News, tips, advice, support for Windows, Office, PCs & more. Tech help. No bull. We're community supported by donations from our Plus Members, and proud of it
Home icon Home icon Home icon Email icon RSS icon
  • MS-DEFCON 4: Time to get the November patches installed

    Home Forums AskWoody blog MS-DEFCON 4: Time to get the November patches installed

    Viewing 49 reply threads
    • Author
      Posts
      • #2015033 Reply
        woody
        Da Boss

        A few quick notes: I’m recommending that Win10 Home users move to version 1903 (or 1909). The ability to Pause updates outweighs the potential hassles
        [See the full post at: MS-DEFCON 4: Time to get the November patches installed]

      • #2015042 Reply
        Microfix
        AskWoody MVP

        (Pre-Computerworld article)
        For those who need SHA-2 patches (Sept 2019)
        Win7 x86/x64 are available here for download:
        https://www.catalog.update.microsoft.com/Search.aspx?q=4474419

        | Win8.1 Pro x64 | Linux Hybrids x86/x64 | Win7 Pro x86/x64 Offline |
        1 user thanked author for this post.
      • #2015067 Reply
        Charlie
        AskWoody Plus

        I’ve installed two or three SHA-2 patches and have not had any problem getting updated in October.  They haven’t come out with another SHA-2 patch have they?  I haven’t heard any talk about it if they have.

        Win 7, Sandy Bridge 3.3GHz, Linux Mint 19.1, Klaatu barada nikto

      • #2015072 Reply
        AJNorth
        AskWoody Plus

        Twelve Win 7 Pro and five Win 8.1 Pro rigs (all x64) have been successfully updated; several hours later, no issues have been reported.

        4 users thanked author for this post.
        • #2015449 Reply
          rc primak
          AskWoody_MVP

          Similar results upgrading my Intel NUC PC from Win 10 Pro 1809 to 1903. No major issues noted, but I don’t use Windows much.

          -- rc primak

      • #2015081 Reply
        Alex5723
        AskWoody Plus

        Windows 1809 Pro has been updated with KB4523205 (OS Build 17763.864) + MSRT. So far so good.

      • #2015084 Reply
        CADesertRat
        AskWoody Plus

        1809 Pro, I’ve updated 3 desktops to 17763.864 (KB 4523205) and MSRT, and SSU KB 4523204 with no problems so far. My laptop hasn’t checked for updates since yesterday so am a bit confused as to why it’s not checking. It always has in the past so I may do the unthinkable and click on “Check for Updates”.

        Don't take yourself so seriously, no one else does 🙂
        4 Win 10 Pro at 1909 (3 Desktops, 1 Laptop).

        • #2015118 Reply
          CADesertRat
          AskWoody Plus

          Evidently the laptop was waiting for 10 am PST since it is updating as I write this. Will see how it goes. It’s getting the same updates as the other computers.

          Don't take yourself so seriously, no one else does 🙂
          4 Win 10 Pro at 1909 (3 Desktops, 1 Laptop).

      • #2015086 Reply
        PKCano
        Da Boss

        Updated with no problems so far:
        + Win10 Pro v1803 to Build 17134.1130 (KB4525237) last update, EOL. Waiting to see if it gets hijacked (not). Or will upgrade to version of MY choice after Patch Tues.
        + Win10 Pro v1809 to Build 17763.864 (KB4523205)
        + Win10 Pro v1903 to Build 18362.476 (KB4524570)
        + (4) Win8.1 Pro Group A
        + (8) Win7 combination of Home Prof, Pro, Ultimate, 32-bit and 64-bit Group A

        Skipped (hid) Office 2010 KB4484127 that was causing Access problems.

        5 users thanked author for this post.
      • #2015096 Reply
        Demeter
        AskWoody Plus

        Checked updates, KB4525235, 2019-11 Security Monthly Quality Rollup for Win 7 x 64 popped up. Downloaded, installed and rebooted successfully. Checked updates again and am now offered KB4523206, 2019-11 SSU for Win 7 x 64. I previously installed KB4516655, 2019-09 SSU Win7 x64 on 11/06/2019. What’s with another SSU popping up? Win 7 Pro, x64, SP1, i7-Core “Haswell”, HP ZBook, Group A

        • #2015102 Reply
          PKCano
          Da Boss

          The Servicing Stack Update is the update for the Windows Update mechanism itself. That needs to be updated too, but has to be updated exclusively (by itself), so it doesn’t show up until all the other pending updates have been installed or hidden. That’s why you got it last and by itself.

          5 users thanked author for this post.
          • #2015213 Reply
            Tex265
            AskWoody Plus

            Here at Woody’s we use to be instructed that the SSU’s were to be installed exclusively and always first requiring either hiding all available updates showing in order to make the SSU appear, or download the SSU from the MS Catalogue and manually install it before using the Windows Updater to install the other updates.

            For Windows 7 SSU KB4523206, MS still recommends that it be installed before any other updates.

            However others seem to be OK installing the regular November updates and then installing the SSU when it appears afterwards.

            So is either way OK now?

            Windows 10 Pro x64 v1909 and Windows 7 Pro SP1 x64 (RIP)
            1 user thanked author for this post.
            • #2015535 Reply
              Demeter
              AskWoody Plus

              KB4523206 downloaded & installed without a reboot. It was only offered after I downloaded & installed KB4525235. Win 7 Pro x64, SP1, i-7Core “Haswell”, HP ZBook, Group A

              • #2015650 Reply
                Charlie
                AskWoody Plus

                You can also download it from the Microsoft Update Catalog.

                That’s what I did – after I found out I needed it.

                Win 7, Sandy Bridge 3.3GHz, Linux Mint 19.1, Klaatu barada nikto

      • #2015099 Reply
        honx
        AskWoody Lounger

        in other words, on windows 7 i need to search for updates and install office 2010 updates first, in order to get the new sha-2 patch and then install group b patches from akb2000003?

        btw. there is an unchecked important update for office 2010: kb 43484127 – what is it? should install it or skip it? and has that access bug for office 2010 already been fixed?

        PC: Windows 7 Ultimate, 64bit, Group B
        Notebook: Windows 8.1, 64bit, Group B

        • #2015106 Reply
          PKCano
          Da Boss

          The latest SHA-2 update was 9/9/2019 – it is required but probably already installed on your computer. Check the update history or installed updates to be sure.
          After you install all the updates in the first round, you will need to check again for the Servicing Stack KB4523206, which won’t show up till the others are installed.

          5 users thanked author for this post.
          • #2015114 Reply
            honx
            AskWoody Lounger

            The latest SHA-2 update was 9/9/2019 – it is required but probably already installed on your computer. Check the update history or installed updates to be sure.
            After you install all the updates in the first round, you will need to check again for the Servicing Stack KB4523206, which won’t show up till the others are installed.

            so i’ll install office updates except unchecked kb4484127 which i’ll hide, then i search for updates again, install kb4523206 if it’s ordered and then install november group b patches.

            PC: Windows 7 Ultimate, 64bit, Group B
            Notebook: Windows 8.1, 64bit, Group B

          • #2015795 Reply
            anonymous
            Guest

            what if i only install KB4523206 manually from microsoft catalog ?

            • #2015799 Reply
              PKCano
              Da Boss

              You can install KB4523206 from the Catalog. No problem.
              But if you go that route, install it first, then the others.

              1 user thanked author for this post.
              L95
              • #2016079 Reply
                honx
                AskWoody Lounger

                You can install KB4523206 from the Catalog. No problem.
                But if you go that route, install it first, then the others.

                too late for that route. i installed all other office patches already, only skipped kb4484127 on both machines. so i wait until greenlight (defcon 3 or higher) for installing december patches. then i’ll install kb4484127 and the fix for it.

                maybe there will be a replacement instead of kb4484127, including this patch and it’s fix. in this case i wouldn’t need to install kb4484127 at all! 😀

                PC: Windows 7 Ultimate, 64bit, Group B
                Notebook: Windows 8.1, 64bit, Group B

              • #2017103 Reply
                L95
                AskWoody Plus

                Thanks to Woody and PKCano for telling us about the Servicing Stack Updates for this month.  I’m wondering if  it would have been a little more helpful if Woody would have mentioned in his ComputerWorld article of December 5th  that  the Servicing Stack Updates should be installed before the other updates.  But anyway,  PKCano has clarified this in his comments here.  The Servicing Stack Update  KB4523206 was NOT offered to me by Microsoft when  I did a “check for updates”.   Therefore,  I used the catalog to install it.  I assume that it would have been offered to me when I did another check for updates after installing all the other Windows Updates for November,  if I had not already installed it from the catalog.   My question is:  why didn’t Microsoft offer me the Servicing Stack Update  KB4523206 during my first check for updates,  if indeed it’s important for ensuring that all of the other updates for the month are installed correctly?   Maybe there’s something I’m not understanding here,  so I would appreciate it if you could answer this question.

      • #2015111 Reply
        phaolo
        AskWoody Lounger

        “Win7 and 8.1 do not include telemetry this month”

        Good but.. would it make sense to install patch “pieces” every other month?
        Wouldn’t it cause a mess?
        For now I’m staying at May..

        • #2015158 Reply
          samak
          AskWoody Plus

          From the article: “you can install the June, August, October and November patches”.
          Many Group B have done this and nobody has reported any issues.

          W7 SP1 Home Premium 64-bit, Office 2010, Group B, non-techie

          3 users thanked author for this post.
      • #2015148 Reply
        honx
        AskWoody Lounger

        regarding patching for windows 7 i went the opposite direction this month:
        installed updates for office 2010, i hid kb4484127, then i installed ssu kb4523206, unhid kb4484127 and last i installed so updates kb4525233 (win7) and kb4525106 (ie).

        for windows 8.1 i went the normal route: kb4525250 (win8.1), kb4525106 (ie) and after reboot i installed office 2010, defender and msrt.

        on both machines i skipped kb4484127 for now, as i don’t know if it’s already the fixed version.

        PC: Windows 7 Ultimate, 64bit, Group B
        Notebook: Windows 8.1, 64bit, Group B

        • #2015149 Reply
          PKCano
          Da Boss

          The fix for the Access problem in Office was a Catalog-only download, manual install. We will get the fix with the Office Security updates on Patch Tuesday.

          1 user thanked author for this post.
      • #2015150 Reply
        honx
        AskWoody Lounger

        The fix for the Access problem in Office was a Catalog-only download, manual install. We will get the fix with the Office Security updates on Patch Tuesday.

        thx, then i’ll wait. i’ll install kb4484127 together with the fix when december patches are ready to install (ms defcon 3 or more for december patches).

        maybe there will be a replecement instead of kb4484127, including this patch and it’s fix. in this case i wouldn’t need to install kb4484127 at all! 😀

        PC: Windows 7 Ultimate, 64bit, Group B
        Notebook: Windows 8.1, 64bit, Group B

      • #2015155 Reply
        krism
        AskWoody Plus

        Win 8.1 Pro updated a couple days ago. It offered the 2 to me separately. One at a time.  I had backed up before.  No problems since.

        1 user thanked author for this post.
      • #2015157 Reply
        sheldon
        AskWoody Plus

        I upgraded two machines from WIN10 1809 to 1903 (KB4524570 level).  No issues at all.  I decided to upgrade since the disappearing defer control and the problem with the start menu were fixed.  Surprised that Woody advised to wait at least another month month to upgrade to 1903. Really didn’t say what the concern was.  He also thought that December update be very minor because of the holidays.

        1 user thanked author for this post.
        • #2015451 Reply
          rc primak
          AskWoody_MVP

          I had similar results. The upgrade caused no noticeable issues, and fixed the broken Microsoft Store App in my Limited User Account.

          -- rc primak

      • #2015207 Reply
        Purg2
        AskWoody Lounger

        After hiding the previews the SSU (4524445) showed up as expected.

        Rescanned & this showed up.  4524104 .NET pub.date 100819.  It should’ve been installed last month, which is strange.  Update history shows nothing.  The last one being from the september group 4514604 installed 100219 along with the others.  Decided to hide it, rescanned & got another 4514604 dated 091019, WTH.

        Rescan, hide, repeat…

        *4507422 (pub.date 070919) important
        .NET previews appeared too, hiding those also
        *4499408 (051419) important
        *4487080 (021219) important
        *4471989 (121118) important
        *4457920 (091118) important
        *4459924 (100918) optional
        *4345592 (081418) important
        -4340558 (071918) important
        -4099635 (051718) important
        #4055266 (010918) important
        #4076494 (021318) optional
        *4041085 (091217) important
        -4049017 (112717) optional
        *4019114 (050917) important
        -4043767 (101017) optional
        -4014983 (041117) important
        -3205404 (061317) important

        * update notes said installed
        # update notes said ignored
        – update notes show nothing

        Update history 2016 lists separate updates for 4.5.2 (3142030) & 3.5 (3142026) amongst others that year. Same with 2015 which didn’t start until August (3072307). No record of 2014 updates which is strange as this Asus laptop was purchased Nov.2013.

        I’m not overly concerned by this behavior.  Only posting it in case others may have had similar results & might be wondering if it was just them.

        Happy holidays.

         

        Win 8.1 Group B, Linux Dabbler

        2 users thanked author for this post.
        • #2015316 Reply
          abbodi86
          AskWoody_MVP

          The QualityCompat registry key is still needed to properly link the supersedence chain

          3 users thanked author for this post.
        • #2015355 Reply
          Purg2
          AskWoody Lounger

          @abbodi86, thanks for saying that fella.  My notes indicate that there were consistent issues with .NET from late 2017 until August 2018.  Therefore I skipped a couple early on, hence the notation about ignoring.

          I went back & checked my QualityCompat key  and all is as it should be despite not having installed 4056898.  I’m fairly certain that it was also verified Jan.2018 or thereabouts.  At any rate, it’s good to know I’m squared away in that regard.  Still strange that these critters decided to do what they did today, shrugs.

          Win 8.1 Group B, Linux Dabbler

      • #2015214 Reply
        Tex265
        AskWoody Plus

        Woody referencing your article part about deferring cumulative updates:

        With Windows Pro 1903 you can defer CU’s any number of days your like, plus change that decision up or down whenever you want.

        Don’t see how having to press the Pause updates button numerous times and limited to 7 day intervals is easier.  Plus once you make your selection, isn’t it irreversible?

        Also does the Group Policy – Windows Updates #2 – Ask before downloading or installing work with the Pause button routine?

        Windows 10 Pro x64 v1909 and Windows 7 Pro SP1 x64 (RIP)
        • #2015223 Reply
          PKCano
          Da Boss

          Home is the most common Edition of Win10. If you walk into Best Buy, WalMart, or the like, and buy a computer, Home is what you get. Joe Public doesn’t know the difference between Home and Pro, they don’t even know what version they have. They just have a Win10 computer.

          Win10 Home does not have Group Policy. And for the first time, they have a Pause option to somewhat protect them from MS’s forced updates. That is the ONLY protection they have. So that is the first thing Woody recommends to stop the push.

          If you have Pro Edition, you have other options. Don’t confuse the two, and try not to equate them.

          1 user thanked author for this post.
          • #2015224 Reply
            Tex265
            AskWoody Plus

            PK, understood but in Woody’s article he actually shows the Advanced page of Windows Pro with the CU deferral set at 15 days, then goes on to say there is a much simpler tool available – that of pressing the Pause button up to 3 times.

            That is what my question is directed at.

            Windows 10 Pro x64 v1909 and Windows 7 Pro SP1 x64 (RIP)
            • #2015281 Reply
              frankus333
              AskWoody Lounger

              This was my question as well, as per my previous posts:

              Edit; this link goes to the top of the posts, not my post, which I had selected.  My posts start at #2003792.

              MS-DEFCON 2: With Patch Tuesday tomorrow, and a Win10 1909 upgrade waiting in the wings, now’s a good time to check that Automatic Update’s temporarily turned off

              Also, I gleaned from Woody’s comments in the latest Computerworld article on DefCon rating set to 4 for November patching that it might be the known reliability of the technique of hitting the Pause three times, over the precise setting option, that makes it the recommended way to go. (sorry; couldn’t figure out how to copy the relevant paragraph)

              Now that DefCon is at 4, I pressed the Resume Updates button, WU immediately checked for updates, and three updates (Nov CU, MSRT and a Realtek driver I allowed through) downloaded automatically, and then sat patiently waiting for the Active Hours to end. I pressed the Restart Now button and the updating completed normally. I was left with only the optional feature update to 1909 sitting there, but not trying to download; i.e.; really optional.

              I think the precision of being able to easily set the pause day and date, and vary it easily if desired, is the better way to go, and what I will continue using. I am now a happy camper. I can leave my internet connection normal, unmetered, and WU updating paused to the precise Sunday before each patch Tuesday, and the only updating that occurs automatically is Defender. Optional feature (and cumulative) updates can be seen but are not a threat. The way it should be, at last!!

              Edit: Oops; forgot to check how easy it is to use wushowhide as per my previous post #2004565 in above string of posts.  The Check for Updates does start immediately after Resume is pressed, so one would have to be quick to hide the unwanted update(s) in the scenario where a bad patch was part of the offering and the others were OK and desired to be downloaded.  Perhaps I can check this when Dec patches are ready for DefCon 4.

              • This reply was modified 7 months, 1 week ago by frankus333.
              • This reply was modified 7 months, 1 week ago by frankus333.
              1 user thanked author for this post.
              • #2015289 Reply
                frankus333
                AskWoody Lounger

                Re last paragraph above; maybe switching back to metered connection before hitting Resume Updates would give a bit more protection while running wushowhide.

                Re the ability to see optional updates; this is only when the Pause updating has been removed (Resume Updates)

                All in all, a very tidy useful development

                • This reply was modified 7 months, 1 week ago by frankus333.
                1 user thanked author for this post.
              • #2015454 Reply
                rc primak
                AskWoody_MVP

                Metered Connection can be overridden by WU for anything other than a Feature Update, which can remain paused.

                -- rc primak

                1 user thanked author for this post.
            • #2015287 Reply
              PKCano
              Da Boss

              What is really important here is , now everyone has a way to avoid patching until they know what to expect.
              Pause is available to everyone, Home or Pro. With Pro, there is also the option to defer updates.
              Use the one that makes sense for you. The results is a bit more control over updates.

              5 users thanked author for this post.
        • #2016888 Reply
          dmt_3904
          AskWoody Plus

          I am updating now 😬 and hoping all goes well 😃!  Win10 pro. Once complete, how do I set the deferral? Thanks

          With Windows Pro 1903 you can defer CU’s any number of days your like, plus change that decision up or down whenever you want.

      • #2015221 Reply
        krism
        AskWoody Plus

        Oh, that’s something I forgot – in optional I did a .net from Oct, but the 2 for .net for Nov were only previews so I didn’t do them.

        • #2015228 Reply
          PKCano
          Da Boss

          It is not recommended to install optional uncheckded updates (Preview or not).

      • #2015222 Reply
        cmar6
        AskWoody Plus

        As recommended, I used the downloaded “Win10_1903_x64.iso” up update a Win 10 Home (ver. 1809) system. The update went well, but to version 1909, not ver. 1903.

        So does that mean that it does not matter what .iso file we get, MS will override that to get the latest feature version of Windows?

        • #2015226 Reply
          PKCano
          Da Boss

          Did you disconnect from the Internet during the upgrade using the ISO?
          If not, did you allow the install to get updates from the Internet?

          1 user thanked author for this post.
          • #2015229 Reply
            cmar6
            AskWoody Plus

            Did you disconnect from the Internet during the upgrade using the ISO?
            If not, did you allow the install to get updates from the Internet?

            PK, I did not disconnect from internet during upgrade using ISO.

            I don’t recall being given a choice about allowing the install to get updates from the internet. How do I prevent that?

             

            However, when I did the update from the same 1903.iso file on a Win 10_x64 (ver. 1809), I got version 1903. Go figure.

            • This reply was modified 7 months, 1 week ago by PKCano.
            • This reply was modified 7 months, 1 week ago by cmar6.
            • #2015233 Reply
              PKCano
              Da Boss

              Next time you use the ISO to upgrade, disconnect from the Internet before you do. Then read carefully what the screen says before you press “Next.” If you’re not connected to the Internet, the install can’t do something you don’t expect. MS is devious.

              2 users thanked author for this post.
      • #2015234 Reply
        cmar6
        AskWoody Plus

        Next time you use the ISO to upgrade, disconnect from the Internet before you do. Then read carefully what the screen says before you press “Next.” If you’re not connected to the Internet, the install can’t do something you don’t expect. MS is devious.

        Will do. The date of my 1903.iso file was 11/14/19

      • #2015252 Reply

        Reporting in:

        Installed November Rollup KB4525235 with no issues @2300 UTC Dec. 5th.

        So far. <SFX: Rim-shot>

        Win7 Pro SP1 64-bit ESU, Dell Latitude E6330, Intel CORE i5 "Ivy Bridge", Group "Patch List", Multiple Air-Gapped backup drives in different locations, "Don't auto-check for updates-Full Manual Mode." Linux Mint Greenhorn
        --
        "A committee is the only known form of life that has at least four legs and no brain."

        -Robert Heinlein

        2 users thanked author for this post.
      • #2015262 Reply
        carpintero
        AskWoody Lounger

        Manually upgraded 1903 to 1909.
        Check for updates button gives : “Error encountered.  We’ll continue to check daily”

        • #2015828 Reply
          carpintero
          AskWoody Lounger

          Manually updated with cumulative 4524570 from catalogue.  Build is at 18363.476
          (don’t know what it was formerly).

          In 1903 I had the service disabled.  Fully expected that upgrade would reenable,
          turns out that it did not.  I reenabled, now Check for updates works,
          reports up to date.

          • This reply was modified 7 months, 1 week ago by carpintero.
      • #2015296 Reply
        PaulForeman
        AskWoody Plus

        I just took the plunge and updated my Windows 10 Home version on the PC I’ve got at home.  I’ve retired so don’t worry about any of the work stuff anymore – just keeping my own up and running with the wife being happy with it.  I am reporting “good” results.

        Success – going from 1809 to 1909 using Windows Update.  It didn’t take very long… I walked the dog around the neighborhood, had lunch and it was done sometime in there. I did an extra restart as one taskbar icon was not showing up (Sophos Home) which fixed that.  I did another ‘search for updates’ and got a couple of .net fixes which I installed and restarted after.  All in all – it seems to have worked.

        I have used “Classic Shell” and was still using it and the new install told me the Administrator had blocked it.  However, it was running just fine.  It was annoying so I re-installed the program as an admin and never got any more back talk from the system.

        I have been using the third party StopUpdates10 software but have not turned it back on… I’ve set the Windows ‘pause’ to the max and will see what happens in 35 days.  It’s nice when these things actually work as advertised.  I’m going to let it run for a couple of days, let it do the scheduled back up run and shutdown and after that all works I will feel comfortable.  Oh, thanks to all the contributors and Woody for the support and help!  Happy Holidays, Merry Christmas and an error free New Year to all!

        1 user thanked author for this post.
      • #2015315 Reply
        cmar6
        AskWoody Plus

        Paul,

        Why not just stick with “Stop Updates”? I have been using it since AskWoody recommended it and it is fantastic; no downside at all.

        BTW, I just discovered that Windows local search now works for the first time ever in my Windows Home system. That was the reason I was going to try Classic Shell. However, Windows Explorer search does not work at all–widely reported on the net. Does anyone know if there is a manual fix for that?

      • #2015318 Reply
        Linda2019
        AskWoody Plus

        Is there a way to visually review the updates before Windows 10 Home version 1903 begins to install?  It all happens very quickly once you hit the button to remove the Pause feature.  Sometimes I would like to see the date the update was published, etc.  before installing.

        • #2015456 Reply
          rc primak
          AskWoody_MVP

          That’s basically what we use wushowhide for. Then we select which updates to hide and not install, and check which updates are unhidden before turning off Metered Connection. The setting to delay updates other than Feature Updates has to be set to zero (0) for this to work. Other than that, we don’t touch Windows Update until wushowhide has done its work.

          If Pause has been used and the Pause period has not expired, don’t touch anything until running through the wushowhide process.

          -- rc primak

          • This reply was modified 7 months, 1 week ago by rc primak.
          3 users thanked author for this post.
          • #2016149 Reply
            JCpharm
            AskWoody Lounger

            I’ve been lurking awhile knowing that Win7 is nearing EOl. My circumstances require that  Win10 be utilized in order to conduct business whenever the front office says go. I was lucky in that the new Win 10 tower came preinstalled with v1903 as my VMware cloud service is currently not compatible with v1909. IT dept is not discussing the cycle dates for rollout of v1909.  Thanks to all the MVPs expertise and knowledge here, I immediately upgraded to Pro version build 18362.449 and used wushowhide. So far all is well. I’m ready for the ride. Thanks for all resources  here on AskWoody.

      • #2015379 Reply
        James Bond 007
        AskWoody Lounger

        Group B, Windows 7 / Windows 8.1 64 bit.

        Previously in the beginning of September I patched my systems from May 2019 to August 2019 patch level. I installed the June 2019 to August 2019 updates in the following order for my Windows 7 systems :

        KB4508772 (Update superseding KB4503269, the Jun 2019 Security-only update)
        KB4506976 (.NET 3.5.1 Security-only update Jul 2019)
        KB4506966 (.NET 4.5.2 Security-only update Jul 2019)
        KB4507456 (Security-only update Jul 2019)
        KB3133977 (BitLocker update)
        KB4474419 (SHA-2 update v2)
        KB4511872 (IE11 Cumulative Security update Aug 2019)
        KB4517297 (Update superseding KB4512486, the Aug 2019 Security-only update)

        I just completed patching one of my Windows 7 systems from August 2019 to November 2019 patch level. I installed the Sep 2019 to Nov 2019 updates in the following order :

        KB4474419 (SHA-2 update v3)
        KB4516655 (Servicing Stack update)
        KB4516033 (Security-only update Sep 2019)
        KB4520003 (Security-only update Oct 2019)
        KB4525106 (IE11 Cumulative Security update Nov 2019)
        KB4523206 (Servicing Stack update)
        KB4525233 (Security-only update Nov 2019)

        The system appears to be working fine afterwards. Will continue to patch other Windows 7 / Windows 8.1 systems in due course.

        Hope for the best. Prepare for the worst.

        3 users thanked author for this post.
      • #2015434 Reply
        anonymous
        Guest

        Thanks CMAR6 – I will likely go back to using ‘stop updates’ software but am interested to see if the pause works like I think it will.  Once I’ve waited a month, I will likely turn it back on and ride out a bunch of updates until it makes sense to install them.

        I took care of IT for a small unit at my old job (now retired) and I watched everything a lot more closely – as I am only responsible for me and my own house now, it’s much simpler and I’ve got flexibility to experiment a bit and can go to my back-up if I need to scrub something and start over.  Reading between the lines – I don’t trust Microsoft at all but, I am interested in how the definition of a ‘pause’ is really implemented.

        • #2015440 Reply
          PKCano
          Da Boss

          Pause will prevent updates until the Pause period is over.
          And you can end the Pause if you decide to install earlier.
          But once the Pause period is over (or you end it), you will have to install what is offered before you can use Pause again.

          1 user thanked author for this post.
          • #2015441 Reply
            PaulForeman
            AskWoody Plus

            Yeah… I pushed the pause out to the 35 day max and will wait and watch to see if it really holds.  At about day 30 to 34 I will likely go back to StopUpdates 10 and turn off all update attempts.  I’m just curious to see if the pause is real or not.

            So far – fingers crossed – the upgrade from 1809 to the latest 1909 version (Home) has been smooth… time will tell if there are any hidden glitches I’ve yet to see.

          • #2015460 Reply
            rc primak
            AskWoody_MVP

            Also worth repeating: once you reach the end of Pause or hit Resume, you get every available update, unless you have hidden updates using wushowhide before your Windows Updates get un-Paused.

            -- rc primak

            4 users thanked author for this post.
      • #2015467 Reply
        anonymous
        Guest

        I tried updating my computer, but kept getting an error code that ends with 15. I’ve been trying to figure it out, but I can’t make heads on it. I cleaned the cache, defragmented and other stuff-but no luck updating the computer to 1903 or 1909 or even install an update. It only updated the security update for windows.

        If anyone knows how to fix the error so I can download/install updates let me know, otherwise in the future I’ll just have to reboot/reset the computer that’ll install the new version for the computer once its to factory settings.

        it was Errror 800015 or something along those lines. if anyone has an easier and simple solution for it-let me know.

        • #2015487 Reply
          Microfix
          AskWoody MVP

          Do you have any third party w10 update blockers (O&O shutup etc..) that you may have forgotten about?

          | Win8.1 Pro x64 | Linux Hybrids x86/x64 | Win7 Pro x86/x64 Offline |
          • #2015654 Reply
            anonymous
            Guest

            Does WUShowHide count as a Third party update blocker? I use that to hide updates-so are you telling me I have to uninstall it in order to update the computer to 1903 or 1909?

            • #2015678 Reply
              PKCano
              Da Boss

              wushowhide is not a third-party update blocker. You don’t need to uninstall. But if you have hidden the Feature update, you will need ot unhide it.

              1 user thanked author for this post.
              • #2015691 Reply
                anonymous
                Guest

                I did unhide the Feature update 1903, but when i tried to install it-I got the same error 8000×15. And when I tried installing 1909, same error number.

                What third parties or anything can effect the windows update? I got ccleaner, advanced systemcare, smart defrag 6…….So what am I doing wrong?

              • #2015722 Reply
                b
                AskWoody Plus

                There’s not much point in reporting an approximate error number.

              • #2015751 Reply
                anonymous
                Guest

                0X80070015 THAT IS THE error number. SO how do I properly FIX IT-EASY AND SIMPLE FIX THAN COMPLICATED.

              • #2015813 Reply
                mledman
                AskWoody Plus

                Simple fix, try the windows update troubleshooter.

                Win 10 home - 2004
                Attitude is a choice...Choose wisely

              • #2015814 Reply
                anonymous
                Guest

                I tried that, but it didn’t work. Unless after using the troubleshooter you had to restart the computer and then try the windows update right?

                If all else fails-just reset/reboot the laptop right? It would fix the problem and also it would install the newest version of windows 10 to the laptop.

              • #2015819 Reply
                b
                AskWoody Plus

                I suggest trying Windows Update after a clean boot:

                How to perform a clean boot in Windows

              • #2015851 Reply
                DriftyDonN
                AskWoody Plus

                0X80070015 THAT IS THE error number. SO how do I properly FIX IT-EASY AND SIMPLE FIX THAN COMPLICATED.

                hurt my ears!
                Multiple Solutions to Fix the Windows Defender Error 0x80070015
                https://www.minitool.com/backup-tips/error-0x80070015.html
                Maybe i’t the dependable microsoft Antivirus that is so wonderful?

                Edited to remove HTML

                "Vision without action is a daydream. Action without vision is a nightmare."

      • #2015579 Reply
        Seff
        AskWoody Plus

        I installed the monthly rollup KB4525235 followed by KB4523206 on my first Win 7 machine earlier with no apparent issues. In a day or two, all being well, I’ll do the same on my other Win 7 machine together with a couple of Office 2010 updates but excluding the problematic KB4484127 which was unchecked and which I’ve already hidden.

        5 users thanked author for this post.
      • #2015611 Reply
        jburk07
        AskWoody Plus

        Reporting Group A results:

        Installed the November 2019 Rollup KB4525235 on two Windows 7 x64 laptops without any problems.
        Hid the unchecked Office 2010 update KB4484127 and installed the other Office updates.
        After the Servicing Stack Update KB4523206 appeared, I installed it and restarted.
        No problems so far.

        Last week I got a refurbished laptop with Windows 10 (sigh, was trying to avoid wading into that quagmire) to dual-boot with Linux Mint. I managed to get it set up and updated through October 2019 over the weekend, but I had the quality-update-deferral period set to 25 days, not remembering that the deferral settings would disappear. Since I’m going out of town for a week, I managed to get it changed to a shorter period using Group Policy settings (details in this post https://www.askwoody.com/forums/topic/win10-1903-pro-problem-defer-updates-period-too-long/#post-2015526) and successfully installed the November updates this morning. Whew.

        Thanks to everyone here for all your information, and wishing problem-free patching to all for the holidays.

        Linux Mint Cinnamon 19.2
        Group A:
        Win7 Pro x64 SP1 Haswell, 0patch Pro, dual boot with Linux
        Win7 Home Premium x64 SP1 Ivy Bridge, 0patch Pro, mostly offline
        Win 10 Pro x64 v1909 Ivy Bridge, dual boot with Linux

        5 users thanked author for this post.
      • #2015610 Reply
        anonymous
        Guest

        Win 10 Pro 1809     I just ran through my update protocol (per PKCano instructions): metered connection, run wushowhide,  disable Windows Update Service, etc……

        Normally, when I would open Settings/Update and Security after this, I would not see the updates I selected to install and would have to wait up until several days for them to appear. Today when I checked, I saw Error Encountered – we could not complete the install because an update service was shutting down, followed by a grey Retry box – not a Check for Updates box. I tried shutting down and restarting, but same error. I did not turn off Metered connections to allow updates as I could not “see” what would be installed.  What should my next move be?

        • #2015614 Reply
          PKCano
          Da Boss

          Wait until the system checks on it’s own. Don’t check for updates. It can be as much as 36 hours
          Then run wushowhide again to be sure what you see in the queue is really what you’ve got before you remove metered connections.
          MS is force upgrading to 1909 – be careful!

          • #2016121 Reply
            anonymous
            Guest

            24 hours later – the CU for Nov (KB 4523205) was the only update available for download. The following 3 still show up as available after I run wushowhide:

            Oct CU .Net framework KB 4524099

            WMSRT KB 890830

            Security Intelligence Update for Windows Defender KB 2267602

            Is it unusual for only part of the updates to show up after Windows checks for updates? Thank you for the help with this.

            • #2016130 Reply
              PKCano
              Da Boss

              The four updates you mention are good for 1809. After the download, disconnect from the Internet before you reboot. Check your settings and reset metered connections as soon as you reconnect.

              • #2016135 Reply
                anonymous
                Guest

                Thank you. I was following your instructions for clearing the update queue. They said to verify updates, turn off metered connections and allow download and to reset metered connections BEFORE the restart – no mention of disconnecting from the internet.

                To clarify, are you now saying I should verify, turn off metered connections & allow download and finally “disconnect from the internet, restart, and then reset settings and metered connections?”

                Thanks again. I am trying to establish a step by step protocol to follow each month. Way more time consuming than Win 7 – I’m still adjusting.

              • #2016156 Reply
                PKCano
                Da Boss

                After the download:
                Disconnect from the Internet
                Reboot for the install
                Check your settings (be sure MS hasn’t changed anything)
                Reconnect to the Internet and immediately set metered connections (you cannot set metered if you are no connected)

              • #2016165 Reply
                anonymous
                Guest

                One last clarification please – the reboot for the install is a shut down/bootup rather than a restart?

              • #2016168 Reply
                PKCano
                Da Boss

                It is the “Restart” button in Windows Update after the update downloads.

              • #2016177 Reply
                b
                AskWoody Plus

                (you cannot set metered if you are no connected)

                You can.

              • #2016183 Reply
                PKCano
                Da Boss

                On mine, when you are not connected, you can’t change the status to metered.

                Screen-Shot-2019-12-07-at-1.43.06-PM

                Attachments:
              • #2016205 Reply
                jabeattyauditor
                AskWoody Lounger

                On mine, when you are not connected, you can’t change the status to metered.

                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\NetworkList\DefaultMediaCost is a good starting point.

                • This reply was modified 7 months, 1 week ago by jabeattyauditor. Reason: Cleaning up the quoted material
              • #2016208 Reply
                b
                AskWoody Plus

                On mine, when you are not connected, you can’t change the status to metered.

                You don’t have either Wi-Fi or Ethernet? Which version?

                ManageKnownNetworks

                Set Wireless Network as Metered or Non-Metered in Windows 10

                Set Ethernet Connection as Metered or Unmetered in Windows 10

                (Can also be set via Command Prompt or Registry Editor.)

                Attachments:
              • #2016214 Reply
                PKCano
                Da Boss

                I suggested that the OP DISCONNECT from the Internet.
                Can you show me that one that you are NOT connected to is set to metered, please.

              • #2016220 Reply
                b
                AskWoody Plus

                UnconnectedMetered

                Attachments:
              • #2016223 Reply
                PKCano
                Da Boss

                Thank you. I was unaware of that one.

                1 user thanked author for this post.
                b
              • #2016227 Reply
                PKCano
                Da Boss

                Well, I have only Ethernet, no WiFi.
                When connected, I can manipulate the slider for metered to on or off.
                When it is not connected, I only see what is in my screenshot and cannot set anything.
                I cannot access the Status screen.
                That is why I was not aware of what you show in your shot.

      • #2015653 Reply
        bassmanzam
        AskWoody Plus

        Installed the following Win 7 Home x64 and Office 2010 x64 patches (Group A):

        Excel – 4484164
        Office – 4484160
        (Skipped – 4484127)
        SSU – 4523206
        Monthly Rollup – 4525235

        Did a reboot and waited 20 minutes after the SSU and then the Monthly Rollup.

        Thanks to Woody, all his MVPs and everyone for sharing the patching experience.

        Merry Christmas to all.

        4 users thanked author for this post.
      • #2015687 Reply
        dgreen
        AskWoody Lounger

        November Windows Update reporting in…..
        Installed:
        KB4525235 (roll-up)  Installed smoothly, no issues.
        rebooted and waited about 1/2  hr. then installed
        KB4523206 (service stack)  Installed smoothly, no issues.

        Hid MSRT (haven’t installed since last Feb.)

         

        Dell Inspiron 660 (new hard drive installed and Windows 7 reloaded Nov. 2017)
        Windows 7 Home Premium 64 bit SP 1 GROUP A
        Processor: Intel i3-3240 (ivy bridge 3rd generation)
        chipset Intel (R) 7 series/C216
        chipset family SATA AHCI Controller -1 E02
        NIC Realtek PCLE GBE Family Controller
        Bitdefender (free version) installed today 12/6/19 (replaced MSE)
        Chrome browser
        DSL via ethernet (landline)

        4 users thanked author for this post.
      • #2015787 Reply
        anonymous
        Guest

        which update should be installed first  KB 4516655 or KB 4474419 ?

        • #2015796 Reply
          PKCano
          Da Boss

          KB 4474419 SHA-2 code signing support first.
          Be sure you also have KB 4490628 SSU installed.
          Then KB 4516655 SSU

      • #2015829 Reply
        DriftyDonN
        AskWoody Plus

        Here goes! I purchased a new laptop and hoped it would come w/ ver 1903…seemed logical to me but no..Acer sent it w/ ver 1809. home. Woody advised just upgrade to 1903 if you have home ver of 1809(or less) so I thought we would work it out.

        Said machine arrived today see attachments. Says in red..need updates. Hmmm…been putting off updates in ver 1809 pro, so what to do? Advanced options give me nothing..it is home after all!. Update history blank. Did get to pause so it’s waiting till 26 dec but I do have 1903 ver ISO on USB so question is, shall I just update with the ISO? This version of 1803 surely is different from 1803 pro I had. Took a long time to switch all those sliders from yes to no and I’m not sure if I screwed up access to apps that I shouldnt have….

        I did image it out of box and after privacy settings, AV and VPN, photo viewer , FF , email client, Open Office  and so on…have more to add but it’ll keep

        Thanks! Advice appreciated. ,

        D

        "Vision without action is a daydream. Action without vision is a nightmare."

        Attachments:
        • #2015861 Reply
          b
          AskWoody Plus

          I do have 1903 ver ISO on USB so question is, shall I just update with the ISO?

          That’s what Woody recommended a few days ago.

      • #2015926 Reply
        frankus333
        AskWoody Lounger

        G’day folks

        I have successfully updated three Win 7 machines (a 64 bit laptop, and a 32 bit laptop and desktop tower), including the SSU on all three.

        I tried to update Office 365 as usual, and it told me it had done it in the usual way on each one. I run the check for updates again on each one, to confirm I get the message that Office 365 is up to date, and on all three, it goes through the update routine again, telling me it has successfully updated and I can use it again, but each time I check again, the cycle repeats.

        These machines have always updated and checked correctly in the past. The two 32 bit machines are not currently connected to a licence, but this has never been a problem with updating the Office 365 software in the past.

        Has anyone seen this as well? Are they correctly updating, as they report, and the check is not seeing this, or are they not updating? Is it something to do with Win 7 coming to EOL?

        • #2015982 Reply
          PKCano
          Da Boss

          Office 365 does not update through Windows Update. Only the .msi (persistent) versions update through WU.

          Office 365 updates directly from Microsoft.

      • #2016006 Reply
        Speccy
        AskWoody Lounger

        First of all, a quick heads-up: Windows Defender got a new Antimalware Client (Version 4.18.1911.3, engine v1.1.16600.7) yesterday. Quick and Full scans appear to be working fine with current anti-malware definitions (v1.307.20.0 as I write this – more help about this specific subject in my previous post here).

        Second, if you haven’t donated yet (guilty! – my bad, sorry…) and have no access to Patch Lady Susan Bradley’s paywalled Patch Watch Column here goes yet another (adding to everyone else’s) additional feedback – reporting back (follow-up of my previous post) from a managed set of Win7/8.1/10 Virtual Machines (VMs) and physical systems: my previously mentioned “Stable BETA TEST” snapshots became the “Stable BASELINE” ones, and the current “Stable BETA TEST” snapshots are now as follows:

        Windows 10 x64 (Version 1803):

        [Nov 12, 2019] –KB4523203 (2019-11 SSU)
        [Nov 12, 2019] –KB4525237 (2019-11 Monthly Rollup) b1130

        No observable bugs so far, all working fine and normally. System integrity confirmed by executing the SFC /VERIFYONLY and DISM /Online /Cleanup-Image /CheckHealth commands (both successful, no errors returned).

        Windows 8.1 x64 (Group A):

        [Nov 12, 2019] –KB4524445 (2019-11 SSU)
        [Nov 12, 2019] –KB4525243 (2019-11 Monthly Rollup – includes KB4525106 [IE11 Rollup])

        SSU installed first (manually downloaded from the Catalog), then the Monthly Rollup (WU).
        MSRT (Microsoft Malicious Software Removal Tool) v5.77 [Nov 2019] installed successfully via WU, executed normally (no errors).
        No observable bugs so far, all working fine and normally. System integrity confirmed by executing the SFC /VERIFYONLY and DISM /Online /Cleanup-Image /CheckHealth commands (both successful, no errors returned).

        Windows 7 x64 SP1 (Group A):

        [Jul 09, 2019] –KB4507004 (.NET Framework 3.5.1, part of KB4507420 [2019-07 .NET Framework Rollup] => Re-released Oct 15, 2019)
        [Sep 23, 2019] –KB4474419 (2019-09 SHA-2 v3)
        [Nov 12, 2019] –KB4523206 (2019-11 SSU)
        [Nov 12, 2019] –KB4525235 (2019-11 Monthly Rollup – includes KB4525106 [IE11 Rollup])
        [Nov 12, 2019] –KB4524421 (.NET Framework 4.6.2, part of KB4524741 [2019-11 .NET Framework Rollup])

        Manually updated using the packages downloaded from Catalog.
        No observable bugs so far, all working fine and normally. System integrity confirmed by executing the SFC /VERIFYONLY command successfully (no errors returned).
        MSRT (Microsoft Malicious Software Removal Tool) v5.77 [Nov 2019] manually downloaded (before being pulled out from Catalog*) and successfully executed/installed (no errors)*.

        *Although the Catalog references for applicability of the tool for Windows 7/Server 2008/R2 systems have been pulled out, these were indeed the very same 32-bit/64-bit binaries that remained and are still being offered (currently, for Windows 8.1/10/Server 2012[R2]/2016 only) – more about that here, here, here, here, here and here.

        3 users thanked author for this post.
      • #2016123 Reply
        stewagreen
        AskWoody Plus

        Hi.  I’ve been trying to update my Win 7 PC for several months now.  I am a follower of Group A, trying to keep it simple, always installing from Windows Update.  I’ve not had to install from the catalog and have never hidden any updates.  Whenever I check for updates, I am presented with KB4516065, 2019-09 Security Monthly Rollup from September.  Each time I try to install it, I get code 80092004 Windows update encountered unknown error.  I’ve tried to follow the saga of installing the Service Stack Updates (which seems related), but get confused.  I see I do have KB4474419 installed, from Windows Update, on 11/7.  Can someone please suggest what I need to update or install to get updated thru November’s Rollup, and where to get it?  Thanks!

        • #2016142 Reply
          PKCano
          Da Boss

          Try this:
          + In Windows Update upper left, click on “Change Settings.” Note your current setting, then change the pulldown to “Never check for updates.” Click OK
          + In Windows Update upper left, click on “View update history.” Scroll down and see if 2019-03 Servicing Stack Update for Windows 7 KB4490628 is installed. This update is necessary. Click OK
          + If KB4490628 is not there, In the main Windows Update screen,  click on”Important updates.” KB4490628 will not show up until there are no other updates (checked or unchecked) in the list. SO, right click on the updates in the important list and choose “Hide.” When you have hidden all of them, click on “Check for updates.” Hide the updates that show up, and check again, until KB4490628 shows up. Then install it.
          + Reboot the computer, wait five minutes after login.
          + On the left, Click on “Restore hidden updates”, check the updates you hid, and click “Restore.”
          + Try again to install the Rollup.

          If KB4490628 was already installed, come back and we’ll look at some other things that might be causing a problem.

          1 user thanked author for this post.
          • #2016243 Reply
            stewagreen
            AskWoody Plus

            Thanks for your reply!  I have hidden the 4 updates presented, 3 for Office 2010 and the 1 2019-09 rollup.  When I search again, I have no important updates available.  I did notice that I had deselected “Give me recommended updates the same way I receive important updates”.  So I selected that option and now get 28 important updates.  KB4490628 is not there, but there are a bunch of others such as 2019-08 Security Monthly Quality Rollup for Win 7, some .net, and a bunch of regular Update for Windows 7 for x64 based systems.  Do you think I should hide all those, and then search for updates again?

            • #2016244 Reply
              PKCano
              Da Boss

              Hide 4493132 and 4524752 if they are there then install the rest. 2019-08 SQMR is encouraging

              1 user thanked author for this post.
              • #2016531 Reply
                stewagreen
                AskWoody Plus

                Sounds good, thanks!  I will give that a go this afternoon.

              • #2016759 Reply
                stewagreen
                AskWoody Plus

                Success, thank you! I installed all the old (2014-2016!) Recommended Windows 7 for x64 Systems updates and rebooted. Then I hid KB4493132 as you recommended. I tried to install the older Recommended KB4512506 2019-08 SMQR, but that failed, same as when I tried to install KB4516065 2019-09 SMQR.

                I then restored all hidden updates and searched for updates again. It took me 5 iterations of “hide and seek” before I was finally offered KB4490628 2019-03 Servicing Stack Update. I installed that and rebooted. I restored all hidden updates and checked again for updates. This time I was offered the usual list of current updates for Office 2010 and Windows, including KB4525235 2019-11 SMQR, the latest version, which installed successfully. I also installed KB4524102 2019-10 SQR for .NET. So far so good. Thanks for your help!

              • #2016900 Reply
                stewagreen
                AskWoody Plus

                Just to finish the story, today I was looking thru these comments and saw repeated mention of KB4523206 2019-11 Servicing Stack Update.  So I hid all the checked and unchecked updates I had not installed, then checked again.  I was presented with KB4523206 and successfully installed it and rebooted.

                But I am a bit puzzled and concerned.  No where in the regular Group A instructions (from this month, as well as the link to the 2017 directions) do I see instructions to hide unchecked updates and perform an additional check.  If I had not read so many mentions of it here in the comments, I would not have known to go get it.  I would suggest Woody make this more clear in his monthly directions.  Thanks for everyone’s help.

              • #2016904 Reply
                PKCano
                Da Boss

                I can’t count all the times I have repeated just that.
                Sometimes I feel like a broken record (yes, I’m old enough to remember those firsthand 🙂 ).

              • #2017402 Reply
                stewagreen
                AskWoody Plus

                I, too, know what a phonograph is :).  Thanks so much for your help.

      • #2016143 Reply
        SueW
        AskWoody Plus

        After last month, this was a relative “breeze” — here is my feedback:

        1 – just in case, double-checked Task Scheduler — Application Experience, CEIP, and PerfTrack — all subtasks are still disabled

        2 – imaged my disk with Macrium Reflect Free

        3 – downloaded KB4523206 (latest SSU, dated 11/11) from the Catalog & installed it; restarted & waited 15 minutes

        4 – downloaded Updates KB4525233 (November SO) and KB4525106 (IE11 November Cumulative)

        5 – installed both Updates and then restarted. Note: my computer took about 22 minutes to configure and restart, after which I waited 15 minutes

        6 – re-checked Task Scheduler — Application Experience, CEIP, and PerfTrack — all subtasks are still disabled (as expected)

        7 – manually updated MS Security Essentials’ Virus & Spyware Definitions to eliminate Windows Update’s “Optional” ‘Definition Update for Microsoft Security Essentials (KB2310138)

        8 – ran “Windows Update” => 4 Important (3 checked): 3 Office 2010 and 1 Win 7; 2 Optional: both unchecked

        9 – hid the unchecked Important Security Update for Microsoft Office 2010 (KB4484127)

        10 – unchecked and hid “Important” Update KB4525235 (November Rollup)

        11 – hid the unchecked Optional update KB4525251 (November Preview Rollup)

        12 – hid the unchecked Optional update KB4524741 (November Preview for .NET Framework)

        13 – ran “Windows Update” again => 2 Important: 2 Office 2010: both checked; 0 Optional

        14 – unhid 0 hidden updates to install

        15 – installed 2 Updates: 2 Office 2010 (KB4484164 and KB4484160)

        16 – no restart necessary; restarted anyway and waited around 30 minutes

        Note: Windows Media Player did not need to be reconfigured!

        Many thanks to PKCano, Woody and everyone else who continue to contribute their time and expertise, or who post their own results! Happy Holidays to All ~

        Win 7 SP1 Home Premium 64-bit; Office 2010; Group B; Former 'Tech Weenie'

        6 users thanked author for this post.
        • #2017555 Reply
          anonymous
          Guest

          Hello SueW. Great post as always. Here is my report, done about 4 days ago.

          Windows 7 SP1 64bit, with Broadcom network card. Group B.

          Installed November’s updates; IE KB4525106, SO KB4525233, did NOT install SSU KB4523206 and did not see the MSRT.

          From the catalog; Installed KB4525106 1st and KB4525233 2nd.

          Installed one at a time. Rebooted in between each update letting it sit 1 or 2 minutes after update was installed (when hard drive light settled down).

          No network issues. No install oddities. This was a very simple monthly patch.

          Rebooted 3 times and let it sit for several minutes.

          I would recommend people on the last reboot to go to the desktop and let it sit 45 to 60 minutes to Process Idle Tasks and let the trusted installer (as per PKCano) do its thing.

          You can also force Processing of Idle Tasks as I do if you want by the administrative command prompt: rundll32 (space) advapi32.dll,ProcessIdleTasks

          You can enter that then walk away for 15 to 20 minutes. If the drive light is still on, it is still running, walk away again. Do not allow the computer to go to sleep. Reset the Power Options to 1 hour sleep if needed. Laptops make sure you are on AC power not battery!

          Thanks to all here.

          Windows 7 Group B

          1 user thanked author for this post.
        • #2017716 Reply
          anonymous
          Guest

          Thank you SueW, I would have greatly worried if you hadn’t noted that it took about 22 minutes to configure the Security-only update. The S.O.program most always wraps up easily; but this time it did take about 22 minutes to configure/install after restarting. – refrained from getting anxious there. 🙂

          1 user thanked author for this post.
      • #2016236 Reply
        Charlie
        AskWoody Plus

        I did my updating yesterday starting off with the two checked Office 2010 updates in WU.  I had already downloaded the KB4523206 SHA-2 update from the Microsoft Update Catalog,  installed it next and rebooted, and waited for what seemed like 25 min. before the CPU stopped jumping up as high as 62% in Task Manager.  This was the longest time I can remember any update taking, but it turned out okay.

        I then got the two Security Only updates KB4525233 for Win 7 and KB4525106 for IE-11 and installed each of them individually and rebooted after each one.  Again, it took longer for each update to reach the end of installation.  The good news is that I have not seen any problems and all seems to be good.

        Hurray!  Another month bites the dust!  I have not updated FF yet as I have more time to wait on it, and hopefully more positive data will come in about FF 71.

        Thanks again to all who make this monthly job so much easier.  You’re great.

        Win 7, Sandy Bridge 3.3GHz, Linux Mint 19.1, Klaatu barada nikto

        1 user thanked author for this post.
      • #2016312 Reply
        anonymous
        Guest

        I can not get the Nov 2019 Windows 7 Security Only patch to install and Microsoft Security Essentials is screwing up my Update Reboots when the system restart is attempted by the stand alone update package.

        Does this have anything to do with my updating MSE’s virus definitions for 12/7/2019 and not having the Nov 2019 Servicing Stack applied when I did that MSE Virus definition update. MSE has peen preventing me from updating my Sandy Bridge era Core i7 based laptop(Samsung Series 3) if the error logs can be trusted. The laptop has been off since I updated it previously about 3 weeks ago. I had to do several system restores just to get my laptop out of some update failure loops and I have 2 other laptops that are running MSE and should I be worried that I may have issues with them as well. All of my laptops are running Windows 7 64 bit(3 W7 Pro and 1 W7 Home).

        My newest laptop is running Norton Security and I had no issue with any of the Nov Updates, including the security stack update(Nov 2019).

        I’m considering disabling MSE while I’m doing any updating on my older laptops that are running it before downloading and installing the Nov 2019 servicing stack update and the W7 64 bit Security Only update and IE11 update for the Nov 2019 Updates as well. I have read that MSE and Defender can get screwed up by faulty definition updates and that can transfer over to borking any Monthly Patches as well if the system can not properly reboot to apply the update/patch.

        • #2016412 Reply
          PKCano
          Da Boss

          MS has said it will no longer support MSE after Win7 EOL. It’s time to look for another anti-virus solution anyway. Perhaps making the change now would help.

          • #2016416 Reply
            Seff
            AskWoody Plus

            Thanks PK. Do we know if “no longer support” means no more definition updates, or just that MS won’t provide any separate support service?

            • #2016425 Reply
              PKCano
              Da Boss

              I think both – no service, no updates. But with MS, who knows. The definitions may continue or may be downloadable.
              At any rate, I wouldn’t count on it. I’d look for some other protection.
              See this thread.

              1 user thanked author for this post.
              • #2016481 Reply
                anonymous
                Guest

                But is it MSE that’s been borking my Nov 2019 Security Only update/system restarts to apply updates and should I just disable MSE until after the updates are installed or should I uninstall MSE and do the update and reinstall MSE and hope that any corruption in MSE is fixed.

                I’m going to try a different route with my other 2 MSE installed laptops and try and disable MSE and immediately install the Nov 2019 Servicing Stack update and I’ll not really update MSE’s virus/other definitions until after all the Nov Sec Updates are installed. And I hope that maybe the issue is limited only to the Samsung Series 3 laptop.

                I’m really looking for a Windows 8.1 license Key so I can Install 8.1 on the Samsung laptop anyways and that Laptop came with a Windows 7 Home edition that I applied a Windows 7 Pro upgrade license to after I purchased the laptop. There are windows 8.1 Pro OEM license keys for sale online for discounted pricing and security updates until 2023.

                But I can get Norton Security Suite from my ISP for free and install that across up to 5 Machines but the last time I did that Norton Uninstalled  Itself with no warning from 3 out of 4 of my Laptops and only my newest laptop was allowed to run Norton. Comcast’s download instructions at the time did not have any specific instructions on how to download a Single Norton Installer package and get it Installed on up to 5 different computers.   But are there some good free alternatives to MSE that do not spy on the end user?

                All but one of my laptops usually stay in the closet until update time comes around and the only website I usually visit on the backup laptops is the Windows update catalog. So maybe I’ll just uninstall MSE and go without unless  my daily laptop breaks and I need to use one of the backup laptops while the other laptop is being repaired.

              • #2017089 Reply
                anonymous
                Guest

                OK, I removed Microsoft Security Essentials from the laptop and all the updates installed with no issues. And I think because I waited for after DEFCON4 on the Nov Patches, Dec 5 2019, that somehow MSE’s Definition updates on Dec 7(When I tried to install the Nov updates) needed that KB4523206 Servicing Stack installed first before I updated MSE’s definitions on Dec 7. So something happened to corrupt the MSE Definition Update and cause MSE to Black Screen my restart, and that’s what borked my Nov 2019 Win 7 Security Only update KB4525233 on my original attempt. And as the result of MSE Black Screening my Samsung laptop’s reboot after an update/KB install, that update could not finish installing.

                looking at the event logs on the laptop from Dec 7,  MSE was showing problem signatures since I updated MSE’s virus/engine definitions on Dec 7 before I attempted installing any Nov updates, including before I installed that latest Servicing Stack Update. So that’s my best guess as to what whet wrong on Dec 7. The laptop had been off for about one month at that time so MSE had no definition updates since around the 5th of Nov 2019 before getting a definition update Dec 7 when all the problems started. .

                So I’m removing MSE from my other 2 laptops that are also using MSE, at least until after the Nov 2019 Win 7 SO/IE 11, and SSU update, are Installed. But if MSE is no longer going to be supporting MSE on consumer Windows 7 PCs/Laptops after Jan 2020 I’ll probably just not re-install MSE and look for some other Security Software for 2020.

      • #2016438 Reply
        Seff
        AskWoody Plus

        Since installing the monthly rollup and service stack update on my main Win7 x54 on Friday, the machine booted and ran normally yesterday but today has black screened on reaching the desktop. It booted normally in safe mode, and on happening again in normal mode I was able to ctl-alt-del and open task manager when I experimented with ending and restarting explorer.exe which resulted in the desktop appearing. I’ve since rebooted to see if that fixed it, and it waited for several minutes on the “Welcome” screen before the desktop appeared normally.

        Someone else has reported on the MS site that this is related to the service stack update which cannot be installed. If the problem persists then I’ll try a system restore, but meanwhile has anyone else experienced a similar issue or got any advice please? For the moment I’m leaving my second machine alone and not updating it.

         

        • #2016495 Reply
          AJNorth
          AskWoody Plus

          Greetings,

          Have you considered running the System File Checker (SFC), possibly with its enhancement, the DISM (which for Win 7 requires the “System Update Readiness Tool”)?

          Please see:

          https://www.lifewire.com/sfc-command-system-file-checker-2626020 and

          https://www.howtogeek.com/222532/how-to-repair-corrupted-windows-system-files-with-the-sfc-and-dism-commands/

          Cheers,

          AJN

          1 user thanked author for this post.
        • #2018253 Reply
          anonymous
          Guest

          Yes, on 2 laptops (one is Pro; other is Home) that have not been problematic heretofore. They get hung on “Welcome” after selecting user. This started after restarting them the day after installation of svc stack.

          After the suggestion, ran scannow; nothing found.

          Tried to uninstall SSU KB4523206; cannot be uninstalled.

          Then did system restore just prior to SSU install. This seems to work; I have restarted it a couple of times and it logs into the user right away. Tomorrow might be different – who knows – but hope this works so I do not have to reload backup. Then I will do same on other laptop.

          1 user thanked author for this post.
          • #2018281 Reply
            hms
            AskWoody Plus

            Sorry that I forgot to login for my post as “anonymous”.

            At this point in the life of Win7, do not know why we need the SS update.

            At least I am not the only person with the issue.

             

      • #2016663 Reply
        anonymous
        Guest

        The computerworld article mentioned Servicing Stack Updates. Does it have to be installed for Group B users? If so, how much telemetry is in it? Can it be skipped like all other Telemetry updates were offered in past few months? I prefer to be compromised by viruses rather than have MS telemetry in my OS.

        • #2016667 Reply
          PKCano
          Da Boss

          Servicing Stack updates are updates for the Windows Update system itself.
          They DO NOT contain telemetry and are necessary for proper operation of the system.
          They need to be installed for Group B and Group A.

          1 user thanked author for this post.
          • #2016692 Reply
            anonymous
            Guest

            I never installed them as Group B started and my updates are working fine. If I decided not to install it, what problems might happen?

            • #2016697 Reply
              PKCano
              Da Boss

              Its the update for Windows Update. It should be installed.

              1 user thanked author for this post.
              • #2017682 Reply
                anonymous
                Guest

                But those Windows updates KB are not shown in:https://www.askwoody.com/forums/topic/2000003-ongoing-list-of-group-b-monthly-updates-for-win7-and-8-1/

                If they are not there, than they must be telemetry/spyware from MS. This is why I only install Updates that are listed there and skip those that mention telemetry.

              • #2017689 Reply
                PKCano
                Da Boss

                AKB2000003 lists Group B patches.
                The Servicing Stack Updates have nothing to do with Group B’s puppose so are not listed with Group B patches. And they DO NOT contain telemetry.

                2 users thanked author for this post.
              • #2018242 Reply
                anonymous
                Guest

                It seems I am confuse. That topic was for Group B that want to have safe from MS telemetry. I only installed updates that were in that topic. I did not install any other updates and computer works fine. Since my computer is working, I am going to assume that I do not need Servicing Stack Updates . If computer will have a problem in the future, than I might have to install Servicing Stack Updates. I will make a note for myself in my Windows updates folder that I have all updates download except the MS telemetry were skipped.

              • #2018245 Reply
                PKCano
                Da Boss

                That topic was for Group B that want to have safe from MS telemetry. I only installed updates that were in that topic.

                That is where you are confused. The patches in AKB2000003 ARE NOT the only patches that Group B installs. The Security-only  and IE11 patches were to avoid the ROLLUPS which Microsoft used to replace the single patch system it had up until Oct 2016. It happened that later MS put telemetry in the non-security portion of those ROLLUPS, but  not in the Security-only patches (with the exception of July and Sept 2019).

                BUT, Group B ALSO installed the IE Flash Player patches in Win8.1,  Servicing Stacks, SHA-2 coding support updates, the .NET updates, updates for Office, updates for things like C++, etc through Windows Update. Those patches DO NOT contain telemetry.

                So your whole ides of what Group B is has been mistaken all along. And you need those other patches (whether you realize it or not). If you do not patch the other parts of the system, your computer is vulnerable.

              • #2018749 Reply
                anonymous
                Guest

                BUT, Group B ALSO installed the IE Flash Player patches in Win8.1,  Servicing Stacks, SHA-2 coding support updates, the .NET updates, updates for Office, updates for things like C++, etc through Windows Update. Those patches DO NOT contain telemetry.

                I did install Flash Player patches. I do not have Office so not updates for that were installed. I have not install Servicing Stacks, SHA-2 coding support updates, the .NET updates, updates for things like C++, etc since Oct 2016. I have scanned my computer and there are no viruses on my computer. There are no updates to install in Windows Update. Only optional updates has 90 items to install. Does this mean I have to install the 90 optional installs? Or what updates should have been installed since Oct 2016?

              • #2018753 Reply
                PKCano
                Da Boss

                No, it does not include the unchecked optional.
                But I find it strange you are able to use Windows Update at this point without KB4474419 SHA-2 coding support and KB4490628 Servicing Stack installed.

              • #2018862 Reply
                anonymous
                Guest

                No, it does not include the unchecked optional.
                But I find it strange you are able to use Windows Update at this point without KB4474419 SHA-2 coding support and KB4490628 Servicing Stack installed.

                I checked and I do not have KB4474419 and KB4490628 installed. I have two updates for December 2019 waiting to install in Windows Update but I am waiting for the green light.

              • #2018916 Reply
                Paul T
                AskWoody MVP

                Which two updates?

                cheers, Paul

              • #2019301 Reply
                anonymous
                Guest

                The two updates are KB4530702 Monthly Roll up and KB890830 WMSRT for December 2019. But I am in Group B so I do not install Monthly Roll up and waiting for the green light to install only the security if there are no Telemetry in Dec 2019.

                But I was told that I should have been installing other updates (IE Servicing Stack) but nothing else is showing as important in Windows Update.

              • #2019308 Reply
                PKCano
                Da Boss

                You must have Win8.1 since KB4530702 is a Win8.1 update. The two mentioned before, KB4474419 and KB4490628. are Win7 updates, so you would not have those.

                But the same thing goes about the patches for Win8.1. Group B should install the IE11 Cumulative update (Nov KB4525106 or Dec KB4530677 included in AKB2000003), the latest Servicing Stack was Nov KB4524445 released through Windows Update, and any of the other patches for parts of the Windows OS.

              • #2019614 Reply
                anonymous
                Guest

                Yes. I have installed KB4525106 . December will have to wait for the green light before I install that update.

                KB4524445 is not shown in important or optional updates. If it is not there, do I need to install it manually than? If so than that Ongoing List should mentioned that some updates do not show up and need to install them manually.

              • #2019625 Reply
                PKCano
                Da Boss

                You can download KB4524445 if you want. SSUs will not show up in the Windows Update queue if there is any other update (checked or unchecked) pending. So you would have to hide whatever is there temporarily, otherwise, to get it to show up.

                Group B patching is only about installing the SO and IE CU instead of the Rollup, and does not mention the other patches that are needed.

              • #2020820 Reply
                anonymous
                Guest

                I hide the two updates and still the KB4524445 is not showing up. I am going to skip it until something breaks with updates. Thanks for trying to help.

      • #2016778 Reply
        Myst
        AskWoody Plus

        Installed KB4525235 Nov 2019 Rollup
        Put unchecked MS Office 2010 Access update into hiding (KB4484127)
        Installed the checked Office 2010 updates
        KB4523206 SSU popped up after installing Important Updates, threw that in, restart required.

        As @suew mentioned, went to the Task Scheduler (post Nov 2019 update for me, forgot to check before updating) and made sure App Experience, CEIP, Media Center and PerfTrack, along with all subtasks, were still disabled and they were, hooray.

        Did a system image on my external HD, as is the usual prior to each update.

        All is well. Thanks everyone for your input in posting results.

        Win7 SP1 Home x64, MacOS / Chromebook

        3 users thanked author for this post.
      • #2016863 Reply
        Grond
        AskWoody Plus

        Hello all.

        This is my first update go-around with my new Win10 Pro x64 box and I wanted to make sure my PC and me are in a happy place. Please see the attached screen-grabs. I did *not* click on/install the Optional Feature Updates link. Any advice welcome.

        Thanks. 🙂

        Windows 10 Pro x64 v1909 Desktop PC

        Attachments:
        • #2017392 Reply
          woody
          Da Boss

          You’re fine.

          The “Optional Feature update” is just the upgrade to 1909. I’m still hesitant to recommend 1909 because of File Explorer Search problems, and an odd handful of other bugs.

          With a little luck the bugs will get ironed out today. Stay tuned.

          1 user thanked author for this post.
      • #2016870 Reply
        Paul T
        AskWoody MVP

        You have paused updates until the 21st so Windows will then update.
        We recommend waiting until Woody gives the green light and to do that you need to pause until well into the next month, then you can resume when it’s OK.

        All the other things seem OK so you just need to backup.

        cheers, Paul

        1 user thanked author for this post.
      • #2017380 Reply
        EP
        AskWoody_MVP

        regarding Microsoft Security Essentials (MSE) support on Windows 7 – that will end on January 14, 2020 whether having Win7 ESUs (extended security updates) or not

        waiting for gborn’s reaction to this recent blog from deskmodder.de as MSE may start getting EOL nags on Win7 this month:
        https://www.deskmodder.de/blog/2019/12/10/windows-7-microsoft-security-essentials-mse-werden-auch-ab-dem-14-januar-nicht-mehr-aktualisiert/

        I’m gonna start uninstalling MSE from any of the Win7 machines I have this month

        • This reply was modified 7 months ago by EP.
        1 user thanked author for this post.
        • #2017391 Reply
          woody
          Da Boss

          I didn’t expect to see Microsoft Security Essentials supported past January 14 – but I’m surprised to see that (apparently) even those who pay for Extended Support won’t get MSE updates.

          Fortunately, there are alternatives.

          EDIT: I just went back to the source document from MS. It isn’t clear to me if Win7 ESU subscribers will get MSE updates.

          1 user thanked author for this post.
      • #2017553 Reply
        jniffen
        AskWoody Plus

        Speccy posted:

        Windows 7 x64 SP1 (Group A):

        [Jul 09, 2019] –KB4507004 (.NET Framework 3.5.1, part of KB4507420 [2019-07 .NET Framework Rollup] => Re-released Oct 15, 2019)
        [Sep 23, 2019] –KB4474419 (2019-09 SHA-2 v3)
        [Nov 12, 2019] –KB4523206 (2019-11 SSU)
        [Nov 12, 2019] –KB4525235 (2019-11 Monthly Rollup – includes KB4525106 [IE11 Rollup])
        [Nov 12, 2019] –KB4524421 (.NET Framework 4.6.2, part of KB4524741 [2019-11 .NET Framework Rollup])

        So if I have a machine that has not been updated since July 2019 with the following:
        KB4483187  — 02/13/2019 12:00:00 AM
        KB4483458 — 02/13/2019 12:00:00 AM
        KB4474419 — 05/13/2019 12:00:00 AM
        KB4490628 — 05/13/2019 12:00:00 AM
        KB4495606 — 06/03/2019 12:00:00 AM
        KB4499164–   06/03/2019 12:00:00 AM

        If I apply the patches listed in the “A Group” above, I’ll be back in sync?

         

        • #2017570 Reply
          PKCano
          Da Boss

          I believe you should install [Sep 23, 2019] –KB4474419 (2019-09 SHA-2 v3) and KB4490628 — 05/13/2019 12:00:00 AM  first. The SSU KB4490628 will need to be installed exclusively (by itself).

      • #2017559 Reply
        anonymous
        Guest

        Can anyone like Microfix, Abbodi86 or PKCano tell me why I should install the KB4523206 Servicing Stack Update when we have 2 months to EOL? I do not believe this SSU has anything to do with helping us get updates easier. I think this is an update to see who has paid for extended support and who has not. There is a financial reason here not a “customer satisfaction or reliability” reason here.

        Saying to install the SSU simply because it is offered is not-good-enough for me or any true WOODY’s follower.

        Thank you.

        • #2017568 Reply
          Microfix
          AskWoody MVP

          We are at MS-Defcon 2 so, I would take Woody’s solid advice not to install anything at the moment. I’m kind of in agreement with you with regards to an SSU one month before Win7 EOL it just doesn’t make sense to me either…

          | Win8.1 Pro x64 | Linux Hybrids x86/x64 | Win7 Pro x86/x64 Offline |
        • #2017657 Reply
          abbodi86
          AskWoody_MVP

          Yeah, the SSU KB4531786 is only ment to harden the ESU eligibility verification

          1 user thanked author for this post.
        • #2017705 Reply
          anonymous
          Guest

          Thank you very much for answering Microfix and Abbodi86. My question was for the November KB4523206 Servicing Stack Update but thanks to your answer. I now see there is one for December too. I don’t trust it.

      • #2017962 Reply
        jniffen
        AskWoody Plus

        I believe you should install [Sep 23, 2019] –KB4474419 (2019-09 SHA-2 v3) and KB4490628 — 05/13/2019 12:00:00 AM  first. The SSU KB4490628 will need to be installed exclusively (by itself).

        Thanks for responding.
        Sorry if my message was not written the best.
        I will plan to install the updated
        [Sep 23, 2019] –KB4474419 (2019-09 SHA-2 v3)
        It already has KB4490628 — 05/13/2019 12:00:00 AM installed.
        Then
        [Nov 12, 2019] –KB4523206 (2019-11 SSU)
        [Nov 12, 2019] –KB4525235 (2019-11 Monthly Rollup – includes KB4525106 [IE11 Rollup])

        I don’t recall installing any .NET, but if the .NET 4.6.2 is on the PC, I will install
        [Nov 12, 2019] –KB4524421 (.NET Framework 4.6.2, part of KB4524741 [2019-11 .NET

        The unit only runs a radio broadcast audio automation system, no Java, no Flash, no Abode, etc.
        The automation program developer states no Anti-Virus either.

        • This reply was modified 7 months ago by jniffen.
        • #2017967 Reply
          Paul T
          AskWoody MVP

          Then why are you patching at all?
          Limit what the box can see and do and leave it alone.

          cheers, Paul

      • #2040653 Reply
        anonymous
        Guest

        A request for feedback:

        I decided to go with November updates and not installing SSU KB4523206 (I read some PC got locked at boot) and keep using SSU KB4516655 (from September; MS requires March SSU.)

        I installed KB4525233 and when I clicked restart it kept saying “Preparing to configure Windows. Please do not turn off your computer.” No percentage was shown. The dot after the Windows word was moving. I waited like 20 minutes then I pressed the power button. Boot again, choose Normal and at the beginning it was stuck at 0 percent then increased until 30 something and did a shutdown on its own. After booting again, started at 32 percent and finished. Windows Update history shows KB4525233 status as Successful instead of Failed.

        So, everything is good? I mean, even if I turn off the PC when I shouldn’t, do updates are wise enough to check what they did or did not and resume properly? Thank you.

        • #2040667 Reply
          PKCano
          Da Boss

          If the system reports the installation wa successful, then, yes, it was successful. You should leave the system alone during the install and not try to decide whether it is finished or not. If you don’t, sooner or later you will cause problems for the computer from which it will be unable to recover.

          You installed the Security-only update KB4525233. You also need to install the IE11 Cumulative Update KB4525106.
          Then you need to install the Servicing Stack KB4523206.

           

    Viewing 49 reply threads

    Please follow the -Lounge Rules- no personal attacks, no swearing, and politics/religion are relegated to the Rants forum.

    Reply To: MS-DEFCON 4: Time to get the November patches installed

    You can use BBCodes to format your content.
    Your account can't use Advanced BBCodes, they will be stripped before saving.