News, tips, advice, support for Windows, Office, PCs & more. Tech help. No bull. We're community supported by donations from our Plus Members, and proud of it
Home icon Home icon Home icon Email icon RSS icon
  • MS-DEFCON 4: It’s time to get Windows and Office patched

    Home Forums AskWoody blog MS-DEFCON 4: It’s time to get Windows and Office patched

    This topic contains 99 replies, has 34 voices, and was last updated by  PKCano 5 months, 2 weeks ago.

    • Author
      Posts
    • #347924 Reply

      woody
      Da Boss

      There’s only one patch you should studiously avoid this month — KB 4493132, the “Get Windows 10” nag patch. Other than that, the sailing’s clear. Per
      [See the full post at: MS-DEFCON 4: It’s time to get Windows and Office patched]

    • #347933 Reply

      anonymous

      I’m using Windows 10 1809 since the begining at work. I hadn’t had problems with it. Thank goodness!

    • #347965 Reply

      Demeter
      AskWoody Plus

      Just installed KB4489878, KB4474419, KB890830 with no problems. Didn’t see KB4493132 offered. Win 7 Pro, SP1, Grp. A, i7Core “Haswell”.

      1 user thanked author for this post.
      • #347968 Reply

        PKCano
        Da Boss

        Check again and be sure you get the Servicing Stack KB4490628.

        1 user thanked author for this post.
        • #348085 Reply

          Demeter
          AskWoody Plus

          Re: KB4490628. Ran check for updates again and there it was. It downloaded and installed perfectly without a restart. Still not finding the “Get Win 10 nagware”, (not that I want it). Thanks PK. Win 7 Pro, SP1 x64, i7Core “Haswell”

          1 user thanked author for this post.
    • #347977 Reply

      TJ
      AskWoody Plus

      Updated my stand-alone dual boot Win7 Pro/Win10 Pro:

      Win7/Group B:
      Already installed Mar 2019 (IE11) KB 4489873 last week > o.k.
      Today installed Mar 2019 (S.O.) KB 4489885 > took a long time installing and finalizing after reboot, but seems o.k.

      Win10/1809 Version 17763.253:
      Installed 2019-02 Cumm.update for .NET Framework 3.5 and 4.7.2 for Windows 10 Version 1809 x64 KB 4486553 today > o.k.
      BUT WuMgr is also showing 2019-02 Cumm.update for Windows 10 Version 1809 x64 KB 4487044, which should ‘up’ me to Version 17763.316, but also seem to have caused loss of access to OneDrive.
      So what’s the latest on KB 4487044? Install or wait?

      (Also updated Office 365 last week > o.k.)

      • #347982 Reply

        PKCano
        Da Boss

        Win7 Group B: you also need the Servicing Stack KB4490628 (won’t show up till the WU queue is empty) and the SHA-2 update KB4474419.

        For 1809, the only CU you need is the one released on Patch Tues. The others are Previews (unless you have a specific problem that needs to be solved).

        4 users thanked author for this post.
        • #347984 Reply

          TJ
          AskWoody Plus

          Yes, will install SS and SHA-2 updates soon.

          What I don’t understand from your answer: should/can I install 4487044 or is that a Preview? (Doesn’t seem to be)

          • #347997 Reply

            PKCano
            Da Boss

            KB4487044 is the Feb CU. I would look at Woody’s ComputerWorld article and look at the MS pages to see if any of the problems apply to you.

            But you should be seeing the March CU KB4489899 instead. You don’t have it hidden, do you?

            1 user thanked author for this post.
            TJ
            • #348129 Reply

              TJ
              AskWoody Plus

              Thanks. Installed 4487044 meanwhile, after SSU 4470788 (1809 Build is now 17763.316).
              I was offered 4489899 in the first week(s?) of March, but it doesn’t show up anymore in WuMgr since March 21st.

              Also installed now on Win7: SSU 4490628 and SHA-2 4474419.
              Seems like 4490628 changed the boot menu font to something archaic, but no problems so far.

               

    • #347990 Reply

      honx
      AskWoody Lounger

      as always i installed group b only patches (win 7: kb4489885, kb4489873; win 8.1: kb4489883, kb4489873) and after reboot i installed all important and checked updates for office 2010 and msrt and flash, defender updates on 8.1 notebook.

      on windows 7 installation of office updates takes very loooooooong this time… something seems to go wrong this time…

      on windows 7 i’m not offered this kb4493132 nagware patch. instead there is another update “important” and checked: kb4474419 (security update for windows 7 x64) – this seems to be that sha-2-update. should i install this one too or should i wait?

      PC: Windows 7 Ultimate, 64bit, Group B
      Notebook: Windows 8.1, 64bit, Group B

      2 users thanked author for this post.
      • #348006 Reply

        PKCano
        Da Boss

        Install kb4474419 and then you should see the Servicing Stack KB4490628. You will need that one too.

        2 users thanked author for this post.
        • #348018 Reply

          honx
          AskWoody Lounger

          thx, i installed kb4474419 and now i’ll have to play that securityquality updates hiding game again in order to find kb4490628…

          this time i’ll leave these securityquality updates hidden…

          PC: Windows 7 Ultimate, 64bit, Group B
          Notebook: Windows 8.1, 64bit, Group B

        • #348072 Reply

          honx
          AskWoody Lounger

          i really had to hide all securityquality updates back to october 2016… hide, search for updates, hide, search again… finally kb4490628 showed up and i installed that ssu.

          fortunately that nag patch kb4493132 still doesn’t show. for whatever reason. anyway, i would have hid that nag patch, if it showed up…

          but now i have read on heise about an advice from microsoft about installing kb4490628 BEFORE installing any other march updates in order to prevent installation issues. so in this case i have done it wrong, i did the opposite. group b windows updates and updates for office 2010, msrt were installed already as i installed kb4490628.
          is this no problem or should i roll back? if so, then i’d have to hide all these securityquality updates again and temporarily i’d have to hide office 2010 and msrt updates also in order to be able to find that ssu again…

          PC: Windows 7 Ultimate, 64bit, Group B
          Notebook: Windows 8.1, 64bit, Group B

          • #348079 Reply

            PKCano
            Da Boss

            If you have no problems, then don’t worry about it.
            But in the future, maybe you should download the SSUs from the Catalog and install them first.

            4 users thanked author for this post.
            • #348091 Reply

              honx
              AskWoody Lounger

              don’t want to jinx it, but there seem to be no problem yet. besides installation of office 2010 patches which took a very looooong time today… but finally all office patches were installed successfully. let’s see if there still won’t be installation problems in future updates (april, may, june, … until eol early 2020)…

              and currently i’m not able to login to steam, but this problem seems to be not on my side, more on steam’s side as many users seem to have this problem right now. in other words, steam eu servers seem to be down at the moment. so it’s not windows update’s fault, it’s valve’s fault…

              as i never used that catalog, where exactly can i find it? is there a link for me to bookmark?

              PC: Windows 7 Ultimate, 64bit, Group B
              Notebook: Windows 8.1, 64bit, Group B

            • #348094 Reply

              PKCano
              Da Boss

              https://www.catalog.update.microsoft.com/Home.aspx

              2 users thanked author for this post.
    • #348005 Reply

      glnz
      AskWoody Plus

      Very happy to be a fan of Woody and PKCano.  (Group A and dual-booting Win 7 Pro 64-bit and Win 10 Pro 64-bit version 1803.)

      But there is a disconnect between Woody’s Defcon 4 today and Susan Bradley’s Master Patch List where most entries are still “Hold” – at least at the moment.

      What’s a non-tech to do?

      Anyway, on my Win 7 Pro 64-bit, I have installed PKCano’s recommended Servicing Stack KB4490628 and SHA-2 update KB4474419.  So far, so good.  Is there anything similar for Win 10 Pro 64-bit?

      • #348008 Reply

        PKCano
        Da Boss

        Win10 already has SHA-2 and the Servicing Stacks (supposedly) install along with the CU in the proper order if you are using Windows Update. You only need to worry about the SSU if you do a manual install.

      • #348017 Reply

        glnz
        AskWoody Plus

        Maybe I spoke too soon.

        On my Win 7 Pro 64-bit, I installed Servicing Stack KB4490628 yesterday and SHA-2 update KB4474419 just now.  After the new reboot, I went back to WU and now the 2019-03 cumulative update for .Net is gone.  I have only the 2019-03 cumulative update for Windows, which I am running now.

        What happened?

        • #348022 Reply

          PKCano
          Da Boss

          I haven’t seen a Win7 .NET CU for March. Are you sure that’s what it was and not the EOL nag patch KB4493132 (which you don’t want, by the way).

          • #348041 Reply

            glnz
            AskWoody Plus

            PKCano – I did not mark down what it was, but doing a new search on MS Update Catalog for “2019-03 .net” or “KB4488666”, I see the following for Win 7  64-bit:

            • 2019-03 Update for .NET Framework 3.5.1 for Windows 7 and Server 2008 R2 for x64 (KB4488662)
            • 2019-03 Update for .NET Framework 4.5.2 for Windows 7 and Server 2008 R2 for x64 (KB4488669)
            • 2019-03 Update for .NET Framework 4.6, 4.6.1, 4.6.2, 4.7, 4.7.1, 4.7.2 for Windows 7 and Server 2008 R2 for x64 (KB4488666)

            OK to try to install all three?

            • #348047 Reply

              PKCano
              Da Boss

              You only need .NET updates for the versions of .NET that are installed on your PC.

              I don’t believe a CU was released through Windows Update. That’s the only way I install them.

              2 users thanked author for this post.
            • #348071 Reply

              glnz
              AskWoody Plus

              PKCano – done only for 4.7.2 (only KB4488666), which is the only version of .net that Installed Updates and Belarc’s list of installed updates think I have.  Reboot OK – don’t see any problems.

              Thanks again.

      • #348097 Reply

        Susan Bradley
        AskWoody MVP

        My apologies for not updating the table!  I just flipped to install on the 3/12 updates.  I will be doing a special newsletter on all the SHA patches, ergo why I’ve held back on listing them all.

        Susan Bradley Patch Lady

        5 users thanked author for this post.
        • #348322 Reply

          Susan, see #348317 below…no tears so far.

          Win7 Pro SP1 64-bit, Dell Latitude E6330, Intel CORE i5 "Ivy Bridge", Group "Wait for the all-clear", Multiple Air-Gapped backup drives in different locations, "Don't check for updates-Full Manual Mode."
          --
          "...All the people, all the time..." (Peter Ustinov ad-lib from "Logan's Run")

    • #348077 Reply

      bobcat5536
      AskWoody Plus

      @pkcano….Windows 7 Pro x64..Quick question ? I just installed the March updates and afterwards it offered me the KB4490628 and I installed it, but I was not offered KB4474419 or the nag update KB4493130. My question is, do I need to manually install the KB4474419 or am I go to go?

      • #348080 Reply

        PKCano
        Da Boss

        Search again and see it you get KB4474419. If you do, install it. It will not be mandatory until July, so you have time, but you will need it in any case before then.

        1 user thanked author for this post.
        • #348086 Reply

          bobcat5536
          AskWoody Plus

          I thought I would go ahead and install it anyway, but when I went to, it said it was already installed. I checked my installed updates and sure enough, there it was. Funny thing, because it was not offered. It just got installed without showing up in the offered updates. The nagware one wasn’t there, so that’s a good thing.

    • #348098 Reply

      WildBill
      AskWoody Plus

      Will take care of patching Windows 8.1, but according to the Patch Lady, I’ll skip Office 2013. In the latest newsletter, all the patches are Japanese-era related. Since I’m not taking my lap to Japan anytime soon, I can wait until next month, right? Office Click-to-Run updates are cumulative, Right?

      Windows 8.1, 64-bit, leaning toward returning to Group A... & toward Windows 10 V1909. As long as it's a Lot Less Buggy!
      Wild Bill Rides Again...

    • #348104 Reply

      EP
      AskWoody_MVP

      Susan

      KB4490481 cumulative update is now mentioned on MS Update Catalog:
      https://www.catalog.update.microsoft.com/Search.aspx?q=4490481

      and running a recent windows update scan on my ltsc 2019 (v1809) machine seems to be getting KB4490481 which updates the build number to 17763.404.

      also new servicing stack update for win10 v1809 – KB4493510 also in the Catalog:
      https://www.catalog.update.microsoft.com/Search.aspx?q=4493510

    • #348108 Reply

      fernlady
      AskWoody Lounger

      Installed kb4490628, no restart required but restarted anyway. Waited 10 minutes then installed kb4489878, kb4474419, kb890830. So far no problems. Kb4493132 came in March 20th and was hidden, it showed up again March 27th and was hidden. March 28th it disappeared from hidden and has not come back.

      Windows 7 Home Premium x64 AMD Group A Realtek PCLe GBE Family Controller

      3 users thanked author for this post.
      • #348211 Reply

        jburk07
        AskWoody Plus

        Installed kb4490628, no restart required but restarted anyway. Waited 10 minutes then installed kb4489878, kb4474419, kb890830.

        @fernlady, I guess you must have downloaded the SSU KB4490628 from the catalog?

        Just trying to decide whether to do that and install it first or wait until everything else has been installed using Windows Update and then hope it appears there.

        Group A Win7 x64 Home Premium SP1 Ivy Bridge

        • #348218 Reply

          PKCano
          Da Boss

          If you know how to download it from the Catalog, it would be better to install it first, wait 10 min, reboot, then install everything else.

          Otherwise, you could HIDE everything else temporarily and it will show up when there is nothing left in the queue. Then unhide the other ones and install them.

          1 user thanked author for this post.
          • #348231 Reply

            OscarCP
            AskWoody Plus

            Would unchecking those other updates do the same thing as hiding them? If it did, that would be easier than having first to hide and then unhide them.

            Windows 7 Professional, SP1, x64 Group B & macOS + Linux (Mint) => Win7 Group W(?) + Mac&Lx

            • #348234 Reply

              PKCano
              Da Boss

              Unchecking doesn’t work. The queue has to be empty. The SSU has to be the only available update in the Important updates queue for it to show up.

              1 user thanked author for this post.
          • #348389 Reply

            jburk07
            AskWoody Plus

            If you know how to download it from the Catalog, it would be better to install it first, wait 10 min, reboot, then install everything else.

            Otherwise, you could HIDE everything else temporarily and it will show up when there is nothing left in the queue. Then unhide the other ones and install them.

            Thanks, @pkcano. For the sake of simplicity I’ve downloaded it from the catalog to install first. There are only 9 updates to hide but that would still be a little time-consuming if there’s no particular advantage to the hide-install-unhide-install routine.

            Group A Win7 x64 Home Premium SP1 Ivy Bridge

        • #348225 Reply

          fernlady
          AskWoody Lounger

          KB4490628 came in from windows update. I hid all updates and then checked for updates again and it came in by itself.

          Windows 7 Home Premium x64 AMD Group A Realtek PCLe GBE Family Controller

          1 user thanked author for this post.
          • #348387 Reply

            jburk07
            AskWoody Plus

            KB4490628 came in from windows update. I hid all updates and then checked for updates again and it came in by itself.

            Thanks, @fernlady. Judging from the various responses in this thread, sounds like many are having success either way.

            Group A Win7 x64 Home Premium SP1 Ivy Bridge

        • #348273 Reply

          The Surfing Pensioner
          AskWoody Plus

          I had kb4490628 downloaded and saved from the Catalogue and installed it before I ever used WU. Slipped in like an oyster, no problem at all. Then I restarted, waited 15 mins and ran WU for the rest. Going about this month’s updates any other way seems almost perversely circuitous.

          4 users thanked author for this post.
          • #348275 Reply

            OscarCP
            AskWoody Plus

            Dear TSP: Your advice is well taken, but it is really useful to Group B people. Not an option for those in Group A that, by definition, is made up of people that do not install things from the Catalog but rely on Rollups and whatever else WU offers them and they are not advised against installing, here at Woody’s.

            Some of them could, perhaps, became Group B (it’s not hard) and that would probably mean less grief for them, if they did. Judging by the difference in the variety and the seriousness (but not the numbers, as the two groups’ sizes are very different) of the complaints, post-patching, often heard from both groups.

            Group B Win 7 [Pro, Sp1, x64] + M&L (Mac and Linux Mint)

            Windows 7 Professional, SP1, x64 Group B & macOS + Linux (Mint) => Win7 Group W(?) + Mac&Lx

          • #348314 Reply

            willygirl
            AskWoody Plus

            @thesurfingpensioner – I did the same, just posted the results, all is well. Just felt better going to the catalogue for the SSU, then the usual WU in the control panel. Worked like a charm

            Win7 SP1 Home 64-bit, GrpA

            1 user thanked author for this post.
    • #348109 Reply

      EP
      AskWoody_MVP

      well my machine running v1809 now has 4490481 CU (build 17763.404) and 4493510 SSU installed as I just did a recent WU scan

    • #348174 Reply

      CADesertRat
      AskWoody Plus

      Reporting in: One of my W7’s so far, Installed KB 4489878 Rollup (Grp. A), KB 4474419 SHA-2, and MSRT. I installed KB 4490628 SSU from the catalog the other day to get ahead of things.

      I saw nothing of the W10 nag KB 4493132.

      A little early to tell, but I see no problems so far.

      I updated the 2nd W7 computer and received the same KB’s as the 1st one and still no W10 nag KB.

      Don't take yourself so seriously, no one else does 🙂
      4 Win 10 Pro currently 1809 (3 Desktops, 1 Laptop).

      2 users thanked author for this post.
      • #349154 Reply

        EP
        AskWoody_MVP

        read one of my recent comments about KB4493132: it is NEVER offered to Win7 Pro & Win7 Enterprise; only home & ultimate editions of W7 will get offered KB4493132 at some point this year

        2 users thanked author for this post.
    • #348160 Reply

      anonymous

      AGAIN !  Just installed March updates and for the third time now, M$ has messed with Windows Media Player. Had to go through the setup again. Not a real big deal, as it only takes a minute. But, leaves a person wondering Why ??

      2 users thanked author for this post.
    • #348180 Reply

      rick41
      AskWoody Lounger

      Group A, Win7 64-bit.  As is frequently the case lately, Windows Media Player had to be reconfigured after the updates.  Annoying, but it only takes a minute to address because it essentially saves my old configuration.  Specifics:

      Open wmplayer (which for me points to C:\Program Files (x86)\Windows Media Player\wmplayer.exe).  It will open to the first Configure screen.  Choose Custom Settings and click Next. Next tab should have preserved all your old choices, so just click Next again.  Choose “Choose the file types Windows Media Player will play” and click Next (unless you use WMP as your default video and audio player, in which case you should choose the “Make default” option).  The displayed associations list should be unchanged from what you had before, but you might want to skim through to be sure.  If OK as expected, just click cancel.  On the final configuration screen refuse the Bing online store unless you use it.

      After that simple process, I always find that the ONLY setting that has changed in the player itself is that “Check for Updates” in Options went from once a month to once a week, so I just change it back to monthly (not that it ever checks anymore, anyway…)

       

    • #348205 Reply

      Vols and Jezuz
      AskWoody Lounger

      Group B-er here, having an issue installing KB4474419 on W7 x64 Pro, which always fails and reverts. I have all Servicing Stack updates and all other March updates installed.

      From a quick google, it seems that this is a fairly common issue with this update and is related to either systems that use Legacy BIOS booting instead of UEFI or systems that had Windows installed onto a pre-partitioned drive, both of which apply to my system.

      The workarounds seem either dangerous over overly laborious, and since we don’t need this update until July or so, I’m going to bide my time and wait for a more straightforward fix from the community, or ideally, a fixed update from MS.

      4 users thanked author for this post.
      • #349985 Reply

        samak
        AskWoody Plus

        Similarly, all updates went in OK for me except KB4474419 failed with error 8E5E0442. I think I will also wait and hope MS fix it.

        W7 SP1 Home Premium 64-bit, Office 2010, Group B, non-techie

        2 users thanked author for this post.
        • #349989 Reply

          PKCano
          Da Boss

          You may want to tale a look at these:

          MS Social technet and this.

          Both recommend the same thing to fix that error.

          1 user thanked author for this post.
          • #350007 Reply

            samak
            AskWoody Plus

            Success! While the manual details in those 2 links were terrifyingly complicated to this non-techie, there was a link to the Windows Update Troubleshooter (which I didn’t know existed) at the bottom of the second one. I thought I would start there since it required no knowledge on my part! Ran the troubleshooter and it told me it had fixed 3 out of 4 errors, 2 of which were described as “Problems installing recent updates”.
            This sounded hopeful so I tried reinstalling the update again and this time it worked. The only oddity was that after rebooting and finishing configuring to 100% it spent about 10 minutes with “Cleaning Up, Do not turn off your computer” showing on the screen.
            Thank you very much for your help.
            The link to the troubleshooter is:
            https://support.microsoft.com/en-us/help/10164/fix-windows-update-errors

            W7 SP1 Home Premium 64-bit, Office 2010, Group B, non-techie

        • #350411 Reply

          Vols and Jezuz
          AskWoody Lounger

          Similarly, all updates went in OK for me except KB4474419 failed with error 8E5E0442. I think I will also wait and hope MS fix it.

          Thanks for sharing your problem and solution. Unfortunately, I have a different error code (80004005) that seems to be a lot less straightforward to fix. The Windows Update Troubleshooter found 4 issues and fixed them, but KB4474419 still failed in the exact same manner. I ran Windows Update Troubleshooter again afterwards and it found 2 of the same errors again. Don’t think it can fix whatever issue my PC has with the SHA-2 updates.

          I’m basically out of ideas at this point. The only solution I’ve seen that seems to work is to make a new System Reserved partition, go into Windows Recovery Environment, and use bootrec to basically make a new boot sector. I really don’t want to be meddling in such minefields… I’d almost rather just abandon the Group B ship and make a new home on a Group W floating piece of debris.

    • #348233 Reply

      Heavenly
      AskWoody Lounger

      Just installed KB4489878, KB4474419, KB890830 with no problems. Didn’t see KB4493132 offered. Win 7 Pro, SP1, Grp. A, i7Core “Haswell”.

      I had KB4493132  showing in the optional  updates for April  so I  hid it.

      I did not have to go and look for KB 4490628  because a short while after I had installed KB4489848, KB4474419 & KB890830   – KB4490628  suddenly appeared – save me going to look for it 🙂

       

      2 users thanked author for this post.
    • #348229 Reply

      anonymous

      Windows 7 SP1 64bit, with Broadcom network card. Group B.

      Installed March’s updates; IE KB4489873 and SO KB4489885 today.

      From the catalog; Installed IE KB4489873 1st, SO KB4489885 2nd and MSRT (from WU) 3rd.

      Installed one at a time. Rebooted in between each update letting it sit 1 minute or 2 after update was installed.

      No network issues. No oddities – other than slow boot.

      Rebooted 3 times and let it sit for several minutes. (Reboots 1 and 2 were slow, about 3x as long.)

      Did NOT install the servicing stack or SHA256 updates yet. I didn’t see to do so per woody, and wanted a month to pass by. Not needed at this time. Will be needed this summer. Plus, this askwoody page does NOT show them: https://www.askwoody.com/forums/topic/2000003-ongoing-list-of-group-b-monthly-updates-for-win7-and-8-1/

      I would recommend people on the last reboot to go to the desktop and let it sit 45 to 60 minutes to Process Idle Tasks and let the trusted installer (as per PKCano) do its thing.

      Thanks to all here.

      • #348239 Reply

        PKCano
        Da Boss

        You should go ahead and install the SSU KB4490628 and the SHA-2 update KB4474419

        2 users thanked author for this post.
      • #348561 Reply

        Elly
        AskWoody MVP

        @ anonymous Post #348229:

        Did NOT install the servicing stack or SHA256 updates yet. I didn’t see to do so per woody, and wanted a month to pass by. Not needed at this time. Will be needed this summer. Plus, this askwoody page does NOT show them: https://www.askwoody.com/forums/topic/2000003-ongoing-list-of-group-b-monthly-updates-for-win7-and-8-1

        Per Woody, in both his blog post and the linked ComputerWorld article:

        There’s only one patch you should studiously avoid this month — Win7’s KB 4493132, the “Get Windows 10” nag patch.

        In the directions Woody posted in the ComputerWorld article, he said:

        If you insist on manually installing security patches only, follow the instructions in @pkcano’s AKB 2000003

        (bolding mine).

        He didn’t say just to install the Security Only Updates for Group B. If you follow the link and read through the instructions, after installing the Security Only and IE 11 cumulative updates, Step B3 is to manually check for updates… and the following steps are to hide the Monthly Quality and Security update and any telemetry, or problematic updates that may show up (remember, Woody has said twice only to avoid Win7’s KB 4493132, the “Get Windows 10” nag patch). Step B6 is to install the remaining patches- KB 4474419, the SHA-2 patch, would be one of these… so, yes, Woody is saying to install it. Step B7 is to rerun Windows Update and ‘Wash, Rinse, Repeat’ until no new patches are offered. That would reveal the servicing stack update, so it can be installed individually.

        You may still decide to delay installing the SHA-2 patch, and the Servicing Stack update, but that is your decision, and not what Woody’s instructions are. The patches are not included in the list for manual download in the Group B instructions, because they show up in Windows Update, and should be installed from there.

        Win 7 Home, 64 bit, Group B

        1 user thanked author for this post.
        • #348986 Reply

          anonymous

          Hello Elly, anonymous #348229 here. Thank you for the clarification and caring that you always give to people. We have conversed in the past.

          Your posts and others, like SueW, have good information, easy steps to follow and are detailed.

          I have done my March updates, have switched to “relaxed mode” and have decided to wait for the SSU and SHA256 until next month. I will let them settle a while, and will tackle that issue later with the April updates (most likely approved in May). I will most likely do the SSU and SHA256 individually and before the April installs.

          It would be nice if the Group B list had these in there for a reference, but that has been discussed by me with the .NET SO updates in the past and they too are not in that list.

          I also was hoping for a bit more fanfare from Woody on the SSU and SHA256. When I did not see that, I thought, “Humm, OK. I will do it next month”.

          Thank you Elly (PKC, Woody … and others here).

          Windows 7 SP1 Group B

          2 users thanked author for this post.
          • #348996 Reply

            Elly
            AskWoody MVP

            Hello, Anonymous ##348229,

            Thank you for your kind words… but looking back on my reply, I’m not sure that I was able to clarify anything… some days are better than others…

            Now… I’m someone who flipped to Group W, as of December 2017, and been very happy staying there, but that was a conscious decision, weighing risks and benefits, which is quite different from people thinking they are updated, but who really aren’t. Certainly, I’m not one to say you have to update. One of the benefits of the Lounge is getting solid information to base one’s choices on… and it looks like you have reviewed the information available and made your choice. Just don’t forget that you haven’t installed those two updates, while you are waiting for them to shake out some more.

            It would be nice if the Group B list had these in there for a reference, but that has been discussed by me with the .NET SO updates in the past and they too are not in that list.

            As you said, it would be nice… but Group B is already a minority of users… and since .NET updates do not contain telemetry (the reason most of us became Group B) most of the minority of users install the cumulative version that comes through Windows Update. That leaves very few people actually using the .NET security only updates.

            Actually, we are blessed that PKCano maintains the Group B updates list for us, as otherwise we’d need to get them from the catalogue. The servicing stack updates and the SHA-2 update are available to everyone through Windows Update, not requiring downloading from the catalogue.

            I remember you mentioning including the .NET security only patches as part of the Group B list previously… but I don’t remember if you started a topic about it in Suggestions about improving the Lounge, which are reviewed periodically… and maybe someone will see it and take it on? I’m not hopeful about that, but if you are seeing a clear need for it, maybe you could be convincing enough… or maybe you could register and volunteer to keep such a topic updated and links current? Just an idea… 🙂

            Win 7 Home, 64 bit, Group B

      • #348574 Reply

        woody
        Da Boss

        My instructions are for “Group A” — the Monthly Rollup folks. If you need help manually installing individual patches (“Group B”), PKCano is the expert – with a great assist by Elly.

        1 user thanked author for this post.
    • #348272 Reply

      rick41
      AskWoody Lounger

      Group A Win7 x-64.  Installed all three Important-tab updates I was offered (4489878, 4474419 and  890830), all of which were pre-ticked.  When finished, 4490628 (servicing stack) popped up and I installed it.  I was never offered 4493132 in either Important or Optional…not that I want it.  As mentioned in prior post, I had to take a minute to configure WMP again…mainly just clicking OK to retained settings.

      1 user thanked author for this post.
    • #348312 Reply

      willygirl
      AskWoody Plus

      Everything looks good. Went to the MS Catalogue and manually Downloaded/Installed the SSU KB4490628. No restart required but I did just because. Went to WU on the PC and switched from “Never …” to “Download updates but let me choose.” Downloaded/Installed the Rollup KB4489878, took longer than the usual for the Rollup, restart req’d, let it sit for about 20 min. and downloaded/installed KB4474419, restart req’d, waited a few minutes then installed the MRT KB890830. KB4493132 didn’t come through, checked the Task Scheduler, all is free and clear. Reset WU to “Never check …” Before and after the updating process I did a system image on the external HD. BTW, all “checked” 2010 Office updates went smoothly.

      Win7 SP1 Home 64-bit, GrpA

      1 user thanked author for this post.
    • #348316 Reply

      Alex5723
      AskWoody Plus

      Just finished upgrading Windows 10 1803 to 1809 (17763.404).
      Microsoft honored my ‘no store apps’ and the blocked Microsoft Store and hasn’t reinstalled any apps.
      Privacy settings remain unchanged.

      The only ‘fix’ I did was changing the horrible files font using Portable System Font Size Changer app.

      Edit : 2 hours after installing 1809 I got .Net KB4480056, KB4486553, KB4483452. Flash Player KB4489907, KB446930.

    • #348317 Reply

      Reporting in….thanks to Woody, Susan, and the great staff here, installed:

      2019-03 Security Monthly Quality Rollup for Windows 7 for x64-based Systems (KB4489878)

      2019-03 Security Update for Windows 7 for x64-based Systems (KB4474419)

      …rebooted, check again, and then was offered:

      2019-03 Servicing Stack Update for Windows 7 for x64-based Systems (KB4490628)

      …and all is well.

      For now. If only ALL monthly patches were this smooth!

      happy-pc

      Win7 Pro SP1 64-bit, Dell Latitude E6330, Intel CORE i5 "Ivy Bridge", Group "Wait for the all-clear", Multiple Air-Gapped backup drives in different locations, "Don't check for updates-Full Manual Mode."
      --
      "...All the people, all the time..." (Peter Ustinov ad-lib from "Logan's Run")

      Attachments:
      2 users thanked author for this post.
    • #348337 Reply

      Pierre77
      AskWoody Plus

      All installed on 3 PCs running Windows 7 Home Premium (one has Office 2010 installed). No problems at all. No signs of GWX reminders (KB4493132 hidden on all). KB4490628 showed up after main update.

      1 user thanked author for this post.
    • #348443 Reply

      anonymous

      Hello everyone.

      All installed correctly yesterday for OS Build 17763.404.

      But I did not receive the patch for .NET Framework 3.5 and 4.7.2 for Windows 10 version 1809 (KB4489192) on Windows Update.

      • #348447 Reply

        PKCano
        Da Boss

        Do you have those versions of .NET installed on you PC? You won’t get updates for .NET you do not have.

        • #348462 Reply

          anonymous

          Hello @pkcano.

          I recently did a clean install of W10 1809.

          The updates to the .Net Framework I received were are KB4486553 and KB4480056.
          According to the “Netver” tool, I have the following situation:

          <32Bit>
          4.7.3362.0
          -> C: \ Windows \ Microsoft.NET \ Framework \ v4.0.30319
          4.7.3362.0
          -> C: \ Windows \ Microsoft.NET \ Framework64 \ v4.0.30319

          <.NET Frameworks installed>
          General version of .NET FW 4.6.2 (CLR: 4.0)
          General version of .NET FW 4.7 (CLR: 4.0)
          General version of .NET FW 4.7.1 (CLR: 4.0)
          General version of .NET FW 4.7.2 (CLR: 4.0)

          • #348474 Reply

            PKCano
            Da Boss

            KB4489192 is a non-security update. It is like a Preview. You probably will not see it through the usual channels in Windows Update.

            • #348494 Reply

              anonymous

              @pkcano

              Thank you very much for your clarification on this my doubt.

              Greetings

    • #348446 Reply

      jburk07
      AskWoody Plus

      Reporting results:

      Installed SHA-2 update KB4474419 separately, first, using Windows Update, just to see if it had any problems as reported by some with Legacy BIOS booting, as I have. No problems installing or after restart.

      Downloaded the SSU KB4490628 from the catalog and installed next. Restarted although it didn’t call for it.

      Used Windows Update to install the rollup KB4489878 and restarted. Took a little longer than usual to install, but no problems.

      Finally, installed the Office 2010 updates without problem.

      The only Important update left in WU now is the April non-security Outlook 2010 patch, unchecked. The EOS nag patch KB4493132 hasn’t appeared anywhere.

      All of my anti-telemetry settings are still in place.

      Thanks as usual to everyone here for all the great information and advice.

      Group A Win7 x64 Home Premium SP1 Ivy Bridge

      4 users thanked author for this post.
      • #348453 Reply

        willygirl
        AskWoody Plus

        Glad you got everything in with no issues!

        Win7 SP1 Home 64-bit, GrpA

        1 user thanked author for this post.
        • #348519 Reply

          jburk07
          AskWoody Plus

          Thanks, @willygirl, it’s always a relief when it works. And it’s always a big help to read the reports of others here, along with the helpful advice of @woody, @susan, and @pkcano, to gauge the possibility of success. Thanks for your posts.

          Group A Win7 x64 Home Premium SP1 Ivy Bridge

      • #348695 Reply

        Vols and Jezuz
        AskWoody Lounger

        Installed SHA-2 update KB4474419 separately, first, using Windows Update, just to see if it had any problems as reported by some with Legacy BIOS booting, as I have. No problems installing or after restart.

        So I think that narrows it down to having installed Windows on a pre-partitioned drive as being the problem for those who fail install of KB4474419. I really don’t want to mess with my partitions or boot sector to allow this update to install. I would love an explanation as to why Windows needs a separate System Reserved partition to be able to install the SHA-2 update.

        • #348899 Reply

          NightOwl
          AskWoody Plus

          @ Vols and Jezuz

          You quoted:

          jburk07 wrote:

          Installed SHA-2 update KB4474419 separately, first, using Windows Update, just to see if it had any problems as reported by some with Legacy BIOS booting, as I have. No problems installing or after restart.

          I don’t understand how you have drawn this conclusion below:

          So I think that narrows it down to having installed Windows on a pre-partitioned drive as being the problem for those who fail install of KB4474419.

          I can not see where @ jburk07 made any statement about how his Windows install was to a pre-partitioned drive–it only says he is using the older legacy BIOS firmware instead of the newer Unified Extensible Firmware Interface(UEFI).

          I would love an explanation as to why Windows needs a separate System Reserved partition to be able to install the SHA-2 update.

          I’m not sure that conclusion is valid–at least not in all cases. I have a system that has the *Legacy BIOS* firmware. I did pre-partition my hard drive prior to installing Win7 so as to avoid having a *System Reserved* partition created, and today I installed the *SHA-2 update KB4474419*, and then installed the *Servicing Stack Update (KB4490628)*–all successfully without any problems during the install, or with restarting the system afterwards.

          I really don’t want to mess with my partitions or boot sector to allow this update to install.

          So, are you having a problem with installing the *SHA-2 update KB4474419*, and the *Servicing Stack Update (KB4490628)*? Maybe a new Topic in the appropriate Win7 forum …

          NightOwl

          No question is stupid ... but, possibly the answers are 😉 !

          • #349038 Reply

            Vols and Jezuz
            AskWoody Lounger

            I was saying it seemed to me like the problem was because of the pre-partitioned Windows install, since he was able to successfully install KB4474419 with Legacy BIOS booting, presumably not on a pre-partitioned drive since he didn’t mention it. Meanwhile, I had failed that update with the suspected causes as either Legacy BIOS booting or having installed Windows on a pre-partitioned drive. And since Legacy BIOS didn’t seem to be causing him issues, I made that conclusion.

            However, it sounds like your Windows and boot settings are just like mine and you didn’t have the issues with KB4474419 that I’m having, so there must be another cause. I have no idea what it would be now.

            I have the SSU (KB4490628) installed without issue. But KB4474419 always fails to finish installing and reverts during the reboot process. Susan Bradley said she would be doing a special newsletter on the SHA updates, so I was planning to wait on making a new topic until after that is done, in case I am able to glean a solution from the newsletter.

            I think the fact I was never able to install KB3033929 either is related. I think the solution would be to create a System Reserved partition and then using bootrec commands, but I really don’t want to have to do that.

    • #348454 Reply

      Chris B
      AskWoody Plus

      Installed updates on 2 machines without problems to date.

      Neither offered me 4493132 – perhaps MS has worked out who reads AskWoody and has given us a miss!

      Both offered 4474419 first time around. Second time of checking for updates, the PC with Office 2007 offered 4490628 and installed fine. The PC with Office 2010 did not, because the non-security update 3114559 released yesterday, that WU itself unchecked, blocked it. I  hid 3114559, WU found 4490628 and installed it OK, then I restored 3114559, in its unchecked form. All seems fine.

      MS – your really make this intuitive for us, don’t you!

      Chris
      Win 10 Pro x64 Group A

      1 user thanked author for this post.
    • #348480 Reply

      lylejk
      AskWoody Lounger

      Why the bleep cannot I post a response; get Wordfence window.   I’ll email you what I was going to post and then you can tell me what the problem is, Woody, since, for the life of me I cannot see what it could be.

      • #348491 Reply

        woody
        Da Boss

        What happened? Did you get a Wordfence block when trying to post – or were you blocked when trying to log on?

        Here’s Lyle’s post:

        Yeah; 2 weeks ago, I too got tired of waiting for Microsoft to push the 1809 on me so forced the issue.   No real regrets.    Got the 1809 update yesterday as well.   lol

        Took forever for my then blank display to show the Orange screen progress screen though and was about to pull the reset card when the screen showed itself.   At the time before the Orange screen, I though,, Oh boy; what did Microsoft do to my machine now.   lololol

    • #348562 Reply

      JimmyJames
      AskWoody Plus

      On 1709 since Spring 2018, and ran the Auto Updates again after installing March updates, expecting to be fed the (finally) SAC 1809 and got fed only 1803 (17134.677).

      I was originally going to use the Media Creation Tool and install 1809 but I was curious what MS would feed me as a ‘safe’ bet. Maybe it’s a blessing to get stuck with 1803 but it simply means another potential hassle in six months.

      I can find no apparent reason to be fed 1803 over 1809, maybe my 2014 era Corei3-4010U laptop doesn’t meet MS specs for 1809, in some alert I’ve missed. Acer hasn’t updated drivers or firmware since 2015, but that didn’t much affect running previous Feature versions. In computer years 2014 is close to the KT Boundary Event, so maybe I’m getting sent a hint.

    • #348589 Reply

      Philomene123
      AskWoody Plus

      ….. can find no apparent reason to be fed 1803 over 1809, maybe my 2014 era Corei3-4010U laptop doesn’t meet MS specs for 1809, in some alert I’ve missed.
      – – – –
      ———–
      I am surprise my old Asus Rog g74 sx runs 1809 like a champ! It was a good investment, bought it for my daughter in early 2011, she was beginning studies in 3d animation. So it run heavy softwares, and of course, many games during 3 years. Took it for myself when the [kvetch] connector broke again (changed it 3 times over the years) It also needed a new battery. I did some repairs-upgrades and bought w10 pro, to test that OS.

      Asus had not released any drivers updates for g74 sx but generic drivers work fine. I am curious to see how long it will support w10…

      I am now (mainly) on the apple side. Imac and Macbook. Was a bit fed up with the ‘get w10 campaign’ on w7… That is when I discoverd Askwoody.com LOL

      My daughter pursued other studies in 3d, graduated recently and now works on an upcoming videogame!!! She has no choice to use windows.. She crosses her fingers, on 2 recent computers, desktop and laptop, no big issues for now with 1809…

    • #348615 Reply

      Pierre77
      AskWoody Plus

      Word of warning regarding KB4493132. It appeared again today ( 4 Apr ) even though I set it to hidden. This applies to members running Windows 7.

      4 users thanked author for this post.
      • #348848 Reply

        anonymous

        Agreed. Had it hidden on mine and it is now back. Hid it again.
        Windows 7 SP1 Group B

        2 users thanked author for this post.
      • #348865 Reply

        Elly
        AskWoody MVP

        It is showing up as optional when I manually checked today… and says it was published yesterday.

        Win 7 Home, 64 bit, Group B

        2 users thanked author for this post.
      • #349152 Reply

        EP
        AskWoody_MVP

        the KB4493132 update never showed up on WU on my Win7 computer as long as I’m running Win7 Pro.

        KB4493132 is only offered to home basic, home premium and Ultimate editions of Windows 7, never to those using Pro or Enterprise versions

    • #348893 Reply

      dgreen
      AskWoody Lounger

      Reporting in on installing March updates

      Installed the Servicing Stack KB4490628 this morning. No issues.
      (I actually hid all the updates and  the SS update showed up.)
      Shut down computer until a little while ago.

      Restored my hidden updates KB4474419 and KB4489878 (roll up)
      Installed the roll up.
      No issues.

      Did not install the SHA2 update KB4474419
      deceided that I have until July to install it.
      Waiting to see if their are any hiccups down the road for those who did install it.

      KB4493132 Did not come out of hiding.  (still hidden)

      Dell Inspiron 660 (new hard drive installed and Windows 7 reloaded Nov. 2017)
      Windows 7 Home Premium 64 bit SP 1  GROUP A
      Processor:  Intel i3-3240 (ivy bridge 3rd generation)
      chipset Intel (R) 7 series/C216
      chipset family SATA AHCI Controller -1 E02
      NIC Realtek PCLE GBE Family Controller

      MSE antivirus
      Chrome browser

      1 user thanked author for this post.
    • #349615 Reply

      SueW
      AskWoody Plus

      Checking in after updating:

      1 – imaged my disk with Macrium Reflect

      2 – downloaded KB4490628 [Servicing Stack Update] from the Windows Catalog and installed it first; waited 10 minutes for the installation to complete and then rebooted

      3 – downloaded Updates KB4489885 (Mar. SO) and KB4489873 (IE11 Mar. Cumulative)

      4 – installed each Update and then rebooted; waited 15 minutes

      5 – checked “Windows Update” => 9 Important: 6 Office 2010 (5 checked; 1 unchecked) and 3 Win 7 (all checked); 2 Optional: both unchecked

      6 – hid the 1 unchecked Important Office non-Security Update: Outlook 2010 (KB3114559) => related to Japanese error patching

      7 – unchecked and hid “Important” Update KB4489878 (Mar. Rollup)

      8 – hid the 2 unchecked “Optional” updates: KB4489892 (Mar. Preview Rollup) and KB4493132 <= the dreaded Windows 10 nag patch

      9 – checked “Windows Update” again => 7 Important: 5 Office 2010 and 2 Win 7: all checked; 0 Optional

      10 – unhid 0 hidden updates to install

      11 – installed 7 Updates: 5 Office 2010 (KB4462226, KB4018363, KB2589339, KB4461626 and KB4462229), plus MSRT (KB890830) and the SHA-2 Update (KB4474419)

      12 – rebooted; waited 60 minutes (until the hard drive light stopped flashing)

      Note: needed to reconfigure Windows Media Player (after not having to for the past 2 months)

      As always, my thanks to Woody, PKCano, and all the other folks who continue to contribute their time and expertise!

      Win 7 SP1 Home Premium 64-bit; Office 2010; Group B; Former 'Tech Weenie'

      • #349660 Reply

        anonymous

        Hello SueW, anonymous #348229 here. We have also conversed in the past.

        Thank you for your precise accounting of the patch installs you do. These are always helpful to others.

        I see you waited “60 minutes (until the hard drive light stopped flashing)”. That is a long time for it to cleanup and do Idle Tasks. The key was waiting for the hard drive to stop flashing. Good observation.

        You can force the Idle Tasks if you want by the administrative command prompt: rundll32 advapi32.dll,ProcessIdleTasks

        You can do that and then walk away for 15 to 20 minutes. If the drive light is still on, it is still running, walk away again.

        Several items take place and I can not remember all, but one is a defragmentation of “boot files” and reordering their placement on the drive for faster booting.

        Windows 8.1 seems to have a notification flag telling you that the process is running when done by command line. Our 8.1 PC took about 60 minutes.

        With Vista and Windows 7, it takes 5 to 20 minutes depending on what tasks need to be done at that time.

        I have done this for years and sometimes a sluggish PC is helped and runs normal again, just from letting it sit.

        Thank you again.

        Windows 7 SP1 Group B

        1 user thanked author for this post.
        • #349957 Reply

          SueW
          AskWoody Plus

          Greetings, anonymous #348229!  Indeed, I remember conversing with you in the past.

          Thank you for providing details on how to speed up the Idle Tasks, as they certainly can take quite a while.  And I’m sure others here will also benefit from your instructions.  Thanks again.

          Win 7 SP1 Home Premium 64-bit; Office 2010; Group B; Former 'Tech Weenie'

    • #349728 Reply

      dgreen
      AskWoody Lounger

      Note: needed to reconfigure Windows Media Player (after not having to for the past 2 months)

      SueW
      I, like you and some others, had to reconfigure Windows Media Player a few times.
      Like you, it was not needed to be reconfigured the past 2 months.
      However, I didn’t need to reconfigure the March updates.
      The only difference I can tell is that I did not apply the KB4474419 (SHA2 update)
      FYI I don’t have Office.

      Dell Inspiron 660 (new hard drive installed and Windows 7 reloaded Nov. 2017)
      Windows 7 Home Premium 64 bit SP 1  GROUP A
      Processor:  Intel i3-3240 (ivy bridge 3rd generation)
      chipset Intel (R) 7 series/C216
      chipset family SATA AHCI Controller -1 E02
      NIC Realtek PCLE GBE Family Controller

      MSE antivirus
      Chrome browser

      1 user thanked author for this post.
      • #349958 Reply

        SueW
        AskWoody Plus

        @dgreen, another difference is that you are in “Group A,” and I’m in “Group B.”  I wonder if that’s the reason . . .  At least you had one less thing to change 😉

        Win 7 SP1 Home Premium 64-bit; Office 2010; Group B; Former 'Tech Weenie'

        1 user thanked author for this post.
    • #350913 Reply

      MrToad28
      AskWoody Lounger

      Windows 7: Patched 6 desktops W7Pro ~9 years old and 2 Laptops W7 home ~3-5 yr old. No problems. Started with 2 back-up PC’s..did patching sequentially progressing as no problems seen: Restore pt, 3 patches – restart, restore pt, a small patch that showed up after the 1st 3. Ran spybot anti-beacon to shut off spying, created 2 more restore points. Easy peasy. Thanks to Wood and to all who commented on their patching experiences.

      • #350935 Reply

        anonymous

        Because of the date of your post, I have to ask: Are you referring to the MARCH updates or the APRIL updates in your post?

      • #351168 Reply

        anonymous

        Hello MrToad, Thank you for the report and good news but, as the other anon asked these are the MARCH updates right? Could you also give some information about the Type/model, CPU, Video card and Network card of those PCs updated? Also is this Group A or B?

        • #957998 Reply

          MrToad28
          AskWoody Lounger

          Sorry for the late reply. My post refers to the March standard patches, Group A..I think..not the individual security only..the roll-ups. I always patch late and sometimes skip months when there are significant risks such as the Windows 7 NIC issue. Despite assurances that this was in the rear view mirror, I did experience a wifi issue with one laptop which repaired by reactivating the driver in device manager. I’m not saying this problem occurred because of the patch..it didn’t happen until days after the patch..but the patch may have caused the deactivation.

    • #1328222 Reply

      cyclical01
      AskWoody Plus

      Upgraded to 1809. Ran wushowhide and saw I was offered KB4486553 and have scoured the Master Patch List looking for guidance on whether it is safe to install but it is not listed.  Did a general search on the site and found a few references from others indicating it had been offered, but it’s not clear if the majority of those folks installed it or not. Can someone please advise?  Thanks!

      • #1328356 Reply

        PKCano
        Da Boss

        KB4456553 is a February update for .NET 3.5 and 4.7.2 for Win10 v1809. See the MS pages in the link for an explanation of the fixes it provides.

        • #1336239 Reply

          cyclical01
          AskWoody Plus

          Thanks, @pkcano. I understand its stated purpose, just wondering why it didn’t show on Patch Lady’s radar and if it was safe. I am guessing you installed with no adverse impacts?

          • #1336431 Reply

            PKCano
            Da Boss

            I install what comes through Windows Update. I didn’t see it listed on my v1809 machine. It should only show up if you have .NET 3.5 or 4.7 installed, and it doesn’t appear to be a security update. So, you can install it if you have those versions of .Net installed, but it is not mandatory unless it is delivered through WU by default.

    Please follow the -Lounge Rules- no personal attacks, no swearing, and politics/religion are relegated to the Rants forum.

    Reply To: MS-DEFCON 4: It’s time to get Windows and Office patched

    You can use BBCodes to format your content.
    Your account can't use Advanced BBCodes, they will be stripped before saving.