MS-DEFCON 3: Patching is unclear

Topic

New Reply

ISSUE 18.11.1 • 2021-03-26 By Susan Bradley Proceed with caution. I’m separating my patching guidance into two categories: one for business users and
[See the full post at: MS-DEFCON 3: Patching is unclear]

Susan Bradley Patch Lady/Prudent patcher

6 users thanked author for this post.

jburk07, SueW, mcbsys, abbodi86, Travasaurus, Alex5723

Reply | Quote

Replies

Should home users install both CU and optional updates ?

Reply | Quote

Installed March update for 20H2 Pro (now 19042.867):

CU KB5000802
Intel microcode KB4589212
Servicing Stack 10.0.19041.860
MSRT V5.87 KB890830.

No problem with printing to Samsung AIO laser printer CLX-3185FN Type-3.

Microsoft has added a 3rd restart (first -30%, second -100%, third -cleaning)

2 users thanked author for this post.

jburk07, GoneToPlaid

Reply | Quote

I thought that I’d “dodged the bullet” after updating, but my trusty Dymo LabelWriter 450 Turbo “bit the big one” just like everybody else’s did. However, as soon as I upgraded to the 8.7.4 version (I was at *.3) it fixed the problem immediately. I can see Microsoft missing something as (relatively) obscure as Dymo LabelWriters, but I can’t see them not testing for the other more common printers. (I bet they don’t going forward) Kudos to Dymo for jumping in and fixing the problem in pretty short order but may we assume that it was Microsoft’s “fault”, or was it some kind of a previously-undetected bug in Dymo’s code, that was “exposed” by the update? If it was indeed Microsoft’s fault (which it appears to be, but then they’re everybody’s favorite whipping boy) it seems like they should’ve addressed the problem before Dymo had to…

Reply | Quote

[honx]

since i’m no plus member i can’t read the article, so i don’t know if i as home user should patch or not… so i take defcon 3 as prompt and simply patch my win8.1 notebook (and i’ll install office updates on win7 machine as well).

so on 8.1 i need both security only updates kb5000853 and kb5001640? (and then ie kb5000800 of course).

PC: Windows 7 Ultimate, 64bit, Group B
Notebook: Windows 8.1, 64bit, Group B

• This reply was modified 4 years, 1 month ago by honx.

1 user thanked author for this post.

Average-Jane

Reply | Quote

on 8.1 i just installed kb5000853 (win) and kb5000800 (ie), rebooted and then i installed kb5001640. after another reboot office updates come in…

PC: Windows 7 Ultimate, 64bit, Group B
Notebook: Windows 8.1, 64bit, Group B

Reply | Quote

This is a reasonable point. Once upon a time, the Ask Woody Defcon system was easy to understand and advice was prominent. If the advice on the Defcon rating is now disappearing behind a paywall such that it is no longer clear what to do, I think the site will have taken a major step backwards.

You might reasonably suggest that we subscribe to Plus but that just means that something very important that was once free is now monetised which I don’t think was ever the purpose of the site.

4 users thanked author for this post.

analogkid, TonyC, honx, Average-Jane

Reply | Quote

that’s right, since important articles regarding defcon rating are not visible for non paying non plus members, askwoody is becoming useless. i wish woody never retired. under his leadership at least this important information regarding defcon system was available for free!

PC: Windows 7 Ultimate, 64bit, Group B
Notebook: Windows 8.1, 64bit, Group B

3 users thanked author for this post.

analogkid, TonyC, Average-Jane

Reply | Quote

Even as a member for over 4 years the last 3 as MVP, I never got an email either.
Was also a regular for 2 years on the askwoody blog/comment site before that…

Windows - commercial by definition and now function...

Reply | Quote

You were supposed to. It got sent to your old address, apologies.

Susan Bradley Patch Lady/Prudent patcher

Reply | Quote

It’s fixed now.

Reply | Quote

Ciao’

🍻

Just because you don't know where you are going doesn't mean any road will get you there.

Reply | Quote

[The Surfing Pensioner]

For goodness’ sake, you load of old meanies! It costs peanuts to become a Plus member for a year and in return we can access detailed instructions on how to keep our computers safe, especially from dear old MS, often within minutes of any query being lodged. My PC technician charges £60 per hour and has to be booked weeks in advance – even if he can carry out the repair remotely. It’s a no-brainer.

• This reply was modified 4 years, 1 month ago by The Surfing Pensioner.

6 users thanked author for this post.

stewagreen, jburk07, GoneToPlaid, Brian1664, SueW, Will Fastie

Reply | Quote

Microsoft charges $499 for a professional business support case and … how can I put this delicately…. they provide horrible support these days.

Susan Bradley Patch Lady/Prudent patcher

Reply | Quote

I don’t think it’s fair to call it mean. No one is being rude. People are just pointing out they don’t like an unannounced decision made about a service they use. We were promised by Woody that the addition of the Plus Newsletter would just be extras we could pay for if we wanted, and not change the free services provided for us on the site. Yet that seems to have been what happened.

The DEFCON system is for home users, and is supposed to be free. But we can’t currently use it since DEFCON 3 requires knowing what the problems are, and deciding if it’s worth it to patch. We can’t watch out for potential problems without knowing what they would be.

I’m fine with there being a more detailed version that was behind the paywall. But I would argue we still need a basic summary of the problems and what to look out for.

It’s that information that allowed me to recommend the site to others. It was the one source I could recommend that wouldn’t say “you need to update right away,” while still letting them know about the problems. But I can’t in good conscience tell them to pay for just that part, since they could get the information itself elsewhere for free.

I’m not saying Plus has no value, note. I have no problem with the site then telling these new free users that they can support the site and get all these extras if they join the paid tier. But at least the main purpose of the site–the MSDEFCON stuff and basic info about things to look out for–needs to still be free.

I hope that Susan will consider changing that aspect back.

2 users thanked author for this post.

analogkid, honx

Reply | Quote

I posted #2353080 above. I agree wholeheartedly with #2353336. That was exactly my understanding of the Plus feature. A lot of us visited for simple, easy to understand advice and there was more depth available for the professional or the interested.

The argument about a small cost is misdirection. The principle behind the site has altered without notice and I lament the passing of what was once a truly public-spirited site.

 

1 user thanked author for this post.

analogkid

Reply | Quote

BTW the link for computerworld is up in today’s post:  https://www.askwoody.com/2021/the-ides-of-march/

Susan Bradley Patch Lady/Prudent patcher

Reply | Quote

subscribe to Plus

If the information that’s now behind the dastardly paywall isn’t worth $20 a year to you, move along and stop bothering those who don’t have a problem paying for something of value.

 

2 users thanked author for this post.

stewagreen, Will Fastie

Reply | Quote

The information is not “now behind a paywall”, it always was.
And, as you can see form Susan’s post above, it’s available in the ComputerWorld article free.

cheers, Paul

1 user thanked author for this post.

Will Fastie

Reply | Quote

Paul T wrote:

ComputerWorld article free

Actually, it’s behind a “reverse” paywall” there, too.  I bet a Happy Meal of your choice that Computerworld pays for that article.

Reply | Quote

“Reverse paywall” doesn’t prevent me reading the article, does it you?

Susan has to make a living, just like the rest of us.

cheers, Paul

1 user thanked author for this post.

Will Fastie

Reply | Quote

Paul T wrote:

Susan has to make a living, just like the rest of us.

My point exactly.  So explain again why you have a problem coming up with a buck a year to help pay for this site.

Or do you think Susan should pay for the privilege of letting you mooch?

Reply | Quote

For those of you on Win10 – the CUs are cumulative. Instead of installing the Patch Tuesday CUs, I would recommend installing the latest Out-of-Band patches for your version if you decide to patch,
+ They may be offered in the “Optional” section through Windows Update.
+ If they are not offered through Windows Update, they can be downloaded from the Microsoft Catalog, (search string = 2021-03 cumulative update for) saved on the desktop, then installed manually by double clicking on them. Be sure you DO NOT download those labeled “Preview.”

For those of you on Win7/8.1, if you decide to patch, install updates as usual, then download the OOB patches from the MS Catalog and install them manually (as described for Win10 above). Win7 KB5001639 and Win8.1 KB5001640 OOB’s download links are available through AKB2000003.

13 users thanked author for this post.

LH, jburk07, Vincenzo, zat_so, cyberSAR, TonyC, glnz, Kirsty, DrBonzo, SueW, Pim, abbodi86, GoneToPlaid

Reply | Quote

Thanks for this, PK, you have answered my question. I have already downloaded kb5001649 from the catalogue to both my laptop and desktop and intend to install this manually before Resuming Updates (which I shall have to do anyway because the Pause will run out). May I take it that kb5001649 will replace whatever CU Windoes Update would nomally push in my direction?

Reply | Quote

PKCano wrote:

the CUs are cumulative.

That means the later ones contain the earlier ones, plus whatever else is added. 🙂

1 user thanked author for this post.

The Surfing Pensioner

Reply | Quote

I am not sure if KB5001639 is a CU since Microsoft mentions that it must be installed after installing either the March CU KB5000841 or after installing the March Security Only KB5000851.

I am going to do a backup of my computer this evening. I am a Group B Windows 7 user. The following morning I will install the March SO update and KB5001639, and then I will reboot my computer. I will report back here on how things went.

2 users thanked author for this post.

TonyC, SueW

Reply | Quote

Well, “Cumulative Update” is certainly the proud title of this kb in the Catalogue!

Reply | Quote

PKCano wrote:

For those of you on Win7/8.1, if you decide to patch, install updates as usual, then download the OOB patches from the MS Catalog and install them manually (as described for Win10 above). Win7 KB5001639 and Win8.1 KB5001640 download links are available through AKB2000003.

The updates for Win7/8.1 are NOT CUs as far as I know. That’s why the instructions above.

Reply | Quote

KB5001639 and KB5001640 are security only alternatives for this month

they are never cumulative

3 users thanked author for this post.

jburk07, Kirsty, PKCano

Reply | Quote

abbodi86 wrote:

KB5001639 and KB5001640 are security only alternatives for this month

Alternatives to what? Are you suggesting that they can be installed as alternatives to KB5000851 and KB5000853, the Win7 and Win8.1 SO updates for March?

I think that I’ll be doing as suggested in #2353044 and installing the March SO update followed by the OOB update.

Reply | Quote

TonyC wrote:

Alternatives to what? Are you suggesting that they can be installed as alternatives to KB5000851 and KB5000853, the Win7 and Win8.1 SO updates for March?

Replying to myself here, but I just wanted to say that I think post #2353613 answers my query.

Reply | Quote

If you are patching Group B SOs, you can install KB5001639 and KB5001640 after the Patch Tuesday KB5000851 and KB5000853 Win7 and Win8.1 SO updates.

If you are patching Group A Rollups, you need BOTH the Rollups AND the OOB patches KB5000841/KB5001639 for Win7 and KB5000848/KB5001640 for Win8.1

2 users thanked author for this post.

jburk07, byteme

Reply | Quote

[7ProSP1]

PKCano wrote:

If you are patching Group B SOs, you can install KB5001639 and KB5001640 instead of the Patch Tuesday KB5000851 and KB5000853 Win7 and Win8.1 SO updates.

I’m confused about whether it’s required that the March 22 OOB patches be installed if you are not experiencing any issues after installing the March 9 Patch Tuesday SO update.

I realize SO’s are not cumulative, so does this mean the OOB fixes will not be included in the April Patch Tuesday SO updates and they will be missed altogether if skip them?

Or since they are OOB patches, does this mean I can just wait and install the regular April Patch Tuesday SO update and they will be included with it?

As a Group B’er, if I need to install the OOB patch I obviously will but if I can just wait until the April Patch Tuesday SO is released instead, then I’d prefer to take that route.

• This reply was modified 4 years, 1 month ago by 7ProSP1.

Reply | Quote

7ProSP1 wrote:

I realize SO’s are not cumulative, so does this mean the OOB fixes will not be included in the April Patch Tuesday SO updates and they will be missed altogether if skip them?

Absolutely correct. SOs are not cumulative. If you don’t install the OOB you have missed the fix.

1 user thanked author for this post.

7ProSP1

Reply | Quote

PKCano wrote:

If you are patching Group B SOs, you can install KB5001639 and KB5001640 after the Patch Tuesday KB5000851 and KB5000853 Win7 and Win8.1 SO updates.

My memory might be failing me, or I might have completely misread the quoted sentence some days ago, but I thought that the sentence originally read:

If you are patching Group B SOs, you can install KB5001639 and KB5001640 instead of the Patch Tuesday KB5000851 and KB5000853 Win7 and Win8.1 SO updates.

thereby making a clear distinction between the Group B patching requirement and the Group A patching requirement, as covered in the subsequent sentence.

Reply | Quote

See #2353027 above last paragraph.

Reply | Quote

Yes, I am aware of post #2353027.

Since MS-DEFCON 3 was declared, I’ve been through the relevant posts on this thread with a fine tooth comb. The situation is that there are posts on this thread that assert or imply that, for Win7/8.1 Group B, the March OOB update can be installed instead of the March SO update. And there are other posts on this thread that state that the OOB update should be installed after the SO update has been installed. This is contradictory advice.

I installed the OOB update without installing the SO update, but I am now wondering whether I should uninstall the OOB update, install the SO update, and then reinstall the OOB update.

Reply | Quote

You do not need to uninstall the OOB. You can try to install the March SO. If it installs, you need at least some of it. If it does not install, you do not need it.

Windows is smarter than we are. It will no overwrite/replace a newer or needed file with one that is not appropriate. Supersedence wins!

1 user thanked author for this post.

TonyC

Reply | Quote

PKCano wrote:

You do not need to uninstall the OOB. You can try to install the March SO. If it installs, you need at least some of it. If it does not install, you do not need it.

Thanks. I decided to install the March SO today. It installed very quickly, including a very quick shutdown and restart. And the TrustedInstaller process didn’t stay around very long either. So I guess that there was very little to do after the March OOB had been installed. Everything seems to be fine.

Reply | Quote

TonyC wrote:

Replying to myself here, but I just wanted to say that I think post #2353613 answers my query.

Replying to myself again. The post I intended to refer to was #2353608, not #2353613.

Reply | Quote

I’m assuming your guidance is particular to this patch cycle and not general guidance.  I interpreted it that way in context of the original post but not sure if others might misinterpret your intent.

Reply | Quote

Just for March.

Susan Bradley Patch Lady/Prudent patcher

Reply | Quote

[redknight]

I want to make sure I understand.  You are recommending that I install KB5001649 instead of KB5000802?

 

This was supposed to be a reply to PKCano #2353027

• This reply was modified 4 years, 1 month ago by redknight.

Reply | Quote

PKCano wrote:

For those of you on Win10 – the CUs are cumulative. Instead of installing the Patch Tuesday CUs, I would recommend installing the latest Out-of-Band patches for your version if you decide to patch,

Like it says.  The MS Catalog link will help you find the update.

Reply | Quote

[Vincenzo]

PKCano wrote:

For those of you on Win10 – the CUs are cumulative. Instead of installing the Patch Tuesday CUs, I would recommend installing the latest Out-of-Band patches for your version if you decide to patch,
+ They may be offered in the “Optional” section through Windows Update.
+ If they are not offered through Windows Update, they can be downloaded from the Microsoft Catalog, (search string = 2021-03 cumulative update for) saved on the desktop, then installed manually by double clicking on them. Be sure you DO NOT download those labeled “Preview.”

For those of you on Win7/8.1, if you decide to patch, install updates as usual, then download the OOB patches from the MS Catalog and install them manually (as described for Win10 above). Win7 KB5001639 and Win8.1 KB5001640 OOB’s download links are available through AKB2000003.

I went to the MS Update Catalog, downloaded the update    Win 10 2004, it says for 1903 and later (I have 1909). It is the x64 version, and not the Server version.

But when I try to install it, it says its not applicable for this computer.
I definitely don’t have it installed already, I checked the update history.

Any ideas?

Thanks

.

• This reply was modified 4 years, 1 month ago by Vincenzo.
• This reply was modified 4 years, 1 month ago by Vincenzo.

Reply | Quote

Try again! 🙂

Reply | Quote

I’m one of the March Update cannon fodder survivors. 
I already said so in
https://www.askwoody.com/forums/topic/lets-get-mikey-to-try-it/#post-2351901

1 Canon printer, NO Dymo.

1 Desktop Win 11
1 Laptop Win 10
Both tweaked to look, behave and feel like Windows 95
(except for the marine blue desktop, rgb(0, 3, 98)

3 users thanked author for this post.

pfvincent, jburk07, GoneToPlaid

Reply | Quote

Installed KB5000802, now running 20H2 v.19042.867

Print tests successful on ancient Canon MG6400 printer and CutePDF app (both type 3)

Optional KB5001649 offered but not installed. So far, so good.

Win10 22H2 Pro, MBAM Premium, Firefox, OpenOffice, Sumatra PDF.

3 users thanked author for this post.

pfvincent, MHCLV941, jburk07

Reply | Quote

Same here, on several machines, but only 802 was offered, neither of the two succeeding updates.  I updated on March 28 and 29.

Perhaps Microsoft updated 802 with the fixes that were in those optional updates?

Reply | Quote

Do we expect all of these out of band updates to be part of the April Cumulative updates?  We use WSUS and I may just wait till April updates instead of adding in the out of band stuff.

 

Reply | Quote

Yes they will be included in April.

Susan Bradley Patch Lady/Prudent patcher

Reply | Quote

Looks like the March updates are also responsible for an issue that is preventing the Visual C 2008 runtime from installing.

I’ve tried to install Sonicwall’s Global VPN client on a few machines this week and on the affected ones, the install hangs for a while and prompts for a reboot. After the reboot, the GVC is installed but fails to run, giving a side-by-side error because the Visual C 2008 runtime install failed. Trying to install the runtime manually from Microsoft gives the same result, but if I remove KB5000802 and try again, all is well in the world again.

Reply | Quote

Isn’t it too early to be raising the defcon level for home/small business users? I mean the next Microsoft patches will not come until April 15 (second Tuesday of the month). I never update until the month following the patches being offered. I usually update approximately one week before the next set is offered…meaning in this case around April 9 or so.

I ABSOLUTELY HATE ALL NEWSLETTERS FROM ANY SOURCE. I joined this website because it had great forums but now it has devolved into mostly newsletters.

Reply | Quote

DEFCON-3 can last a long time.
There’s no hurry to install the day it’s changed. 🙂
Take your time.

Reply | Quote

I’m waiting. Paused until Friday, April 9, just a few days before Patch Tuesday. Don’t plan on doing anything before then.

Reply | Quote

Mele20 wrote:

I ABSOLUTELY HATE ALL NEWSLETTERS FROM ANY SOURCE. I joined this website because it had great forums but now it has devolved into mostly newsletters.

Hardly. Only a small part. I usually read the newsletter as an afterthought. The forums are still why I am a member.

🍻

Just because you don't know where you are going doesn't mean any road will get you there.

2 users thanked author for this post.

CADesertRat, Will Fastie

Reply | Quote

Mele20 wrote:

I ABSOLUTELY HATE ALL NEWSLETTERS FROM ANY SOURCE. I joined this website because it had great forums but now it has devolved into mostly newsletters.

You can always join as a Plus Member and opt not to receive newsletters 🙂
 
As for the forums..WSL junk all over again

Reply | Quote

No, it’s the end of the month/near a weekend and I never get to the point without making a a patching decision.

The forums are absolutely still here and quite active.

Susan Bradley Patch Lady/Prudent patcher

1 user thanked author for this post.

jburk07

Reply | Quote

Susan, my Lenovo computer and HP printer/scanner are working just fine without the new optional update. Are you saying I should install kb5001649 anyway? Please advise.

Win 10 Pro Version 2004 (OS Build 1904.1.867)

Peace,

CAS

Reply | Quote

If you have no problems, you can skip/don’t need the OOB patches.
The fixes will be included in the April CUs anyway.

1 user thanked author for this post.

CAS

Reply | Quote

What about the Server Side (2012/2016 server) of the March updates, are those good to go?
Anyone experience issues there?

 

Reply | Quote

They too are triggering BSODs with printing. You’ll need to skip to the out of band releases.

Susan Bradley Patch Lady/Prudent patcher

1 user thanked author for this post.

Hanzie

Reply | Quote

If I pause updates for 7 more days..to April 5th, is it likely that this update gets updated..fixed by Microsoft?

How risky is the environment that the rec is to take a chance on an update that clearly still has problems?

Reply | Quote

I’m not hearing any buzz that there will be fixes other than what is out already.

Susan Bradley Patch Lady/Prudent patcher

Reply | Quote

Installed KB5000802 via WU today. No problems (so far) with my HP Officejet Pro 9010 printer.

Chris
Win 10 Pro x64 Group A

Reply | Quote

Any issues with installing KB5000803 or KB4589210 on Windows Server 2016? I’m still undecided if I should install or wait until April updates. Most likely I’ll wait until April updates.

Some people out there say installing the update gets stuck at downloading at 23% for many hours and our update window doesn’t allow having to wait many hours installing cumulative updates. Haven’t tried updating yet just to prevent potential issues.

Reply | Quote

Microsoft re-released it and fixed that problem. Do you have any print roles/print server roles on that server?

Susan Bradley Patch Lady/Prudent patcher

Reply | Quote

One server has Remote Desktop Services installed and the other one is a domain controller. Printing on the RDS server is made with printer redirection.

Reply | Quote

What printers?  Ricohs and Kyoceros in particular are troublesome.

Susan Bradley Patch Lady/Prudent patcher

Reply | Quote

Lexmark, Epson and Zebra printers.

Reply | Quote

I personally have Lexmark and have not seen issues in my testing.

Susan Bradley Patch Lady/Prudent patcher

Reply | Quote

Susan, I appreciate your including both in a single post, since, though I am a little user I often follow business guidelines (MS since 3.11)(some linux mixed in) However this is way too early for me since patch Tues is Apr 13 – almost 2 1/2 weeks away, I will wait at least a week, probably more, to see if anything changes on what is offered.

Reply | Quote

They won’t be changing it, I don’t see any rumbles along those lines. I don’t like to leave a month without making a patching decision.

Susan Bradley Patch Lady/Prudent patcher

Reply | Quote

No problem downloading and installing KB5001649 to 19042.870.

A Question about the Microcode update 2021-01 Intel microcode KB4589212.

I did not install this when it came out. Is it safe? Should I install it now?

Dell Inspiron 16 Plus 7640 Core Ultra 7 155H 32GB Win 11 Pro 23H2 (22631.5189)
Dell Inspiron 15 7580 i7 16GB Win 11 pro 24H2 (26100.3775),
Microsoft 365 Version 2502 (18526.20168)
Location: UK

Reply | Quote

I liked that this website offered blog posts, not “ReAd ThE rEsT iN tHe PlUs NeWsLeTtEr!” on every.single.article.  Now the DEFCON system is almost entirely paywalled, bad form considering this month’s fiasco.

How long until the banner at the top of the page that actually displays the DEFCON rating isn’t accessible without payment?

Reply | Quote

Agreed. Woody would promptly follow up a Defcon change with a detailed follow-up in a linked Computerworld article.

Reply | Quote

The Defcon wlll not be behind a paywall. As to the Computerworld article, it is coming Monday and I like to make sure that people have a weekend to install updates.  Alerts get emailed to plus members only, ergo why it’s being handled like this.

Speaking of the plus membership, everyone does realize that even $1 gets you the alerts and access, yes?  The site costs money to run.  The hosting venue isn’t given to me for free so I have to pay a hoster  every month.  I’m disappointed that you don’t feel that the site isn’t worth any sort of donation?  What could I do to make it worth that to you?  Serious question.

Susan Bradley Patch Lady/Prudent patcher

5 users thanked author for this post.

MHCLV941, jburk07, snalmond, SueW, AlphaCharlie

Reply | Quote

Remember when “if it’s on the internet, it must be true”?   It seems to have morphed into “if it’s on the internet, it must be free”.

Perhaps you could send the malcontents a dollar via PayPal….

Reply | Quote

Websites cost money. Hosting, development, maintenance. Have you tried reading a NYT article? Pay or read only 1 paragraph. Haven’t checked their prices but I’m sure it’s more than a couple bucks each year. Have you noticed how much software that used to be free now costs money?

Just my opinion.

6 users thanked author for this post.

MHCLV941, jburk07, SueW, mledman, Will Fastie, opti1

Reply | Quote

[mcbsys]

You can deploy KB5001649 with WSUS by importing it manually, as outlined here:

https://docs.microsoft.com/en-us/windows-server/administration/windows-server-update-services/manage/wsus-and-the-catalog-site#the-microsoft-update-catalog-site

If you encounter error 80131509 importing (I did):

1. Disable IE Enhanced Security Configuration. Mine was already disabled.

2. Run this from an administrative command prompt:

reg add HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\.NETFramework\v4.0.30319 /V SchUseStrongCrypto /T REG_DWORD /D 1
iisreset

Reference:

https://docs.microsoft.com/en-us/answers/questions/88238/is-there-a-general-problem-with-wsus-servers-that-1.html
https://community.spiceworks.com/topic/2144162-import-to-wsus-fails-direct-import-from-ms-update-catalog

Note: I found that “iisreset” was enough; I did not need to restart the server. However be aware that this will temporarily disconnect your RDP session at least if you’re using a gateway on the same server.

3. Import as described in the first link above.

4. The update isn’t downloaded into WSUS until the next sync. In WSUS, go to Synchronizations and click Synchronize Now.

5. Wait for machines to check in. Hurry this along with “wuauclt detectnow” / “wuauclt reportnow” on a client machine.

6. Once detected on at least one computer, in WSUS > Updates > All Updates, you should see KB5001649 as Unapproved/Failed or Needed. Approve it.

• This reply was modified 4 years, 1 month ago by mcbsys.

Reply | Quote

honx wrote:

since important articles regarding defcon rating are not visible for non paying non plus members

You can turn a plus member for as little as $1.

1 user thanked author for this post.

Will Fastie

Reply | Quote

Another fix released in the CU Preview/SSU released yesterday. This one for Secure Boot issues. See article at Microsoft releases Windows 10 SSU to fix security update issue at Bleepingcomputer.

​Microsoft has released the Windows 10 1909 KB5000850 cumulative update preview and a new KB5001205 Servicing Stack Update that resolves a Secure Boot vulnerability.

The KB5001205 Servicing Stack Update (SSU) will automatically be installed by Windows Update to improve the update experience. This SSU should not be skipped as it fixes an issue installing a previously released Secure Boot security update.

Also released yesterday is Windows 10 1909 KB5000850 (build 18363.1474), the March 2021 non-security preview “C” update that allows users and businesses to test upcoming fixes before they are released to everyone during the April 2021 Patch Tuesday.

As this is an optional update, Windows 10 will not install it automatically. Instead, users will need to open Windows Update, check for updates, and select to install the preview update when it is offered.

Reply | Quote

There is no mention of Canon printer drivers.

Am I OK un-pausing updates on Win 10 Home 2004 with a Canon printer?

1 user thanked author for this post.

opti1

Reply | Quote

I just updated 3 test machines with a canon all-in-one printer with no issues.

3 users thanked author for this post.

pfvincent, LHiggins, opti1

Reply | Quote

cyberSAR wrote:

I just updated 3 test machines with a canon all-in-one printer with no issues.

Which update did you run?

Reply | Quote

I just took what windows offered – kb5000802

2 users thanked author for this post.

pfvincent, opti1

Reply | Quote

Windows 7 Pro X64 SP1 ESU Year 2, just installed KB5000841 via Windows Update.  Canon Pixma MX479 all-in-one printed a test page with no issues.  Haven’t installed hotfix KB5001639, but I have it downloaded just in case.

i7-10700k - ASROCK Z590 Pro4 - 1TB 970 EVO Plus M.2 - DDR4 3200 x 32GB - GeForce RTX 3060 Ti FTW - Windows 10 Pro

3 users thanked author for this post.

pfvincent, T, jburk07

Reply | Quote

Similar set up to me except i have a different model of Pixma so i’m curious if you’ve tried test printing some elements like tables and such? I’ll be trying this myself after i update.

This month is yet another good example of why Microsoft need to start testing their patches properly again and also why i will not be pressured into upgrading to the eternal beta that is Win10 when every month is like a game of Russian roulette. The ghacks article on this shows a snapshot of just how furious people are over this latest nonsense – https://www.ghacks.net/2021/03/21/update-woes-that-never-end-microsoft-halts-patch-of-a-patch-of-a-patch-rollout-to-fix-printing-issues/

Also in regards to paid membership – i have to say the small expense has more than paid for itself with the amount of help i’ve had through this place over the years. Whether that be the GWX control panel (which absolutely saved my hide more than once) to the sterling work that abbodi86 continues to do, to name just two examples.

Reply | Quote

For what it’s worth i installed KB5000851 and after a couple of test prints i’m not experiencing any issues. I just printed a test page and a couple of graphical elements and a table in a blank document but all fine here.

Reply | Quote

Apologies for missing these, and thanks for sharing that info.  And yes, I totally agree, the paid membership is worth every penny.

i7-10700k - ASROCK Z590 Pro4 - 1TB 970 EVO Plus M.2 - DDR4 3200 x 32GB - GeForce RTX 3060 Ti FTW - Windows 10 Pro

Reply | Quote

Average-Jane wrote:

How long until the banner at the top of the page that actually displays the DEFCON rating isn’t accessible without payment?

As far as I’m concerned, never. We’ve never suggested otherwise.

Average-Jane wrote:

Now the DEFCON system is almost entirely paywalled…

The MS-DEFCON Alert mailings have always been behind the paywall.

Average-Jane wrote:

ReAd ThE rEsT iN tHe PlUs NeWsLeTtEr!

Again, not a change. That was the case throughout Woody’s ownership. Check older articles, say from 2019, and you’ll see the same thing. It is true that I have made those notices more prominent, but they are not new.

Average-Jane wrote:

bad form considering this month’s fiasco.

We agree that the details have value. Membership has benefits.

9 users thanked author for this post.

stewagreen, MHCLV941, LH, jburk07, snalmond, SueW, AlphaCharlie, opti1, Travasaurus

Reply | Quote

I’ve been a paid user (sometimes for just a lousy buck, when I fell upon hard times) since back in the old Windows Secrets days. I now remit more, of course. This is still the best value I’ve found as regards support for computers and “all things Windows”. I’m really shocked that anybody could actually complain about the payment model here; if only more sites would adopt it…

14 users thanked author for this post.

MHCLV941, LH, jburk07, PDX5802, snalmond, Susan Bradley, SueW, AlphaCharlie, b, cyberSAR, wavy, mledman, Will Fastie, opti1

Reply | Quote

You seem to be missing the point. No one is saying that the posts that just advertise the newsletter didn’t exist before. They’re complaining that they are now the bulk of the content on the front page. Before, most of the content–including the MS-DEFCON change announcement–were nice, fairly short blog articles that kept everyone up to date on things.

There seems to have been a fundamental yet unannounced shift in how you guys are doing things since Woody left, and it’s even shown in the language you guys use. Susan is asking us what information she could put in the Plus Newsletter to make us want to pay for it. You are talking about “information being worth money,” admitting you see this as us paying for info.

That’s a shift from what we were originally told about the Plus program. It was originally supposed to be about supporting the site, with the Plus letter being a perk. When some of us got nervous about this, we were told not to worry, that the free content wouldn’t change. And that was the way it was for as long as Woody was here–at least, as far as I perceived it.

The Ask Woody Plus newsletter was just a replacement for a newsletter offered at Windows Secret, or whatever it was called. It was Woody looking out and trying to help out that dying website. It wasn’t supposed to replace any of the content that had previously been available on the site.

But that’s exactly what seems to be happening.

Reply | Quote

When Woody gave the “all clear” for a MS-Defcon change, he also published a computerworld article as a reference and guide in a manner that was professional and courteous to both anons and members (thanks Woody), that actually helped on the day of the MS-Defcon change, not 2-3 days later which.defeats the purpose completely irrespective of whether it’s at the weekend or not.

However, those who were/are TLDR in attitude, usually posted on the forum asking what was already published and explained in the computerworld article.

No-one can fix id10ts

Reply | Quote

It may be convenient for you to hold the idea that I’m upset about paying $1/year for the best tech support on the planet, but that’s not why I’m annoyed. It’s the principle of these latest DEFCON moves that has me annoyed.

Even before I found this site, I knew that Patch Tuesdays in general are a hot mess, and the first thing I did when Windows 10 became an imminent reality was learn how messily WaaS would be implemented and how much more obnoxious Patch Tuesdays would become, and ingrained how to pause or reschedule updates to avoid the mess. And so I have never had a Patch Tuesday-inflicted problem. For me personally, this website has only kept my pause-and-patch schedule up-to-date.

FMP AskWoody seemed to pride itself on protecting the little guy (the one who doesn’t really understand what Patch Tuesday is but really doesn’t like that his computer rebooted in the middle of the night and now nothing works, because even in the best of times he can’t afford his computer to be broken in terms of either time or money) against Microsoft’s Patch Tuesdays and their sometimes disastrous implementations. In fact, given the banner at the top of the site, I considered it AskWoody’s most important facet. So I find it curious/disappointing/worrisome, that for the past couple of months, DEFCON updates have been Plus articles. That little guy could still come to this site and see that there is guidance to patch or not to patch, and even why, but the instructions on how he would pause updates are now a Plus feature. Sure, it’s not like he couldn’t find this information anywhere else on the Internet, but for him, the utility of this specific website has decreased.

I agree, there is wonderful community-based tech support here for those who need it. And I agree, that for $20 a year, or even $1 a year, that’s a steal. But considering the DEFCON banner is the most prominent display, and arguably what this site is known for best, it’s a bit sad that the latest DEFCON updates, especially during a month when we had a rare DEFCON 1, have been a testing ground for putting at least some of that information behind a paywall.  Especially considering COVID, which has not only put more people in financially precarious positions, but may stymie their ability to reconnect if their only device at home gets bricked by an errant update.

Reply | Quote

I apologize if you feel that I’m not for the little guy.  I’m especially for the little guy or gal and the little small business because I am one. Because the alerts get emailed to the plus membership I don’t think it’s fair to you to expect to go to another site for information that I intended to be for you.  I will be linking to tomorrow’s Computerworld when it comes out tomorrow so my hope is that answer any unanswered questions for those who are not members.

Susan Bradley Patch Lady/Prudent patcher

5 users thanked author for this post.

DrBonzo, MHCLV941, jburk07, SueW, cyberSAR

Reply | Quote

DrBonzo wrote:

@Susan Bradley – Just so I understand this, it’s Saturday night, you’re cooking dinner, and afterwards you’re going to make a video for one of the AskWoody Loungers. Where else can anybody get service like that for anything!!?? Drop of the hat service by a highly skilled, knowledgeable, competent IT pro. This is the best and biggest bargain on the internet – or maybe anywhere.

In the light of the service we are receiving on this site – all provided on a voluntary basis, as I understand – I’d be embarrassed not to support it financially, in the sum that each of us can afford. It seems the only decent way to express one’s appreciation. Most charities demand more costly ‘voluntary donations’ of their patrons!

6 users thanked author for this post.

DrBonzo, MHCLV941, SueW, jburk07, scoobydoo, cyberSAR

Reply | Quote

[a]

I am having difficulty understanding the concern about paying a tiny amount for a support forum that I have found quite useful. I actually chose NOT to get the paid alerts as I was getting too much stuff in my mailbox that didn’t relate to me. Cheap support imho! Lots of other sites if you disagree. EDIT: actually there is a ton of free support here if you avail yourself of it.

• This reply was modified 4 years, 1 month ago by a. Reason: addit thought

9 users thanked author for this post.

DrBonzo, MHCLV941, jburk07, scoobydoo, SueW, cyberSAR, Will Fastie, opti1, Travasaurus

Reply | Quote

It’s pretty simple. Content that used to be available for free is now being put behind a paywall. The stuff we were promised would remain free by Woody is now being absorbed into the paid newsletter instead. More and more of the front page content is paid content, not free content.

The MS-DEFCON rating–which includes the info about the actual issues people have seen–has always been freely available. Susan’s Patchwatch has been paid-only (I can’t remember if it was free at any point, but it’s been paid for a while), but that was just for business users, not home users. But now even the info for home users is available only in the newsletter. I still don’t know what the problems were for March’s updates, or what to look out for.

The whole value argument people keep making isn’t really relevant. That’s not the complaint. The complaint is the shift to treating this like some paid site. The argument you guys are making is itself the issue. That’s not what the site was supposed to be.

Ask Woody Plus was pitched basically like Patreon, where you want to support the site, so you pay and get perks. It’s not supposed to be a value proposition. At least, not for the site itself—obviously sometimes people pay for the perks. But the site itself is supposed to still provide the same content.

Honestly, I’m actually more upset than I was before, seeing people getting their complaints dismissed. The irony is that I’ve actually gotten some money and could feel okay paying for the site for a bit. But, since last month when I noticed the new paywall for MS-DEFCON stuff, I’ve not really wanted to. I wouldn’t be supporting the same site I got so much out of for these past years.

Reply | Quote

anonymous wrote:

It’s pretty simple. Content that used to be available for free is now being put behind a paywall.

This is simply not true. See Will’s response: #2353247

cheers, Paul

3 users thanked author for this post.

jburk07, jayinalaska, Will Fastie

Reply | Quote

Bye….don’t let the keyboard hit you in your posterior on the way out.

Reply | Quote

Weird, a few days ago the latest patch disappeared from Windows Update, because it yet again  caused bsods. I think everyone should simply avoid the March patches. The April round is already around the corner. This months’ round has nothing urgent to offer. Having said that, I think that Microsoft should stop its Windows as a ‘service’. Just roll out security patches when really needed. Stop messing around with useless UI-tweaks, unneeded app-updates and other useless stuff. The majority of users is only interested in running their software on an OS. Not the show-offs of Microsoft programmers and designers. Windows 10 was a mess the day it was released and for many it’s still a mess. The haydays of Windows are over, it still exists because companies – especially old school molochs – fear the new. But that’s not solid base for a thriving future.

1 user thanked author for this post.

Cybertooth

Reply | Quote

Microsoft pulled it as it was having issues getting installed and then they re-released it.

Susan Bradley Patch Lady/Prudent patcher

Reply | Quote

So I can look forward to yet another update, restart and all the involved risks and loss of time? With the high risk that the innocent watery blue-eyed nerds of Microsoft were wrong again? For us here, Windows became only a small part of the used work systems. It became way too much of a hassle. The machines left are already getting at age, when their time has come they will not be replaced anymore. The handful of vm’s we have weren’t even started for years already. Never missed them. I also noticed more recently that more and more businesses around here (Europe) are silently starting to use Open Office / Libre Office. Or a cloud service. Curious what the future will bring, thinks that Redmond set in motion its own disappearance from the OS market with the introduction of Windows 10. Down here, it has such a bad reputation. Maybe in the US the situation is different, don’t know. But there is more in the world than that…

Reply | Quote

I did not install KB5000841 monthly security-quality roll-up since Master patch list was set to defer on this KB.  I also did not install KB 5001027 Edge for win 7 X 64 since going to win 10 at a point in future and do not really use Internet explorer–use a couple of non Microsoft browsers.  I did install kb4504702, kb4484376, kb4504707,kb4493214, kb4504703 updates.  I am happy to report after installing these I am able to print from the two computers -lap top and desktop to both of my HP printers with apparently no issues with graphical content as i printed an excel graph to test out the graphical output.   I also printed  a drawing from CAD program to both printers with success.  Thank you to Susan and the master Patch list for providing guidance.

1 user thanked author for this post.

jburk07

Reply | Quote

My goodness. Having 24/7 access to expert IT professionals advising on how and when to update my computers for just a suggested donation of any amt. makes good business sense. C’mon now, geeks like us have to know that running a website requires time and resources. I gladly want to support this unique platform. I know value when I see it.

Win10 Pro

6 users thanked author for this post.

DrBonzo, LH, jburk07, opti1, AlphaCharlie, Will Fastie

Reply | Quote

I’ve fully updated 4 machines, 3 laptops and a desktop.  I used windows update to do it.  All four were/are running 20H2.  I first installed all the non-optional updates, then installed the optional cumulative update 1649.

All  installations went smoothly with zero issues on any of the four machines.  All passed the printer test.  I’m glad to have the security patches.

Desktop Asus TUF X299 Mark 1, CPU: Intel Core i7-7820X Skylake-X 8-Core 3.6 GHz, RAM: 32GB, GPU: Nvidia GTX 1050 Ti 4GB. Display: Four 27" 1080p screens 2 over 2 quad.

1 user thanked author for this post.

jburk07

Reply | Quote

Windows 10 Home 20H2 here, after reading the above I’m still not sure exactly how I should handle this month’s patches. Is there any consensus on what is the best course of action between:

1) (Unhiding and) let KB5000802 through WU, then in case of printing problems installing KB5001649

or

2) Let WU install KB5001649 (it is currently offered as an optional “download and install” on my machine).

On a slightly unrelated note, in the event of downloading KB5001649 from the Catalog for a manual install, can anyone please confirm that there is no need to manually install SSU KB4598481 beforehand in that this SSU is supposed to be installed with KB5001649 itself?

Reply | Quote

See #2353027 above.

Reply | Quote

Thanks PKCano. I was not sure whether the post you linked was your own personal recommendation or the “AskWoody consensus”, but it certainly makes sense to try out directly the latest OoB patch rather than going for the potential hassle of installing KB5000802 and then KB5001649 too.

Reply | Quote

I haven’t installed the 1909 KB5000808 (2021-03) and I have no idea of whether my Dell printer will have a problem with it, so I would probably be better off to install instead the latest 1909 OOB patch, KB5001648 (2021-03-18) –an optional update.  However, because of my GP settings, Windows Update does not offer optional updates. This means that I will have to go to the Microsoft Catalog and manually download and install it.  Will I have to manually download and install the latest 1909  SSU KB5000908 before that?  Or is it bundled with KB5001648?  Right now, the latest SSU I have is KB4601395 (2021-02).

#2353027 doesn’t indicate whether with a manual download of the latest OOB,  one will have to manually download the latest SSU first.  So, that’s why I am asking.

Reply | Quote

I think the SSUs are included in the CUs for 2004/20H2, but I think you need to download the one for 1909 separately and install it first. KB5000908 is available separately in the Catalog.
I installed KB5000908/KB5001648 on both my 1909 – Build 18363.1443

2 users thanked author for this post.

jburk07, WCHS

Reply | Quote

I have just read your #2353190 post about KB5001205, the latest 1909 SSU, which was released March 25. My latest 1909 SSU, KB4601395 (2021-02), is supposed to be superseded by this mentioned latest SSU, according to the MS Catalog.

I have checked the bulletin on SSU KB50001205 and it says the update is available through Windows Update and will be downloaded and installed automatically.

Shouldn’t I be seeing it by now? I have GP=2 notify download/install, but NO download button for it has appeared. The asterisked remark about managed settings says “We’ll ask you to download updates, except when updates are required to keep Windows running smoothly. In that case, we’ll automatically (my bold-face) download those updates.” I have checked “Installed Updates” and it’s not been installed automatically (on its own, behind the scenes).

I should add that SSU KB5001205 is supposed to address the problems with installing KB4535680 (2021-01), which was supposed to address the Secure Boot Security Feature Bypass Vulnerability (CVE-2020-0689) and which I hid in January.

Given these aspects of 1909’s latest SSU KB5001205, should I be downloading and installing it instead of SSU KB50000908 — thereby a) fixing the Secure Boot problems with KB4535680; and b) satisfying the need for the correct SSU for KB5001648 to fix the printer problems?

Reply | Quote

PKCano wrote:

I installed KB5000908/KB5001648 on both my 1909 – Build 18363.1443

There is information on the OOB patches released on 3/18, but I haven’t seen anything on the Secure Boot patch released on 3/25. The latter will be rolled into the April Patch Tues CU.

Personally, I’d leave it alone till then (unless you have a problem with Secure Boot). You probably are not offered the optional update b/c of the Group Policy setting for Feature deferral that includes Semi-Annual Channel.

Reply | Quote

PKCano wrote:

(unless you have a problem with Secure Boot).

I don’t know if I have a problem with Secure Boot or not.
However, I do have the Secure Boot feature in my BIOS. But, my vendor has not updated the BIOS for CVE-2020-0689 and I have not installed Secure Boot KB4535680.

PKCano wrote:

I haven’t seen anything on the Secure Boot patch released on 3/25.

Information on KB5001205 is here:
a) is it a Preview? (doesn’t say that in the heading).
b) or is it an optional update? (doesn’t say that in the text)
c) or is it going to be bundled with the April week “B” CU? or alternatively, you can download it now?
d) What does it mean when it says
“the update IS available through Windows Update“? (doesn’t seem to be available yet via WU)
and
“and will be downloaded and installed AUTOMATICALLY” (does “automatically” mean that it will bypass GP settings, such the “GP=2 notify download/install” setting and/or bypass a 1909 GUI “Feature update” setting=1 or 2 [when TRV=1909], i.e., will it force the update when it arrives in the WU queue?)

Reply | Quote

I took Susan’s advice and (backed up, and then) put 1649 on (that’s a big install!!!) and rebooted. No prob with HP M254dw color laserjet. At that point 508 disappeared so I just put the other 2 on – a cumulative and a .net. Very quick. All is going well. No problems.

2 users thanked author for this post.

jburk07, opti1

Reply | Quote

Windows 10 pro version 1909, WU use GP(#2) and I am not a techie. For this month update I downloaded and installed KB5000908, SSU, and KB5001566, so far all went well. Now I’m ready to upgrade to version 2004. Since I never done feature update, I do not know what to do with the hidden files in the hidden folder of wushowhide. At present I have the following files located in the hidden folder: KB4481252, MS SilverLight,  KB1535680,  KB4589211, KB4023057, and KB4601056, the 2021-02 CU for .Net Framewwork 3.5 and 4.8 for Win-10 version 1909…Question: Can I upgrade to version 2004 as is with these files in the hidden folder of wushowhide? Thanks!

Reply | Quote

Yes you can. I would recommend going to https://www.microsoft.com/en-us/software-download/windows10 and clicking on the update now button

Susan Bradley Patch Lady/Prudent patcher

1 user thanked author for this post.

SUCH41

Reply | Quote

SUCH41 wrote:

Now I’m ready to upgrade to version 2004.

Be aware, that if you follow Susan’s instructions, you will get v20H2 instead of v2004.

1 user thanked author for this post.

SUCH41

Reply | Quote

20H2 is fine.  Using the download site is the easiest way to get a feature update in my opinion.

Susan Bradley Patch Lady/Prudent patcher

Reply | Quote

But he wants to upgrade to v2004.

Reply | Quote

Such1 is there a reason you only want to go to 2004? At this point in the calendar I’d jump to 20H2.

Unless you have an application vendor that has specifically told you to go to 2004  – in which case I’d ask them why they can’t support 20H2 this late in the game.

Susan Bradley Patch Lady/Prudent patcher

1 user thanked author for this post.

SUCH41

Reply | Quote

anonymous wrote:

I don’t think it’s fair to call it mean. No one is being rude. People are just pointing out they don’t like an unannounced decision made about a service they use. We were promised by Woody that the addition of the Plus Newsletter would just be extras we could pay for if we wanted, and not change the free services provided for us on the site. Yet that seems to have been what happened.

The DEFCON system is for home users, and is supposed to be free. But we can’t currently use it since DEFCON 3 requires knowing what the problems are, and deciding if it’s worth it to patch. We can’t watch out for potential problems without knowing what they would be.

I’m fine with there being a more detailed version that was behind the paywall. But I would argue we still need a basic summary of the problems and what to look out for.

It’s that information that allowed me to recommend the site to others. It was the one source I could recommend that wouldn’t say “you need to update right away,” while still letting them know about the problems. But I can’t in good conscience tell them to pay for just that part, since they could get the information itself elsewhere for free.

I’m not saying Plus has no value, note. I have no problem with the site then telling these new free users that they can support the site and get all these extras if they join the paid tier. But at least the main purpose of the site–the MSDEFCON stuff and basic info about things to look out for–needs to still be free.

I hope that Susan will consider changing that aspect back.

this.

there is nothing left to be added.

PC: Windows 7 Ultimate, 64bit, Group B
Notebook: Windows 8.1, 64bit, Group B

Reply | Quote

[sheldon]

arguing about $1/year – really? Plus the details of the Defcon 3 will be in computer world on Monday

• This reply was modified 4 years, 1 month ago by sheldon.

Reply | Quote

Hi PK, I will follow the procedures you gave me in January which is: “to use the Group Policy settings for TargetReleaseVersion. Leave the “2” setting where it is. Change the Quality Deferral to 0, and or 1 , and set the TRV to 2004. After that is done, set the pulldown switches for deferral in the GUI both to zero” Then wait for v2004 to be offered the next time WU scans for update.”  Very sorry I did not write down the source. Thanks again for the advice.

Reply | Quote

All the information on the settings is in AKB2000016.

1 user thanked author for this post.

SUCH41

Reply | Quote

PKCano wrote:

Try again! 🙂

I tried again 2 more times. Still fails.

see screenshot of my history, not installed previously either.

Thanks

 

Reply | Quote

You are picking 2004 when it looks like your computer is on 1909?.  Try the one second from the top.

Susan Bradley Patch Lady/Prudent patcher

1 user thanked author for this post.

Vincenzo

Reply | Quote

Thanks for the reply.

I got excited and started downloading, but then I realized why I had skipped it before.
PKCano in his original suggestion said to not download it if it says Preview.

“For those of you on Win10 – the CUs are cumulative. Instead of installing the Patch Tuesday CUs, I would recommend installing the latest Out-of-Band patches for your version if you decide to patch,
+ They may be offered in the “Optional” section through Windows Update.
+ If they are not offered through Windows Update, they can be downloaded from the Microsoft Catalog, (search string = 2021-03 cumulative update for) saved on the desktop, then installed manually by double clicking on them. Be sure you DO NOT download those labeled “Preview.””

Reply | Quote

Sorry, I misread your version. The one for v1909 is on the second page of updates in the Catalog. See the arrow above the the “Download” column at the upper right.

The one second from the top in in your screenshot above is a “Preview.” Don’t use that one.

2 users thanked author for this post.

jburk07, Vincenzo

Reply | Quote

Ok thanks. That did it!

Reply | Quote

Well-maintained W10 V1909 Build 1863.1443.  Patched this month last night with current KB5001648.  No problems; installed fine and runs the same.  Just printed some docs to older version of Foxit, M$ print  to PDF, and PDFCreator; all went well; PDF is the sole printing I use nowadays.  NOTE:  This PC is a 1-year old AMD-equipped, 8 cores, AMC Radeon display;  The software is as ~Little~ of M$ stuff that I can manage:  OpenOfc.; above PDF software; Use solely Tbird, Ffox, Seamonkey, and Vivaldi; Macrium backup; and PhotoDemon photo editing.  I intentionally stay away from all the M$ things like the M$ store, their telephone/meeting software; etc. etc. etc.  And by the way:  Waiting for a few months until my V1909 is obsoleted by M$; on that day, I ~will~ begin a routine daily boot, into my shiny, smooth, WELL-WORKING AND EASY TO USE, AND TO MAINTAIN, Linux Mint 20.1 “Ulyssa” Cinnamon dual boot; and I will ~not~ look back.   FYI:  A good intro to Linux:

https://www.itsfoss.net/linux-mint-20-1-ulyssa-review-the-most-beautiful-linux-os/

Best to all.

Reply | Quote

anonymous wrote:

I ~will~ begin a routine daily boot, into my shiny, smooth, WELL-WORKING AND EASY TO USE, AND TO MAINTAIN, Linux Mint 20.1 “Ulyssa” Cinnamon dual boot; and I will ~not~ look back.

Why keep W10 at all. Format and reinstall Mint.

Reply | Quote

Thought I’d report back my experience with a customer’s Server 2016 Essentials box.

Patched in February with KB4601318 (2021-02 CU) and KB5001078 (servicing stack).

Tried to install KB5001633 (March 18 out-of-band optional CU) from the catalog. “This update is not applicable to your computer.”

Searched in the GUI for updates. KB890830 (malicious removal tool) and KB4589210 (microcode) were installed. Rebooted.

Searched in the GUI again. No updates offered. In WindowsUpdate.log:

“Update deferred by policy: ABD74871-EA87-49AA-B3FE-866ACA9B23F2.201”
“Error retrieving a returned update (0x80240007). May unintentionally include extra OS upgrades”

That GUID corresponds to KB5000803, the March 9 update.

After “sfc /scannow”, KB5001633 from the catalog is still “not applicable” but KB5000803 is now downloading from the GUI.

Reply | Quote

On Server 2016, even after successfully installing KB5000803, it will not let me install KB5001633. Not applicable.

I wonder how it determines “not applicable.”

Reply | Quote

Anyone experiencing problems with Epson Workforce printers and the March CU on Win 10 and Win 8.1?

Reply | Quote

I have not seen reports of issues with Epson printers.

Susan Bradley Patch Lady/Prudent patcher

1 user thanked author for this post.

KWGuy

Reply | Quote

I have Epson workforce  on win10 pro updated to KB5001649 – no problem

1 user thanked author for this post.

KWGuy

Reply | Quote

Epson workforce printer on win10 pro and updated to KB5001649 – no problems

1 user thanked author for this post.

KWGuy

Reply | Quote

[sheldon]

want delete this post – how?

• This reply was modified 4 years, 1 month ago by sheldon.
• This reply was modified 4 years, 1 month ago by sheldon.

Reply | Quote

Hi Susan, as  I said am not a techie, and the only reason I want 2004 is because I thought it is more stable then 20H2 and  I have read the procedures PK told me how to upgrade to 2004 and I can use it to get 20H2. No one told me to go with 2004. My computer skill and knowledge is very limited. Is there a video, such as youtube, showing the way to upgrade to 20H2 using the site you mentioned? I am scare to make a mistake since I probably don’t know how to correct it. Thanks for your help.

Hi PK, I have visited AKB2000016 so many time I finally bookmark it! Thanks for reminding me.

Reply | Quote

[cyberSAR]

I’m not Susan but I can tell you 20H2 isn’t much different from 2004. We are moving all our machines to 20H2. Yes, couple obscure bugs but nothing to impact normal use. We also find 20H2 to be a bit snappier than 1909 as do our clients. Easy way to upgrde is go to this site and click upgrade now. I’m actually doing one at this moment.

https://www.microsoft.com/en-us/software-download/windows10

Edit to add: I have upgraded approx 100 machines so far to 20H2 and have not had any issues (knock on wood). 🙂

• This reply was modified 4 years, 1 month ago by cyberSAR.

2 users thanked author for this post.

jburk07, SUCH41

Reply | Quote

Let me do a video for you and post it.  I’m making dinner now but when I’m done I’ll do a video for you.

Susan Bradley Patch Lady/Prudent patcher

5 users thanked author for this post.

WCHS, jburk07, mcbsys, SUCH41, DrBonzo

Reply | Quote

@Susan Bradley – Just so I understand this, it’s Saturday night, you’re cooking dinner, and afterwards you’re going to make a video for one of the AskWoody Loungers. Where else can anybody get service like that for anything!!?? Drop of the hat service by a highly skilled, knowledgeable, competent IT pro. This is the best and biggest bargain on the internet – or maybe anywhere.

8 users thanked author for this post.

LH, WCHS, jburk07, mledman, mcbsys, opti1, SueW, The Surfing Pensioner

Reply | Quote

Youtube video here

So here’s the “update now” link: Download Windows 10 (microsoft.com)

And once you are done I recommend putting in the registry key to keep you on 20H2 – you can find the video and instructions for that here: Tasks for the Weekend – January 30, 2021 @ AskWoody

Let me know if you have any questions/issues?

Susan Bradley Patch Lady/Prudent patcher

8 users thanked author for this post.

DrBonzo, jburk07, WCHS, LHiggins, glnz, SUCH41, Perq, Vincenzo

Reply | Quote

I have Win 10 Pro 64-bit version 2004. I had installed updates through 2-2021 only. Today, installing KB 5001649 caused real problems. The installation took forever, and then it slowed down my PC. A DISM /RestoreHealth didn’t complete and hung at 50.6%. Note the two “versions” in the first screenshot below.

But after uninstalling the KB and trying again, things got better and after running my bat file with sfc /scannow and DISM RestoreHealth, I got this:

Thoughts?

1 user thanked author for this post.

jburk07

Reply | Quote

I don’t like to do dism commands right after updating. Did you do it immediately afterwards?

Susan Bradley Patch Lady/Prudent patcher

Reply | Quote

Susan – Yes – pretty soon after rebooting after the installation.  But yesterday was a bad day anyway.  The initial attempt to install KB 5001649 had hung with the green progress bar at around 25%, and I canceled it.

Then the second attempt to install took a long time, after which I rebooted, ran my bat file with sfc /scannow and the Dism-Restorhealth and that hung, as I noted above.  And the PC was very slow.

(Note that I never installed the original 03-2021.)

So I uninstalled, things seem normal now, and I think I’ll wait till the 04-2021s get your higher DefCon.

Reply | Quote

After I put on 1649 (which took a while!), I rebooted and my laptop was busy with update stuff for the first maybe 5 minutes, then was fine.

Reply | Quote

Wow, Susan, am speechless! Thanks for the video and please, if I may request, don’t skip a single steps how unimportant it may appear to you. Thanks again!

Reply | Quote

Hi @cyberSAR, thanks for the info regarding version 20H2. Could you please tell me the steps you have  to do after you click the  upgrade now button? It is not that I don’t trust Susan, she is  preparing a video for  me, it is just that, to be honest, I need a  hearing aid. So a written instructions will definitely help. By the way, do I have to input certain info which I have to prepare ahead of time? Thanks for your help! If you are busy and don’t have the time, it’s OK too, I definitely understand.

Reply | Quote

Click on this link:  https://www.microsoft.com/en-us/software-download/windows10  then on update now

There’s a little file that downloads, click on it.  While I talk in the video, and I’ve not done it in real time (I paused the video as it does the … percent updating….sections, you should be able to see how it works.  Once you start the process it does the rest for you.

Susan Bradley Patch Lady/Prudent patcher

3 users thanked author for this post.

jburk07, SUCH41, Perq

Reply | Quote

Thanks for the video, I’ve always used installation media for the upgrades, I will try the iso site this time.

Reply | Quote

@SUCH41 I’m not much at writing things up but if this helps a little with Susan’s excellent video I’m happy to do so. Note that most of my work is done remotely so I don’t have access to the machine throughout the whole process. Usually I download an iso mount it and run setup from there but this is probably an easier way to do it.

I start by doing a backup and drive image with Macrium or ATI.

Then I do a good maintenance on the machine before the upgrade. Disk cleanup, temp files etc. Then I run sfc /scannow in an elevated powershell to make sure I don’t have existing issues.

Go to the site https://www.microsoft.com/en-us/software-download/windows10 and click the update now button. It downloads a small file. Close the browser, take a deep breathe and run the file. Say a prayer and get a drink or three while it does its thing. 🙂

After it gets to desktop I immediately set my pause via gpedit or the advanced pause settings in update section. Then let the machine sit for 1/2 to 1 hour or until disk activity has pretty much stopped. Then I reboot and go for updates.

After updating, rebooting and after machine settles down I run sfc /scannow and check all my programs and system operation.

Hope this helps. Good luck!

3 users thanked author for this post.

LHiggins, jburk07, SUCH41

Reply | Quote

Windows 10 20H2 Home here, reporting after installing the following patches through WU:
– KB5001649 – 2021-03 Cumulative update for Windows 10 Version 20H2 (latest OoB for 20H2 installed by clicking the dreaded “Download ind install” under optional updates);
– KB890830 – MSRT Windows x64 v5.87;
– KB449317, KB4493228, KB4493227, KB4493203, KB4493239 – various Office 2013 patches.

I have skipped the microcode update atm (KB4589212) and I’m now at build no. 19042.870. The system appears to be running properly, no issues to report when printing on my Samsung printer or PDF printers.

1 user thanked author for this post.

jburk07

Reply | Quote

hopefully a simple question with a simple answer.

if i choose to NOT install the March CU, do I just use the wushowhide tool/process to clear the CU and wait till next month?

thanks,

-Mark

Reply | Quote

Yes, it should be enough. Once you tell wushowhide to hide the March CU, check again in Windows Update if it was effectively bypassed.

Reply | Quote

[GoneToPlaid]

Windows 7 Group B users only:

I just compared the files in KB5000851 (the March security-only update) and KB5001639 (the March out-of-band patch for KB5000851). The only difference is win32k.sys which in KB5001639 has a date of March 16 and is version 6.1.7601.24567. The date and version for win32k.sys in KB5000851 is 6.1.7601.24566 with a date of March 3. The win32k.sys files in each update are the same size yet have different crc32 checksums. The only other change between these two updates is the manifest. The manifest is a bit larger in KB5001639 since it supersedes KB5000851.

So for us Windows 7 Group B users, we should skip installing KB5000851, and we should instead install KB5001639. I do not recommend installing both. Windows 7 Group B users should only install KB5001639 since if there are are any unresolved issues with this out-of-band update, uninstalling KB5001639 will get you back to February without any fuss.

Windows 7 Group A users only:

Group A users must install the KB5000841 monthly rollup, and then install KB5001639. If there are still any unresolved issues, both will have to be uninstalled in the reverse sequence in order to get back to February.

• This reply was modified 4 years, 1 month ago by GoneToPlaid. Reason: typo

4 users thanked author for this post.

zat_so, SueW, byteme, TonyC

Reply | Quote

@cyberSAR, thanks for the info. How can I be sure the following does not happen:

System and user certificates might be lost when updating a device from Windows 10, version 1809 or later to a later version of Windows 10. Devices will only be impacted if they have already installed any Latest cumulative update (LCU) released September 16, 2020 or later and then proceed to update to a later version of Windows 10 from media or an installation source which does not have an LCU released October 13, 2020 or later integrated. This primarily happens when managed devices are updated using outdated bundles or media through an update management tool such as Windows Server Update Services (WSUS) or Microsoft Endpoint Configuration Manager. This might also happen when using outdated physical media or ISO images that do not have the latest updates integrated.

Thanks for your help.

Reply | Quote

This primarily happens when managed devices are updated using outdated bundles or media through an update management tool such as Windows Server Update Services (WSUS) or Microsoft Endpoint Configuration Manager. This might also happen when using outdated physical media or ISO images that do not have the latest updates integrated.

Using update now from the link we shared will not be outdated media

1 user thanked author for this post.

SUCH41

Reply | Quote

My 2 cents on how to update to a new release:

Download the iso and burn it to a USB stick.

Image back up your disk/SSD.<—-<—–<—–<—–<———-

Plug in the USB stick and run setup.exe .

Reply | Quote

You don’t need to burn the ISO to USB, double click on the IOS and Windows will mount it as a drive.

cheers, Paul

1 user thanked author for this post.

a

Reply | Quote

LOL, you know, that is one thing I have never utilized. Macrium offers that, too. I should utilize that. Thanks!

Reply | Quote

Before I upgrade from 2004 to 20H2, I am guessing I should change the gpedit command I did earlier (at Susan’s suggestion) that keeps my updates to 2004. I should probably change that setting to 20H2, yes?
But I was too dumb to take a note as to where that is in gpedit.
Please give me the link here to Susan’s posts about that.
Thanks.
(AND YOU ALL SHOULD CONTRIBUTE TO THIS GREAT AND USEFUL WEBSITE. My contribution is very modest, but everyone’s can also be so if everyone would contribute.)

Reply | Quote

You need to change the TargetReleaseVersion setting to 20H2.

Tasks for the Weekend January 30 to use Susan’s reg files.

AKB2000016 Section 2: To use the Reg file Method – links to the .Reg files
OR
AKB2000016 #2286499 top screenshot to see the location of the Group Policy setting.

Reply | Quote

[glnz]

PKCano – Great. Your secondary link is what I did the first time:

These Settings are found in Group Policy (gpedit.msc) in Win10 Pro at this location:
– Local Computer Policy\Computer Configuration\Administrative Templates\Windows Components\Windows Update
– Under Windows Update for Business:
— Set Select the target Feature Update version to Enabled.
— Set Target Version for Feature Update to the released version on which you want to remain or to which you want to upgrade (example 2004)

Question 1: Now, if I upgrade my current 2004 to 20H2, at what point should I go back to that gpedit and change it to “20H2”? Before I start the upgrade or after?

Question 2: When I upgrade to 20H2, I don’t want the upgrade to pull and install all current updates for 20H2. So, since I just made an .iso of the 20H2, should I first disconnect the internet when I run it (probably a bad idea), or should I do something else? As I know this is an old question, please point me to links. ADDED IN EDIT: By the way, the .iso for 20H2 indicates it will install “FileVersion”, “10.0.19041.1 (WinBuild.160101.0800)”

Thanks!!

• This reply was modified 4 years, 1 month ago by glnz.

Reply | Quote

If you want to upgrade 2004 -> 20H2 using Windows Update, you can set TRV before the upgrade and you will be offered 20H2 through the Windows Update queue. It will be up-to-date (probably as of the last Patch Tues. and offer the OOB in the Optional Section, depending on your other settings).
If you use another method to upgrade, setting TRV after the upgrade will hold you on 20H2 until you want the next version.

If you use an ISO and are connected to the Internet, it will update you to the latest Build in the process of the install.

If you use an ISO and are disconnected from the Internet, it will give you the Build that is contained in the ISO and you will have to update from there (be sure WU settings are good before you go online). If this is the case, to keep from getting the up-to-date Build through WU, you will need to download and manually install the CU (and SSU) for the time period you want the update to be.

Information: There is very little difference between 2004 and 20H2. The Feature Experience Pack is included in BOTH, just not turned on in 2004. You might as well bite the bullet and go ahead and upgrade to the up-to-date Build of 20H2 the easiest way – either through TRV and WU or as described by Susan from the MS website. IMHO.

3 users thanked author for this post.

jburk07, glnz, Vincenzo

Reply | Quote

When I upgrade to 20H2, I don’t want the upgrade to pull and install all current updates for 20H2.

What I do is go into gpedit immediately after reboot comes up and set pause for quality updates in windows updates for business to as far out as needed to prevent March updates. This has allowed me to fetch the February updates and not the March updates. If you like you can then set it back to not configured and play with the gui to get your pause period you desire. I have some of mine set to April 30.

2 users thanked author for this post.

glnz, PKCano

Reply | Quote

cyberSAR wrote:

This has allowed me to fetch the February updates and not the March updates

with Win10/Pro, could you control it so that you get the February updates but not the March updates by setting GP=2 while you are paused and waiting for the machine to settle down, afterwards rebooting, then checking wushowhide for the March update and anything else that you don’t want and hiding it/them, and then waiting until WU refreshes to click the download button to get everything else not hidden?

“Waiting until WU refreshes” means not even going to Windows Updates (to avoid the problem you cited in #2353750

Reply | Quote

Possibly. You would think so, but when I tried GP=2 on a test I had a bad experience as the machine updated when I visited the updates page without me pressing the unpause button. Possible, I guess, that I hit it without realizing it but pretty sure I didn’t.

Also due to the number of machines I maintain, I don’t want GP=2 as a rule because I don’t have the time to wait on downloads and don’t want my clients pestered with notices.

Reply | Quote

glnz wrote:

Now, if I upgrade my current 2004 to 20H2, at what point should I go back to that gpedit and change it to “20H2”? Before I start the upgrade or after?

Set to 20H2 after the upgrade. 21H1 will come in June 21.

glnz wrote:

since I just made an .iso of the 20H2, should I first disconnect the internet when I run it

Yes. Upgrading from ISO may also force you to create Microsoft account in addition to the latest monthly updates.
After the update from ISO, go over all settings, on Pro set GP “Notify…”=2. That way you will be able to hide any unwanted updates with WUmgr..

On HOME set your network connections (wlan, wi-fi) to metered before reconnecting to the Internet.

glnz wrote:

By the way, the .iso for 20H2 indicates it will install “FileVersion”, “10.0.19041.1 (WinBuild.160101.0800)”

“10.0.19041.1″ is not the real version that will be installed. You will get 19041/19042.870/844/746.. according to the date/month you have downloaded the ISO file.

1 user thanked author for this post.

glnz

Reply | Quote

If you boot from the ISO that will trigger a new install. If you expand the iso on a flash drive and mount it like it’s a cd rom drive and then find the setup.exe it won’t trigger a new account process (at least it hasn’t when I did it a few months ago – things could have changed)

Susan Bradley Patch Lady/Prudent patcher

1 user thanked author for this post.

jburk07

Reply | Quote

I insert the new iso and click on setup. It does not trigger a new account request.

1 user thanked author for this post.

jburk07

Reply | Quote

Installed KB5000802, now running 20H2 v.19042.867

HP ENVY 5540 working normally.  No printing problems.

Optional KB5001649 offered but not installed because current build is working and I have no printer problems.

HP Pavilion Desktop TP01-0050 – 64 bit
Windows 10 Home Version 22H2
OS build 19045.5608
Windows Defender and Windows Firewall
Microsoft Office Home and Business 2019
-Version 2502(Build 18526.20168 C2R)

1 user thanked author for this post.

jburk07

Reply | Quote

PKCano wrote:

Information: There is very little difference between 2004 and 20H2. The Feature Experience Pack is included in BOTH, just not turned on in 2004. You might as well bite the bullet and go ahead and upgrade to the up-to-date Build of 20H2 the easiest way – either through TRV and WU or as described by Susan from the MS website. IMHO.

I am on 2004 Pro. I have set up everything as you (PKCano) laid out in AKB2000016 to stay on 2004 for now, and I have not yet installed any March updates . . .

If I upgrade to 20H2 through TRV and WU is there any benefit to first installing KB5001649 before I upgrade or should I wait and see if it gets folded into the 20H2 build?

If I upgrade to 20H2 as described by Susan from the MS website is that the same as installing from an ISO with the accompanying concerns you mentioned (2353674) about implications of running the install process connected or disconnected from the internet?

Thanks!

Reply | Quote

My opinion would be best to just use Windows update to move up from 2004 to 20H2. It’s a quick update although I would suggest waiting a bit until they sort this March update issue out. That said I haven’t had any issues yet with the machines with the March updates installed. I’m advising clients to wait until we see how the April updates go before moving up to 20H2

3 users thanked author for this post.

MHCLV941, jburk07, opti1

Reply | Quote

Let me explain further:
2004 and 20H2 share the same core, they get the same CUs and the same SSUs and the same .NET, etc, etc. Both contain the same Feature Enhancement Pack – it’s turned on in 20H2, it’s just not turned on in 2004.

Given that they get the same updates, the problems that one has, the other also has. And it’s not fixed in one, it’s fixed in BOTH at the same time. So. BOTH have the same printer issues with the Patch Tues. patches, and BOTH receive the same OOB updates as fixes.
The OOB printer fixes will be included in the April Patch Tues. updates.

So it really is moot whether you are on 2004 or 20H2.

There is a difference between 1909 and 2004/20H2. But 1909 also has the printer problems with March patches. So you are faced with the OOBs there too if you decide to patch. 1909 will be EOL on Patch Tues, MAY 11th. It’s time to move on before MS forces the move.
Take your choice between a rock and a hard place.

I believe using the “Upgrade now” from the MS website (you’ll be ONLINE) or using TRV+WU (ONLINE) will probably get you to the same place – March updates installed.Or see @cyberSAR ‘s suggestion in #2353677 above..
If you install from an ISO (OFFLINE), you will have to update from the time the ISO was made to the current.

3 users thanked author for this post.

jburk07, opti1, cyberSAR

Reply | Quote

Wish I was as good as PKCano at explaining things!

1 user thanked author for this post.

Will Fastie

Reply | Quote

Given that they get the same updates, the problems that one has, the other also has. And it’s not fixed in one, it’s fixed in BOTH at the same time. So. BOTH have the same printer issues with the Patch Tues. patches, and BOTH receive the same OOB updates as fixes.

If I am currently on ver 2004 without the March CU and I want to move to 20H2 via the Windows Updater, will I be installing not only the 20H2 Feature Update, but will it also include the March CU?

And if so, which one?  Or will I be updated to 20H2 and still maintain the February CU?

Windows 10 Pro x64 v22H2 and Windows 7 Pro SP1 x64 (RIP)

1 user thanked author for this post.

opti1

Reply | Quote

See @cyberSAR ‘s suggestion in #2353677 above..

Reply | Quote

That post would imply that the Feature Update to 20H2 is the activation of the enhancement package ONLY and that as long as I have GP set to 2 (notify) and currently at ver 2004 with February CU installed, I should be again offered the March CU separately, which I can hide and await resolution – correct?

Windows 10 Pro x64 v22H2 and Windows 7 Pro SP1 x64 (RIP)

1 user thanked author for this post.

opti1

Reply | Quote

[cyberSAR]

In that post I’m updating 1909 systems to 20H2 from an iso. I don’t really use the GP set to 2 or wushowhide so can’t accurately answer your question. I tend to set the updates for business quality updates pause to 15-20 days for the machines I don’t access monthly. The ones I access weekly for maintenance I generally use the GUI to pause for different time frames after updating each month.

I did play with GP set on 2 recently on a machine and as soon as I checked (I did not click the check for updates button, just went to updates) updates it downloaded the latest updates. Wasn’t thrilled with that.

• This reply was modified 4 years, 1 month ago by cyberSAR.

Reply | Quote

If you “Resume updates” from Pause, that will happen. If you use the “2” you shouldn’t “Resume updates” (unPause) b/c it ignores the “2.”

Reply | Quote

That’s just it. I didn’t resume from pause. I just accessed the updates settings page and they started downloading. Didn’t spend much time on it as it doesn’t fit my workflow.

Reply | Quote

There is no mention of Dell printers. Does anyone know if they pass muster with the March CU? Or if not, does the latest March OOB fix the problems with these printers?

Reply | Quote

I personally have not seen any reports, but since I don’t personally have a Dell printer I can’t guarantee.  If the printer is “newish” you are probably getting a newer driver and thus will be fine.

Susan Bradley Patch Lady/Prudent patcher

Reply | Quote

Does Dell even “make” printers anymore – I could not find any listed on their web page.

In any case, back when it did, the printers were actually made by Lexmark and badged as Dell.    Perhaps checking on Lexmark printer problems would shed some light?

Reply | Quote

Thanks for the lead. No wonder Dell threw it in for practically nothing when I bought my laptop a little more than 4 years ago!!

Reply | Quote

Tex265 wrote:

as long as I have GP set to 2 (notify) and currently at ver 2004 with February CU installed, I should be again offered the March CU separately, which I can hide and await resolution – correct?

Correct.

1 user thanked author for this post.

jburk07

Reply | Quote

[MHCLV941]

Dymo has issued updates to both DymoConnect (its new label designer) and Dymo Label (its old label manager) that supposedly deal with the printer issues with Dymo label printers due to this month’s updates.

Based on my experience, DO NOT install these updates on computers that need to use shared Dymo printers until/unless you’ve installed the March updates.   Whatever Dymo did to “fix” the MS updates breaks the software’s capability to see a Dymo printer shared from another PC.

On the other hand, once the updates are installed, you don’t need the updated versions of the Dymo software.

NB:  I never could get DymoConnect to use a shared printer.  The computer sees it just fine and prints a test page to it.

• This reply was modified 4 years, 1 month ago by MHCLV941.

1 user thanked author for this post.

Will Fastie

Reply | Quote

MHCLV941 wrote:

Whatever Dymo did to “fix” the MS updates breaks the software’s capability to see a Dymo printer shared from another PC.

Clarification:  Installing these updates prior to installing the March updates breaks the software’s capability to see a Dymo printer shared from another PC.

 

Reply | Quote

Last night I decided to follow Susan’s recommendation and after watching her video one more time I visited http://www.microsoft.com/en-us/software-download/windows10, and clicked the update now button. After about 4 hours later it is successfully upgraded from 1909 to version 20h2.  Before I upgraded I had installed KB5001566, and after upgraded to 20h2 I noticed that the system had installed KB5000802. Thanks goodness the printer seems to print just fine (printer is HP Envy 7640). After the upgrade I followed PK’s AKB2000016 article and make sure  the “2” is still on and set the TRV to 20h2. Afterward following @cyberSAR approach, I run sfc /scannow. Just thought I give a brief report and thanks every one for your support!

1 user thanked author for this post.

jburk07

Reply | Quote

Glad it all went well for you!

1 user thanked author for this post.

SUCH41

Reply | Quote

KB5000842 preview update for 2004/20H2 recently released Mon March 29 after 2pm Pacific local time:
https://support.microsoft.com/help/5000842

Reply | Quote

a wrote:

I insert the new iso and click on setup. It does not trigger a new account request.

Did you run a clean install or update/upgrade ? Clean install will ask for Microsoft account.

Reply | Quote

[glnz]

Win 10 Pro 64-bit version 2004.  I’ve installed all updates through KB5001649 and rebooted a few times.

If in cmd I run Dism /Online /Cleanup-Image /RestoreHealth, I see what looks like a mismatch in versions:

Deployment Image Servicing and Management tool Version: 10.0.19041.844
Image Version: 10.0.19041.870

It all comes out 100% OK, but does this mismatch mean anything?

Thanks.

• This reply was modified 4 years, 1 month ago by glnz.
• This reply was modified 4 years, 1 month ago by glnz.

Reply | Quote

I finally got around to backing up my computer after first resolving an issue with Quickbooks not being able to export to Excel. I did full backups to two external drives.

My computer is Windows 7 Group B.

I installed KB5000851 (the March security-only update) and KB5001639 (the March out-of-band patch for KB5000851) back-to-back and then I rebooted. I then tested printing to my Canon printers. There were no printing issues. I then installed the latest cumulative IE update and rebooted. Thus my main computer is updated through March 2021.

 

1 user thanked author for this post.

SueW

Reply | Quote

Hey there I was wondering if its safe to install KB5000802 which is a march cumulative update?

Reply | Quote

Not really………….best to prefer kb5001649…………..Where have you been for the last month?

Reply | Quote

Yesterday I upgraded from 2004 to 20H2 via the Windows Updater (after updating 2004 manually with the March KB5001649 from the MS Catalog).

All seems well, except today I ran sfc /verifyonly and it says “Windows Resource Protection found integrity violations.  For online repairs …. etc”

For some reason I think I read Susan did not recommend running sfc after an update, but not sure why?

Should I wait awhile (for what?) or try running sfc /scannow ?  Or?

Windows 10 Pro x64 v22H2 and Windows 7 Pro SP1 x64 (RIP)

Reply | Quote

The Surfing Pensioner wrote:

Where have you been for the last month?

Perhaps magigreen1 was waiting for someone to answer a question without being snarky.

Alsa, more waiting was necessary.

Reply | Quote

magigreen1 wrote:

Hey there I was wondering if its safe to install KB5000802 which is a march cumulative update?

Maybe.

I’ve upgraded about two dozen computers since 3/29 and not had any problems.  Most of the machines used either a Dymo label printer or an ancient Richo copier.  I also installed the updated Dymo software (see https://www.dymo.com/en_US/home).

The computers were on update pause until the 29th, so the machines did not “see” 802 until that date.  It possible Microsoft updated 802.

I suggest you scan this thread for mention of makes of printers that are problematic (Dymo figuires prominently in this list) and proceed accordinginly.

 

Reply | Quote

Tex265 wrote:

Should I wait awhile (for what?) or try running sfc /scannow ?

I seem to recall Susan (or someone) mentioning there are background chores going on for a while after an update, so that might have something to do with it.

That said, unless you also ran SFC before you updated, you have no assurance that the errors were present before you updated.

Reply | Quote

MHCLV941 wrote:

That said, unless you also ran SFC before you updated, you have no assurance that the errors were present before you updated.

I did run sfc before, and there were no errors.

Question now is should I run sfc /scannow?  Or?

Windows 10 Pro x64 v22H2 and Windows 7 Pro SP1 x64 (RIP)

Reply | Quote

I’ve run it on all my upgrades and it repaired errors with no issues.

Reply | Quote

Tex265 wrote:

Or?

Seems two options: ignore it or see not.

If not, I suggest you run sfc /verifyonly again to see if there are still errors.  If so, SFC/scannow seems to be the next reasonable step.

 

Reply | Quote

Security Advisories Released or Updated on April 7, 2021
======================================================================================

* ADV990001

– ADV990001 | Latest Servicing Stack Updates
– https://msrc.microsoft.com/update-guide/vulnerability/ADV990001
– Reason for Revision: Microsoft has released servicing stack update (SSU) 5001205
for all affected editions of Windows 10 version 1909. This SSU also addresses known
issues customers might have experienced when installing the update for CVE-2020-0689;
see [KB5001205](https://support.microsoft.com/help/5001205). Customers must install
the latest SSU before installing applicable security updates. See the FAQ for more
information.
– Originally posted: November 13, 2018
– Updated: April 7, 2021
– Version: 35.0

Reply | Quote

Just in case anyone is interested, I just downloaded and installed five Office 2010 updates waiting so nice and patiently for me on Windows 7’s WU.  All went well as usual and my Office is up to date.  The two extra updates were for PowerPoint and Visio.  Yep Visio.

Being 20 something in the 70's was far more fun than being 70 something in the insane 20's

3 users thanked author for this post.

SueW, GoneToPlaid, DrBonzo

Reply | Quote

I meant to post this a few days ago when I did the same. 2 Office, 1 Excel, 1 Powerpoint, and 1 Visio, all through Windows Update on a Win 7 Pro x 64 (although my Office is the 32 bit version). No problems or issues (but then, I never have had any issues with Office updates – amazingly enough).

3 users thanked author for this post.

SueW, Charlie, GoneToPlaid

Reply | Quote

I too have never had any problems with Office updates, yet that is because I avoided the “once in a blue moon” problems which have occurred by not letting my Office 365 installations automatically update. I wait until at least 30 days has passed since a recent Office update. If no issues have been reported, then I update.

2 users thanked author for this post.

DrBonzo, Charlie

Reply | Quote