News, tips, advice, support for Windows, Office, PCs & more. Tech help. No bull. We're community supported by donations from our Plus Members, and proud of it
Home icon Home icon Home icon Email icon RSS icon
  • MS-DEFCON 4: A perfect calm before the next patching storm

    Home Forums AskWoody blog MS-DEFCON 4: A perfect calm before the next patching storm

    Viewing 37 reply threads
    • Author
      Posts
      • #238982 Reply
        woody
        Da Boss

        Get your patches installed. There’s a new Flash update, KB 4471331, that you need (if it appears in your Windows Update list) and a new KB 4023057 tha
        [See the full post at: MS-DEFCON 4: A perfect calm before the next patching storm]

      • #238989 Reply
        anonymous
        Guest

        What is the situation regarding the 2010 office patches from  november, and the 2 non security patches released this month?

      • #239000 Reply
        Mr. Natural
        AskWoody Plus

        I started pushing the November updates last week and have not had any issues reported. I installed the new flash update yesterday on my work pc running 1803 and was prompted for a reboot after it installed. I don’t ever recall a flash update requiring a reboot before so I thought I’d mention.

        Red Ruffnsore reporting from the front lines.

      • #239002 Reply
        honx
        AskWoody Lounger

        installed group b updates on both windows 7 and windows 8.1, after reboot i installed msrt and office 2010 updates (november only, excluding kb4227172 and kb4461579 which were unchecked on windows 7 anyway. on 8.1 these two office updates were checked, so i unchecked them). and on 8.1 i also installed defender and flash updates. this time there was no .net as it seems…

        as i’m using 32bit version of office 2010 i don’t expect any issues related to outlook 2010 64 bit. 😀 kb4461585 didn’t show in update list, maybe it’s only available for 64bit version as it fixes crash with 64bit version?

        PC: Windows 7 Ultimate, 64bit, Group B
        Notebook: Windows 8.1, 64bit, Group B

        1 user thanked author for this post.
      • #239003 Reply
        Microfix
        Da Boss

        Installed SQMR update 24th November on two different W8.1 devices, no problems encountered but, didn’t install the non-security dotNet update (as per Woody’s article).
        OoB Flash updates for November and December installed, again, no problems.
        Edit: Our W7 x64 still to do over the weekend..

        Win7 Pro x86/x64 | Win8.1 Pro x64 | Linux Hybrids x86/x64 |
      • #239009 Reply
        RetiredGeek
        AskWoody MVP

        Hey Y’all,

        This one installed when I went after updates.

        Cant-Uninstall

        However, it doesn’t show up on the uninstall list!

        Uninstall-Update

        May the Forces of good computing be with you!

        RG

        PowerShell & VBA Rule!
        Computer Specs

        Attachments:
        • #239017 Reply
          PKCano
          Da Boss

          Look in Control Panel\Programs and Features. It may be there.

          • #239048 Reply
            RetiredGeek
            AskWoody MVP

            No such luck.

            May the Forces of good computing be with you!

            RG

            PowerShell & VBA Rule!
            Computer Specs

            • #239049 Reply
              PKCano
              Da Boss

              Upgrade Assistant? Check again and in Settings\Programs

          • #239088 Reply
            RetiredGeek
            AskWoody MVP

            P.K.,

            Ok I found it this time had to click on it to find the KB number.

            Uninstall-Update-1

            May the Forces of good computing be with you!

            RG

            PowerShell & VBA Rule!
            Computer Specs

            Attachments:
      • #239024 Reply
        MrJimPhelps
        AskWoody_MVP

        Woo hoo! I can finally patch my two Windows computers!

        IF I don’t forget between now and the time I get home this evening!

        Group "L" (Linux Mint)
        with Windows 8.1 running in a VM
      • #239025 Reply
        fernlady
        AskWoody Lounger

        I installed kb4467240, kb4467107 & kb890830 and they did show in history BUT when I checked the installed list it showed kb4459942, kb4467107 and kb4459934. Is M$ playing with my head?

        So far no problems that I can tell.

        Windows 7 Home Premium x64 AMD Group A Realtek PCLe GBE Family Controller

        • #239026 Reply
          PKCano
          Da Boss

          The .NET patches show up as the individual version update instead of the Rollup KB number.

          4 users thanked author for this post.
      • #239027 Reply
        Microfix
        Da Boss

        Nice informative article Woody, with extra workarounds and tips, good stuff!

        Win7 Pro x86/x64 | Win8.1 Pro x64 | Linux Hybrids x86/x64 |
      • #239030 Reply
        ch100
        AskWoody_MVP

        The big question for this round of patches is how do we deal with 1809 recently released updates:
        KB4470788 – 2018-11 SSU
        KB4469342 – 2018-11 CU
        KB4471331 – 2018-12 Security Update for Flash

        There is another one which I would ignore for now and that is the .NET Framework Preview.

        I would say install first 3 patches, even if KB4469342 is only a preview for what is to come next week.
        1809 is still in the early stages and receives a lot of useful fixes on a faster schedule than older releases.

        2 users thanked author for this post.
      • #239035 Reply
        WildBill
        AskWoody Plus

        2 quotes from Woody regarding .NET:

        I’m seeing more and more reports about problems with this month’s .Net patches.

        What platforms are these appearing on? Just Win10 whatever, or are they affecting Win8.1 and/or Win7?!

        Fuhgeddaboutit. This month’s .Net patches are all non-security patches, and aren’t worth your time, or the headaches.

        If Windows 8.1 is being affected & they are non-security patches, I can probably skip applying the November .NET Rollup & wait to see if they are fixed for December. If not by then, keep skipping until a good .NET Rollup comes out.

        Right?

        Windows 8.1, 64-bit, back in Group A... & leaning toward Windows 10 V2004. As long as it's a Lot Less Buggy!
        Wild Bill Rides Again...

        1 user thanked author for this post.
        • #239041 Reply
          PKCano
          Da Boss

          Unless they are SECURITY patches you don’t NEED TO install them right away.

          2 users thanked author for this post.
        • #239068 Reply
          Seff
          AskWoody Plus

          On Win7, I was offered two optional updates for .NET (KB4467240 and Preview KB4467224). They were unchecked and I’ve hidden them.

      • #239031 Reply
        anonymous
        Guest

        Woody,

        I’m a little confused by the paragraph in your CW article about the December 2018 SSU. It appears you’re suggesting this needs to be installed before moving to 1809. In fact, you need to be on 1809 to install the particular SSU you reference. Either that or I’m misunderstanding the point in your article. By the way, there is a typo where you reference the KB article for the SSU. It should be KB4470788 not KB4070788. Your hyperlink is good though!

        • #239039 Reply
          PKCano
          Da Boss

          Woody is saying that if you are on 1809 you need to install the SSU KB4470788 before you install the latest version of the CU KB4469342.

      • #239052 Reply
        anonymous
        Guest

        Group A….Windows 7 x64 Pro and Windows 10 Pro…All installed with no problems so far.

        ( knock on wood )

        3 users thanked author for this post.
      • #239063 Reply

        Reporting in..installed Win 7 KB4467107 with no ill effects.

        So far. (Knock on, er, Oak-with Mistletoe.)

        As usual, to all the MVP’s and other loungers souls who help keep us safe,  “Ave Atque Vale!”

        Win7 Pro SP1 64-bit, Dell Latitude E6330, Intel CORE i5 "Ivy Bridge", Group "Wait for the all-clear", Multiple Air-Gapped backup drives in different locations, "Don't check for updates-Full Manual Mode. ESU 1 yr."
        --
        "Just because you're an engineer doesn't mean you're good at everything." -Anonymous

        2 users thanked author for this post.
      • #239066 Reply
        anonymous
        Guest

        I installed Nov. update on Windows 8.1 and now have BSOD.

        I have used my Windows 10 computer that has been used only offline for 6 months to go online to find solution to get my Windows 8.1 computer online. Hopefully can get it offline before updates try to install on Windows 10 and have not computer to go online with.

      • #239073 Reply
        KarenS
        AskWoody Lounger

        I am a bit confused (as are some others) but have yet to see a definitive answer on the Security & Quality Rollup for NET (KB4467240). In Woody’s Computer World article he says

        “Fuhgeddaboutit. This month’s .Net patches are all non-security patches, and aren’t worth your time, or the headaches.”

        Well according to what I see it says it IS a security update, so does that mean I SHOULD install the update????

        I also don’t see any info (not even on the Master Patch list) on KB3150513 (Update for Win7 for 64 systems)…..Is this safe to install?

        (Windows 7 64bit home Premium Group A)

        4 users thanked author for this post.
        • #239076 Reply
          PKCano
          Da Boss

          Take Woody’s word for it. There are only non-security patches in the .NET Rollup for Nov. There is no urgency to install it.

          7 users thanked author for this post.
          • #239078 Reply
            KarenS
            AskWoody Lounger

            Thanks PKCano…..can you address the other question on KB3150513? Sorry I was updating my last post when you answered my question.

            • #239081 Reply
              PKCano
              Da Boss

              KB3150513 will only show up on your computer if the telemetry patch KB2952664 (or its functionality) is installed. Since Microsoft incorporated KB2952664 functionality in the Monthly Rollups in October, now its updater KB3150513 shows up in Windows Update.

              HIDE IT!!!!

              If you search for those two patches on this site, you will find the discussion(s) that occurred when KB2952664 was incorporated in the Rollups.

              3 users thanked author for this post.
              • #239082 Reply
                KarenS
                AskWoody Lounger

                Gotcha!! Thanks for the info…….HIDING as instructed!!

      • #239087 Reply
        OscarCP
        AskWoody Plus

        Last month there were two successive updates for Outlook: first came out KB4461529, that caused problems, then KB4461524, that fixed that.

        Question: Should I install both, in the order they came out, or just the latest one?

        Also, in the Master Patch List there is no advice given as to what to do with the .NET patch kb4459942. Any suggestions?

        Thanks.

         

        Group B, Windows 7 Pro, SP1, x64 I-7 “sandy bridge”.

        Windows 7 Professional, SP1, x64 Group W (ex B) & macOS + Linux (Mint)

        • #239094 Reply
          Kirsty
          Da Boss

          KB 4461524 only covers CVE-2018-8573, and supercedes KB 4092437.
          KB 4461529 covers 4 CVE-2018-85** vulnerabilities, and supercedes KB 4227170.
          They were both issued on Nov. 13th.

          • #239097 Reply
            OscarCP
            AskWoody Plus

            Thanks, but sorry: do I understand correctly that both patches have to be installed? If, so, in which order?

            And perhaps someone could also explain what to do about .NET kb4459942?

            Group B, Windows 7 Pro, SP1, x64 I-7 “sandy bridge”.

            Windows 7 Professional, SP1, x64 Group W (ex B) & macOS + Linux (Mint)

            • #239105 Reply
              Kirsty
              Da Boss

              There was nothing I saw to say that one security update needed the other before it could be installed, looking at the links I provided you.

              The .NET update does not include any security updates, and unless you have a compelling need for it, it probably does not need to be installed immediately.

              1 user thanked author for this post.
              • #239107 Reply
                OscarCP
                AskWoody Plus

                Terribly sorry, I missed seeing those links! Now I have seen and used them and in this way discovered that, according to the MS page for kB4461529, I also need to install kb4461585 to fix the problem with KB4461529. So, before there were two patches to be installed and now there are three? Oh Dear! And… should I install first the trouble maker and then the fixer, or their order is irrelevant?

                Windows 7 Professional, SP1, x64 Group W (ex B) & macOS + Linux (Mint)

              • #239113 Reply
                Kirsty
                Da Boss

                Installing KB 4461585 would apparently only be necessary IF you suffered the known issue, which MAY affect your system after installing KB 4461529:

                Known issues in this security update
                After you install the 64-bit version of this security update, Outlook may crash on start-up.
                To resolve this issue, install update 4461585.

                I would not be installing any fix prior to the patch that may cause an issue, unless this was noted as a prerequisite.

                1 user thanked author for this post.
        • #239101 Reply
          bassmanzam
          AskWoody Plus

          Windows 7 x64 and Office 2010 x64

          Todsy I was offered both 4461529 and 4461585.  Only 4461585 was checked and installed.

          After installing, and check for updates both are not being offerred.  Do I still need to install 4461529?

          • #239106 Reply
            Kirsty
            Da Boss

            KB 4461585 was a fix – see @gborn‘s blogpost:

            Update KB4461585 fixes Outlook 2010 crash

            On November 21, 2018, Microsoft released the update KB4461585 for Outlook 2010. The only purpose is to fix the Outlook crash.

            Maybe you could try checking Updates again 🙂

            • #239173 Reply
              bassmanzam
              AskWoody Plus

              Sorry forgot to add Group A.

              I checked Windows Update again and was not offered Outlook 4461529.

              I was always under the motto…
              “If it ain’t checked, don’t check it”

              So since Outlook 4461529 was not checked I did not check it.

              How do I recover from this?

              Thanks in advance.

              • #239175 Reply
                PKCano
                Da Boss

                If by chance you installed KB4461529, you need KB4461585 to fix the problem it causes.

                KB4461585 superceded KB4461529, so you do not need KB4461529. You only need KB4461585.

                2 users thanked author for this post.
      • #239127 Reply
        anonymous
        Guest

        *win10 home installed kb 4023057 on a metered connection against my will ( definitely not a “seeker”). -insert swear words here- Thanks

      • #239128 Reply
        anonymous
        Guest

        ……also kb 4023057 doesn’t show up in my uninstall updates list??????????????

      • #239152 Reply
        dgreen
        AskWoody Lounger

        Reporting in:
        at 3 am (sigh)

        Important Updates
        Installed KB4467107 (roll up)
        no issues

        KB4467240   .net rollup   (it was checked) unchecked and HID
        KB890830 MSRT  (it was checked) unchecked and HID (have not been installing these for a few months)

        Optional (did not install obviously because they are previews)
        2 Roll up Previews
        December Preview Roll up
        .Net Preview Roll up

        Updated MSE definitions.

        The only thing I notice when it restarted was MSE notification icon was red.
        It did eventually turned green.  Computer shut down for remaining of night.
        It did it again when I restarted computer a little while ago.
        This has happened before a few times.  ????

        ______________

        Dell Inspiron 660 (new hard drive installed and Windows 7 reloaded Nov. 2017)

        Windows 7 Home Premium 64 bit SP 1  GROUP A

        Processor:  Intel i3-3240 (ivy bridge 3rd generation)

        chipset Intel (R) 7 series/C216

        chipset family SATA AHCI Controller -1 E02

        NIC Realtek PCLE GBE Family Controller

        MSE antivirus

        Chrome browser

         

        2 users thanked author for this post.
        • #239264 Reply
          The Surfing Pensioner
          AskWoody Plus

          My MSE does this from time to time at boot-up. Sometimes I even have to turn it on manually. Nothing to do with updates; I have figured out that it’s triggered by the program not being able to phone home at a crucial point during the process of loading. If my router takes a few seconds longer than usual to sort itself out and provide a connection, MSE sulks.

          2 users thanked author for this post.
      • #239165 Reply
        Arvy
        AskWoody Lounger

        It may be a “perfect calm”, but it may not last long. My most recent look at my W10.1809 registry’s entries under [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\WaaSAssessment] tells me that an upcoming build 17763.194 is on the near horizon for deployment.

        Asus ROG Maximus XI Code board; Intel i9-9900K CPU; 32 GB DDR4-3600 RAM; Nvidia GTX1080 GPU; 2x512 GB Samsung 970 Pro M.2 NVMe; 2x2 TB Samsung 860 Pro SSDs; Windows 10.1809; Linux Mint 19.1; Terabyte Backup & Recovery
        1 user thanked author for this post.
        • #239166 Reply
          anonymous
          Guest

          “near horizon” = December 11 2018 ?

          • #239186 Reply
            Arvy
            AskWoody Lounger

            Who know? Certainly not I. I can only tell you that the last “CURRENT=Build#” entry under that WaaSAssessment registry key got delivered within the next 24 hours. On the other hand, expecting any consistency in the current practices of the entity still commonly known as Microsoft is folly verging on madness.

            Asus ROG Maximus XI Code board; Intel i9-9900K CPU; 32 GB DDR4-3600 RAM; Nvidia GTX1080 GPU; 2x512 GB Samsung 970 Pro M.2 NVMe; 2x2 TB Samsung 860 Pro SSDs; Windows 10.1809; Linux Mint 19.1; Terabyte Backup & Recovery
            1 user thanked author for this post.
      • #239176 Reply
        Terring
        AskWoody Lounger

        Since November 13th I’ve had to had my Internet connection marked as metered and keep netsvcs (wuauserv) service disabled. Sorry for my naive question, but how would you suggest me to start patching again? I was thinking about making my connection unmetered, enable netsvcs as manual and keep clicking the “Check for updates” button. What do you think?

        My English is far from perfect and I want to improve it. If you find any mistakes, particularly with my grammar, feel free to correct me.

        • #239177 Reply
          PKCano
          Da Boss

          You should download wushowhide.diagcab from Microsoft so you can hide updates you don’t want to install. Put the Windows Update Service on Manual.

          Leave your connections on Metered. Wushowhide will work if the Update Service is on Manual, but does no work if the Update Service is Disabled. Run wushowhide and hide the Updates you do not want to install. Then you need to clear the Windows Update queue before you update so you don’t install what hidden updates are currently in queue.

          1 user thanked author for this post.
      • #239183 Reply
        jack48009
        AskWoody Lounger

        Since my W7 system install of Microsoft’s patch to update/fix the Service Stack in October (KB3177467) – my attempts to apply security related patches (KB4467107 being the latest) have all failed.  Geekdom, Microfix, DrBonzo have all attempted to assist with suggestions to no avail.  Anyone have a similar problem applying monthly security rollups to W7?

        Please help. and THANK YOU in advance.

        Jack 48009

        1 user thanked author for this post.
        • #239268 Reply
          DrBonzo
          AskWoody Plus

          @jack48009 – I’m afraid your troubles might be over my pay grade, but I’ll toss a few things out that hopefully will help.

          Over the last 4 years I’ve managed to keep 6 Win 7 machines patched and running well. On 4 of those machines Windows Update became totally useless. I’m guessing from what you’ve said that you do your updating through Windows Update and that you’re what we call Group A since you’re trying to install a Rollup, KB 4467107. If you update manually skip to the next paragraph. All of the Microsoft diagnostic tools or ‘fixit’ tools for WU have been equally useless for me. So, I’ve disabled it completely on the 4 machines and patch manually on all 6 of them. I’ve had WU tell me a patch installation has failed when it in fact didn’t and that an installation was successful when in fact it wasn’t. So, I would carefully check ‘installed updates’ from the control panel – not from the installation history link in WU – to see if you might actually have 4467107 installed. You just never know with MS.

          But, I would encourage you to patch manually. Just google (or whatever search tool you want) KB4467107 and the first 2 hits are likely to be the MS support page and the Update Catalog page. Get to the Update Catalog either directly or from the provided link on the support page and download the patch, then install it. Make sure to read the fine print on the Catalog page; you need to make sure you get the x64 version and the Windows 7 version (not Windows 7 Embedded, and not anything else). That might sound pretty obvious but I once wasted a couple hours trying to install a 64 bit patch on a 32 bit machine; I had just finished patching a couple 64 bit machines and my brain was stuck in 64 bit mode.

          If you have been patching manually, try a fresh download, instead of trying to install the exact same file over and over. That’s happened to me before also; a downloaded patch just wouldn’t go in but the a fresh download did – file sometimes get corrupted during a download.

          Anyway, maybe something I’ve said will help or trigger an idea with you or someone else. It’s frustrating stuff sometimes. Good luck!

          1 user thanked author for this post.
      • #239179 Reply
        anonymous
        Guest

        Win7 64 SP1

        just curious… i went ahead and did the servicing stack update KB3177467 as per the master patch list.  however, when i looked at the installed updates afterwards, the servicing stack update was listed, but there was no option to uninstall it at the top of the list.

        is this normal?

        also, i had a problem installing the actual Win7 security only update — which i thought was caused by the servicing stack update, but was something else — and even system restore to a point BEFORE the servicing stack update was installed did not remove it from the installed updates.

        is there no way to undo these servicing stack updates once installed, short of restoring from a disk image backup?  seems a bit odd to me.

        thanks

        • #239185 Reply
          PKCano
          Da Boss

          The Servicing Stack is the update for Windows Update. You cannot uninstall it.

          1 user thanked author for this post.
      • #239188 Reply
        jack48009
        AskWoody Lounger

        PKCano – I forgot to say THANK YOU too for your help also when I first identified my problem.  A belated THANK YOU.   Jack48009

      • #239194 Reply
        anonymous
        Guest

        ? says:

        well, where there’s a will there is (always, sometimes, never) a way:

        Uninstalling ‘uninstallable’ Windows Updates

        thank you, again G. Born

      • #239259 Reply
        Myst
        AskWoody Plus

        Rollup, KB4467107 installed without a problem. As did the MSRT
        Unchecked KB4461529 for Office 2010 and installed the 4 left that were checked, no issues. KB3150513 didn’t pop up so I’m happy. After all the juggling around I did with telementry issues last month maybe all is ok. Thanks for all the posts and expert advice!

        Win7 SP1 Home 64-bit, GrpA / MacOS / Chromebook

        2 users thanked author for this post.
      • #239271 Reply
        SueW
        AskWoody Plus

        Checking in after updating:

        1 – imaged my disk with Macrium Reflect

        2 – downloaded Updates KB4467106 (Nov. SO) and KB4466536 (IE11 Nov. Cumulative)

        3 – installed each Update and then rebooted; waited 15 minutes

        4 – checked “Windows Update” => 9 Important: 7 Office 2010 (5 checked) and 2 Win 7 (both checked); 3 Optional: all unchecked

        5 – hid the 2 unchecked Important Office non-Security updates KB4227172 and KB4461579

        6 – unchecked and hid “Important” update KB4467107 (Nov. Rollup)

        7 – hid the 3 unchecked “Optional” updates (KB4467108 – Nov. Preview Rollup, KB4467224 – Nov. Preview .NET, and KB4467240 – Nov. S&Q Rollup .NET)

        8 – checked “Windows Update” again => 6 Important: 5 Office 2010 and 1 Win 7: all checked; 0 Optional

        9 – unhid 0 hidden updates to install

        10 – installed 6 Updates: 5 Office 2010 (KB4461530, KB3114565, KB4032218, KB4461529 and KB4461526) and MSRT (KB890830)

        11 – rebooted; waited 45 minutes (until the hard drive light stopped flashing)

        Many thanks to PKCano, Woody, and all the other usual suspects. 🙂

        Win 7 SP1 Home Premium 64-bit; Office 2010; Group B; Former 'Tech Weenie'

        4 users thanked author for this post.
      • #239304 Reply
        glnz
        AskWoody Plus

        Group A, Win 7 Pro 64-bit with O365 Home —

        What about

        • 2018-11 Security and Quality Rollup for .NET Framework 3.5.1, 4.5.2, 4.6, 4.6.1, 4.6.2, 4.7, 4.7.1, 4.7.2 for Windows 7 and Server 2008 R2 for x64 (KB4467240)  ?

        It’s not green-lighted in the Master Patch List.

        Should I or shouldn’t I?

        Thanks,

        • #239305 Reply
          PKCano
          Da Boss

          The Nov .NET patches are non-security. There is no urgency to install them. You can leave them alone for now if you want to.

          1 user thanked author for this post.
          • #239330 Reply
            glnz
            AskWoody Plus

            PKCano – Once again, I am ignoring your wisdom.  Just ran .NET update KB4467240 on my less important Win 7 Pro 64-bit machine, and so far no issues, although I haven’t done much yet.

            If that machine continues OK for a few days, then I’ll run it also on my wife’s SOHO Win 7 Pro 64-bit machine.  Would prefer to catch up on both before this month’s new patches.

            Both are Group A.

            But thanks.

            • #239366 Reply
              anonymous
              Guest

              @glnz , during my Group A update routine this KBKB4467240 was presented as optional, recommended, unchecked. I would have to diverge from both Woody’s Computerworld advice and AKB2000004 to install this item.

              It may be a picked nit, but the end result is different than following Group A directions. It is a valid decision that has given you no trouble. But it is closer to Microsoft’s recommendations (delayed) than standard Group A.

              • #239376 Reply
                glnz
                AskWoody Plus

                hey, anonymous

                in my case, was important and checked – was the only one left after I’d run Malicious Software Removal Tool and the cumulative Security update.

                But I could always be wrong – let’s see.

      • #239307 Reply
        anonymous
        Guest

        Check your results carefully! In Windows Update, I specifically UNCHECKED 4467240, 2952664, 3150513 & 4461529 and the .NET update yet found they had all been installed anyway. Had to go back and uninstall them. Guess MS is forcing things down our throats again! Win 7 x64

        • #239309 Reply
          PKCano
          Da Boss

          I know you said you unchecked some updates at one time. But, on the main Windows Update page, did you happen to notice how many updates it said were going to be installed before you clicked the “Install” button?

          If you uncheck the updates, and don’t click “OK,” then go look at something else, the default checks are still there when you come back to “Important Updates.”

          1 user thanked author for this post.
      • #239313 Reply
        TJ
        AskWoody Plus

        Installed IE 4466536, SO 4467106 and later MSRT 890830 on my Win7 Group B system yesterday.
        No problems occured (till now).

        Thanks always @Woody, @PKCano et al.

      • #239361 Reply
        anonymous
        Guest

        Windows 7 SP1 64bit, with Broadcom network card. Group B.

        Installed November’s updates; IE KB4466536, SO KB4467106.

        From the catalog; Installed IE KB4466536, SO KB4467106 2nd, MSRT 3rd.

        Installed one at a time. Rebooted in between each update letting it sit 1 minute after update was installed.

        No network issues. No oddities (actually worked very well).

        Rebooted 3 times and let it sit for several minutes.

        I would recommend people on the last reboot to go to the desktop and let it sit 45 to 60 minutes to Process Idle Tasks and let the trusted installer (as per PKCano) do its thing.

        No Problems.

        Thanks to all here.

        1 user thanked author for this post.
      • #239383 Reply
        anonymous
        Guest

        Re: post 239307 & 239309.  Retired but I have a huge IT background [analyst/programmer/technician/administrator].  It’s never been harder to manage windows PC than it is now.  Anyway, I always apply updates to windows first.  so on pass 1 of Windows Update, I applied the cumulative update and MSRT, unchecked everything else.  reboot.  BTW: the SSU had not been offered nor did it appear in my list.  Those 2 updates applied, on restart, I applied 4 Office updates [only, SSU still not offered] then rebooted again.  It was only today when the SSU update appeared that I went looking and noted that all the undesired updates had applied.  I uninstalled all the undesired updates [which kept trying to reinstall on their own until I hid them and cleared the C:\Windows\SoftwareDistribution\Download folder].  Once I had the undesireables at bay, I installed the SSU update.  Will check installed updates, etc again in the morning to see where things stand.

      • #239468 Reply
        TonyC
        AskWoody Lounger

        W7x64, Group B

        Yesterday, I installed the security only updates, KB4467106 (W7) and KB4466536 (IE11). On each of the three user IDs on my system, when IE11 was activated for the first time after the updates, it took a very long time (certainly greater than 10 seconds) for the home page to appear. Subsequent activations have been as normal.

        Did anyone else experience this? I am just presuming that some special initialisation processing was required for each user ID following the installation of the cumulative security update for IE11.

      • #239476 Reply
        PKCano
        Da Boss

        For those of you with Win10 fighting NOT to install KB4023057.

        Using Metered connections and wushowhide, there is a way to avoid KB4023057. I have been fighting it myself, and made some revisions on how to hide it (as well as any other updates you don’t want to install). See if this works for you.

        See: How to clear the Windows Update queue in Win10.

      • #239571 Reply
        jburk07
        AskWoody Plus

        Group A, Windows 7 Home Premium SP1 64-bit

        I hid the .NET KB4467240 update (which was Important and checked on my Windows Update) and the MSRT, since I haven’t been installing it for the past few months.

        Installed the monthly rollup KB4467107 and rebooted. No problems so far.

        Installed the 5 Office 2010 security updates (including Outlook KB4461529, since it was checked and indicated it was the 32-bit edition). Didn’t need to reboot but did so anyway and let things run for several minutes as recommended. So far, so good.

        Checked all the manual telemetry settings after the updates (thanks to @abbodi86), and this month everything was still in place – nothing had been re-enabled. Nice!

        Thanks as usual to everyone here.

        Group A:
        Win7 Home Premium x64 SP1 Ivy Bridge, 0patch Pro, mostly offline
        Win7 Ultimate x64 SP1 Arrandale, mostly offline
        Win 10 Pro x64 v1909 Ivy Bridge
        Linux Mint Cinnamon 19.2

      • #239810 Reply
        anonymous
        Guest

        Re: post 239307, 239309 & 239383.  I finally found the issue.  When the cumulative update was applied, it changed my windows update setting from “check but let me choose” to “automatically download & install”.  We’ll see if MS is honoring that setting correction.  I’m getting tired of checking/clearing the download cache!

        • #239841 Reply
          PKCano
          Da Boss

          When IE11 is updates (Windows Update), the first time it is opened a box pops up asking to “Use recommended setting” or “do not use recommended settings.”

          “Use recommended setting” is checked by default (a radio button). If you do nothing, one of the recommended settings it uses is “automatically download & install” in Windows Update. You have to watch what you agree to. Microsoft is SNEAKY. Read what the rest ot the “recommended” settings are before you agree (OR NOT).

          1 user thanked author for this post.
      • #243665 Reply
        yuzr
        AskWoody Lounger

        I removed kb4023057 :
        msiexec.exe /X{9CBA860F-7437-4A75-941C-8EF559F2D145}

         

    Viewing 37 reply threads

    Please follow the -Lounge Rules- no personal attacks, no swearing, and politics/religion are relegated to the Rants forum.

    Reply To: MS-DEFCON 4: A perfect calm before the next patching storm

    You can use BBCodes to format your content.
    Your account can't use Advanced BBCodes, they will be stripped before saving.