119.1
– Intel – System – 2035.15.0.1807
– KB4023057 – 2020-09 Update to Windows 10 1909 for update reliability.

I let Windows update install the 2020-10 Cumulative Update (KB4577671), the Flash update (KB4580325) and this month’s crop of Office2013 patches. I manually installed the .NET Framework update released earlier in October (KB4578974) since it is no longer offered through Windows Update. So far it seems everything is running correctly without issues.

Looking forward to reading the Computerworld Woody on Windows article once it’s up, I’m interested in particular to see if there is any input regarding that “Intel – System” update that has recently shown up as available for my system and that several other users have been offered as well. I’m not keen on installing a MS driver update for hardware of other companies (here Intel), but I’d like to hear what’s the consensus on these driver updates.

Reply | Quote

Group B patchers and those updating Win7/8.1, see #2303933 for information.

4 users thanked author for this post.

L95, abbodi86, SueW, zat_so

Reply | Quote

I failed to install KB4579311. After several attempts, I did some research.

Apparently there are MANY issues with that update. Many people have serious problems after it successfully installed.

I have this one blocked on all my PCs. I don’t want to try this again.

Does anyone know what is going on there?

Byte me!

Reply | Quote

[geekdom]

What were your errors when you attempted KB4579311 installation?

How did you attempt installation?

Details are very useful information.

On permanent hiatus {with backup and coffee}
offline▸ Win10Pro 2004.19041.572 x64 i3-3220 RAM8GB HDD Firefox83.0b3 WindowsDefender
offline▸ Acer TravelMate P215-52 RAM8GB Win11Pro 22H2.22621.1265 x64 i5-10210U SSD Firefox106.0 MicrosoftDefender
online▸ Win11Pro 22H2.22621.1992 x64 i5-9400 RAM16GB HDD Firefox116.0b3 MicrosoftDefender

• This reply was modified 2 years, 11 months ago by geekdom.

Reply | Quote

I dutifully applied updates to my Win10Pro / 2004 systems this morning.  This was my first monthly update since upgrading to 2004 last week.  It went ok, but I did notice something odd.

I was offered the .NET CU (KB4578968) and the Win10 CU (KB4579311).  After they downloaded, it installed the .NET CU first.  When it finished, Windows Update displayed the Restart button … while the Win10 CU was still installing.  I’ve never seen that before.  Windows Update always waited until all the “pending restart” updates were installed before showing the button to prompt for the restart.  All of my systems showed this behavior.

I waited for the Win10 CU to complete before hitting the button, of course.  But is this behavior typical of 2004?  Did anyone else see this?

2 users thanked author for this post.

jburk07, PFC

Reply | Quote

I’ve seen that behavior several times. I always wait till everything is installed before restarting.

1 user thanked author for this post.

jburk07

Reply | Quote

Quoted from today’s ComputerWorld article:  “On the downside, we’re still getting sporadic reports of problems — from installation bugs to networking problems — none of which seem to be replicated to a great extent. Many of the problems appear to be related to the third-party driver scan ‘Windows can’t verify the publisher of this driver software’ blocks. As I mentioned a couple of weeks ago, that’s a feature, not a bug (honest!), but it may feel like you’ve been bit.”

EP referred to the Born explanation as well on the 17th, but that’s it.  Nobody else has said anything.

When remarks like these appear, it makes me wonder about passing on the update in question.  Namely, this months Win 8.1 security only update 4580358.

Not thrilled about the prospect of having drivers gooped up.  Anyone else with Win 8.1 having the same thoughts?

Win 8.1 (home & pro) Group B, Linux Dabbler

Reply | Quote

I updated several Win8.1 a while back with the Rollup (which contains the Security-only patch) and have had no problems. One is my main driver too.

1 user thanked author for this post.

Purg2

Reply | Quote

@ PK post # 2308231

While that’s good information, the notion of “future” effects still lurks, as one can’t be sure when driver updates will occur & if they’ll be hosed ‘cus m$ only wants us to use W10, shakesfist.

Kinda like, yeah, it’s cool for now, but who knows about what’s ahead, le sigh.  Thanks for playing though.  😎

Win 8.1 (home & pro) Group B, Linux Dabbler

Reply | Quote

[geekdom]

geekdom wrote:

What were your errors when you attempted KB4579311 installation?

How did you attempt installation?

Details are very useful information.

• This reply was modified 2 years, 11 months ago by geekdom.

Installed via windows update. I did not try downloading it as I read that others had the same issue either way.

“There were some problems installing the updates, but we will try again later”.

Error provided was 0x0800f0922

Using the Windows Features enable/disable, I have enabled all .net features that were not enabled and then rebooted.

I have also used the C: /properties disk cleanup including system areas.

Byte me!

Reply | Quote

This morning on my 1909 system, I successfully installed KB4578974, KB4580325 & KB4577671 and for some reason seem to be being offered KB4580386 – under the separate ‘Optional updates available’.

This seems odd since I have only this morning installed the actual security CU for Windows 10 1909 x64, and it cannot be hidden in wushowhide as I believe I hid it before October’s Patch Tuesday.

I’m assuming if I clicked on ‘Download and install’ it would disappear from the WU menu (since it’s not in wushowhide either hidden or can be hidden), but it is odd especially considering I’ve not had anything in the separate category in WU, I think ever before (or not that I can recall).

Reply | Quote

KB4580386 is a “C” Preview CU appearing under the Optional Patches. You do not want to install it. If you do not click on “Download and install now,” it will just sit there. Leave it alone.

Reply | Quote

The curiosity did get the better of me, thinking it would disappear. This was before I saw your post. It was ‘Getting things ready’ so I turned on metered connections, disabled the WU service, rebooted and then set to manual. Nothing in wushowhide, so rebooted again after turning after off metered connections.

It’s back to ‘Download and install’ again, and I will definitely be leaving it alone this time around. I just find it odd that it will allow me to install a Preview update for October, when the actual CU security update – which should supersede it – has already successfully been installed with a few reboots since then.

Reply | Quote

Susan still has the October updates for Office 2016, Office 2013, and Office 2010 on Defer.  What’s happening there?  I’m reading it as a No Go for those versions of Office.  Yes, I have four Oct. 13 updates waiting in my WU in Win 7.

Being 20 something in the 70's was much more fun than being 70 something in the 20's.

2 users thanked author for this post.

L95, SueW

Reply | Quote

I did not notice the Office patches were still marked as “Defer” from Susan, so I have already installed the October Office 2013 patches on my system and there seem to be no problems with those.

2 users thanked author for this post.

L95, jburk07

Reply | Quote

I already updated the 1909 cumulative and .Net, but i ran wushowhide again today, and for the first time ever, the feature update for 2004 showed up in the list under “Hide Updates”.

2 users thanked author for this post.

jburk07, Berserker79

Reply | Quote

[Berserker79]

I suppose you will want to hide the Feature Update to 2004 in wushowhide if you prefer to stay on 1909 for the time being. BTW, from your screenshot I noticed that in your WU window there is that “Download and install” box for the Feature Update to 2004: did that appear at the same time as you found 2004 in wushowhide? or was it there before?

• This reply was modified 2 years, 11 months ago by Berserker79. Reason: missing punctuation

Reply | Quote

If you want to be rid of the v2004 update, I suggest you follow the instructions in AKB2000013.

v2004 is still valid until May 11th 2021, so there’s no immediate rush to install it.

1 user thanked author for this post.

analogkid

Reply | Quote

My understanding is v2004 is “still valid” until December 14 2021. It is v1909 that has an end date of May 11 2021.

Reply | Quote

You’re right, I mistakenly said v2004 when I meant to say v1909. By “still valid”, I mean before v1909 reaches end of life. I should have been more specific.

Reply | Quote

Can someone please point me to the correct 4580325 Flash Player update for my 1909 x64 system?

Can’t figure out which one I need….
https://www.catalog.update.microsoft.com/Search.aspx?q=4580325

Reply | Quote

This appears to be the correct one (on the second page)

3 users thanked author for this post.

Cijan, jburk07, TJ

Reply | Quote

Ah, silly me: only looked at the first page.

Thanks @PKCano

Reply | Quote

That installed perfectly. As did 4577670 SSU before that, and afterwards 4577671 Cum 2020-10 and 4578974 .NET Framework 3.5 and 4.8 as well.

Thanks @Woody & Crew

1 user thanked author for this post.

jburk07

Reply | Quote

[geekdom]

pHROZEN gHOST wrote:

geekdom wrote:

What were your errors when you attempted KB4579311 installation?

How did you attempt installation?

Details are very useful information.

• This reply was modified 2 years, 11 months ago by geekdom.

Installed via windows update. I did not try downloading it as I read that others had the same issue either way.

“There were some problems installing the updates, but we will try again later”.

Error provided was 0x0800f0922

Using the Windows Features enable/disable, I have enabled all .net features that were not enabled and then rebooted.

I have also used the C: /properties disk cleanup including system areas.

I have installed successfully on 2 other PCs without any extra effort on my part. So I decided to give this another go.

This time I downloaded the install package from the MS catalog. It is the correct one for my hardware. I ran it and when it completed it asked me to restart. the usual blue updating windows screen appeared. At 92% it failed and rolled back changes.

I tried again but first I used MSCONFIG selective startup with no startup items. I disabled all non-MS services. I used task manager to disable all startup items. The same result occurred.

Clearly there is something amiss on this PC.

How do I look into this issue? Is there a log file that would provide a clue?

At the present time, this update has been hidden to prevent a pointless spin cycle.

Byte me!

Reply | Quote

Was there an error message associated with this update attempt?

Perhaps someone here has some further suggestions based on your information.

On permanent hiatus {with backup and coffee}
offline▸ Win10Pro 2004.19041.572 x64 i3-3220 RAM8GB HDD Firefox83.0b3 WindowsDefender
offline▸ Acer TravelMate P215-52 RAM8GB Win11Pro 22H2.22621.1265 x64 i5-10210U SSD Firefox106.0 MicrosoftDefender
online▸ Win11Pro 22H2.22621.1992 x64 i5-9400 RAM16GB HDD Firefox116.0b3 MicrosoftDefender

Reply | Quote

[geekdom]

I’m seeing Intel and Realtek updates through the Microsoft Store. Is anyone else seeing hardware updates through the Microsoft Store?

On permanent hiatus {with backup and coffee}
offline▸ Win10Pro 2004.19041.572 x64 i3-3220 RAM8GB HDD Firefox83.0b3 WindowsDefender
offline▸ Acer TravelMate P215-52 RAM8GB Win11Pro 22H2.22621.1265 x64 i5-10210U SSD Firefox106.0 MicrosoftDefender
online▸ Win11Pro 22H2.22621.1992 x64 i5-9400 RAM16GB HDD Firefox116.0b3 MicrosoftDefender

• This reply was modified 2 years, 11 months ago by geekdom.

Reply | Quote

Woody, I know you’re saying here that the mainstream Windows cumulative updates and Office patches look good to go.  And we’re at DEFCON 3 now.  But why does Susan’s Master Patch List still show all the October 13th updates (for both Win 10 and Win 8.1) with a status of “Defer”?  Is that “Defer” recommendation only applicable to business users?

2 users thanked author for this post.

wooly, Charlie

Reply | Quote

Did 3 Desktops today with no problems so far 🙂

Will do the Laptop tomorrow.

KB 4578974 cum .NET, KB 4580325 Flash, KB 4577671 cum 1909 18363.1139, KB 4577670 SSU (included with cum 1909).

Don't take yourself so seriously, no one else does 🙂
All W10 Pro at 22H2,(2 Desktops, 1 Laptop).

1 user thanked author for this post.

jburk07

Reply | Quote

[WCHS]

same for me for my two laptops … no problems so far, either.

• This reply was modified 2 years, 10 months ago by WCHS.

1 user thanked author for this post.

jburk07

Reply | Quote

[WCHS]

WCHS wrote:

same for me for my two laptops … no problems so far, either.

• This reply was modified 2 years, 10 months ago by WCHS.

I have to amend that. After installing the Oct updates and later powering down for the night, the login this morning was slow on the uptake because my password was rejected. After 3 or 4 attempts and then pausing to figure out what to do next, I saw it accepted. (I have an MS-account sign-in). Just to be sure that this was not a persistent problem, I powered off and powered up again to login once more — no problem then. It might have been that the wi-fi connection was lagging behind or that there were a few more steps in the background after the updates for password recognition. Happily, the problem does not persist.

Reply | Quote

Updated my HP ProBook G2 Laptop today (same updates) and something weird happened. After the install/restart for the updates, I noticed that “Check for Updates” was continually running. It wouldn’t stop (even though the network wasn’t showing any usage) so I clicked on “Pause Updates for 7 days” and it made no difference. Finally I had to restart again to get it to stop checking for updates. Seems ok now but I have never had that happen before.

Don't take yourself so seriously, no one else does 🙂
All W10 Pro at 22H2,(2 Desktops, 1 Laptop).

Reply | Quote

Windows 10 Pro – Version: 1909

Can anyone confirm that these are the only updates available for October:

• KB4580325
• KB4578974
• KB4577671

Thank you.

Reply | Quote

All October Patches:
KB4580325 = Oct adobe flash update
KB4578974 = Oct CU for .NET
KB4577671 = https://support.microsoft.com/en-us/help/4577671/windows-10-update-kb4577671
read the link first!

No problem can be solved from the same level of consciousness that created IT- AE

Reply | Quote

In MS bulletin for KB4577671, it says

System and user certificates might be lost when updating a device from Windows 10, version 1809 or later to a later version of Windows 10. Devices will only be impacted if they have already installed any Latest cumulative update (LCU) released September 16, 2020 or later and then proceed to update to a later version of Windows 10 from media or an installation source which does not have an LCU released October 13, 2020 or later integrated.

I am version 1909, TargetReleaseVersion=1909. I have the KB4577671 patch installed (Oct 13 CU). I have iso files created from the Media Creation Tool — for 1909, created 5/27/2020, i.e., just before 2004 was released) and for 2004, created 9/15/2020, i.e., a month before 20H2 was released).

Does this MS statement mean that when using these iso files, I may have difficulty reinstalling 1909 (or reinstalling 2004 after I move to it)??

If not, what DOES it mean?

Reply | Quote

It means you will be impacted if you, from this point forward, go to 2004 from your current installation of 1909 using the .iso you created back in September. However, if you manage to “slipstream” in the October patch for 2004 into the .iso from September somehow, then you won’t be affected. In a nutshell, that’s what MS’s little “explanation” means.

If you don’t want to have any problems, and you do indeed want to go to 2004 and not 20H2 then, at this point in time, it would be advisable to uninstall the October LCU and then proceed to use the .iso to go to 2004 from 1909.

In the same bulletin, MS says that, to avoid being affected, use WU to do the update from 1909 to 2004 or 20H2. Since 20H2 is now out on the street, WU won’t offer you 2004.

Reply | Quote

It also means that your security certificates used for encrypting any files will be lost, along with your system security certificates as well. I’ve never had that happen (loss of system certificates) but it could be disastrous. The loss of your personal certificates will make it impossible to view files you’ve encrypted on the system, such as any with very sensitive personal data that you’ve told Windows to encrypt for you. From what I recall reading a few years ago, there are some certificate recovery methods/programs that might be usable but there’s NO guarantee they will work.

Reply | Quote

anonymous wrote:

If you don’t want to have any problems, and you do indeed want to go to 2004 and not 20H2 then, at this point in time, it would be advisable to …

The only reason I have these iso’s is to have them handy in case something goes wrong with the version I am on. It looks like iso files made prior to Oct 13 are not any good any more once one updates to the Oct 13, 2020 CU and or any monthly CU afer that.

But, I could sooner or later reset TargetReleaseVersion from 1909 to 2004 and move to 2004 that way, couldn’t I? (Then I wouldn’t be using the 2004 iso).

I am Win10, Pro.

Reply | Quote

Yes, it you are on 1909 and set TargetReleaseVersion to 2004, WU will offer you 2004.
Or you could set Feature deferral to greater than the number of days since 20H2 release (Oct 20) instead of using TRV, and WU will offer you 2004.

Either way, you will get the current version instead of a version before Sept 2020.

1 user thanked author for this post.

jburk07

Reply | Quote

PKCano wrote:

Either way, you will get the current version instead of a version before Sept 2020.

I’m confused:
Do you mean to say “Either way, you will get a version before Sept 2020 instead of the current version”

version before Sept 2020 = 2004 (given that I am now on 1909 and that 2004 was released May 27, 2020)
current version = 20H2 (given that 20H2 was released Oct 20, 2020)

Reply | Quote

PKCano wrote:

Either way, you will get the current version instead of a version before Sept 2020.

Either way, you will get the current version instead of a version before Sept 2020.

Reply | Quote

PKCano wrote:

you will get the current version

What IS the current version? I thought it was 20H2 now. I want 2004 (20H1), which is no longer the current version, right?

Reply | Quote

The discussion is about upgrading from 1909 to 2004, I believe. I did not mention upgrading from 1909 to 20H2.

Reply | Quote

OK. that straightens it out.

I have trouble with the term “the current version”, thinking it always refers to the Microsoft universe.

Reply | Quote

anonymous wrote:

It means you will be impacted if you, from this point forward, go to 2004 from your current installation of 1909 using the .iso you created back in September.

So what about RE-INSTALLING a version that I am on (and not moving to a newer version)? For example, if I am on 1909 and I need to re-install 1909? Or, if I am on 2004 and I need to re-install 2004?

Reply | Quote

WCHS wrote:

So what about RE-INSTALLING a version that I am on (and not moving to a newer version)? For example, if I am on 1909 and I need to re-install 1909? Or, if I am on 2004 and I need to re-install 2004?

Could a MVP answer this? The question is in the context of having now installed the 1909 October CU, whose MS-bulletin says something about losing System and user certificates, if you try to use a 1909 iso or 2004 iso created before Oct 13. See #2308633

Reply | Quote

“MS-DEFCON 3: Get the October patches installed”

Start a topic on the subject (your question) 🙂

Reply | Quote

I am being offered 20H2 in updates, but not being offered the October cumulative update for 2004.

This happened before when I was running 1909 and was offered 2004. Then no more cumulative updates were offered for 1909…

Any ideas what’s up with that? Is it Microsoft trickery, or is something going on elsewhere in my machine?

Windows 10 Pro 22H2

Reply | Quote

What method are you using in GP to stay on 2004, Deferrals or TRV?

No problem can be solved from the same level of consciousness that created IT- AE

Reply | Quote

Do you have Home or Pro?
What settings do you have related to WU? Home: any Pause? Pro: any Pause, Quality deferrals, TargetReleaseVersion setting?
Are you using or have ever installed an update blocker?

Reply | Quote

I am running Windows 10 v1909 on an Acer laptop from 2016 and in a Parallels virtual machine on a 13-inch MacBook Pro 2020.

I downloaded and installed KB4577670, KB4577671, and KB4578974 from the Update Catalog, owing to my general distrust of the Windows Update mechanism.

Both machines updated successfully to 18363.1139.

No plans to touch v2004 or v20H2 anytime soon, not even with a fifty-foot pole. v1909 so far has been very stable.

1 user thanked author for this post.

rontpxz81

Reply | Quote

Microfix wrote:

What method are you using in GP to stay on 2004, Deferrals or TRV?

Have been using wushowhide.

Windows 10 Pro 22H2

Reply | Quote

PKCano wrote:

Do you have Home or Pro?
What settings do you have related to WU? Home: any Pause? Pro: any Pause, Quality deferrals, TargetReleaseVersion setting?
Are you using or have ever installed an update blocker?

Thanks, but I figured it out! I had to look a level deeper in gpedit… under Windows Update > Windows update for Business. I had to enable the policy in there for “Select when preview builds and feature updates are received”.

Running Win 10 Pro 2004, with gpedit “Configure auto updates” policy configured for option “2”, “Notify for download…”.

Had been using wushowhide to hide feature updates with success up until Win 10 1909. No deferrals in effect, but I assume that what has happened is that at some point Windows Update no longer offers quality updates if you have not “Deferred” an available feature update.

The feature update deferral is not available in my advanced Windows Update settings for some reason, but rather I have a long list of “*some settings are managed by your organization”.

Windows 10 Pro 22H2

Reply | Quote

See AKB2000016 Guide to Windows Update Settings for Win10 for the location of the settings in 2004 (Section 5). Deferrals are there. There are screenshots below the text portion – go to the bottom.

2 users thanked author for this post.

JohnW, Microfix

Reply | Quote

PKCano wrote:

See AKB2000016 Guide to Windows Update Settings for Win10 for the location of the settings in 2004 (Section 5). Deferrals are there. There are screenshots below the text portion – go to the bottom.

Yes, that section 5 procedure is exactly what I stumbled onto earlier and it works. I was not previously aware of that move for deferrals to “Windows Update for Business in Group Policies.”

That works. The other surprise was that quality updates are apparently no longer available until you defer the feature update.

Deferred 20H2 for 365 days, and then the quality updates for October popped right up. All updated now! Thanks!

Windows 10 Pro 22H2

Reply | Quote

anonymous wrote:

In the same bulletin, MS says that, to avoid being affected, use WU to do the update from 1909 to 2004 or 20H2. Since 20H2 is now out on the street, WU won’t offer you 2004.

Just updated from 1909 Pro Oct. updates to 2004 using Windows update.
Changed Feature deferrals from 365 days to 30 days and got 2004.

1 user thanked author for this post.

jburk07

Reply | Quote

Three questions about upgrading from Windows 10 version 1909 to version 2004:

1. Woody states that he is not quite ready to upgrade from Windows version 1909 to version 2004. Does anybody know when he will be ready? I don’t want to be doing complicated updating as we approach calendar yearend.

2. Woody states in his ComputerWorld article that, “First, if you saved a clean copy of 2004 using the instructions I published in September, follow the instructions on the Windows Installation Tool site to either upgrade your system in-place, or perform a fresh install from scratch.” What is the difference between “upgrade your system in-place” and “perform a fresh install from scratch”?

3. Is there any advantage to using a saved ISO of 2004 to upgrade from version 1909 instead of simply using Windows Update? I have always used Windows Update in the past, but I did create and save an ISO of version 2004 on October 5th.

Windows 10 Pro version 1909 build 18363.1082

1 user thanked author for this post.

Reply | Quote

280park wrote:

Does anybody know when he will be ready?

When 2004 is stable.

280park wrote:

What is the difference between “upgrade your system in-place” and “perform a fresh install from scratch”?

An in-place upgrade replaces the Win OS giving you three choices:
1. Save your apps and data (retains your third-party programs and your personal files)
2. Save your data only (saves your personal files, but you will have to reinstall your third-party software)
3. Save nothing (reinstalls Windows but does not preserve your programs or data)

Fresh install is a wipe everything clean install.

With Win10 Pro, you can use Group Policy to control the version of Win10 you get through Windows Update. If you do the upgrade through WU, it will be up-to-date.
If you use the ISO, Win10 will be out of date because the ISO is frozen at the date it is made. So afterward, you would need to do all the updating.
I would recommend using GP/WU as the best rout.

4 users thanked author for this post.

jburk07, 280park, JohnW

Reply | Quote

I have a problem with the October patches.  Normally, Windows Update downloads the patches. installs all, and then asks me to reboot.  Today, I had three updates when I did a Windows Update – flash, Windows 10, and .NET.  WU downloaded flash and .NET, and was downloading Win 10.  WU installed flash and .NET while Win 10 was downloading.  WU wanted a reboot.  I expected WU to install the Win 10 update before the reboot.  I waited five minutes after the download completed, and nothing.  So I rebooted.  No problems.  After the reboot, WU somehow had not saved the downloaded Win 10 update, so it downloaded it again.  Now WU tells me that the update is 100% downloaded, but it is NOT being installed.  I have no idea how to get this update installed – 2020-10 Cumulative Update for Windows 10 Version 2004 for x64-based Systems (KB4579311).

Reply | Quote

pHROZEN gHOST wrote:

I failed to install KB4579311. After several attempts, I did some research.

Apparently there are MANY issues with that update. Many people have serious problems after it successfully installed.

I have this one blocked on all my PCs. I don’t want to try this again.

Does anyone know what is going on there?

Well I finally got that update to install (KB4579311). The issue was not something the average user will find. 𝙎𝙤 𝙄 𝙥𝙪𝙩 𝙩𝙝𝙞𝙨 𝙝𝙚𝙧𝙚 𝙞𝙣 𝙝𝙤𝙥𝙚𝙨 𝙞𝙩 𝙝𝙚𝙡𝙥𝙨 𝙨𝙤𝙢𝙚𝙤𝙣𝙚 𝙚𝙡𝙨𝙚.

I used the disk manager to add a drive letter to the system reserved partition. Finding the SRP was not that easy. It wasn’t labelled “System Reserved” as they were in the past. So I labeled it “System Reserved” and gave it a drive letter “X”.

Lo and behold, in explorer, there were 0 bytes free. So I deleted a 450MB folder labelled Linux. I have no idea where that came from. I removed the drive label and rebooted. The update installed fine. I am now on Windows 10 v2004 19041.572  🙂

Byte me!

1 user thanked author for this post.

PKCano

Reply | Quote

As I had no idea how to get KB4579311 installed via WU, I decided to go to the MS catalog and download/install from there.  This was a third 300+ Mb download.  After the download, I clicked on the .msi file, and it installed without problem.  And then the WU window knew that I had installed the patch and needed a reboot.  Maybe WU was waiting to install the update after-hours?

1 user thanked author for this post.

jburk07

Reply | Quote

October patches installed with no problems to report on Win 8.1 🙂

Installation Successful: Windows successfully installed the following update: 2020-10 Security and Quality Rollup for .NET Framework 3.5, 4.5.2, 4.6, 4.6.1, 4.6.2, 4.7, 4.7.1, 4.7.2, 4.8 for Windows 8.1 and Server 2012 R2 for x64 (KB4579979)

Installation Successful: Windows successfully installed the following update: 2020-10 Security Monthly Quality Rollup for Windows 8.1 for x64-based Systems (KB4580347)

Win 10 ver. 22H2 x64

1 user thanked author for this post.

jburk07

Reply | Quote

I’m still in 1909, and still with Office 2010 . Curiouser and curiouser, though, when I updated today, I got security updates for Office 2010 programs.

Not only that, I got a security update for Adobe Flash. And I removed Flash a week or two ago.

Ghosts of programs past?

Reply | Quote

Not only that, I got a security update for Adobe Flash. And I removed Flash a week or two ago.

Ghosts of programs past?

No, Morty, I think not. Microsoft released an alleged flash removal update about a week or two ago but, as pointed out in a blog post here, it actually didn’t do a thing once installed.

MS has said that they’ll release a patch that gets rid of flash completely sometime soon. I believe they actually said at the end of the year, but we’ll see.

A question comes to mind: When you say you uninstalled Flash, did you use an uninstaller you may have downloaded from Adobe? If so, then all it did was uninstall Flash from your non-Microsoft browser(s).

Flash is “baked into” Internet Explorer and the legacy version of Microsoft’s Edge browser, so they are the only ones who can issue a patch to remove or disable its functionality completely. Due to its being “baked into” Internet Explorer, it’s also a core part of many versions of Windows, so completely disabling it or completely uninstalling it will be no easy task.

I hope this helps!

R/
Bob99

1 user thanked author for this post.

Morty

Reply | Quote

In his October 30, 2020 ComputerWorld article Woody writes, “If you don’t see a Resume updates box, you already have the September Cumulative update and you’re good to go.”

Does he mean October Cumulative update?

Reply | Quote

Being certifiably time challenged, I just changed the page on my desk calendar this morning.

Reply | Quote

After installing October updates on my W10 2004 computer, got this error message:

“A current driver on your PC may be better than the driver we’re trying to install.  We’ll keep trying to install.”

I don’t know whether to laugh or cry!   Apparently, MS is insistent on me getting this problematic driver!  Didn’t identify the driver nor did update history list a failed attempt… but they’ll keep trying!

1 user thanked author for this post.

Charlie

Reply | Quote

[geekdom]

What is the driver?

Is it under Optional updates?

Are you able to hide it?

I received an optional printer driver that has no application for my printer and I’ve hidden it.

On permanent hiatus {with backup and coffee}
offline▸ Win10Pro 2004.19041.572 x64 i3-3220 RAM8GB HDD Firefox83.0b3 WindowsDefender
offline▸ Acer TravelMate P215-52 RAM8GB Win11Pro 22H2.22621.1265 x64 i5-10210U SSD Firefox106.0 MicrosoftDefender
online▸ Win11Pro 22H2.22621.1992 x64 i5-9400 RAM16GB HDD Firefox116.0b3 MicrosoftDefender

• This reply was modified 2 years, 10 months ago by geekdom.

Reply | Quote

That’s the problem…the error message didn’t identify the driver!  After I clicked “Resume Updates” from the “pause” mode, WU status indicated only one driver which had been previously installed and it installed successfully again per update history.  No failed driver updates per history!  Not optional.

AFTER Oct updates installed, I went to wushowhide and hid 7 drivers.  Possibly (hopefully) it was one of those.

I was also force feed the Net FW Preview update…and it appeared to get past my metered connection setting.  A weird patching experience!

Reply | Quote

geekdom wrote:

I received an optional printer driver that has no application for my printer and I’ve hidden it.

I received a printer driver which I have also hidden, too. I’m wondering how you can tell if it has application to your printer?

Reply | Quote

That printer driver unexplainably appeared in wushowhide on my newer Win10 laptop today, despite the fact that two days before GP had been enabled to “Do not include drivers in Windows Update.”

My earlier note on Nov 2 commented that that printer driver had appeared, as well, in wushowhide on my older Win 10 laptop, but GP was not enabled to exclude drivers, so that was no surprise.

It appears that some drivers in the WU queue circumvent the GP dictate.

Reply | Quote

Windows 10 Professional (1909 – 18363.1082)

Windows Update is set-up as:

Feature Deferral = 365
Quality Deferral = 0
Group Policy = Enabled, Value = 2

and I am currently showing three avalable updates with a ‘Download’ button:

• KB4580325
• KB4578974
• KB4577671

My problem is with KB4577671; after the PC has restarted, it goes directly into ‘Preparing Automatic Repair’ and eventually (despite trying various solutions) will fail to repair and the system is completely unusable – my only option is to restore a system image.

How do I remove KB4577671 and/or refresh the Windows Updates being currently listed?

Wushowhide sees the update and I can hide it, but it’s in the queue already and will start to install when I select the ‘Download’ button under Windows Update!  Is this where I should be looking at applying the instructions under ABK2000013?

Thank you in advance for your time.

Reply | Quote

anonymous wrote:

Wushowhide sees the update and I can hide it, but it’s in the queue already and will start to install when I select the ‘Download’ button under Windows Update! Is this where I should be looking at applying the instructions under ABK2000013?

Windows Update scan goes into a cache, so it does not change until the next time WU scans on its own. When you run wushowhide, you see the current updates and you can hide them. But WU still sees the same cache until it scans again, and if the update shows there, it will download/install
So you need to clear the cache so WU doesn’t see what you have hidden. Instructions are in AKB2000013. Once the hidden ones no longer show in WU, they won’t install.

Reply | Quote

Bob99 wrote:

A question comes to mind: When you say you uninstalled Flash, did you use an uninstaller you may have downloaded from Adobe? If so, then all it did was uninstall Flash from your non-Microsoft browser(s).

Thanks!

I used Revo Uninstaller to remove Flash after I got a notification from Adobe to either update Flash or remove it. I decided to remove it, but preferred to do it with Revo to clean up pieces left behind in the Registry.

So it was a mystery to me how and why I got an update to remove what was already removed.

Reply | Quote

I received Adobe Flash updates on both my PCs this month, which surprised me because I didn’t think I had Flash installed on either……………..ever. But at the time I decided life had bigger problems. Perhaps MS was just kindly removing what I never had?

Reply | Quote

What Revo did for you is uninstall the Flash that’s meant for non-Microsoft browsers. That’s all. But it did a really good job of it in removing certain registry entries. However, as you say that you were offered the Flash update that Microsoft released, it did not uninstall the parts of Flash that are “baked into” Windows and both of Microsoft’s browsers in Internet Explorer and the earlier editions of Edge.

As I said above, Microsoft will release a patch that will either remove the parts/pieces baked into Windows in their various forms or will permanently and irreversibly disable them.  In my humble opinion, Microsoft is the only outfit that can pull this feat off successfully.

R/

Bob99

1 user thanked author for this post.

Morty

Reply | Quote

Aha!

They never cease to amaze.

Thank you,

Morty

Reply | Quote

Hi,

Just came across these postings and since no new topic has been started yet on the issue, perhaps you would allow me in posting the links to following articles to clarify the matter and not leave the matter hanging :

1. https://www.zdnet.com/article/windows-10-bug-certificates-lost-after-feature-upgrade-were-working-on-fix-says-microsoft/
2. https://www.bleepingcomputer.com/news/microsoft/microsoft-is-investigating-lost-windows-10-certificates-issue/

Cheers.

Reply | Quote

anonymous wrote:

since no new topic has been started yet on the issue,

Yes, I DID post a question about this on Nov 1 at #2308633 and got responses from an anonymous poster and then yesterday I asked for a MVP response at #2309350, but was told to start a new topic (even though the heading here is October patches). I didn’t get to it yesterday, so thanks for your post and your links.

Are you the same anonymous?

Reply | Quote

I duly installed the October updates today on my desktop PC with Windows 10 Home version 1909 . The Win10 CU, .Net Framework Preview, Adobe Flash Player and Samsung USB updates all installed routinely and without any subsequent issues thus far. Afterwards I was offered the optional new feature upgrade version 20H2 which I ignored and then paused updates till 9th December. The whole exercise took just under an hour including the usual 20 minutes or so “settling down” period after the restart.

Thanks as always to Woody, PK and the team along with all commenters.

2 users thanked author for this post.

WShstruve, jburk07

Reply | Quote

So you skipped W10 v2004?

Reply | Quote

There seems to be some confusion:

• Between Cumulative Update and Feature Update
• How and under what circumstances MS-DEFCON applies
• Susan Bradley’s recommendations and AskWoody recommendations

Please consider starting a topic clarifying the differences, under what circumstances Cumulative Updates and Feature Updates should be applied, and when recommendations should be considered.

On permanent hiatus {with backup and coffee}
offline▸ Win10Pro 2004.19041.572 x64 i3-3220 RAM8GB HDD Firefox83.0b3 WindowsDefender
offline▸ Acer TravelMate P215-52 RAM8GB Win11Pro 22H2.22621.1265 x64 i5-10210U SSD Firefox106.0 MicrosoftDefender
online▸ Win11Pro 22H2.22621.1992 x64 i5-9400 RAM16GB HDD Firefox116.0b3 MicrosoftDefender

1 user thanked author for this post.

Tom-R

Reply | Quote

The DEFCON rating applies to everyone, but it is only a recommendation.

Susan provides guidance for business users so this includes MS Office. Again, it’s advice for you to use in your environment.

cheers, Paul

Reply | Quote

I usually give the go-ahead a little bit earlier for business patchers than woody does for home/non domain patchers.

Susan Bradley Patch Lady/Prudent patcher

Reply | Quote

[Tom-R]

I usually give the go-ahead a little bit earlier for business patchers than woody does for home/non domain patchers.

Susan, based on what I’m seeing this past month it appears that the opposite of this is happening.  Your Master Patch List shows almost all the October patches (for Win10 and Win 8.1) with a “Defer” status.  Yet Woody is giving the go-ahead for home users to install those same patches.

I’m confused as to why the October patches are OK for home users (with no IT support); but not OK for business users (with IT support).

EDIT UPDATE:  I just re-checked the Master Patch List today; and apparently you updated the List on 10/31; so it no longer shows “Defer” status.  But prior to 10/31 (by several days) Woody had already given the go-ahead to install them for home users.

• This reply was modified 2 years, 10 months ago by Tom-R.

Reply | Quote

OK, so I turned on metered connection and clicked “Resume Updates”.  Updates loaded in queue ready to download.  I then followed the instructions to clear the queue. (https://www.askwoody.com/forums/topic/2000013-how-to-clear-the-windows-update-queue-in-win10/)

Following instructions, I used wushowhide to hide KB4580980 Cumulative Update Preview for .NET etc.  I checked to be sure it was hidden and that it was not listed to be hidden.  And made all changes to Windows update service as instructed.

After a little over 24 hours the only update in the queue was KB4577671, the October cumulative update.  Double checked to be sure KB4580980 was still hidden and not listed to be hidden.  Perfect.

So, I turned off metered connection.  Bam. The whole previous queue came back and loaded.  That is when I noticed that Windows had not updated and cleared the queue after all.  The date for the last update had not changed.  The queue was reduced to just the one update visible but the others were lurking out of sight.

I am really getting tired of this time consuming and fruitless game.  I don’t want to play anymore.  Microsoft is smarter than me.  I give up.

I got the preview .NET update last month too and nothing bad happened.  Hope it is OK this month also.

By the way I am still being offered Windows 10 version 2004.

HP Pavilion Desktop TP01-0050 – 64 bit
Windows 10 Home Version 22H2
OS build 19045.3324
Windows Defender and Windows Firewall
Microsoft Office Home and Business 2019
-Version 2308(Build 16731.20170 C2R)

Reply | Quote

Try Wumgr, it has nice controls for selecting, hiding and installing individual patches. It uses the Windows update components so the results are reflected in Windows Update.

cheers, Paul

Reply | Quote

I had a problem with the 8.1 laptop  I “babysit”.  I saw the Servicing Stack Update as the only update, so I installed it.  In the middle of the install, something happened (I am not sure if I clicked something that I should not have), and WU said that I had cancelled the installation.  When I tried again, WU had already looked for new updates.  It downloaded the Win 8.1 cum patch, the .NET cum patch, and the flash patch.  I installed all three (which was my reason for powering-on the machine), and rebooted.  Then WU showed me the SSU update, but it refused to install it because it said that I did not have admin privileges.  I tried a few more times, without success.  Then I asked Google for advice, and I looked at a few web sites and found nothing useful.  I am pretty sure that I did nothing to resolve the problem.  Then I tried one more time, and the SSU patch installed.  I have no idea what happened.

Reply | Quote

I couldn’t download KB4577671. WuMgr reported the size as 93GB and an error attempting to download. Windows Update with metered on reported an installation was in progress and clicking the Download button did nothing.
Rebooted, cleared the WU cache and rebooted, no joy.
Downloaded it direct from the Update Catalog – 411MB.
Installed OK.

cheers, Paul

Reply | Quote

I have been reading the comments about 4577671 and am totally confused.

I have W10 1909 18363.1082.

4578974 and 4580325 installed without any problems.

4577670 never offered.

Now 4577671 if offered but I see from all the comments many, many problems installing it. Now I am not sure whether to install it or hide it.

Help!

Reply | Quote

Woody recommends installing it (see article in ComputerWorld).

See Susan’s recommendation under Patching “What to do” in the Newsletter.

But ultimately, the decision is up to you.

Reply | Quote

Woody’s article does not specifically talk about 4577671.

Any future problems you foresee if I hide it?

Reply | Quote

I’ve installed kb4577671 on my two PCs (W10 Home and Pro) without any complicatons.

2 users thanked author for this post.

Win7and10, rontpxz81

Reply | Quote

On my W10 1909 Home  laptop, I set metered connections and resumed updates.

45809080 (preview) was downloaded immediately

two Intel updates pending download, which I hid

4580375 pending download

4577671 “getting ready 70%”

I then hid 4580980 (although Susan says OK to install but it is a preview) and paused everything again.

I rebooted, now pc shows green screen with “getting Windows Ready. Do not turn off your computer”

What did I do wrong? Just wait and see what happens? How long do I wait for something to happen? If many hours go by without anything happening, then what?

Reply | Quote

Ken wrote:

45809080 (preview) was downloaded immediately

You can’t hide something it it has already downloaded. Hiding has to be done while it is pending. But the .NET Preview is almost unstoppable the way MS has the installation set at present.

1 user thanked author for this post.

Ken

Reply | Quote

W10 Home pc back on, I resumed updates

4580325 pending install

4577671 failed to install before, now getting ready 0%

890830 pending download.

Reply | Quote

2020-10 Microsoft Edge Update for Windows 10 Version 2004 for x64-based Systems (KB4584229) was installed from Windows Update today; it is not an optional update. I clicked on Check for Updates and it dowloaded and installed.

On permanent hiatus {with backup and coffee}
offline▸ Win10Pro 2004.19041.572 x64 i3-3220 RAM8GB HDD Firefox83.0b3 WindowsDefender
offline▸ Acer TravelMate P215-52 RAM8GB Win11Pro 22H2.22621.1265 x64 i5-10210U SSD Firefox106.0 MicrosoftDefender
online▸ Win11Pro 22H2.22621.1992 x64 i5-9400 RAM16GB HDD Firefox116.0b3 MicrosoftDefender

Reply | Quote

I just attempted to Resume Updates.  I expected the October 2020 Cumulative Update for Windows 10 Version 1903 for x64-based Systems (KB4577671) to appear, download and install but it did not.

Windows Update includes a notice for “Feature Update for Windows 10, Version 2004”, but there is no Install Button so I cannot install it.

The November 2020 Cumulative Update for Windows 10 Version 1903 for x64-based Systems will be released tomorrow.  Per standard practice, I will Pause Updates again today before it is released.

Is anyone else having this same experience?

What should I do about installing the October 2020 Cumulative Update for Windows 10 Version 1903 for x64-based Systems (KB4577671)?  Should I wait to see whether it appears in Windows Updates later today?  Should I go to the Microsoft Update Catalogue and install it manually if it doesn’t appear in Windows Updates today?  Or should I just do nothing and pass on installing it?

Should I install Windows 10, Version 2004 if the Install Button appears?

Reply | Quote

There have been reports of forced upgrades of v1903, which will be EOL after Dec updates.

Versions 2004/20H2 still have problems. Your best choice at this point is to upgrade to v1909 if possible. Try TargerReleaseVersion = 1909 (see AKB2000016 for instructions, methods differ for Home and Pro Editions). V2004 is good till May 2021. Using the v1909 ISO is not a good idea at this thime if you have Sept or later updates installed (see article here).

1 user thanked author for this post.

Win7and10

Reply | Quote

Windows 10 v 1909 all patched for October, paused for November, 2020.

Still have the feature update for v 2004 waiting in the queue but did not download.

 

In other news, what is going on with Norton? There is a delay in live updates since 11.7.20.

 

Thanks…!

Win 10 Home 22H2

Reply | Quote

I have Windows 10 home on my HP envy laptop and Office 365. When the last update ran it made my Windows Live Mail account unusable. I cannot open incoming mail – get a message to check my computer for low memory or low disc space. Even worse, my entire contact file has disappeared. Any suggestions how to fix this.?

Reply | Quote