MS-DEFCON 4: A perfect calm before the next patching storm

Topic

New Reply

Get your patches installed. There’s a new Flash update, KB 4471331, that you need (if it appears in your Windows Update list) and a new KB 4023057 tha
[See the full post at: MS-DEFCON 4: A perfect calm before the next patching storm]

16 users thanked author for this post.

jburk07, Chris B, dgreen, CyGuy, abbodi86, Myst, SueW, Nibbled To Death By Ducks, Elly, Lori, ch100, geekdom, Microfix, honx, GreatAndPowerfulTech, Mr. Natural

Reply | Quote

Replies

What is the situation regarding the 2010 office patches from  november, and the 2 non security patches released this month?

Reply | Quote

Please refer to the Master Patch list for November updates or wait for Woody’s computerworld article. As for december-2018-non-security-office-updates click the link.

Keeping IT Lean, Clean and Mean!

Reply | Quote

I started pushing the November updates last week and have not had any issues reported. I installed the new flash update yesterday on my work pc running 1803 and was prompted for a reboot after it installed. I don’t ever recall a flash update requiring a reboot before so I thought I’d mention.

Red Ruffnsore

Reply | Quote

installed group b updates on both windows 7 and windows 8.1, after reboot i installed msrt and office 2010 updates (november only, excluding kb4227172 and kb4461579 which were unchecked on windows 7 anyway. on 8.1 these two office updates were checked, so i unchecked them). and on 8.1 i also installed defender and flash updates. this time there was no .net as it seems…

as i’m using 32bit version of office 2010 i don’t expect any issues related to outlook 2010 64 bit. 😀 kb4461585 didn’t show in update list, maybe it’s only available for 64bit version as it fixes crash with 64bit version?

PC: Windows 7 Ultimate, 64bit, Group B
Notebook: Windows 8.1, 64bit, Group B

1 user thanked author for this post.

SueW

Reply | Quote

Installed SQMR update 24th November on two different W8.1 devices, no problems encountered but, didn’t install the non-security dotNet update (as per Woody’s article).
OoB Flash updates for November and December installed, again, no problems.
Edit: Our W7 x64 still to do over the weekend..

Keeping IT Lean, Clean and Mean!

Reply | Quote

Hey Y’all,

This one installed when I went after updates.

However, it doesn’t show up on the uninstall list!

May the Forces of good computing be with you!

RG

PowerShell & VBA Rule!
Computer Specs

Reply | Quote

Look in Control Panel\Programs and Features. It may be there.

Reply | Quote

No such luck.

May the Forces of good computing be with you!

RG

PowerShell & VBA Rule!
Computer Specs

Reply | Quote

Upgrade Assistant? Check again and in Settings\Programs

Reply | Quote

P.K.,

Ok I found it this time had to click on it to find the KB number.

May the Forces of good computing be with you!

RG

PowerShell & VBA Rule!
Computer Specs

Reply | Quote

Woo hoo! I can finally patch my two Windows computers!

IF I don’t forget between now and the time I get home this evening!

Group "L" (Linux Mint)
with Windows 8.1 running in a VM

Reply | Quote

I installed kb4467240, kb4467107 & kb890830 and they did show in history BUT when I checked the installed list it showed kb4459942, kb4467107 and kb4459934. Is M$ playing with my head?

So far no problems that I can tell.

Edition Windows 11 Pro
Version 22H2
Installed on ‎10/‎19/‎2022
OS build 22621.1702

Reply | Quote

The .NET patches show up as the individual version update instead of the Rollup KB number.

4 users thanked author for this post.

HiFlyer, Myst, Elly, fernlady

Reply | Quote

Nice informative article Woody, with extra workarounds and tips, good stuff!

Keeping IT Lean, Clean and Mean!

Reply | Quote

The big question for this round of patches is how do we deal with 1809 recently released updates:
KB4470788 – 2018-11 SSU
KB4469342 – 2018-11 CU
KB4471331 – 2018-12 Security Update for Flash

There is another one which I would ignore for now and that is the .NET Framework Preview.

I would say install first 3 patches, even if KB4469342 is only a preview for what is to come next week.
1809 is still in the early stages and receives a lot of useful fixes on a faster schedule than older releases.

2 users thanked author for this post.

BobbyB, PKCano

Reply | Quote

2 quotes from Woody regarding .NET:

I’m seeing more and more reports about problems with this month’s .Net patches.

What platforms are these appearing on? Just Win10 whatever, or are they affecting Win8.1 and/or Win7?!

Fuhgeddaboutit. This month’s .Net patches are all non-security patches, and aren’t worth your time, or the headaches.

If Windows 8.1 is being affected & they are non-security patches, I can probably skip applying the November .NET Rollup & wait to see if they are fixed for December. If not by then, keep skipping until a good .NET Rollup comes out.

Right?

Bought a refurbished Windows 10 64-bit, currently updated to 22H2. Have broke the AC adapter cord going to the 8.1 machine, but before that, coaxed it into charging. Need to buy new adapter if wish to continue using it.
Wild Bill Rides Again...

1 user thanked author for this post.

cesmart4125

Reply | Quote

Unless they are SECURITY patches you don’t NEED TO install them right away.

2 users thanked author for this post.

cesmart4125, WildBill

Reply | Quote

On Win7, I was offered two optional updates for .NET (KB4467240 and Preview KB4467224). They were unchecked and I’ve hidden them.

Reply | Quote

Woody,

I’m a little confused by the paragraph in your CW article about the December 2018 SSU. It appears you’re suggesting this needs to be installed before moving to 1809. In fact, you need to be on 1809 to install the particular SSU you reference. Either that or I’m misunderstanding the point in your article. By the way, there is a typo where you reference the KB article for the SSU. It should be KB4470788 not KB4070788. Your hyperlink is good though!

Reply | Quote

Woody is saying that if you are on 1809 you need to install the SSU KB4470788 before you install the latest version of the CU KB4469342.

Reply | Quote

Group A….Windows 7 x64 Pro and Windows 10 Pro…All installed with no problems so far.

( knock on wood )

3 users thanked author for this post.

MrToad28, jburk07, Myst

Reply | Quote

Reporting in..installed Win 7 KB4467107 with no ill effects.

So far. (Knock on, er, Oak-with Mistletoe.)

As usual, to all the MVP’s and other loungers souls who help keep us safe,  “Ave Atque Vale!”

Win7 Pro SP1 64-bit, Dell Latitude E6330, Intel CORE i5 "Ivy Bridge", 12GB RAM, Group "0Patch", Multiple Air-Gapped backup drives in different locations. Linux Mint Greenhorn
--
"...all the people, all the time..."Peter Ustinov ad-lib in "Logan's Run"

2 users thanked author for this post.

jburk07, Myst

Reply | Quote

I installed Nov. update on Windows 8.1 and now have BSOD.

I have used my Windows 10 computer that has been used only offline for 6 months to go online to find solution to get my Windows 8.1 computer online. Hopefully can get it offline before updates try to install on Windows 10 and have not computer to go online with.

Reply | Quote

I am a bit confused (as are some others) but have yet to see a definitive answer on the Security & Quality Rollup for NET (KB4467240). In Woody’s Computer World article he says

“Fuhgeddaboutit. This month’s .Net patches are all non-security patches, and aren’t worth your time, or the headaches.”

Well according to what I see it says it IS a security update, so does that mean I SHOULD install the update????

I also don’t see any info (not even on the Master Patch list) on KB3150513 (Update for Win7 for 64 systems)…..Is this safe to install?

(Windows 7 64bit home Premium Group A)

4 users thanked author for this post.

tmcnelley, jburk07, bassmanzam, cesmart4125

Reply | Quote

Take Woody’s word for it. There are only non-security patches in the .NET Rollup for Nov. There is no urgency to install it.

7 users thanked author for this post.

jburk07, SueW, cesmart4125, WildBill, Myst, bassmanzam, KarenS

Reply | Quote

Thanks PKCano…..can you address the other question on KB3150513? Sorry I was updating my last post when you answered my question.

Reply | Quote

KB3150513 will only show up on your computer if the telemetry patch KB2952664 (or its functionality) is installed. Since Microsoft incorporated KB2952664 functionality in the Monthly Rollups in October, now its updater KB3150513 shows up in Windows Update.

HIDE IT!!!!

If you search for those two patches on this site, you will find the discussion(s) that occurred when KB2952664 was incorporated in the Rollups.

3 users thanked author for this post.

HiFlyer, Myst, KarenS

Reply | Quote

Gotcha!! Thanks for the info…….HIDING as instructed!!

Reply | Quote

Last month there were two successive updates for Outlook: first came out KB4461529, that caused problems, then KB4461524, that fixed that.

Question: Should I install both, in the order they came out, or just the latest one?

Also, in the Master Patch List there is no advice given as to what to do with the .NET patch kb4459942. Any suggestions?

Thanks.

 

Group B, Windows 7 Pro, SP1, x64 I-7 “sandy bridge”.

Ex-Windows user (Win. 98, XP, 7); since mid-2017 using also macOS. Presently on Monterey 12.15 & sometimes running also Linux (Mint).

MacBook Pro circa mid-2015, 15" display, with 16GB 1600 GHz DDR3 RAM, 1 TB SSD, a Haswell architecture Intel CPU with 4 Cores and 8 Threads model i7-4870HQ @ 2.50GHz.
Intel Iris Pro GPU with Built-in Bus, VRAM 1.5 GB, Display 2880 x 1800 Retina, 24-Bit color.
macOS Monterey; browsers: Waterfox "Current", Vivaldi and (now and then) Chrome; security apps. Intego AV

Reply | Quote

KB 4461524 only covers CVE-2018-8573, and supercedes KB 4092437.
KB 4461529 covers 4 CVE-2018-85** vulnerabilities, and supercedes KB 4227170.
They were both issued on Nov. 13th.

Reply | Quote

Thanks, but sorry: do I understand correctly that both patches have to be installed? If, so, in which order?

And perhaps someone could also explain what to do about .NET kb4459942?

Group B, Windows 7 Pro, SP1, x64 I-7 “sandy bridge”.

Ex-Windows user (Win. 98, XP, 7); since mid-2017 using also macOS. Presently on Monterey 12.15 & sometimes running also Linux (Mint).

MacBook Pro circa mid-2015, 15" display, with 16GB 1600 GHz DDR3 RAM, 1 TB SSD, a Haswell architecture Intel CPU with 4 Cores and 8 Threads model i7-4870HQ @ 2.50GHz.
Intel Iris Pro GPU with Built-in Bus, VRAM 1.5 GB, Display 2880 x 1800 Retina, 24-Bit color.
macOS Monterey; browsers: Waterfox "Current", Vivaldi and (now and then) Chrome; security apps. Intego AV

Reply | Quote

There was nothing I saw to say that one security update needed the other before it could be installed, looking at the links I provided you.

The .NET update does not include any security updates, and unless you have a compelling need for it, it probably does not need to be installed immediately.

1 user thanked author for this post.

WildBill

Reply | Quote

Terribly sorry, I missed seeing those links! Now I have seen and used them and in this way discovered that, according to the MS page for kB4461529, I also need to install kb4461585 to fix the problem with KB4461529. So, before there were two patches to be installed and now there are three? Oh Dear! And… should I install first the trouble maker and then the fixer, or their order is irrelevant?

Ex-Windows user (Win. 98, XP, 7); since mid-2017 using also macOS. Presently on Monterey 12.15 & sometimes running also Linux (Mint).

MacBook Pro circa mid-2015, 15" display, with 16GB 1600 GHz DDR3 RAM, 1 TB SSD, a Haswell architecture Intel CPU with 4 Cores and 8 Threads model i7-4870HQ @ 2.50GHz.
Intel Iris Pro GPU with Built-in Bus, VRAM 1.5 GB, Display 2880 x 1800 Retina, 24-Bit color.
macOS Monterey; browsers: Waterfox "Current", Vivaldi and (now and then) Chrome; security apps. Intego AV

Reply | Quote

Installing KB 4461585 would apparently only be necessary IF you suffered the known issue, which MAY affect your system after installing KB 4461529:

Known issues in this security update
After you install the 64-bit version of this security update, Outlook may crash on start-up.
To resolve this issue, install update 4461585.

I would not be installing any fix prior to the patch that may cause an issue, unless this was noted as a prerequisite.

1 user thanked author for this post.

OscarCP

Reply | Quote

Windows 7 x64 and Office 2010 x64

Todsy I was offered both 4461529 and 4461585.  Only 4461585 was checked and installed.

After installing, and check for updates both are not being offerred.  Do I still need to install 4461529?

Reply | Quote

KB 4461585 was a fix – see @gborn’s blogpost:

Update KB4461585 fixes Outlook 2010 crash

On November 21, 2018, Microsoft released the update KB4461585 for Outlook 2010. The only purpose is to fix the Outlook crash.

Maybe you could try checking Updates again 🙂

Reply | Quote

Sorry forgot to add Group A.

I checked Windows Update again and was not offered Outlook 4461529.

I was always under the motto…
“If it ain’t checked, don’t check it”

So since Outlook 4461529 was not checked I did not check it.

How do I recover from this?

Thanks in advance.

Reply | Quote

If by chance you installed KB4461529, you need KB4461585 to fix the problem it causes.

KB4461585 superceded KB4461529, so you do not need KB4461529. You only need KB4461585.

2 users thanked author for this post.

OscarCP, bassmanzam

Reply | Quote

*win10 home installed kb 4023057 on a metered connection against my will ( definitely not a “seeker”). -insert swear words here- Thanks

Reply | Quote

……also kb 4023057 doesn’t show up in my uninstall updates list??????????????

Reply | Quote

Uninstall it. See #239088 and above.

Reply | Quote

Got it – thanks @PKCano <3

Reply | Quote

Reporting in:
at 3 am (sigh)

Important Updates
Installed KB4467107 (roll up)
no issues

KB4467240   .net rollup   (it was checked) unchecked and HID
KB890830 MSRT  (it was checked) unchecked and HID (have not been installing these for a few months)

Optional (did not install obviously because they are previews)
2 Roll up Previews
December Preview Roll up
.Net Preview Roll up

Updated MSE definitions.

The only thing I notice when it restarted was MSE notification icon was red.
It did eventually turned green.  Computer shut down for remaining of night.
It did it again when I restarted computer a little while ago.
This has happened before a few times.  ????

______________

Dell Inspiron 660 (new hard drive installed and Windows 7 reloaded Nov. 2017)

Windows 7 Home Premium 64 bit SP 1  GROUP A

Processor:  Intel i3-3240 (ivy bridge 3rd generation)

chipset Intel (R) 7 series/C216

chipset family SATA AHCI Controller -1 E02

NIC Realtek PCLE GBE Family Controller

MSE antivirus

Chrome browser

 

2 users thanked author for this post.

MrToad28, jburk07

Reply | Quote

My MSE does this from time to time at boot-up. Sometimes I even have to turn it on manually. Nothing to do with updates; I have figured out that it’s triggered by the program not being able to phone home at a crucial point during the process of loading. If my router takes a few seconds longer than usual to sort itself out and provide a connection, MSE sulks.

2 users thanked author for this post.

dgreen, Lars220

Reply | Quote

It may be a “perfect calm”, but it may not last long. My most recent look at my W10.1809 registry’s entries under [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\WaaSAssessment] tells me that an upcoming build 17763.194 is on the near horizon for deployment.

Asus ROG Maximus XI Code board; Intel i9-9900K CPU; 32 GB DDR4-3600 RAM; Nvidia GTX1080 GPU; 2x512 GB Samsung 970 Pro M.2 NVMe; 2x2 TB Samsung 860 Pro SSDs; Windows 10.1809; Linux Mint 19.1; Terabyte Backup & Recovery

1 user thanked author for this post.

BobbyB

Reply | Quote

“near horizon” = December 11 2018 ?

Reply | Quote

Who know? Certainly not I. I can only tell you that the last “CURRENT=Build#” entry under that WaaSAssessment registry key got delivered within the next 24 hours. On the other hand, expecting any consistency in the current practices of the entity still commonly known as Microsoft is folly verging on madness.

Asus ROG Maximus XI Code board; Intel i9-9900K CPU; 32 GB DDR4-3600 RAM; Nvidia GTX1080 GPU; 2x512 GB Samsung 970 Pro M.2 NVMe; 2x2 TB Samsung 860 Pro SSDs; Windows 10.1809; Linux Mint 19.1; Terabyte Backup & Recovery

1 user thanked author for this post.

Lars220

Reply | Quote

Since November 13th I’ve had to had my Internet connection marked as metered and keep netsvcs (wuauserv) service disabled. Sorry for my naive question, but how would you suggest me to start patching again? I was thinking about making my connection unmetered, enable netsvcs as manual and keep clicking the “Check for updates” button. What do you think?

I miss Windows XP...

Reply | Quote

You should download wushowhide.diagcab from Microsoft so you can hide updates you don’t want to install. Put the Windows Update Service on Manual.

Leave your connections on Metered. Wushowhide will work if the Update Service is on Manual, but does no work if the Update Service is Disabled. Run wushowhide and hide the Updates you do not want to install. Then you need to clear the Windows Update queue before you update so you don’t install what hidden updates are currently in queue.

1 user thanked author for this post.

Terring

Reply | Quote

Since my W7 system install of Microsoft’s patch to update/fix the Service Stack in October (KB3177467) – my attempts to apply security related patches (KB4467107 being the latest) have all failed.  Geekdom, Microfix, DrBonzo have all attempted to assist with suggestions to no avail.  Anyone have a similar problem applying monthly security rollups to W7?

Please help. and THANK YOU in advance.

Jack 48009

1 user thanked author for this post.

jburk07

Reply | Quote

@jack48009 – I’m afraid your troubles might be over my pay grade, but I’ll toss a few things out that hopefully will help.

Over the last 4 years I’ve managed to keep 6 Win 7 machines patched and running well. On 4 of those machines Windows Update became totally useless. I’m guessing from what you’ve said that you do your updating through Windows Update and that you’re what we call Group A since you’re trying to install a Rollup, KB 4467107. If you update manually skip to the next paragraph. All of the Microsoft diagnostic tools or ‘fixit’ tools for WU have been equally useless for me. So, I’ve disabled it completely on the 4 machines and patch manually on all 6 of them. I’ve had WU tell me a patch installation has failed when it in fact didn’t and that an installation was successful when in fact it wasn’t. So, I would carefully check ‘installed updates’ from the control panel – not from the installation history link in WU – to see if you might actually have 4467107 installed. You just never know with MS.

But, I would encourage you to patch manually. Just google (or whatever search tool you want) KB4467107 and the first 2 hits are likely to be the MS support page and the Update Catalog page. Get to the Update Catalog either directly or from the provided link on the support page and download the patch, then install it. Make sure to read the fine print on the Catalog page; you need to make sure you get the x64 version and the Windows 7 version (not Windows 7 Embedded, and not anything else). That might sound pretty obvious but I once wasted a couple hours trying to install a 64 bit patch on a 32 bit machine; I had just finished patching a couple 64 bit machines and my brain was stuck in 64 bit mode.

If you have been patching manually, try a fresh download, instead of trying to install the exact same file over and over. That’s happened to me before also; a downloaded patch just wouldn’t go in but the a fresh download did – file sometimes get corrupted during a download.

Anyway, maybe something I’ve said will help or trigger an idea with you or someone else. It’s frustrating stuff sometimes. Good luck!

1 user thanked author for this post.

jack48009

Reply | Quote

Win7 64 SP1

just curious… i went ahead and did the servicing stack update KB3177467 as per the master patch list.  however, when i looked at the installed updates afterwards, the servicing stack update was listed, but there was no option to uninstall it at the top of the list.

is this normal?

also, i had a problem installing the actual Win7 security only update — which i thought was caused by the servicing stack update, but was something else — and even system restore to a point BEFORE the servicing stack update was installed did not remove it from the installed updates.

is there no way to undo these servicing stack updates once installed, short of restoring from a disk image backup?  seems a bit odd to me.

thanks

Reply | Quote

The Servicing Stack is the update for Windows Update. You cannot uninstall it.

1 user thanked author for this post.

jburk07

Reply | Quote

PKCano – I forgot to say THANK YOU too for your help also when I first identified my problem.  A belated THANK YOU.   Jack48009

Reply | Quote

? says:

well, where there’s a will there is (always, sometimes, never) a way:
https://borncity.com/win/2016/10/21/windows-updates-fehlende-deinstallation-erzwingen/

thank you, again G. Born

Reply | Quote

Rollup, KB4467107 installed without a problem. As did the MSRT
Unchecked KB4461529 for Office 2010 and installed the 4 left that were checked, no issues. KB3150513 didn’t pop up so I’m happy. After all the juggling around I did with telementry issues last month maybe all is ok. Thanks for all the posts and expert advice!

MacOS, iOS, iPadOS, and SOS at times.

2 users thanked author for this post.

jburk07, jack48009

Reply | Quote

Checking in after updating:

1 – imaged my disk with Macrium Reflect

2 – downloaded Updates KB4467106 (Nov. SO) and KB4466536 (IE11 Nov. Cumulative)

3 – installed each Update and then rebooted; waited 15 minutes

4 – checked “Windows Update” => 9 Important: 7 Office 2010 (5 checked) and 2 Win 7 (both checked); 3 Optional: all unchecked

5 – hid the 2 unchecked Important Office non-Security updates KB4227172 and KB4461579

6 – unchecked and hid “Important” update KB4467107 (Nov. Rollup)

7 – hid the 3 unchecked “Optional” updates (KB4467108 – Nov. Preview Rollup, KB4467224 – Nov. Preview .NET, and KB4467240 – Nov. S&Q Rollup .NET)

8 – checked “Windows Update” again => 6 Important: 5 Office 2010 and 1 Win 7: all checked; 0 Optional

9 – unhid 0 hidden updates to install

10 – installed 6 Updates: 5 Office 2010 (KB4461530, KB3114565, KB4032218, KB4461529 and KB4461526) and MSRT (KB890830)

11 – rebooted; waited 45 minutes (until the hard drive light stopped flashing)

Many thanks to PKCano, Woody, and all the other usual suspects. 🙂

Win 7 SP1 Home Premium 64-bit; Office 2010; Group B (SaS); Former 'Tech Weenie'

4 users thanked author for this post.

jburk07, jack48009, StruldBrug, Lars220

Reply | Quote

Group A, Win 7 Pro 64-bit with O365 Home —

What about

• 2018-11 Security and Quality Rollup for .NET Framework 3.5.1, 4.5.2, 4.6, 4.6.1, 4.6.2, 4.7, 4.7.1, 4.7.2 for Windows 7 and Server 2008 R2 for x64 (KB4467240)  ?

It’s not green-lighted in the Master Patch List.

Should I or shouldn’t I?

Thanks,

Reply | Quote

The Nov .NET patches are non-security. There is no urgency to install them. You can leave them alone for now if you want to.

1 user thanked author for this post.

jack48009

Reply | Quote

PKCano – Once again, I am ignoring your wisdom.  Just ran .NET update KB4467240 on my less important Win 7 Pro 64-bit machine, and so far no issues, although I haven’t done much yet.

If that machine continues OK for a few days, then I’ll run it also on my wife’s SOHO Win 7 Pro 64-bit machine.  Would prefer to catch up on both before this month’s new patches.

Both are Group A.

But thanks.

Reply | Quote

@glnz , during my Group A update routine this KBKB4467240 was presented as optional, recommended, unchecked. I would have to diverge from both Woody’s Computerworld advice and AKB2000004 to install this item.

It may be a picked nit, but the end result is different than following Group A directions. It is a valid decision that has given you no trouble. But it is closer to Microsoft’s recommendations (delayed) than standard Group A.

Reply | Quote

hey, anonymous

in my case, was important and checked – was the only one left after I’d run Malicious Software Removal Tool and the cumulative Security update.

But I could always be wrong – let’s see.

Reply | Quote

Check your results carefully! In Windows Update, I specifically UNCHECKED 4467240, 2952664, 3150513 & 4461529 and the .NET update yet found they had all been installed anyway. Had to go back and uninstall them. Guess MS is forcing things down our throats again! Win 7 x64

Reply | Quote

I know you said you unchecked some updates at one time. But, on the main Windows Update page, did you happen to notice how many updates it said were going to be installed before you clicked the “Install” button?

If you uncheck the updates, and don’t click “OK,” then go look at something else, the default checks are still there when you come back to “Important Updates.”

1 user thanked author for this post.

SueW

Reply | Quote

Installed IE 4466536, SO 4467106 and later MSRT 890830 on my Win7 Group B system yesterday.
No problems occured (till now).

Thanks always @Woody, @PKCano et al.

Reply | Quote

Windows 7 SP1 64bit, with Broadcom network card. Group B.

Installed November’s updates; IE KB4466536, SO KB4467106.

From the catalog; Installed IE KB4466536, SO KB4467106 2nd, MSRT 3rd.

Installed one at a time. Rebooted in between each update letting it sit 1 minute after update was installed.

No network issues. No oddities (actually worked very well).

Rebooted 3 times and let it sit for several minutes.

I would recommend people on the last reboot to go to the desktop and let it sit 45 to 60 minutes to Process Idle Tasks and let the trusted installer (as per PKCano) do its thing.

No Problems.

Thanks to all here.

1 user thanked author for this post.

SueW

Reply | Quote

Re: post 239307 & 239309.  Retired but I have a huge IT background [analyst/programmer/technician/administrator].  It’s never been harder to manage windows PC than it is now.  Anyway, I always apply updates to windows first.  so on pass 1 of Windows Update, I applied the cumulative update and MSRT, unchecked everything else.  reboot.  BTW: the SSU had not been offered nor did it appear in my list.  Those 2 updates applied, on restart, I applied 4 Office updates [only, SSU still not offered] then rebooted again.  It was only today when the SSU update appeared that I went looking and noted that all the undesired updates had applied.  I uninstalled all the undesired updates [which kept trying to reinstall on their own until I hid them and cleared the C:\Windows\SoftwareDistribution\Download folder].  Once I had the undesireables at bay, I installed the SSU update.  Will check installed updates, etc again in the morning to see where things stand.

Reply | Quote

W7x64, Group B

Yesterday, I installed the security only updates, KB4467106 (W7) and KB4466536 (IE11). On each of the three user IDs on my system, when IE11 was activated for the first time after the updates, it took a very long time (certainly greater than 10 seconds) for the home page to appear. Subsequent activations have been as normal.

Did anyone else experience this? I am just presuming that some special initialisation processing was required for each user ID following the installation of the cumulative security update for IE11.

Reply | Quote

For those of you with Win10 fighting NOT to install KB4023057.

Using Metered connections and wushowhide, there is a way to avoid KB4023057. I have been fighting it myself, and made some revisions on how to hide it (as well as any other updates you don’t want to install). See if this works for you.

See: How to clear the Windows Update queue in Win10.

Reply | Quote

Group A, Windows 7 Home Premium SP1 64-bit

I hid the .NET KB4467240 update (which was Important and checked on my Windows Update) and the MSRT, since I haven’t been installing it for the past few months.

Installed the monthly rollup KB4467107 and rebooted. No problems so far.

Installed the 5 Office 2010 security updates (including Outlook KB4461529, since it was checked and indicated it was the 32-bit edition). Didn’t need to reboot but did so anyway and let things run for several minutes as recommended. So far, so good.

Checked all the manual telemetry settings after the updates (thanks to @abbodi86), and this month everything was still in place – nothing had been re-enabled. Nice!

Thanks as usual to everyone here.

Linux Mint Cinnamon 19.3
Group A:
Win7 Pro x64 SP1 Haswell, 0patch Pro, dual boot with Linux, mostly offline
Win7 Home Premium x64 SP1 Ivy Bridge, 0patch Pro, mostly offline
Win 10 Pro x64 v22H2 Ivy Bridge, dual boot with Linux

Reply | Quote

Re: post 239307, 239309 & 239383.  I finally found the issue.  When the cumulative update was applied, it changed my windows update setting from “check but let me choose” to “automatically download & install”.  We’ll see if MS is honoring that setting correction.  I’m getting tired of checking/clearing the download cache!

Reply | Quote

When IE11 is updates (Windows Update), the first time it is opened a box pops up asking to “Use recommended setting” or “do not use recommended settings.”

“Use recommended setting” is checked by default (a radio button). If you do nothing, one of the recommended settings it uses is “automatically download & install” in Windows Update. You have to watch what you agree to. Microsoft is SNEAKY. Read what the rest ot the “recommended” settings are before you agree (OR NOT).

1 user thanked author for this post.

HiFlyer

Reply | Quote

I removed kb4023057 :
msiexec.exe /X{9CBA860F-7437-4A75-941C-8EF559F2D145}

 

Reply | Quote