MS-DEFCON 4: It’s time to get Windows and Office patched

Topic

New Reply

There’s only one patch you should studiously avoid this month — KB 4493132, the “Get Windows 10” nag patch. Other than that, the sailing’s clear. Per
[See the full post at: MS-DEFCON 4: It’s time to get Windows and Office patched]

14 users thanked author for this post.

Lori, dgreen, ve2mrx, CADesertRat, SueW, Myst, Nibbled To Death By Ducks, jburk07, abbodi86, Elly, remod31, fernlady, CyGuy, PhotM

Reply | Quote

Replies

I’m using Windows 10 1809 since the begining at work. I hadn’t had problems with it. Thank goodness!

Reply | Quote

Just installed KB4489878, KB4474419, KB890830 with no problems. Didn’t see KB4493132 offered. Win 7 Pro, SP1, Grp. A, i7Core “Haswell”.

1 user thanked author for this post.

jburk07

Reply | Quote

Check again and be sure you get the Servicing Stack KB4490628.

1 user thanked author for this post.

jburk07

Reply | Quote

Re: KB4490628. Ran check for updates again and there it was. It downloaded and installed perfectly without a restart. Still not finding the “Get Win 10 nagware”, (not that I want it). Thanks PK. Win 7 Pro, SP1 x64, i7Core “Haswell”

1 user thanked author for this post.

jburk07

Reply | Quote

Updated my stand-alone dual boot Win7 Pro/Win10 Pro:

Win7/Group B:
Already installed Mar 2019 (IE11) KB 4489873 last week > o.k.
Today installed Mar 2019 (S.O.) KB 4489885 > took a long time installing and finalizing after reboot, but seems o.k.

Win10/1809 Version 17763.253:
Installed 2019-02 Cumm.update for .NET Framework 3.5 and 4.7.2 for Windows 10 Version 1809 x64 KB 4486553 today > o.k.
BUT WuMgr is also showing 2019-02 Cumm.update for Windows 10 Version 1809 x64 KB 4487044, which should ‘up’ me to Version 17763.316, but also seem to have caused loss of access to OneDrive.
So what’s the latest on KB 4487044? Install or wait?

(Also updated Office 365 last week > o.k.)

Reply | Quote

Win7 Group B: you also need the Servicing Stack KB4490628 (won’t show up till the WU queue is empty) and the SHA-2 update KB4474419.

For 1809, the only CU you need is the one released on Patch Tues. The others are Previews (unless you have a specific problem that needs to be solved).

4 users thanked author for this post.

Lori, SueW, woody, TJ

Reply | Quote

Yes, will install SS and SHA-2 updates soon.

What I don’t understand from your answer: should/can I install 4487044 or is that a Preview? (Doesn’t seem to be)

Reply | Quote

KB4487044 is the Feb CU. I would look at Woody’s ComputerWorld article and look at the MS pages to see if any of the problems apply to you.

But you should be seeing the March CU KB4489899 instead. You don’t have it hidden, do you?

1 user thanked author for this post.

TJ

Reply | Quote

Thanks. Installed 4487044 meanwhile, after SSU 4470788 (1809 Build is now 17763.316).
I was offered 4489899 in the first week(s?) of March, but it doesn’t show up anymore in WuMgr since March 21st.

Also installed now on Win7: SSU 4490628 and SHA-2 4474419.
Seems like 4490628 changed the boot menu font to something archaic, but no problems so far.

 

Reply | Quote

as always i installed group b only patches (win 7: kb4489885, kb4489873; win 8.1: kb4489883, kb4489873) and after reboot i installed all important and checked updates for office 2010 and msrt and flash, defender updates on 8.1 notebook.

on windows 7 installation of office updates takes very loooooooong this time… something seems to go wrong this time…

on windows 7 i’m not offered this kb4493132 nagware patch. instead there is another update “important” and checked: kb4474419 (security update for windows 7 x64) – this seems to be that sha-2-update. should i install this one too or should i wait?

PC: Windows 7 Ultimate, 64bit, Group B
Notebook: Windows 8.1, 64bit, Group B

2 users thanked author for this post.

SueW, jburk07

Reply | Quote

Install kb4474419 and then you should see the Servicing Stack KB4490628. You will need that one too.

2 users thanked author for this post.

jburk07, honx

Reply | Quote

thx, i installed kb4474419 and now i’ll have to play that securityquality updates hiding game again in order to find kb4490628…

this time i’ll leave these securityquality updates hidden…

PC: Windows 7 Ultimate, 64bit, Group B
Notebook: Windows 8.1, 64bit, Group B

Reply | Quote

i really had to hide all securityquality updates back to october 2016… hide, search for updates, hide, search again… finally kb4490628 showed up and i installed that ssu.

fortunately that nag patch kb4493132 still doesn’t show. for whatever reason. anyway, i would have hid that nag patch, if it showed up…

but now i have read on heise about an advice from microsoft about installing kb4490628 BEFORE installing any other march updates in order to prevent installation issues. so in this case i have done it wrong, i did the opposite. group b windows updates and updates for office 2010, msrt were installed already as i installed kb4490628.
is this no problem or should i roll back? if so, then i’d have to hide all these securityquality updates again and temporarily i’d have to hide office 2010 and msrt updates also in order to be able to find that ssu again…

PC: Windows 7 Ultimate, 64bit, Group B
Notebook: Windows 8.1, 64bit, Group B

Reply | Quote

If you have no problems, then don’t worry about it.
But in the future, maybe you should download the SSUs from the Catalog and install them first.

4 users thanked author for this post.

SueW, jburk07, Lars220, honx

Reply | Quote

don’t want to jinx it, but there seem to be no problem yet. besides installation of office 2010 patches which took a very looooong time today… but finally all office patches were installed successfully. let’s see if there still won’t be installation problems in future updates (april, may, june, … until eol early 2020)…

and currently i’m not able to login to steam, but this problem seems to be not on my side, more on steam’s side as many users seem to have this problem right now. in other words, steam eu servers seem to be down at the moment. so it’s not windows update’s fault, it’s valve’s fault…

as i never used that catalog, where exactly can i find it? is there a link for me to bookmark?

PC: Windows 7 Ultimate, 64bit, Group B
Notebook: Windows 8.1, 64bit, Group B

Reply | Quote

https://www.catalog.update.microsoft.com/Home.aspx

2 users thanked author for this post.

Lars220, honx

Reply | Quote

Very happy to be a fan of Woody and PKCano.  (Group A and dual-booting Win 7 Pro 64-bit and Win 10 Pro 64-bit version 1803.)

But there is a disconnect between Woody’s Defcon 4 today and Susan Bradley’s Master Patch List where most entries are still “Hold” – at least at the moment.

What’s a non-tech to do?

Anyway, on my Win 7 Pro 64-bit, I have installed PKCano’s recommended Servicing Stack KB4490628 and SHA-2 update KB4474419.  So far, so good.  Is there anything similar for Win 10 Pro 64-bit?

Reply | Quote

Win10 already has SHA-2 and the Servicing Stacks (supposedly) install along with the CU in the proper order if you are using Windows Update. You only need to worry about the SSU if you do a manual install.

Reply | Quote

Maybe I spoke too soon.

On my Win 7 Pro 64-bit, I installed Servicing Stack KB4490628 yesterday and SHA-2 update KB4474419 just now.  After the new reboot, I went back to WU and now the 2019-03 cumulative update for .Net is gone.  I have only the 2019-03 cumulative update for Windows, which I am running now.

What happened?

Reply | Quote

I haven’t seen a Win7 .NET CU for March. Are you sure that’s what it was and not the EOL nag patch KB4493132 (which you don’t want, by the way).

Reply | Quote

PKCano – I did not mark down what it was, but doing a new search on MS Update Catalog for “2019-03 .net” or “KB4488666”, I see the following for Win 7  64-bit:

• 2019-03 Update for .NET Framework 3.5.1 for Windows 7 and Server 2008 R2 for x64 (KB4488662)
• 2019-03 Update for .NET Framework 4.5.2 for Windows 7 and Server 2008 R2 for x64 (KB4488669)
• 2019-03 Update for .NET Framework 4.6, 4.6.1, 4.6.2, 4.7, 4.7.1, 4.7.2 for Windows 7 and Server 2008 R2 for x64 (KB4488666)

OK to try to install all three?

Reply | Quote

You only need .NET updates for the versions of .NET that are installed on your PC.

I don’t believe a CU was released through Windows Update. That’s the only way I install them.

2 users thanked author for this post.

glnz, woody

Reply | Quote

PKCano – done only for 4.7.2 (only KB4488666), which is the only version of .net that Installed Updates and Belarc’s list of installed updates think I have.  Reboot OK – don’t see any problems.

Thanks again.

Reply | Quote

My apologies for not updating the table!  I just flipped to install on the 3/12 updates.  I will be doing a special newsletter on all the SHA patches, ergo why I’ve held back on listing them all.

Susan Bradley Patch Lady

5 users thanked author for this post.

Nibbled To Death By Ducks, jburk07, CADesertRat, Elly, Myst

Reply | Quote

Susan, see #348317 below…no tears so far.

Win7 Pro SP1 64-bit, Dell Latitude E6330, Intel CORE i5 "Ivy Bridge", 12GB RAM, Group "0Patch", Multiple Air-Gapped backup drives in different locations. Linux Mint Greenhorn
--
"...all the people, all the time..."Peter Ustinov ad-lib in "Logan's Run"

Reply | Quote

@PKCano….Windows 7 Pro x64..Quick question ? I just installed the March updates and afterwards it offered me the KB4490628 and I installed it, but I was not offered KB4474419 or the nag update KB4493130. My question is, do I need to manually install the KB4474419 or am I go to go?

Reply | Quote

Search again and see it you get KB4474419. If you do, install it. It will not be mandatory until July, so you have time, but you will need it in any case before then.

1 user thanked author for this post.

bobcat5536

Reply | Quote

I thought I would go ahead and install it anyway, but when I went to, it said it was already installed. I checked my installed updates and sure enough, there it was. Funny thing, because it was not offered. It just got installed without showing up in the offered updates. The nagware one wasn’t there, so that’s a good thing.

Reply | Quote

Will take care of patching Windows 8.1, but according to the Patch Lady, I’ll skip Office 2013. In the latest newsletter, all the patches are Japanese-era related. Since I’m not taking my lap to Japan anytime soon, I can wait until next month, right? Office Click-to-Run updates are cumulative, Right?

Bought a refurbished Windows 10 64-bit, currently updated to 22H2. Have broke the AC adapter cord going to the 8.1 machine, but before that, coaxed it into charging. Need to buy new adapter if wish to continue using it.
Wild Bill Rides Again...

Reply | Quote

Susan

KB4490481 cumulative update is now mentioned on MS Update Catalog:
https://www.catalog.update.microsoft.com/Search.aspx?q=4490481

and running a recent windows update scan on my ltsc 2019 (v1809) machine seems to be getting KB4490481 which updates the build number to 17763.404.

also new servicing stack update for win10 v1809 – KB4493510 also in the Catalog:
https://www.catalog.update.microsoft.com/Search.aspx?q=4493510

Reply | Quote

Installed kb4490628, no restart required but restarted anyway. Waited 10 minutes then installed kb4489878, kb4474419, kb890830. So far no problems. Kb4493132 came in March 20th and was hidden, it showed up again March 27th and was hidden. March 28th it disappeared from hidden and has not come back.

Edition Windows 11 Pro
Version 22H2
Installed on ‎10/‎19/‎2022
OS build 22621.1105

3 users thanked author for this post.

jburk07, Lars220, Myst

Reply | Quote

fernlady wrote:

Installed kb4490628, no restart required but restarted anyway. Waited 10 minutes then installed kb4489878, kb4474419, kb890830.

@fernlady, I guess you must have downloaded the SSU KB4490628 from the catalog?

Just trying to decide whether to do that and install it first or wait until everything else has been installed using Windows Update and then hope it appears there.

Linux Mint Cinnamon 19.3
Group A:
Win7 Pro x64 SP1 Haswell, 0patch Pro, dual boot with Linux
Win7 Home Premium x64 SP1 Ivy Bridge, 0patch Pro
Win 10 Pro x64 v21H2 Ivy Bridge, dual boot with Linux

Reply | Quote

If you know how to download it from the Catalog, it would be better to install it first, wait 10 min, reboot, then install everything else.

Otherwise, you could HIDE everything else temporarily and it will show up when there is nothing left in the queue. Then unhide the other ones and install them.

1 user thanked author for this post.

jburk07

Reply | Quote

Would unchecking those other updates do the same thing as hiding them? If it did, that would be easier than having first to hide and then unhide them.

Ex-Windows user (Win. 98, XP, 7); since mid-2017 using also macOS. Presently on Monterey 12.15 & sometimes running also Linux (Mint).

MacBook Pro circa mid-2015, 15" display, with 16GB 1600 GHz DDR3 RAM, 1 TB SSD, a Haswell architecture Intel CPU with 4 Cores and 8 Threads model i7-4870HQ @ 2.50GHz.
Intel Iris Pro GPU with Built-in Bus, VRAM 1.5 GB, Display 2880 x 1800 Retina, 24-Bit color.
macOS Monterey; browsers: Waterfox "Current", Vivaldi and (now and then) Chrome; security apps. Intego AV

Reply | Quote

Unchecking doesn’t work. The queue has to be empty. The SSU has to be the only available update in the Important updates queue for it to show up.

1 user thanked author for this post.

OscarCP

Reply | Quote

PKCano wrote:

If you know how to download it from the Catalog, it would be better to install it first, wait 10 min, reboot, then install everything else.

Otherwise, you could HIDE everything else temporarily and it will show up when there is nothing left in the queue. Then unhide the other ones and install them.

Thanks, @pkcano. For the sake of simplicity I’ve downloaded it from the catalog to install first. There are only 9 updates to hide but that would still be a little time-consuming if there’s no particular advantage to the hide-install-unhide-install routine.

Linux Mint Cinnamon 19.3
Group A:
Win7 Pro x64 SP1 Haswell, 0patch Pro, dual boot with Linux
Win7 Home Premium x64 SP1 Ivy Bridge, 0patch Pro
Win 10 Pro x64 v21H2 Ivy Bridge, dual boot with Linux

Reply | Quote

KB4490628 came in from windows update. I hid all updates and then checked for updates again and it came in by itself.

Edition Windows 11 Pro
Version 22H2
Installed on ‎10/‎19/‎2022
OS build 22621.1105

1 user thanked author for this post.

jburk07

Reply | Quote

fernlady wrote:

KB4490628 came in from windows update. I hid all updates and then checked for updates again and it came in by itself.

Thanks, @fernlady. Judging from the various responses in this thread, sounds like many are having success either way.

Linux Mint Cinnamon 19.3
Group A:
Win7 Pro x64 SP1 Haswell, 0patch Pro, dual boot with Linux
Win7 Home Premium x64 SP1 Ivy Bridge, 0patch Pro
Win 10 Pro x64 v21H2 Ivy Bridge, dual boot with Linux

Reply | Quote

I had kb4490628 downloaded and saved from the Catalogue and installed it before I ever used WU. Slipped in like an oyster, no problem at all. Then I restarted, waited 15 mins and ran WU for the rest. Going about this month’s updates any other way seems almost perversely circuitous.

4 users thanked author for this post.

SueW, jburk07, Myst, OscarCP

Reply | Quote

Dear TSP: Your advice is well taken, but it is really useful to Group B people. Not an option for those in Group A that, by definition, is made up of people that do not install things from the Catalog but rely on Rollups and whatever else WU offers them and they are not advised against installing, here at Woody’s.

Some of them could, perhaps, became Group B (it’s not hard) and that would probably mean less grief for them, if they did. Judging by the difference in the variety and the seriousness (but not the numbers, as the two groups’ sizes are very different) of the complaints, post-patching, often heard from both groups.

Group B Win 7 [Pro, Sp1, x64] + M&L (Mac and Linux Mint)

Ex-Windows user (Win. 98, XP, 7); since mid-2017 using also macOS. Presently on Monterey 12.15 & sometimes running also Linux (Mint).

MacBook Pro circa mid-2015, 15" display, with 16GB 1600 GHz DDR3 RAM, 1 TB SSD, a Haswell architecture Intel CPU with 4 Cores and 8 Threads model i7-4870HQ @ 2.50GHz.
Intel Iris Pro GPU with Built-in Bus, VRAM 1.5 GB, Display 2880 x 1800 Retina, 24-Bit color.
macOS Monterey; browsers: Waterfox "Current", Vivaldi and (now and then) Chrome; security apps. Intego AV

Reply | Quote

@thesurfingpensioner – I did the same, just posted the results, all is well. Just felt better going to the catalogue for the SSU, then the usual WU in the control panel. Worked like a charm

MacOS, iOS, iPadOS, and SOS at times.

1 user thanked author for this post.

jburk07

Reply | Quote

well my machine running v1809 now has 4490481 CU (build 17763.404) and 4493510 SSU installed as I just did a recent WU scan

Reply | Quote

Reporting in: One of my W7’s so far, Installed KB 4489878 Rollup (Grp. A), KB 4474419 SHA-2, and MSRT. I installed KB 4490628 SSU from the catalog the other day to get ahead of things.

I saw nothing of the W10 nag KB 4493132.

A little early to tell, but I see no problems so far.

I updated the 2nd W7 computer and received the same KB’s as the 1st one and still no W10 nag KB.

Don't take yourself so seriously, no one else does 🙂
All W10 Pro at 22H2,(2 Desktops, 1 Laptop).

2 users thanked author for this post.

MrToad28, jburk07

Reply | Quote

read one of my recent comments about KB4493132: it is NEVER offered to Win7 Pro & Win7 Enterprise; only home & ultimate editions of W7 will get offered KB4493132 at some point this year

2 users thanked author for this post.

MrToad28, rick41

Reply | Quote

AGAIN !  Just installed March updates and for the third time now, M$ has messed with Windows Media Player. Had to go through the setup again. Not a real big deal, as it only takes a minute. But, leaves a person wondering Why ??

2 users thanked author for this post.

SueW, fernlady

Reply | Quote

Group A, Win7 64-bit.  As is frequently the case lately, Windows Media Player had to be reconfigured after the updates.  Annoying, but it only takes a minute to address because it essentially saves my old configuration.  Specifics:

Open wmplayer (which for me points to C:\Program Files (x86)\Windows Media Player\wmplayer.exe).  It will open to the first Configure screen.  Choose Custom Settings and click Next. Next tab should have preserved all your old choices, so just click Next again.  Choose “Choose the file types Windows Media Player will play” and click Next (unless you use WMP as your default video and audio player, in which case you should choose the “Make default” option).  The displayed associations list should be unchanged from what you had before, but you might want to skim through to be sure.  If OK as expected, just click cancel.  On the final configuration screen refuse the Bing online store unless you use it.

After that simple process, I always find that the ONLY setting that has changed in the player itself is that “Check for Updates” in Options went from once a month to once a week, so I just change it back to monthly (not that it ever checks anymore, anyway…)

 

Reply | Quote

Group B-er here, having an issue installing KB4474419 on W7 x64 Pro, which always fails and reverts. I have all Servicing Stack updates and all other March updates installed.

From a quick google, it seems that this is a fairly common issue with this update and is related to either systems that use Legacy BIOS booting instead of UEFI or systems that had Windows installed onto a pre-partitioned drive, both of which apply to my system.

The workarounds seem either dangerous over overly laborious, and since we don’t need this update until July or so, I’m going to bide my time and wait for a more straightforward fix from the community, or ideally, a fixed update from MS.

4 users thanked author for this post.

samak, SueW, OscarCP, jburk07

Reply | Quote

Similarly, all updates went in OK for me except KB4474419 failed with error 8E5E0442. I think I will also wait and hope MS fix it.

Windows 10 Home 22H2, Acer Aspire TC-1660 desktop + LibreOffice, non-techie

2 users thanked author for this post.

Vols and Jezuz

Reply | Quote

You may want to tale a look at these:

MS Social technet and this.

Both recommend the same thing to fix that error.

1 user thanked author for this post.

samak

Reply | Quote

Success! While the manual details in those 2 links were terrifyingly complicated to this non-techie, there was a link to the Windows Update Troubleshooter (which I didn’t know existed) at the bottom of the second one. I thought I would start there since it required no knowledge on my part! Ran the troubleshooter and it told me it had fixed 3 out of 4 errors, 2 of which were described as “Problems installing recent updates”.
This sounded hopeful so I tried reinstalling the update again and this time it worked. The only oddity was that after rebooting and finishing configuring to 100% it spent about 10 minutes with “Cleaning Up, Do not turn off your computer” showing on the screen.
Thank you very much for your help.
The link to the troubleshooter is:
https://support.microsoft.com/en-us/help/10164/fix-windows-update-errors

Windows 10 Home 22H2, Acer Aspire TC-1660 desktop + LibreOffice, non-techie

Reply | Quote

samak wrote:

Similarly, all updates went in OK for me except KB4474419 failed with error 8E5E0442. I think I will also wait and hope MS fix it.

Thanks for sharing your problem and solution. Unfortunately, I have a different error code (80004005) that seems to be a lot less straightforward to fix. The Windows Update Troubleshooter found 4 issues and fixed them, but KB4474419 still failed in the exact same manner. I ran Windows Update Troubleshooter again afterwards and it found 2 of the same errors again. Don’t think it can fix whatever issue my PC has with the SHA-2 updates.

I’m basically out of ideas at this point. The only solution I’ve seen that seems to work is to make a new System Reserved partition, go into Windows Recovery Environment, and use bootrec to basically make a new boot sector. I really don’t want to be meddling in such minefields… I’d almost rather just abandon the Group B ship and make a new home on a Group W floating piece of debris.

Reply | Quote

Demeter wrote:

Just installed KB4489878, KB4474419, KB890830 with no problems. Didn’t see KB4493132 offered. Win 7 Pro, SP1, Grp. A, i7Core “Haswell”.

I had KB4493132  showing in the optional  updates for April  so I  hid it.

I did not have to go and look for KB 4490628  because a short while after I had installed KB4489848, KB4474419 & KB890830   – KB4490628  suddenly appeared – save me going to look for it 🙂

 

2 users thanked author for this post.

MrToad28, jburk07

Reply | Quote

Windows 7 SP1 64bit, with Broadcom network card. Group B.

Installed March’s updates; IE KB4489873 and SO KB4489885 today.

From the catalog; Installed IE KB4489873 1st, SO KB4489885 2nd and MSRT (from WU) 3rd.

Installed one at a time. Rebooted in between each update letting it sit 1 minute or 2 after update was installed.

No network issues. No oddities – other than slow boot.

Rebooted 3 times and let it sit for several minutes. (Reboots 1 and 2 were slow, about 3x as long.)

Did NOT install the servicing stack or SHA256 updates yet. I didn’t see to do so per woody, and wanted a month to pass by. Not needed at this time. Will be needed this summer. Plus, this askwoody page does NOT show them: https://www.askwoody.com/forums/topic/2000003-ongoing-list-of-group-b-monthly-updates-for-win7-and-8-1/

I would recommend people on the last reboot to go to the desktop and let it sit 45 to 60 minutes to Process Idle Tasks and let the trusted installer (as per PKCano) do its thing.

Thanks to all here.

Reply | Quote

You should go ahead and install the SSU KB4490628 and the SHA-2 update KB4474419

2 users thanked author for this post.

Elly, jburk07

Reply | Quote

@ anonymous Post #348229:

Did NOT install the servicing stack or SHA256 updates yet. I didn’t see to do so per woody, and wanted a month to pass by. Not needed at this time. Will be needed this summer. Plus, this askwoody page does NOT show them: https://www.askwoody.com/forums/topic/2000003-ongoing-list-of-group-b-monthly-updates-for-win7-and-8-1

Per Woody, in both his blog post and the linked ComputerWorld article:

There’s only one patch you should studiously avoid this month — Win7’s KB 4493132, the “Get Windows 10” nag patch.

In the directions Woody posted in the ComputerWorld article, he said:

If you insist on manually installing security patches only, follow the instructions in @PKCano’s AKB 2000003

(bolding mine).

He didn’t say just to install the Security Only Updates for Group B. If you follow the link and read through the instructions, after installing the Security Only and IE 11 cumulative updates, Step B3 is to manually check for updates… and the following steps are to hide the Monthly Quality and Security update and any telemetry, or problematic updates that may show up (remember, Woody has said twice only to avoid Win7’s KB 4493132, the “Get Windows 10” nag patch). Step B6 is to install the remaining patches- KB 4474419, the SHA-2 patch, would be one of these… so, yes, Woody is saying to install it. Step B7 is to rerun Windows Update and ‘Wash, Rinse, Repeat’ until no new patches are offered. That would reveal the servicing stack update, so it can be installed individually.

You may still decide to delay installing the SHA-2 patch, and the Servicing Stack update, but that is your decision, and not what Woody’s instructions are. The patches are not included in the list for manual download in the Group B instructions, because they show up in Windows Update, and should be installed from there.

Non-techy Win 10 Pro and Linux Mint experimenter

1 user thanked author for this post.

SueW

Reply | Quote

Hello Elly, anonymous #348229 here. Thank you for the clarification and caring that you always give to people. We have conversed in the past.

Your posts and others, like SueW, have good information, easy steps to follow and are detailed.

I have done my March updates, have switched to “relaxed mode” and have decided to wait for the SSU and SHA256 until next month. I will let them settle a while, and will tackle that issue later with the April updates (most likely approved in May). I will most likely do the SSU and SHA256 individually and before the April installs.

It would be nice if the Group B list had these in there for a reference, but that has been discussed by me with the .NET SO updates in the past and they too are not in that list.

I also was hoping for a bit more fanfare from Woody on the SSU and SHA256. When I did not see that, I thought, “Humm, OK. I will do it next month”.

Thank you Elly (PKC, Woody … and others here).

Windows 7 SP1 Group B

2 users thanked author for this post.

SueW, Elly

Reply | Quote

Hello, Anonymous ##348229,

Thank you for your kind words… but looking back on my reply, I’m not sure that I was able to clarify anything… some days are better than others…

Now… I’m someone who flipped to Group W, as of December 2017, and been very happy staying there, but that was a conscious decision, weighing risks and benefits, which is quite different from people thinking they are updated, but who really aren’t. Certainly, I’m not one to say you have to update. One of the benefits of the Lounge is getting solid information to base one’s choices on… and it looks like you have reviewed the information available and made your choice. Just don’t forget that you haven’t installed those two updates, while you are waiting for them to shake out some more.

anonymous wrote:

It would be nice if the Group B list had these in there for a reference, but that has been discussed by me with the .NET SO updates in the past and they too are not in that list.

As you said, it would be nice… but Group B is already a minority of users… and since .NET updates do not contain telemetry (the reason most of us became Group B) most of the minority of users install the cumulative version that comes through Windows Update. That leaves very few people actually using the .NET security only updates.

Actually, we are blessed that PKCano maintains the Group B updates list for us, as otherwise we’d need to get them from the catalogue. The servicing stack updates and the SHA-2 update are available to everyone through Windows Update, not requiring downloading from the catalogue.

I remember you mentioning including the .NET security only patches as part of the Group B list previously… but I don’t remember if you started a topic about it in Suggestions about improving the Lounge, which are reviewed periodically… and maybe someone will see it and take it on? I’m not hopeful about that, but if you are seeing a clear need for it, maybe you could be convincing enough… or maybe you could register and volunteer to keep such a topic updated and links current? Just an idea… 🙂

Non-techy Win 10 Pro and Linux Mint experimenter

Reply | Quote

Hello again Elly, Canadian Tech is a Group W if I recall and has not had any issues at all after what … 24 months now?

I have brought up the Group B Security Only list as needing a few more SO .NET patches (and SSU, SHA256, etc.) added for completeness. Cybertooth once was asking for a list to go by as a Group B user and I agreed with him. We do need a Group B list to get from freshly installed Windows 7 OS to the present. Canadian Tech has a list like that and it looks very good. But this is my opinion and not everyone agrees.

Here are the comments I made and Canadian Techs suggestions.
https://www.askwoody.com/forums/topic/the-most-recent-servicing-stack-updates/#post-224842

https://www.askwoody.com/forums/topic/ms-defcon-3-time-to-patch-but-be-aware-of-network-busting-bugs-in-win7/#post-196083

http://www.canadiantech.info/for-techies/re-build-windows-7/re-install-windows-7-ii/

http://www.canadiantech.info/for-techies/re-build-windows-7/rebuild-windows-7-july-2018/

Thanks again.

1 user thanked author for this post.

Elly

Reply | Quote

My instructions are for “Group A” — the Monthly Rollup folks. If you need help manually installing individual patches (“Group B”), PKCano is the expert – with a great assist by Elly.

1 user thanked author for this post.

Elly

Reply | Quote

Group A Win7 x-64.  Installed all three Important-tab updates I was offered (4489878, 4474419 and  890830), all of which were pre-ticked.  When finished, 4490628 (servicing stack) popped up and I installed it.  I was never offered 4493132 in either Important or Optional…not that I want it.  As mentioned in prior post, I had to take a minute to configure WMP again…mainly just clicking OK to retained settings.

1 user thanked author for this post.

jburk07

Reply | Quote

Everything looks good. Went to the MS Catalogue and manually Downloaded/Installed the SSU KB4490628. No restart required but I did just because. Went to WU on the PC and switched from “Never …” to “Download updates but let me choose.” Downloaded/Installed the Rollup KB4489878, took longer than the usual for the Rollup, restart req’d, let it sit for about 20 min. and downloaded/installed KB4474419, restart req’d, waited a few minutes then installed the MRT KB890830. KB4493132 didn’t come through, checked the Task Scheduler, all is free and clear. Reset WU to “Never check …” Before and after the updating process I did a system image on the external HD. BTW, all “checked” 2010 Office updates went smoothly.

MacOS, iOS, iPadOS, and SOS at times.

1 user thanked author for this post.

jburk07

Reply | Quote

Just finished upgrading Windows 10 1803 to 1809 (17763.404).
Microsoft honored my ‘no store apps’ and the blocked Microsoft Store and hasn’t reinstalled any apps.
Privacy settings remain unchanged.

The only ‘fix’ I did was changing the horrible files font using Portable System Font Size Changer app.

Edit : 2 hours after installing 1809 I got .Net KB4480056, KB4486553, KB4483452. Flash Player KB4489907, KB446930.

Reply | Quote

Reporting in….thanks to Woody, Susan, and the great staff here, installed:

2019-03 Security Monthly Quality Rollup for Windows 7 for x64-based Systems (KB4489878)

2019-03 Security Update for Windows 7 for x64-based Systems (KB4474419)

…rebooted, check again, and then was offered:

2019-03 Servicing Stack Update for Windows 7 for x64-based Systems (KB4490628)

…and all is well.

For now. If only ALL monthly patches were this smooth!

Win7 Pro SP1 64-bit, Dell Latitude E6330, Intel CORE i5 "Ivy Bridge", 12GB RAM, Group "0Patch", Multiple Air-Gapped backup drives in different locations. Linux Mint Greenhorn
--
"...all the people, all the time..."Peter Ustinov ad-lib in "Logan's Run"

2 users thanked author for this post.

rontpxz81, jburk07

Reply | Quote

All installed on 3 PCs running Windows 7 Home Premium (one has Office 2010 installed). No problems at all. No signs of GWX reminders (KB4493132 hidden on all). KB4490628 showed up after main update.

1 user thanked author for this post.

jburk07

Reply | Quote

Hello everyone.

All installed correctly yesterday for OS Build 17763.404.

But I did not receive the patch for .NET Framework 3.5 and 4.7.2 for Windows 10 version 1809 (KB4489192) on Windows Update.

Reply | Quote

Do you have those versions of .NET installed on you PC? You won’t get updates for .NET you do not have.

Reply | Quote

Hello @PKCano.

I recently did a clean install of W10 1809.

The updates to the .Net Framework I received were are KB4486553 and KB4480056.
According to the “Netver” tool, I have the following situation:

<32Bit>
4.7.3362.0
-> C: \ Windows \ Microsoft.NET \ Framework \ v4.0.30319
4.7.3362.0
-> C: \ Windows \ Microsoft.NET \ Framework64 \ v4.0.30319

<.NET Frameworks installed>
General version of .NET FW 4.6.2 (CLR: 4.0)
General version of .NET FW 4.7 (CLR: 4.0)
General version of .NET FW 4.7.1 (CLR: 4.0)
General version of .NET FW 4.7.2 (CLR: 4.0)

Reply | Quote

KB4489192 is a non-security update. It is like a Preview. You probably will not see it through the usual channels in Windows Update.

Reply | Quote

@PKCano

Thank you very much for your clarification on this my doubt.

Greetings

Reply | Quote

Reporting results:

Installed SHA-2 update KB4474419 separately, first, using Windows Update, just to see if it had any problems as reported by some with Legacy BIOS booting, as I have. No problems installing or after restart.

Downloaded the SSU KB4490628 from the catalog and installed next. Restarted although it didn’t call for it.

Used Windows Update to install the rollup KB4489878 and restarted. Took a little longer than usual to install, but no problems.

Finally, installed the Office 2010 updates without problem.

The only Important update left in WU now is the April non-security Outlook 2010 patch, unchecked. The EOS nag patch KB4493132 hasn’t appeared anywhere.

All of my anti-telemetry settings are still in place.

Thanks as usual to everyone here for all the great information and advice.

Linux Mint Cinnamon 19.3
Group A:
Win7 Pro x64 SP1 Haswell, 0patch Pro, dual boot with Linux
Win7 Home Premium x64 SP1 Ivy Bridge, 0patch Pro
Win 10 Pro x64 v21H2 Ivy Bridge, dual boot with Linux

4 users thanked author for this post.

dgreen, rontpxz81, Myst

Reply | Quote

Glad you got everything in with no issues!

MacOS, iOS, iPadOS, and SOS at times.

1 user thanked author for this post.

jburk07

Reply | Quote

Thanks, @willygirl, it’s always a relief when it works. And it’s always a big help to read the reports of others here, along with the helpful advice of @Woody, @Susan, and @PKCano, to gauge the possibility of success. Thanks for your posts.

Linux Mint Cinnamon 19.3
Group A:
Win7 Pro x64 SP1 Haswell, 0patch Pro, dual boot with Linux
Win7 Home Premium x64 SP1 Ivy Bridge, 0patch Pro
Win 10 Pro x64 v21H2 Ivy Bridge, dual boot with Linux

Reply | Quote

jburk07 wrote:

Installed SHA-2 update KB4474419 separately, first, using Windows Update, just to see if it had any problems as reported by some with Legacy BIOS booting, as I have. No problems installing or after restart.

So I think that narrows it down to having installed Windows on a pre-partitioned drive as being the problem for those who fail install of KB4474419. I really don’t want to mess with my partitions or boot sector to allow this update to install. I would love an explanation as to why Windows needs a separate System Reserved partition to be able to install the SHA-2 update.

Reply | Quote

@ Vols and Jezuz

You quoted:

Vols and Jezuz wrote:

jburk07 wrote:

Installed SHA-2 update KB4474419 separately, first, using Windows Update, just to see if it had any problems as reported by some with Legacy BIOS booting, as I have. No problems installing or after restart.

I don’t understand how you have drawn this conclusion below:

Vols and Jezuz wrote:

So I think that narrows it down to having installed Windows on a pre-partitioned drive as being the problem for those who fail install of KB4474419.

I can not see where @ jburk07 made any statement about how his Windows install was to a pre-partitioned drive–it only says he is using the older legacy BIOS firmware instead of the newer Unified Extensible Firmware Interface(UEFI).

Vols and Jezuz wrote:

I would love an explanation as to why Windows needs a separate System Reserved partition to be able to install the SHA-2 update.

I’m not sure that conclusion is valid–at least not in all cases. I have a system that has the *Legacy BIOS* firmware. I did pre-partition my hard drive prior to installing Win7 so as to avoid having a *System Reserved* partition created, and today I installed the *SHA-2 update KB4474419*, and then installed the *Servicing Stack Update (KB4490628)*–all successfully without any problems during the install, or with restarting the system afterwards.

Vols and Jezuz wrote:

I really don’t want to mess with my partitions or boot sector to allow this update to install.

So, are you having a problem with installing the *SHA-2 update KB4474419*, and the *Servicing Stack Update (KB4490628)*? Maybe a new Topic in the appropriate Win7 forum …

Reply | Quote

I was saying it seemed to me like the problem was because of the pre-partitioned Windows install, since he was able to successfully install KB4474419 with Legacy BIOS booting, presumably not on a pre-partitioned drive since he didn’t mention it. Meanwhile, I had failed that update with the suspected causes as either Legacy BIOS booting or having installed Windows on a pre-partitioned drive. And since Legacy BIOS didn’t seem to be causing him issues, I made that conclusion.

However, it sounds like your Windows and boot settings are just like mine and you didn’t have the issues with KB4474419 that I’m having, so there must be another cause. I have no idea what it would be now.

I have the SSU (KB4490628) installed without issue. But KB4474419 always fails to finish installing and reverts during the reboot process. Susan Bradley said she would be doing a special newsletter on the SHA updates, so I was planning to wait on making a new topic until after that is done, in case I am able to glean a solution from the newsletter.

I think the fact I was never able to install KB3033929 either is related. I think the solution would be to create a System Reserved partition and then using bootrec commands, but I really don’t want to have to do that.

Reply | Quote

Installed updates on 2 machines without problems to date.

Neither offered me 4493132 – perhaps MS has worked out who reads AskWoody and has given us a miss!

Both offered 4474419 first time around. Second time of checking for updates, the PC with Office 2007 offered 4490628 and installed fine. The PC with Office 2010 did not, because the non-security update 3114559 released yesterday, that WU itself unchecked, blocked it. I  hid 3114559, WU found 4490628 and installed it OK, then I restored 3114559, in its unchecked form. All seems fine.

MS – your really make this intuitive for us, don’t you!

Chris
Win 10 Pro x64 Group A

1 user thanked author for this post.

jburk07

Reply | Quote

Why the bleep cannot I post a response; get Wordfence window.   I’ll email you what I was going to post and then you can tell me what the problem is, Woody, since, for the life of me I cannot see what it could be.

Reply | Quote

What happened? Did you get a Wordfence block when trying to post – or were you blocked when trying to log on?

Here’s Lyle’s post:

Yeah; 2 weeks ago, I too got tired of waiting for Microsoft to push the 1809 on me so forced the issue.   No real regrets.    Got the 1809 update yesterday as well.   lol

Took forever for my then blank display to show the Orange screen progress screen though and was about to pull the reset card when the screen showed itself.   At the time before the Orange screen, I though,, Oh boy; what did Microsoft do to my machine now.   lololol

Reply | Quote

On 1709 since Spring 2018, and ran the Auto Updates again after installing March updates, expecting to be fed the (finally) SAC 1809 and got fed only 1803 (17134.677).

I was originally going to use the Media Creation Tool and install 1809 but I was curious what MS would feed me as a ‘safe’ bet. Maybe it’s a blessing to get stuck with 1803 but it simply means another potential hassle in six months.

I can find no apparent reason to be fed 1803 over 1809, maybe my 2014 era Corei3-4010U laptop doesn’t meet MS specs for 1809, in some alert I’ve missed. Acer hasn’t updated drivers or firmware since 2015, but that didn’t much affect running previous Feature versions. In computer years 2014 is close to the KT Boundary Event, so maybe I’m getting sent a hint.

Reply | Quote

….. can find no apparent reason to be fed 1803 over 1809, maybe my 2014 era Corei3-4010U laptop doesn’t meet MS specs for 1809, in some alert I’ve missed.
– – – –
———–
I am surprise my old Asus Rog g74 sx runs 1809 like a champ! It was a good investment, bought it for my daughter in early 2011, she was beginning studies in 3d animation. So it run heavy softwares, and of course, many games during 3 years. Took it for myself when the [kvetch] connector broke again (changed it 3 times over the years) It also needed a new battery. I did some repairs-upgrades and bought w10 pro, to test that OS.

Asus had not released any drivers updates for g74 sx but generic drivers work fine. I am curious to see how long it will support w10…

I am now (mainly) on the apple side. Imac and Macbook. Was a bit fed up with the ‘get w10 campaign’ on w7… That is when I discoverd Askwoody.com LOL

My daughter pursued other studies in 3d, graduated recently and now works on an upcoming videogame!!! She has no choice to use windows.. She crosses her fingers, on 2 recent computers, desktop and laptop, no big issues for now with 1809…

Reply | Quote

Word of warning regarding KB4493132. It appeared again today ( 4 Apr ) even though I set it to hidden. This applies to members running Windows 7.

4 users thanked author for this post.

jburk07, SueW, Elly, woody

Reply | Quote

Agreed. Had it hidden on mine and it is now back. Hid it again.
Windows 7 SP1 Group B

2 users thanked author for this post.

jburk07, SueW

Reply | Quote

It is showing up as optional when I manually checked today… and says it was published yesterday.

Non-techy Win 10 Pro and Linux Mint experimenter

2 users thanked author for this post.

jburk07, SueW

Reply | Quote

the KB4493132 update never showed up on WU on my Win7 computer as long as I’m running Win7 Pro.

KB4493132 is only offered to home basic, home premium and Ultimate editions of Windows 7, never to those using Pro or Enterprise versions

Reply | Quote

Reporting in on installing March updates

Installed the Servicing Stack KB4490628 this morning. No issues.
(I actually hid all the updates and  the SS update showed up.)
Shut down computer until a little while ago.

Restored my hidden updates KB4474419 and KB4489878 (roll up)
Installed the roll up.
No issues.

Did not install the SHA2 update KB4474419
deceided that I have until July to install it.
Waiting to see if their are any hiccups down the road for those who did install it.

KB4493132 Did not come out of hiding.  (still hidden)

Dell Inspiron 660 (new hard drive installed and Windows 7 reloaded Nov. 2017)
Windows 7 Home Premium 64 bit SP 1  GROUP A
Processor:  Intel i3-3240 (ivy bridge 3rd generation)
chipset Intel (R) 7 series/C216
chipset family SATA AHCI Controller -1 E02
NIC Realtek PCLE GBE Family Controller

MSE antivirus
Chrome browser

1 user thanked author for this post.

jburk07

Reply | Quote

KB4493132 is now a V3 version; found this recorded in the WindowsUpdate.log file in the Windows folder on my bro’s Sony vaio laptop using Win7 SP1 home premium x64 after doing a WU search earlier today:

http://download.windowsupdate.com/d/msdownload/update/software/updt/2019/04/windows6.1-kb4493132-v3-x64_4f9788262d6c2df7556047bca4cabb3c8a7840e9.msu

gonna upgrade my family’s Dell Inspiron 620 desktop PC from running Win7 home premium to Win7 Professional later this year – that way the computer won’t be offered the KB4493132 update

1 user thanked author for this post.

jburk07

Reply | Quote

Checking in after updating:

1 – imaged my disk with Macrium Reflect

2 – downloaded KB4490628 [Servicing Stack Update] from the Windows Catalog and installed it first; waited 10 minutes for the installation to complete and then rebooted

3 – downloaded Updates KB4489885 (Mar. SO) and KB4489873 (IE11 Mar. Cumulative)

4 – installed each Update and then rebooted; waited 15 minutes

5 – checked “Windows Update” => 9 Important: 6 Office 2010 (5 checked; 1 unchecked) and 3 Win 7 (all checked); 2 Optional: both unchecked

6 – hid the 1 unchecked Important Office non-Security Update: Outlook 2010 (KB3114559) => related to Japanese error patching

7 – unchecked and hid “Important” Update KB4489878 (Mar. Rollup)

8 – hid the 2 unchecked “Optional” updates: KB4489892 (Mar. Preview Rollup) and KB4493132 <= the dreaded Windows 10 nag patch

9 – checked “Windows Update” again => 7 Important: 5 Office 2010 and 2 Win 7: all checked; 0 Optional

10 – unhid 0 hidden updates to install

11 – installed 7 Updates: 5 Office 2010 (KB4462226, KB4018363, KB2589339, KB4461626 and KB4462229), plus MSRT (KB890830) and the SHA-2 Update (KB4474419)

12 – rebooted; waited 60 minutes (until the hard drive light stopped flashing)

Note: needed to reconfigure Windows Media Player (after not having to for the past 2 months)

As always, my thanks to Woody, PKCano, and all the other folks who continue to contribute their time and expertise!

Win 7 SP1 Home Premium 64-bit; Office 2010; Group B (SaS); Former 'Tech Weenie'

Reply | Quote

Hello SueW, anonymous #348229 here. We have also conversed in the past.

Thank you for your precise accounting of the patch installs you do. These are always helpful to others.

I see you waited “60 minutes (until the hard drive light stopped flashing)”. That is a long time for it to cleanup and do Idle Tasks. The key was waiting for the hard drive to stop flashing. Good observation.

You can force the Idle Tasks if you want by the administrative command prompt: rundll32 advapi32.dll,ProcessIdleTasks

You can do that and then walk away for 15 to 20 minutes. If the drive light is still on, it is still running, walk away again.

Several items take place and I can not remember all, but one is a defragmentation of “boot files” and reordering their placement on the drive for faster booting.

Windows 8.1 seems to have a notification flag telling you that the process is running when done by command line. Our 8.1 PC took about 60 minutes.

With Vista and Windows 7, it takes 5 to 20 minutes depending on what tasks need to be done at that time.

I have done this for years and sometimes a sluggish PC is helped and runs normal again, just from letting it sit.

Thank you again.

Windows 7 SP1 Group B

1 user thanked author for this post.

SueW

Reply | Quote

Greetings, anonymous #348229!  Indeed, I remember conversing with you in the past.

Thank you for providing details on how to speed up the Idle Tasks, as they certainly can take quite a while.  And I’m sure others here will also benefit from your instructions.  Thanks again.

Win 7 SP1 Home Premium 64-bit; Office 2010; Group B (SaS); Former 'Tech Weenie'

Reply | Quote

SueW wrote:

Note: needed to reconfigure Windows Media Player (after not having to for the past 2 months)

SueW
I, like you and some others, had to reconfigure Windows Media Player a few times.
Like you, it was not needed to be reconfigured the past 2 months.
However, I didn’t need to reconfigure the March updates.
The only difference I can tell is that I did not apply the KB4474419 (SHA2 update)
FYI I don’t have Office.

Dell Inspiron 660 (new hard drive installed and Windows 7 reloaded Nov. 2017)
Windows 7 Home Premium 64 bit SP 1  GROUP A
Processor:  Intel i3-3240 (ivy bridge 3rd generation)
chipset Intel (R) 7 series/C216
chipset family SATA AHCI Controller -1 E02
NIC Realtek PCLE GBE Family Controller

MSE antivirus
Chrome browser

1 user thanked author for this post.

SueW

Reply | Quote

@dgreen, another difference is that you are in “Group A,” and I’m in “Group B.”  I wonder if that’s the reason . . .  At least you had one less thing to change 😉

Win 7 SP1 Home Premium 64-bit; Office 2010; Group B (SaS); Former 'Tech Weenie'

1 user thanked author for this post.

dgreen

Reply | Quote

Windows 7: Patched 6 desktops W7Pro ~9 years old and 2 Laptops W7 home ~3-5 yr old. No problems. Started with 2 back-up PC’s..did patching sequentially progressing as no problems seen: Restore pt, 3 patches – restart, restore pt, a small patch that showed up after the 1st 3. Ran spybot anti-beacon to shut off spying, created 2 more restore points. Easy peasy. Thanks to Wood and to all who commented on their patching experiences.

Reply | Quote

Because of the date of your post, I have to ask: Are you referring to the MARCH updates or the APRIL updates in your post?

Reply | Quote

Hello MrToad, Thank you for the report and good news but, as the other anon asked these are the MARCH updates right? Could you also give some information about the Type/model, CPU, Video card and Network card of those PCs updated? Also is this Group A or B?

Reply | Quote

Sorry for the late reply. My post refers to the March standard patches, Group A..I think..not the individual security only..the roll-ups. I always patch late and sometimes skip months when there are significant risks such as the Windows 7 NIC issue. Despite assurances that this was in the rear view mirror, I did experience a wifi issue with one laptop which repaired by reactivating the driver in device manager. I’m not saying this problem occurred because of the patch..it didn’t happen until days after the patch..but the patch may have caused the deactivation.

Reply | Quote

Upgraded to 1809. Ran wushowhide and saw I was offered KB4486553 and have scoured the Master Patch List looking for guidance on whether it is safe to install but it is not listed.  Did a general search on the site and found a few references from others indicating it had been offered, but it’s not clear if the majority of those folks installed it or not. Can someone please advise?  Thanks!

Reply | Quote

KB4456553 is a February update for .NET 3.5 and 4.7.2 for Win10 v1809. See the MS pages in the link for an explanation of the fixes it provides.

Reply | Quote

Thanks, @PKCano. I understand its stated purpose, just wondering why it didn’t show on Patch Lady’s radar and if it was safe. I am guessing you installed with no adverse impacts?

Reply | Quote

I install what comes through Windows Update. I didn’t see it listed on my v1809 machine. It should only show up if you have .NET 3.5 or 4.7 installed, and it doesn’t appear to be a security update. So, you can install it if you have those versions of .Net installed, but it is not mandatory unless it is delivered through WU by default.

Reply | Quote