News, tips, advice, support for Windows, Office, PCs & more
Home icon Home icon Home icon Email icon RSS icon

We're community supported and proud of it!

  • MS-DEFCON 3: Patching is unclear

    Home Forums AskWoody blog MS-DEFCON 3: Patching is unclear

    Viewing 71 reply threads
    • Author
      Posts
      • #2353004
        Susan Bradley
        Manager

        ISSUE 18.11.1 • 2021-03-26 By Susan Bradley Proceed with caution. I’m separating my patching guidance into two categories: one for business users and
        [See the full post at: MS-DEFCON 3: Patching is unclear]

        Susan Bradley Patch Lady

        6 users thanked author for this post.
      • #2353010
        Alex5723
        AskWoody Plus

        Should home users install both CU and optional updates ?

        • #2353019
          Alex5723
          AskWoody Plus

          Installed March update for 20H2 Pro (now 19042.867):

          CU KB5000802
          Intel microcode KB4589212
          Servicing Stack 10.0.19041.860
          MSRT V5.87 KB890830.

          No problem with printing to Samsung AIO laser printer CLX-3185FN Type-3.

          Microsoft has added a 3rd restart (first -30%, second -100%, third -cleaning)

          Attachments:
          2 users thanked author for this post.
      • #2353014
        Travasaurus
        AskWoody Plus

        I thought that I’d “dodged the bullet” after updating, but my trusty Dymo LabelWriter 450 Turbo “bit the big one” just like everybody else’s did. However, as soon as I upgraded to the 8.7.4 version (I was at *.3) it fixed the problem immediately. I can see Microsoft missing something as (relatively) obscure as Dymo LabelWriters, but I can’t see them not testing for the other more common printers. (I bet they don’t going forward) Kudos to Dymo for jumping in and fixing the problem in pretty short order but may we assume that it was Microsoft’s “fault”, or was it some kind of a previously-undetected bug in Dymo’s code, that was “exposed” by the update? If it was indeed Microsoft’s fault (which it appears to be, but then they’re everybody’s favorite whipping boy) it seems like they should’ve addressed the problem before Dymo had to…

      • #2353017
        honx
        AskWoody Lounger

        since i’m no plus member i can’t read the article, so i don’t know if i as home user should patch or not… so i take defcon 3 as prompt and simply patch my win8.1 notebook (and i’ll install office updates on win7 machine as well).

        so on 8.1 i need both security only updates kb5000853 and kb5001640? (and then ie kb5000800 of course).

        PC: Windows 7 Ultimate, 64bit, Group B
        Notebook: Windows 8.1, 64bit, Group B

        • This reply was modified 2 weeks, 3 days ago by honx.
        1 user thanked author for this post.
        • #2353022
          honx
          AskWoody Lounger

          on 8.1 i just installed kb5000853 (win) and kb5000800 (ie), rebooted and then i installed kb5001640. after another reboot office updates come in…

          PC: Windows 7 Ultimate, 64bit, Group B
          Notebook: Windows 8.1, 64bit, Group B

        • #2353080
          anonymous
          Guest

          This is a reasonable point. Once upon a time, the Ask Woody Defcon system was easy to understand and advice was prominent. If the advice on the Defcon rating is now disappearing behind a paywall such that it is no longer clear what to do, I think the site will have taken a major step backwards.

          You might reasonably suggest that we subscribe to Plus but that just means that something very important that was once free is now monetised which I don’t think was ever the purpose of the site.

          4 users thanked author for this post.
          • #2353177
            honx
            AskWoody Lounger

            that’s right, since important articles regarding defcon rating are not visible for non paying non plus members, askwoody is becoming useless. i wish woody never retired. under his leadership at least this important information regarding defcon system was available for free!

            PC: Windows 7 Ultimate, 64bit, Group B
            Notebook: Windows 8.1, 64bit, Group B

            3 users thanked author for this post.
            • #2353198
              Microfix
              AskWoody MVP

              Even as a member for over 4 years the last 3 as MVP, I never got an email either.
              Was also a regular for 2 years on the askwoody blog/comment site before that…

              W10, the itch you simply cannot scratch!
            • #2353240
              wavy
              AskWoody Plus

              Ciao’

              🍻

              Just because you don't know where you are going doesn't mean any road will get you there.
            • #2353251
              The Surfing Pensioner
              AskWoody Plus

              For goodness’ sake, you load of old meanies! It costs peanuts to become a Plus member for a year and in return we can access detailed instructions on how to keep our computers safe, especially from dear old MS, often within minutes of any query being lodged. My PC technician charges £60 per hour and has to be booked weeks in advance – even if he can carry out the repair remotely. It’s a no-brainer.

              6 users thanked author for this post.
              • #2353277
                Susan Bradley
                Manager

                Microsoft charges $499 for a professional business support case and … how can I put this delicately…. they provide horrible support these days.

                Susan Bradley Patch Lady

              • #2353336
                anonymous
                Guest

                I don’t think it’s fair to call it mean. No one is being rude. People are just pointing out they don’t like an unannounced decision made about a service they use. We were promised by Woody that the addition of the Plus Newsletter would just be extras we could pay for if we wanted, and not change the free services provided for us on the site. Yet that seems to have been what happened.

                The DEFCON system is for home users, and is supposed to be free. But we can’t currently use it since DEFCON 3 requires knowing what the problems are, and deciding if it’s worth it to patch. We can’t watch out for potential problems without knowing what they would be.

                I’m fine with there being a more detailed version that was behind the paywall. But I would argue we still need a basic summary of the problems and what to look out for.

                It’s that information that allowed me to recommend the site to others. It was the one source I could recommend that wouldn’t say “you need to update right away,” while still letting them know about the problems. But I can’t in good conscience tell them to pay for just that part, since they could get the information itself elsewhere for free.

                I’m not saying Plus has no value, note. I have no problem with the site then telling these new free users that they can support the site and get all these extras if they join the paid tier. But at least the main purpose of the site–the MSDEFCON stuff and basic info about things to look out for–needs to still be free.

                I hope that Susan will consider changing that aspect back.

                2 users thanked author for this post.
              • #2353447
                anonymous
                Guest

                I posted #2353080 above. I agree wholeheartedly with #2353336. That was exactly my understanding of the Plus feature. A lot of us visited for simple, easy to understand advice and there was more depth available for the professional or the interested.

                The argument about a small cost is misdirection. The principle behind the site has altered without notice and I lament the passing of what was once a truly public-spirited site.

                 

                1 user thanked author for this post.
              • #2353986
                Susan Bradley
                Manager

                BTW the link for computerworld is up in today’s post:  https://www.askwoody.com/2021/the-ides-of-march/

                Susan Bradley Patch Lady

          • #2354288
            MHCLV941
            AskWoody Plus

            subscribe to Plus

            If the information that’s now behind the dastardly paywall isn’t worth $20 a year to you, move along and stop bothering those who don’t have a problem paying for something of value.

             

            2 users thanked author for this post.
            • #2354296
              Paul T
              AskWoody MVP

              The information is not “now behind a paywall”, it always was.
              And, as you can see form Susan’s post above, it’s available in the ComputerWorld article free.

              cheers, Paul

              1 user thanked author for this post.
              • #2354302
                MHCLV941
                AskWoody Plus

                ComputerWorld article free

                Actually, it’s behind a “reverse” paywall” there, too.  I bet a Happy Meal of your choice that Computerworld pays for that article.

              • #2354484
                Paul T
                AskWoody MVP

                “Reverse paywall” doesn’t prevent me reading the article, does it you?

                Susan has to make a living, just like the rest of us.

                cheers, Paul

                1 user thanked author for this post.
              • #2354494
                MHCLV941
                AskWoody Plus

                Susan has to make a living, just like the rest of us.

                My point exactly.  So explain again why you have a problem coming up with a buck a year to help pay for this site.

                Or do you think Susan should pay for the privilege of letting you mooch?

      • #2353027
        PKCano
        Manager

        For those of you on Win10 – the CUs are cumulative. Instead of installing the Patch Tuesday CUs, I would recommend installing the latest Out-of-Band patches for your version if you decide to patch,
        + They may be offered in the “Optional” section through Windows Update.
        + If they are not offered through Windows Update, they can be downloaded from the Microsoft Catalog, (search string = 2021-03 cumulative update for) saved on the desktop, then installed manually by double clicking on them. Be sure you DO NOT download those labeled “Preview.”

        For those of you on Win7/8.1, if you decide to patch, install updates as usual, then download the OOB patches from the MS Catalog and install them manually (as described for Win10 above). Win7 KB5001639 and Win8.1 KB5001640 OOB’s download links are available through AKB2000003.

        13 users thanked author for this post.
        • #2353033
          The Surfing Pensioner
          AskWoody Plus

          Thanks for this, PK, you have answered my question. I have already downloaded kb5001649 from the catalogue to both my laptop and desktop and intend to install this manually before Resuming Updates (which I shall have to do anyway because the Pause will run out). May I take it that kb5001649 will replace whatever CU Windoes Update would nomally push in my direction?

          • #2353036
            PKCano
            Manager

            the CUs are cumulative.

            That means the later ones contain the earlier ones, plus whatever else is added. 🙂

            1 user thanked author for this post.
          • #2353044
            GoneToPlaid
            AskWoody Plus

            I am not sure if KB5001639 is a CU since Microsoft mentions that it must be installed after installing either the March CU KB5000841 or after installing the March Security Only KB5000851.

            I am going to do a backup of my computer this evening. I am a Group B Windows 7 user. The following morning I will install the March SO update and KB5001639, and then I will reboot my computer. I will report back here on how things went.

            2 users thanked author for this post.
            • #2353047
              The Surfing Pensioner
              AskWoody Plus

              Well, “Cumulative Update” is certainly the proud title of this kb in the Catalogue!

            • #2353076
              PKCano
              Manager

              For those of you on Win7/8.1, if you decide to patch, install updates as usual, then download the OOB patches from the MS Catalog and install them manually (as described for Win10 above). Win7 KB5001639 and Win8.1 KB5001640 download links are available through AKB2000003.

              The updates for Win7/8.1 are NOT CUs as far as I know. That’s why the instructions above.

            • #2353106
              abbodi86
              AskWoody_MVP

              KB5001639 and KB5001640 are security only alternatives for this month

              they are never cumulative

              3 users thanked author for this post.
              • #2353379
                TonyC
                AskWoody Lounger

                KB5001639 and KB5001640 are security only alternatives for this month

                Alternatives to what? Are you suggesting that they can be installed as alternatives to KB5000851 and KB5000853, the Win7 and Win8.1 SO updates for March?

                I think that I’ll be doing as suggested in #2353044 and installing the March SO update followed by the OOB update.

              • #2353616
                TonyC
                AskWoody Lounger

                Alternatives to what? Are you suggesting that they can be installed as alternatives to KB5000851 and KB5000853, the Win7 and Win8.1 SO updates for March?

                Replying to myself here, but I just wanted to say that I think post #2353613 answers my query.

              • #2353637
                PKCano
                Manager

                If you are patching Group B SOs, you can install KB5001639 and KB5001640 after the Patch Tuesday KB5000851 and KB5000853 Win7 and Win8.1 SO updates.

                If you are patching Group A Rollups, you need BOTH the Rollups AND the OOB patches KB5000841/KB5001639 for Win7 and KB5000848/KB5001640 for Win8.1

                2 users thanked author for this post.
              • #2353938
                7ProSP1
                AskWoody Lounger

                If you are patching Group B SOs, you can install KB5001639 and KB5001640 instead of the Patch Tuesday KB5000851 and KB5000853 Win7 and Win8.1 SO updates.

                I’m confused about whether it’s required that the March 22 OOB patches be installed if you are not experiencing any issues after installing the March 9 Patch Tuesday SO update.

                I realize SO’s are not cumulative, so does this mean the OOB fixes will not be included in the April Patch Tuesday SO updates and they will be missed altogether if skip them?

                Or since they are OOB patches, does this mean I can just wait and install the regular April Patch Tuesday SO update and they will be included with it?

                As a Group B’er, if I need to install the OOB patch I obviously will but if I can just wait until the April Patch Tuesday SO is released instead, then I’d prefer to take that route.

                • This reply was modified 2 weeks ago by 7ProSP1.
              • #2353947
                PKCano
                Manager

                I realize SO’s are not cumulative, so does this mean the OOB fixes will not be included in the April Patch Tuesday SO updates and they will be missed altogether if skip them?

                Absolutely correct. SOs are not cumulative. If you don’t install the OOB you have missed the fix.

                1 user thanked author for this post.
              • #2355371
                TonyC
                AskWoody Lounger

                If you are patching Group B SOs, you can install KB5001639 and KB5001640 after the Patch Tuesday KB5000851 and KB5000853 Win7 and Win8.1 SO updates.

                My memory might be failing me, or I might have completely misread the quoted sentence some days ago, but I thought that the sentence originally read:

                If you are patching Group B SOs, you can install KB5001639 and KB5001640 instead of the Patch Tuesday KB5000851 and KB5000853 Win7 and Win8.1 SO updates.

                thereby making a clear distinction between the Group B patching requirement and the Group A patching requirement, as covered in the subsequent sentence.

              • #2355395
                PKCano
                Manager

                See #2353027 above last paragraph.

              • #2355465
                TonyC
                AskWoody Lounger

                Yes, I am aware of post #2353027.

                Since MS-DEFCON 3 was declared, I’ve been through the relevant posts on this thread with a fine tooth comb. The situation is that there are posts on this thread that assert or imply that, for Win7/8.1 Group B, the March OOB update can be installed instead of the March SO update. And there are other posts on this thread that state that the OOB update should be installed after the SO update has been installed. This is contradictory advice.

                I installed the OOB update without installing the SO update, but I am now wondering whether I should uninstall the OOB update, install the SO update, and then reinstall the OOB update.

              • #2355467
                PKCano
                Manager

                You do not need to uninstall the OOB. You can try to install the March SO. If it installs, you need at least some of it. If it does not install, you do not need it.

                Windows is smarter than we are. It will no overwrite/replace a newer or needed file with one that is not appropriate. Supersedence wins!

              • #2355362
                TonyC
                AskWoody Lounger

                Replying to myself here, but I just wanted to say that I think post #2353613 answers my query.

                Replying to myself again. The post I intended to refer to was #2353608, not #2353613.

        • #2353048
          anonymous
          Guest

          I’m assuming your guidance is particular to this patch cycle and not general guidance.  I interpreted it that way in context of the original post but not sure if others might misinterpret your intent.

        • #2353081
          redknight
          AskWoody Plus

          I want to make sure I understand.  You are recommending that I install KB5001649 instead of KB5000802?

           

          This was supposed to be a reply to PKCano #2353027

          • This reply was modified 2 weeks, 3 days ago by redknight.
          • #2353091
            PKCano
            Manager

            For those of you on Win10 – the CUs are cumulative. Instead of installing the Patch Tuesday CUs, I would recommend installing the latest Out-of-Band patches for your version if you decide to patch,

            Like it says.  The MS Catalog link will help you find the update.

        • #2353414
          Vincenzo
          AskWoody Lounger

          For those of you on Win10 – the CUs are cumulative. Instead of installing the Patch Tuesday CUs, I would recommend installing the latest Out-of-Band patches for your version if you decide to patch,
          + They may be offered in the “Optional” section through Windows Update.
          + If they are not offered through Windows Update, they can be downloaded from the Microsoft Catalog, (search string = 2021-03 cumulative update for) saved on the desktop, then installed manually by double clicking on them. Be sure you DO NOT download those labeled “Preview.”

          For those of you on Win7/8.1, if you decide to patch, install updates as usual, then download the OOB patches from the MS Catalog and install them manually (as described for Win10 above). Win7 KB5001639 and Win8.1 KB5001640 OOB’s download links are available through AKB2000003.

          I went to the MS Update Catalog, downloaded the update    Win 10 2004, it says for 1903 and later (I have 1909). It is the x64 version, and not the Server version.

          But when I try to install it, it says its not applicable for this computer.
          I definitely don’t have it installed already, I checked the update history.

          Any ideas?

          Thanks

          .

          • This reply was modified 2 weeks, 2 days ago by Vincenzo.
          • This reply was modified 2 weeks, 2 days ago by Vincenzo.
      • #2353021
        E Pericoloso Sporgersi
        AskWoody Plus

        I’m one of the March Update cannon fodder survivors. 
        I already said so in
        https://www.askwoody.com/forums/topic/lets-get-mikey-to-try-it/#post-2351901

        1 Canon printer, NO Dymo.


        3 users thanked author for this post.
      • #2353025
        TonyS
        AskWoody Plus

        Installed KB5000802, now running 20H2 v.19042.867

        Print tests successful on ancient Canon MG6400 printer and CutePDF app (both type 3)

        Optional KB5001649 offered but not installed. So far, so good.

        Win10 20H2 Pro, MBAM Premium, PaleMoon, OpenOffice, Sumatra PDF.
        3 users thanked author for this post.
        • #2354289
          MHCLV941
          AskWoody Plus

          Same here, on several machines, but only 802 was offered, neither of the two succeeding updates.  I updated on March 28 and 29.

          Perhaps Microsoft updated 802 with the fixes that were in those optional updates?

      • #2353029
        grant.gardner
        AskWoody Plus

        Do we expect all of these out of band updates to be part of the April Cumulative updates?  We use WSUS and I may just wait till April updates instead of adding in the out of band stuff.

         

      • #2353034
        steeviebops
        AskWoody Lounger

        Looks like the March updates are also responsible for an issue that is preventing the Visual C 2008 runtime from installing.

        I’ve tried to install Sonicwall’s Global VPN client on a few machines this week and on the affected ones, the install hangs for a while and prompts for a reboot. After the reboot, the GVC is installed but fails to run, giving a side-by-side error because the Visual C 2008 runtime install failed. Trying to install the runtime manually from Microsoft gives the same result, but if I remove KB5000802 and try again, all is well in the world again.

      • #2353035
        Mele20
        AskWoody Lounger

        Isn’t it too early to be raising the defcon level for home/small business users? I mean the next Microsoft patches will not come until April 15 (second Tuesday of the month). I never update until the month following the patches being offered. I usually update approximately one week before the next set is offered…meaning in this case around April 9 or so.

        I ABSOLUTELY HATE ALL NEWSLETTERS FROM ANY SOURCE. I joined this website because it had great forums but now it has devolved into mostly newsletters.

        • #2353038
          PKCano
          Manager

          DEFCON-3 can last a long time.
          There’s no hurry to install the day it’s changed. 🙂
          Take your time.

          • #2353549
            PDX5802
            AskWoody Plus

            I’m waiting. Paused until Friday, April 9, just a few days before Patch Tuesday. Don’t plan on doing anything before then.

        • #2353040
          wavy
          AskWoody Plus

          I ABSOLUTELY HATE ALL NEWSLETTERS FROM ANY SOURCE. I joined this website because it had great forums but now it has devolved into mostly newsletters.

          Hardly. Only a small part. I usually read the newsletter as an afterthought. The forums are still why I am a member.

          🍻

          Just because you don't know where you are going doesn't mean any road will get you there.
          2 users thanked author for this post.
        • #2353041
          anonymous
          Guest

          I ABSOLUTELY HATE ALL NEWSLETTERS FROM ANY SOURCE. I joined this website because it had great forums but now it has devolved into mostly newsletters.

          You can always join as a Plus Member and opt not to receive newsletters 🙂
           
          As for the forums..WSL junk all over again

        • #2353059
          Susan Bradley
          Manager

          No, it’s the end of the month/near a weekend and I never get to the point without making a a patching decision.

          The forums are absolutely still here and quite active.

          Susan Bradley Patch Lady

          1 user thanked author for this post.
      • #2353037
        CAS
        AskWoody Plus

        Susan, my Lenovo computer and HP printer/scanner are working just fine without the new optional update. Are you saying I should install kb5001649 anyway? Please advise.

        Win 10 Pro Version 2004 (OS Build 1904.1.867)

        Peace,

        CAS

        • #2353039
          PKCano
          Manager

          If you have no problems, you can skip/don’t need the OOB patches.
          The fixes will be included in the April CUs anyway.

          1 user thanked author for this post.
          CAS
      • #2353016
        Hanzie
        AskWoody Plus

        What about the Server Side (2012/2016 server) of the March updates, are those good to go?
        Anyone experience issues there?

         

        • #2353053
          Susan Bradley
          Manager

          They too are triggering BSODs with printing. You’ll need to skip to the out of band releases.

          Susan Bradley Patch Lady

          1 user thanked author for this post.
      • #2353058
        MrToad28
        AskWoody Lounger

        If I pause updates for 7 more days..to April 5th, is it likely that this update gets updated..fixed by Microsoft?

        How risky is the environment that the rec is to take a chance on an update that clearly still has problems?

        • #2353138
          Susan Bradley
          Manager

          I’m not hearing any buzz that there will be fixes other than what is out already.

          Susan Bradley Patch Lady

      • #2353073
        Chris B
        AskWoody Plus

        Installed KB5000802 via WU today. No problems (so far) with my HP Officejet Pro 9010 printer.

        Chris
        Win 10 Pro x64 Group A

      • #2353092
        nelsonhd87
        AskWoody Plus

        Any issues with installing KB5000803 or KB4589210 on Windows Server 2016? I’m still undecided if I should install or wait until April updates. Most likely I’ll wait until April updates.

        Some people out there say installing the update gets stuck at downloading at 23% for many hours and our update window doesn’t allow having to wait many hours installing cumulative updates. Haven’t tried updating yet just to prevent potential issues.

        • #2353133
          Susan Bradley
          Manager

          Microsoft re-released it and fixed that problem. Do you have any print roles/print server roles on that server?

          Susan Bradley Patch Lady

        • #2353141
          nelsonhd87
          AskWoody Plus

          One server has Remote Desktop Services installed and the other one is a domain controller. Printing on the RDS server is made with printer redirection.

      • #2353132
        krism
        AskWoody Plus

        Susan, I appreciate your including both in a single post, since, though I am a little user I often follow business guidelines (MS since 3.11)(some linux mixed in) However this is way too early for me since patch Tues is Apr 13 – almost 2 1/2 weeks away, I will wait at least a week, probably more, to see if anything changes on what is offered.

        - ThinkPad T530-2394-3J8, i5-3380M 2.9GHz, UEFI/GPT: (Win10 20H2 Pro x64), 8GB(15GB/s), Sammy 500GB SSD. -

        • #2353137
          Susan Bradley
          Manager

          They won’t be changing it, I don’t see any rumbles along those lines. I don’t like to leave a month without making a patching decision.

          Susan Bradley Patch Lady

      • #2353136
        John
        AskWoody Plus

        No problem downloading and installing KB5001649 to 19042.870.

        A Question about the Microcode update 2021-01 Intel microcode KB4589212.

        I did not install this when it came out. Is it safe? Should I install it now?

        Dell Inspiron 7580 i7 16GB Win 10 pro 20H2

      • #2353171
        Average-Jane
        AskWoody Plus

        I liked that this website offered blog posts, not “ReAd ThE rEsT iN tHe PlUs NeWsLeTtEr!” on every.single.article.  Now the DEFCON system is almost entirely paywalled, bad form considering this month’s fiasco.

        How long until the banner at the top of the page that actually displays the DEFCON rating isn’t accessible without payment?

        • #2353226
          anonymous
          Guest

          Agreed. Woody would promptly follow up a Defcon change with a detailed follow-up in a linked Computerworld article.

          • #2353230
            Susan Bradley
            Manager

            The Defcon wlll not be behind a paywall. As to the Computerworld article, it is coming Monday and I like to make sure that people have a weekend to install updates.  Alerts get emailed to plus members only, ergo why it’s being handled like this.

            Speaking of the plus membership, everyone does realize that even $1 gets you the alerts and access, yes?  The site costs money to run.  The hosting venue isn’t given to me for free so I have to pay a hoster  every month.  I’m disappointed that you don’t feel that the site isn’t worth any sort of donation?  What could I do to make it worth that to you?  Serious question.

            Susan Bradley Patch Lady

            5 users thanked author for this post.
            • #2354290
              MHCLV941
              AskWoody Plus

              Remember when “if it’s on the internet, it must be true”?   It seems to have morphed into “if it’s on the internet, it must be free”.

              Perhaps you could send the malcontents a dollar via PayPal….

        • #2353238
          cyberSAR
          AskWoody Plus

          Websites cost money. Hosting, development, maintenance. Have you tried reading a NYT article? Pay or read only 1 paragraph. Haven’t checked their prices but I’m sure it’s more than a couple bucks each year. Have you noticed how much software that used to be free now costs money?

          Just my opinion.

          6 users thanked author for this post.
      • #2353174
        mcbsys
        AskWoody Plus

        You can deploy KB5001649 with WSUS by importing it manually, as outlined here:

        https://docs.microsoft.com/en-us/windows-server/administration/windows-server-update-services/manage/wsus-and-the-catalog-site#the-microsoft-update-catalog-site

        If you encounter error 80131509 importing (I did):

        1. Disable IE Enhanced Security Configuration. Mine was already disabled.

        2. Run this from an administrative command prompt:

        reg add HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\.NETFramework\v4.0.30319 /V SchUseStrongCrypto /T REG_DWORD /D 1
        iisreset

        Reference:

        https://docs.microsoft.com/en-us/answers/questions/88238/is-there-a-general-problem-with-wsus-servers-that-1.html
        https://community.spiceworks.com/topic/2144162-import-to-wsus-fails-direct-import-from-ms-update-catalog

        Note: I found that “iisreset” was enough; I did not need to restart the server. However be aware that this will temporarily disconnect your RDP session at least if you’re using a gateway on the same server.

        3. Import as described in the first link above.

        4. The update isn’t downloaded into WSUS until the next sync. In WSUS, go to Synchronizations and click Synchronize Now.

        5. Wait for machines to check in. Hurry this along with “wuauclt detectnow” / “wuauclt reportnow” on a client machine.

        6. Once detected on at least one computer, in WSUS > Updates > All Updates, you should see KB5001649 as Unapproved/Failed or Needed. Approve it.

        • This reply was modified 2 weeks, 3 days ago by mcbsys.
      • #2353180
        Alex5723
        AskWoody Plus

        since important articles regarding defcon rating are not visible for non paying non plus members

        You can turn a plus member for as little as $1.

        1 user thanked author for this post.
      • #2353190
        PKCano
        Manager

        Another fix released in the CU Preview/SSU released yesterday. This one for Secure Boot issues. See article at Microsoft releases Windows 10 SSU to fix security update issue at Bleepingcomputer.

        ​Microsoft has released the Windows 10 1909 KB5000850 cumulative update preview and a new KB5001205 Servicing Stack Update that resolves a Secure Boot vulnerability.

        The KB5001205 Servicing Stack Update (SSU) will automatically be installed by Windows Update to improve the update experience. This SSU should not be skipped as it fixes an issue installing a previously released Secure Boot security update.

        Also released yesterday is Windows 10 1909 KB5000850 (build 18363.1474), the March 2021 non-security preview “C” update that allows users and businesses to test upcoming fixes before they are released to everyone during the April 2021 Patch Tuesday.

        As this is an optional update, Windows 10 will not install it automatically. Instead, users will need to open Windows Update, check for updates, and select to install the preview update when it is offered.

      • #2353188
        pfvincent
        AskWoody Plus

        There is no mention of Canon printer drivers.

        Am I OK un-pausing updates on Win 10 Home 2004 with a Canon printer?

        1 user thanked author for this post.
      • #2353213
        AmbularD
        AskWoody Plus

        Windows 7 Pro X64 SP1 ESU Year 2, just installed KB5000841 via Windows Update.  Canon Pixma MX479 all-in-one printed a test page with no issues.  Haven’t installed hotfix KB5001639, but I have it downloaded just in case.

        i7-4790k - Z97X-Gaming 3 - DDR3 2133 x 32GB - GTX 1070 FTW - Windows 7 Pro x64 SP1 ESU

        3 users thanked author for this post.
        • #2353494
          T
          AskWoody Plus

          Similar set up to me except i have a different model of Pixma so i’m curious if you’ve tried test printing some elements like tables and such? I’ll be trying this myself after i update.

          This month is yet another good example of why Microsoft need to start testing their patches properly again and also why i will not be pressured into upgrading to the eternal beta that is Win10 when every month is like a game of Russian roulette. The ghacks article on this shows a snapshot of just how furious people are over this latest nonsense – https://www.ghacks.net/2021/03/21/update-woes-that-never-end-microsoft-halts-patch-of-a-patch-of-a-patch-rollout-to-fix-printing-issues/

          Also in regards to paid membership – i have to say the small expense has more than paid for itself with the amount of help i’ve had through this place over the years. Whether that be the GWX control panel (which absolutely saved my hide more than once) to the sterling work that abbodi86 continues to do, to name just two examples.

          • #2353697
            T
            AskWoody Plus

            For what it’s worth i installed KB5000851 and after a couple of test prints i’m not experiencing any issues. I just printed a test page and a couple of graphical elements and a table in a blank document but all fine here.

      • #2353247
        Will Fastie
        Manager

        How long until the banner at the top of the page that actually displays the DEFCON rating isn’t accessible without payment?

        As far as I’m concerned, never. We’ve never suggested otherwise.

        Now the DEFCON system is almost entirely paywalled…

        The MS-DEFCON Alert mailings have always been behind the paywall.

        ReAd ThE rEsT iN tHe PlUs NeWsLeTtEr!

        Again, not a change. That was the case throughout Woody’s ownership. Check older articles, say from 2019, and you’ll see the same thing. It is true that I have made those notices more prominent, but they are not new.

        bad form considering this month’s fiasco.

        We agree that the details have value. Membership has benefits.

        9 users thanked author for this post.
        • #2353258
          Travasaurus
          AskWoody Plus

          I’ve been a paid user (sometimes for just a lousy buck, when I fell upon hard times) since back in the old Windows Secrets days. I now remit more, of course. This is still the best value I’ve found as regards support for computers and “all things Windows”. I’m really shocked that anybody could actually complain about the payment model here; if only more sites would adopt it…

          14 users thanked author for this post.
        • #2353347
          anonymous
          Guest

          You seem to be missing the point. No one is saying that the posts that just advertise the newsletter didn’t exist before. They’re complaining that they are now the bulk of the content on the front page. Before, most of the content–including the MS-DEFCON change announcement–were nice, fairly short blog articles that kept everyone up to date on things.

          There seems to have been a fundamental yet unannounced shift in how you guys are doing things since Woody left, and it’s even shown in the language you guys use. Susan is asking us what information she could put in the Plus Newsletter to make us want to pay for it. You are talking about “information being worth money,” admitting you see this as us paying for info.

          That’s a shift from what we were originally told about the Plus program. It was originally supposed to be about supporting the site, with the Plus letter being a perk. When some of us got nervous about this, we were told not to worry, that the free content wouldn’t change. And that was the way it was for as long as Woody was here–at least, as far as I perceived it.

          The Ask Woody Plus newsletter was just a replacement for a newsletter offered at Windows Secret, or whatever it was called. It was Woody looking out and trying to help out that dying website. It wasn’t supposed to replace any of the content that had previously been available on the site.

          But that’s exactly what seems to be happening.

          • #2353486
            anonymous
            Guest

            When Woody gave the “all clear” for a MS-Defcon change, he also published a computerworld article as a reference and guide in a manner that was professional and courteous to both anons and members (thanks Woody), that actually helped on the day of the MS-Defcon change, not 2-3 days later which.defeats the purpose completely irrespective of whether it’s at the weekend or not.

            However, those who were/are TLDR in attitude, usually posted on the forum asking what was already published and explained in the computerworld article.

            No-one can fix id10ts

        • #2353737
          Average-Jane
          AskWoody Plus

          It may be convenient for you to hold the idea that I’m upset about paying $1/year for the best tech support on the planet, but that’s not why I’m annoyed. It’s the principle of these latest DEFCON moves that has me annoyed.

          Even before I found this site, I knew that Patch Tuesdays in general are a hot mess, and the first thing I did when Windows 10 became an imminent reality was learn how messily WaaS would be implemented and how much more obnoxious Patch Tuesdays would become, and ingrained how to pause or reschedule updates to avoid the mess. And so I have never had a Patch Tuesday-inflicted problem. For me personally, this website has only kept my pause-and-patch schedule up-to-date.

          FMP AskWoody seemed to pride itself on protecting the little guy (the one who doesn’t really understand what Patch Tuesday is but really doesn’t like that his computer rebooted in the middle of the night and now nothing works, because even in the best of times he can’t afford his computer to be broken in terms of either time or money) against Microsoft’s Patch Tuesdays and their sometimes disastrous implementations. In fact, given the banner at the top of the site, I considered it AskWoody’s most important facet. So I find it curious/disappointing/worrisome, that for the past couple of months, DEFCON updates have been Plus articles. That little guy could still come to this site and see that there is guidance to patch or not to patch, and even why, but the instructions on how he would pause updates are now a Plus feature. Sure, it’s not like he couldn’t find this information anywhere else on the Internet, but for him, the utility of this specific website has decreased.

          I agree, there is wonderful community-based tech support here for those who need it. And I agree, that for $20 a year, or even $1 a year, that’s a steal. But considering the DEFCON banner is the most prominent display, and arguably what this site is known for best, it’s a bit sad that the latest DEFCON updates, especially during a month when we had a rare DEFCON 1, have been a testing ground for putting at least some of that information behind a paywall.  Especially considering COVID, which has not only put more people in financially precarious positions, but may stymie their ability to reconnect if their only device at home gets bricked by an errant update.

          • #2353742
            Susan Bradley
            Manager

            I apologize if you feel that I’m not for the little guy.  I’m especially for the little guy or gal and the little small business because I am one. Because the alerts get emailed to the plus membership I don’t think it’s fair to you to expect to go to another site for information that I intended to be for you.  I will be linking to tomorrow’s Computerworld when it comes out tomorrow so my hope is that answer any unanswered questions for those who are not members.

            Susan Bradley Patch Lady

            5 users thanked author for this post.
          • #2353748
            The Surfing Pensioner
            AskWoody Plus

            @Susan Bradley – Just so I understand this, it’s Saturday night, you’re cooking dinner, and afterwards you’re going to make a video for one of the AskWoody Loungers. Where else can anybody get service like that for anything!!?? Drop of the hat service by a highly skilled, knowledgeable, competent IT pro. This is the best and biggest bargain on the internet – or maybe anywhere.

            In the light of the service we are receiving on this site – all provided on a voluntary basis, as I understand – I’d be embarrassed not to support it financially, in the sum that each of us can afford. It seems the only decent way to express one’s appreciation. Most charities demand more costly ‘voluntary donations’ of their patrons!

            6 users thanked author for this post.
      • #2353249
        krism
        AskWoody Plus

        I am having difficulty understanding the concern about paying a tiny amount for a support forum that I have found quite useful. I actually chose NOT to get the paid alerts as I was getting too much stuff in my mailbox that didn’t relate to me. Cheap support imho! Lots of other sites if you disagree. EDIT: actually there is a ton of free support here if you avail yourself of it.

        - ThinkPad T530-2394-3J8, i5-3380M 2.9GHz, UEFI/GPT: (Win10 20H2 Pro x64), 8GB(15GB/s), Sammy 500GB SSD. -

        • This reply was modified 2 weeks, 2 days ago by krism. Reason: addit thought
        9 users thanked author for this post.
        • #2353354
          anonymous
          Guest

          It’s pretty simple. Content that used to be available for free is now being put behind a paywall. The stuff we were promised would remain free by Woody is now being absorbed into the paid newsletter instead. More and more of the front page content is paid content, not free content.

          The MS-DEFCON rating–which includes the info about the actual issues people have seen–has always been freely available. Susan’s Patchwatch has been paid-only (I can’t remember if it was free at any point, but it’s been paid for a while), but that was just for business users, not home users. But now even the info for home users is available only in the newsletter. I still don’t know what the problems were for March’s updates, or what to look out for.

          The whole value argument people keep making isn’t really relevant. That’s not the complaint. The complaint is the shift to treating this like some paid site. The argument you guys are making is itself the issue. That’s not what the site was supposed to be.

          Ask Woody Plus was pitched basically like Patreon, where you want to support the site, so you pay and get perks. It’s not supposed to be a value proposition. At least, not for the site itself—obviously sometimes people pay for the perks. But the site itself is supposed to still provide the same content.

          Honestly, I’m actually more upset than I was before, seeing people getting their complaints dismissed. The irony is that I’ve actually gotten some money and could feel okay paying for the site for a bit. But, since last month when I noticed the new paywall for MS-DEFCON stuff, I’ve not really wanted to. I wouldn’t be supporting the same site I got so much out of for these past years.

      • #2353257
        R
        AskWoody Plus

        Weird, a few days ago the latest patch disappeared from Windows Update, because it yet again  caused bsods. I think everyone should simply avoid the March patches. The April round is already around the corner. This months’ round has nothing urgent to offer. Having said that, I think that Microsoft should stop its Windows as a ‘service’. Just roll out security patches when really needed. Stop messing around with useless UI-tweaks, unneeded app-updates and other useless stuff. The majority of users is only interested in running their software on an OS. Not the show-offs of Microsoft programmers and designers. Windows 10 was a mess the day it was released and for many it’s still a mess. The haydays of Windows are over, it still exists because companies – especially old school molochs – fear the new. But that’s not solid base for a thriving future.

        1 user thanked author for this post.
        • #2353293
          Susan Bradley
          Manager

          Microsoft pulled it as it was having issues getting installed and then they re-released it.

          Susan Bradley Patch Lady

          • #2353517
            R
            AskWoody Plus

            So I can look forward to yet another update, restart and all the involved risks and loss of time? With the high risk that the innocent watery blue-eyed nerds of Microsoft were wrong again? For us here, Windows became only a small part of the used work systems. It became way too much of a hassle. The machines left are already getting at age, when their time has come they will not be replaced anymore. The handful of vm’s we have weren’t even started for years already. Never missed them. I also noticed more recently that more and more businesses around here (Europe) are silently starting to use Open Office / Libre Office. Or a cloud service. Curious what the future will bring, thinks that Redmond set in motion its own disappearance from the OS market with the introduction of Windows 10. Down here, it has such a bad reputation. Maybe in the US the situation is different, don’t know. But there is more in the world than that…

      • #2353261
        anonymous
        Guest

        I did not install KB5000841 monthly security-quality roll-up since Master patch list was set to defer on this KB.  I also did not install KB 5001027 Edge for win 7 X 64 since going to win 10 at a point in future and do not really use Internet explorer–use a couple of non Microsoft browsers.  I did install kb4504702, kb4484376, kb4504707,kb4493214, kb4504703 updates.  I am happy to report after installing these I am able to print from the two computers -lap top and desktop to both of my HP printers with apparently no issues with graphical content as i printed an excel graph to test out the graphical output.   I also printed  a drawing from CAD program to both printers with success.  Thank you to Susan and the master Patch list for providing guidance.

        1 user thanked author for this post.
      • #2353284
        JCpharm
        AskWoody Plus

        My goodness. Having 24/7 access to expert IT professionals advising on how and when to update my computers for just a suggested donation of any amt. makes good business sense. C’mon now, geeks like us have to know that running a website requires time and resources. I gladly want to support this unique platform. I know value when I see it.

        Win10 Pro version 1909

        6 users thanked author for this post.
      • #2353305
        TechTango
        AskWoody Plus

        I’ve fully updated 4 machines, 3 laptops and a desktop.  I used windows update to do it.  All four were/are running 20H2.  I first installed all the non-optional updates, then installed the optional cumulative update 1649.

        All  installations went smoothly with zero issues on any of the four machines.  All passed the printer test.  I’m glad to have the security patches.

        1 user thanked author for this post.
      • #2353311
        Berserker79
        AskWoody Lounger

        Windows 10 Home 20H2 here, after reading the above I’m still not sure exactly how I should handle this month’s patches. Is there any consensus on what is the best course of action between:

        1) (Unhiding and) let KB5000802 through WU, then in case of printing problems installing KB5001649

        or

        2) Let WU install KB5001649 (it is currently offered as an optional “download and install” on my machine).

        On a slightly unrelated note, in the event of downloading KB5001649 from the Catalog for a manual install, can anyone please confirm that there is no need to manually install SSU KB4598481 beforehand in that this SSU is supposed to be installed with KB5001649 itself?

        • #2353333
          PKCano
          Manager

          See #2353027 above.

          • #2353557
            Berserker79
            AskWoody Lounger

            Thanks PKCano. I was not sure whether the post you linked was your own personal recommendation or the “AskWoody consensus”, but it certainly makes sense to try out directly the latest OoB patch rather than going for the potential hassle of installing KB5000802 and then KB5001649 too.

          • #2353747
            WCHS
            AskWoody Plus

            I haven’t installed the 1909 KB5000808 (2021-03) and I have no idea of whether my Dell printer will have a problem with it, so I would probably be better off to install instead the latest 1909 OOB patch, KB5001648 (2021-03-18) –an optional update.  However, because of my GP settings, Windows Update does not offer optional updates. This means that I will have to go to the Microsoft Catalog and manually download and install it.  Will I have to manually download and install the latest 1909  SSU KB5000908 before that?  Or is it bundled with KB5001648?  Right now, the latest SSU I have is KB4601395 (2021-02).

            #2353027 doesn’t indicate whether with a manual download of the latest OOB,  one will have to manually download the latest SSU first.  So, that’s why I am asking.

            • #2353753
              PKCano
              Manager

              I think the SSUs are included in the CUs for 2004/20H2, but I think you need to download the one for 1909 separately and install it first. KB5000908 is available separately in the Catalog.
              I installed KB5000908/KB5001648 on both my 1909 – Build 18363.1443

              2 users thanked author for this post.
              • #2353793
                WCHS
                AskWoody Plus

                I have just read your #2353190 post about KB5001205, the latest 1909 SSU, which was released March 25. My latest 1909 SSU, KB4601395 (2021-02), is supposed to be superseded by this mentioned latest SSU, according to the MS Catalog.

                I have checked the bulletin on SSU KB50001205 and it says the update is available through Windows Update and will be downloaded and installed automatically.

                Shouldn’t I be seeing it by now? I have GP=2 notify download/install, but NO download button for it has appeared. The asterisked remark about managed settings says “We’ll ask you to download updates, except when updates are required to keep Windows running smoothly. In that case, we’ll automatically (my bold-face) download those updates.” I have checked “Installed Updates” and it’s not been installed automatically (on its own, behind the scenes).

                I should add that SSU KB5001205 is supposed to address the problems with installing KB4535680 (2021-01), which was supposed to address the Secure Boot Security Feature Bypass Vulnerability (CVE-2020-0689) and which I hid in January.

                Given these aspects of 1909’s latest SSU KB5001205, should I be downloading and installing it instead of SSU KB50000908 — thereby a) fixing the Secure Boot problems with KB4535680; and b) satisfying the need for the correct SSU for KB5001648 to fix the printer problems?

              • #2353833
                PKCano
                Manager

                I installed KB5000908/KB5001648 on both my 1909 – Build 18363.1443

                There is information on the OOB patches released on 3/18, but I haven’t seen anything on the Secure Boot patch released on 3/25. The latter will be rolled into the April Patch Tues CU.

                Personally, I’d leave it alone till then (unless you have a problem with Secure Boot). You probably are not offered the optional update b/c of the Group Policy setting for Feature deferral that includes Semi-Annual Channel.

              • #2353893
                WCHS
                AskWoody Plus

                (unless you have a problem with Secure Boot).

                I don’t know if I have a problem with Secure Boot or not.
                However, I do have the Secure Boot feature in my BIOS. But, my vendor has not updated the BIOS for CVE-2020-0689 and I have not installed Secure Boot KB4535680.

                I haven’t seen anything on the Secure Boot patch released on 3/25.

                Information on KB5001205 is here:
                a) is it a Preview? (doesn’t say that in the heading).
                b) or is it an optional update? (doesn’t say that in the text)
                c) or is it going to be bundled with the April week “B” CU? or alternatively, you can download it now?
                d) What does it mean when it says
                the update IS available through Windows Update“? (doesn’t seem to be available yet via WU)
                and
                and will be downloaded and installed AUTOMATICALLY” (does “automatically” mean that it will bypass GP settings, such the “GP=2 notify download/install” setting and/or bypass a 1909 GUI “Feature update” setting=1 or 2 [when TRV=1909], i.e., will it force the update when it arrives in the WU queue?)

      • #2353369
        krism
        AskWoody Plus

        I took Susan’s advice and (backed up, and then) put 1649 on (that’s a big install!!!) and rebooted. No prob with HP M254dw color laserjet. At that point 508 disappeared so I just put the other 2 on – a cumulative and a .net. Very quick. All is going well. No problems.

        - ThinkPad T530-2394-3J8, i5-3380M 2.9GHz, UEFI/GPT: (Win10 20H2 Pro x64), 8GB(15GB/s), Sammy 500GB SSD. -

        2 users thanked author for this post.
      • #2353390
        SUCH41
        AskWoody Plus

        Windows 10 pro version 1909, WU use GP(#2) and I am not a techie. For this month update I downloaded and installed KB5000908, SSU, and KB5001566, so far all went well. Now I’m ready to upgrade to version 2004. Since I never done feature update, I do not know what to do with the hidden files in the hidden folder of wushowhide. At present I have the following files located in the hidden folder: KB4481252, MS SilverLight,  KB1535680,  KB4589211, KB4023057, and KB4601056, the 2021-02 CU for .Net Framewwork 3.5 and 4.8 for Win-10 version 1909…Question: Can I upgrade to version 2004 as is with these files in the hidden folder of wushowhide? Thanks!

        • #2353397
          Susan Bradley
          Manager

          Yes you can. I would recommend going to https://www.microsoft.com/en-us/software-download/windows10 and clicking on the update now button

          Susan Bradley Patch Lady

          1 user thanked author for this post.
        • #2353405
          PKCano
          Manager

          Now I’m ready to upgrade to version 2004.

          Be aware, that if you follow Susan’s instructions, you will get v20H2 instead of v2004.

          1 user thanked author for this post.
          • #2353438
            Susan Bradley
            Manager

            20H2 is fine.  Using the download site is the easiest way to get a feature update in my opinion.

            Susan Bradley Patch Lady

            • #2353446
              PKCano
              Manager

              But he wants to upgrade to v2004.

              • #2353450
                Susan Bradley
                Manager

                Such1 is there a reason you only want to go to 2004? At this point in the calendar I’d jump to 20H2.

                Unless you have an application vendor that has specifically told you to go to 2004  – in which case I’d ask them why they can’t support 20H2 this late in the game.

                Susan Bradley Patch Lady

                1 user thanked author for this post.
      • #2353413
        honx
        AskWoody Lounger

        I don’t think it’s fair to call it mean. No one is being rude. People are just pointing out they don’t like an unannounced decision made about a service they use. We were promised by Woody that the addition of the Plus Newsletter would just be extras we could pay for if we wanted, and not change the free services provided for us on the site. Yet that seems to have been what happened.

        The DEFCON system is for home users, and is supposed to be free. But we can’t currently use it since DEFCON 3 requires knowing what the problems are, and deciding if it’s worth it to patch. We can’t watch out for potential problems without knowing what they would be.

        I’m fine with there being a more detailed version that was behind the paywall. But I would argue we still need a basic summary of the problems and what to look out for.

        It’s that information that allowed me to recommend the site to others. It was the one source I could recommend that wouldn’t say “you need to update right away,” while still letting them know about the problems. But I can’t in good conscience tell them to pay for just that part, since they could get the information itself elsewhere for free.

        I’m not saying Plus has no value, note. I have no problem with the site then telling these new free users that they can support the site and get all these extras if they join the paid tier. But at least the main purpose of the site–the MSDEFCON stuff and basic info about things to look out for–needs to still be free.

        I hope that Susan will consider changing that aspect back.

        this.

        there is nothing left to be added.

        PC: Windows 7 Ultimate, 64bit, Group B
        Notebook: Windows 8.1, 64bit, Group B

        • #2353498
          sheldon
          AskWoody Plus

          arguing about $1/year – really? Plus the details of the Defcon 3 will be in computer world on Monday

          • This reply was modified 2 weeks, 1 day ago by sheldon.
      • #2353424
        SUCH41
        AskWoody Plus

        Hi PK, I will follow the procedures you gave me in January which is: “to use the Group Policy settings for TargetReleaseVersion. Leave the “2” setting where it is. Change the Quality Deferral to 0, and or 1 , and set the TRV to 2004. After that is done, set the pulldown switches for deferral in the GUI both to zero” Then wait for v2004 to be offered the next time WU scans for update.”  Very sorry I did not write down the source. Thanks again for the advice.

      • #2353439
        Vincenzo
        AskWoody Lounger

        Try again! 🙂

        Screen-Shot-2021-03-27-at-12.55.01-PM

        I tried again 2 more times. Still fails.

        see screenshot of my history, not installed previously either.

        Thanks

         

        Attachments:
        • #2353442
          Susan Bradley
          Manager

          You are picking 2004 when it looks like your computer is on 1909?.  Try the one second from the top.

          Susan Bradley Patch Lady

          1 user thanked author for this post.
          • #2353449
            Vincenzo
            AskWoody Lounger

            Thanks for the reply.

            I got excited and started downloading, but then I realized why I had skipped it before.
            PKCano in his original suggestion said to not download it if it says Preview.

            “For those of you on Win10 – the CUs are cumulative. Instead of installing the Patch Tuesday CUs, I would recommend installing the latest Out-of-Band patches for your version if you decide to patch,
            + They may be offered in the “Optional” section through Windows Update.
            + If they are not offered through Windows Update, they can be downloaded from the Microsoft Catalog, (search string = 2021-03 cumulative update for) saved on the desktop, then installed manually by double clicking on them. Be sure you DO NOT download those labeled “Preview.””

        • #2353451
          PKCano
          Manager

          Sorry, I misread your version. The one for v1909 is on the second page of updates in the Catalog. See the arrow above the the “Download” column at the upper right.

          The one second from the top in in your screenshot above is a “Preview.” Don’t use that one.

          2 users thanked author for this post.
      • #2353448
        anonymous
        Guest

        Well-maintained W10 V1909 Build 1863.1443.  Patched this month last night with current KB5001648.  No problems; installed fine and runs the same.  Just printed some docs to older version of Foxit, M$ print  to PDF, and PDFCreator; all went well; PDF is the sole printing I use nowadays.  NOTE:  This PC is a 1-year old AMD-equipped, 8 cores, AMC Radeon display;  The software is as ~Little~ of M$ stuff that I can manage:  OpenOfc.; above PDF software; Use solely Tbird, Ffox, Seamonkey, and Vivaldi; Macrium backup; and PhotoDemon photo editing.  I intentionally stay away from all the M$ things like the M$ store, their telephone/meeting software; etc. etc. etc.  And by the way:  Waiting for a few months until my V1909 is obsoleted by M$; on that day, I ~will~ begin a routine daily boot, into my shiny, smooth, WELL-WORKING AND EASY TO USE, AND TO MAINTAIN, Linux Mint 20.1 “Ulyssa” Cinnamon dual boot; and I will ~not~ look back.   FYI:  A good intro to Linux:

        Review : Linux Mint 20.1 Ulyssa, The Most Beautiful Linux OS.

        Best to all.

      • #2353457
        Alex5723
        AskWoody Plus

        I ~will~ begin a routine daily boot, into my shiny, smooth, WELL-WORKING AND EASY TO USE, AND TO MAINTAIN, Linux Mint 20.1 “Ulyssa” Cinnamon dual boot; and I will ~not~ look back.

        Why keep W10 at all. Format and reinstall Mint.

      • #2353465
        mcbsys
        AskWoody Plus

        Thought I’d report back my experience with a customer’s Server 2016 Essentials box.

        Patched in February with KB4601318 (2021-02 CU) and KB5001078 (servicing stack).

        Tried to install KB5001633 (March 18 out-of-band optional CU) from the catalog. “This update is not applicable to your computer.”

        Searched in the GUI for updates. KB890830 (malicious removal tool) and KB4589210 (microcode) were installed. Rebooted.

        Searched in the GUI again. No updates offered. In WindowsUpdate.log:

        “Update deferred by policy: ABD74871-EA87-49AA-B3FE-866ACA9B23F2.201”
        “Error retrieving a returned update (0x80240007). May unintentionally include extra OS upgrades”

        That GUID corresponds to KB5000803, the March 9 update.

        After “sfc /scannow”, KB5001633 from the catalog is still “not applicable” but KB5000803 is now downloading from the GUI.

        • #2353497
          mcbsys
          AskWoody Plus

          On Server 2016, even after successfully installing KB5000803, it will not let me install KB5001633. Not applicable.

          I wonder how it determines “not applicable.”

      • #2353470
        KWGuy
        AskWoody Plus

        Anyone experiencing problems with Epson Workforce printers and the March CU on Win 10 and Win 8.1?

        • #2353472
          Susan Bradley
          Manager

          I have not seen reports of issues with Epson printers.

          Susan Bradley Patch Lady

          1 user thanked author for this post.
        • #2353506
          sheldon
          AskWoody Plus

          I have Epson workforce  on win10 pro updated to KB5001649 – no problem

          1 user thanked author for this post.
        • #2353503
          anonymous
          Guest

          Epson workforce printer on win10 pro and updated to KB5001649 – no problems

          1 user thanked author for this post.
      • #2353504
        sheldon
        AskWoody Plus

        want delete this post – how?

        • This reply was modified 2 weeks, 1 day ago by sheldon.
        • This reply was modified 2 weeks, 1 day ago by sheldon.
      • #2353513
        SUCH41
        AskWoody Plus

        Hi Susan, as  I said am not a techie, and the only reason I want 2004 is because I thought it is more stable then 20H2 and  I have read the procedures PK told me how to upgrade to 2004 and I can use it to get 20H2. No one told me to go with 2004. My computer skill and knowledge is very limited. Is there a video, such as youtube, showing the way to upgrade to 20H2 using the site you mentioned? I am scare to make a mistake since I probably don’t know how to correct it. Thanks for your help.

        Hi PK, I have visited AKB2000016 so many time I finally bookmark it! Thanks for reminding me.

      • #2353530
        glnz
        AskWoody Plus

        I have Win 10 Pro 64-bit version 2004. I had installed updates through 2-2021 only. Today, installing KB 5001649 caused real problems. The installation took forever, and then it slowed down my PC. A DISM /RestoreHealth didn’t complete and hung at 50.6%. Note the two “versions” in the first screenshot below.

        DISM_stuck_at_50

        But after uninstalling the KB and trying again, things got better and after running my bat file with sfc /scannow and DISM RestoreHealth, I got this:

        After_uninstalling_update

        Thoughts?

        Attachments:
        1 user thanked author for this post.
        • #2353535
          Susan Bradley
          Manager

          I don’t like to do dism commands right after updating. Did you do it immediately afterwards?

          Susan Bradley Patch Lady

          • #2353604
            glnz
            AskWoody Plus

            Susan – Yes – pretty soon after rebooting after the installation.  But yesterday was a bad day anyway.  The initial attempt to install KB 5001649 had hung with the green progress bar at around 25%, and I canceled it.

            Then the second attempt to install took a long time, after which I rebooted, ran my bat file with sfc /scannow and the Dism-Restorhealth and that hung, as I noted above.  And the PC was very slow.

            (Note that I never installed the original 03-2021.)

            So I uninstalled, things seem normal now, and I think I’ll wait till the 04-2021s get your higher DefCon.

      • #2353537
        krism
        AskWoody Plus

        After I put on 1649 (which took a while!), I rebooted and my laptop was busy with update stuff for the first maybe 5 minutes, then was fine.

        - ThinkPad T530-2394-3J8, i5-3380M 2.9GHz, UEFI/GPT: (Win10 20H2 Pro x64), 8GB(15GB/s), Sammy 500GB SSD. -

      • #2353538
        SUCH41
        AskWoody Plus

        Wow, Susan, am speechless! Thanks for the video and please, if I may request, don’t skip a single steps how unimportant it may appear to you. Thanks again!

      • #2353546
        SUCH41
        AskWoody Plus

        Hi @cyberSAR, thanks for the info regarding version 20H2. Could you please tell me the steps you have  to do after you click the  upgrade now button? It is not that I don’t trust Susan, she is  preparing a video for  me, it is just that, to be honest, I need a  hearing aid. So a written instructions will definitely help. By the way, do I have to input certain info which I have to prepare ahead of time? Thanks for your help! If you are busy and don’t have the time, it’s OK too, I definitely understand.

        • #2353547
          Susan Bradley
          Manager

          Click on this link:  https://www.microsoft.com/en-us/software-download/windows10  then on update now

          There’s a little file that downloads, click on it.  While I talk in the video, and I’ve not done it in real time (I paused the video as it does the … percent updating….sections, you should be able to see how it works.  Once you start the process it does the rest for you.

          Susan Bradley Patch Lady

          3 users thanked author for this post.
          • #2353551
            Vincenzo
            AskWoody Lounger

            Thanks for the video, I’ve always used installation media for the upgrades, I will try the iso site this time.

        • #2353598
          cyberSAR
          AskWoody Plus

          @SUCH41 I’m not much at writing things up but if this helps a little with Susan’s excellent video I’m happy to do so. Note that most of my work is done remotely so I don’t have access to the machine throughout the whole process. Usually I download an iso mount it and run setup from there but this is probably an easier way to do it.

          I start by doing a backup and drive image with Macrium or ATI.

          Then I do a good maintenance on the machine before the upgrade. Disk cleanup, temp files etc. Then I run sfc /scannow in an elevated powershell to make sure I don’t have existing issues.

          Go to the site https://www.microsoft.com/en-us/software-download/windows10 and click the update now button. It downloads a small file. Close the browser, take a deep breathe and run the file. Say a prayer and get a drink or three while it does its thing. 🙂

          After it gets to desktop I immediately set my pause via gpedit or the advanced pause settings in update section. Then let the machine sit for 1/2 to 1 hour or until disk activity has pretty much stopped. Then I reboot and go for updates.

          After updating, rebooting and after machine settles down I run sfc /scannow and check all my programs and system operation.

          Hope this helps. Good luck!

          3 users thanked author for this post.
      • #2353599
        Berserker79
        AskWoody Lounger

        Windows 10 20H2 Home here, reporting after installing the following patches through WU:
        – KB5001649 – 2021-03 Cumulative update for Windows 10 Version 20H2 (latest OoB for 20H2 installed by clicking the dreaded “Download ind install” under optional updates);
        – KB890830 – MSRT Windows x64 v5.87;
        – KB449317, KB4493228, KB4493227, KB4493203, KB4493239 – various Office 2013 patches.

        I have skipped the microcode update atm (KB4589212) and I’m now at build no. 19042.870. The system appears to be running properly, no issues to report when printing on my Samsung printer or PDF printers.

        1 user thanked author for this post.
      • #2353605
        MarkF
        AskWoody Plus

        hopefully a simple question with a simple answer.

        if i choose to NOT install the March CU, do I just use the wushowhide tool/process to clear the CU and wait till next month?

        thanks,

        -Mark

        • #2353607
          nelsonhd87
          AskWoody Plus

          Yes, it should be enough. Once you tell wushowhide to hide the March CU, check again in Windows Update if it was effectively bypassed.

      • #2353608
        GoneToPlaid
        AskWoody Plus

        Windows 7 Group B users only:

        I just compared the files in KB5000851 (the March security-only update) and KB5001639 (the March out-of-band patch for KB5000851). The only difference is win32k.sys which in KB5001639 has a date of March 16 and is version 6.1.7601.24567. The date and version for win32k.sys in KB5000851 is 6.1.7601.24566 with a date of March 3. The win32k.sys files in each update are the same size yet have different crc32 checksums. The only other change between these two updates is the manifest. The manifest is a bit larger in KB5001639 since it supersedes KB5000851.

        So for us Windows 7 Group B users, we should skip installing KB5000851, and we should instead install KB5001639. I do not recommend installing both. Windows 7 Group B users should only install KB5001639 since if there are are any unresolved issues with this out-of-band update, uninstalling KB5001639 will get you back to February without any fuss.

        Windows 7 Group A users only:

        Group A users must install the KB5000841 monthly rollup, and then install KB5001639. If there are still any unresolved issues, both will have to be uninstalled in the reverse sequence in order to get back to February.

        • This reply was modified 2 weeks, 1 day ago by GoneToPlaid. Reason: typo
        4 users thanked author for this post.
      • #2353613
        SUCH41
        AskWoody Plus

        @cyberSAR, thanks for the info. How can I be sure the following does not happen:

        System and user certificates might be lost when updating a device from Windows 10, version 1809 or later to a later version of Windows 10. Devices will only be impacted if they have already installed any Latest cumulative update (LCU) released September 16, 2020 or later and then proceed to update to a later version of Windows 10 from media or an installation source which does not have an LCU released October 13, 2020 or later integrated. This primarily happens when managed devices are updated using outdated bundles or media through an update management tool such as Windows Server Update Services (WSUS) or Microsoft Endpoint Configuration Manager. This might also happen when using outdated physical media or ISO images that do not have the latest updates integrated.

        Thanks for your help.

        • #2353615
          cyberSAR
          AskWoody Plus

          This primarily happens when managed devices are updated using outdated bundles or media through an update management tool such as Windows Server Update Services (WSUS) or Microsoft Endpoint Configuration Manager. This might also happen when using outdated physical media or ISO images that do not have the latest updates integrated.

          Using update now from the link we shared will not be outdated media

          1 user thanked author for this post.
      • #2353643
        krism
        AskWoody Plus

        My 2 cents on how to update to a new release:

        Download the iso and burn it to a USB stick.

        Image back up your disk/SSD.<—-<—–<—–<—–<———-

        Plug in the USB stick and run setup.exe .

        - ThinkPad T530-2394-3J8, i5-3380M 2.9GHz, UEFI/GPT: (Win10 20H2 Pro x64), 8GB(15GB/s), Sammy 500GB SSD. -

        • #2353812
          Paul T
          AskWoody MVP

          You don’t need to burn the ISO to USB, double click on the IOS and Windows will mount it as a drive.

          cheers, Paul

          1 user thanked author for this post.
          • #2353983
            krism
            AskWoody Plus

            LOL, you know, that is one thing I have never utilized. Macrium offers that, too. I should utilize that. Thanks!

            - ThinkPad T530-2394-3J8, i5-3380M 2.9GHz, UEFI/GPT: (Win10 20H2 Pro x64), 8GB(15GB/s), Sammy 500GB SSD. -

      • #2353656
        glnz
        AskWoody Plus

        Before I upgrade from 2004 to 20H2, I am guessing I should change the gpedit command I did earlier (at Susan’s suggestion) that keeps my updates to 2004. I should probably change that setting to 20H2, yes?
        But I was too dumb to take a note as to where that is in gpedit.
        Please give me the link here to Susan’s posts about that.
        Thanks.
        (AND YOU ALL SHOULD CONTRIBUTE TO THIS GREAT AND USEFUL WEBSITE. My contribution is very modest, but everyone’s can also be so if everyone would contribute.)

        • #2353666
          PKCano
          Manager

          You need to change the TargetReleaseVersion setting to 20H2.

          Tasks for the Weekend January 30 to use Susan’s reg files.

          AKB2000016 Section 2: To use the Reg file Method – links to the .Reg files
          OR
          AKB2000016 #2286499 top screenshot to see the location of the Group Policy setting.

          • #2353669
            glnz
            AskWoody Plus

            PKCano – Great. Your secondary link is what I did the first time:

            These Settings are found in Group Policy (gpedit.msc) in Win10 Pro at this location:
            – Local Computer Policy\Computer Configuration\Administrative Templates\Windows Components\Windows Update
            – Under Windows Update for Business:
            — Set Select the target Feature Update version to Enabled.
            — Set Target Version for Feature Update to the released version on which you want to remain or to which you want to upgrade (example 2004)

            Question 1: Now, if I upgrade my current 2004 to 20H2, at what point should I go back to that gpedit and change it to “20H2”? Before I start the upgrade or after?

            Question 2: When I upgrade to 20H2, I don’t want the upgrade to pull and install all current updates for 20H2. So, since I just made an .iso of the 20H2, should I first disconnect the internet when I run it (probably a bad idea), or should I do something else? As I know this is an old question, please point me to links. ADDED IN EDIT: By the way, the .iso for 20H2 indicates it will install “FileVersion”, “10.0.19041.1 (WinBuild.160101.0800)”

            Thanks!!

            • This reply was modified 2 weeks, 1 day ago by glnz.
            • #2353674
              PKCano
              Manager

              If you want to upgrade 2004 -> 20H2 using Windows Update, you can set TRV before the upgrade and you will be offered 20H2 through the Windows Update queue. It will be up-to-date (probably as of the last Patch Tues. and offer the OOB in the Optional Section, depending on your other settings).
              If you use another method to upgrade, setting TRV after the upgrade will hold you on 20H2 until you want the next version.

              If you use an ISO and are connected to the Internet, it will update you to the latest Build in the process of the install.

              If you use an ISO and are disconnected from the Internet, it will give you the Build that is contained in the ISO and you will have to update from there (be sure WU settings are good before you go online). If this is the case, to keep from getting the up-to-date Build through WU, you will need to download and manually install the CU (and SSU) for the time period you want the update to be.

              Information: There is very little difference between 2004 and 20H2. The Feature Experience Pack is included in BOTH, just not turned on in 2004. You might as well bite the bullet and go ahead and upgrade to the up-to-date Build of 20H2 the easiest way – either through TRV and WU or as described by Susan from the MS website. IMHO.

              3 users thanked author for this post.
            • #2353677
              cyberSAR
              AskWoody Plus

              When I upgrade to 20H2, I don’t want the upgrade to pull and install all current updates for 20H2.

              What I do is go into gpedit immediately after reboot comes up and set pause for quality updates in windows updates for business to as far out as needed to prevent March updates. This has allowed me to fetch the February updates and not the March updates. If you like you can then set it back to not configured and play with the gui to get your pause period you desire. I have some of mine set to April 30.

              2 users thanked author for this post.
              • #2353955
                WCHS
                AskWoody Plus

                This has allowed me to fetch the February updates and not the March updates

                with Win10/Pro, could you control it so that you get the February updates but not the March updates by setting GP=2 while you are paused and waiting for the machine to settle down, afterwards rebooting, then checking wushowhide for the March update and anything else that you don’t want and hiding it/them, and then waiting until WU refreshes to click the download button to get everything else not hidden?

                “Waiting until WU refreshes” means not even going to Windows Updates (to avoid the problem you cited in #2353750

              • #2353961
                cyberSAR
                AskWoody Plus

                Possibly. You would think so, but when I tried GP=2 on a test I had a bad experience as the machine updated when I visited the updates page without me pressing the unpause button. Possible, I guess, that I hit it without realizing it but pretty sure I didn’t.

                Also due to the number of machines I maintain, I don’t want GP=2 as a rule because I don’t have the time to wait on downloads and don’t want my clients pestered with notices.

      • #2353676
        Alex5723
        AskWoody Plus

        Now, if I upgrade my current 2004 to 20H2, at what point should I go back to that gpedit and change it to “20H2”? Before I start the upgrade or after?

        Set to 20H2 after the upgrade. 21H1 will come in June 21.

        since I just made an .iso of the 20H2, should I first disconnect the internet when I run it

        Yes. Upgrading from ISO may also force you to create Microsoft account in addition to the latest monthly updates.
        After the update from ISO, go over all settings, on Pro set GP “Notify…”=2. That way you will be able to hide any unwanted updates with WUmgr..

        On HOME set your network connections (wlan, wi-fi) to metered before reconnecting to the Internet.

        By the way, the .iso for 20H2 indicates it will install “FileVersion”, “10.0.19041.1 (WinBuild.160101.0800)”

        “10.0.19041.1″ is not the real version that will be installed. You will get 19041/19042.870/844/746.. according to the date/month you have downloaded the ISO file.

        1 user thanked author for this post.
        • #2353734
          Susan Bradley
          Manager

          If you boot from the ISO that will trigger a new install. If you expand the iso on a flash drive and mount it like it’s a cd rom drive and then find the setup.exe it won’t trigger a new account process (at least it hasn’t when I did it a few months ago – things could have changed)

          Susan Bradley Patch Lady

          1 user thanked author for this post.
          • #2354145
            krism
            AskWoody Plus

            I insert the new iso and click on setup. It does not trigger a new account request.

            - ThinkPad T530-2394-3J8, i5-3380M 2.9GHz, UEFI/GPT: (Win10 20H2 Pro x64), 8GB(15GB/s), Sammy 500GB SSD. -

            1 user thanked author for this post.
      • #2353699
        mpw
        AskWoody Plus

        Installed KB5000802, now running 20H2 v.19042.867

        HP ENVY 5540 working normally.  No printing problems.

        Optional KB5001649 offered but not installed because current build is working and I have no printer problems.

        HP Pavilion Desktop TP01-0050 – 64 bit
        Windows 10 Home Version 20H2
        OS build 19042.867
        Windows Defender and Windows Firewall
        Microsoft Office Home and Business 2019
        -Version 2102 (Build 13801.20360 C2R)

        1 user thanked author for this post.
      • #2353703
        opti1
        AskWoody Plus

        Information: There is very little difference between 2004 and 20H2. The Feature Experience Pack is included in BOTH, just not turned on in 2004. You might as well bite the bullet and go ahead and upgrade to the up-to-date Build of 20H2 the easiest way – either through TRV and WU or as described by Susan from the MS website. IMHO.

        I am on 2004 Pro. I have set up everything as you (PKCano) laid out in AKB2000016 to stay on 2004 for now, and I have not yet installed any March updates . . .

        If I upgrade to 20H2 through TRV and WU is there any benefit to first installing KB5001649 before I upgrade or should I wait and see if it gets folded into the 20H2 build?

        If I upgrade to 20H2 as described by Susan from the MS website is that the same as installing from an ISO with the accompanying concerns you mentioned (2353674) about implications of running the install process connected or disconnected from the internet?

        Thanks!

        • #2353711
          cyberSAR
          AskWoody Plus

          My opinion would be best to just use Windows update to move up from 2004 to 20H2. It’s a quick update although I would suggest waiting a bit until they sort this March update issue out. That said I haven’t had any issues yet with the machines with the March updates installed. I’m advising clients to wait until we see how the April updates go before moving up to 20H2

          3 users thanked author for this post.
        • #2353713
          PKCano
          Manager

          Let me explain further:
          2004 and 20H2 share the same core, they get the same CUs and the same SSUs and the same .NET, etc, etc. Both contain the same Feature Enhancement Pack – it’s turned on in 20H2, it’s just not turned on in 2004.

          Given that they get the same updates, the problems that one has, the other also has. And it’s not fixed in one, it’s fixed in BOTH at the same time. So. BOTH have the same printer issues with the Patch Tues. patches, and BOTH receive the same OOB updates as fixes.
          The OOB printer fixes will be included in the April Patch Tues. updates.

          So it really is moot whether you are on 2004 or 20H2.

          There is a difference between 1909 and 2004/20H2. But 1909 also has the printer problems with March patches. So you are faced with the OOBs there too if you decide to patch. 1909 will be EOL on Patch Tues, MAY 11th. It’s time to move on before MS forces the move.
          Take your choice between a rock and a hard place.

          I believe using the “Upgrade now” from the MS website (you’ll be ONLINE) or using TRV+WU (ONLINE) will probably get you to the same place – March updates installed.Or see @cyberSAR ‘s suggestion in #2353677 above..
          If you install from an ISO (OFFLINE), you will have to update from the time the ISO was made to the current.

          3 users thanked author for this post.
          • #2353716
            cyberSAR
            AskWoody Plus

            Wish I was as good as PKCano at explaining things!

            1 user thanked author for this post.
          • #2353717
            Tex265
            AskWoody Plus

            Given that they get the same updates, the problems that one has, the other also has. And it’s not fixed in one, it’s fixed in BOTH at the same time. So. BOTH have the same printer issues with the Patch Tues. patches, and BOTH receive the same OOB updates as fixes.

            If I am currently on ver 2004 without the March CU and I want to move to 20H2 via the Windows Updater, will I be installing not only the 20H2 Feature Update, but will it also include the March CU?

            And if so, which one?  Or will I be updated to 20H2 and still maintain the February CU?

            Windows 10 Pro x64 v20H2 and Windows 7 Pro SP1 x64 (RIP)
            1 user thanked author for this post.
            • #2353718
              PKCano
              Manager

              See @cyberSAR ‘s suggestion in #2353677 above..

              • #2353729
                Tex265
                AskWoody Plus

                That post would imply that the Feature Update to 20H2 is the activation of the enhancement package ONLY and that as long as I have GP set to 2 (notify) and currently at ver 2004 with February CU installed, I should be again offered the March CU separately, which I can hide and await resolution – correct?

                Windows 10 Pro x64 v20H2 and Windows 7 Pro SP1 x64 (RIP)
                1 user thanked author for this post.
              • #2353750
                cyberSAR
                AskWoody Plus

                In that post I’m updating 1909 systems to 20H2 from an iso. I don’t really use the GP set to 2 or wushowhide so can’t accurately answer your question. I tend to set the updates for business quality updates pause to 15-20 days for the machines I don’t access monthly. The ones I access weekly for maintenance I generally use the GUI to pause for different time frames after updating each month.

                I did play with GP set on 2 recently on a machine and as soon as I checked (I did not click the check for updates button, just went to updates) updates it downloaded the latest updates. Wasn’t thrilled with that.

                • This reply was modified 2 weeks ago by cyberSAR.
              • #2353756
                PKCano
                Manager

                If you “Resume updates” from Pause, that will happen. If you use the “2” you shouldn’t “Resume updates” (unPause) b/c it ignores the “2.”

              • #2353758
                cyberSAR
                AskWoody Plus

                That’s just it. I didn’t resume from pause. I just accessed the updates settings page and they started downloading. Didn’t spend much time on it as it doesn’t fit my workflow.

      • #2353782
        WCHS
        AskWoody Plus

        There is no mention of Dell printers. Does anyone know if they pass muster with the March CU? Or if not, does the latest March OOB fix the problems with these printers?

        • #2353967
          Susan Bradley
          Manager

          I personally have not seen any reports, but since I don’t personally have a Dell printer I can’t guarantee.  If the printer is “newish” you are probably getting a newer driver and thus will be fine.

          Susan Bradley Patch Lady

        • #2353982
          MHCLV941
          AskWoody Plus

          Does Dell even “make” printers anymore – I could not find any listed on their web page.

          In any case, back when it did, the printers were actually made by Lexmark and badged as Dell.    Perhaps checking on Lexmark printer problems would shed some light?

          • #2354018
            WCHS
            AskWoody Plus

            Thanks for the lead. No wonder Dell threw it in for practically nothing when I bought my laptop a little more than 4 years ago!!

      • #2353816
        Alex5723
        AskWoody Plus

        as long as I have GP set to 2 (notify) and currently at ver 2004 with February CU installed, I should be again offered the March CU separately, which I can hide and await resolution – correct?

        Correct.

        1 user thanked author for this post.
      • #2353861
        MHCLV941
        AskWoody Plus

        Dymo has issued updates to both DymoConnect (its new label designer) and Dymo Label (its old label manager) that supposedly deal with the printer issues with Dymo label printers due to this month’s updates.

        Based on my experience, DO NOT install these updates on computers that need to use shared Dymo printers until/unless you’ve installed the March updates.   Whatever Dymo did to “fix” the MS updates breaks the software’s capability to see a Dymo printer shared from another PC.

        On the other hand, once the updates are installed, you don’t need the updated versions of the Dymo software.

        NB:  I never could get DymoConnect to use a shared printer.  The computer sees it just fine and prints a test page to it.

        • This reply was modified 2 weeks ago by MHCLV941.
        1 user thanked author for this post.
      • #2353980
        MHCLV941
        AskWoody Plus

        Whatever Dymo did to “fix” the MS updates breaks the software’s capability to see a Dymo printer shared from another PC.

        Clarification:  Installing these updates prior to installing the March updates breaks the software’s capability to see a Dymo printer shared from another PC.

         

      • #2353987
        SUCH41
        AskWoody Plus

        Last night I decided to follow Susan’s recommendation and after watching her video one more time I visited http://www.microsoft.com/en-us/software-download/windows10, and clicked the update now button. After about 4 hours later it is successfully upgraded from 1909 to version 20h2.  Before I upgraded I had installed KB5001566, and after upgraded to 20h2 I noticed that the system had installed KB5000802. Thanks goodness the printer seems to print just fine (printer is HP Envy 7640). After the upgrade I followed PK’s AKB2000016 article and make sure  the “2” is still on and set the TRV to 20h2. Afterward following @cyberSAR approach, I run sfc /scannow. Just thought I give a brief report and thanks every one for your support!

        1 user thanked author for this post.
      • #2353995
        EP
        AskWoody_MVP

        KB5000842 preview update for 2004/20H2 recently released Mon March 29 after 2pm Pacific local time:
        https://support.microsoft.com/help/5000842

      • #2354150
        Alex5723
        AskWoody Plus

        I insert the new iso and click on setup. It does not trigger a new account request.

        Did you run a clean install or update/upgrade ? Clean install will ask for Microsoft account.

      • #2354156
        glnz
        AskWoody Plus

        Win 10 Pro 64-bit version 2004.  I’ve installed all updates through KB5001649 and rebooted a few times.

        If in cmd I run Dism /Online /Cleanup-Image /RestoreHealth, I see what looks like a mismatch in versions:

        Deployment Image Servicing and Management tool Version: 10.0.19041.844
        Image Version: 10.0.19041.870

        It all comes out 100% OK, but does this mismatch mean anything?

        Thanks.

        • This reply was modified 1 week, 6 days ago by glnz.
        • This reply was modified 1 week, 6 days ago by glnz.
      • #2355104
        GoneToPlaid
        AskWoody Plus

        I finally got around to backing up my computer after first resolving an issue with Quickbooks not being able to export to Excel. I did full backups to two external drives.

        My computer is Windows 7 Group B.

        I installed KB5000851 (the March security-only update) and KB5001639 (the March out-of-band patch for KB5000851) back-to-back and then I rebooted. I then tested printing to my Canon printers. There were no printing issues. I then installed the latest cumulative IE update and rebooted. Thus my main computer is updated through March 2021.

         

        1 user thanked author for this post.
      • #2355873
        magigreen1
        AskWoody Plus

        Hey there I was wondering if its safe to install KB5000802 which is a march cumulative update?

      • #2355891
        Tex265
        AskWoody Plus

        Yesterday I upgraded from 2004 to 20H2 via the Windows Updater (after updating 2004 manually with the March KB5001649 from the MS Catalog).

        All seems well, except today I ran sfc /verifyonly and it says “Windows Resource Protection found integrity violations.  For online repairs …. etc”

        For some reason I think I read Susan did not recommend running sfc after an update, but not sure why?

        Should I wait awhile (for what?) or try running sfc /scannow ?  Or?

        Windows 10 Pro x64 v20H2 and Windows 7 Pro SP1 x64 (RIP)
      • #2355907
        MHCLV941
        AskWoody Plus

        Where have you been for the last month?

        Perhaps magigreen1 was waiting for someone to answer a question without being snarky.

        Alsa, more waiting was necessary.

      • #2355915
        MHCLV941
        AskWoody Plus

        Hey there I was wondering if its safe to install KB5000802 which is a march cumulative update?

        Maybe.

        I’ve upgraded about two dozen computers since 3/29 and not had any problems.  Most of the machines used either a Dymo label printer or an ancient Richo copier.  I also installed the updated Dymo software (see https://www.dymo.com/en_US/home).

        The computers were on update pause until the 29th, so the machines did not “see” 802 until that date.  It possible Microsoft updated 802.

        I suggest you scan this thread for mention of makes of printers that are problematic (Dymo figuires prominently in this list) and proceed accordinginly.

         

      • #2355917
        MHCLV941
        AskWoody Plus

        Should I wait awhile (for what?) or try running sfc /scannow ?

        I seem to recall Susan (or someone) mentioning there are background chores going on for a while after an update, so that might have something to do with it.

        That said, unless you also ran SFC before you updated, you have no assurance that the errors were present before you updated.

      • #2355918
        Tex265
        AskWoody Plus

        That said, unless you also ran SFC before you updated, you have no assurance that the errors were present before you updated.

        I did run sfc before, and there were no errors.

        Question now is should I run sfc /scannow?  Or?

        Windows 10 Pro x64 v20H2 and Windows 7 Pro SP1 x64 (RIP)
        • #2355921
          cyberSAR
          AskWoody Plus

          I’ve run it on all my upgrades and it repaired errors with no issues.

      • #2355959
        MHCLV941
        AskWoody Plus

        Or?

        Seems two options: ignore it or see not.

        If not, I suggest you run sfc /verifyonly again to see if there are still errors.  If so, SFC/scannow seems to be the next reasonable step.

         

      • #2356025
        Alex5723
        AskWoody Plus

        Security Advisories Released or Updated on April 7, 2021
        ======================================================================================

        * ADV990001

        – ADV990001 | Latest Servicing Stack Updates
        https://msrc.microsoft.com/update-guide/vulnerability/ADV990001
        – Reason for Revision: Microsoft has released servicing stack update (SSU) 5001205
        for all affected editions of Windows 10 version 1909. This SSU also addresses known
        issues customers might have experienced when installing the update for CVE-2020-0689;
        see [KB5001205](https://support.microsoft.com/help/5001205). Customers must install
        the latest SSU before installing applicable security updates. See the FAQ for more
        information.
        – Originally posted: November 13, 2018
        – Updated: April 7, 2021
        – Version: 35.0

      • #2356108
        Charlie
        AskWoody Plus

        Just in case anyone is interested, I just downloaded and installed five Office 2010 updates waiting so nice and patiently for me on Windows 7’s WU.  All went well as usual and my Office is up to date.  The two extra updates were for PowerPoint and Visio.  Yep Visio.

        3 users thanked author for this post.
        • #2356121
          DrBonzo
          AskWoody Plus

          I meant to post this a few days ago when I did the same. 2 Office, 1 Excel, 1 Powerpoint, and 1 Visio, all through Windows Update on a Win 7 Pro x 64 (although my Office is the 32 bit version). No problems or issues (but then, I never have had any issues with Office updates – amazingly enough).

          3 users thanked author for this post.
          • #2356123
            GoneToPlaid
            AskWoody Plus

            I too have never had any problems with Office updates, yet that is because I avoided the “once in a blue moon” problems which have occurred by not letting my Office 365 installations automatically update. I wait until at least 30 days has passed since a recent Office update. If no issues have been reported, then I update.

            2 users thanked author for this post.
    Viewing 71 reply threads

    Please follow the -Lounge Rules- no personal attacks, no swearing, no politics or religion.

    Reply To: MS-DEFCON 3: Patching is unclear

    You can use BBCodes to format your content.
    Your account can't use Advanced BBCodes, they will be stripped before saving.