News, tips, advice, support for Windows, Office, PCs & more. Tech help. No bull. We're community supported by donations from our Plus Members, and proud of it
Home icon Home icon Home icon Email icon RSS icon
  • MS-DEFCON 4: A perfect calm before the next patching storm

    Home Forums AskWoody blog MS-DEFCON 4: A perfect calm before the next patching storm

    This topic contains 73 replies, has 30 voices, and was last updated by  yuzr 1 year ago.

    • Author
      Posts
    • #238982 Reply

      woody
      Da Boss

      Get your patches installed. There’s a new Flash update, KB 4471331, that you need (if it appears in your Windows Update list) and a new KB 4023057 tha
      [See the full post at: MS-DEFCON 4: A perfect calm before the next patching storm]

    • #238989 Reply

      anonymous

      What is the situation regarding the 2010 office patches from  november, and the 2 non security patches released this month?

    • #239000 Reply

      Mr. Natural
      AskWoody Plus

      I started pushing the November updates last week and have not had any issues reported. I installed the new flash update yesterday on my work pc running 1803 and was prompted for a reboot after it installed. I don’t ever recall a flash update requiring a reboot before so I thought I’d mention.

      Red Ruffnsore reporting from the front lines.

    • #239002 Reply

      honx
      AskWoody Lounger

      installed group b updates on both windows 7 and windows 8.1, after reboot i installed msrt and office 2010 updates (november only, excluding kb4227172 and kb4461579 which were unchecked on windows 7 anyway. on 8.1 these two office updates were checked, so i unchecked them). and on 8.1 i also installed defender and flash updates. this time there was no .net as it seems…

      as i’m using 32bit version of office 2010 i don’t expect any issues related to outlook 2010 64 bit. 😀 kb4461585 didn’t show in update list, maybe it’s only available for 64bit version as it fixes crash with 64bit version?

      PC: Windows 7 Ultimate, 64bit, Group B
      Notebook: Windows 8.1, 64bit, Group B

      1 user thanked author for this post.
    • #239003 Reply

      Microfix
      Da Boss

      Installed SQMR update 24th November on two different W8.1 devices, no problems encountered but, didn’t install the non-security dotNet update (as per Woody’s article).
      OoB Flash updates for November and December installed, again, no problems.
      Edit: Our W7 x64 still to do over the weekend..

      Win7 Pro x64 | Win8.1 Pro x64 | Linux Hybrids x86/x64 | W10 1909 x86 Pro
    • #239009 Reply

      RetiredGeek
      AskWoody MVP

      Hey Y’all,

      This one installed when I went after updates.

      Cant-Uninstall

      However, it doesn’t show up on the uninstall list!

      Uninstall-Update

      May the Forces of good computing be with you!

      RG

      PowerShell & VBA Rule!
      Computer Specs

      Attachments:
      • #239017 Reply

        PKCano
        Da Boss

        Look in Control Panel\Programs and Features. It may be there.

        • #239048 Reply

          RetiredGeek
          AskWoody MVP

          No such luck.

          May the Forces of good computing be with you!

          RG

          PowerShell & VBA Rule!
          Computer Specs

          • #239049 Reply

            PKCano
            Da Boss

            Upgrade Assistant? Check again and in Settings\Programs

        • #239088 Reply

          RetiredGeek
          AskWoody MVP

          P.K.,

          Ok I found it this time had to click on it to find the KB number.

          Uninstall-Update-1

          May the Forces of good computing be with you!

          RG

          PowerShell & VBA Rule!
          Computer Specs

          Attachments:
    • #239024 Reply

      MrJimPhelps
      AskWoody_MVP

      Woo hoo! I can finally patch my two Windows computers!

      IF I don’t forget between now and the time I get home this evening!

      Group "L" (Linux Mint)
      with Windows 8.1 running in a VM
    • #239025 Reply

      fernlady
      AskWoody Lounger

      I installed kb4467240, kb4467107 & kb890830 and they did show in history BUT when I checked the installed list it showed kb4459942, kb4467107 and kb4459934. Is M$ playing with my head?

      So far no problems that I can tell.

      Windows 7 Home Premium x64 AMD Group A Realtek PCLe GBE Family Controller

      • #239026 Reply

        PKCano
        Da Boss

        The .NET patches show up as the individual version update instead of the Rollup KB number.

        4 users thanked author for this post.
    • #239027 Reply

      Microfix
      Da Boss

      Nice informative article Woody, with extra workarounds and tips, good stuff!

      Win7 Pro x64 | Win8.1 Pro x64 | Linux Hybrids x86/x64 | W10 1909 x86 Pro
    • #239030 Reply

      ch100
      AskWoody_MVP

      The big question for this round of patches is how do we deal with 1809 recently released updates:
      KB4470788 – 2018-11 SSU
      KB4469342 – 2018-11 CU
      KB4471331 – 2018-12 Security Update for Flash

      There is another one which I would ignore for now and that is the .NET Framework Preview.

      I would say install first 3 patches, even if KB4469342 is only a preview for what is to come next week.
      1809 is still in the early stages and receives a lot of useful fixes on a faster schedule than older releases.

      2 users thanked author for this post.
    • #239035 Reply

      WildBill
      AskWoody Plus

      2 quotes from Woody regarding .NET:

      I’m seeing more and more reports about problems with this month’s .Net patches.

      What platforms are these appearing on? Just Win10 whatever, or are they affecting Win8.1 and/or Win7?!

      Fuhgeddaboutit. This month’s .Net patches are all non-security patches, and aren’t worth your time, or the headaches.

      If Windows 8.1 is being affected & they are non-security patches, I can probably skip applying the November .NET Rollup & wait to see if they are fixed for December. If not by then, keep skipping until a good .NET Rollup comes out.

      Right?

      Windows 8.1, 64-bit, back in Group A... & leaning toward Windows 10 V1909. As long as it's a Lot Less Buggy!
      Wild Bill Rides Again...

      1 user thanked author for this post.
      • #239041 Reply

        PKCano
        Da Boss

        Unless they are SECURITY patches you don’t NEED TO install them right away.

        2 users thanked author for this post.
      • #239068 Reply

        Seff
        AskWoody Plus

        On Win7, I was offered two optional updates for .NET (KB4467240 and Preview KB4467224). They were unchecked and I’ve hidden them.

    • #239031 Reply

      anonymous

      Woody,

      I’m a little confused by the paragraph in your CW article about the December 2018 SSU. It appears you’re suggesting this needs to be installed before moving to 1809. In fact, you need to be on 1809 to install the particular SSU you reference. Either that or I’m misunderstanding the point in your article. By the way, there is a typo where you reference the KB article for the SSU. It should be KB4470788 not KB4070788. Your hyperlink is good though!

      • #239039 Reply

        PKCano
        Da Boss

        Woody is saying that if you are on 1809 you need to install the SSU KB4470788 before you install the latest version of the CU KB4469342.

    • #239052 Reply

      anonymous

      Group A….Windows 7 x64 Pro and Windows 10 Pro…All installed with no problems so far.

      ( knock on wood )

      3 users thanked author for this post.
    • #239063 Reply

      Reporting in..installed Win 7 KB4467107 with no ill effects.

      So far. (Knock on, er, Oak-with Mistletoe.)

      As usual, to all the MVP’s and other loungers souls who help keep us safe,  “Ave Atque Vale!”

      Win7 Pro SP1 64-bit, Dell Latitude E6330, Intel CORE i5 "Ivy Bridge", Group "Wait for the all-clear", Multiple Air-Gapped backup drives in different locations, "Don't check for updates-Full Manual Mode. Extended Service 1 yr."
      --
      "...All the people, all the time..." (Peter Ustinov ad-lib from "Logan's Run")

      2 users thanked author for this post.
    • #239066 Reply

      anonymous

      I installed Nov. update on Windows 8.1 and now have BSOD.

      I have used my Windows 10 computer that has been used only offline for 6 months to go online to find solution to get my Windows 8.1 computer online. Hopefully can get it offline before updates try to install on Windows 10 and have not computer to go online with.

    • #239073 Reply

      KarenS
      AskWoody Lounger

      I am a bit confused (as are some others) but have yet to see a definitive answer on the Security & Quality Rollup for NET (KB4467240). In Woody’s Computer World article he says

      “Fuhgeddaboutit. This month’s .Net patches are all non-security patches, and aren’t worth your time, or the headaches.”

      Well according to what I see it says it IS a security update, so does that mean I SHOULD install the update????

      I also don’t see any info (not even on the Master Patch list) on KB3150513 (Update for Win7 for 64 systems)…..Is this safe to install?

      (Windows 7 64bit home Premium Group A)

      4 users thanked author for this post.
      • #239076 Reply

        PKCano
        Da Boss

        Take Woody’s word for it. There are only non-security patches in the .NET Rollup for Nov. There is no urgency to install it.

        7 users thanked author for this post.
        • #239078 Reply

          KarenS
          AskWoody Lounger

          Thanks PKCano…..can you address the other question on KB3150513? Sorry I was updating my last post when you answered my question.

          • #239081 Reply

            PKCano
            Da Boss

            KB3150513 will only show up on your computer if the telemetry patch KB2952664 (or its functionality) is installed. Since Microsoft incorporated KB2952664 functionality in the Monthly Rollups in October, now its updater KB3150513 shows up in Windows Update.

            HIDE IT!!!!

            If you search for those two patches on this site, you will find the discussion(s) that occurred when KB2952664 was incorporated in the Rollups.

            3 users thanked author for this post.
            • #239082 Reply

              KarenS
              AskWoody Lounger

              Gotcha!! Thanks for the info…….HIDING as instructed!!

    • #239087 Reply

      OscarCP
      AskWoody Plus

      Last month there were two successive updates for Outlook: first came out KB4461529, that caused problems, then KB4461524, that fixed that.

      Question: Should I install both, in the order they came out, or just the latest one?

      Also, in the Master Patch List there is no advice given as to what to do with the .NET patch kb4459942. Any suggestions?

      Thanks.

       

      Group B, Windows 7 Pro, SP1, x64 I-7 “sandy bridge”.

      Windows 7 Professional, SP1, x64 Group B & macOS + Linux (Mint) => Win7 Group W + Mac&Lx

      • #239094 Reply

        Kirsty
        Da Boss

        KB 4461524 only covers CVE-2018-8573, and supercedes KB 4092437.
        KB 4461529 covers 4 CVE-2018-85** vulnerabilities, and supercedes KB 4227170.
        They were both issued on Nov. 13th.

        • #239097 Reply

          OscarCP
          AskWoody Plus

          Thanks, but sorry: do I understand correctly that both patches have to be installed? If, so, in which order?

          And perhaps someone could also explain what to do about .NET kb4459942?

          Group B, Windows 7 Pro, SP1, x64 I-7 “sandy bridge”.

          Windows 7 Professional, SP1, x64 Group B & macOS + Linux (Mint) => Win7 Group W + Mac&Lx

          • #239105 Reply

            Kirsty
            Da Boss

            There was nothing I saw to say that one security update needed the other before it could be installed, looking at the links I provided you.

            The .NET update does not include any security updates, and unless you have a compelling need for it, it probably does not need to be installed immediately.

            1 user thanked author for this post.
            • #239107 Reply

              OscarCP
              AskWoody Plus

              Terribly sorry, I missed seeing those links! Now I have seen and used them and in this way discovered that, according to the MS page for kB4461529, I also need to install kb4461585 to fix the problem with KB4461529. So, before there were two patches to be installed and now there are three? Oh Dear! And… should I install first the trouble maker and then the fixer, or their order is irrelevant?

              Windows 7 Professional, SP1, x64 Group B & macOS + Linux (Mint) => Win7 Group W + Mac&Lx

            • #239113 Reply

              Kirsty
              Da Boss

              Installing KB 4461585 would apparently only be necessary IF you suffered the known issue, which MAY affect your system after installing KB 4461529:

              Known issues in this security update
              After you install the 64-bit version of this security update, Outlook may crash on start-up.
              To resolve this issue, install update 4461585.

              I would not be installing any fix prior to the patch that may cause an issue, unless this was noted as a prerequisite.

              1 user thanked author for this post.
      • #239101 Reply

        bassmanzam
        AskWoody Plus

        Windows 7 x64 and Office 2010 x64

        Todsy I was offered both 4461529 and 4461585.  Only 4461585 was checked and installed.

        After installing, and check for updates both are not being offerred.  Do I still need to install 4461529?

        • #239106 Reply

          Kirsty
          Da Boss

          KB 4461585 was a fix – see @gborn‘s blogpost:

          Update KB4461585 fixes Outlook 2010 crash

          On November 21, 2018, Microsoft released the update KB4461585 for Outlook 2010. The only purpose is to fix the Outlook crash.

          Maybe you could try checking Updates again 🙂

          • #239173 Reply

            bassmanzam
            AskWoody Plus

            Sorry forgot to add Group A.

            I checked Windows Update again and was not offered Outlook 4461529.

            I was always under the motto…
            “If it ain’t checked, don’t check it”

            So since Outlook 4461529 was not checked I did not check it.

            How do I recover from this?

            Thanks in advance.

            • #239175 Reply

              PKCano
              Da Boss

              If by chance you installed KB4461529, you need KB4461585 to fix the problem it causes.

              KB4461585 superceded KB4461529, so you do not need KB4461529. You only need KB4461585.

              2 users thanked author for this post.
    • #239127 Reply

      anonymous

      *win10 home installed kb 4023057 on a metered connection against my will ( definitely not a “seeker”). -insert swear words here- Thanks

    • #239128 Reply

      anonymous

      ……also kb 4023057 doesn’t show up in my uninstall updates list??????????????

    • #239152 Reply

      dgreen
      AskWoody Lounger

      Reporting in:
      at 3 am (sigh)

      Important Updates
      Installed KB4467107 (roll up)
      no issues

      KB4467240   .net rollup   (it was checked) unchecked and HID
      KB890830 MSRT  (it was checked) unchecked and HID (have not been installing these for a few months)

      Optional (did not install obviously because they are previews)
      2 Roll up Previews
      December Preview Roll up
      .Net Preview Roll up

      Updated MSE definitions.

      The only thing I notice when it restarted was MSE notification icon was red.
      It did eventually turned green.  Computer shut down for remaining of night.
      It did it again when I restarted computer a little while ago.
      This has happened before a few times.  ????

      ______________

      Dell Inspiron 660 (new hard drive installed and Windows 7 reloaded Nov. 2017)

      Windows 7 Home Premium 64 bit SP 1  GROUP A

      Processor:  Intel i3-3240 (ivy bridge 3rd generation)

      chipset Intel (R) 7 series/C216

      chipset family SATA AHCI Controller -1 E02

      NIC Realtek PCLE GBE Family Controller

      MSE antivirus

      Chrome browser

       

      2 users thanked author for this post.
      • #239264 Reply

        The Surfing Pensioner
        AskWoody Plus

        My MSE does this from time to time at boot-up. Sometimes I even have to turn it on manually. Nothing to do with updates; I have figured out that it’s triggered by the program not being able to phone home at a crucial point during the process of loading. If my router takes a few seconds longer than usual to sort itself out and provide a connection, MSE sulks.

        2 users thanked author for this post.
    • #239165 Reply

      Arvy
      AskWoody Lounger

      It may be a “perfect calm”, but it may not last long. My most recent look at my W10.1809 registry’s entries under [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\WaaSAssessment] tells me that an upcoming build 17763.194 is on the near horizon for deployment.

      Asus ROG Maximus XI Code board; Intel i9-9900K CPU; 32 GB DDR4-3600 RAM; Nvidia GTX1080 GPU; 2x512 GB Samsung 970 Pro M.2 NVMe; 2x2 TB Samsung 860 Pro SSDs; Windows 10.1809; Linux Mint 19.1; Terabyte Backup & Recovery
      1 user thanked author for this post.
      • #239166 Reply

        anonymous

        “near horizon” = December 11 2018 ?

        • #239186 Reply

          Arvy
          AskWoody Lounger

          Who know? Certainly not I. I can only tell you that the last “CURRENT=Build#” entry under that WaaSAssessment registry key got delivered within the next 24 hours. On the other hand, expecting any consistency in the current practices of the entity still commonly known as Microsoft is folly verging on madness.

          Asus ROG Maximus XI Code board; Intel i9-9900K CPU; 32 GB DDR4-3600 RAM; Nvidia GTX1080 GPU; 2x512 GB Samsung 970 Pro M.2 NVMe; 2x2 TB Samsung 860 Pro SSDs; Windows 10.1809; Linux Mint 19.1; Terabyte Backup & Recovery
          1 user thanked author for this post.
    • #239176 Reply

      Terring
      AskWoody Lounger

      Since November 13th I’ve had to had my Internet connection marked as metered and keep netsvcs (wuauserv) service disabled. Sorry for my naive question, but how would you suggest me to start patching again? I was thinking about making my connection unmetered, enable netsvcs as manual and keep clicking the “Check for updates” button. What do you think?

      My English is far from perfect and I want to improve it. If you find any mistakes, particularly with my grammar, feel free to correct me.

      • #239177 Reply

        PKCano
        Da Boss

        You should download wushowhide.diagcab from Microsoft so you can hide updates you don’t want to install. Put the Windows Update Service on Manual.

        Leave your connections on Metered. Wushowhide will work if the Update Service is on Manual, but does no work if the Update Service is Disabled. Run wushowhide and hide the Updates you do not want to install. Then you need to clear the Windows Update queue before you update so you don’t install what hidden updates are currently in queue.

        1 user thanked author for this post.
    • #239183 Reply

      jack48009
      AskWoody Lounger

      Since my W7 system install of Microsoft’s patch to update/fix the Service Stack in October (KB3177467) – my attempts to apply security related patches (KB4467107 being the latest) have all failed.  Geekdom, Microfix, DrBonzo have all attempted to assist with suggestions to no avail.  Anyone have a similar problem applying monthly security rollups to W7?

      Please help. and THANK YOU in advance.

      Jack 48009

      1 user thanked author for this post.
      • #239268 Reply

        DrBonzo
        AskWoody Plus

        @jack48009 – I’m afraid your troubles might be over my pay grade, but I’ll toss a few things out that hopefully will help.

        Over the last 4 years I’ve managed to keep 6 Win 7 machines patched and running well. On 4 of those machines Windows Update became totally useless. I’m guessing from what you’ve said that you do your updating through Windows Update and that you’re what we call Group A since you’re trying to install a Rollup, KB 4467107. If you update manually skip to the next paragraph. All of the Microsoft diagnostic tools or ‘fixit’ tools for WU have been equally useless for me. So, I’ve disabled it completely on the 4 machines and patch manually on all 6 of them. I’ve had WU tell me a patch installation has failed when it in fact didn’t and that an installation was successful when in fact it wasn’t. So, I would carefully check ‘installed updates’ from the control panel – not from the installation history link in WU – to see if you might actually have 4467107 installed. You just never know with MS.

        But, I would encourage you to patch manually. Just google (or whatever search tool you want) KB4467107 and the first 2 hits are likely to be the MS support page and the Update Catalog page. Get to the Update Catalog either directly or from the provided link on the support page and download the patch, then install it. Make sure to read the fine print on the Catalog page; you need to make sure you get the x64 version and the Windows 7 version (not Windows 7 Embedded, and not anything else). That might sound pretty obvious but I once wasted a couple hours trying to install a 64 bit patch on a 32 bit machine; I had just finished patching a couple 64 bit machines and my brain was stuck in 64 bit mode.

        If you have been patching manually, try a fresh download, instead of trying to install the exact same file over and over. That’s happened to me before also; a downloaded patch just wouldn’t go in but the a fresh download did – file sometimes get corrupted during a download.

        Anyway, maybe something I’ve said will help or trigger an idea with you or someone else. It’s frustrating stuff sometimes. Good luck!

        1 user thanked author for this post.
    • #239179 Reply

      anonymous

      Win7 64 SP1

      just curious… i went ahead and did the servicing stack update KB3177467 as per the master patch list.  however, when i looked at the installed updates afterwards, the servicing stack update was listed, but there was no option to uninstall it at the top of the list.

      is this normal?

      also, i had a problem installing the actual Win7 security only update — which i thought was caused by the servicing stack update, but was something else — and even system restore to a point BEFORE the servicing stack update was installed did not remove it from the installed updates.

      is there no way to undo these servicing stack updates once installed, short of restoring from a disk image backup?  seems a bit odd to me.

      thanks

      • #239185 Reply

        PKCano
        Da Boss

        The Servicing Stack is the update for Windows Update. You cannot uninstall it.

        1 user thanked author for this post.
    • #239188 Reply

      jack48009
      AskWoody Lounger

      PKCano – I forgot to say THANK YOU too for your help also when I first identified my problem.  A belated THANK YOU.   Jack48009

    • #239194 Reply

      anonymous

      ? says:

      well, where there’s a will there is (always, sometimes, never) a way:

      Uninstalling ‘uninstallable’ Windows Updates

      thank you, again G. Born

    • #239259 Reply

      Myst
      AskWoody Plus

      Rollup, KB4467107 installed without a problem. As did the MSRT
      Unchecked KB4461529 for Office 2010 and installed the 4 left that were checked, no issues. KB3150513 didn’t pop up so I’m happy. After all the juggling around I did with telementry issues last month maybe all is ok. Thanks for all the posts and expert advice!

      Win7 SP1 Home 64-bit, GrpA / MacOS / Chromebook

      2 users thanked author for this post.
    • #239271 Reply

      SueW
      AskWoody Plus

      Checking in after updating:

      1 – imaged my disk with Macrium Reflect

      2 – downloaded Updates KB4467106 (Nov. SO) and KB4466536 (IE11 Nov. Cumulative)

      3 – installed each Update and then rebooted; waited 15 minutes

      4 – checked “Windows Update” => 9 Important: 7 Office 2010 (5 checked) and 2 Win 7 (both checked); 3 Optional: all unchecked

      5 – hid the 2 unchecked Important Office non-Security updates KB4227172 and KB4461579

      6 – unchecked and hid “Important” update KB4467107 (Nov. Rollup)

      7 – hid the 3 unchecked “Optional” updates (KB4467108 – Nov. Preview Rollup, KB4467224 – Nov. Preview .NET, and KB4467240 – Nov. S&Q Rollup .NET)

      8 – checked “Windows Update” again => 6 Important: 5 Office 2010 and 1 Win 7: all checked; 0 Optional

      9 – unhid 0 hidden updates to install

      10 – installed 6 Updates: 5 Office 2010 (KB4461530, KB3114565, KB4032218, KB4461529 and KB4461526) and MSRT (KB890830)

      11 – rebooted; waited 45 minutes (until the hard drive light stopped flashing)

      Many thanks to PKCano, Woody, and all the other usual suspects. 🙂

      Win 7 SP1 Home Premium 64-bit; Office 2010; Group B; Former 'Tech Weenie'

      4 users thanked author for this post.
    • #239304 Reply

      glnz
      AskWoody Plus

      Group A, Win 7 Pro 64-bit with O365 Home —

      What about

      • 2018-11 Security and Quality Rollup for .NET Framework 3.5.1, 4.5.2, 4.6, 4.6.1, 4.6.2, 4.7, 4.7.1, 4.7.2 for Windows 7 and Server 2008 R2 for x64 (KB4467240)  ?

      It’s not green-lighted in the Master Patch List.

      Should I or shouldn’t I?

      Thanks,

      • #239305 Reply

        PKCano
        Da Boss

        The Nov .NET patches are non-security. There is no urgency to install them. You can leave them alone for now if you want to.

        1 user thanked author for this post.
        • #239330 Reply

          glnz
          AskWoody Plus

          PKCano – Once again, I am ignoring your wisdom.  Just ran .NET update KB4467240 on my less important Win 7 Pro 64-bit machine, and so far no issues, although I haven’t done much yet.

          If that machine continues OK for a few days, then I’ll run it also on my wife’s SOHO Win 7 Pro 64-bit machine.  Would prefer to catch up on both before this month’s new patches.

          Both are Group A.

          But thanks.

          • #239366 Reply

            anonymous

            @glnz , during my Group A update routine this KBKB4467240 was presented as optional, recommended, unchecked. I would have to diverge from both Woody’s Computerworld advice and AKB2000004 to install this item.

            It may be a picked nit, but the end result is different than following Group A directions. It is a valid decision that has given you no trouble. But it is closer to Microsoft’s recommendations (delayed) than standard Group A.

            • #239376 Reply

              glnz
              AskWoody Plus

              hey, anonymous

              in my case, was important and checked – was the only one left after I’d run Malicious Software Removal Tool and the cumulative Security update.

              But I could always be wrong – let’s see.

    • #239307 Reply

      anonymous

      Check your results carefully! In Windows Update, I specifically UNCHECKED 4467240, 2952664, 3150513 & 4461529 and the .NET update yet found they had all been installed anyway. Had to go back and uninstall them. Guess MS is forcing things down our throats again! Win 7 x64

      • #239309 Reply

        PKCano
        Da Boss

        I know you said you unchecked some updates at one time. But, on the main Windows Update page, did you happen to notice how many updates it said were going to be installed before you clicked the “Install” button?

        If you uncheck the updates, and don’t click “OK,” then go look at something else, the default checks are still there when you come back to “Important Updates.”

        1 user thanked author for this post.
    • #239313 Reply

      TJ
      AskWoody Plus

      Installed IE 4466536, SO 4467106 and later MSRT 890830 on my Win7 Group B system yesterday.
      No problems occured (till now).

      Thanks always @woody, @pkcano et al.

    • #239361 Reply

      anonymous

      Windows 7 SP1 64bit, with Broadcom network card. Group B.

      Installed November’s updates; IE KB4466536, SO KB4467106.

      From the catalog; Installed IE KB4466536, SO KB4467106 2nd, MSRT 3rd.

      Installed one at a time. Rebooted in between each update letting it sit 1 minute after update was installed.

      No network issues. No oddities (actually worked very well).

      Rebooted 3 times and let it sit for several minutes.

      I would recommend people on the last reboot to go to the desktop and let it sit 45 to 60 minutes to Process Idle Tasks and let the trusted installer (as per PKCano) do its thing.

      No Problems.

      Thanks to all here.

      1 user thanked author for this post.
    • #239383 Reply

      anonymous

      Re: post 239307 & 239309.  Retired but I have a huge IT background [analyst/programmer/technician/administrator].  It’s never been harder to manage windows PC than it is now.  Anyway, I always apply updates to windows first.  so on pass 1 of Windows Update, I applied the cumulative update and MSRT, unchecked everything else.  reboot.  BTW: the SSU had not been offered nor did it appear in my list.  Those 2 updates applied, on restart, I applied 4 Office updates [only, SSU still not offered] then rebooted again.  It was only today when the SSU update appeared that I went looking and noted that all the undesired updates had applied.  I uninstalled all the undesired updates [which kept trying to reinstall on their own until I hid them and cleared the C:\Windows\SoftwareDistribution\Download folder].  Once I had the undesireables at bay, I installed the SSU update.  Will check installed updates, etc again in the morning to see where things stand.

    • #239468 Reply

      TonyC
      AskWoody Lounger

      W7x64, Group B

      Yesterday, I installed the security only updates, KB4467106 (W7) and KB4466536 (IE11). On each of the three user IDs on my system, when IE11 was activated for the first time after the updates, it took a very long time (certainly greater than 10 seconds) for the home page to appear. Subsequent activations have been as normal.

      Did anyone else experience this? I am just presuming that some special initialisation processing was required for each user ID following the installation of the cumulative security update for IE11.

    • #239476 Reply

      PKCano
      Da Boss

      For those of you with Win10 fighting NOT to install KB4023057.

      Using Metered connections and wushowhide, there is a way to avoid KB4023057. I have been fighting it myself, and made some revisions on how to hide it (as well as any other updates you don’t want to install). See if this works for you.

      See: How to clear the Windows Update queue in Win10.

    • #239571 Reply

      jburk07
      AskWoody Plus

      Group A, Windows 7 Home Premium SP1 64-bit

      I hid the .NET KB4467240 update (which was Important and checked on my Windows Update) and the MSRT, since I haven’t been installing it for the past few months.

      Installed the monthly rollup KB4467107 and rebooted. No problems so far.

      Installed the 5 Office 2010 security updates (including Outlook KB4461529, since it was checked and indicated it was the 32-bit edition). Didn’t need to reboot but did so anyway and let things run for several minutes as recommended. So far, so good.

      Checked all the manual telemetry settings after the updates (thanks to @abbodi86), and this month everything was still in place – nothing had been re-enabled. Nice!

      Thanks as usual to everyone here.

      Group A:
      Win7 Home Premium x64 SP1 Ivy Bridge
      Win7 Ultimate x64 SP1 Arrandale
      Win 10 Pro x64 v1903 Ivy Bridge
      Linux Mint Cinnamon 19.2

    • #239810 Reply

      anonymous

      Re: post 239307, 239309 & 239383.  I finally found the issue.  When the cumulative update was applied, it changed my windows update setting from “check but let me choose” to “automatically download & install”.  We’ll see if MS is honoring that setting correction.  I’m getting tired of checking/clearing the download cache!

      • #239841 Reply

        PKCano
        Da Boss

        When IE11 is updates (Windows Update), the first time it is opened a box pops up asking to “Use recommended setting” or “do not use recommended settings.”

        “Use recommended setting” is checked by default (a radio button). If you do nothing, one of the recommended settings it uses is “automatically download & install” in Windows Update. You have to watch what you agree to. Microsoft is SNEAKY. Read what the rest ot the “recommended” settings are before you agree (OR NOT).

        1 user thanked author for this post.
    • #243665 Reply

      yuzr
      AskWoody Lounger

      I removed kb4023057 :
      msiexec.exe /X{9CBA860F-7437-4A75-941C-8EF559F2D145}

       

    Please follow the -Lounge Rules- no personal attacks, no swearing, and politics/religion are relegated to the Rants forum.

    Reply To: MS-DEFCON 4: A perfect calm before the next patching storm

    You can use BBCodes to format your content.
    Your account can't use Advanced BBCodes, they will be stripped before saving.