• MS-DEFCON 4: Get the September 2020 patches installed

    Home » Forums » Newsletter and Homepage topics » MS-DEFCON 4: Get the September 2020 patches installed

    Author
    Topic
    #2300490

    If you’re running SQL Server 2019, surprise!, Microsoft yanked the old cumulative update and replaced it with a working one last night. In general, it
    [See the full post at: MS-DEFCON 4: Get the September 2020 patches installed]

    5 users thanked author for this post.
    Viewing 37 reply threads
    Author
    Replies
    • #2300515

      I have a Win 10 home system on 1903.  I have metered connection set and in my Settings / Windows Updates I have 2004 at the top of the “Updates available”  with status “pending download”.  Is there a way to get the Sep cumulative update for 1903 without also getting 2004?  I could experiment and turn on  download update over metered connection in the advanced settings , but my experience is that immediately starts the download/install process.

      • #2300519

        Download wushowhide.diagcab and put it on your desktop.
        Double click on it, click “Advanced,” UNCHECK “Apply changes automatically, and hide the v2004 update.

        v1903 is very close to EOL. To avoid v2004 (and install v1909) you will need to download the v1909 ISO from Heidoc.net for Home and your bittage (32 or 64 bit) and do an in-place upgrade to v1909. You should do this upgrade or you will be force upgraded to 2004 by Microsoft.

        Once you have hidden the update to v2004, please create a topic in the Win 1903 Forum if you need help proceeding.

      • #2301182

        Just to close out my previous post — I had the 2004 update in the update queue for my 1903 system.  As suggested I ran wushowhide.diagcab.  I hid the 2004 feature update and wushowhide.diagcab did show it as hidden afterwards, but that had no effect on what was in the windows update queue.  So I ended up biting the bullet and allowed download over metered connections which resulted in 2004 installing.

        • #2301186

          Please read through #2301183. This will answer what happened to you. You did not clear the Windows Update queue after you hid the update.

          AKB2000016 Guide for Windows Update Settings for Win10. Sections 1-3 are general. Section 4 covers settings for Win10 Pro v1903/v1905. Section 5 covers Pro v2004.

          You can rollback to your previous version within 10 days of an upgrade as long as you have not run Disk Cleanup or manually deleted the old files.

          1 user thanked author for this post.
    • #2300524

      If you are on Win10 Pro and are looking to upgrade:

      If you are on v1809, v1903, or v1909, Feature deferral less than 120 days should get you v2004.

      If you are on v1809 or 1903, Feature deferral 250-300 days should get you v1909.

      If you are on v1809, Feature deferral 340 days or greater will get v1903. But v1809 and v1903 are so close to EOL this is not recommended.

      6 users thanked author for this post.
    • #2300537

      Installed:

      2020-09 Security and Quality Rollup for .NET Framework 3.5.1, 4.5.2, 4.6, 4.6.1, 4.6.2, 4.7, 4.7.1, 4.7.2, 4.8 for Windows 7 for x64 (KB4576628)

      2020-09 Security Monthly Quality Rollup for Windows 7 for x64-based Systems (KB4577051)

      Windows Malicious Software Removal Tool x64 – v5.83 (KB890830)

      Everything running fine.

      Was not offered any SSU after this.

      Win7 Pro SP1 64-bit, Dell Latitude E6330, Intel CORE i5 "Ivy Bridge", 12GB RAM, Group "0Patch", Multiple Air-Gapped backup drives in different locations. Linux Mint Greenhorn
      --
      "Nine out of 10 doctors say Acid Reflux is mainly caused by computers."

      3 users thanked author for this post.
      • #2300539

        There was NO September SSU issued for Win7 ESU 🙂

        No problem can be solved from the same level of consciousness that created IT- AE
        3 users thanked author for this post.
        • #2300729

          I’m a little confused about Microfix’s comment.  Woody’s ComputerWorld article of Oct 2, 2020 says the following:  “In particular, you need to install all outstanding updates, then get the Servicing Stack Update installed (expect a new Servicing Stack every month) before the September patch will appear. There’s a new Servicing Stack Update, but it now appears as if you won’t need it until the November patches roll out.”    Could someone please clear up my confusion about this?

           

          • #2300739

            There was no new Servicing Stack for Win7 in September. The current SSU is KB4570673 released in August.

            1 user thanked author for this post.
            L95
    • #2300560

      On my W10 Home pc, I hid the unwanted (4023057) patches, then resumed download. Malicious software removal tool downloaded fine and is pending install. 4574727 downloaded and started install. It went to 100% then dropped back to 20%. Why?

      I wanted to stop it all, clicked restart, now the pc is stuck at “getting windows ready. Don’t turn of your computer”.

      Now what do I do???

    • #2300621

      Just finished updating one of my machines that I was able to prevent being automatically updated earlier in September when the updates first came out. Windows 10 Pro x64 version 2004 cleanly installed on new hardware.

      It did indeed take quite a while, maybe 10 minutes or so, to install the second half of the cumulative update. The first part installed very quickly in maybe two minutes. The second part took maybe ten minutes to go from 0% to 100% installed, prompting for a reboot afterwards, which I initiated by clicking on the “Reboot now” box in WU.

      However, I had to resort to getting the September .net update for 2004 from the Catalog. Apparently, I couldn’t un-hide the September update for .net because I think it was superseded by the October .net preview that was recently released. Yes, I hid the October .net preview because I follow the crowd here and I don’t install any update unless it fixes a problem that’s keeping me from fully using a computer.

      R/
      Bob99

      • #2300790

        Neither the machine mentioned above nor another machine of mine that was updated on Patch Tuesday the 8th of September (by mistake) with the cumulative September update and the September .net update have been offered the preview patch released this past Tuesday the 30th, KB4577063. Both are already on 2004, and have been so since I bought them new from a local shop at the end of August.

    • #2300677

      I am on 2004 and updated yesterday.  Everything went fine except for one minor blip.  I got the Chredge notification about making it my default browser.  MSFT make it a little hard just to close the notification.  Of course it was pinned to my taskbar which I did not want.  I removed the link.  However, when I launch another program their is a blank square on the taskbar where the Chredge icon used to be.  I leave my workstation on 24/7 as there are maintenance tasks that go on off hours.  Probably a restart would fix this but since it’s just a minor annoyance I haven’t done that.

      I have seen no other problems with respect to any of the programs I routinely use during the work day.

    • #2300714

      Updated my 1909 Pro x64 system with KB’s 4576751 SSU, 4574727 Cum. Sep and 4576484 .NET 3.5 & 4.8 respectively today and all seems well.

      Thanks @Woody & Crew.

      (And temporarily unblocked automatic updates for Office365 C2R last week, which since then is on Version 2008 Build 13127.20508)

      3 users thanked author for this post.
    • #2300732

      September patches installed with no problems to report on Win 8.1 🙂

      Installation Successful: Windows successfully installed the following update: 2020-09 Security and Quality Rollup for .NET Framework 3.5, 4.5.2, 4.6, 4.6.1, 4.6.2, 4.7, 4.7.1, 4.7.2, 4.8 for Windows 8.1 and Server 2012 R2 for x64 (KB4576630)

      Installation Successful: Windows successfully installed the following update: 2020-09 Security Monthly Quality Rollup for Windows 8.1 for x64-based Systems (KB4577066)

      Win 10 ver. 22H2 x64

      3 users thanked author for this post.
    • #2300768

      I got 2 desktops updated today with no problems. 1909 W10 Pro brought up to 18363.1082.

      KB 4023057, KB 4576947 Preview cum .NET, MSRT, KB 4574727 cum update with KB 4576751 SSU.

      Don't take yourself so seriously, no one else does 🙂
      All W10 Pro at 22H2,(2 Desktops, 1 Laptop).

      • #2301059

        Finished the rest of our computers today with no problems so far.

        Don't take yourself so seriously, no one else does 🙂
        All W10 Pro at 22H2,(2 Desktops, 1 Laptop).

    • #2300828

      FWIW. I found that the IE11 update for Windows 8.1 last month slowed down my system. When I uninstalled it, things went back to normal.  I have an Ivy Bridge processor.

      The other updates for 8.1 were OK.

      1 user thanked author for this post.
    • #2300879

      Windows 10 1809 Home here. As now usual, I had to manually install the September SSU (KB4570332), CU (KB4570333) and .NET update (KB4576627). System is running correctly with no detectable issues.

      I’m yet to install (through WU) the Windows Malicious Software Removal Tool v5.83 KB890830 and Office patches: turns out that last Friday the KB4023057 patch attempted a stealthy automatic download, but was stopped by having metered connections on. I have since hid KB4023057 using wushowhide, but it still shows as a pending download on WU, so before installing any of the September patches through WU I’m waiting for KB4023057 to get “cleared out” of the cache the next time WU automatically scans for updates.

    • #2300891

      Windows 10 1809 Home here. As now usual, I had to manually install the September SSU (KB4570332), CU (KB4570333) and .NET update (KB4576627).

      You installed the .NET update SEPARATELY? I just installed the cumulative update for September for 1809 and then went to install the September .NET update. Microsoft says not necessary as it is part of the cumulative update for September.

      So, do I need the .NET cumulative update KB 4576627 or not?

      • #2300901

        I did the manual install of KB4576627 because I did not install the KB4577324 Cumulative Update Preview for .NET Framework 3.5, 4.7.2, 4.8 for 1809 dated September 16, 2020.

        Not sure whether Microsoft statement in the KB article for 4576627 according to which “This update is included in the Cumulative Update that’s dated September 8, 2020” means that the .NET update (here KB4576627) is included in the CU (here KB4570333).

        • This reply was modified 2 years, 12 months ago by Berserker79. Reason: corrected explanation
        1 user thanked author for this post.
    • #2300913

      I download updates from the Microsoft Update Catalog because I don’t trust Windows Update. Lately the catalog has frequently been erroring out with the very-descriptive-and-useful-error-code “8DDD0010”. https://answers.microsoft.com/en-us/windows/forum/all/microsoft-update-catalog-error-number-8ddd0010/522c34d5-51f7-464e-bb8f-90f34ea32c13

      (Really Microsoft? It’s been decades and you STILL cannot get it through your thick head that non-descript error messages help NO ONE)

      Anyways, I run Windows 10 v1909 on both a Parallels Desktop virtual machine on a Mac and v1909 on a regular run-of-the-mill Windows laptop from 2016.

      Downloaded KB4576751 (the SSU), KB4574727 (the September patches), and KB4576484 (the .NET patches). All from the catalog, interchanging between using incognito mode and Microsoft Edge in order to try to circumvent the aforementioned error.

      Started with the Parallels VM first. Installed the SSU first, then the September patches, then the .NET patches, then rebooted. My Mac’s on an SSD so updates are speedy (and that VM is relatively clean). Build is now at 18363.1082.

      Then went on to my Acer laptop, again installing updates in the same order. It’s clocking a HDD so updates take forever. Luckily updates were successful and it’s also on 18363.1082.

      Both came back up for air still alive and kicking, no issues to report for now.

      • #2301197

        those MS Update Catalog errors are gone now, mr anonymous
        the MS Update Catalog site searches appear to be working correctly again.

        those were glitches with the MS Update Catalog site this past weekend

        • This reply was modified 2 years, 12 months ago by EP.
    • #2300919

      Win7 x64 Group B

      Are there any known potential problems after installing the September 2020 updates on Win7? I haven’t seen mention of any.

      I didn’t install the August 2020 updates because of the potential problem of not being able to print from my system after installing the security only update, KB4571719. Because I am using W7ESUI to install my updates, I cannot apparently uninstall an update if it causes a problem and I didn’t want the bother of having to restore my system from a system image.

      I’m not too concerned about not having the August 2020 security only update on my Win7 system. As soon as I can get a Win10 system running on a new PC with all the function and migrated personal data that I require, I shall cease using my old Win7 system.

    • #2300938

      If you are on Win10 Pro and are looking to upgrade:

      If you are on v1809, v1903, or v1909, Feature deferral less than 120 days should get you v2004.

      If you are on v1809 or 1903, Feature deferral 250-300 days should get you v1909.

      If you are on v1809, Feature deferral 340 days or greater will get v1903. But v1809 and v1903 are so close to EOL this is not recommended.

      Thanks for the instructions. Have been on version 1903 since last December. Set Feature deferral to 275 and version 1909 became available. Installed without any issues. Actually it was fast an uneventful. Ran wush and version 1909 (KB4023057) is available. Should I install or hide it at this point?

      Win10 Pro

      • #2300949

        Hide KB4023057.
        Don’t forget to reset your Feature deferral days. 🙂

      • #2300953

        In addition to what PK reminds you about above, resetting your feature deferral days, in 1909 I believe you can now also enter a target release version for feature updates so you don’t see 2004 or (2009/2010/20H2) until you’re ready. Simply set the target release version to 1909, and you should be all set. @PKCano, please feel free to correct this post if I’m incorrect.

    • #2300950

      Windows 10 Pro – Version: 1909 – OS Build: 18363.1082

      So, getting slightly confused here on the latest set of patches and what I should allow through or not?!

      (Note: I always create complete images of my system before running updates therefore there is no problem in reinstalling if necessary).

      On resuming Windows Update today (October 4) I was offered the following:

      • KB4063057
      • KB4576947
      • KB890830
      • KB4574727

      Simple question; which do I need to install?

      Thanks in advance.

      • #2300962

        You need KB4574727 (Sept CU) and KB890830 (MSRT)

        HIDE: KB4576947 (.NET Preview CU) and KB4023057 (MS’s upgrade you whether you like it or not” patch).

        • #2301174

          Thanks PKCano for the information – much appreciated.

          Can I pick your brains further with regards to the infamous Windows Updates?  I know… this is a subject that has had many threads, however, after looking over your very detailed: 2000016 – Guide for Windows Update Settings for Windows 10) I’m not sure where I’m going wrong?!

          My current status since last month is that I have updates paused only for the maximum 5 weeks – no other changes in place.

          This time round, I have followed the details under: Section 4 – These are the settings I use for Win10 v1909 and earlier.

          I made all the changes, restarted my system (out of habit) and then went to Windows Update where I ‘resumed’ updates… only to find that everything goes ahead as normal i.e., starts to download/install updates and requests a further restart.  On checking View Update History, all the updates I do not want have been installed?

          I have also followed the process above and ran ‘wushowhide’ immediately on resuming updates and although the utility states everything has been fixed, I end up with the same result of updates I do not want!

          I would really appreciate your further guidance and again, many thanks in advance.

          • #2301183

            I made all the changes, restarted my system (out of habit) and then went to Windows Update where I ‘resumed’ updates… only to find that everything goes ahead as normal i.e., starts to download/install updates and requests a further restart. On checking View Update History, all the updates I do not want have been installed?

            Well, you didn’t read the instructions, because this is what AKB2000016 says:

            If you then Resume updates, or the pause period ends, the paused updates will download/install. Under these conditions, they do not respect the “2” (notify download/install) setting.

            If you use the Group Policy settings, you should NOT use Pause. What happens is, you set controls then set other controls that override the first controls. Go back and re-read Section 4 if you have v1909 or Section 5 if you have v2004. If you follow the instructions, they work.

            I have also followed the process above and ran ‘wushowhide’ immediately on resuming updates and although the utility states everything has been fixed, I end up with the same result of updates I do not want!

            Windows Update and wushowhide use the same Windows Update Service to scan for updates. There is a difference, though.
            Windows Update scans for updates and the list of available updates is cached until the next time WU scans. That means it is a current list of available updates only right after it scans. After that, it remains the same list until WU scans again.
            When YOU scan with wushowhide and hide updates, the list of available updates is current as of when you scan, so the hidden updates disappear from the list. But WU won’t match what you see in wushowhide until WU rescans and replaces the old list in the cache. So you have to clear the cache or WAIT until WU rescans on its own , because if you do not, WU will download/install whatever is in it’s list. What you see in the WU list is what you get.

            • #2301304

              Thank you for your notes, however, as I originally stated:

              My current status since last month is that I have updates paused only for the maximum 5 weeks – no other changes in place.

              If I resume updates now, then they immediately begin to download and install.

              How then can I apply your recommended settings as detailed in Section 4?

            • #2301308

              Disconnect from the Internet – it can’t download anything if you are not connected.
              Set the GUI pulldowns and Group Policy settings.
              Click on Resume Updates (you are still disconnected, so nothing can download).
              Once the Pause is removed, don’t put it back.
              Reconnect to the Internedt.

              Settings App under Windows UPdate\Advanced settings
              Feature deferral – 365
              Quality deferral = 0
              In Group Policy under Windows Update
              Configure Automatic Updates = Enabled, value = 2

            • #2302043

              I followed your latest instructions, reconnected to the Internet and on checking under Windows Update was presented with a ‘Retry’ button (due to the initial disconnection) which I clicked and found that all the updates downloaded and installed.

              Restored my system and tried again; this time I ran ‘wushowhide’ first (before clicking the ‘Retry’ button) and only the two updates I wanted were downloaded and installed – success!

              You state in Article 2000016 about a ‘Download button’ which as yet, I have not seen appear?  (Currently, Windows Update shows the ‘Check for updates’ button with a red notation that ‘some settings are managed by your organization’).

              Thank you once again for your assistance and patience.

            • #2302060

              You state in Article 2000016 about a ‘Download button’ which as yet, I have not seen appear? (Currently, Windows Update shows the ‘Check for updates’ button with a red notation that ‘some settings are managed by your organization’).

              Since you get the “*Some settings are managed by your organisation” in Windows Update, you must be using Pro edition and have at least some Group Policy setting(s) changed.

              To get the ‘Download’ button to appear (when updates are available and have been added to the WU queue/cache – which is not live like wushowhide) you specifically need to set ‘Configure Automatic Updates’ to ‘2 – Notify for download and auto install’.

              In GP, navigate to Computer Configuration > Administrative Templates > Windows Components > Windows Update – the ‘2’ setting you need is in there.

              Hope this helps.

            • #2302069

              READ AKB2000016 – there is an explanation on how to set Windows UPdate. If you do not understand the instructions, there are screenshots (pictures) of the settings at the bottom of the AKB.

            • #2302111

              @PKCano and Coldheart9020.

              I have double-checked the settings and they are all still in place.

              As I stated on my first attempt:

              I followed your latest instructions, reconnected to the Internet and on checking under Windows Update was presented with a ‘Retry’ button (due to the initial disconnection) which I clicked and found that all the updates downloaded and installed.

              The ‘Retry’ button was the only option available to me (even after a reboot this button was still showing when I returned to Windows Update) and the result on clicking it was that all the updates – wanted or unwanted – downloaded and installed?!

              Thanks again.

            • #2302119

              Why didn’t you click on the Retry button when you were offline so nothing could download?

            • #2302134

              Why would I click on the ‘Retry’ button when I’m offline in the first place?  The whole idea is superfluous when I’m offline!

              None of this is detailed in any of your instructions:

              Disconnect from the Internet – it can’t download anything if you are not connected.
              Set the GUI pulldowns and Group Policy settings.
              Click on Resume Updates (you are still disconnected, so nothing can download).
              Once the Pause is removed, don’t put it back.
              Reconnect to the Internedt.

            • #2302205

              As with all instructions for Windows, these are updated as we discover new things / MS changes stuff.

              You appear to have found something not seen elsewhere and if you help us with working out how it works we can add it to the instructions.

              cheers, Paul

            • #2302246

              @Paul T

              Thank you for your comment and I fully take on board what you are saying.

              I will be looking at running through the process again over the next few days and will provide further updates as to how things turned out.

               


              @PKCano

              Thank you for your help to date and I sincerely apologize if my comment was considered defensive (or even offensive) as it was not meant to be.

              If not for yourself, the team at AskWoody and all forum members, there would be a huge void in lack of information and once again, your assistance and patience is greatly appreciated.

            • #2302252

              Why would I click on the ‘Retry’ button when I’m offline in the first place? The whole idea is superfluous when I’m offline!

              Exactly. That is precisely why you do it disconnected from the Internet. You want it to fail to download something you didn’t want from the Internet….

              Point to note:
              + If the computer was TRYing to download something you didn’t want from the Internet….
              + Then RETRYing would be another attempt to download something you didn’t want from the Internet….
              + If you connect to the Internet, then RETRYing will  successfully download something you didn’t want from the Internet….
              + So, in that case, don’t connect to the Internet when you click RETRY, and the download can’t proceed because there is no connection. It will fail (to download) – which is what you want.

            • #2302772

              Managed to find a spare moment to try out the latest advice – my apologies for the delay in updating you all.

              So I performed all the relevant changes to Windows Update and Group Policy – disconnected from the Internet – and then clicked on Resume Updates at which point I am informed that I have no network and am then presented with the Retry button.

              As instructed; still offline, I click the Retry button – no change.  Tried a further two times and then rebooted for good measure and on checking again, Windows Update still shows the Retry button only.

              At this point, I have no alternative but to re-connect to the Internet and once connected, click Retry which presents the message ‘Checking for Updates’ briefly and then goes on to download ALL updates – wanted or unwanted?!  (I do have screenshots but were unable to insert them into this reply).

              Any further advice would be greatly appreciated – thank you.

    • #2300991

      I have 32-bit Windows 7 with Extended Security Updates (ESUs)  and Office 2010.   On Sept 9th,  I did a check for updates using Windows Updates and it offered me some updates for Office 2010,  but I didn’t install them at that time because Woody had dropped the DEFCON  Level down to  a Level 2 at that time.  I believe it remained at a Level 2 until October 2nd,  when he raised it to a Level 4.  So I assume I now have the OK to install those updates;   but the problem is that Windows Updates is no longer offering them to me.   The updates that it had offered on September 9th were:  KB4484530,  KB4484532,  KB4486660, and KB4486665.   I’ve checked for updates at least three times since October 2nd,  and Windows Updates has not offered me those updates in any of those three checks.   I’ve also looked at my Control Panel/Installed Updates,  and those updates are definitely NOT installed on my computer.   So I have two questions:

      1.  Why isn’t Windows Updates offering them to me anymore?

      2.  Should I go to the Microsoft Catalog and install them manually?

       

      • #2301030

        1.  Why isn’t Windows Updates offering them to me anymore?

        Probably because this coming Tuesday the 6th is the day that MS usually releases preview patches for Office that are not security related, and, because of this, they’ve probably mistakenly allowed these patches to supersede the September security patches. Therefore WU isn’t offering them to you.

        As a caveat, this month, October, is the LAST TIME that MS will release ANY security patches for Office 2010, on the 13th. After that, you’re on your own for patching any holes that may be found in your Office 2010 products.

        2.  Should I go to the Microsoft Catalog and install them manually?

        Yes, it would be a good idea at this point, since we’re at the MS-DEFCON level of 4. To help you out, here are some links to the patches you’ve listed that you need from the MS Update Catalog:

        https://www.catalog.update.microsoft.com/Search.aspx?q=KB4484530

        https://www.catalog.update.microsoft.com/Search.aspx?q=KB4484532

        https://www.catalog.update.microsoft.com/Search.aspx?q=KB4486660

        https://www.catalog.update.microsoft.com/Search.aspx?q=KB4486665

        Be sure to download only the version for your copy of Office, as they have both 32 bit and 64 bit links on those pages. My guess is that you probably have the 32 bit version of Office 2010, since you say that you have a 32 bit edition of Windows 7.

        I hope this helps.

        R/

        Bob99

        1 user thanked author for this post.
        L95
        • #2301039

          thereafter 0Patch would be a viable option for office 2010 protection as well as Windows 7 (two for the price of one)

          No problem can be solved from the same level of consciousness that created IT- AE
          1 user thanked author for this post.
          L95
          • #2302422

            Microfix:  Thanks for your reply.   I had been planning on installing Office 2013 to provide security updates now that Microsoft is terminating security updates for Office 2010,  but my initial research indicates Office 2013 would be more expensive than 0Patch.   The newest edition of Office, such as Office 2019, apparently isn’t compatible with my Windows 7 computer.   I contacted 0Patch,  and they told me they will be offering updates for Office 2013 at some point in the coming days,  but they don’t know exactly when.  I asked PKCano (in one of the other askwoody.com forums) about what he would recommend.  and he indicated it might be hard to find a legal copy of Office 2013,  and he recommended I just wait until 0Patch offers patches.   Do you agree with PKCano on that?   I just thought I’d check with you and see if you have the same recommendation as he does.

            • #2302525

              Heidoc.net offers downloadable versions of MS Ofice 2013 but, you NEED a legal product key. Generally, I’m on the side of keeping office 2010 going with 0Patch security patches for the product together with your Windows 7
              However, as others have mentioned, there are open source alternatives, eg: LibreOffice, should you wish to go down that route. I done the transition years ago with Office 2010 Pro Plus to WPS office (which is completely isolated and offline with firewall rules) At the time, WPS Office was the most compatible for our needs, with some minor quirks but, it still works for us today. YMMV

              No problem can be solved from the same level of consciousness that created IT- AE
              1 user thanked author for this post.
              L95
        • #2301364

          Bob99:  Thanks very much for all the work you did to provide such a detailed response.   The links you provided would have been helpful,  but when I tried them,  they produced files that I don’t have enough computer knowledge to be able to utilize them.  The files were .cab files,  and I didn’t know how to deal with those.  So what I did instead was go the Microsoft Download Center,  and that gave me .exe files,  and the .exe files were easy for me install,  because all I had to do was download them and then click on the downloaded files and let them run.   I mentioned the catalog in my original posting,  because I’ve used the catalog before,  but my recollection is that it provided .exe files. But for these particular updates it provided .cab files.  Anyway,  I’ve got the updates installed now,  but by using a different method.

          • This reply was modified 2 years, 12 months ago by L95.
          • #2302285

            Great to hear you were able to get the updates from the download center!

            I just looked and, yes, the files listed are .cab files. However, all you need to do is to treat them as executables, even with Windows 7. I remember coming up against that “wall” myself many years ago. Someone then told me to download them and click on them and Win 7 would take it from there.

            I just now clicked on one of the links and then clicked on the “Download” button in the resulting list for both the 32 bit and 64 bit versions, and Windows came up asking if I wanted to open the file with Explorer or if I wanted to save the file. I’m on Win 10, but the behavior is the same in Win 7 from what I recall.

            So, if you come up against this issue in the future with .cab files being offered for download, simply treat them as .exe files, especially if they’re coming from a Microsoft site that you initiated the interaction with by going there on your own and NOT from any link embedded in the text of an email, as scammers are prone to do.

            R/

            Bob99

            1 user thanked author for this post.
            L95
    • #2301098

      After installing the latest Windows10 Pro v.1909 September updates , +

      plus I did install the latest Nvidia drivers , and REinstalled the (latest) Intel original HP-video driver all seems to be okay (fingers-crossed!). The mysterious little memory hic-ups (short delays and little pauses till something (or some evil devil) cleared the graphical memory.

      This reinstalling the graphical drivers wasn’t for the first time, but now it seems successful.

      Beets me why or what was holding up the system the last 4 months.

       

      * _ the metaverse is poisonous _ *
      • #2301967

        Beets me why or what was holding up the system the last 4 months.

        Well, there’s always Nibbled’s Law:

        “Computers do screwy things all the time for now apparent reason.”

        Or there’s the Cosmic Ray theory, that basically says that when one of these things flies through a memory stick, or, really, any other part of your MOBO/HDD/etc., it changes something from a 0 to a 1 or vice versa. Effects can be really striking or hardly noticed until years later, when that pic of Uncle Albert won’t load and is deemed “corrupted”.

        Hi ho…

        Win7 Pro SP1 64-bit, Dell Latitude E6330, Intel CORE i5 "Ivy Bridge", 12GB RAM, Group "0Patch", Multiple Air-Gapped backup drives in different locations. Linux Mint Greenhorn
        --
        "Nine out of 10 doctors say Acid Reflux is mainly caused by computers."

    • #2301101

      Well, I done did the September 2020 Windows upates. A curious side-effect of this month’s patches is that Microsoft logged me out of all Firefox sessions to whichever sites I’d left logged-in. An annoyance but I just launch my sites credentials utility and it logs me onto whatever sites were signed out.

      • #2301109

        Site login information is stored in cookies. Maybe closing Firefox cleared the cookies?

        cheers, Paul

        • #2302257

          Maybe there is disk cleanup scheduled in update. Who knows, information channel is more or less one-way street heading towards MSFT.
          But my bet is on closing Firefox.

          Dell Latitude 3420, Intel Core i7 @ 2.8 GHz, 16GB RAM, W10 22H2 Enterprise

          HAL3000, AMD Athlon 200GE @ 3,4 GHz, 8GB RAM, Fedora 29

          PRUSA i3 MK3S+

    • #2301142

      Looks like Microsoft are pushing V2004 – I have Win 10 pro v1909 and allowed the september update and found my machine merrily updating to 2004 – I aborted and deferred all updates – is 2004 safe to allow?

       

      • #2301143

        Woody still recommends v1909. V2004 still has too many problems.
        But it would be a good idea to sock away a v2004 ISO for future use.
        You can use the Media Creation Tool, downloadable from Microsoft, to create the ISO.

        1 user thanked author for this post.
        • #2301202

          not really PKCano.

          v2004 now is more stable than first released back in late May 2020 so some of those “too many problems” have been fixed either by MS (with recent optional KB4577063 preview update) or by 3rd party manufacturers issuing 2004 compatible drivers.

          I hardly have issues with 2004 lately

          best to wait until end of October or early November to upgrade to 2004

          • This reply was modified 2 years, 12 months ago by EP.
          • #2301212

            Sorry, as of Oct 5 (today), Woody STILL recommends v1909.
            We also do NOT recommend installing Previews, so those fixes have not been applied. They will be in the Oct Security CU.

            3 users thanked author for this post.
    • #2301155

      My two Win10 machines were “surprise updated” to 2004 a few weeks ago.  I’ve been holding off the latest patches based on posts here.  My deferral period ends Friday (9 Oct).  I haven’t run into any of the issues reported by others here since 2004 took over my machines.  As we’re now at Defcon 4, can I get a risk assessment on going ahead with the September patches?  Any info would be appreciated.

      • #2301156

        Have you read Woody’s linked ComputerWorld article?

        1 user thanked author for this post.
        • #2301170

          I did this weekend, and I just reviewed it again.  Guess I was hoping for a little more comfort as to my prospects for patching, but looks like I’ll just have to grin and bear it.  At least I can give it the rest of this week before diving in.

    • #2301237

      One should always give a new Windows release, e.g., 2004, time to ripen before even taking time to look at the known issues with it.   However, the list of 2004 bugs is pretty short and pretty specific.  I’ve upgraded 20 machines to 2004 in the past month or so and not had any problems.  Thes are pretty plain Dell machines of various vintages (a 990 for one) for the most part; no old and/or obscure software and no hardware that the Smithsonian wants for its History Of Computing exhibit, but that description fits a lot of computers.

    • #2301243

      best to wait until end of October or early November to upgrade to 2004

      Windows 2004 will be history by the end of the month with the release of 2009/20H2 🙂
      In its current state it is better to skip 2004.

    • #2301326

      Windows 2004 will be history by the end of the month with the release of 2009/20H2 🙂 In its current state it is better to skip 2004.

      By your logic, you would never install any major Windows 10 update.

    • #2301949

      So I followed Woody’s instructions to install the September patches.  Two of my three Win10 boxes got upgraded to 2004.  🙁

    • #2301968

      So I followed Woody’s instructions to install the September patches.  Two of my three Win10 boxes got upgraded to 2004.  🙁

      Feature update like 2004 isn’t part of monthly quality updates.
      On home version with resumed Pause, you should have blocked 2004 with wumgr, wumt, wushowhide before the resume.
      On pro you should have set GP ‘notify don’t download’ = 2

      https://www.askwoody.com/forums/topic/2000016-guide-for-windows-update-settings-for-windows-10/

      1 user thanked author for this post.
    • #2301969

      I aborted and deferred all updates – is 2004 safe to allow?

      With W10 Pro you don’t need Pause.
      You have GP ‘notify don’t download’ = 2
      You have Windows Update – Advanced Option to set Feature updates & quality update for days ahead (365 days for Feature, 35 days for quality)

    • #2302118

      This is my first visit to your web site. I do have problem with Windows 10 that showed up about level 1908 but not sure exactly when. The Dell Latitude E5440, I have 2 of then, are both having the same problem with the battery and power related issues. The laptop will power down at any time. May be 15 minutes may be 2 hours. When I look in the bios log it has different entries related to power like the 2.0v was too low. The reason I think this is related to Window 10 is there are 2 entries for the battery in device manager. I have tried to delete one but it is added back when a restart takes place. The entries are a “Microsoft APCI-Compliant Control method Battery” This also shows up when displaying the battery in taskbar. It displays 2 batters 1 which is the real battery and 2 which it can’t find. I have tried to get Microsoft and Dell to talk to each other but each claims it is the other’s problem so no one is going to fix it. The APCI is Microsoft code and I believe their code is pointing to a different battery register than it should be so what is in the register their code is looking at is would be impossible to predict. So I think this is why the laptop does strange power related things.

      The time frame this started happing is the same time that Dell chose to stop supporting/testing windows 10 for this model which is why they refuse to work on it. It is hard to tell if the problem showed up before their support ended.
      I have found numerus entries with Dell Latitude’s having this problem. I have updated Bios to the most current level and it didn’t help. A work around that seems to help but not cure, is to disable the 2nd entry which doesn’t get changed when a restart is done. It also removes the 2nd entry in taskbar display of the battery. I tried putting a new battery in one of the laptops and it seemed to make it worse.

      I would appreciate your help on this problem.

    • #2302202

      Windows 7 users: There are issues with the September Monthly Rollup and the Security Only update. Both cause graphic issues which can be severe when playing video in web browsers and in stand-alone video players, depending on how recent your graphics drivers are for video hardware. Other issues are seen in popups in MS Office and in the System Tray popups, and in crashes in some video games. These issues are being increasingly reported.

      On the bright side, either September update does uninstall gracefully, such that the issues are resolved. It appears that Microsoft still is unaware of these issues.

      3 users thanked author for this post.
      • #2302288

        Thank you for this post. Earlier in this thread, I asked whether there had been reports of any problems after installing the September SO update for Win7 (see #2300919).

        I’m not sure what to do now. I didn’t install the August SO update for Win7 because of reports that it might prevent me from being able to print from my PC. And, contrary to what you state in your last paragraph, because I have been using W7ESUI to install the Win7 SO updates, I have subsequently been informed that I am not able to uninstall them in the usual way (see #2296008). And I don’t really want to get into having to restore my system from a system image.

        1 user thanked author for this post.
      • #2302327

        I’m not sure what to do now. I didn’t install the August SO update for Win7 because of reports that it might prevent me from being able to print from my PC. And, contrary to what you state in your last paragraph, because I have been using W7ESUI to install the Win7 SO updates, I have subsequently been informed that I am not able to uninstall them in the usual way (see #2296008).

        Hi TonyC,

        I use abbodi86’s BypassESU-v9-AIO in order to check for Windows updates, to install or remove SO ESU updates, and to install .NET updates. Since you prefer to use W7ESUI to install SO updates, you can choose option 2 when installing BypassESU-v9-AIO. Option 2 will only install the ESU Supressor. With the ESU Supressor installed, you will be able to uninstall any ESU updates which cause issues.

        I didn’t encounter any printing issues after installing the August SO update.

        Best regards,

        –GTP

         

        2 users thanked author for this post.
        • #2302813

          GTP, thank you very much for your reply.

          Your reply was a lot more helpful than abbodi86’s rather cryptic reply in another topic (see #2301060). And there appears to be some sensitivity about discussing or even referring to BypassESU-v9-AIO on this forum.

          My problem is finding the time to maintain my Win7 system until I have been able to migrate all the function and data that I require onto a Win10 system on a new PC. If it hadn’t have been for the COVID-19 pandemic and all the lockdown restrictions, I probably would have been there by now and I wouldn’t be needing my Win7 system any longer. I’m a home user and I don’t sit in front of my PC all day and every day.

          I started using Win7 security only updates way back in October 2016 (?) following the “Get Windows 10” debacle. I didn’t want Win10 on my increasingly aged PC. It was then that I started to use the Microsoft Update Catalog to download updates. So, when Win7 end of service arrived, it was a natural progression to use W7ESUI to install the updates. But, at the same time, I didn’t realise that any other way existed. I had never heard of BypassESU-v9-AIO until abbodi86 mentioned it in the correspondence referenced above.

          I will investigate BypassESU-v9-AIO and, if I have any queries, it sounds as though it would be better to post them on the MDL forum.

          1 user thanked author for this post.
      • #2302366

        GoneToPlaid wrote:
        Windows 7 users: There are issues with the September Monthly Rollup and the Security Only update.

        Thanks for the post, GTP.

        I’d been wondering about this since reading this post last month, and then reading this post just a couple of days ago. In the second post, NTiONdsM mentions “All the machines affected are Dells”… does his experience agree with what you’ve seen?

        Thanks GTP (and thanks NTiONdsM).

        • #2302536

          My desktop is completely home-built. No Dell components. The graphics is a nVidia graphics card. The graphics drivers were updated in July.

      • #2302376

        Turning off hardware acceleration in the browser seems to be a (temporary) solution for the video problems. See #2302306 and the rest of the thread.

    • #2302293

      I installed the September patches for my Win10 version 1909 x64 home desktop yesterday.

      KBs 402357 and 4574727 for Windows, 4576947 for .net framework preview, MSRT and a  Samsung Modem update 2.16.14.0 were the updates installed. All completed ok in about 45 minutes with a single restart. No issues as yet.

      My other home desktop is Win7 and is being covered by 0patch Pro including for Windows, Office 2010 and Windows Live Mail. Nothing else required therefore and it seems just fine.

      Thanks to Woody and the team for their advice, and to all commenters for their feedback.

    • #2302296

      But WU won’t match what you see in wushowhide until WU rescans and replaces the old list in the cache. So you have to clear the cache or WAIT until WU rescans on its own , because if you do not, WU will download/install whatever is in it’s list.

      I was having exactly this problem with the annoying KB4023057 update pending download according to the WU list despite hiding it in wushowhide. Since WU was taking ages to do a rescan on its own (and I wanted to finish installing the last few September updates I had yet to install), I found out one way to force the rescan.

      For anyone interested, to force WU do a rescan open an elevated (Admin) command prompt window and then type

      usoclient.exe StartScan

      If you have your WU window open when running the above command you’ll see the scan start. Once the scan finished, WU reported the system to be up to date with no available updates.

      Just make sure to do the above rescan with metered connections on and when you have hidden all undesired updates with wushowhide or there’s the risk that WU will download and install something.

      2 users thanked author for this post.
      • #2302410

        please note that running “Usoclient.exe StartScan” without the WU window open will do nothing and will not work.

        https://social.technet.microsoft.com/Forums/en-US/7619f7fa-ffc1-433b-a885-12e26f9762bf/usoclientexe-usage?forum=win10itprogeneral

        This command isn’t meant to be called outside of the internal OS. Nobody outside the OS should be trying to run the usoclient directly.

        the WU settings window must be running or open for Usoclient to work

        1 user thanked author for this post.
        • #2302460

          Thanks for this important bit of info EP, much appreciated.

          Making sure the WU window is open when running the command seems just a minor inconvenience or no inconvenience at all actually, still beats having to wait WU to rescan on its own when you are in a hurry to get some unwanted patch out of the download queue.

        • #2302938

          Not necessary

          you can run “Usoclient.exe StartScan” after you clear the WU cache, and it will work
          https://pastebin.com/mwKtTf5N

          WU settings window is not needed to be open

          @wmic service usosvc call StopService
          @wmic service wuauserv call StopService
          @del /f /q C:\ProgramData\USOPrivate\UpdateStore\*
          @wmic service usosvc call StartService
          @UsoClient.exe RefreshSettings
          @UsoClient.exe StartScan
          1 user thanked author for this post.
    • #2302464

      I didn’t install the August SO update for Win7 because of reports that it might prevent me from being able to print from my PC

      Make an image backup, install the patches, test the printing. If there are issues, restore the backup.

      cheers, Paul

    • #2302485

      I had been planning on installing Office 2013 to provide security updates now that Microsoft is terminating security updates for Office 2010

      Have you checked the free LibreOffice 7 as replacement to your Office 2010.? You can test the portable version
      This will also cut some chains to Microsoft.

      1 user thanked author for this post.
      L95
    • #2302640

      a new but small out-of-band patch for some Win10 versions was recently released – KB4583263
      https://support.microsoft.com/help/4583263/

      only install if using HP Battery Health Manager on certain HP business laptop PCs only

      unrelated but check out this recent article from ZDNet – Windows 10: Watch out for Microsoft’s new way of doing release notes

      https://www.zdnet.com/article/windows-10-watch-out-for-microsofts-new-way-of-doing-release-notes/

    • #2303043

      I took off the blocks and, like others here, and rather to my horror, ended up with 2004 on both my desktop and laptop PCs.

      So far (not 100% convinced yet) it seems to have gone okay. I DO still have 1909 installation media available, so I’ve got a safety net if anything goes too far south.

      The only possible hint of an issue I’ve seen is on the desktop: it’s needed to “fix” my Microsoft account several times post-upgrade. It’s not a new thing — I think it might be related to the fact that I use the same Microsoft account on both machines — but it used to be very occasional, and now it’s a bit more frequent. (It’s never happened on the laptop.)

    • #2303074

      born is recently reporting that the optional KB4577062 preview update for 1903/1909 blocks the upgrade to 2004:

      https://borncity.com/win/2020/10/10/kb4577062-blockiert-funktionsupdates-auf-windows-10-v190x-und-2004/

      • This reply was modified 2 years, 11 months ago by EP.
      1 user thanked author for this post.
    • #2303240

      I’ve since disabled it in Task Manager, but I noticed after running the September version 1909 updates as detailed above that Skype was showing on my task bar as a start-up item despite my never having used it. I didn’t even know I had it!

      1 user thanked author for this post.
      • #2303275

        Skype was showing on my task bar as a start-up item despite my never having used it. I didn’t even know I had it!

        Since you say that you also had a Samsung modem update installed as part and parcel of this month’s updates, perhaps Skype was in a “wrapper” (which neither you nor Microsoft were made aware of) that encased the actual modem update from Samsung. Just sayin’. There are all kinds of reasons, actually, that Skype just suddenly showed up on your task bar, the above scenario being just one of them.

        I’m on 2004 pro x64 and I disabled/removed Skype while initially setting up my computers after purchasing them from a local mom and pop store (no brand name computers allowed in this house..too much bloatware, to put it mildly). I’ve updated with the September patches, .net and all, and no hint of Skype anywhere on my task bar or system for that matter.

         

        1 user thanked author for this post.
    • #2303284

      Today is October 11, 2020.

      My trusty  Thinkpad T61 is running  Win 10 1909 build 18363.900
      I am still slightly amazed that this OLD hardware keeps on working.

      I have  Group Policy under Windows Update set to
      Configure Automatic Updates = Enabled, value = 2

      Wushowhide is hiding several things I know to avoid, such as driver updates and Win 2004.

      Today I am offered 3 updates:

      1. MSRT     KB890830
      2. Cum Update for .NET   KB4576484
      3. 2020-09 Update for Windows 10 version 1909 KB4023057

      So,  noted in this thread up above are several posts saying to avoid KB4023057.
      Were those posts made during Defcon 2?

      I see that Woody has moved to Defcon 4, and Susan Bradley’s master patch list says KB4023057 and KB4576484 are recommended to install.

      Should I allow these updates?   Thanks so much for all the smart advice here.

      • This reply was modified 2 years, 11 months ago by AlphaCharlie.
      • #2303290

        KB4023057 is MS’s “upgrade you whether you like it or not” patch. Read the Support page linked and see what I mean.

        KB4576484 Is the Sept .NET CU (no Preview) – is OK to install.

      • #2303294

        You are missing Sept. CU update KB4574727 (OS Builds 18363.1082)

        1 user thanked author for this post.
        • #2303300

          Oh my.  That one is not offered to me at this time, nor is it in the “hidden” part of wushowhide.   I must have overlooked it a month ago.

          Is there a way to manually install Sept. CU update KB4574727 (OS Builds 18363.1082)  ??

          Thank you.

          • This reply was modified 2 years, 11 months ago by AlphaCharlie.
          • #2303303

            Do you have Quality Updates deferred or Pause turned on. If you do, you won’t see the latest CU.

            • #2303309

              Yikes.   I am typing this message on a separate PC (Chromebook).  I got distracted (I am too old for multi-tasking).  I plugged an ethernet cable into the Thinkpad and went to get some coffee.  Upon my return, I see in   Settings / View Update History   that the undesirable KB4023057  has “successfully installed” and that KB 4576484 is waiting for a restart.

              There is a place at the top of that pane  for “uninstall updates” but  KB4023057 does not appear in the list.

              I have not rebooted it yet.   What next?

               

            • #2303310

              Here is what I see in Settings / Update & Security /

               

              Annotation-2020-10-11-132738

            • #2303315

              It’s called some kind of “Helper” and you uninstall it in Settings\Apps or in Control Panel\Programs and Features. Be suer you hide it afterward!

              1 user thanked author for this post.
            • #2303318

              Well as I said before KB4023057 did not appear under Uninstall Updates.

              However, PK’s suggestion got me to look in Settings / Apps & Features       and then I sorted by Install Date.

              Voila, here is something called “Microsoft Update Health Tools” installed today, 1.18 MB in size, and version number 2.68.0.0

              And there is an Uninstall button!  So I will give it a whirl and report back.

            • #2303321

              After you do, check any settings you have made to be sure it did not revert them to MS defaults.

            • #2303325

              Indeed.   I hope it did not do anything harmful while it was here.  I should share what I have learned in case others may benefit.

              So the UNinstall did not show any error messages.  There are no files or folders on the disk with the string “4023057” in the name.

              A new folder “c:ProgramFilesMicrosoft Update Health Tools” was created, but it is currently empty and I will delete that folder now.

              There is a file called “C:WindowsSystem32LogsUpdateHealthTools.001.etl”   which I do not know how to examine, so I will leave it alone.

              Under Settings / Windows Update, the last checked date is yesterday.

              WUShowHide has nothing in the queue, and shows these entries as already hidden:Annotation-2020-10-11-hidden

              Under Settings / Windows Update/Update History   it still shows the update that I just deleted:

              Annotation-2020-10-11-142612

              Windows Update shows this:Annotation-2020-10-11-WU

              At this point, I think I am OK.

               

               

               

               

              • This reply was modified 2 years, 11 months ago by AlphaCharlie.
              • This reply was modified 2 years, 11 months ago by AlphaCharlie.
              • This reply was modified 2 years, 11 months ago by AlphaCharlie.
              • This reply was modified 2 years, 11 months ago by AlphaCharlie.
        • #2303334

          Sorry if I am asking a silly question, but I am used to WU, and have not used the Update Catalog previously.

          So, in order to move from Win 19 1909 build 18363.900 to build 18363.1082, I found a file at this URL for the Microsoft Update Catalog:
          https://www.catalog.update.microsoft.com/Search.aspx?q=KB4574727

          and that leads me to a 400 MB file for my x64 OS:
          windows10.0-kb4574727-x64_3874e5f283185dab47b6564674946a5122d4a05c.msu

          Can that be UNinstalled if problems arise?

          By the way, I noticed that the Update Catalog says KB4574727 has been superseded by KB 4577062, but the word Preview appears on that one, so I will avoid it.

          Thank you!

          • This reply was modified 2 years, 11 months ago by AlphaCharlie.
          • #2303338

            Do you have Qualith Deferral set? If so, set it to 0 (zero) so you get the Sept CU.

            If you do not have Quality deferral (or pause) set, you will need two patches:
            KB4576751 2020-09 SSU – install this first
            KB4574727 2020-09 CU.

            Put them on your desktop.
            Double click on the SSU and let it install
            Double click on the CU and let it install
            Reboot your computer.

            Don’t install the Preview.

            1 user thanked author for this post.
    Viewing 37 reply threads
    Reply To: MS-DEFCON 4: Get the September 2020 patches installed

    You can use BBCodes to format your content.
    Your account can't use all available BBCodes, they will be stripped before saving.

    Your information: