![]() |
MS-DEFCON 2:
Patch reliability is unclear. Unless you have an immediate, pressing need to install a specific patch, don't do it.
|
-
Patch Lady – certificates lost
Home › Forums › AskWoody blog › Patch Lady – certificates lost
Tagged: Patch Lady Posts
- This topic has 68 replies, 18 voices, and was last updated 1 month, 2 weeks ago.
Viewing 20 reply threads-
AuthorPosts
-
-
November 4, 2020 at 12:31 pm #2309577
Susan Bradley
ManagerIn the Windows health release dashboard they list a new problem with lost certificates. System and user certificates might be lost when updating a dev
[See the full post at: Patch Lady – certificates lost]Susan Bradley Patch Lady
-
November 4, 2020 at 2:01 pm #2309599
cptomes
AskWoody Plusis M$ TRYING to make my life h***? am I going to have to download and burn fresh isos for the latest feature updates every single month? the fastest, least risky, and most reliable method for us to move machines to a newer feature update is to use dvd media. not bootable usb sticks. write-once dvd-dl that get used many times a week.
fix this c*** or I’m going to run away from m$ products faster than I did in 2007.
Hey look! Another Feature Update!
You mean I shouldn't click Check for Updates?
Why does it keep saying "Something Happened"?
-
This reply was modified 2 months, 2 weeks ago by
cptomes.
-
November 4, 2020 at 3:21 pm #2309607
Susan Bradley
Manager
-
This reply was modified 2 months, 2 weeks ago by
-
November 4, 2020 at 8:00 pm #2309645
WCHS
AskWoody PlusYes, Woody has been reminding us whenever a new version is imminent to make an iso file and squirrel it away. I made one for 1909 on May and one for 2004 mid-September — who knows if they would work, right now. I sure hope it gets fixed and soon!! With everything else that is going on, we don’t need this.
-
November 4, 2020 at 10:07 pm #2309656
WCHS
AskWoody PlusSo what about RE-INSTALLING a version that one is one (and not moving to a newer version), using an iso file created in May (1909) or in mid-September (2004)? For example, if one is on 1909 and needs to re-install 1909? Or if one is on 2004 and needs to re-install 2004? Are lost certificates a problem in this case?
-
November 5, 2020 at 12:55 am #2309669
MikeyD215
AskWoody PlusPer Woody’s and Susan’s advice I, too, created an ISO of 2004 on 9/17 and had already created an ISO for 1909 months earlier. I still am on 1903. I prefer updating from an ISO, but do not want to be a beta tester for 20H2. So updating via Windows Update is out the window for the moment, as that will only force one onto H2. ZDNet has an article by Ling Tung
that claims “Microsoft is working on a fix and will provide updated bundles and refreshed media in the coming weeks.” But does that mean they will release updated ISOs for 1909 and 2004? Or release replacements for the LCUs issued in September and October? Rather typical that the problem arises just prior to the end of support for 1809 and 1903, eh what?
Sort of funny (in perverse fashion) that jumping to H2 from an ISO created prior to Oct. 13 also will “getcha.”
1 user thanked author for this post.
-
November 5, 2020 at 4:41 am #2309697
PKCano
ManagerIf you have Pro, you can do the update through Windows Update to the version you want by specifying either the correct number of Feature Deferral days OR using TargetReleaseVersion to specify the version.
If you have Home, you can use TargetReleaseVersion to specify the version you want. It is done by using two commands.
These methods are explained in AKB2000016.
-
-
November 5, 2020 at 1:39 am #2309675
Alex5723
AskWoody PlusSo updating via Windows Update is out the window for the moment, as that will only force one onto H2
I have updated from 1909 to 2004 using Windows Update and 20H2 didn’t jump at me.
You can use the ‘TargetRelease..’ in GP (on Pro) or the registry (on Home) to lock into 1909/2004. -
November 5, 2020 at 12:02 pm #2309760
MikeyD215
AskWoody PlusYes, I know of this method of updating using the target release, and did use Power Shell to lock into 1903 until I elect to update. My question relates to whether release 1909 or 2004 or even H2 obtained through Windows Update will have both the Sept. and Oct. LCUs integrated into the releases, as opposed to updating after their installation. Read this information from Microsoft slowly; I read it twice just to be sure I understood what they are saying. The issue arises from updating from media or via WU to a release that does not have the Sept. and Oct. LCUs integrated. Will they integrate those LCUs into currently available releases of 1909 or 2004, for example, via WU?
“Devices will only be impacted if they have already installed any latest cumulative update (LCU) released September 16, 2020 or later and then proceed to update to a later version of Windows 10 from media or an installation source which does not have an LCU released October 13, 2020 or later integrated,” Microsoft explains”
-
November 5, 2020 at 12:12 pm #2309766
AngryJohnny75
AskWoody LoungerThis issue is specific to those pushing upgrades via media and is not applicable to those using Windows Update or WUfB. From the Microsoft link:
“Note Devices using Windows Update for Business or that connect directly to Windows Update are not impacted. Any device connecting to Windows Update should always receive the latest versions of the feature update, including the latest LCU, without any extra steps.”-
November 5, 2020 at 12:40 pm #2309768
MikeyD215
AskWoody PlusYeah, so they say. But how trustworthy is this claim? Based on Susan’s recent survey, it seems that many of us lack confidence in Microsoft’s assurances, based upon past experience. You already have characterized their workaround as “laughable,” which indicates you, too, have at least some disrespect for Microsoft. No one should be compelled to waste time dealing with this problem. Microsoft should fix it pronto and be prepared to offer full disclosure.
-
-
-
November 5, 2020 at 12:09 pm #2309765
AngryJohnny75
AskWoody LoungerWe finally had this issue reported internally. Thank you Susan for making this announcement. Some of us corporate types are still pushing the out-of-date media method to upgrade to 1909 so we were expecting this issue to arise sooner than later.
Some enterprises have various reasons for not using WUfB or Windows Update for pushing feature upgrade installations. Such as not enough control over the upgrade process and not enough Internet bandwidth for some users.
Microsoft’s suggested workaround to roll back to the previous version until a fix has been implemented in our environment is laughable. This is yet another black eye in the WaaS concept. In order to follow that advice, we basically would have to stop our 1909 upgrades until Microsoft gives the all clear. We’re better off just re-applying the certificates after the upgrade. I wonder if Dynamic Updates would resolve this.
It is things like these that make me despise WaaS. The WaaS concept in general is the single biggest issue that I have with Windows 10 a.k.a. “the final version of Windows.” Come on Microsoft, you’ve been doing this for 5 years already. Why is the WaaS process still so painful at times?
-
November 5, 2020 at 12:52 pm #2309773
Alex5723
AskWoody PlusYeah, so they say. But how trustworthy is this claim?
I updated 2004 with Oct. patched to 20H2 using Windows Update. No certificate or any other problems.
-
November 5, 2020 at 4:26 pm #2309823
WCHS
AskWoody Plus-
November 6, 2020 at 11:13 am #2309974
EP
AskWoody_MVPwell WCHS I manually updated from Win10 1909 to 2004 on a Toshiba laptop using this updated 2004 ISO image from MSDN/MVS:
en_windows_10_consumer_editions_version_2004_updated_oct_2020_x64_dvd_25512d0f.iso
I did not experience any certificate problems using this one rather than the old 2004 ISO install media from the Win10 ISO download page.
maybe Microsoft should provide some of those updated ISOs that MSDN/MVS subscribers are getting each month to those affected enterprise users who are experiencing those certificate problems.
-
November 6, 2020 at 11:37 am #2309984
-
-
-
-
November 6, 2020 at 10:25 am #2309957
WShlewton
AskWoody Plus-
November 6, 2020 at 10:37 am #2309968
Microfix
AskWoody MVPoriginal was caught by anti-spam on quick edits.
Slow down..on edits or it just disappears (give it 5-10 mins before edit)
Problems controlling W!N10 updates:
https://www.askwoody.com/forums/topic/2000016-guide-for-windows-update-settings-for-windows-10/
-
-
November 6, 2020 at 12:21 pm #2310000
-
November 6, 2020 at 1:41 pm #2310021
bbearren
AskWoody MVPI upgraded to 20H2 using the MCT USB stick, and the only certificate issue I’ve encountered was for outlook.com. I was given the option to continue using the website and/or install the certificate.
I installed the certificate using the defaults, then clicked on “Yes” to continue using the website, and that cleared the issue. No other certificate issues have cropped up.
Create a fresh drive image before making system changes/Windows updates, in case you need to start over!"When you're troubleshooting, start with the simple and proceed to the complex."—M.O. Johns"Experience is what you get when you're looking for something else."—Sir Thomas Robert Deware -
November 6, 2020 at 2:19 pm #2310031
castiel
AskWoody PlusI am just an ordinary user (not a system admin) and have multiple devices all at Win10 Pro 1909 with October updates installed just days ago. My feature upgrades have always been done using the ISO images saved from Media Creation Tool. This has always been the simplest and easiest for me. But now it sounds my 2004 ISO on DVD is no good, and I don’t know what to do. I really don’t want to do multiple upgrades via Windows Update. It would be best if I had a way to get a more current 2004 ISO, but I don’t belong to anything like MSDN/MVS. What to do? Do I uninstall KB4577671 (or restore from system image backup made prior to October updates)? Do I do nothing and hope that Microsoft provides an updated 2004 ISO for us ordinary people? Do I accept that Windows Update is now my only choice? I REALLY had been loving the update deferral GUI options in Pro and had upgraded from Home just to get them. I feel a bit intimidated to lose the GUI options in 2004, but realize I will someday. Had been trying to understand the 2004 Group Policy equivalents and was on the verge of taking the plunge to 2004. I think I’m basically asking the same questions everyone else is – what to do? If I want to undo the October CU one way or another, best to do it now before baked in even further. I am really angry at Microsoft for blowing up the ISO upgrade path. What should ordinary folk (non-sysadmin types) do now?
2 users thanked author for this post.
-
November 8, 2020 at 4:03 am #2310266
brian1248
AskWoody LoungerIf what you say is true, then I will not be able to use the 2004 ISO that I created to upgrade, which I had planned to do this weekend. All of the files inside the ISO are dated 8/8/2020, and I have done updates via Microsoft Update since Sept 16, 2020.
It sounds like my only option is to do the 2004 upgrade via online update. I am considering setting the target release using the instructions for Windows Home linked above by PKCano.
Thoughts?
-
November 8, 2020 at 4:06 pm #2310356
gborn
AskWoody_MVPI’ve reported this issue to MS end of October, after I covered it in the blog post Windows 10 forgets certificates during upgrade – at that time we thought, it was caused by October 2020 Updates. Glad, MS confirmed, that it was caused by Sept. 2020 Updates in conjunction with some not refreshed builds.
It hits some people forced to home office – they where no more able to use their VPNs.
And, what MS didn’t say: The certificate issue also affects Office 365 downloads (but I’m not sure, if it’s the same error). See: Office 365: Download fails (in ConfigMgr) after Oct. 2020 Updates
Microsoft Windows Insider MVP, Microsoft Answers Community Moderator, Blogger, Book author
https://www.borncity.com/win/
-
This reply was modified 2 months, 1 week ago by
gborn.
-
November 10, 2020 at 7:13 am #2310914
EP
AskWoody_MVPpastebin links to updated 1909, 2004 & 20H2 install media ESDs with Oct 2020 updates integrated that fix the “lost certificates” problem
WSUS links for 1909 build 18363.1139
WSUS links for 2004 build 19041.572
WSUS links for 20H2 build 19042.572
now if only MS would issue updated 2004 & 20H2 ISOs on MS Techbench (with build .572) that include the Oct 2020 updates instead of just issuing them to MSDN/MVS suscribers
-
This reply was modified 2 months, 1 week ago by
EP.
-
November 10, 2020 at 6:38 pm #2311079
WCHS
AskWoody Pluspastebin links to updated 1909, 2004 & 20H2 install media ESDs with Oct 2020 updates integrated that fix the “lost certificates” problem
What is the purpose of these links? How can the run-of-the-mill novice user who has previously used the MCT to download an .exe file that would produce an iso file use these links??
-
This reply was modified 2 months, 1 week ago by
-
November 10, 2020 at 10:46 am #2310975
Susan Bradley
Managerhttps://www.thurrott.com/windows/windows-10/243391/tip-download-any-version-of-windows-10 See that post. I doubt they will make the tool offer up all versions, but it’s clear that it’s getting easier and easier to find ways to download the version you want.
Susan Bradley Patch Lady
1 user thanked author for this post.
-
November 10, 2020 at 12:53 pm #2311026
WCHS
AskWoody PlusI doubt they will make the tool offer up all versions,
So, in following the instructions at that link, we will get good .exe files that the Media Creation Tool would otherwise produce for creating new, good iso files for 1909, 2004, and 20H2 that will not have the ‘lost certificate’ problem?
-
November 10, 2020 at 5:44 pm #2311070
EP
AskWoody_MVPor as an alternative, ask a willing MVS subscriber to give you any of the following refreshed 1909 and/or 2004 ISOs (google search for them):
(Win10 v2004 consumer US English ISOs updated Oct. 2020 – build 19041.572)
en_windows_10_consumer_editions_version_2004_updated_oct_2020_x64_dvd_25512d0f.iso
en_windows_10_consumer_editions_version_2004_updated_oct_2020_x86_dvd_79847e1f.iso(Win10 v1909 consumer US English ISOs updated Oct. 2020 – build 18363.1139)
en_windows_10_consumer_editions_version_1909_updated_oct_2020_x64_dvd_809597f2.iso
en_windows_10_consumer_editions_version_1909_updated_oct_2020_x86_dvd_a209a4f8.isoat least these Oct 2020 refreshed ISOs for 1909 & 2004 do NOT have the certificates problem
-
November 10, 2020 at 6:11 pm #2311078
-
-
-
November 11, 2020 at 10:25 pm #2311338
MikeyD215
AskWoody PlusI downloaded the bat file tool mentioned in the article by Paul Thurrott and used it to download refreshed iso files for both versions 1909 and 2004. Worked like a charm. (Downloaded latest MCT into TEMP directory, downloaded .bat file tool zip into TEMP directory, extracted .bat file tool from zip into TEMP, then ran .bat. You wind up executing the MCT, but constrained to whichever feature version selected as the bat began.)
I checked to see if the refreshed iso files were of a different size than the iso files I had created in April (1909) and September (2004). Sure enough the 2004 iso was larger than the one created in September. However, both iso files for 1909 were exactly the same size.
Does that sound reasonable?
1 user thanked author for this post.
-
November 11, 2020 at 11:11 pm #2311344
MikeyD215
AskWoody PlusI just queried the author of the batch file to see if he/she is linking to the newer version of 1909, v.18363.1139. Which would explain my finding, if it turns out he did not update the file to link to the October refreshed .iso.
“I just used this tool to create .iso files for updates 1909 and 2004. This tool worked like a charm. However, the 1909 .iso just created is exactly the same size (4,188,608 KB) as the .iso created last April, whereas the 2004 .iso just created is larger than the .iso I created just two months ago in September.
Is this tool grabbing the (October) refreshed version of 1909, v.18363.1139?”
I will post whatever answer he/she provides, although you can read the entire batch file code and all comments at the download site.
Here is a link to the batch file:
https://gist.github.com/AveYo/c74dc774a8fb81a332b5d65613187b15
1 user thanked author for this post.
-
November 12, 2020 at 4:57 am #2311399
anonymous
GuestHi
You might be able to check on the Windows version, build and edition of the downloaded refreshed 1909 and 2004 ISOs by using the DISM tool. See the postings starting at https://www.askwoody.com/forums/topic/its-time-to-be-thinking-about-saving-a-copy-of-win10-v2004/#post-2295233
Cheers.
1 user thanked author for this post.
-
November 14, 2020 at 10:47 pm #2311966
castiel
AskWoody PlusThe DISM command confirms that the Windows 10 Pro 2004 iso I just downloaded using the MCT Wrapper bat file is indeed the one we all wanted that includes the October 13 update to Build 19041.572 (see below).
C:\WINDOWS\system32>dism /Get-WimInfo /WimFile:D:\sources\install.esd /index:6
Deployment Image Servicing and Management tool
Version: 10.0.18362.1139Details for image : D:\sources\install.esd
Index : 6
Name : Windows 10 Pro
Description : Windows 10 Pro
Size : 14,602,004,750 bytes
WIM Bootable : No
Architecture : x64
Hal : <undefined>
Version : 10.0.19041 <—-
ServicePack Build : 572 <—-
ServicePack Level : 0
Edition : Professional
Installation : Client
ProductType : WinNT
ProductSuite : Terminal Server
System Root : WINDOWS
Directories : 23399
Files : 94838
Created : 10/9/2020 – 3:58:24 PM
Modified : 11/14/2020 – 11:13:31 PM
Languages :
en-US (Default)The operation completed successfully.
-
November 14, 2020 at 10:57 pm #2311968
MikeyD215
AskWoody PlusThe author of the batch program has acknowledged that he was NOT picking up the refreshed iso file for version 1909. That bug was corrected earlier today. I deleted his previous batch file and the 1909 iso I created with it and started all over again. This time I did get a different iso and used the DISM tool to verify that it is the correct version this time.
But it is 10. 0. 18362. 1139.
In the post by EP on 11/10/20 above there must be a typo, as it is identified as 18363 instead of 18362. I verified that it really is 18362 by checking the 1909 iso I downloaded last April and that version is 18362 also [build 592].
I now recommend this tool to anyone who wants correct iso files for 1909 or 2004, without waiting around for MSFT to make them available to everyone who wants them.
-
November 15, 2020 at 2:27 pm #2312089
castiel
AskWoody PlusActually, the Build for Win10 1909 really is 18363.
But you are correct – when I use DISM on my saved iso’s, DISM does display both 1903 and 1909 as Build 18362.
I now see this behavior had been noted and discussed in length back in May 2020 in the topic:
Apparently, for me, ignorance really was bliss.
-
-
-
-
This reply was modified 2 months, 1 week ago by
-
November 10, 2020 at 4:14 pm #2311065
castiel
AskWoody PlusI am too much of a newbie and lost by all this. What would be most helpful is a definitive answer as to where and how to get a refreshed ISO for Win 10 Pro 2004 that would avoid the lost certificates problem. I do see locations from which to download ISO images, but not at all clear how current those images may be. Could someone with more expertise than me point us to where the refreshed ISOs can be downloaded and what Builds we should be looking for? Sorry to be so helpless.
1 user thanked author for this post.
-
November 14, 2020 at 11:08 pm #2311970
MikeyD215
AskWoody PlusSusan’s post on 11/10 has the answer you are seeking.
Go to Paul Thurrott’s web site to read how to use the batch tool that will enable you to obtain a corrected iso file for 2004. There is a link in that article that will take you to the site where you can learn more about the tool and download a zip tile containing the tool.
Here’s the article:
https://www.thurrott.com/windows/windows-10/243391/tip-download-any-version-of-windows-10
Good luck!
-
-
November 15, 2020 at 6:41 pm #2312120
WSBJB
AskWoody Lounger-
November 16, 2020 at 2:05 am #2312194
Paul T
AskWoody MVPProbably. Use DISM to check and let us know.
cheers, Paul
1 user thanked author for this post.
-
November 17, 2020 at 3:49 pm #2312562
WSBJB
AskWoody LoungerProbably. Use DISM to check and let us know.
cheers, Paul
Here is what I got with DISM. It does say Windows 10 home?
Thanks,
WSBJBIndex : 1
Name : Windows 10 Home
Description : Windows 10 Home
Size : 14,212,376,596 bytes
WIM Bootable : No
Architecture : x64
Hal : <undefined>
Version : 10.0.19041
ServicePack Build : 264
ServicePack Level : 0
Edition : Core
Installation : Client
ProductType : WinNT
ProductSuite : Terminal Server
System Root : WINDOWS
Directories : 20255
Files : 87841
Created : 5/11/2020 – 12:49:13 AM
Modified : 5/11/2020 – 1:25:07 AM
Languages :
en-US (Default)-
November 17, 2020 at 4:55 pm #2312582
-
November 18, 2020 at 2:50 am #2312674
Paul T
AskWoody MVPThe fixed images are post October.
ServicePack 264 is from May, as shown in the Created date.
You need at least SP 572.See this page for version numbers and release dates.
https://en.wikipedia.org/wiki/Windows_10_version_history_(version_2004)cheers, Paul
-
-
-
-
November 18, 2020 at 6:45 am #2312699
WSBJB
AskWoody LoungerThe fixed images are post October.
ServicePack 264 is from May, as shown in the Created date.
You need at least SP 572.See this page for version numbers and release dates.
https://en.wikipedia.org/wiki/Windows_10_version_history_(version_2004)cheers, Paul
Thanks. Then how do I get Heidoc to download the right version? I did not choose May, I chose the most recent version offered AFAIO.
Sorry for the hassle. LOL I am usually the one helping people with windows, just not updates.
Thanks,
WSBJB
-
November 18, 2020 at 6:50 am #2312701
-
-
November 18, 2020 at 2:22 pm #2312813
WSBJB
AskWoody LoungerHave you tried the batch file version?
#2311344cheers, Paul
I had not tried the batch file but just did and think I finally have what I need! Service Pack 572. Seems like this is still the best and maybe only way to get the right version at least for 2004.
Thanks for all of your help,
WSBJBIndex : 6
Name : Windows 10 Pro
Description : Windows 10 Pro
Size : 14,602,004,750 bytes
WIM Bootable : No
Architecture : x64
Hal : <undefined>
Version : 10.0.19041
ServicePack Build : 572
ServicePack Level : 0
Edition : Professional
Installation : Client
ProductType : WinNT
ProductSuite : Terminal Server
System Root : WINDOWS
Directories : 23399
Files : 94838
Created : 10/9/2020 – 3:58:24 PM
Modified : 11/18/2020 – 12:30:23 PM
Languages :
en-US (Default)1 user thanked author for this post.
-
November 19, 2020 at 9:38 pm #2313045
WCHS
AskWoody PlusI had not tried the batch file but just did and think I finally have what I need! Service Pack 572. Seems like this is still the best and maybe only way to get the right version at least for 2004.
Will this 2004 iso file burn to a 4.7GB DVD? Or is it too large?
-
November 19, 2020 at 9:54 pm #2313047
WSBJB
AskWoody LoungerI had not tried the batch file but just did and think I finally have what I need! Service Pack 572. Seems like this is still the best and maybe only way to get the right version at least for 2004.
Will this 2004 iso file burn to a 4.7GB DVD? Or is it too large?
It is 4.174 GB
WSBJB
-
November 20, 2020 at 4:43 am #2313099
-
November 20, 2020 at 9:32 am #2313141
WCHS
AskWoody PlusYou may need a DVD+R DL if the ISO is too big to burn on a DVD+R.
I understand that 20H2 has (Chr)edge baked in. My 20H2 iso is 4.57GB — cutting it close for a single layer DVD+R (4.7GB). I haven’t tried burning it yet, using CDBurnerXP. Can I assume that I will get an error message, if it doesn’t fit?
BTW, for 20H2, Thurrott’s .bat file calls it ‘2009’ Compare that to GP TRV=2010
-
November 20, 2020 at 9:47 am #2313142
-
-
November 20, 2020 at 10:15 am #2313144
WCHS
AskWoody PlusIt is 4.174 GB
My DISM report reads exactly like yours for 2004-572, except for the “Modified” date.
The Properties info for the .iso file says 4,273,733,632 bytes=3.97GB and the file size of the file on the desktop is 4,173,568 KB.Attachments:
You must be logged in to access attached files.
-
-
-
November 18, 2020 at 9:40 pm #2312879
EP
AskWoody_MVPMicrosoft “resolved” this certificates issue with the following quote on Nov. 17:
Resolution: This issue is now resolved when using the latest feature update bundles and refreshed media. Feature update bundles were released November 9, 2020 for Windows Server Update Services (WSUS) and Microsoft Endpoint Configuration Manager. Refreshed media was released November 3, 2020 on Volume Licensing Service Center (VLSC) and Visual Studio Subscriptions (VSS, formerly MSDN Subscriptions). For information on verifying you’re using the refreshed media, see How to address feature update refreshes in your environment. If you are using or creating custom media, you will need to include an update released October 13, 2020 or later.
Note If you are updating to Windows 10, version 20H2, this is only resolved with the feature update bundle released November 9, 2020. Refreshed media is not yet available on VLSC or VSS. Refreshed media for VLSC and VSS will be released in the coming weeks to address this issue and another known issue that requires a media refresh. Please check the known issue here for the status of the remaining Windows 10, version 20H2 known issue.
if upgrading from older Win10 version to 2004 with ISO, use the following ISOs from VSS/MSDN (build 19041.572):
en_windows_10_consumer_editions_version_2004_updated_oct_2020_x64_dvd_25512d0f.iso
en_windows_10_consumer_editions_version_2004_updated_oct_2020_x86_dvd_79847e1f.isoif upgrading from older Win10 version to 1909 with ISO, use the following ISOs from VSS/MSDN (build 18363.1139):
en_windows_10_consumer_editions_version_1909_updated_oct_2020_x64_dvd_809597f2.iso
en_windows_10_consumer_editions_version_1909_updated_oct_2020_x86_dvd_a209a4f8.isogoogle search for these or their SHA hashes
note – refreshed 20H2 install ISO media is not yet available from MS
-
December 3, 2020 at 10:26 pm #2317023
castiel
AskWoody PlusSomething weird? I used the Windows 10 2004 ISO downloaded via the MCT Wrapper bat file to upgrade from Windows 10 Pro 1909 to 2004. The DISM command had shown the ISO file to be Build 19041.572 (October 2020) that should avoid the “lost certificates”. Upgrade appeared successful and winver command showed the Build as 19041.572 as desired and expected. But when I ran wushowhide (quality deferral set via Group Policy to 30), KB4579311 unexpectedly appeared in the update list. KB4579311 was the October 2020 update to 2004 that was tied to the “lost certificates”. Since the ISO I used was the Build 19041.572 version for 2004 and had been verified with DISM before using and then winver after the feature upgrade completed, why would wushowhide think that KB4579311 was needed to be installed? I would have expected KB4579311 to be “baked into” the October 2020 ISO.
Has anyone actually used the ISO downloaded via the MCT Wrapper bat file to perform a feature upgrade to 2004?
That said, I have not noticed anything not working, but I feel uncomfortable by what wushowhide reports. I changed the quality deferral via GP from 30 to 0 and ran wushowhide again which now picks up the November 2020 KB4586781 to take me to Build 19041.630 as verified using the winver command.
Still uneasy that KB4579311 showed up as an available update (since I thought it would have been in the Build 19041.572 ISO used to upgrade).
Has anyone else used the MCT Wrapper bat ISO download as I did? Or can anyone explain or guess why KB4579311 even showed up?
I am sorely tempted to go back to 1909 by a system image restore I made before the upgrade.
-
December 4, 2020 at 9:18 am #2317112
WCHS
AskWoody PlusStill uneasy that KB4579311 showed up as an available update (since I thought it would have been in the Build 19041.572 ISO used to upgrade).
I looked in the MS-Catalog and KB4579311 was listed there, I think, as the enhancement package for 20H2, released 10/19/2020.
-
December 4, 2020 at 11:20 am #2317128
castiel
AskWoody PlusIt appeared as: 2020-10 Cumulative Update for Windows 10 Version 2004 for x64-based Systems (KB4579311).
Is KB4562830 the Enablement Package to get from 2004 to 20H2 (?).
For KB4562830:
Prerequisites
You must have the following prerequisites installed before applying this update:
Servicing stack update for Windows 10, version 2004: September 8, 2020 or a later servicing stack update
October 13, 2020—KB4579311 (OS Build 19041.572) or a later cumulative updateMaybe I have been looking at this too long…
-
-
-
-
AuthorPosts
Viewing 20 reply threads -
Welcome to our unique respite from the madness.
It's easy to post questions about Windows 10, Win8.1, Win7, Surface, Office, or browse through our Forums. Post anonymously or register for greater privileges. Keep it civil, please: Decorous Lounge rules strictly enforced. Questions? Contact Customer Support.

Plus Membership
Donations from Plus members keep this site going. You can identify the people who support AskWoody by the Plus badge on their avatars.
AskWoody Plus members not only get access to all of the contents of this site -- including Susan Bradley's frequently updated Patch Watch listing -- they also receive weekly AskWoody Plus Newsletters (formerly Windows Secrets Newsletter) and AskWoody Plus Alerts, emails when there are important breaking developments. Click here for details and to sign up.
Search The Lounge
Recent Replies
satrow on Hard Drive at 100% usage
11 minutes agosatrow on Hard Drive at 100% usage
35 minutes agoanonymous on Hard Drive at 100% usage
1 hour, 13 minutes agoanonymous on Nitro data breach – what does it mean to me?
1 hour, 14 minutes agoSusan Bradley on Giving you the choice
1 hour, 15 minutes agoanonymous on Giving you the choice
1 hour, 15 minutes agoOscarCP on Fiber optic not available; options please
2 hours, 36 minutes agorick41 on Giving you the choice
2 hours, 40 minutes agoBob99 on Find the cable modem that’s just right for your ISP
2 hours, 50 minutes agoOscarCP on Fiber optic not available; options please
2 hours, 53 minutes agorick41 on Giving you the choice
3 hours, 3 minutes agoOscarCP on Giving you the choice
3 hours, 12 minutes agocarpintero on Giving you the choice
3 hours, 14 minutes agoDriftyDonN on Find the cable modem that’s just right for your ISP
3 hours, 22 minutes agoBob99 on Find the cable modem that’s just right for your ISP
3 hours, 25 minutes agoOscarCP on What Linux is and why it has persisted
3 hours, 34 minutes agocarpintero on Giving you the choice
3 hours, 36 minutes agoBob99 on Fiber optic not available; options please
3 hours, 38 minutes agoDriftyDonN on Find the cable modem that’s just right for your ISP
3 hours, 47 minutes agoKirsty on Fiber optic not available; options please
3 hours, 53 minutes agoOscarCP on Aren't these the greatest performances of classical music?
4 hours, 2 minutes agoBob99 on Four GB of RAM vanishes … but then reappears
4 hours, 9 minutes agoBob99 on Hard Drive at 100% usage
4 hours, 15 minutes agoDrcard:)) on Using Windows 10 Backup Option
4 hours, 25 minutes agoBob99 on Hard Drive at 100% usage
4 hours, 35 minutes agoOscarCP on Aren't these the greatest performances of classical music?
4 hours, 40 minutes agoDrcard:)) on Why won’t Task Scheduler launch Office product
4 hours, 52 minutes agoOscarCP on Aren't these the greatest performances of classical music?
5 hours, Just nowmn-- on What Linux is and why it has persisted
5 hours, 14 minutes agoanonymous on Adobe Flash Not working for School test
5 hours, 16 minutes ago
Recent Topics
-
So I opened up an HP and where’s the hard drive?
1 hour, 27 minutes ago
-
Which version of MS Office should we buy and where can we get it?
2 hours, 38 minutes ago
-
Fiber optic not available; options please
2 hours, 36 minutes ago
-
Best W10-Pro updater program ?
7 hours, 10 minutes ago
-
Accessing Old Laptop HD
9 hours, 43 minutes ago
-
DNSpooq lets attackers poison DNS cache – A Patch
10 hours, 38 minutes ago
-
Nitro data breach – what does it mean to me?
1 hour, 14 minutes ago
-
Check Point : “FreakOut” malware exploits new Linux vulnerabilities
11 hours, 20 minutes ago
-
How to STOP Outlook Hotmail config forcing signin to Office 2019
11 hours, 38 minutes ago
-
Permission on public desktop gets reset
12 hours, 39 minutes ago
-
Surface Pro 4 & Win v2004 update fail
11 hours, 34 minutes ago
-
Extra USB Sound driver?
10 hours, 21 minutes ago
-
PNY Flash Drive Problem
14 hours, 6 minutes ago
-
Windows 10 bug crashes your PC when you access this location
1 day, 11 hours ago
-
Doesn’t like external FAT32 HDD
21 hours, 31 minutes ago
-
Why won’t Task Scheduler launch Office product
4 hours, 52 minutes ago
-
Susan recommending version 2004
1 day, 5 hours ago
-
Replace Images for Text in Word
1 day, 13 hours ago
-
Windows 10 internet connection freezes
20 hours, 18 minutes ago
-
Windows Defender In Win 10 Concern
6 hours, 15 minutes ago
-
Laptop with home and work networks
12 hours, 10 minutes ago
-
Top 40+ iOS 14 Tips and Tricks
1 day, 19 hours ago
-
What Linux is and why it has persisted
3 hours, 34 minutes ago
-
Find the cable modem that’s just right for your ISP
2 hours, 50 minutes ago
-
Four GB of RAM vanishes … but then reappears
4 hours, 9 minutes ago
-
Wow! Even more Office updates!
1 day, 9 hours ago
-
Hard Drive at 100% usage
11 minutes ago
-
Checking e-mail attachments with VirusTotal
2 days, 9 hours ago
-
Giving you the choice
1 hour, 15 minutes ago
-
outlook 365 emails not queueing
1 day, 15 hours ago
Search for Topics
Recent blog posts
- So I opened up an HP and where’s the hard drive?
- What Linux is and why it has persisted
- Find the cable modem that’s just right for your ISP
- Four GB of RAM vanishes … but then reappears
- Wow! Even more Office updates!
- Giving you the choice
- Tasks for the weekend – January 16, 2021
- Zero day Windows 10 bug
Key Links
Copyright © 2004 – 2021 AskWoody Tech LLC. All rights reserved.