• MS-DEFCON 4: A perfect calm before the next patching storm

    Home » Forums » Newsletter and Homepage topics » MS-DEFCON 4: A perfect calm before the next patching storm


    Get your patches installed. There’s a new Flash update, KB 4471331, that you need (if it appears in your Windows Update list) and a new KB 4023057 tha
    [See the full post at: MS-DEFCON 4: A perfect calm before the next patching storm]

    Viewing 36 reply threads
    • #238989

      What is the situation regarding the 2010 office patches from  november, and the 2 non security patches released this month?

    • #239000

      I started pushing the November updates last week and have not had any issues reported. I installed the new flash update yesterday on my work pc running 1803 and was prompted for a reboot after it installed. I don’t ever recall a flash update requiring a reboot before so I thought I’d mention.

      Red Ruffnsore

    • #239002

      installed group b updates on both windows 7 and windows 8.1, after reboot i installed msrt and office 2010 updates (november only, excluding kb4227172 and kb4461579 which were unchecked on windows 7 anyway. on 8.1 these two office updates were checked, so i unchecked them). and on 8.1 i also installed defender and flash updates. this time there was no .net as it seems…

      as i’m using 32bit version of office 2010 i don’t expect any issues related to outlook 2010 64 bit. 😀 kb4461585 didn’t show in update list, maybe it’s only available for 64bit version as it fixes crash with 64bit version?

      PC: Windows 7 Ultimate, 64bit, Group B
      Notebook: Windows 8.1, 64bit, Group B

      1 user thanked author for this post.
    • #239003

      Installed SQMR update 24th November on two different W8.1 devices, no problems encountered but, didn’t install the non-security dotNet update (as per Woody’s article).
      OoB Flash updates for November and December installed, again, no problems.
      Edit: Our W7 x64 still to do over the weekend..

      Keeping IT Lean, Clean and Mean!
    • #239009

      Hey Y’all,

      This one installed when I went after updates.


      However, it doesn’t show up on the uninstall list!


      May the Forces of good computing be with you!


      PowerShell & VBA Rule!
      Computer Specs

    • #239024

      Woo hoo! I can finally patch my two Windows computers!

      IF I don’t forget between now and the time I get home this evening!

      Group "L" (Linux Mint)
      with Windows 8.1 running in a VM
    • #239025

      I installed kb4467240, kb4467107 & kb890830 and they did show in history BUT when I checked the installed list it showed kb4459942, kb4467107 and kb4459934. Is M$ playing with my head?

      So far no problems that I can tell.

      Edition Windows 11 Pro
      Version 22H2
      Installed on ‎10/‎19/‎2022
      OS build 22621.1702

    • #239027

      Nice informative article Woody, with extra workarounds and tips, good stuff!

      Keeping IT Lean, Clean and Mean!
    • #239030

      The big question for this round of patches is how do we deal with 1809 recently released updates:
      KB4470788 – 2018-11 SSU
      KB4469342 – 2018-11 CU
      KB4471331 – 2018-12 Security Update for Flash

      There is another one which I would ignore for now and that is the .NET Framework Preview.

      I would say install first 3 patches, even if KB4469342 is only a preview for what is to come next week.
      1809 is still in the early stages and receives a lot of useful fixes on a faster schedule than older releases.

      2 users thanked author for this post.
    • #239035

      2 quotes from Woody regarding .NET:

      I’m seeing more and more reports about problems with this month’s .Net patches.

      What platforms are these appearing on? Just Win10 whatever, or are they affecting Win8.1 and/or Win7?!

      Fuhgeddaboutit. This month’s .Net patches are all non-security patches, and aren’t worth your time, or the headaches.

      If Windows 8.1 is being affected & they are non-security patches, I can probably skip applying the November .NET Rollup & wait to see if they are fixed for December. If not by then, keep skipping until a good .NET Rollup comes out.


      Bought a refurbished Windows 10 64-bit, currently updated to 22H2. Have broke the AC adapter cord going to the 8.1 machine, but before that, coaxed it into charging. Need to buy new adapter if wish to continue using it.
      Wild Bill Rides Again...

      1 user thanked author for this post.
    • #239031


      I’m a little confused by the paragraph in your CW article about the December 2018 SSU. It appears you’re suggesting this needs to be installed before moving to 1809. In fact, you need to be on 1809 to install the particular SSU you reference. Either that or I’m misunderstanding the point in your article. By the way, there is a typo where you reference the KB article for the SSU. It should be KB4470788 not KB4070788. Your hyperlink is good though!

      • #239039

        Woody is saying that if you are on 1809 you need to install the SSU KB4470788 before you install the latest version of the CU KB4469342.

    • #239052

      Group A….Windows 7 x64 Pro and Windows 10 Pro…All installed with no problems so far.

      ( knock on wood )

      3 users thanked author for this post.
    • #239063

      Reporting in..installed Win 7 KB4467107 with no ill effects.

      So far. (Knock on, er, Oak-with Mistletoe.)

      As usual, to all the MVP’s and other loungers souls who help keep us safe,  “Ave Atque Vale!”

      Win7 Pro SP1 64-bit, Dell Latitude E6330, Intel CORE i5 "Ivy Bridge", 12GB RAM, Group "0Patch", Multiple Air-Gapped backup drives in different locations. Linux Mint Greenhorn
      "...all the people, all the time..."Peter Ustinov ad-lib in "Logan's Run"

      2 users thanked author for this post.
    • #239066

      I installed Nov. update on Windows 8.1 and now have BSOD.

      I have used my Windows 10 computer that has been used only offline for 6 months to go online to find solution to get my Windows 8.1 computer online. Hopefully can get it offline before updates try to install on Windows 10 and have not computer to go online with.

    • #239073

      I am a bit confused (as are some others) but have yet to see a definitive answer on the Security & Quality Rollup for NET (KB4467240). In Woody’s Computer World article he says

      “Fuhgeddaboutit. This month’s .Net patches are all non-security patches, and aren’t worth your time, or the headaches.”

      Well according to what I see it says it IS a security update, so does that mean I SHOULD install the update????

      I also don’t see any info (not even on the Master Patch list) on KB3150513 (Update for Win7 for 64 systems)…..Is this safe to install?

      (Windows 7 64bit home Premium Group A)

      4 users thanked author for this post.
      • #239076

        Take Woody’s word for it. There are only non-security patches in the .NET Rollup for Nov. There is no urgency to install it.

        7 users thanked author for this post.
        • #239078

          Thanks PKCano…..can you address the other question on KB3150513? Sorry I was updating my last post when you answered my question.

          • #239081

            KB3150513 will only show up on your computer if the telemetry patch KB2952664 (or its functionality) is installed. Since Microsoft incorporated KB2952664 functionality in the Monthly Rollups in October, now its updater KB3150513 shows up in Windows Update.

            HIDE IT!!!!

            If you search for those two patches on this site, you will find the discussion(s) that occurred when KB2952664 was incorporated in the Rollups.

            3 users thanked author for this post.
    • #239087

      Last month there were two successive updates for Outlook: first came out KB4461529, that caused problems, then KB4461524, that fixed that.

      Question: Should I install both, in the order they came out, or just the latest one?

      Also, in the Master Patch List there is no advice given as to what to do with the .NET patch kb4459942. Any suggestions?



      Group B, Windows 7 Pro, SP1, x64 I-7 “sandy bridge”.

      Ex-Windows user (Win. 98, XP, 7); since mid-2017 using also macOS. Presently on Monterey 12.15 & sometimes running also Linux (Mint).

      MacBook Pro circa mid-2015, 15" display, with 16GB 1600 GHz DDR3 RAM, 1 TB SSD, a Haswell architecture Intel CPU with 4 Cores and 8 Threads model i7-4870HQ @ 2.50GHz.
      Intel Iris Pro GPU with Built-in Bus, VRAM 1.5 GB, Display 2880 x 1800 Retina, 24-Bit color.
      macOS Monterey; browsers: Waterfox "Current", Vivaldi and (now and then) Chrome; security apps. Intego AV

      • #239094

        KB 4461524 only covers CVE-2018-8573, and supercedes KB 4092437.
        KB 4461529 covers 4 CVE-2018-85** vulnerabilities, and supercedes KB 4227170.
        They were both issued on Nov. 13th.

        • #239097

          Thanks, but sorry: do I understand correctly that both patches have to be installed? If, so, in which order?

          And perhaps someone could also explain what to do about .NET kb4459942?

          Group B, Windows 7 Pro, SP1, x64 I-7 “sandy bridge”.

          Ex-Windows user (Win. 98, XP, 7); since mid-2017 using also macOS. Presently on Monterey 12.15 & sometimes running also Linux (Mint).

          MacBook Pro circa mid-2015, 15" display, with 16GB 1600 GHz DDR3 RAM, 1 TB SSD, a Haswell architecture Intel CPU with 4 Cores and 8 Threads model i7-4870HQ @ 2.50GHz.
          Intel Iris Pro GPU with Built-in Bus, VRAM 1.5 GB, Display 2880 x 1800 Retina, 24-Bit color.
          macOS Monterey; browsers: Waterfox "Current", Vivaldi and (now and then) Chrome; security apps. Intego AV

          • #239105

            There was nothing I saw to say that one security update needed the other before it could be installed, looking at the links I provided you.

            The .NET update does not include any security updates, and unless you have a compelling need for it, it probably does not need to be installed immediately.

            1 user thanked author for this post.
            • #239107

              Terribly sorry, I missed seeing those links! Now I have seen and used them and in this way discovered that, according to the MS page for kB4461529, I also need to install kb4461585 to fix the problem with KB4461529. So, before there were two patches to be installed and now there are three? Oh Dear! And… should I install first the trouble maker and then the fixer, or their order is irrelevant?

              Ex-Windows user (Win. 98, XP, 7); since mid-2017 using also macOS. Presently on Monterey 12.15 & sometimes running also Linux (Mint).

              MacBook Pro circa mid-2015, 15" display, with 16GB 1600 GHz DDR3 RAM, 1 TB SSD, a Haswell architecture Intel CPU with 4 Cores and 8 Threads model i7-4870HQ @ 2.50GHz.
              Intel Iris Pro GPU with Built-in Bus, VRAM 1.5 GB, Display 2880 x 1800 Retina, 24-Bit color.
              macOS Monterey; browsers: Waterfox "Current", Vivaldi and (now and then) Chrome; security apps. Intego AV

            • #239113

              Installing KB 4461585 would apparently only be necessary IF you suffered the known issue, which MAY affect your system after installing KB 4461529:

              Known issues in this security update
              After you install the 64-bit version of this security update, Outlook may crash on start-up.
              To resolve this issue, install update 4461585.

              I would not be installing any fix prior to the patch that may cause an issue, unless this was noted as a prerequisite.

              1 user thanked author for this post.
      • #239101

        Windows 7 x64 and Office 2010 x64

        Todsy I was offered both 4461529 and 4461585.  Only 4461585 was checked and installed.

        After installing, and check for updates both are not being offerred.  Do I still need to install 4461529?

        • #239106

          KB 4461585 was a fix – see @gborn’s blogpost:

          Update KB4461585 fixes Outlook 2010 crash

          On November 21, 2018, Microsoft released the update KB4461585 for Outlook 2010. The only purpose is to fix the Outlook crash.

          Maybe you could try checking Updates again 🙂

          • #239173

            Sorry forgot to add Group A.

            I checked Windows Update again and was not offered Outlook 4461529.

            I was always under the motto…
            “If it ain’t checked, don’t check it”

            So since Outlook 4461529 was not checked I did not check it.

            How do I recover from this?

            Thanks in advance.

            • #239175

              If by chance you installed KB4461529, you need KB4461585 to fix the problem it causes.

              KB4461585 superceded KB4461529, so you do not need KB4461529. You only need KB4461585.

              2 users thanked author for this post.
    • #239127

      *win10 home installed kb 4023057 on a metered connection against my will ( definitely not a “seeker”). -insert swear words here- Thanks

    • #239128

      ……also kb 4023057 doesn’t show up in my uninstall updates list??????????????

    • #239152

      Reporting in:
      at 3 am (sigh)

      Important Updates
      Installed KB4467107 (roll up)
      no issues

      KB4467240   .net rollup   (it was checked) unchecked and HID
      KB890830 MSRT  (it was checked) unchecked and HID (have not been installing these for a few months)

      Optional (did not install obviously because they are previews)
      2 Roll up Previews
      December Preview Roll up
      .Net Preview Roll up

      Updated MSE definitions.

      The only thing I notice when it restarted was MSE notification icon was red.
      It did eventually turned green.  Computer shut down for remaining of night.
      It did it again when I restarted computer a little while ago.
      This has happened before a few times.  ????


      Dell Inspiron 660 (new hard drive installed and Windows 7 reloaded Nov. 2017)

      Windows 7 Home Premium 64 bit SP 1  GROUP A

      Processor:  Intel i3-3240 (ivy bridge 3rd generation)

      chipset Intel (R) 7 series/C216

      chipset family SATA AHCI Controller -1 E02

      NIC Realtek PCLE GBE Family Controller

      MSE antivirus

      Chrome browser


      2 users thanked author for this post.
      • #239264

        My MSE does this from time to time at boot-up. Sometimes I even have to turn it on manually. Nothing to do with updates; I have figured out that it’s triggered by the program not being able to phone home at a crucial point during the process of loading. If my router takes a few seconds longer than usual to sort itself out and provide a connection, MSE sulks.

        2 users thanked author for this post.
    • #239165

      It may be a “perfect calm”, but it may not last long. My most recent look at my W10.1809 registry’s entries under [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\WaaSAssessment] tells me that an upcoming build 17763.194 is on the near horizon for deployment.

      Asus ROG Maximus XI Code board; Intel i9-9900K CPU; 32 GB DDR4-3600 RAM; Nvidia GTX1080 GPU; 2x512 GB Samsung 970 Pro M.2 NVMe; 2x2 TB Samsung 860 Pro SSDs; Windows 10.1809; Linux Mint 19.1; Terabyte Backup & Recovery
      1 user thanked author for this post.
      • #239166

        “near horizon” = December 11 2018 ?

        • #239186

          Who know? Certainly not I. I can only tell you that the last “CURRENT=Build#” entry under that WaaSAssessment registry key got delivered within the next 24 hours. On the other hand, expecting any consistency in the current practices of the entity still commonly known as Microsoft is folly verging on madness.

          Asus ROG Maximus XI Code board; Intel i9-9900K CPU; 32 GB DDR4-3600 RAM; Nvidia GTX1080 GPU; 2x512 GB Samsung 970 Pro M.2 NVMe; 2x2 TB Samsung 860 Pro SSDs; Windows 10.1809; Linux Mint 19.1; Terabyte Backup & Recovery
          1 user thanked author for this post.
    • #239176

      Since November 13th I’ve had to had my Internet connection marked as metered and keep netsvcs (wuauserv) service disabled. Sorry for my naive question, but how would you suggest me to start patching again? I was thinking about making my connection unmetered, enable netsvcs as manual and keep clicking the “Check for updates” button. What do you think?

      I miss Windows XP...

      • #239177

        You should download wushowhide.diagcab from Microsoft so you can hide updates you don’t want to install. Put the Windows Update Service on Manual.

        Leave your connections on Metered. Wushowhide will work if the Update Service is on Manual, but does no work if the Update Service is Disabled. Run wushowhide and hide the Updates you do not want to install. Then you need to clear the Windows Update queue before you update so you don’t install what hidden updates are currently in queue.

        1 user thanked author for this post.
    • #239183

      Since my W7 system install of Microsoft’s patch to update/fix the Service Stack in October (KB3177467) – my attempts to apply security related patches (KB4467107 being the latest) have all failed.  Geekdom, Microfix, DrBonzo have all attempted to assist with suggestions to no avail.  Anyone have a similar problem applying monthly security rollups to W7?

      Please help. and THANK YOU in advance.

      Jack 48009

      1 user thanked author for this post.
      • #239268

        @jack48009 – I’m afraid your troubles might be over my pay grade, but I’ll toss a few things out that hopefully will help.

        Over the last 4 years I’ve managed to keep 6 Win 7 machines patched and running well. On 4 of those machines Windows Update became totally useless. I’m guessing from what you’ve said that you do your updating through Windows Update and that you’re what we call Group A since you’re trying to install a Rollup, KB 4467107. If you update manually skip to the next paragraph. All of the Microsoft diagnostic tools or ‘fixit’ tools for WU have been equally useless for me. So, I’ve disabled it completely on the 4 machines and patch manually on all 6 of them. I’ve had WU tell me a patch installation has failed when it in fact didn’t and that an installation was successful when in fact it wasn’t. So, I would carefully check ‘installed updates’ from the control panel – not from the installation history link in WU – to see if you might actually have 4467107 installed. You just never know with MS.

        But, I would encourage you to patch manually. Just google (or whatever search tool you want) KB4467107 and the first 2 hits are likely to be the MS support page and the Update Catalog page. Get to the Update Catalog either directly or from the provided link on the support page and download the patch, then install it. Make sure to read the fine print on the Catalog page; you need to make sure you get the x64 version and the Windows 7 version (not Windows 7 Embedded, and not anything else). That might sound pretty obvious but I once wasted a couple hours trying to install a 64 bit patch on a 32 bit machine; I had just finished patching a couple 64 bit machines and my brain was stuck in 64 bit mode.

        If you have been patching manually, try a fresh download, instead of trying to install the exact same file over and over. That’s happened to me before also; a downloaded patch just wouldn’t go in but the a fresh download did – file sometimes get corrupted during a download.

        Anyway, maybe something I’ve said will help or trigger an idea with you or someone else. It’s frustrating stuff sometimes. Good luck!

        1 user thanked author for this post.
    • #239179

      Win7 64 SP1

      just curious… i went ahead and did the servicing stack update KB3177467 as per the master patch list.  however, when i looked at the installed updates afterwards, the servicing stack update was listed, but there was no option to uninstall it at the top of the list.

      is this normal?

      also, i had a problem installing the actual Win7 security only update — which i thought was caused by the servicing stack update, but was something else — and even system restore to a point BEFORE the servicing stack update was installed did not remove it from the installed updates.

      is there no way to undo these servicing stack updates once installed, short of restoring from a disk image backup?  seems a bit odd to me.


    • #239188

      PKCano – I forgot to say THANK YOU too for your help also when I first identified my problem.  A belated THANK YOU.   Jack48009

    • #239194

      ? says:

      well, where there’s a will there is (always, sometimes, never) a way:

      thank you, again G. Born

    • #239259

      Rollup, KB4467107 installed without a problem. As did the MSRT
      Unchecked KB4461529 for Office 2010 and installed the 4 left that were checked, no issues. KB3150513 didn’t pop up so I’m happy. After all the juggling around I did with telementry issues last month maybe all is ok. Thanks for all the posts and expert advice!

      MacOS, iOS, iPadOS, and SOS at times.

      2 users thanked author for this post.
    • #239271

      Checking in after updating:

      1 – imaged my disk with Macrium Reflect

      2 – downloaded Updates KB4467106 (Nov. SO) and KB4466536 (IE11 Nov. Cumulative)

      3 – installed each Update and then rebooted; waited 15 minutes

      4 – checked “Windows Update” => 9 Important: 7 Office 2010 (5 checked) and 2 Win 7 (both checked); 3 Optional: all unchecked

      5 – hid the 2 unchecked Important Office non-Security updates KB4227172 and KB4461579

      6 – unchecked and hid “Important” update KB4467107 (Nov. Rollup)

      7 – hid the 3 unchecked “Optional” updates (KB4467108 – Nov. Preview Rollup, KB4467224 – Nov. Preview .NET, and KB4467240 – Nov. S&Q Rollup .NET)

      8 – checked “Windows Update” again => 6 Important: 5 Office 2010 and 1 Win 7: all checked; 0 Optional

      9 – unhid 0 hidden updates to install

      10 – installed 6 Updates: 5 Office 2010 (KB4461530, KB3114565, KB4032218, KB4461529 and KB4461526) and MSRT (KB890830)

      11 – rebooted; waited 45 minutes (until the hard drive light stopped flashing)

      Many thanks to PKCano, Woody, and all the other usual suspects. 🙂

      Win 7 SP1 Home Premium 64-bit; Office 2010; Group B (SaS); Former 'Tech Weenie'
      4 users thanked author for this post.
    • #239304

      Group A, Win 7 Pro 64-bit with O365 Home —

      What about

      • 2018-11 Security and Quality Rollup for .NET Framework 3.5.1, 4.5.2, 4.6, 4.6.1, 4.6.2, 4.7, 4.7.1, 4.7.2 for Windows 7 and Server 2008 R2 for x64 (KB4467240)  ?

      It’s not green-lighted in the Master Patch List.

      Should I or shouldn’t I?


      • #239305

        The Nov .NET patches are non-security. There is no urgency to install them. You can leave them alone for now if you want to.

        1 user thanked author for this post.
        • #239330

          PKCano – Once again, I am ignoring your wisdom.  Just ran .NET update KB4467240 on my less important Win 7 Pro 64-bit machine, and so far no issues, although I haven’t done much yet.

          If that machine continues OK for a few days, then I’ll run it also on my wife’s SOHO Win 7 Pro 64-bit machine.  Would prefer to catch up on both before this month’s new patches.

          Both are Group A.

          But thanks.

          • #239366

            @glnz , during my Group A update routine this KBKB4467240 was presented as optional, recommended, unchecked. I would have to diverge from both Woody’s Computerworld advice and AKB2000004 to install this item.

            It may be a picked nit, but the end result is different than following Group A directions. It is a valid decision that has given you no trouble. But it is closer to Microsoft’s recommendations (delayed) than standard Group A.

            • #239376

              hey, anonymous

              in my case, was important and checked – was the only one left after I’d run Malicious Software Removal Tool and the cumulative Security update.

              But I could always be wrong – let’s see.

    • #239307

      Check your results carefully! In Windows Update, I specifically UNCHECKED 4467240, 2952664, 3150513 & 4461529 and the .NET update yet found they had all been installed anyway. Had to go back and uninstall them. Guess MS is forcing things down our throats again! Win 7 x64

      • #239309

        I know you said you unchecked some updates at one time. But, on the main Windows Update page, did you happen to notice how many updates it said were going to be installed before you clicked the “Install” button?

        If you uncheck the updates, and don’t click “OK,” then go look at something else, the default checks are still there when you come back to “Important Updates.”

        1 user thanked author for this post.
    • #239313

      Installed IE 4466536, SO 4467106 and later MSRT 890830 on my Win7 Group B system yesterday.
      No problems occured (till now).

      Thanks always @Woody, @PKCano et al.

    • #239361

      Windows 7 SP1 64bit, with Broadcom network card. Group B.

      Installed November’s updates; IE KB4466536, SO KB4467106.

      From the catalog; Installed IE KB4466536, SO KB4467106 2nd, MSRT 3rd.

      Installed one at a time. Rebooted in between each update letting it sit 1 minute after update was installed.

      No network issues. No oddities (actually worked very well).

      Rebooted 3 times and let it sit for several minutes.

      I would recommend people on the last reboot to go to the desktop and let it sit 45 to 60 minutes to Process Idle Tasks and let the trusted installer (as per PKCano) do its thing.

      No Problems.

      Thanks to all here.

      1 user thanked author for this post.
    • #239383

      Re: post 239307 & 239309.  Retired but I have a huge IT background [analyst/programmer/technician/administrator].  It’s never been harder to manage windows PC than it is now.  Anyway, I always apply updates to windows first.  so on pass 1 of Windows Update, I applied the cumulative update and MSRT, unchecked everything else.  reboot.  BTW: the SSU had not been offered nor did it appear in my list.  Those 2 updates applied, on restart, I applied 4 Office updates [only, SSU still not offered] then rebooted again.  It was only today when the SSU update appeared that I went looking and noted that all the undesired updates had applied.  I uninstalled all the undesired updates [which kept trying to reinstall on their own until I hid them and cleared the C:\Windows\SoftwareDistribution\Download folder].  Once I had the undesireables at bay, I installed the SSU update.  Will check installed updates, etc again in the morning to see where things stand.

    • #239468

      W7x64, Group B

      Yesterday, I installed the security only updates, KB4467106 (W7) and KB4466536 (IE11). On each of the three user IDs on my system, when IE11 was activated for the first time after the updates, it took a very long time (certainly greater than 10 seconds) for the home page to appear. Subsequent activations have been as normal.

      Did anyone else experience this? I am just presuming that some special initialisation processing was required for each user ID following the installation of the cumulative security update for IE11.

    • #239476

      For those of you with Win10 fighting NOT to install KB4023057.

      Using Metered connections and wushowhide, there is a way to avoid KB4023057. I have been fighting it myself, and made some revisions on how to hide it (as well as any other updates you don’t want to install). See if this works for you.

      See: How to clear the Windows Update queue in Win10.

    • #239571

      Group A, Windows 7 Home Premium SP1 64-bit

      I hid the .NET KB4467240 update (which was Important and checked on my Windows Update) and the MSRT, since I haven’t been installing it for the past few months.

      Installed the monthly rollup KB4467107 and rebooted. No problems so far.

      Installed the 5 Office 2010 security updates (including Outlook KB4461529, since it was checked and indicated it was the 32-bit edition). Didn’t need to reboot but did so anyway and let things run for several minutes as recommended. So far, so good.

      Checked all the manual telemetry settings after the updates (thanks to @abbodi86), and this month everything was still in place – nothing had been re-enabled. Nice!

      Thanks as usual to everyone here.

      Linux Mint Cinnamon 19.3
      Group A:
      Win7 Pro x64 SP1 Haswell, 0patch Pro, dual boot with Linux, mostly offline
      Win7 Home Premium x64 SP1 Ivy Bridge, 0patch Pro, mostly offline
      Win 10 Pro x64 v22H2 Ivy Bridge, dual boot with Linux

    • #239810

      Re: post 239307, 239309 & 239383.  I finally found the issue.  When the cumulative update was applied, it changed my windows update setting from “check but let me choose” to “automatically download & install”.  We’ll see if MS is honoring that setting correction.  I’m getting tired of checking/clearing the download cache!

      • #239841

        When IE11 is updates (Windows Update), the first time it is opened a box pops up asking to “Use recommended setting” or “do not use recommended settings.”

        “Use recommended setting” is checked by default (a radio button). If you do nothing, one of the recommended settings it uses is “automatically download & install” in Windows Update. You have to watch what you agree to. Microsoft is SNEAKY. Read what the rest ot the “recommended” settings are before you agree (OR NOT).

        1 user thanked author for this post.
    • #243665

      I removed kb4023057 :
      msiexec.exe /X{9CBA860F-7437-4A75-941C-8EF559F2D145}


    Viewing 36 reply threads
    Reply To: MS-DEFCON 4: A perfect calm before the next patching storm

    You can use BBCodes to format your content.
    Your account can't use all available BBCodes, they will be stripped before saving.

    Your information: