News, tips, advice, support for Windows, Office, PCs & more. Tech help. No bull. We're community supported by donations from our Plus Members, and proud of it
Home icon Home icon Home icon Email icon RSS icon
  • MS-DEFCON 3: No rush, but you should get the January Patch Tuesday patches installed

    Home Forums AskWoody blog MS-DEFCON 3: No rush, but you should get the January Patch Tuesday patches installed

    Viewing 67 reply threads
    • Author
      Posts
      • #2100333 Reply
        woody
        Da Boss

        Usually I wait until near the end of the month before giving the all-clear to install Microsoft’s Patch Tuesday patches. This month’s different. On th
        [See the full post at: MS-DEFCON 3: No rush, but you should get the January Patch Tuesday patches installed]

      • #2100336 Reply
        PKCano
        Da Boss

        Windows 7 Usersplease read this BEFORE applying January patches.

      • #2100351 Reply
        Mr. Natural
        AskWoody Plus

        I started pushing January updates earlier this week. Nothing to report so far with around 30% of our systems having been updated.

        We still have around 100 windows 7 systems despite me mentioning the situation several times last year to my superiors. We just started replacing all windows 7 systems but it will be a while before we are done.

        I haven’t had any calls so far on the desktop wallpaper issue. I guess no one is stretching their desktop photo….. shrugs.

        Red Ruffnsore reporting from the front lines.

        1 user thanked author for this post.
      • #2100368 Reply
        Seff
        AskWoody Plus

        Thanks Woody.

        Do I assume that the unusually early recommendation to install this month is really in respect of Windows 10 users? It seems to relate to a possible vulnerability that doesn’t apply to previous versions.

        • #2105367 Reply
          woody
          Da Boss

          As usual, it applies to all versions.

          The Win8.1 Monthly Rollup is puny.

          The Win7 Monthly Rollup and Security-only have the Stretch bug. It’s a pain in the neck, but @PKCano has full preventive measures, if you’re concerned.

          1 user thanked author for this post.
          • #2107559 Reply
            Seff
            AskWoody Plus

            Thanks again Woody.

            I should clarify my previous poorly worded comment. I realise the raised defcon is for all versions, I was trying to make the point that the its early lifting seemed to be triggered by the threat that applies only to Windows 10. There doesn’t seem to be any greater urgency than usual for other versions to be updated.

      • #2100374 Reply
        zero2dash
        AskWoody Lounger

        Thanks for the DEFCON change. 14 day deferral is putting a mini-pause on mine (until next Tuesday the 28th), so I’ll be waiting – though I don’t anticipate any issues. As you’ve stated, Woody, this month has been fairly benign, at least for Win10 users.

      • #2100382 Reply
        OscarCP
        AskWoody Plus

        Thanks for the advice given along with the new DEFCON setting. I plan to keep Windows 7 offline until there has been more time to asses the situation, then I shall install whichever patches seem useful and trouble-free. Until then, I’ll exercise the options I have made ready, some time ago, for the post-EOL&EOS Age finally upon us. So I’ll be working online, for now, using only the Mac and, on the PC, only Linux, installed in dual-boot with Windows.

        Windows 7 Professional, SP1, x64 Group W (ex B) & macOS + Linux (Mint)

      • #2100394 Reply
        fernlady
        AskWoody Lounger

        Installed

        KB4536952 didn’t need to restart but did it anyway
        KB4534310 restarted and wallpaper was fine, course I had it set to “fill”.
        KB4535102 & KB 890830

        No problems as far as I can tell.

        Windows 7 Home Premium x64 AMD Group A Realtek PCLe GBE Family Controller

        6 users thanked author for this post.
      • #2100405 Reply
        WildBill
        AskWoody Plus

        As you said, Woody, Win7 & Win8.1 aren’t affected by CurveBall. Glad I’m still on 8.1… & haven’t rushed to Win10 yet. Probably will wait until Win10 2004 has marinated for 3-6 months before upgrading… or more, based on your say-so, Boss!

        As for updating Win8.1, I can wait until tomorrow… no rush & too lazy to start now.

        Windows 8.1, 64-bit, back in Group A... & leaning toward Windows 10 V2004. As long as it's a Lot Less Buggy!
        Wild Bill Rides Again...

        • This reply was modified 2 months, 1 week ago by WildBill. Reason: Added to post; forgot
      • #2100407 Reply
        anonymous
        Guest

         

        Version 1903 installed it yesterday. I’m Showing KB4532938 .Net update and KB 4516115 adobe flash update. I don’t know why when it updated after the install it didn’t catch these two. Anyone see any red flags regarding these 2 updates or should I go ahead with them?

        • #2100412 Reply
          PKCano
          Da Boss

          The KB4532938 .Net was part of the Jan Patch Tues updates.
          The last KB 4516115 Flash update listed in the Catalog was Sep. 9/9/2019. Perhaps you missed that one? Should be OK to install.

          • #2100417 Reply
            anonymous
            Guest

            Thanks PK…will do.

      • #2100447 Reply
        KWGuy
        AskWoody Plus

        To “celebrate” the end of the Win 7 WU era, I did something I have never, ever done…I activated the “Install Updates Automatically (Recommended)” option!  I figured I had little to lose and by letting Windows Update handle it, I wouldn’t have to worry with the SSU before or SSU after question.

        Interestingly, the automated process did it’s thing and successfully installed KB4535102 (Net FW CU), MSRT, and Win Defender definitions.   It also attempted, but FAILED, to install KB4534130 (Jan ’20 CU).  Then, KB4536952 (Jan ’20 SSU)  appeared by itself as an important update.  I manually installed the SSU and allowed the automated process to take over once again.  KB4534130 installed successfully without a glitch.

        So, as far as the WU auto process is concerned, the SSU must (still) be installed first.

        Three more W7 machines to go…one last timed!

        5 users thanked author for this post.
        • #2110656 Reply
          Marcus Weldby
          AskWoody Plus

          Please correct me if I’m mistaken, but now that you’ve changed that setting won’t all updates that you’ve intentionally avoided in the past get installed automatically? Other than those that have been superseded, that is.

          1 user thanked author for this post.
          • #2124312 Reply
            Charlie
            AskWoody Plus

            I’m about 97% certain that the answer to this question is yes.  It’s one of the main reasons why I’ve only done Security Only updates since MS started these massive Rollups which may contain many things you don’t want.

            Thanks for asking that question.  I thought someone else would have answered it by now.

            Win 7 Still Alive, x64, Intel i3-2120 3.3GHz, Linux Mint 19.1

      • #2100472 Reply
        slatus
        AskWoody Plus

        I am running Win 10 Pro version 1903. The last Windows update I did was on Jan. 11 to install the December patches. I had paused updates after that to delay the January updates. A few minutes ago I ran Windows Update to check for updates in order to install the January patches and it said ‘You’re up to date.’ When I went to update history, it showed only the updates that I did on Jan. 11, which included the December cumulative patch.

        Does anyone have any ideas about why my system is not finding the January patches to install?

        • #2100515 Reply
          PKCano
          Da Boss

          If updates are Paused, it is telling the computer not to show pending updates until the Pause period is over. So, when Paused, and you search for pending updates, they are not there.

          With the Pro Edition, you can set the Quality deferral to 0 and in Group Policy you can set the Automatic Update to a value of 2 (notify download/install). That way, the pending updates are displayed in the queue but do not download until you click on “Download.”
          In the Home Edition, you do not have this capability, only Pause, which gives you no way to see the pending updates until the Pause period is over.
          But at least, you are protected from immediate install of (possibly bad) patches the first day they are released. That’s why you read reports on AskWoody – to see when it’s safe to end the Pause period.

          3 users thanked author for this post.
          • #2105291 Reply
            b
            AskWoody Plus

            I had paused updates after that to delay the January updates. A few minutes ago I ran Windows Update to check for updates in order to install the January patches and it said ‘You’re up to date.’

            If updates are Paused, it is telling the computer not to show pending updates until the Pause period is over. So, when Paused, and you search for pending updates, they are not there.

            You can’t check for updates while updates are paused.

            Windows 10 Pro Version 2004: Group ASAP (chump/pioneer)

            2 users thanked author for this post.
          • #2106086 Reply
            cmar6
            AskWoody Plus

            PK, I have a similar problem in ver. 1903 Pro. I don’t have Paused set, yet checking for updates finds nothing  Advanced options/Pause updates shows “Pause until/Select date”, which I think means that I have chosen not to pause. But Quality updates shows 15 days grayed out. How do I change that to zero? It has always been at “15” grayed out.

            Or will Windows eventually find the latest updates, but when?

             

            • #2106607 Reply
              PKCano
              Da Boss

              As long as you have a deferral set for Quality Updates, you will see no Monthly CUs. The system is doing what you asked it to do – not offer you updates for 15 days.

              That is grayed out because you have the settings in Group Policy. Take a look at the settings I use (and the reasons I set them that way). If you use these settings, you should have no further problems. Semi-Annual Channel is no longer an option. GUI settings (you will have to undo your current GP settings under Windows Update and Windows Update for Business first so the pulldowns are not grayed out) and Group Policy setting. There should be only that one setting in Group Policy, everything else should be default.

              Disconnect from the Internet before you make the changes so you don’t initiate Updates till you are ready.

              4 users thanked author for this post.
              • #2109951 Reply
                slatus
                AskWoody Plus

                PKCano, I had Defer Quality Updates set to 30 days. Once I set it to zero under my Admin account (I usually work as a Standard user), the January updates showed up and I installed them. Following your recommendation, I also used the Group Policy Editor to enable Configure Automatic Updates and selected 2. Notify for download and auto install.

                This is only my second time running Windows Update under Windows 10 on my new PC. I had no issues with the December patches since the 30-day deferral for Quality Updates was past when I installed those updates, which came out on December 10, on January 11.

                Thanks for your help!

      • #2100476 Reply

        Reporting in…installed:

        2020-01 Security Monthly Quality Rollup for Windows 7 for x64-based Systems (KB4534310)

        Installation date: ‎1/‎24/‎2020 6:54 PM

        2020-01 Security and Quality Rollup for .NET Framework 3.5.1, 4.5.2, 4.6, 4.6.1, 4.6.2, 4.7, 4.7.1, 4.7.2, 4.8 for Windows 7 and Server 2008 R2 for x64 (KB4535102)

        Installation date: ‎1/‎24/‎2020 6:30 PM

        Windows Malicious Software Removal Tool x64 – January 2020 (KB890830)

        Installation date: ‎1/‎24/‎2020 6:52 PM

        …aaaand (drum roll) no ill effects so far…I even had a custom wallpaper background, but thanks to this site, it was set on “Fill”!

        <SFX: raspberry to Redmond>

        Time, usual 45 minutes start to finish. I’ll wait a day or so, then clean up the mess it always leaves behind, SOP.

        Even decided to poke the bear in his cave and checked for updates again, and it wants to install SSU:

        2020-01 Servicing Stack Update for Windows 7 for x64-based Systems (KB4536952) !!

        I guess the saga continues!

        Win7 Pro SP1 64-bit, Dell Latitude E6330, Intel CORE i5 "Ivy Bridge", Group "Wait for the all-clear", Multiple Air-Gapped backup drives in different locations, "Don't check for updates-Full Manual Mode. ESU 1 yr."
        --
        "Just because you're an engineer doesn't mean you're good at everything." -Anonymous

        3 users thanked author for this post.
        • #2100482 Reply

          OK, rebooted and ran WU AGAIN, and everything is up to date, green shield and all.. Wonder why they throw so many SSU’s at you? This one is supposed to ” Provide a robust and reliable servicing stack, etc.” and is dated Jan 14th:

          2020-01 Servicing Stack Update for Windows 7 for x64-based Systems (KB4536952)

          Installation date: ‎1/‎24/‎2020 10:24 PM

          Installation status: Successful

          Update type: Important

          ==========

          This is all so hard to keep track of…This one came out of left field at me, wasn’t expecting it, but I have a bad habit of not re-running WU after installing patches until clear…a habit I just broke!…Hm! Food for thought!! Instead of the official statement, how about “Provide a completely confusing series of SSU’s which will leave you spinning on your ear,” eh?

          Maybe that Raspberry WAS heard in Redmond…<Stage Direction: chews nails, looks around…>

          Win7 Pro SP1 64-bit, Dell Latitude E6330, Intel CORE i5 "Ivy Bridge", Group "Wait for the all-clear", Multiple Air-Gapped backup drives in different locations, "Don't check for updates-Full Manual Mode. ESU 1 yr."
          --
          "Just because you're an engineer doesn't mean you're good at everything." -Anonymous

          1 user thanked author for this post.
      • #2100493 Reply
        honx
        AskWoody Lounger

        i can wait for one week or so. as i have read, this nsa thingamajigs doesn’t affect windows 7, i have time.

        and my 8.1 notebook won’t be powered on until february, so on a not running computer there is also no risk at all. so next time i power on that notebook, it’s early enough to patch it… 😀

         

        another question: do i need that january ssu as i’m not getting any updates anymore? and in which order? is january ssu to be installed LAST like december ssu?

        PC: Windows 7 Ultimate, 64bit, Group B
        Notebook: Windows 8.1, 64bit, Group B

        • #2100526 Reply
          PKCano
          Da Boss

          If you are using Windows Update to update, just let Windows Update handle it. It has worked for me 8 times on my own machines.

          2 users thanked author for this post.
          • #2100963 Reply
            honx
            AskWoody Lounger

            If you are using Windows Update to update, just let Windows Update handle it. It has worked for me 8 times on my own machines.

            as i’m still group b i can’t use windows update for anything other than office, msrt and .net updates, so i’m concerned about order. for windows and ie patches, for these i’m following https://www.askwoody.com/forums/topic/2000003-ongoing-list-of-group-b-monthly-updates-for-win7-and-8-1/

            PC: Windows 7 Ultimate, 64bit, Group B
            Notebook: Windows 8.1, 64bit, Group B

            • #2101869 Reply
              PKCano
              Da Boss

              If you are downloading the SSU from the Catalog, you can install the SSU first. To be sure it’s installed, you should wait after install until the activity drops, reboot (yes, I know it doesn’t say it’s required), than wait again until the activity drops before you install the SO and IE updates.

              The only difference between the Group A Rollup and the Group B SO/IE CU is the non-security component of the Rollup, which also contains the SO and IE CU. I suspect it would also work if you install the SSU last, as that’s the way it happens using WU.

              FYI, the SSU is available through WU if the Important Updates queue is empty, ie, everything (checked or unchecked) there is either installed or hidden.

              • #2110065 Reply
                L95
                AskWoody Plus

                PK:  Could you please answer this question for me?  I have Windows 7 and am in Group B.  I completely forgot about the SSU this month,  because I didn’t see anything in Woody’s Computerworld article about an SSU for this month.   I installed the SO and IE January updates from the Microsoft Catalog,  and my Windows Update history shows that they installed successfully.  Now I’m ready to install the Office Updates and the .NET Framework update,  and I decided to check first to see if there is an SSU for January,  and I found that there is one,  namely KB4536952.   What should I do at this stage?  It appears I have three options to choose from:    (1) Should I go back and uninstall the SO and IE updates,  then install the SSU,  and then re-install the SO and IE updates,  and then finally install the Office and .NET Framework updates?   (2) Or on the other hand,  can I leave the SO and IE updates installed as they are,  then install the SSU,  and then finally the Office and .NET Framework updates?   (3) Or,  as a third option,  should I leave the SO and IE updates installed as they are,  then install the Office and .NET Framework updates,  and then install the SSU last?    Those are the three options that come to my mind,  and I would appreciate it if you could tell me which option I should choose.

              • #2110076 Reply
                PKCano
                Da Boss

                Leave the SO and IE update as is. I assume you have already hidden the Rollup.
                You can Either:
                + Temporarily hide the Office and .NET patches so that there are no more updates in the Important list. Once Important Updates is empty, a search for updates should produce the the SSU. Install it, wait 5 min, reboot (even it didn’t ask you to). Then unhide the Office and .NET and install them.
                OR
                + Install the Office and .NET updates, reboot, and install the SSU when it shows up after the reboot. This is the way it happens if Windows Update is on automatic and the sequence I have used (SO/IE or Rollup, same difference).

                2 users thanked author for this post.
              • #2110103 Reply
                abbodi86
                AskWoody_MVP

                Office and .NET updates do not need SSU, so just install them before it or after it

                1 user thanked author for this post.
                L95
      • #2100495 Reply
        Paul T
        AskWoody MVP

        do i need that january ssu

        If MS decide to release a patch for a critical flaw then you may need the SSU. I’d install it.

        cheers, Paul

        4 users thanked author for this post.
      • #2100496 Reply
        Alex5723
        AskWoody Plus

        I had paused updates after that to delay the January updates

        Have you changed the pause to 0 ? If there is a pause Windows Update won’t show any new updates.

        1 user thanked author for this post.
        • #2109954 Reply
          slatus
          AskWoody Plus

          Please see my post to PKCano. I had Quality Updates deferred for 30 days. Once I set that deferral to zero, all was fine.

          Pause was NOT on.

          • This reply was modified 2 months ago by slatus.
      • #2100513 Reply
        Julia
        AskWoody Plus

        FYI… The link in last sentence in Computerworld article is wrong.

        <i>We’ve moved to MS-DEFCON 3 on the</i> <i>AskWoody Lounge</i><i>.</i>

        Leads to: https://www.askwoody.com/2020/ms-defcon-5-get-your-systems-patched/

        • #2105454 Reply
          woody
          Da Boss

          Ay yay yay. Sorry about that. I’ll get it fixed….

          1 user thanked author for this post.
      • #2101042 Reply
        TJ
        AskWoody Plus

        I run Win10 1809 Pro with update deferral 365/30 via gpedit.msc. (Not upgrading to 1903 yet.)

        Woody advises to install the January Patch Tuesday patches, but to my knowledge this means in case of 1809 only update KB4534273. (Apart from .NET updates.)
        However, according to https://borncity.com/win/2020/01/23/windows-10-v1809-install-error-with-update-kb4534273/ this update can cause install error loops, which would leave no update to install in case of 1809 – for the moment.

        Am I right in assuming so?

        • #2102036 Reply
          PKCano
          Da Boss

          I only have one 1809 (Pro) machine. I updated it yesterday with Jan patches (all offered) with no problems.
          One machine is a very small sample.

          1 user thanked author for this post.
          TJ
        • #2105672 Reply
          Berserker79
          AskWoody Lounger

          Hey TJ, I installed KB4534273 on my 1809 Home machine a few days ago and didn’t run into any issue either during installation or after.

          1 user thanked author for this post.
          TJ
      • #2101907 Reply
        geekdom
        AskWoody Plus

        Windows 10 is patched, remains online, and in use.

        Windows 7 will be patched offline using Microsoft Update Catalog files. It will remain offline, but in use and up-to-date as much as possible. A spare working computer is always useful.

        The Master Patch List here is going to be very helpful in identifying Windows 7 patches.

        Microsoft Windows 7 changes are in flux.

        G{ot backup} TestBeta
        offline▸ Win7Pro SP1 x64 InUse
        online▸ Win10Pro 1909.18363.752 x64 i5-9400 RAM8GB HDD Firefox75.0 Windows{Image/Defender/Firewall}
        • This reply was modified 2 months, 1 week ago by geekdom.
        • This reply was modified 2 months, 1 week ago by geekdom.
        1 user thanked author for this post.
      • #2105506 Reply
        CyGuy
        AskWoody Plus

        Thank you, Woody, especially for the instructions at Woody On Windows.

      • #2105592 Reply
        Berserker79
        AskWoody Lounger

        Windows 10 1809 Home here. Already installed the January 2020 CU (KB4534273) and MSRT update (KB890830) a few days ago, after testing “vulnerable” in the SANS test. These two patches installed without problems and the system is running fine as far as I can tell.

        At this time, I have only a couple of Office 2013 patches to install and the January 2020 Cumulative Update for .NET Framework 3.5, 4.7.2 and 4.8. Is there any pressing reason to install these or can I skip these for the time being? In particular, I’m wondering whether there is any substantial risk if I wait to install the .NET update: I was originally offered KB4535101 (released on January 14, 2020), but this patch has been superseded by KB4535669 (released on January 23, 2020) and I’d like to wait a bit more to install a patch released just two days ago and see if any bug report surfaces. Alternatively, would you advise manually installing KB4535101 from the MS Update Catalog?

        • #2106003 Reply
          PKCano
          Da Boss

          Havent heard any reason to get in a hurry with those patches.
          BTW, I never install the non-Security patches released between Patch Tuesdays. They are Previews/optional.

          1 user thanked author for this post.
          • #2109930 Reply
            tbsky
            AskWoody Lounger

            the dotnet patch seems updated. so I just cancel the approve of wsus and wait to see what happened.

          • #2110022 Reply
            Berserker79
            AskWoody Lounger

            Thanks PK! I never install the optional updates myself. I might be mistaken, but the KB4535669 .NET update does not show up as optional on my system: apparently it has entirely replaced KB4535101.

            • #2110024 Reply
              PKCano
              Da Boss

              Yes, I see that is correct. Strange a C or D week patch supersedes The Patch Tues update.

              • #2110034 Reply
                abbodi86
                AskWoody_MVP

                .NET updates in 1809, 1903 and later are chained by CBS package, just like general cumulative updates

                meaning, each new .NET CU will auto-supersede previous one, regardless if security on not

                i wish they backport this chain way to Windows 8.1 at least

                2 users thanked author for this post.
      • #2109929 Reply
        cmar6
        AskWoody Plus

        As long as you have a deferral set for Quality Updates, you will see no Monthly CUs. The system is doing what you asked it to do – not offer you updates for 15 days.

        That is grayed out because you have the settings in Group Policy. Take a look at the settings I use (and the reasons I set them that way). If you use these settings, you should have no further problems. Semi-Annual Channel is no longer an option. GUI settings (you will have to undo your current GP settings under Windows Update and Windows Update for Business first so the pulldowns are not grayed out) and Group Policy setting. There should be only that one setting in Group Policy, everything else should be default.

        Disconnect from the Internet before you make the changes so you don’t initiate Updates till you are ready.

        As usual, superb tech support from PK. Even though my membership expires in 10/2020, I just extended it for an additional year, this time at mid level. You cannot beat PK’s expertise. He is Woody’s secret weapon against Windows confusion.

        For mysterious reasons, GP did not have the correct settings in “Configure Update” or in Business Updates/Quality updates.

        2 users thanked author for this post.
      • #2109939 Reply
        CAS
        AskWoody Plus

        I installed all the patches and the servicing stack update, yesterday, without any problems. I did not install kb4525760 because of the issues connected to it. (Born’s Tech, and others, seem to say that the problems seem to relate to v 1909.) Am I  safe to install it on Win 10 Pro , v. 1903 build: 18362?

        • #2109942 Reply
          PKCano
          Da Boss

          Win10 v1903 anf v1909 have the same core, are offered the same CUs and SSU through Windows Update.
          The difference is evident in the Build numbers: v1903 is Build 18362.xxx and v.1909 is Build 18363.xxx. The difference is the Feature pack is turned on in v1909 and is NOT turned on in v.1903. Otherwise, they are basically the same.
          So you will see the same KB numbers for both.

        • #2110050 Reply
          b
          AskWoody Plus

          Am I  safe to install it on Win 10 Pro , v. 1903 build: 18362?

          Yes. (It’s KB4528760)

          Windows 10 Pro Version 2004: Group ASAP (chump/pioneer)

          1 user thanked author for this post.
          CAS
          • #2110272 Reply
            CAS
            AskWoody Plus

            My bad, b, about the patch number. Sometimes my finger slips on the keyboard and I hit the 5 instead of the 8  Nonetheless, I appreciate your reply and will install the patch and hope for the best.

            1 user thanked author for this post.
            b
      • #2109953 Reply
        Geo
        AskWoody Lounger

        I got my first 0patch update .  They beat out MS  on some problem MS is still working on.   The patch didn’t cause any problems.

        5 users thanked author for this post.
      • #2109973 Reply
        anonymous
        Guest

        I just updated my Lenovo (Win10 1903 Pro). All is well.

        1 user thanked author for this post.
      • #2110018 Reply
        honx
        AskWoody Lounger

        If you are downloading the SSU from the Catalog, you can install the SSU first. To be sure it’s installed, you should wait after install until the activity drops, reboot (yes, I know it doesn’t say it’s required), than wait again until the activity drops before you install the SO and IE updates.

        The only difference between the Group A Rollup and the Group B SO/IE CU is the non-security component of the Rollup, which also contains the SO and IE CU. I suspect it would also work if you install the SSU last, as that’s the way it happens using WU.

        FYI, the SSU is available through WU if the Important Updates queue is empty, ie, everything (checked or unchecked) there is either installed or hidden.

        thx, as i never downloaded ssu from catalog (always installed it using wu), i’ll install it last.

        so first group b patches will be installed, then office, msrt and so on and then ssu.

        PC: Windows 7 Ultimate, 64bit, Group B
        Notebook: Windows 8.1, 64bit, Group B

        • #2110025 Reply
          Charlie
          AskWoody Plus

          so first group b patches will be installed, then office, msrt and so on and then ssu.

          This will be okay IF you are talking about the December 2019 MS updates.  You will need the latest SSU – KB 4531786 installed before you do the January 2020 MS updates.

          Where you get the SSU – WU or MS Update Catalog, it makes no difference.

           

          Win 7 Still Alive, x64, Intel i3-2120 3.3GHz, Linux Mint 19.1

          • This reply was modified 2 months ago by Charlie.
      • #2110056 Reply
        honx
        AskWoody Lounger

        so first group b patches will be installed, then office, msrt and so on and then ssu.

        This will be okay IF you are talking about the December 2019 MS updates.  You will need the latest SSU – KB 4531786 installed before you do the January 2020 MS updates.

        Where you get the SSU – WU or MS Update Catalog, it makes no difference.

         

        • This reply was modified 2 months ago by Charlie.

        no, i’m talking about january ssu which only will be available after update queue is empty. so i’ll have to install windows patches and office patches first. and pkcano also said, that ssu would be last if i would use windows updates for installing everything (including win and ie monthly rollups)…

        kb4531786 from december already is installed, it was last after december patches. so i’m gonna repeat the order i did in december (win, ie, office, msrt, … ssu for january). here i documented my installation order for december patches: https://www.askwoody.com/forums/topic/ms-defcon-5-get-your-systems-patched/#post-2054745

        PC: Windows 7 Ultimate, 64bit, Group B
        Notebook: Windows 8.1, 64bit, Group B

      • #2110131 Reply
        tbsky
        AskWoody Lounger

        .NET updates in 1809, 1903 and later are chained by CBS package, just like general cumulative updates

        meaning, each new .NET CU will auto-supersede previous one, regardless if security on not

        i wish they backport this chain way to Windows 8.1 at least

        i am confused now. what’s the situation of current dotnet patch? I didn’t see any preview wording in wsus or kb description. it this a preview patch or re-released official January patch we should apply?

        • #2110205 Reply
          PKCano
          Da Boss

          There is no Preview wording. The patch is not Preview.
          According to @abbodi86 ,the .NET patches are cumulative and each one supersedes the past ones.
          To the latest is the current patch to install in order to be up to date.
          Install the patches when it is clear there is no problem with them (meaning, you may want to wat a few days and see if there is any problem report).

          1 user thanked author for this post.
      • #2110132 Reply
        derma
        AskWoody Lounger

        Windows 7, Group A & B

        Just trying to clarify if it’s SSU first or last this month.

        For Group B:
        – the Jan 2020 security only update KB4534314 notes reccommend installing the Jan 2020 SSU KB4536952 after.
        – the Jan 2020 IE cumulative update KB4534251 notes reccommend installing SSU first, but the MS link provided takes you to the Nov 2019 SSU.

        Reading through the thread I see that people have installed it first and last for Group A & B with no problems, from catalogue and WU, so is this the month we can install the SSU in any order.

        • #2110206 Reply
          PKCano
          Da Boss

          It doesn’t matter the order as long as you install the SSU by itself.
          If you install it first, wait 5 min to let the install complete, then reboot before installing the rest (even if it doesn’t tell you to reboot).
          If you install the other patches first, reboot before you install the SSU.

          4 users thanked author for this post.
      • #2110138 Reply
        Pierre77
        AskWoody Plus

        Installed

        KB4536952 didn’t need to restart but did it anyway
        KB4534310 restarted and wallpaper was fine, course I had it set to “fill”.
        KB4535102 & KB 890830

        No problems as far as I can tell.

        Performed the same on 3 PCs running Windows 7 Home Premium x64. After usual restart KB4536952 appeared and was installed. No problems to report.

        Please note I did remove the advisory for IE11 before installation but have not replaced it. SFC /SCANNOW  gives errors with it installed.

        Also installed 2 updates for Office 2010 (32 Bit) – KB 4484243 and KB4484236 on just 1 PC at the same time.

         

        3 users thanked author for this post.
      • #2110134 Reply
        anonymous
        Guest

        I have been in group B for my Win 7 Ultimate pc for many years now by always following the advice on this forum.

        I am strongly considering signing up and paying with the  0 patch so I can keep using this computer. I have valuable, irreplaceable software on here.

        My question is this: for the January patches I would normally install the SSU, then the SO and IE11 (well that was the order I used in Dec. I obtained the SSU from the Microsoft catalog rather than WU) I have never installed a Group A Security Monthly Quality update on this or any of my pc’s.

        Now in order to sign up with 0patch I thought I read that one has to go group A and  install the Security/Monthly  Quality Rollup (kb4534310). Is this true? And I am assuming I also need to install the SSU kb4531786 as well.

        Thank you so much for the advice. I am hoping for the best with 0patch and hope to sign up with them right after these last patches

      • #2110151 Reply
        Paul T
        AskWoody MVP

        I am strongly considering signing up and paying with the  0 patch so I can keep using this computer. I have valuable, irreplaceable software on here.

        Or take regular backups, keep your anti virus up to date and run a regular malware scan, plus don’t ever use IE. Or both – what would it cost you if you lost the software / data.

        cheers, Paul

        2 users thanked author for this post.
      • #2110192 Reply
        Alex5723
        AskWoody Plus

        I am strongly considering signing up and paying with the  0 patch so I can keep using this computer. I have valuable, irreplaceable software on here.

        Or take regular backups, keep your anti virus up to date and run a regular malware scan, plus don’t ever use IE. Or both – what would it cost you if you lost the software / data.

        cheers, Paul

        My brother has a Windows 7 PC which I blocked from upgrading to Windows 10. I am going to pay for 0Patch for his PC.

        2 users thanked author for this post.
      • #2110257 Reply
        280park
        AskWoody Plus

        Re: No updates

        I have a brand new computer that shipped with Windows 10 Pro version 1809. Yesterday was the first day that I was connected to the internet (other than briefly prior to that to download Macrium Reflect Free).

        Windows Update states “No updates available. We’ll continue to check daily for newer updates. Your device is missiong important security and quality fixes.”

        In the advanced options my settings are:

        Give me updates for other Microsoft products when I update Windows. On
        Automatically download updates, even over metered data connections (charges may apply). Off
        Show a notification when your PC requires a restart to finish updating. On
        Pause updates. Off
        Semi-Annual Channel
        Feature update deferral. 180 days
        Quality update deferral. 0 days

        I have not clicked the “Check for updates” button in Windows Update. I thought that now would be a good time to let Windows Update update the computer automatically to version 1903 and install security and quality updates but nothing is happening.

        • #2110258 Reply
          b
          AskWoody Plus

          I have not clicked the “Check for updates” button in Windows Update.

          Why not?

          Windows 10 Pro Version 2004: Group ASAP (chump/pioneer)

          • #2110273 Reply
            280park
            AskWoody Plus

            @b – I have not clicked the “Check for updates” button because I am following Woody’s procedure for moving Windows 10 Pro version 1809 to version 1903 outlined in his November 25, 2019 Computerworld article.

            https://www.computerworld.com/article/3481617/running-win10-version-1803-or-1809-you-have-options-heres-how-to-control-your-upgrade.html

            In step 3 he states, “Don’t do anything else. In particular, don’t click ‘Check for updates.’ Just use your PC as usual, possibly turning it off then on again to awake the upgrade genie. You may have to wait a day, but sooner or later you’ll get upgraded to the version you’ve chosen.”

            I don’t why Woody says not to click the “Check for updates” button.

            • #2110397 Reply
              PKCano
              Da Boss

              Try lowering your Feature deferral to 140 days and wait for the computer to check for updates on its own.

              • #2110409 Reply
                280park
                AskWoody Plus

                @PKCano – As you suggested I reset Feature Deferral to 140 days, shut down the computer, and restarted it. I was going to write that I will wait to see what happens, but as I am writing this I see that Windows Update now has a long list of updates with a status indicator next to each one – getting things ready, downloading, pending install. I guess I will just let this process run its course without interrupting it. I will report back when it is finished.

                Thanks very much.

              • #2110849 Reply
                280park
                AskWoody Plus

                @PKCano – After reducing the feature deferral from 180 days to 140 days as you suggested, Windows Update awoke and successfully updated Windows from version 1809 to version 1903 build 18362.592. I wanted to share what I observed as Windows Update went about its business and I wanted to ask you a question in the last paragraph about what update settings to use now.

                Upon awakening Windows Update listed numerous updates including updates for Intel, HP (my computer is an HP), Realtek (my network adapter), and of course Windows, each with a status notification. Initially the status notifications indicated downloading. On my 3Mbps internet connection the downloading took six hours. After all of the status indicators reached 100% six of the status indicators indicated the respective updates were installing. Those six were as follows:

                KB4516115 – Security update for Adobe Flash Player version 1809
                KB4465065 – Update for Windows 10 version 1809 (Intel Microcode)
                KB4535101 – Cumulative update for .NET version 1809
                KB4486153 – .NET Framework 4.8 for version 1809
                Malicious Software Removal Tool
                Feature update version 1903

                It took a long time for the feature update version 1903 status indicator to reach 100%, but once it did the computer automatically went through several restarts after which a checked a few things.

                Update history shows just one update, the feature update version 1903 despite the fact that there were a couple of Intel updates in update history before I had ever connected the computer to the internet. Under Control Panel> Programs> Installed Updates only two updates are shown, KB4528760 (the January cumulative update for version 1903) and KB4528759 (the latest servicing stack). Under Control Panel> Programs shows several Intel and HP programs as being installed on January 26, the day that Windows Update awoke, even though I think many of those programs were installed when I first took the computer out of the box.

                I have not connected to the internet since all of this updating. I have read your posts #1661966 (GUI settings) and #1662297 (Group Policy settings), but I am not yet comfortable using Group Policy or wushowhide. I have set feature deferral to 365 days to prevent getting updated to version 1909. How would you suggest that I set quality deferral and pause if I don’t use Group Policy and wushowhide?

              • #2110871 Reply
                PKCano
                Da Boss

                I suggest you use the the settings as I recommended.
                I do not use Pause b/c you have to install all the pending updates b4 you can use Pause again, you have to manually reset it each time you run updates, b/c when  the Pause period runs out you get the updates pushed,
                If you use the settings I recommend, you can see what updates are pending, they do not download until you click the “download” button, because you can see them you have time to hide the ones you don’t want (like Drivers, microcode, etc), and you don’t have to reset anything every month.
                I don’t recommend any other settings for Pro version than those, so if you don’t use them, you are free to choose whatever setting you think will work for you.

              • #2111264 Reply
                280park
                AskWoody Plus

                @PKCano – I understand your reasons for using Group Policy to better control the Windows Update function. Your screenshots and explanations are very instructive and helpful. Never having used a Pro version of any Windows edition I am just a little intimidated by this level of tinkering with Windows. I will reread your posts again.

                Also in post #2087894 Woody says that he generally does not recommend using Group Policy to pause updates. I think I will ask him to elaborate on that statement.

                But, as you said, in the end it comes down to a personal decision.

                Thanks for all your help.

              • #2111268 Reply
                PKCano
                Da Boss

                I only use that one Group Policy setting. It keeps the updates from downloading until I say so. The rest of the settings are in the GUI under Windows Update.

              • #2111271 Reply
                280park
                AskWoody Plus

                @PKCano – O. K. Thanks. I am still mulling all this over.

      • #2110269 Reply
        Cesar
        AskWoody Lounger

        This is part of a message I sent to Woody. He asked me to post it here, so here it goes:

        Hello Woody:

        Even if for you it’s MS-DEFCON 3, for me it’s been MS-DEFCON 1 since last December.

        Last month, I tried to install Windows 7 x64 cumulative update, and when I was asked to reboot, I just couldn’t. When trying to boot from Windows 7 partition, I was “greeted” with the following screen:

        Admin. de arranque de Windows

        No se pudo iniciar Windows. Es posible que un cambio de hardware o de software reciente sea la causa. Para corregir el problema:

        1. Inserte el disco de instalación de Windows y reinicie el equipo.
        2. Elija la configuración de idioma y después haga clic en “Siguiente”.
        3. Haga clic en “Reparar el equipo”.

        Si no tiene este disco, póngase en contacto con el administrador del sistema o el fabricante del equipo para obtener ayuda.

        Estado: 0xc0000225

        Información: Error al seleccionar el arranque; no se puede tener acceso a un dispositivo requerido

        An approximate translation would be:

        Windows start-up/boot-up administrator

        Windows couldn’t start-up/boot-up. It’s possible for a recent software or hardware change to be the cause. To correct this problem:

        1. Insert the Windows installation disk and restart the device.
        2. Choose the language configuration and click on “Next”.
        3. Click on “Repair this device”.

        If you don’t have this disk, contact the system administrator or the device manufacturer to get help.

        State: 0xc0000225

        Information: Error when selecting boot-up; required device not accessible

        Here I have to point out that I have a very particular partitioning structure on my hard drives (2 x 1TB units). The motherboard BIOS is set to “Legacy” (not “UEFI”) and I’ve manually created all the partitions (MBR, not GPT) using Acronis Disk Director boot CD. The first HDD unit is mainly for different operating systems and the second one, for documents and data (…). On the first drive I’ve set four primary (bootable) partitions according to this logic:
        1. Windows XP boot loader + MS-DOS (FAT32, Active)
        2. Extended partition containing several logical partitions for different flavors of Windows XP and the like (I used to have some Linux distros here, too, but I finally deleted them)
        3. Windows 7 x64 Ultimate Spanish (NTFS)
        4. Partition for experimenting with other systems (I ended up storing my emails here)

        When I first installed Windows 7, I set the third partition as “Active” (bootable) with Acronis to install the system there without interfering with Windows XP boot loader on the first partition (I instructed the installer to use just the third primary partition and to put everything in there: boot files, system files, user accounts, etc.), and after having everything set up and running, I added Windows 7 to Windows XP boot loader (if you want to know how, just ask) and changed back the Active partition to the first one.

        When I received the error message after installing December’s cumulative update, I had to set the third partition as Active to boot Windows 7 directly and with Windows 7 installation DVD I used a restore point I had manually created beforehand to undo all the changes.

        Given the bad experience, I decided to hide the problematic update and wait for January’s latest (and greatest? 😛 ) cumulative update to see if the problem was fixed (spoiler alert: it wasn’t). I was ready to leave my system unpatched forever if I was just skipping the last two months of updates before Windows 7 end of support (for home users, at least), but this month I tried a different approach to the repair option from the DVD, and it worked! 🙂

        So, the sequence I used, similar to December’s procedure (except for the Acronis part, as I didn’t mess with the partitioning scheme last month), was the following:
        1. Download of SSU (KB4536952) and CU (KB4534310) for Windows 7 x64 from Microsoft’s catalog
        2. Turn off the internet modem
        3. Set the third primary partition as Active with Acronis boot CD
        4. Create a manual restore point and wait until the HDD red led turned off
        5. Install SSU KB4536952 and wait until the HDD red led turned off
        6. Restart and wait until the HDD red led turned off
        7. Another restart and wait until the HDD red led turned off (just to be sure everything was fine)
        8. Create another manual restore point and wait until the HDD red led turned off
        9. Install CU KB4534310 and wait until the HDD red led turned off
        10. Restart and… Error 0xc0000225 when booting up!
        11. Boot up with Windows 7 SP1 x64 installation DVD (pre-SP1 disks don’t work)
        12. Choose: Repair
        13. Choose: Repair boot-up/start-up (this is what I changed from last month’s System Restore with a restore point I had manually created beforehand)
        14. Wait (and pray! 😛 ) until all the changes were made
        15. Restart (from the hard drive)
        16. Success!!! 🙂 Windows 7 booted up normally and finished installing the cumulative update.
        17. Several reboots later, everything was still up and running.
        18. Turn on the internet modem
        19. Install .Net Framework pending (checked) update from Windows Update and wait until the HDD red led turned off (last month it was unchecked, so I just skipped it)
        20. Restart and wait until the HDD red led turned off
        21. Set the first primary partition as Active with Acronis boot CD
        22. Start Windows 7 from Windows XP boot loader
        23. Success! Everything is up and running again and my Windows 7 is up to date with all the patches. 🙂

        Well, that’s been my experience with December and January patches. So… MS-DEFCON 3? Allow me to disagree. 😉

        Anyway, I don’t understand why these patches have to mess with boot files, boot configuration or both of them. Maybe it was a “feature”? 😉 And, besides, the only way of checking what’s going on with Windows 7 boot system is to run some commands on a text console (BCDEDIT on cmd.exe) or use a third party software to have a graphical interface, but first you need to boot Windows 7 to fix Windows 7 boot, so you are in a “catch 22” situation. (I never tried Windows 7 DVD command line, for that matter; it was easier to try an automatic repair)

        (…)

        If I’m missing something or there’s something you don’t understand, just write back and ask.

        (…)

        I’m particularly interested in seeing if someone else can reproduce this abnormal behavior or if it’s just me who’s having this problem. Thank you. 🙂

        Cheers,

        César

        Summary of hardware:
        Motherboard: Gigabyte GA-Z87X-UD5H
        Processor: QuadCore Intel Core i7-4770 (Haswell-DT)
        Memory: 16 GB (2 x 8GB), 2 x Kingston HyperX KHX1866C10D3/8G
        HDD: 2 TB (2 x 1TB), 2 x WDC WD1002FAEX-00Y9A
        Optical drive: SONY DVD RW AD-7280S

        Antivirus:
        Avast! Free

        As a side note, I use @abbodi86‘s script to neutralize telemetry on a regular basis.
        I also run it this time after installing the cumulative update and before going on-line again.

        2000012: Neutralize Telemetry & Sustain Win 7, 8.1 Monthly Rollup Model


        https://pastebin.com/zeJFe08G

        So, I’m curious to know if someone else can reproduce this problem or if I’m the only one who doesn’t allow Windows 7 to create/manage partitions automatically.
        Thanks in advance for any feedback. 🙂

        César

        1 user thanked author for this post.
        • #2110751 Reply
          woody
          Da Boss

          This is a very complex problem. At least to me.

          I hope one of our Win7 internals gurus can sort it out….

          1 user thanked author for this post.
      • #2110293 Reply
        geekdom
        AskWoody Plus

        Windows 7 Offline Update BetaTest
        January 26, 2020

        On Windows 10 online computer downloaded the following Windows 7 updates:

        • KB4535102 — SIX FILES
        • KB4536952
        • KB4534310

        From download files, installed or attempted to install all updates. (Four KB4335102 updates were deemed “unnecessary” when I attempted to install them.)

        Updates:

        • KB4536952 installed and rebooted.
        • KB4534310 installed and rebooted.
        • Two updates from KB4535102 installed: KB4532941 KB4532945
          kb4535102-1
        G{ot backup} TestBeta
        offline▸ Win7Pro SP1 x64 InUse
        online▸ Win10Pro 1909.18363.752 x64 i5-9400 RAM8GB HDD Firefox75.0 Windows{Image/Defender/Firewall}
        • This reply was modified 2 months ago by geekdom.
        • This reply was modified 2 months ago by geekdom.
        • This reply was modified 2 months ago by geekdom.
        Attachments:
      • #2110320 Reply
        anonymous
        Guest

        “Or take regular backups, keep your anti virus up to date and run a regular malware scan, plus don’t ever use IE. Or both – what would it cost you if you lost the software / data”

        Actually I have Avast free, Malwarebytes Pro, Hitman Man and Trojan Remover installed on both laptops (Win 8.1) a both desktops (Win 8.1 and Win 7)

         

        I plan to get a Win 10 pc later this year but after watching my IT brother fighting with his laptop yesterday while trying to update (it broke his internet connection) I am in no hurry

        2 users thanked author for this post.
      • #2110358 Reply
        Demeter
        AskWoody Plus

        Installed in the following order as offered: KB4534310, restart, KB4535102, restart, KB890830, no restart. Check updates once more, KB4536952 2020-01 SSU offered, downloaded and installed with no restart. So long Win 7 Updates. But not “so long”to  Win 7 just yet; I plan to run it for awhile. Where does one sign up & pay for the 0patch?  Win 7 Pro x64, SP1, Grp. A. i7Core “Haswell”, HP ZBook

        3 users thanked author for this post.
      • #2110408 Reply
        GeoffB
        AskWoody Plus

        I’m on Win 10 1809 (home) and fairly new to Win 10. In Windows update  Win 01-2020 Cumulative Update KB 4534273  is shown as ‘pending download’, but without any obvious way to move from that state.  I ran the troubleshooter, which did not come up with anything unusual.  I’ve rebooted and tried again, but the status still shows as ‘pending download’.

        I run Windows Defender and Malwarebytes.  Do I need to turn off Malwarebytes to allow the Windows Cumulative Update to work?

        appreciate any help on this.

        regards
        GeoffB

        • #2110414 Reply
          GeoffB
          AskWoody Plus

          Further to my previous post, #2110408 I ran the update troubleshooter again and it found a problem described as ‘problem with BITS service.  the requested service has already been started. More help available by typing NET HELP 2182‘.  I did that, and there was some information but I’m none the wiser.

          GeoffB

           

        • #2110422 Reply
          PKCano
          Da Boss

          Do you have your Internet connection set to metered? If so, turn metered off. CUs won’t download over metered connections.

          • #2110461 Reply
            GeoffB
            AskWoody Plus

            PK:  yes, I usually have it set to ‘metered ‘.  I had just thought of that when I checked how I had installed the Dec 2019 CU.  In my notes, in large letters ‘turn off metered connection’ then try again.

            The 01-2020 CU has downloaded and installed without any problems as far as I can tell.

            Thanks for your help.

            regards

            GeoffB

          • #2110509 Reply
            Paul T
            AskWoody MVP

            Mine is set to “metered” and I get a button to download/install updates. Works every time.

            cheers, Paul

      • #2110427 Reply
        derma
        AskWoody Lounger

        Jan 2020 monthly rolllup & 0patch

        If you’re in group B, everytime you check WU you get offered the latest monthly rollup even if you’re up to date with security only updates, but will the Jan 2020 rollup KB4534310 still be offered after the next patch Tuesday in February. WU won’t offer any rollups for February, so will it default to the Jan 2020 rollup.

        If in 6 months I decide, ok, I want to sign up for 0patch, will the Jan 2020 rollup still be offered or should I download it from the catalogue now to apply at a later date.

        At this point, I’m starting to wonder if there’s any advantage to remaining in Group B.

        • #2110429 Reply
          PKCano
          Da Boss

          The pre-EOS updates for Win7 will continue to be available.
          If you have not installed the Jan Rollup, it will still be offered by WU (unless you hide it).
          Feel free to install it at any time.

          1 user thanked author for this post.
      • #2110612 Reply
        Win7and10
        AskWoody Lounger

        Thanks for the update! Will install the January patches this week and report back!

        On another note, thought long and hard about Opatch.com, and seems like a reasonable solution.

        Would be interested to know how that goes with those registered for it here and if you had any problems receiving, downloading and installing patches when they arrive. Maybe it is too early to state that right now, however, let us all know!

        Thanks, over and out… 🙂

        Win 7 Home Premium x 64 SP1 (DELL INSPIRION i5) Still Alive!
        Win 10 Home 1909 (HP ENVY i7)

      • #2110697 Reply
        anonymous
        Guest

        Group B here….

        Well yesterday I went ahead and installed the SO and IE11 update as well as the .NET security update on both Win 8.1 laptops and the desk top.  I allowed for plenty of time and everything went well.

        I updated an old Win 7 laptop that my folks still keep for a back up. I have kept that one on Group B also for years but for this final update I first installed the SSU and then moved it to Group A with the Security/Quality update. That took a long time to download of course and then it failed to install the first time but it did install on the second attempt. Everything seems ok on that one.

        Now, later today I will start the update process on my Win 7 desktop moving from my beloved group B status to group A.

        First I am going to install the SSU, wait a bit and then install the Security/Quality update. Then I will look into the 0patch service.

        Fingers crossed on this because after the Dec. update process a couple of weeks ago for some odd reason my win 7 went into an endless reboot at start up. Couldn’t even get to the sign on screen. How I got out of that mess I really cant explain except I managed to get into safe mode and shut it down. When I started it back up it was fine although it has happened twice again at random. This has never happened on this pc before and I have had it a very long time (my brother built it for me  years ago)

        So here I go, about to enter a new era as I join Group A   (well on one pc anyways 🙂 )

         

        2 users thanked author for this post.
      • #2110817 Reply
        Charlie
        AskWoody Plus

        Just so there’s no doubt, I’ve concluded that KB 4536952 is the SSU to use to do the January Windows Updates, whether S.O. or WU, either before or after, as long as the SSU is run all by itself.  Have I got this right?

        I won’t be updating right away, but when (or if) I do, I want to have all my ducks lined up correctly.  Thanks.

        Win 7 Still Alive, x64, Intel i3-2120 3.3GHz, Linux Mint 19.1

        • #2110825 Reply
          PKCano
          Da Boss

          KB 4536952 is the correct SSU for January.

          1 user thanked author for this post.
      • #2110838 Reply
        Win7and10
        AskWoody Lounger

        Just received a weird update after installing the MSRT and SSU for January 2020.

        KB2968294 a Security Update for .NET 3.51, should I install it??
        It is from October 14, 2014.

        UPDATE: Checked my update history of installed UPDATES and it is there.
        KB2968294 so it wants to give it to me again. I hid it!

        Win 7 Home Premium x 64 SP1 (DELL INSPIRION i5) Still Alive!
        Win 10 Home 1909 (HP ENVY i7)

        • This reply was modified 2 months ago by Win7and10.
      • #2110850 Reply
        RM
        AskWoody Plus

        I was planning to install the updates as indicated by the Master Patch list and may have found a discrepancy between the 2020-01-14 Pre-Win 10 Updates Excel and PDF versions of the patch list.  Just under KB4534251,  the PDF version shows 4535102 while the Excel version shows 4535104 while not showing the 4535102 and the PDF version does not show the 453104 version.  Since 4535102 is on both of my computers (Win 7 Pro), I assume this is the correct one for me.  However, since the 4535102 is a .NET patch, I plan to defer installing that per the Excel version of the Master Patch list.  KB4503548 (released on 8-13-19 and which I deferred per the Master Patch list at the time), returned this January to Windows update on both my computers. I assume that I should defer this one as well.  Is that correct?  Also what is the reasoning for deferring the .NET updates?  Thank you very  much for the help and assistance from all of those on AskWoody.

        • #2110875 Reply
          PKCano
          Da Boss

          Just FYI
          4535102 is the Jan .NET Rollup for Win7 and 4535104 is the Jan .NET Rollup for Win8.1
          I wonder if you made that distinction?

        • #2110892 Reply
          RM
          AskWoody Plus

          After reviewing the list of updates on both my computers to see whether i should  install or defer, I found that all of the patches (KB4484243, KB4484236, KB 4535102, KB4534310 and KB4503548) on my computers are in the defer category. I plan on waiting to install anything until the fix for KB4534310, the Security Monthly Quality Rollup is released.  Per Microsoft, this KB causes the black screen when wallpaper is in stretch mode.  Microsoft anticipates a solution will be available mid February.  Is it possible to install this if your computer wallpaper is NOT in stretch mode (Both of mine are in FIT mode) or is it better to wait for the fix?   This is the first month that I did not have an update that I could install.

          • #2110895 Reply
            PKCano
            Da Boss

            I have installed KB4534310 on 4 of my Win7 computers that DID NOT have the “Stretch” setting with no problem. If you have one with “Stretch,” change it to something else (Fill, Fit) before you install and you should be OK.

            2 users thanked author for this post.
      • #2110883 Reply
        Win7and10
        AskWoody Lounger

        I just installed the KB4535102 the January .NET Cumulative update and it took forever.
        I’m happy to report my Windows 7 computer made it to the light and survived.
        I thought it was going to be the end it took so long.
        All is well, and one more to do, and will save the January Monthly Security Rollup until tomorrow, that’s the one with the stretch incident.

        Win 7 Home Premium x 64 SP1 (DELL INSPIRION i5) Still Alive!
        Win 10 Home 1909 (HP ENVY i7)

        • This reply was modified 2 months ago by Win7and10.
        1 user thanked author for this post.
      • #2110894 Reply
        CADesertRat
        AskWoody Plus

        Finished the last of my W10 computers yesterday. All updated to 1903 18362.592, no problems so far.

        Don't take yourself so seriously, no one else does 🙂
        4 Win 10 Pro at 1909 (3 Desktops, 1 Laptop).

        1 user thanked author for this post.
      • #2110960 Reply
        RM
        AskWoody Plus

        With respect to the patches offered by Microsoft in January, why are KB4484243, Security Update for Excel 2010 and KB4484243 Security update for Office 2010 on the defer list? I cannot find a discussion of either patch on AskWoody.  It would be educational to see the logic for the defer listing.  Thank you to PK CANO for advice on the KB4534310.  Since I had my computers set to FIT, I had no issues,yet, with the install of KB4534310.

      • #2111053 Reply
        honx
        AskWoody Lounger

        now i updated both machines:

        on windows 7 i installed january security only updates for windows and ie, as usual it rebooted twice. then i installed all checked important office 2010 updates, msrt and .net. i hid qualitysecurity update. after another reboot i did a drive clean up to remove unused update files and i installed ssu for january.

        currently i’m waiting for TrustedInstaller and mscorsvw processes (all that “post update” work) to be ended and then i’ll reboot another time.

        btw. this proxy trick for blocking ie off internet interferred with windows update. search for updates didn’t work, it showed an error code. so i had to undo this workaround for the sake of windows update. i’ll leave it this way, until this fix for wallpaper bug is available. my wallpapers are set to fill but i want this fix anyway. i’m curious how this fix will be provided to non paying crowd like me… 😀
        for office 2010 (which gets updates until october or something) i’ll have to undo this proxy trick monthly to get those updates installed.

        on windows 8.1 notebook i installed security only win and ie updates, after reboot i installed all checked important like office, defender,… of course i did not install qualitysecurity update. 😀

        PC: Windows 7 Ultimate, 64bit, Group B
        Notebook: Windows 8.1, 64bit, Group B

        2 users thanked author for this post.
        • #2111114 Reply
          honx
          AskWoody Lounger

          these two .net optimization processes are finished already but trustedinstaller still is running! several hours after installing servicing stack! how long does this take? when can i reboot finally?

          PC: Windows 7 Ultimate, 64bit, Group B
          Notebook: Windows 8.1, 64bit, Group B

      • #2111079 Reply
        EP
        AskWoody_MVP

        this just in from Born’s blog – KB4532695 update for v1903 & v1909 in the release preview ring:

        https://borncity.com/win/2020/01/28/windows-10-v190x-update-kb4532695-fr-insider/

        this may get publicly released later this week

        1 user thanked author for this post.
        • #2111104 Reply
          woody
          Da Boss

          Yep, that’s just about on time.

          It looks like the old 1903 patching cadence now includes 1909. That’s as expected – but it’s remarkable because 1909 is more complex.

          Big open question: Will MS finally, finally fix the File Explorer Search bug?

      • #2111112 Reply
        Win7and10
        AskWoody Lounger

        Just received a weird update after installing the MSRT and SSU for January 2020.

        KB2968294 a Security Update for .NET 3.51, should I install it??
        It is from October 14, 2014.

        UPDATE: Checked my update history of installed UPDATES and it is there.
        KB2968294 so it wants to give it to me again. I hid it!

        UPDATE 2: After I installed the .NET Cumulative update for this month, checked the update history and noted that the October 14, 2014 update had disappeared from the hidden updates *since I hid that one*.

        Also, after the .NET Cumulative update for this month, the SSU was offered again and installed so to speak in the update history twice.

        As noted previously, the .NET update took some time, thought it was hanging on for a bit and glad that it installed.

        I’ve had enough fun for a few days, will install the January Monthly Security Stretch Patch Incident update later in the week. Then I am done…unless MS decides to patch us and I enroll in Opatch.

        Win 7 Home Premium x 64 SP1 (DELL INSPIRION i5) Still Alive!
        Win 10 Home 1909 (HP ENVY i7)

      • #2111565 Reply
        STBC Mapper
        AskWoody Plus

        This article says to go ahead with the January 2020 Windows updates, but it also makes indirect reference to the latest Patch Watch Column at

        https://www.askwoody.com/newsletter/closing-the-book-on-windows-7/#patch-watch-0

        and Master Patch list at

        https://www.askwoody.com/wp-content/uploads/2020/01/2020-01-14-Windows10-Updates.xlsx

        which have not been updated since 01/20/2020 and 01/14/2020 respectively and indicate that consumers should defer updates.

        Am I missing something here?

        Win 10 Pro 1809 x64 Dell Inspiron i7

         

        1 user thanked author for this post.
        • #2111819 Reply
          b
          AskWoody Plus

          As far as I can see, that article (published only six days after patch Tuesday) does not say go ahead with January 2020 updates. It says defer for at least 15 days.

          Windows 10 Pro Version 2004: Group ASAP (chump/pioneer)

          1 user thanked author for this post.
        • #2112021 Reply
          Marcus Weldby
          AskWoody Plus

          I have the same question. I’ve kind of waiting for Patch Lady Susan Bradley to give the Green Light to patching.

          1 user thanked author for this post.
      • #2111708 Reply
        anonymous
        Guest

        Windows 7 Home, Group B and also install security only updates for .NET Framework. For January 2020 there is KB4534976 Security Only Update for .NET Framework for3.5.1,4.5.2, 4.6,…..4.8 for Windows 7 x64. Within this KB4534976 there is a file, “msipatchregfix-amd64-5011cb….exe”. Which version of .NET Framework needs this file, and when to execute this file? Somehow I can’t find the answer in my notes. Thanks.

        • #2111725 Reply
          PKCano
          Da Boss

          When you go to the Catalog for the update, instead of clicking on “Download,” click on the title column link. In the box that pops up, click on “More Information.” That will take you to the MS Support pages that explain about each of the files in the .NET Rollup.

          • #2111761 Reply
            anonymous
            Guest

            Thanks PK, That’s the way I found out which file I need to download for my version of .NET Framework. The only file that doesn’t have any explanation is this file “msipatchregfix-amd64-5011cb…exe”.

            • #2111771 Reply
              PKCano
              Da Boss

              Try this. If you put the downloaded updates in a folder, download that file and put it in the same location where you execute the patches. It may execute automatically when the update it “belongs to” is installed.

              I’m just guessing, but I have seen that kind of behavior in two incidents before. one of them was with the pciclearstalecashe and the other I can’t remember. But if that’s the case, you may get a flash of a command prompt window when it executes.

              • #2111772 Reply
                anonymous
                Guest

                When you said, put the downloaded updates in a folder, download that file and put it in the same location, do you mean in the same folder, or not only in the same folder but also next to each other?

              • #2111785 Reply
                PKCano
                Da Boss

                In the same folder as the patch.

              • #2111789 Reply
                anonymous
                Guest

                Thanks again for your help PK,  I really appreciate!

      • #2111830 Reply
        Blizzard
        AskWoody Plus

        Checking in as Group A user, Win7Pro 32bit with machine display background set to FIT not STRETCH:-)

        Installed, without issue, KB4534310, KB4535102, MSRT, and then SSU KB4536952 after the three prior KB installs had stabilized.  I am so grateful for all those who commented over the past few days.  I utilized your inputs along with Woody’s great info and the excellent inputs of PKCano and others who’ve so graciously shared their experiences and advice.

        Made for smooth sailing.  Now trying to decide in which direction I head with my trusty Win7 box.  The 0Patch route is sounding worth it for my particular use model.

         

        4 users thanked author for this post.
      • #2111876 Reply
        Alex5723
        AskWoody Plus

        I have been looking at 0Patch and have received some info from my sources. The service is NOT free but will cost $26.00 US per year per PC.

        https://0patch.zendesk.com/hc/en-us/articles/360010269560-What-are-the-advantages-of-0patch-compared-to-Extended-Security-Updates-

        Hope this link helps.

        I just subscribed my brother’s Windows 7 SP1 64 bit to 0Patch.
        His PC is blocked from Windows 10 with GWX Control Panel : http://ultimateoutsider.com/downloads/

      • #2111966 Reply
        dgreen
        AskWoody Lounger

        Reporting in regarding January Updates
        Had an unusual occurance

        Hid all updates and did search (yesterday 1/29)
        kb4536952 Servicing stack appeared and installed first
        Unhid  kb4534310 (rollup)
        Rebooted waited about 1/2 hr

        When I went back to now install the rollup
        Did a search for updates**
        **NOTE: This was taking so long that I actually had to “end task” in task manager and rebooted my computer.  It still was taking long so I ended it in task manager again and deceided to wait a few hours.  Shut down my computer.
        Tried again and the search for updates went smoothly and installed the roll up.
        For the 1st time this automatically rebooted twice.

        unhid kb4535102 (.net Security and Quality Rollup) which took a long time to restore….
        so I deceided to wait until this morning.
        Once again search for updates was taking a long time, ended via task manager, rebooted and tried again.  This time search for update worked.**
        Installed the .net update and it installed fine.
        Waited about an hour.
        I unhid the MSRT update and that installed without issue.

        I have never had the need to end the task of “search for updates” because it was taking too long.  This is the first time that has ever happened.
        Trust me, I was a little worried there for a moment.
        Big sigh of relief!

        Dell Inspiron 660 (new hard drive installed and Windows 7 reloaded Nov. 2017)
        Windows 7 Home Premium 64 bit SP 1 GROUP A
        Processor: Intel i3-3240 (ivy bridge 3rd generation)
        chipset Intel (R) 7 series/C216
        chipset family SATA AHCI Controller -1 E02
        NIC Realtek PCLE GBE Family Controller
        Bitdefender (free version) installed 12/6/19 (replaced MSE)
        Chrome browser
        DSL via ethernet (landline)

         

        2 users thanked author for this post.
      • #2112063 Reply
        EP
        AskWoody_MVP

        Microsoft has released revised Intel Microcode updates this Thursday Jan. 30, 2020:

        KB4497165 for 1903/1909
        KB4494174 for 1809
        KB4494451 for 1803
        KB4494175 for 1607, LTSB 2016

        These revised updates have added Denverton, Sandy Bridge, Sandy Bridge E/EP, Valley View & Whiskey Lake U support

        2 users thanked author for this post.
      • #2112099 Reply
        Alex5723
        AskWoody Plus

        1903 Pro Jan. updates : .NET KB4532938, CU KB4528760, MSRT KB890830.

        No surprises.

        1 user thanked author for this post.
      • #2114414 Reply
        anonymous
        Guest

        Windows 7 SP1 64bit, with Broadcom network card. Group B.

        Installed January’s updates; IE KB4534251 and SO for .NET KB4532960. Did NOT install, SO KB4534314 (with nagware), SSU KB4536952 (or SSU KB4531786 or SSU KB4523206).

        From the catalog; Installed KB4534251 1st, KB4532960 2nd. The MSRT was installed during the December patch installs in the middle of January so that MSRT was the January MSRT.

        I can not see installing an SSU when EOL is upon us (past us) and I am not a paid support customer. I can not see installing nagware when there does not seem to be any real threats to worry about. I have backups, I am covered.

        Installed one at a time. Rebooted in between each update letting it sit 1 or 2 minutes after update was installed (when hard drive light settled down).

        No network issues. No install oddities.

        Rebooted 3 times and let it sit for several minutes.

        I would recommend people on the last reboot to go to the desktop and let it sit 45 to 60 minutes to Process Idle Tasks and let the trusted installer (as per PKCano) do its thing.

        You can also force Processing of Idle Tasks as I do if you want by the administrative command prompt: rundll32 (space) advapi32.dll,ProcessIdleTasks

        You can enter that then walk away for 15 to 20 minutes. If the drive light is still on, it is still running, walk away again. Do not allow the computer to go to sleep. Reset the Power Options to 1 hour sleep if needed. Laptops make sure you are on AC power not battery!

        Thanks to all here.

        Windows 7 Group B

        2 users thanked author for this post.
      • #2123919 Reply
        Win7and10
        AskWoody Lounger

        WIN10 HOME 1909 new laptop HP Envy i7, 1 TB , 12BG RAM

        When I set up the laptop around the Holidays, accepted version 1909, currently on pause for max amount of time for windows updates, I believe just past the Feb patches, will have to check on the exact date in February.

        Should I accept all of the updates by checking for updates and taking off the pause, or just wait until Defcon green here?

        It is a home laptop, therefore, no server issues, etc….

        Thanks!

         

        Win 7 Home Premium x 64 SP1 (DELL INSPIRION i5) Still Alive!
        Win 10 Home 1909 (HP ENVY i7)

        • #2123923 Reply
          PKCano
          Da Boss

          We are at DEFCON-3 for Jan patches currently, which means go ahead an patch with caution.

          If you undo the Pause, you shuld get the updates, even without “checking for updates”, the next time the system checks.

          1 user thanked author for this post.
          • #2123953 Reply
            Win7and10
            AskWoody Lounger

            Thanks PK,

            Also, is Chredge being sent via the Windows Update or is that an optional download?

            Win 7 Home Premium x 64 SP1 (DELL INSPIRION i5) Still Alive!
            Win 10 Home 1909 (HP ENVY i7)

      • #2123932 Reply
        bassmanzam
        AskWoody Plus

        Installed the following Win 7 Home x64 and Office 2010 x64 patches:

        1) All offered Office 2010 x64 patches – reboot
        2) SSU – 4536952 – reboot
        3) Rollup – 4534310 – reboot
        4) .NET – 4535102 – reboot

        No real issues except the download of the Rollup took 30 minutes.
        No double reboot.

        Thanks to all who shared there update experiences over the years.
        A big thanks to Woody and PKCano for guiding us to the end of the light for Win7 Home users.

        1 user thanked author for this post.
      • #2124137 Reply
        Alex5723
        AskWoody Plus

        It’s pushed though regular WU (not other MS products)
        and published in catalog
        http://www.catalog.update.microsoft.com/Search.aspx?q=Edge

        How can ChrEdge updates be pushed via WU when it is a separate program needing daily/weekly.. updates like other browsers and not tied to patch Tuesday/C/D ?

        • This reply was modified 2 months ago by Alex5723.
        • #2124139 Reply
          abbodi86
          AskWoody_MVP

          Only the first installation comes through WU, updates are normally by itself

          1 user thanked author for this post.
      • #2124328 Reply
        280park
        AskWoody Plus

        RE: Windows 10 Updates, Pause, and Windows Defender

        The update settings on my Windows 10 Pro version 1903 build 18362.592 are set as follows:

        Feature updates: Deferred for 365 days
        Quality updates: Deferred for 15 days
        Updates paused: Until March 4, 2020

        The following two behaviors seem a bit odd:

        1. Windows Defender only updates itself automatically when I start the computer for the first time on any given day. This is only a minor inconvenience because I update Windows Defender throughout the day by clicking the “Check for updates” button under “Virus & threat protection updates.”

        2. When I start the computer for the first time on any given day and immediately open the main Windows Update page I see that Windows Update, even though it is set to paused, shows that it is checking for updates. At the end of the updating only Windows Defender has been updated. This is all exactly as I want Windows to behave. It just seems odd that Windows Update shows that it is checking for updates when it is set to paused.

        • This reply was modified 1 month, 4 weeks ago by 280park.
        • #2124338 Reply
          PKCano
          Da Boss

          Windows Update checking is set as a task by the system. It will run if WU is enabled on whatever schedule is set.

          Pause and Deferral tell WU when the patches can be made available. If you Defer for 15 days, the patches won’t be available to WU for 15 days after release, That means when WU searches, it won’t find anything for 15 days.

          If you Pause until March 4, you prevent the patches from being available when WU searches until March 4.

          WU will search on whatever schedule is set (on bootup, once/day, at 1:00am, etc) but it won’t find anything until the Pause/defer time has elapse b/c the patches won’t be presented as available until then.

          You haven’t Paused/deferred Defender updates, only system updates. So defender updates should be available whenever the schedule is set for that.

          1 user thanked author for this post.
          • #2134576 Reply
            280park
            AskWoody Plus

            PKCano – Thanks. I think I understand now. I thought (apparently erroneously) that by clicking the “Pause updates for 7 days” button in Windows Update I was pausing Windows Update from checking for updates. But if I understand you correctly, clicking that button does NOT stop Windows Update from checking but DOES stop Windows Update from making updates available to install, except for Windows Defender updates.

            WU will search on whatever schedule is set (on bootup, once/day, at 1:00am, etc)

            On my computer Windows Update seems to check automatically for updates once per day, specifically when I start up and connect the computer to the internet for the first time each day. I don’t see anything in Windows Update that specifies that schedule. I am not interested in fiddling with that schedule until I am much more familiar with Windows 10, but I am curious if that schedule is irrevocably set by Microsoft. If not, how would one go about changing the schedule?

            • #2134640 Reply
              PKCano
              Da Boss

              Personally, I wouldn’t mess with that schedule. The less you “fiddle” with, the less you will have to wonder about where problems come from if you have them.

              1 user thanked author for this post.
              • #2134878 Reply
                280park
                AskWoody Plus

                The less you “fiddle” with, the less you will have to wonder about where problems come from if you have them.

                I agree with you 100%. That is why I have made very few changes to my new Windows 10 Pro computer since taking it out of the box other than upgrading from version 1809 to version 1903 build 18362.592 and changing the Windows Update settings to prevent further updates until Woody clears the February updates for installation.

                Personally, I wouldn’t mess with that schedule.

                And not knowing how to fiddle with that schedule is probably the best inoculation for the urge to do so.

                • This reply was modified 1 month, 3 weeks ago by 280park.
      • #2124357 Reply
        Charlie
        AskWoody Plus

        Hello Group B’ers.  I finished doing my updating today and all seems fine so far as I can see.

        Only had two Office 2010 updates and I did them first, no reboot required.  Then did the .NET update and rebooted.  I next did the S.O. IE update and Win 7 updates.  They took a little bit longer than usual but went okay.  I always wait for the high memory use to go back down after rebooting which usually takes about 10 to 15 minutes. The memory use was real high this time for KB4534314 and KB4534251 – 2.72 gigabytes at the highest, the highest I’ve seen yet to install an update.

        Well that’s about it.  Just thought I’d report in with some good news.  Thanks again to Woody and the crew for all the help to make this possible.  You guys & gals are great!

        Win 7 Still Alive, x64, Intel i3-2120 3.3GHz, Linux Mint 19.1

        4 users thanked author for this post.
        • #2124385 Reply
          PKCano
          Da Boss

          You should install the Servicing Stack KB4536952. It should show up if the Important Update queue is empty (did you hide the Rollup?)

          • #2124386 Reply
            Charlie
            AskWoody Plus

            AH…. I forgot to mention it but I downloaded KB4536952 from the MS Update Catalog a few days ago and installed it then.  So I should be okay.  Thanks PK.

            Win 7 Still Alive, x64, Intel i3-2120 3.3GHz, Linux Mint 19.1

      • #2134744 Reply
        SueW
        AskWoody Plus

        And I thought I was the last one to update 🙂  Here is my feedback:

        1 – just in case, double-checked Task Scheduler — Application Experience, CEIP, and PerfTrack — all subtasks were still disabled

        2 – imaged my disk with Macrium Reflect Free

        3 – downloaded Updates KB4534314 (January SO) and KB4534251 (IE11 January Cumulative)

        4 – installed both Updates and then restarted. Note: my computer partially configured, restarted, and then finished configuring, taking 8 minutes total; I then waited 15 minutes

        5 – re-checked Task Scheduler — Application Experience, CEIP, and PerfTrack — all subtasks were still disabled (as expected)

        6 – checked Task Scheduler — EOSNotify & EOSNotify2 — were still disabled after disabling them after December’s updates

        7 – ran “Windows Update” => 5 Important (all checked): 2 Office 2010 and 3 Win 7; 1 Optional (unchecked)

        8 – unchecked and hid “Important” Update KB4534310 (January Rollup)

        9 – hid the unchecked Optional update KB4503548 (.NET Framework 4.8)

        10 – ran “Windows Update” again => 4 Important (all checked): 2 Office 2010 and 2 Windows; 0 Optional

        11 – installed 4 Updates: 2 Office 2010 (KB4484243, KB4484236), January S&Q Rollup for .NET Framework (KB4535102) and MSRT (KB890830)

        12 – rebooted and waited around 45 minutes

        13 – ran “Windows Update” again, since the SSU wasn’t offered yet => 1 Important (checked)

        14 – installed KB4536952 (January’s SSU)

        15 – no restart was necessary; restarted anyway and waited around 15 minutes

        Note: Windows Media Player was still reconfigured!

        And, once again, my thanks and gratitude to PKCano, Woody and everyone else who, with their time and expertise, helped make our monthly updating go as smoothly as possible!

        Win 7 SP1 Home Premium 64-bit; Office 2010; Group B; Former 'Tech Weenie'

        6 users thanked author for this post.
      • #2134896 Reply
        Win7and10
        AskWoody Lounger

        I have this one left to go for January for WIN 7. KB4534310 (January Rollup)
        Did anyone find that they had disable the task scheduler for EOS notify like we did for December’s patches?
        Will wait a few more days and then install.
        Any more news on the “stretch” issue?

        Also will probably install Windows 10 1909 updates this week as long as there are no further issues since I am a HOME User.

        Thanks to all for their updates.

        Win 7 Home Premium x 64 SP1 (DELL INSPIRION i5) Still Alive!
        Win 10 Home 1909 (HP ENVY i7)

        • This reply was modified 1 month, 3 weeks ago by Win7and10.
        • This reply was modified 1 month, 3 weeks ago by Win7and10.
      • #2134933 Reply
        Myst
        AskWoody Plus

        Ran a System Image on my external HD before running updates.
        Installed … 5 Important Updates as presented in the Update queue, installed each individually except for the Office 2010 updates (put those two in last)
        KB4535102 January Rollup for .NET Framework REBOOT
        KB4534310 January Rollup REBOOT – Took more time than usual to install. No black screen, background is set to “Fit” by default
        Gave the system time to process the above two updates after installing
        KB890830 MSRT

        2 Important Office 2010 updates – no reboot required

        Ran another Check for Updates and the SSU KB4536952 showed up. Installed it and no reboot needed but I did it for the heck of it. After reboot I let the PC sit to settle everything into the system.

        Had also gone to the Task Scheduler to make sure both EOS Notify tasks were still disabled and they were, as were all other tasks previously disabled, App Experience, CEIP, Media Center and PerfTrack, along with all subtasks.

        A special thanks to SueW for your detailed account and feedback for each monthly update. You always remind me to check the Task Scheduler! And a big Thanks to everyone else who post their results, and of course a huge hug of appreciation for Woody, the admin staff – MVPs, bosses, etc., y’all are incredibly gifted!

        Win7 SP1 Home 64-bit, GrpA / MacOS / Chromebook

        3 users thanked author for this post.
      • #2138063 Reply
        Win7and10
        AskWoody Lounger

        I have one January patch left to go for WIN 7:

        January for WIN 7. KB4534310 (January Rollup)

        Will wait a few more days and then install.

        I restarted last evening and did not have the “you do not have permission to shut down this computer” error that was described over the weekend. Was glad that this was not an issue on the Win 7 laptop

        Has anyone attributed anything else to this error?

        (1) January patch to go for Win7 and Win10 is still on pause.

        Win 7 Home Premium x 64 SP1 (DELL INSPIRION i5) Still Alive!
        Win 10 Home 1909 (HP ENVY i7)

      • #2212141 Reply
        Northwest Rick
        AskWoody Plus

        Sorry to grab your procrastinator trophy from you (not unlike the classless KW grabbing TS’ microphone) but I am clearly MILES behind YOU!

        Just wanted to say I appreciate your handy & condensed & detailed guide, especially on how to shut down the EOS nagware.  Yeah, I know all this information is sprinkled throughout this gargantuan AW repository, but when you only look in once in a blue moon, it is terrific to find it all pulled together in one place.

        Cheers!

    Viewing 67 reply threads

    Please follow the -Lounge Rules- no personal attacks, no swearing, and politics/religion are relegated to the Rants forum.

    Reply To: MS-DEFCON 3: No rush, but you should get the January Patch Tuesday patches installed

    You can use BBCodes to format your content.
    Your account can't use Advanced BBCodes, they will be stripped before saving.