MS-DEFCON 4: Time to get the November patches installed

Topic

New Reply

A few quick notes: I’m recommending that Win10 Home users move to version 1903 (or 1909). The ability to Pause updates outweighs the potential hassles
[See the full post at: MS-DEFCON 4: Time to get the November patches installed]

12 users thanked author for this post.

Noel Carboni, jburk07, rc primak, ch100, abbodi86, Nibbled To Death By Ducks, SueW, samak, Alex5723, AJNorth, Microfix, Myst

Reply | Quote

Replies

(Pre-Computerworld article)
For those who need SHA-2 patches (Sept 2019)
Win7 x86/x64 are available here for download:
https://www.catalog.update.microsoft.com/Search.aspx?q=4474419

Windows - commercial by definition and now function...

1 user thanked author for this post.

woody

Reply | Quote

I’ve installed two or three SHA-2 patches and have not had any problem getting updated in October.  They haven’t come out with another SHA-2 patch have they?  I haven’t heard any talk about it if they have.

Being 20 something in the 70's was far more fun than being 70 something in the insane 20's

Reply | Quote

Twelve Win 7 Pro and five Win 8.1 Pro rigs (all x64) have been successfully updated; several hours later, no issues have been reported.

4 users thanked author for this post.

Microfix, rc primak, jburk07, Myst

Reply | Quote

Similar results upgrading my Intel NUC PC from Win 10 Pro 1809 to 1903. No major issues noted, but I don’t use Windows much.

-- rc primak

Reply | Quote

Windows 1809 Pro has been updated with KB4523205 (OS Build 17763.864) + MSRT. So far so good.

Reply | Quote

1809 Pro, I’ve updated 3 desktops to 17763.864 (KB 4523205) and MSRT, and SSU KB 4523204 with no problems so far. My laptop hasn’t checked for updates since yesterday so am a bit confused as to why it’s not checking. It always has in the past so I may do the unthinkable and click on “Check for Updates”.

Don't take yourself so seriously, no one else does 🙂
All W10 Pro at 22H2,(2 Desktops, 1 Laptop).

Reply | Quote

Evidently the laptop was waiting for 10 am PST since it is updating as I write this. Will see how it goes. It’s getting the same updates as the other computers.

Don't take yourself so seriously, no one else does 🙂
All W10 Pro at 22H2,(2 Desktops, 1 Laptop).

Reply | Quote

Updated with no problems so far:
+ Win10 Pro v1803 to Build 17134.1130 (KB4525237) last update, EOL. Waiting to see if it gets hijacked (not). Or will upgrade to version of MY choice after Patch Tues.
+ Win10 Pro v1809 to Build 17763.864 (KB4523205)
+ Win10 Pro v1903 to Build 18362.476 (KB4524570)
+ (4) Win8.1 Pro Group A
+ (8) Win7 combination of Home Prof, Pro, Ultimate, 32-bit and 64-bit Group A

Skipped (hid) Office 2010 KB4484127 that was causing Access problems.

5 users thanked author for this post.

Microfix, rc primak, abbodi86, jburk07, Myst

Reply | Quote

Checked updates, KB4525235, 2019-11 Security Monthly Quality Rollup for Win 7 x 64 popped up. Downloaded, installed and rebooted successfully. Checked updates again and am now offered KB4523206, 2019-11 SSU for Win 7 x 64. I previously installed KB4516655, 2019-09 SSU Win7 x64 on 11/06/2019. What’s with another SSU popping up? Win 7 Pro, x64, SP1, i7-Core “Haswell”, HP ZBook, Group A

Reply | Quote

The Servicing Stack Update is the update for the Windows Update mechanism itself. That needs to be updated too, but has to be updated exclusively (by itself), so it doesn’t show up until all the other pending updates have been installed or hidden. That’s why you got it last and by itself.

5 users thanked author for this post.

Fritz, Microfix, jburk07, Demeter, woody

Reply | Quote

Here at Woody’s we use to be instructed that the SSU’s were to be installed exclusively and always first requiring either hiding all available updates showing in order to make the SSU appear, or download the SSU from the MS Catalogue and manually install it before using the Windows Updater to install the other updates.

For Windows 7 SSU KB4523206, MS still recommends that it be installed before any other updates.

However others seem to be OK installing the regular November updates and then installing the SSU when it appears afterwards.

So is either way OK now?

Windows 10 Pro x64 v22H2 and Windows 7 Pro SP1 x64 (RIP)

1 user thanked author for this post.

Charlie

Reply | Quote

KB4523206 downloaded & installed without a reboot. It was only offered after I downloaded & installed KB4525235. Win 7 Pro x64, SP1, i-7Core “Haswell”, HP ZBook, Group A

Reply | Quote

You can also download it from the Microsoft Update Catalog.

That’s what I did – after I found out I needed it.

Being 20 something in the 70's was far more fun than being 70 something in the insane 20's

Reply | Quote

in other words, on windows 7 i need to search for updates and install office 2010 updates first, in order to get the new sha-2 patch and then install group b patches from akb2000003?

btw. there is an unchecked important update for office 2010: kb 43484127 – what is it? should install it or skip it? and has that access bug for office 2010 already been fixed?

PC: Windows 7 Ultimate, 64bit, Group B
Notebook: Windows 8.1, 64bit, Group B

Reply | Quote

The latest SHA-2 update was 9/9/2019 – it is required but probably already installed on your computer. Check the update history or installed updates to be sure.
After you install all the updates in the first round, you will need to check again for the Servicing Stack KB4523206, which won’t show up till the others are installed.

5 users thanked author for this post.

Fritz, Demeter, jburk07, honx, woody

Reply | Quote

PKCano wrote:

The latest SHA-2 update was 9/9/2019 – it is required but probably already installed on your computer. Check the update history or installed updates to be sure.
After you install all the updates in the first round, you will need to check again for the Servicing Stack KB4523206, which won’t show up till the others are installed.

so i’ll install office updates except unchecked kb4484127 which i’ll hide, then i search for updates again, install kb4523206 if it’s ordered and then install november group b patches.

PC: Windows 7 Ultimate, 64bit, Group B
Notebook: Windows 8.1, 64bit, Group B

Reply | Quote

what if i only install KB4523206 manually from microsoft catalog ?

Reply | Quote

You can install KB4523206 from the Catalog. No problem.
But if you go that route, install it first, then the others.

1 user thanked author for this post.

L95

Reply | Quote

PKCano wrote:

You can install KB4523206 from the Catalog. No problem.
But if you go that route, install it first, then the others.

too late for that route. i installed all other office patches already, only skipped kb4484127 on both machines. so i wait until greenlight (defcon 3 or higher) for installing december patches. then i’ll install kb4484127 and the fix for it.

maybe there will be a replacement instead of kb4484127, including this patch and it’s fix. in this case i wouldn’t need to install kb4484127 at all! 😀

PC: Windows 7 Ultimate, 64bit, Group B
Notebook: Windows 8.1, 64bit, Group B

Reply | Quote

Thanks to Woody and PKCano for telling us about the Servicing Stack Updates for this month.  I’m wondering if  it would have been a little more helpful if Woody would have mentioned in his ComputerWorld article of December 5th  that  the Servicing Stack Updates should be installed before the other updates.  But anyway,  PKCano has clarified this in his comments here.  The Servicing Stack Update  KB4523206 was NOT offered to me by Microsoft when  I did a “check for updates”.   Therefore,  I used the catalog to install it.  I assume that it would have been offered to me when I did another check for updates after installing all the other Windows Updates for November,  if I had not already installed it from the catalog.   My question is:  why didn’t Microsoft offer me the Servicing Stack Update  KB4523206 during my first check for updates,  if indeed it’s important for ensuring that all of the other updates for the month are installed correctly?   Maybe there’s something I’m not understanding here,  so I would appreciate it if you could answer this question.

Reply | Quote

“Win7 and 8.1 do not include telemetry this month”

Good but.. would it make sense to install patch “pieces” every other month?
Wouldn’t it cause a mess?
For now I’m staying at May..

Reply | Quote

From the article: “you can install the June, August, October and November patches”.
Many Group B have done this and nobody has reported any issues.

Windows 10 Home 22H2, Acer Aspire TC-1660 desktop + LibreOffice, non-techie

3 users thanked author for this post.

Charlie, phaolo, SueW

Reply | Quote

regarding patching for windows 7 i went the opposite direction this month:
installed updates for office 2010, i hid kb4484127, then i installed ssu kb4523206, unhid kb4484127 and last i installed so updates kb4525233 (win7) and kb4525106 (ie).

for windows 8.1 i went the normal route: kb4525250 (win8.1), kb4525106 (ie) and after reboot i installed office 2010, defender and msrt.

on both machines i skipped kb4484127 for now, as i don’t know if it’s already the fixed version.

PC: Windows 7 Ultimate, 64bit, Group B
Notebook: Windows 8.1, 64bit, Group B

Reply | Quote

The fix for the Access problem in Office was a Catalog-only download, manual install. We will get the fix with the Office Security updates on Patch Tuesday.

1 user thanked author for this post.

honx

Reply | Quote

PKCano wrote:

The fix for the Access problem in Office was a Catalog-only download, manual install. We will get the fix with the Office Security updates on Patch Tuesday.

thx, then i’ll wait. i’ll install kb4484127 together with the fix when december patches are ready to install (ms defcon 3 or more for december patches).

maybe there will be a replecement instead of kb4484127, including this patch and it’s fix. in this case i wouldn’t need to install kb4484127 at all! 😀

PC: Windows 7 Ultimate, 64bit, Group B
Notebook: Windows 8.1, 64bit, Group B

Reply | Quote

Win 8.1 Pro updated a couple days ago. It offered the 2 to me separately. One at a time.  I had backed up before.  No problems since.

1 user thanked author for this post.

Microfix

Reply | Quote

I upgraded two machines from WIN10 1809 to 1903 (KB4524570 level).  No issues at all.  I decided to upgrade since the disappearing defer control and the problem with the start menu were fixed.  Surprised that Woody advised to wait at least another month month to upgrade to 1903. Really didn’t say what the concern was.  He also thought that December update be very minor because of the holidays.

1 user thanked author for this post.

rc primak

Reply | Quote

I had similar results. The upgrade caused no noticeable issues, and fixed the broken Microsoft Store App in my Limited User Account.

-- rc primak

Reply | Quote

After hiding the previews the SSU (4524445) showed up as expected.

Rescanned & this showed up.  4524104 .NET pub.date 100819.  It should’ve been installed last month, which is strange.  Update history shows nothing.  The last one being from the september group 4514604 installed 100219 along with the others.  Decided to hide it, rescanned & got another 4514604 dated 091019, WTH.

Rescan, hide, repeat…

*4507422 (pub.date 070919) important
.NET previews appeared too, hiding those also
*4499408 (051419) important
*4487080 (021219) important
*4471989 (121118) important
*4457920 (091118) important
*4459924 (100918) optional
*4345592 (081418) important
-4340558 (071918) important
-4099635 (051718) important
#4055266 (010918) important
#4076494 (021318) optional
*4041085 (091217) important
-4049017 (112717) optional
*4019114 (050917) important
-4043767 (101017) optional
-4014983 (041117) important
-3205404 (061317) important

* update notes said installed
# update notes said ignored
– update notes show nothing

Update history 2016 lists separate updates for 4.5.2 (3142030) & 3.5 (3142026) amongst others that year. Same with 2015 which didn’t start until August (3072307). No record of 2014 updates which is strange as this Asus laptop was purchased Nov.2013.

I’m not overly concerned by this behavior.  Only posting it in case others may have had similar results & might be wondering if it was just them.

Happy holidays.

 

Win 8.1 (home & pro) Group B, W10/11 Avoider, Linux Dabbler

2 users thanked author for this post.

Microfix, abbodi86

Reply | Quote

The QualityCompat registry key is still needed to properly link the supersedence chain

3 users thanked author for this post.

Microfix, ch100, Purg2

Reply | Quote

@abbodi86, thanks for saying that fella.  My notes indicate that there were consistent issues with .NET from late 2017 until August 2018.  Therefore I skipped a couple early on, hence the notation about ignoring.

I went back & checked my QualityCompat key  and all is as it should be despite not having installed 4056898.  I’m fairly certain that it was also verified Jan.2018 or thereabouts.  At any rate, it’s good to know I’m squared away in that regard.  Still strange that these critters decided to do what they did today, shrugs.

Win 8.1 (home & pro) Group B, W10/11 Avoider, Linux Dabbler

Reply | Quote

Woody referencing your article part about deferring cumulative updates:

With Windows Pro 1903 you can defer CU’s any number of days your like, plus change that decision up or down whenever you want.

Don’t see how having to press the Pause updates button numerous times and limited to 7 day intervals is easier.  Plus once you make your selection, isn’t it irreversible?

Also does the Group Policy – Windows Updates #2 – Ask before downloading or installing work with the Pause button routine?

Windows 10 Pro x64 v22H2 and Windows 7 Pro SP1 x64 (RIP)

Reply | Quote

Home is the most common Edition of Win10. If you walk into Best Buy, WalMart, or the like, and buy a computer, Home is what you get. Joe Public doesn’t know the difference between Home and Pro, they don’t even know what version they have. They just have a Win10 computer.

Win10 Home does not have Group Policy. And for the first time, they have a Pause option to somewhat protect them from MS’s forced updates. That is the ONLY protection they have. So that is the first thing Woody recommends to stop the push.

If you have Pro Edition, you have other options. Don’t confuse the two, and try not to equate them.

1 user thanked author for this post.

woody

Reply | Quote

PK, understood but in Woody’s article he actually shows the Advanced page of Windows Pro with the CU deferral set at 15 days, then goes on to say there is a much simpler tool available – that of pressing the Pause button up to 3 times.

That is what my question is directed at.

Windows 10 Pro x64 v22H2 and Windows 7 Pro SP1 x64 (RIP)

Reply | Quote

[frankus333]

This was my question as well, as per my previous posts:

Edit; this link goes to the top of the posts, not my post, which I had selected.  My posts start at #2003792.

https://www.askwoody.com/forums/topic/ms-defcon-2-with-patch-tuesday-tomorrow-and-a-win10-1909-upgrade-waiting-in-the-wings-nows-a-good-time-to-check-that-automatic-updates-temporarily-turned-off/#post-2003792

Also, I gleaned from Woody’s comments in the latest Computerworld article on DefCon rating set to 4 for November patching that it might be the known reliability of the technique of hitting the Pause three times, over the precise setting option, that makes it the recommended way to go. (sorry; couldn’t figure out how to copy the relevant paragraph)

Now that DefCon is at 4, I pressed the Resume Updates button, WU immediately checked for updates, and three updates (Nov CU, MSRT and a Realtek driver I allowed through) downloaded automatically, and then sat patiently waiting for the Active Hours to end. I pressed the Restart Now button and the updating completed normally. I was left with only the optional feature update to 1909 sitting there, but not trying to download; i.e.; really optional.

I think the precision of being able to easily set the pause day and date, and vary it easily if desired, is the better way to go, and what I will continue using. I am now a happy camper. I can leave my internet connection normal, unmetered, and WU updating paused to the precise Sunday before each patch Tuesday, and the only updating that occurs automatically is Defender. Optional feature (and cumulative) updates can be seen but are not a threat. The way it should be, at last!!

Edit: Oops; forgot to check how easy it is to use wushowhide as per my previous post #2004565 in above string of posts.  The Check for Updates does start immediately after Resume is pressed, so one would have to be quick to hide the unwanted update(s) in the scenario where a bad patch was part of the offering and the others were OK and desired to be downloaded.  Perhaps I can check this when Dec patches are ready for DefCon 4.

• This reply was modified 5 years, 5 months ago by frankus333.
• This reply was modified 5 years, 5 months ago by frankus333.

1 user thanked author for this post.

Cijan

Reply | Quote

[frankus333]

Re last paragraph above; maybe switching back to metered connection before hitting Resume Updates would give a bit more protection while running wushowhide.

Re the ability to see optional updates; this is only when the Pause updating has been removed (Resume Updates)

All in all, a very tidy useful development

• This reply was modified 5 years, 5 months ago by frankus333.

1 user thanked author for this post.

rc primak

Reply | Quote

Metered Connection can be overridden by WU for anything other than a Feature Update, which can remain paused.

-- rc primak

1 user thanked author for this post.

frankus333

Reply | Quote

What is really important here is , now everyone has a way to avoid patching until they know what to expect.
Pause is available to everyone, Home or Pro. With Pro, there is also the option to defer updates.
Use the one that makes sense for you. The results is a bit more control over updates.

5 users thanked author for this post.

JCpharm, Microfix, rc primak, woody, frankus333

Reply | Quote

I am updating now 😬 and hoping all goes well 😃!  Win10 pro. Once complete, how do I set the deferral? Thanks

With Windows Pro 1903 you can defer CU’s any number of days your like, plus change that decision up or down whenever you want.

Reply | Quote

Windows update Settings here under Settings\Update & Security\Windows Update\Advanced settings.
Group policy settings here Local Computer Policy\Computer Configuration\Administrative Templates\Windows Components\Windows Update

1 user thanked author for this post.

dmt_3904

Reply | Quote

Oh, that’s something I forgot – in optional I did a .net from Oct, but the 2 for .net for Nov were only previews so I didn’t do them.

Reply | Quote

It is not recommended to install optional uncheckded updates (Preview or not).

Reply | Quote

As recommended, I used the downloaded “Win10_1903_x64.iso” up update a Win 10 Home (ver. 1809) system. The update went well, but to version 1909, not ver. 1903.

So does that mean that it does not matter what .iso file we get, MS will override that to get the latest feature version of Windows?

Reply | Quote

Did you disconnect from the Internet during the upgrade using the ISO?
If not, did you allow the install to get updates from the Internet?

1 user thanked author for this post.

cmar6

Reply | Quote

[PKCano]

PKCano wrote:

Did you disconnect from the Internet during the upgrade using the ISO?
If not, did you allow the install to get updates from the Internet?

PK, I did not disconnect from internet during upgrade using ISO.

I don’t recall being given a choice about allowing the install to get updates from the internet. How do I prevent that?

 

However, when I did the update from the same 1903.iso file on a Win 10_x64 (ver. 1809), I got version 1903. Go figure.

• This reply was modified 5 years, 5 months ago by PKCano.
• This reply was modified 5 years, 5 months ago by cmar6.

Reply | Quote

Next time you use the ISO to upgrade, disconnect from the Internet before you do. Then read carefully what the screen says before you press “Next.” If you’re not connected to the Internet, the install can’t do something you don’t expect. MS is devious.

2 users thanked author for this post.

rc primak, cmar6

Reply | Quote

PKCano wrote:

Next time you use the ISO to upgrade, disconnect from the Internet before you do. Then read carefully what the screen says before you press “Next.” If you’re not connected to the Internet, the install can’t do something you don’t expect. MS is devious.

Will do. The date of my 1903.iso file was 11/14/19

Reply | Quote

Reporting in:

Installed November Rollup KB4525235 with no issues @2300 UTC Dec. 5th.

So far. <SFX: Rim-shot>

Win7 Pro SP1 64-bit, Dell Latitude E6330 ("The Tank"), Intel CORE i5 "Ivy Bridge", 12GB RAM, Group "0Patch", Multiple Air-Gapped backup drives in different locations. Linux Mint Newbie
--
"The more kinks you put in the plumbing, the easier it is to stop up the pipes." -Scotty

2 users thanked author for this post.

Charlie, jburk07

Reply | Quote

Manually upgraded 1903 to 1909.
Check for updates button gives : “Error encountered.  We’ll continue to check daily”

Reply | Quote

[carpintero]

Manually updated with cumulative 4524570 from catalogue.  Build is at 18363.476
(don’t know what it was formerly).

In 1903 I had the service disabled.  Fully expected that upgrade would reenable,
turns out that it did not.  I reenabled, now Check for updates works,
reports up to date.

• This reply was modified 5 years, 5 months ago by carpintero.

Reply | Quote

I just took the plunge and updated my Windows 10 Home version on the PC I’ve got at home.  I’ve retired so don’t worry about any of the work stuff anymore – just keeping my own up and running with the wife being happy with it.  I am reporting “good” results.

Success – going from 1809 to 1909 using Windows Update.  It didn’t take very long… I walked the dog around the neighborhood, had lunch and it was done sometime in there. I did an extra restart as one taskbar icon was not showing up (Sophos Home) which fixed that.  I did another ‘search for updates’ and got a couple of .net fixes which I installed and restarted after.  All in all – it seems to have worked.

I have used “Classic Shell” and was still using it and the new install told me the Administrator had blocked it.  However, it was running just fine.  It was annoying so I re-installed the program as an admin and never got any more back talk from the system.

I have been using the third party StopUpdates10 software but have not turned it back on… I’ve set the Windows ‘pause’ to the max and will see what happens in 35 days.  It’s nice when these things actually work as advertised.  I’m going to let it run for a couple of days, let it do the scheduled back up run and shutdown and after that all works I will feel comfortable.  Oh, thanks to all the contributors and Woody for the support and help!  Happy Holidays, Merry Christmas and an error free New Year to all!

1 user thanked author for this post.

jburk07

Reply | Quote

Paul,

Why not just stick with “Stop Updates”? I have been using it since AskWoody recommended it and it is fantastic; no downside at all.

BTW, I just discovered that Windows local search now works for the first time ever in my Windows Home system. That was the reason I was going to try Classic Shell. However, Windows Explorer search does not work at all–widely reported on the net. Does anyone know if there is a manual fix for that?

Reply | Quote

Is there a way to visually review the updates before Windows 10 Home version 1903 begins to install?  It all happens very quickly once you hit the button to remove the Pause feature.  Sometimes I would like to see the date the update was published, etc.  before installing.

Reply | Quote

[rc primak]

That’s basically what we use wushowhide for. Then we select which updates to hide and not install, and check which updates are unhidden before turning off Metered Connection. The setting to delay updates other than Feature Updates has to be set to zero (0) for this to work. Other than that, we don’t touch Windows Update until wushowhide has done its work.

If Pause has been used and the Pause period has not expired, don’t touch anything until running through the wushowhide process.

-- rc primak

• This reply was modified 5 years, 5 months ago by rc primak.

3 users thanked author for this post.

JCpharm, frankus333, jburk07

Reply | Quote

I’ve been lurking awhile knowing that Win7 is nearing EOl. My circumstances require that  Win10 be utilized in order to conduct business whenever the front office says go. I was lucky in that the new Win 10 tower came preinstalled with v1903 as my VMware cloud service is currently not compatible with v1909. IT dept is not discussing the cycle dates for rollout of v1909.  Thanks to all the MVPs expertise and knowledge here, I immediately upgraded to Pro version build 18362.449 and used wushowhide. So far all is well. I’m ready for the ride. Thanks for all resources  here on AskWoody.

Win10 Pro

Reply | Quote

Group B, Windows 7 / Windows 8.1 64 bit.

Previously in the beginning of September I patched my systems from May 2019 to August 2019 patch level. I installed the June 2019 to August 2019 updates in the following order for my Windows 7 systems :

KB4508772 (Update superseding KB4503269, the Jun 2019 Security-only update)
KB4506976 (.NET 3.5.1 Security-only update Jul 2019)
KB4506966 (.NET 4.5.2 Security-only update Jul 2019)
KB4507456 (Security-only update Jul 2019)
KB3133977 (BitLocker update)
KB4474419 (SHA-2 update v2)
KB4511872 (IE11 Cumulative Security update Aug 2019)
KB4517297 (Update superseding KB4512486, the Aug 2019 Security-only update)

I just completed patching one of my Windows 7 systems from August 2019 to November 2019 patch level. I installed the Sep 2019 to Nov 2019 updates in the following order :

KB4474419 (SHA-2 update v3)
KB4516655 (Servicing Stack update)
KB4516033 (Security-only update Sep 2019)
KB4520003 (Security-only update Oct 2019)
KB4525106 (IE11 Cumulative Security update Nov 2019)
KB4523206 (Servicing Stack update)
KB4525233 (Security-only update Nov 2019)

The system appears to be working fine afterwards. Will continue to patch other Windows 7 / Windows 8.1 systems in due course.

Hope for the best. Prepare for the worst.

3 users thanked author for this post.

Microfix, SueW, jburk07

Reply | Quote

Thanks CMAR6 – I will likely go back to using ‘stop updates’ software but am interested to see if the pause works like I think it will.  Once I’ve waited a month, I will likely turn it back on and ride out a bunch of updates until it makes sense to install them.

I took care of IT for a small unit at my old job (now retired) and I watched everything a lot more closely – as I am only responsible for me and my own house now, it’s much simpler and I’ve got flexibility to experiment a bit and can go to my back-up if I need to scrub something and start over.  Reading between the lines – I don’t trust Microsoft at all but, I am interested in how the definition of a ‘pause’ is really implemented.

Reply | Quote

Pause will prevent updates until the Pause period is over.
And you can end the Pause if you decide to install earlier.
But once the Pause period is over (or you end it), you will have to install what is offered before you can use Pause again.

1 user thanked author for this post.

frankus333

Reply | Quote

Yeah… I pushed the pause out to the 35 day max and will wait and watch to see if it really holds.  At about day 30 to 34 I will likely go back to StopUpdates 10 and turn off all update attempts.  I’m just curious to see if the pause is real or not.

So far – fingers crossed – the upgrade from 1809 to the latest 1909 version (Home) has been smooth… time will tell if there are any hidden glitches I’ve yet to see.

Reply | Quote

Also worth repeating: once you reach the end of Pause or hit Resume, you get every available update, unless you have hidden updates using wushowhide before your Windows Updates get un-Paused.

-- rc primak

4 users thanked author for this post.

JCpharm, Microfix, frankus333, jburk07

Reply | Quote

I tried updating my computer, but kept getting an error code that ends with 15. I’ve been trying to figure it out, but I can’t make heads on it. I cleaned the cache, defragmented and other stuff-but no luck updating the computer to 1903 or 1909 or even install an update. It only updated the security update for windows.

If anyone knows how to fix the error so I can download/install updates let me know, otherwise in the future I’ll just have to reboot/reset the computer that’ll install the new version for the computer once its to factory settings.

it was Errror 800015 or something along those lines. if anyone has an easier and simple solution for it-let me know.

Reply | Quote

Do you have any third party w10 update blockers (O&O shutup etc..) that you may have forgotten about?

Windows - commercial by definition and now function...

Reply | Quote

Does WUShowHide count as a Third party update blocker? I use that to hide updates-so are you telling me I have to uninstall it in order to update the computer to 1903 or 1909?

Reply | Quote

wushowhide is not a third-party update blocker. You don’t need to uninstall. But if you have hidden the Feature update, you will need ot unhide it.

1 user thanked author for this post.

Microfix

Reply | Quote

I did unhide the Feature update 1903, but when i tried to install it-I got the same error 8000×15. And when I tried installing 1909, same error number.

What third parties or anything can effect the windows update? I got ccleaner, advanced systemcare, smart defrag 6…….So what am I doing wrong?

Reply | Quote

There’s not much point in reporting an approximate error number.

Reply | Quote

0X80070015 THAT IS THE error number. SO how do I properly FIX IT-EASY AND SIMPLE FIX THAN COMPLICATED.

Reply | Quote

Simple fix, try the windows update troubleshooter.

Win 11 home - 24H2
Attitude is a choice...Choose wisely

Reply | Quote

I tried that, but it didn’t work. Unless after using the troubleshooter you had to restart the computer and then try the windows update right?

If all else fails-just reset/reboot the laptop right? It would fix the problem and also it would install the newest version of windows 10 to the laptop.

Reply | Quote

I suggest trying Windows Update after a clean boot:

How to perform a clean boot in Windows

Reply | Quote

anonymous wrote:

0X80070015 THAT IS THE error number. SO how do I properly FIX IT-EASY AND SIMPLE FIX THAN COMPLICATED.

hurt my ears!
Multiple Solutions to Fix the Windows Defender Error 0x80070015
https://www.minitool.com/backup-tips/error-0x80070015.html
Maybe i’t the dependable microsoft Antivirus that is so wonderful?

Edited to remove HTML

Reply | Quote

I installed the monthly rollup KB4525235 followed by KB4523206 on my first Win 7 machine earlier with no apparent issues. In a day or two, all being well, I’ll do the same on my other Win 7 machine together with a couple of Office 2010 updates but excluding the problematic KB4484127 which was unchecked and which I’ve already hidden.

5 users thanked author for this post.

Microfix, Myst, dgreen, Charlie, jburk07

Reply | Quote

Reporting Group A results:

Installed the November 2019 Rollup KB4525235 on two Windows 7 x64 laptops without any problems.
Hid the unchecked Office 2010 update KB4484127 and installed the other Office updates.
After the Servicing Stack Update KB4523206 appeared, I installed it and restarted.
No problems so far.

Last week I got a refurbished laptop with Windows 10 (sigh, was trying to avoid wading into that quagmire) to dual-boot with Linux Mint. I managed to get it set up and updated through October 2019 over the weekend, but I had the quality-update-deferral period set to 25 days, not remembering that the deferral settings would disappear. Since I’m going out of town for a week, I managed to get it changed to a shorter period using Group Policy settings (details in this post https://www.askwoody.com/forums/topic/win10-1903-pro-problem-defer-updates-period-too-long/#post-2015526) and successfully installed the November updates this morning. Whew.

Thanks to everyone here for all your information, and wishing problem-free patching to all for the holidays.

Linux Mint Cinnamon 21.1
Group A:
Win 10 Pro x64 v22H2 Ivy Bridge, dual boot with Linux
Win l0 Pro x64 v22H2 Haswell, dual boot with Linux
Win7 Pro x64 SP1 Haswell, 0patch Pro, dual boot with Linux,offline
Win7 Home Premium x64 SP1 Ivy Bridge, 0patch Pro,offline

5 users thanked author for this post.

Microfix, Seff, Myst, dgreen, Lars220

Reply | Quote

Win 10 Pro 1809     I just ran through my update protocol (per PKCano instructions): metered connection, run wushowhide,  disable Windows Update Service, etc……

Normally, when I would open Settings/Update and Security after this, I would not see the updates I selected to install and would have to wait up until several days for them to appear. Today when I checked, I saw Error Encountered – we could not complete the install because an update service was shutting down, followed by a grey Retry box – not a Check for Updates box. I tried shutting down and restarting, but same error. I did not turn off Metered connections to allow updates as I could not “see” what would be installed.  What should my next move be?

Reply | Quote

Wait until the system checks on it’s own. Don’t check for updates. It can be as much as 36 hours
Then run wushowhide again to be sure what you see in the queue is really what you’ve got before you remove metered connections.
MS is force upgrading to 1909 – be careful!

Reply | Quote

24 hours later – the CU for Nov (KB 4523205) was the only update available for download. The following 3 still show up as available after I run wushowhide:

Oct CU .Net framework KB 4524099

WMSRT KB 890830

Security Intelligence Update for Windows Defender KB 2267602

Is it unusual for only part of the updates to show up after Windows checks for updates? Thank you for the help with this.

Reply | Quote

The four updates you mention are good for 1809. After the download, disconnect from the Internet before you reboot. Check your settings and reset metered connections as soon as you reconnect.

Reply | Quote

Thank you. I was following your instructions for clearing the update queue. They said to verify updates, turn off metered connections and allow download and to reset metered connections BEFORE the restart – no mention of disconnecting from the internet.

To clarify, are you now saying I should verify, turn off metered connections & allow download and finally “disconnect from the internet, restart, and then reset settings and metered connections?”

Thanks again. I am trying to establish a step by step protocol to follow each month. Way more time consuming than Win 7 – I’m still adjusting.

Reply | Quote

After the download:
Disconnect from the Internet
Reboot for the install
Check your settings (be sure MS hasn’t changed anything)
Reconnect to the Internet and immediately set metered connections (you cannot set metered if you are no connected)

Reply | Quote

One last clarification please – the reboot for the install is a shut down/bootup rather than a restart?

Reply | Quote

It is the “Restart” button in Windows Update after the update downloads.

Reply | Quote

PKCano wrote:

(you cannot set metered if you are no connected)

You can.

Reply | Quote

On mine, when you are not connected, you can’t change the status to metered.

Reply | Quote

[jabeattyauditor]

PKCano wrote:

On mine, when you are not connected, you can’t change the status to metered.

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\NetworkList\DefaultMediaCost is a good starting point.

• This reply was modified 5 years, 5 months ago by jabeattyauditor. Reason: Cleaning up the quoted material

Reply | Quote

PKCano wrote:

On mine, when you are not connected, you can’t change the status to metered.

You don’t have either Wi-Fi or Ethernet? Which version?

Set Wireless Network as Metered or Non-Metered in Windows 10

Set Ethernet Connection as Metered or Unmetered in Windows 10

(Can also be set via Command Prompt or Registry Editor.)

Reply | Quote

I suggested that the OP DISCONNECT from the Internet.
Can you show me that one that you are NOT connected to is set to metered, please.

Reply | Quote

Reply | Quote

Thank you. I was unaware of that one.

1 user thanked author for this post.

b

Reply | Quote

Well, I have only Ethernet, no WiFi.
When connected, I can manipulate the slider for metered to on or off.
When it is not connected, I only see what is in my screenshot and cannot set anything.
I cannot access the Status screen.
That is why I was not aware of what you show in your shot.

Reply | Quote

Installed the following Win 7 Home x64 and Office 2010 x64 patches (Group A):

Excel – 4484164
Office – 4484160
(Skipped – 4484127)
SSU – 4523206
Monthly Rollup – 4525235

Did a reboot and waited 20 minutes after the SSU and then the Monthly Rollup.

Thanks to Woody, all his MVPs and everyone for sharing the patching experience.

Merry Christmas to all.

4 users thanked author for this post.

jburk07, Microfix, Seff, Myst

Reply | Quote

November Windows Update reporting in…..
Installed:
KB4525235 (roll-up)  Installed smoothly, no issues.
rebooted and waited about 1/2  hr. then installed
KB4523206 (service stack)  Installed smoothly, no issues.

Hid MSRT (haven’t installed since last Feb.)

 

Dell Inspiron 660 (new hard drive installed and Windows 7 reloaded Nov. 2017)
Windows 7 Home Premium 64 bit SP 1 GROUP A
Processor: Intel i3-3240 (ivy bridge 3rd generation)
chipset Intel (R) 7 series/C216
chipset family SATA AHCI Controller -1 E02
NIC Realtek PCLE GBE Family Controller
Bitdefender (free version) installed today 12/6/19 (replaced MSE)
Chrome browser
DSL via ethernet (landline)

4 users thanked author for this post.

jburk07, Microfix, Seff, Myst

Reply | Quote

which update should be installed first  KB 4516655 or KB 4474419 ?

Reply | Quote

KB 4474419 SHA-2 code signing support first.
Be sure you also have KB 4490628 SSU installed.
Then KB 4516655 SSU

Reply | Quote

Here goes! I purchased a new laptop and hoped it would come w/ ver 1903…seemed logical to me but no..Acer sent it w/ ver 1809. home. Woody advised just upgrade to 1903 if you have home ver of 1809(or less) so I thought we would work it out.

Said machine arrived today see attachments. Says in red..need updates. Hmmm…been putting off updates in ver 1809 pro, so what to do? Advanced options give me nothing..it is home after all!. Update history blank. Did get to pause so it’s waiting till 26 dec but I do have 1903 ver ISO on USB so question is, shall I just update with the ISO? This version of 1803 surely is different from 1803 pro I had. Took a long time to switch all those sliders from yes to no and I’m not sure if I screwed up access to apps that I shouldnt have….

I did image it out of box and after privacy settings, AV and VPN, photo viewer , FF , email client, Open Office  and so on…have more to add but it’ll keep

Thanks! Advice appreciated. ,

D

Reply | Quote

DriftyDonN wrote:

I do have 1903 ver ISO on USB so question is, shall I just update with the ISO?

That’s what Woody recommended a few days ago.

Reply | Quote

G’day folks

I have successfully updated three Win 7 machines (a 64 bit laptop, and a 32 bit laptop and desktop tower), including the SSU on all three.

I tried to update Office 365 as usual, and it told me it had done it in the usual way on each one. I run the check for updates again on each one, to confirm I get the message that Office 365 is up to date, and on all three, it goes through the update routine again, telling me it has successfully updated and I can use it again, but each time I check again, the cycle repeats.

These machines have always updated and checked correctly in the past. The two 32 bit machines are not currently connected to a licence, but this has never been a problem with updating the Office 365 software in the past.

Has anyone seen this as well? Are they correctly updating, as they report, and the check is not seeing this, or are they not updating? Is it something to do with Win 7 coming to EOL?

Reply | Quote

Office 365 does not update through Windows Update. Only the .msi (persistent) versions update through WU.

Office 365 updates directly from Microsoft.

Reply | Quote

First of all, a quick heads-up: Windows Defender got a new Antimalware Client (Version 4.18.1911.3, engine v1.1.16600.7) yesterday. Quick and Full scans appear to be working fine with current anti-malware definitions (v1.307.20.0 as I write this – more help about this specific subject in my previous post here).

Second, if you haven’t donated yet (guilty! – my bad, sorry…) and have no access to Patch Lady Susan Bradley’s paywalled Patch Watch Column here goes yet another (adding to everyone else’s) additional feedback – reporting back (follow-up of my previous post) from a managed set of Win7/8.1/10 Virtual Machines (VMs) and physical systems: my previously mentioned “Stable BETA TEST” snapshots became the “Stable BASELINE” ones, and the current “Stable BETA TEST” snapshots are now as follows:

Windows 10 x64 (Version 1803):

[Nov 12, 2019] –KB4523203 (2019-11 SSU)
[Nov 12, 2019] –KB4525237 (2019-11 Monthly Rollup) b1130

No observable bugs so far, all working fine and normally. System integrity confirmed by executing the SFC /VERIFYONLY and DISM /Online /Cleanup-Image /CheckHealth commands (both successful, no errors returned).

Windows 8.1 x64 (Group A):

[Nov 12, 2019] –KB4524445 (2019-11 SSU)
[Nov 12, 2019] –KB4525243 (2019-11 Monthly Rollup – includes KB4525106 [IE11 Rollup])

SSU installed first (manually downloaded from the Catalog), then the Monthly Rollup (WU).
MSRT (Microsoft Malicious Software Removal Tool) v5.77 [Nov 2019] installed successfully via WU, executed normally (no errors).
No observable bugs so far, all working fine and normally. System integrity confirmed by executing the SFC /VERIFYONLY and DISM /Online /Cleanup-Image /CheckHealth commands (both successful, no errors returned).

Windows 7 x64 SP1 (Group A):

[Jul 09, 2019] –KB4507004 (.NET Framework 3.5.1, part of KB4507420 [2019-07 .NET Framework Rollup] => Re-released Oct 15, 2019)
[Sep 23, 2019] –KB4474419 (2019-09 SHA-2 v3)
[Nov 12, 2019] –KB4523206 (2019-11 SSU)
[Nov 12, 2019] –KB4525235 (2019-11 Monthly Rollup – includes KB4525106 [IE11 Rollup])
[Nov 12, 2019] –KB4524421 (.NET Framework 4.6.2, part of KB4524741 [2019-11 .NET Framework Rollup])

Manually updated using the packages downloaded from Catalog.
No observable bugs so far, all working fine and normally. System integrity confirmed by executing the SFC /VERIFYONLY command successfully (no errors returned).
MSRT (Microsoft Malicious Software Removal Tool) v5.77 [Nov 2019] manually downloaded (before being pulled out from Catalog*) and successfully executed/installed (no errors)*.

*Although the Catalog references for applicability of the tool for Windows 7/Server 2008/R2 systems have been pulled out, these were indeed the very same 32-bit/64-bit binaries that remained and are still being offered (currently, for Windows 8.1/10/Server 2012[R2]/2016 only) – more about that here, here, here, here, here and here.

3 users thanked author for this post.

Fritz, Microfix, woody

Reply | Quote

Hi.  I’ve been trying to update my Win 7 PC for several months now.  I am a follower of Group A, trying to keep it simple, always installing from Windows Update.  I’ve not had to install from the catalog and have never hidden any updates.  Whenever I check for updates, I am presented with KB4516065, 2019-09 Security Monthly Rollup from September.  Each time I try to install it, I get code 80092004 Windows update encountered unknown error.  I’ve tried to follow the saga of installing the Service Stack Updates (which seems related), but get confused.  I see I do have KB4474419 installed, from Windows Update, on 11/7.  Can someone please suggest what I need to update or install to get updated thru November’s Rollup, and where to get it?  Thanks!

Reply | Quote

Try this:
+ In Windows Update upper left, click on “Change Settings.” Note your current setting, then change the pulldown to “Never check for updates.” Click OK
+ In Windows Update upper left, click on “View update history.” Scroll down and see if 2019-03 Servicing Stack Update for Windows 7 KB4490628 is installed. This update is necessary. Click OK
+ If KB4490628 is not there, In the main Windows Update screen,  click on”Important updates.” KB4490628 will not show up until there are no other updates (checked or unchecked) in the list. SO, right click on the updates in the important list and choose “Hide.” When you have hidden all of them, click on “Check for updates.” Hide the updates that show up, and check again, until KB4490628 shows up. Then install it.
+ Reboot the computer, wait five minutes after login.
+ On the left, Click on “Restore hidden updates”, check the updates you hid, and click “Restore.”
+ Try again to install the Rollup.

If KB4490628 was already installed, come back and we’ll look at some other things that might be causing a problem.

1 user thanked author for this post.

stewagreen

Reply | Quote

Thanks for your reply!  I have hidden the 4 updates presented, 3 for Office 2010 and the 1 2019-09 rollup.  When I search again, I have no important updates available.  I did notice that I had deselected “Give me recommended updates the same way I receive important updates”.  So I selected that option and now get 28 important updates.  KB4490628 is not there, but there are a bunch of others such as 2019-08 Security Monthly Quality Rollup for Win 7, some .net, and a bunch of regular Update for Windows 7 for x64 based systems.  Do you think I should hide all those, and then search for updates again?

Reply | Quote

Hide 4493132 and 4524752 if they are there then install the rest. 2019-08 SQMR is encouraging

1 user thanked author for this post.

stewagreen

Reply | Quote

Sounds good, thanks!  I will give that a go this afternoon.

Reply | Quote

Success, thank you! I installed all the old (2014-2016!) Recommended Windows 7 for x64 Systems updates and rebooted. Then I hid KB4493132 as you recommended. I tried to install the older Recommended KB4512506 2019-08 SMQR, but that failed, same as when I tried to install KB4516065 2019-09 SMQR.

I then restored all hidden updates and searched for updates again. It took me 5 iterations of “hide and seek” before I was finally offered KB4490628 2019-03 Servicing Stack Update. I installed that and rebooted. I restored all hidden updates and checked again for updates. This time I was offered the usual list of current updates for Office 2010 and Windows, including KB4525235 2019-11 SMQR, the latest version, which installed successfully. I also installed KB4524102 2019-10 SQR for .NET. So far so good. Thanks for your help!

Reply | Quote

Just to finish the story, today I was looking thru these comments and saw repeated mention of KB4523206 2019-11 Servicing Stack Update.  So I hid all the checked and unchecked updates I had not installed, then checked again.  I was presented with KB4523206 and successfully installed it and rebooted.

But I am a bit puzzled and concerned.  No where in the regular Group A instructions (from this month, as well as the link to the 2017 directions) do I see instructions to hide unchecked updates and perform an additional check.  If I had not read so many mentions of it here in the comments, I would not have known to go get it.  I would suggest Woody make this more clear in his monthly directions.  Thanks for everyone’s help.

Reply | Quote

I can’t count all the times I have repeated just that.
Sometimes I feel like a broken record (yes, I’m old enough to remember those firsthand 🙂 ).

Reply | Quote

I, too, know what a phonograph is :).  Thanks so much for your help.

Reply | Quote

After last month, this was a relative “breeze” — here is my feedback:

1 – just in case, double-checked Task Scheduler — Application Experience, CEIP, and PerfTrack — all subtasks are still disabled

2 – imaged my disk with Macrium Reflect Free

3 – downloaded KB4523206 (latest SSU, dated 11/11) from the Catalog & installed it; restarted & waited 15 minutes

4 – downloaded Updates KB4525233 (November SO) and KB4525106 (IE11 November Cumulative)

5 – installed both Updates and then restarted. Note: my computer took about 22 minutes to configure and restart, after which I waited 15 minutes

6 – re-checked Task Scheduler — Application Experience, CEIP, and PerfTrack — all subtasks are still disabled (as expected)

7 – manually updated MS Security Essentials’ Virus & Spyware Definitions to eliminate Windows Update’s “Optional” ‘Definition Update for Microsoft Security Essentials (KB2310138)

8 – ran “Windows Update” => 4 Important (3 checked): 3 Office 2010 and 1 Win 7; 2 Optional: both unchecked

9 – hid the unchecked Important Security Update for Microsoft Office 2010 (KB4484127)

10 – unchecked and hid “Important” Update KB4525235 (November Rollup)

11 – hid the unchecked Optional update KB4525251 (November Preview Rollup)

12 – hid the unchecked Optional update KB4524741 (November Preview for .NET Framework)

13 – ran “Windows Update” again => 2 Important: 2 Office 2010: both checked; 0 Optional

14 – unhid 0 hidden updates to install

15 – installed 2 Updates: 2 Office 2010 (KB4484164 and KB4484160)

16 – no restart necessary; restarted anyway and waited around 30 minutes

Note: Windows Media Player did not need to be reconfigured!

Many thanks to PKCano, Woody and everyone else who continue to contribute their time and expertise, or who post their own results! Happy Holidays to All ~

Win 7 SP1 Home Premium 64-bit; Office 2010; Group B (SaS); Former 'Tech Weenie'

6 users thanked author for this post.

jburk07, Microfix, Myst, samak, Charlie, Noel Carboni

Reply | Quote

Hello SueW. Great post as always. Here is my report, done about 4 days ago.

Windows 7 SP1 64bit, with Broadcom network card. Group B.

Installed November’s updates; IE KB4525106, SO KB4525233, did NOT install SSU KB4523206 and did not see the MSRT.

From the catalog; Installed KB4525106 1st and KB4525233 2nd.

Installed one at a time. Rebooted in between each update letting it sit 1 or 2 minutes after update was installed (when hard drive light settled down).

No network issues. No install oddities. This was a very simple monthly patch.

Rebooted 3 times and let it sit for several minutes.

I would recommend people on the last reboot to go to the desktop and let it sit 45 to 60 minutes to Process Idle Tasks and let the trusted installer (as per PKCano) do its thing.

You can also force Processing of Idle Tasks as I do if you want by the administrative command prompt: rundll32 (space) advapi32.dll,ProcessIdleTasks

You can enter that then walk away for 15 to 20 minutes. If the drive light is still on, it is still running, walk away again. Do not allow the computer to go to sleep. Reset the Power Options to 1 hour sleep if needed. Laptops make sure you are on AC power not battery!

Thanks to all here.

Windows 7 Group B

1 user thanked author for this post.

SueW

Reply | Quote

Thank you SueW, I would have greatly worried if you hadn’t noted that it took about 22 minutes to configure the Security-only update. The S.O.program most always wraps up easily; but this time it did take about 22 minutes to configure/install after restarting. – refrained from getting anxious there. 🙂

1 user thanked author for this post.

SueW

Reply | Quote

I did my updating yesterday starting off with the two checked Office 2010 updates in WU.  I had already downloaded the KB4523206 SHA-2 update from the Microsoft Update Catalog,  installed it next and rebooted, and waited for what seemed like 25 min. before the CPU stopped jumping up as high as 62% in Task Manager.  This was the longest time I can remember any update taking, but it turned out okay.

I then got the two Security Only updates KB4525233 for Win 7 and KB4525106 for IE-11 and installed each of them individually and rebooted after each one.  Again, it took longer for each update to reach the end of installation.  The good news is that I have not seen any problems and all seems to be good.

Hurray!  Another month bites the dust!  I have not updated FF yet as I have more time to wait on it, and hopefully more positive data will come in about FF 71.

Thanks again to all who make this monthly job so much easier.  You’re great.

Being 20 something in the 70's was far more fun than being 70 something in the insane 20's

1 user thanked author for this post.

SueW

Reply | Quote

I can not get the Nov 2019 Windows 7 Security Only patch to install and Microsoft Security Essentials is screwing up my Update Reboots when the system restart is attempted by the stand alone update package.

Does this have anything to do with my updating MSE’s virus definitions for 12/7/2019 and not having the Nov 2019 Servicing Stack applied when I did that MSE Virus definition update. MSE has peen preventing me from updating my Sandy Bridge era Core i7 based laptop(Samsung Series 3) if the error logs can be trusted. The laptop has been off since I updated it previously about 3 weeks ago. I had to do several system restores just to get my laptop out of some update failure loops and I have 2 other laptops that are running MSE and should I be worried that I may have issues with them as well. All of my laptops are running Windows 7 64 bit(3 W7 Pro and 1 W7 Home).

My newest laptop is running Norton Security and I had no issue with any of the Nov Updates, including the security stack update(Nov 2019).

I’m considering disabling MSE while I’m doing any updating on my older laptops that are running it before downloading and installing the Nov 2019 servicing stack update and the W7 64 bit Security Only update and IE11 update for the Nov 2019 Updates as well. I have read that MSE and Defender can get screwed up by faulty definition updates and that can transfer over to borking any Monthly Patches as well if the system can not properly reboot to apply the update/patch.

Reply | Quote

MS has said it will no longer support MSE after Win7 EOL. It’s time to look for another anti-virus solution anyway. Perhaps making the change now would help.

Reply | Quote

Thanks PK. Do we know if “no longer support” means no more definition updates, or just that MS won’t provide any separate support service?

Reply | Quote

I think both – no service, no updates. But with MS, who knows. The definitions may continue or may be downloadable.
At any rate, I wouldn’t count on it. I’d look for some other protection.
See this thread.

1 user thanked author for this post.

Seff

Reply | Quote

But is it MSE that’s been borking my Nov 2019 Security Only update/system restarts to apply updates and should I just disable MSE until after the updates are installed or should I uninstall MSE and do the update and reinstall MSE and hope that any corruption in MSE is fixed.

I’m going to try a different route with my other 2 MSE installed laptops and try and disable MSE and immediately install the Nov 2019 Servicing Stack update and I’ll not really update MSE’s virus/other definitions until after all the Nov Sec Updates are installed. And I hope that maybe the issue is limited only to the Samsung Series 3 laptop.

I’m really looking for a Windows 8.1 license Key so I can Install 8.1 on the Samsung laptop anyways and that Laptop came with a Windows 7 Home edition that I applied a Windows 7 Pro upgrade license to after I purchased the laptop. There are windows 8.1 Pro OEM license keys for sale online for discounted pricing and security updates until 2023.

But I can get Norton Security Suite from my ISP for free and install that across up to 5 Machines but the last time I did that Norton Uninstalled  Itself with no warning from 3 out of 4 of my Laptops and only my newest laptop was allowed to run Norton. Comcast’s download instructions at the time did not have any specific instructions on how to download a Single Norton Installer package and get it Installed on up to 5 different computers.   But are there some good free alternatives to MSE that do not spy on the end user?

All but one of my laptops usually stay in the closet until update time comes around and the only website I usually visit on the backup laptops is the Windows update catalog. So maybe I’ll just uninstall MSE and go without unless  my daily laptop breaks and I need to use one of the backup laptops while the other laptop is being repaired.

Reply | Quote

OK, I removed Microsoft Security Essentials from the laptop and all the updates installed with no issues. And I think because I waited for after DEFCON4 on the Nov Patches, Dec 5 2019, that somehow MSE’s Definition updates on Dec 7(When I tried to install the Nov updates) needed that KB4523206 Servicing Stack installed first before I updated MSE’s definitions on Dec 7. So something happened to corrupt the MSE Definition Update and cause MSE to Black Screen my restart, and that’s what borked my Nov 2019 Win 7 Security Only update KB4525233 on my original attempt. And as the result of MSE Black Screening my Samsung laptop’s reboot after an update/KB install, that update could not finish installing.

looking at the event logs on the laptop from Dec 7,  MSE was showing problem signatures since I updated MSE’s virus/engine definitions on Dec 7 before I attempted installing any Nov updates, including before I installed that latest Servicing Stack Update. So that’s my best guess as to what whet wrong on Dec 7. The laptop had been off for about one month at that time so MSE had no definition updates since around the 5th of Nov 2019 before getting a definition update Dec 7 when all the problems started. .

So I’m removing MSE from my other 2 laptops that are also using MSE, at least until after the Nov 2019 Win 7 SO/IE 11, and SSU update, are Installed. But if MSE is no longer going to be supporting MSE on consumer Windows 7 PCs/Laptops after Jan 2020 I’ll probably just not re-install MSE and look for some other Security Software for 2020.

Reply | Quote

Since installing the monthly rollup and service stack update on my main Win7 x54 on Friday, the machine booted and ran normally yesterday but today has black screened on reaching the desktop. It booted normally in safe mode, and on happening again in normal mode I was able to ctl-alt-del and open task manager when I experimented with ending and restarting explorer.exe which resulted in the desktop appearing. I’ve since rebooted to see if that fixed it, and it waited for several minutes on the “Welcome” screen before the desktop appeared normally.

Someone else has reported on the MS site that this is related to the service stack update which cannot be installed. If the problem persists then I’ll try a system restore, but meanwhile has anyone else experienced a similar issue or got any advice please? For the moment I’m leaving my second machine alone and not updating it.

 

Reply | Quote

Greetings,

Have you considered running the System File Checker (SFC), possibly with its enhancement, the DISM (which for Win 7 requires the “System Update Readiness Tool”)?

Please see:

https://www.lifewire.com/sfc-command-system-file-checker-2626020 and

https://www.howtogeek.com/222532/how-to-repair-corrupted-windows-system-files-with-the-sfc-and-dism-commands/

Cheers,

AJN

1 user thanked author for this post.

Seff

Reply | Quote

Yes, on 2 laptops (one is Pro; other is Home) that have not been problematic heretofore. They get hung on “Welcome” after selecting user. This started after restarting them the day after installation of svc stack.

After the suggestion, ran scannow; nothing found.

Tried to uninstall SSU KB4523206; cannot be uninstalled.

Then did system restore just prior to SSU install. This seems to work; I have restarted it a couple of times and it logs into the user right away. Tomorrow might be different – who knows – but hope this works so I do not have to reload backup. Then I will do same on other laptop.

1 user thanked author for this post.

woody

Reply | Quote

Sorry that I forgot to login for my post as “anonymous”.

At this point in the life of Win7, do not know why we need the SS update.

At least I am not the only person with the issue.

 

Reply | Quote

The computerworld article mentioned Servicing Stack Updates. Does it have to be installed for Group B users? If so, how much telemetry is in it? Can it be skipped like all other Telemetry updates were offered in past few months? I prefer to be compromised by viruses rather than have MS telemetry in my OS.

Reply | Quote

Servicing Stack updates are updates for the Windows Update system itself.
They DO NOT contain telemetry and are necessary for proper operation of the system.
They need to be installed for Group B and Group A.

1 user thanked author for this post.

SueW

Reply | Quote

I never installed them as Group B started and my updates are working fine. If I decided not to install it, what problems might happen?

Reply | Quote

Its the update for Windows Update. It should be installed.

1 user thanked author for this post.

woody

Reply | Quote

But those Windows updates KB are not shown in:https://www.askwoody.com/forums/topic/2000003-ongoing-list-of-group-b-monthly-updates-for-win7-and-8-1/

If they are not there, than they must be telemetry/spyware from MS. This is why I only install Updates that are listed there and skip those that mention telemetry.

Reply | Quote

AKB2000003 lists Group B patches.
The Servicing Stack Updates have nothing to do with Group B’s puppose so are not listed with Group B patches. And they DO NOT contain telemetry.

2 users thanked author for this post.

SueW, abbodi86

Reply | Quote

It seems I am confuse. That topic was for Group B that want to have safe from MS telemetry. I only installed updates that were in that topic. I did not install any other updates and computer works fine. Since my computer is working, I am going to assume that I do not need Servicing Stack Updates . If computer will have a problem in the future, than I might have to install Servicing Stack Updates. I will make a note for myself in my Windows updates folder that I have all updates download except the MS telemetry were skipped.

Reply | Quote

That topic was for Group B that want to have safe from MS telemetry. I only installed updates that were in that topic.

That is where you are confused. The patches in AKB2000003 ARE NOT the only patches that Group B installs. The Security-only  and IE11 patches were to avoid the ROLLUPS which Microsoft used to replace the single patch system it had up until Oct 2016. It happened that later MS put telemetry in the non-security portion of those ROLLUPS, but  not in the Security-only patches (with the exception of July and Sept 2019).

BUT, Group B ALSO installed the IE Flash Player patches in Win8.1,  Servicing Stacks, SHA-2 coding support updates, the .NET updates, updates for Office, updates for things like C++, etc through Windows Update. Those patches DO NOT contain telemetry.

So your whole ides of what Group B is has been mistaken all along. And you need those other patches (whether you realize it or not). If you do not patch the other parts of the system, your computer is vulnerable.

Reply | Quote

BUT, Group B ALSO installed the IE Flash Player patches in Win8.1,  Servicing Stacks, SHA-2 coding support updates, the .NET updates, updates for Office, updates for things like C++, etc through Windows Update. Those patches DO NOT contain telemetry.

I did install Flash Player patches. I do not have Office so not updates for that were installed. I have not install Servicing Stacks, SHA-2 coding support updates, the .NET updates, updates for things like C++, etc since Oct 2016. I have scanned my computer and there are no viruses on my computer. There are no updates to install in Windows Update. Only optional updates has 90 items to install. Does this mean I have to install the 90 optional installs? Or what updates should have been installed since Oct 2016?

Reply | Quote

No, it does not include the unchecked optional.
But I find it strange you are able to use Windows Update at this point without KB4474419 SHA-2 coding support and KB4490628 Servicing Stack installed.

Reply | Quote

No, it does not include the unchecked optional.
But I find it strange you are able to use Windows Update at this point without KB4474419 SHA-2 coding support and KB4490628 Servicing Stack installed.

I checked and I do not have KB4474419 and KB4490628 installed. I have two updates for December 2019 waiting to install in Windows Update but I am waiting for the green light.

Reply | Quote

Which two updates?

cheers, Paul

Reply | Quote

The two updates are KB4530702 Monthly Roll up and KB890830 WMSRT for December 2019. But I am in Group B so I do not install Monthly Roll up and waiting for the green light to install only the security if there are no Telemetry in Dec 2019.

But I was told that I should have been installing other updates (IE Servicing Stack) but nothing else is showing as important in Windows Update.

Reply | Quote

You must have Win8.1 since KB4530702 is a Win8.1 update. The two mentioned before, KB4474419 and KB4490628. are Win7 updates, so you would not have those.

But the same thing goes about the patches for Win8.1. Group B should install the IE11 Cumulative update (Nov KB4525106 or Dec KB4530677 included in AKB2000003), the latest Servicing Stack was Nov KB4524445 released through Windows Update, and any of the other patches for parts of the Windows OS.

Reply | Quote

Yes. I have installed KB4525106 . December will have to wait for the green light before I install that update.

KB4524445 is not shown in important or optional updates. If it is not there, do I need to install it manually than? If so than that Ongoing List should mentioned that some updates do not show up and need to install them manually.

Reply | Quote

You can download KB4524445 if you want. SSUs will not show up in the Windows Update queue if there is any other update (checked or unchecked) pending. So you would have to hide whatever is there temporarily, otherwise, to get it to show up.

Group B patching is only about installing the SO and IE CU instead of the Rollup, and does not mention the other patches that are needed.

Reply | Quote

I hide the two updates and still the KB4524445 is not showing up. I am going to skip it until something breaks with updates. Thanks for trying to help.

Reply | Quote

Installed KB4525235 Nov 2019 Rollup
Put unchecked MS Office 2010 Access update into hiding (KB4484127)
Installed the checked Office 2010 updates
KB4523206 SSU popped up after installing Important Updates, threw that in, restart required.

As @suew mentioned, went to the Task Scheduler (post Nov 2019 update for me, forgot to check before updating) and made sure App Experience, CEIP, Media Center and PerfTrack, along with all subtasks, were still disabled and they were, hooray.

Did a system image on my external HD, as is the usual prior to each update.

All is well. Thanks everyone for your input in posting results.

MacOS iPadOS and sometimes SOS

3 users thanked author for this post.

jburk07, bassmanzam, SueW

Reply | Quote

Hello all.

This is my first update go-around with my new Win10 Pro x64 box and I wanted to make sure my PC and me are in a happy place. Please see the attached screen-grabs. I did *not* click on/install the Optional Feature Updates link. Any advice welcome.

Thanks. 🙂

Windows 10 Pro x64 v1909 Desktop PC

Reply | Quote

You’re fine.

The “Optional Feature update” is just the upgrade to 1909. I’m still hesitant to recommend 1909 because of File Explorer Search problems, and an odd handful of other bugs.

With a little luck the bugs will get ironed out today. Stay tuned.

1 user thanked author for this post.

Grond

Reply | Quote

You have paused updates until the 21st so Windows will then update.
We recommend waiting until Woody gives the green light and to do that you need to pause until well into the next month, then you can resume when it’s OK.

All the other things seem OK so you just need to backup.

cheers, Paul

1 user thanked author for this post.

Grond

Reply | Quote

[EP]

regarding Microsoft Security Essentials (MSE) support on Windows 7 – that will end on January 14, 2020 whether having Win7 ESUs (extended security updates) or not

waiting for gborn’s reaction to this recent blog from deskmodder.de as MSE may start getting EOL nags on Win7 this month:
https://www.deskmodder.de/blog/2019/12/10/windows-7-microsoft-security-essentials-mse-werden-auch-ab-dem-14-januar-nicht-mehr-aktualisiert/

I’m gonna start uninstalling MSE from any of the Win7 machines I have this month

• This reply was modified 5 years, 4 months ago by EP.

1 user thanked author for this post.

woody

Reply | Quote

I didn’t expect to see Microsoft Security Essentials supported past January 14 – but I’m surprised to see that (apparently) even those who pay for Extended Support won’t get MSE updates.

Fortunately, there are alternatives.

EDIT: I just went back to the source document from MS. It isn’t clear to me if Win7 ESU subscribers will get MSE updates.

1 user thanked author for this post.

AJNorth

Reply | Quote

Speccy posted:

Windows 7 x64 SP1 (Group A):

[Jul 09, 2019] –KB4507004 (.NET Framework 3.5.1, part of KB4507420 [2019-07 .NET Framework Rollup] => Re-released Oct 15, 2019)
[Sep 23, 2019] –KB4474419 (2019-09 SHA-2 v3)
[Nov 12, 2019] –KB4523206 (2019-11 SSU)
[Nov 12, 2019] –KB4525235 (2019-11 Monthly Rollup – includes KB4525106 [IE11 Rollup])
[Nov 12, 2019] –KB4524421 (.NET Framework 4.6.2, part of KB4524741 [2019-11 .NET Framework Rollup])

So if I have a machine that has not been updated since July 2019 with the following:
KB4483187  — 02/13/2019 12:00:00 AM
KB4483458 — 02/13/2019 12:00:00 AM
KB4474419 — 05/13/2019 12:00:00 AM
KB4490628 — 05/13/2019 12:00:00 AM
KB4495606 — 06/03/2019 12:00:00 AM
KB4499164–   06/03/2019 12:00:00 AM

If I apply the patches listed in the “A Group” above, I’ll be back in sync?

 

Reply | Quote

I believe you should install [Sep 23, 2019] –KB4474419 (2019-09 SHA-2 v3) and KB4490628 — 05/13/2019 12:00:00 AM  first. The SSU KB4490628 will need to be installed exclusively (by itself).

Reply | Quote

Can anyone like Microfix, Abbodi86 or PKCano tell me why I should install the KB4523206 Servicing Stack Update when we have 2 months to EOL? I do not believe this SSU has anything to do with helping us get updates easier. I think this is an update to see who has paid for extended support and who has not. There is a financial reason here not a “customer satisfaction or reliability” reason here.

Saying to install the SSU simply because it is offered is not-good-enough for me or any true WOODY’s follower.

Thank you.

Reply | Quote

We are at MS-Defcon 2 so, I would take Woody’s solid advice not to install anything at the moment. I’m kind of in agreement with you with regards to an SSU one month before Win7 EOL it just doesn’t make sense to me either…

Windows - commercial by definition and now function...

Reply | Quote

Yeah, the SSU KB4531786 is only ment to harden the ESU eligibility verification

1 user thanked author for this post.

Microfix

Reply | Quote

Thank you very much for answering Microfix and Abbodi86. My question was for the November KB4523206 Servicing Stack Update but thanks to your answer. I now see there is one for December too. I don’t trust it.

Reply | Quote

[jniffen]

PKCano wrote:

I believe you should install [Sep 23, 2019] –KB4474419 (2019-09 SHA-2 v3) and KB4490628 — 05/13/2019 12:00:00 AM  first. The SSU KB4490628 will need to be installed exclusively (by itself).

Thanks for responding.
Sorry if my message was not written the best.
I will plan to install the updated
[Sep 23, 2019] –KB4474419 (2019-09 SHA-2 v3)
It already has KB4490628 — 05/13/2019 12:00:00 AM installed.
Then
[Nov 12, 2019] –KB4523206 (2019-11 SSU)
[Nov 12, 2019] –KB4525235 (2019-11 Monthly Rollup – includes KB4525106 [IE11 Rollup])

I don’t recall installing any .NET, but if the .NET 4.6.2 is on the PC, I will install
[Nov 12, 2019] –KB4524421 (.NET Framework 4.6.2, part of KB4524741 [2019-11 .NET

The unit only runs a radio broadcast audio automation system, no Java, no Flash, no Abode, etc.
The automation program developer states no Anti-Virus either.

• This reply was modified 5 years, 4 months ago by jniffen.

Reply | Quote

Then why are you patching at all?
Limit what the box can see and do and leave it alone.

cheers, Paul

Reply | Quote

A request for feedback:

I decided to go with November updates and not installing SSU KB4523206 (I read some PC got locked at boot) and keep using SSU KB4516655 (from September; MS requires March SSU.)

I installed KB4525233 and when I clicked restart it kept saying “Preparing to configure Windows. Please do not turn off your computer.” No percentage was shown. The dot after the Windows word was moving. I waited like 20 minutes then I pressed the power button. Boot again, choose Normal and at the beginning it was stuck at 0 percent then increased until 30 something and did a shutdown on its own. After booting again, started at 32 percent and finished. Windows Update history shows KB4525233 status as Successful instead of Failed.

So, everything is good? I mean, even if I turn off the PC when I shouldn’t, do updates are wise enough to check what they did or did not and resume properly? Thank you.

Reply | Quote

If the system reports the installation wa successful, then, yes, it was successful. You should leave the system alone during the install and not try to decide whether it is finished or not. If you don’t, sooner or later you will cause problems for the computer from which it will be unable to recover.

You installed the Security-only update KB4525233. You also need to install the IE11 Cumulative Update KB4525106.
Then you need to install the Servicing Stack KB4523206.

 

Reply | Quote

Thanks for your reply, PKCano.

It was the first time a security update did this and I had to power off my PC. Also, I decided to do it because I did a full backup previously.
About KB4525106, I installed without issues. And regarding KB4523206, I skipped it because of this Woody article:
https://www.askwoody.com/2019/installing-the-latest-win7-servicing-stack-update-kb-4523206-may-lock-up-your-pc/
Now that November is done, maybe I should hold KB4523206 and see if KB4531786 (December SSU) gets oked (read about issues on Reddit*) when DEFCON 4 happens.
* https://www.reddit.com/r/sysadmin/comments/eb3qts/ms_patch_tuesday_woes_kb4530734/

Reply | Quote