Patch Lady Posts 2018-02-13

Topic

New Reply

So what happened?  Well a funny thing happened to a server.  Long story short, I decided that it was time for a fresh start and a new location courtes
[See the full post at: Patch Lady Posts 2018-02-13]

14 users thanked author for this post.

LH, Microfix, DrRon, jburk07, CyGuy, AlexEiffel, walker, Fred, EspressoWillie, Elly, CADesertRat, Cee Arr, MikeFromMarkham, AJNorth

Reply | Quote

Replies

I like the new format. Much easier to follow.

10 users thanked author for this post.

rc primak, Microfix, EspressoWillie, MrJimPhelps, abbodi86, flackcatcher, CADesertRat, Cee Arr, MikeFromMarkham, AJNorth

Reply | Quote

W E L C O M E   A B O A R D ,  S U S A N

4 users thanked author for this post.

Great Lake Bunyip, WildBill, EspressoWillie, MikeFromMarkham

Reply | Quote

The first revamped update post is a ripper.  So much easier for my aging brain to comprehend. Who is the little bloke next to Susan?  Woody!  Woody! Is that you?

1 user thanked author for this post.

WildBill

Reply | Quote

In a dark place we find ourselves, and a little more knowledge lights our way.

3 users thanked author for this post.

WildBill, AJNorth, Elly

Reply | Quote

Thanks Susan, the format is great. Glad to see you back.

Out of curiosity, are you still going to be doing Patch Watch for WS’s if/when they ever get back up?

Don't take yourself so seriously, no one else does 🙂
All W10 Pro at 22H2,(2 Desktops, 1 Laptop).

Reply | Quote

I’m going to stay over here.

Susan Bradley Patch Lady

4 users thanked author for this post.

rc primak, Microfix, CADesertRat, satrow

Reply | Quote

Just an observation:

You were the main reason that WS’s newsletter had any subscribers left after Fred Langa and many others left the newsletter, so I assume their subscriber base will take a major hit. Woody’s gain and WS’s/Penton’s loss. Hopefully their forum will stay afloat ( if things ever get fixed ).

Again, thanks for sharing your knowledge and guidance on the maze of patch’s being pumped out.

Don't take yourself so seriously, no one else does 🙂
All W10 Pro at 22H2,(2 Desktops, 1 Laptop).

Reply | Quote

Nice profound guide

Reply | Quote

Love it.

However, could I trouble you to include the equivalent security only update KB number for Windows 7/8.1 when you post the Monthly Update Rollup KB number? Sorry, never going to be group A.

Other than that, love it.

 

No matter where you go, there you are.

5 users thanked author for this post.

SueW, grayslady, OscarCP, AJNorth, Elly

Reply | Quote

Hear, hear!

And, please, the security rollup for Explorer 11 as well, whenever convenient.

Ex-Windows user (Win. 98, XP, 7); since mid-2017 using also macOS. Presently on Monterey 12.15 & sometimes running also Linux (Mint).

MacBook Pro circa mid-2015, 15" display, with 16GB 1600 GHz DDR3 RAM, 1 TB SSD, a Haswell architecture Intel CPU with 4 Cores and 8 Threads model i7-4870HQ @ 2.50GHz.
Intel Iris Pro GPU with Built-in Bus, VRAM 1.5 GB, Display 2880 x 1800 Retina, 24-Bit color.
macOS Monterey; browsers: Waterfox "Current", Vivaldi and (now and then) Chrome; security apps. Intego AV

Reply | Quote

Do you manually download the updates from the catalog site?  I’m just trying to cater to how folks patch.

Susan Bradley Patch Lady

Reply | Quote

We have a split audience. Those who install the Monthly Rollups (what I call “Group A“) are in the majority. The more skeptical only install Security-Only patches (“Group B”)

@PKCano maintains a list of Security-Only patches in AKB 2000003.

The MS-DEFCON system (see level “2” above) is for people who don’t want to install individual patches, but instead are looking for overall guidance. When I change MS-DEFCON level, the event is marked by an article in Computerworld giving detailed, step-by-step patching instructions.

5 users thanked author for this post.

Microfix, SueW, walker, AJNorth, satrow

Reply | Quote

“When I change MS-DEFCON level, the event is marked by an article in Computerworld giving detailed, step-by-step patching instructions.”

…and a collective sigh of relief is heard ’round the world (as Microsoft’s servers go into overload).

3 users thanked author for this post.

Lori, SueW, WildBill

Reply | Quote

@Woody:  How can we be certain that we receive all of “Patch Lady’s” information as it is issued?   Should we “subscribe” to this one, or what would your recommendation be so none of us misses any of this information?     This is WONDERFUL!     Thank you so much for all the wonderful work you do!    It is sincerely appreciated by everyone who uses your site!    🙂

Reply | Quote

I install the standard monthly rollup for Windows 7 and 8.1, after Woody says it’s ok to do so (i.e. when we are at MS-DEFCON 3 or higher).

Group "L" (Linux Mint)
with Windows 8.1 running in a VM

2 users thanked author for this post.

SueW, Hopper15

Reply | Quote

Patch Lady:

Thank you for asking.

Yes, I install, monthly, from the Catalogue, but just the security only update for (in my case) Windows 7 [Pro], SP1 x64, as well as the corresponding Explorer 11 cumulative security only.

On the other hand, I install Office, .NET and the MS malware tool remover, from the Update page in the Control Panel’s “Action Center”.  I have Windows Update set to inform me of new updates, but to let me chose when (and which) to install. Usually wait for one or two weeks, to see if anything bad transpires, such as a serious issue pending resolution, according to postings here at Woody’s. Also hide updates I do not want (but you never know if some day…) Mostly optional updates to fix things like the problem with the time in Azerbaijan,  and things with “quality” and “rollup” in their names.

I think many people visiting this site for information and advice update more or less in this way. We are what is known in Woodyese as the “Group B” people. There is also the Group A people, that let MS do the updating for them (e.g., my great aunt Agatha). Then there are the radical extremist daredevil rebels of Group W, I think it is called, that have both pulled out a tooth and swore a blood oath never to update, no matter what.

Ex-Windows user (Win. 98, XP, 7); since mid-2017 using also macOS. Presently on Monterey 12.15 & sometimes running also Linux (Mint).

MacBook Pro circa mid-2015, 15" display, with 16GB 1600 GHz DDR3 RAM, 1 TB SSD, a Haswell architecture Intel CPU with 4 Cores and 8 Threads model i7-4870HQ @ 2.50GHz.
Intel Iris Pro GPU with Built-in Bus, VRAM 1.5 GB, Display 2880 x 1800 Retina, 24-Bit color.
macOS Monterey; browsers: Waterfox "Current", Vivaldi and (now and then) Chrome; security apps. Intego AV

2 users thanked author for this post.

Lori, SueW

Reply | Quote

It was indeed a pleasure to read Ms. Susan’s column again, and the somewhat different format works well.  Look forward to reading her column in the coming months.

Charles

PS

Would someone please tell me how to insert an

image I downloaded from google images.  I want

to put it in the Insert/edit image box above.   

Reply | Quote

Susan, I noticed that you listed a patch for Office 2007 and Outlook 2007. Is Microsoft still patching Office 2007?

Group "L" (Linux Mint)
with Windows 8.1 running in a VM

Reply | Quote

Yes, they still patch 2007 but only for the word viewer, not the entire suite.

Susan Bradley Patch Lady

2 users thanked author for this post.

Lori, Microfix

Reply | Quote

But the update title says Suite:

Description of the security update for 2007 Microsoft Office Suite: February 13, 2018

And Word Viewer has its own separate update for the same vulnerability:

Description of the security update for Word Viewer: February 13, 2018

Windows 11 Pro version 22H2 build 22621.1778 + Microsoft 365 + Edge

Reply | Quote

Wow, that is great, but now traffic will rise and server will have to be changed again.

Question. Does your semi-annual channel trick work on a standard click-to-run Office installation permanent license our just for those who suscribe to Office365?

Reply | Quote

Yeah, great format and very easy to follow. Makes getting NET patches manually much easier.

The site was timing out this morning when I tried to come on here and for part of the afternoon. We’re going to be changing servers every week at this rate. AW might be getting too popular for it’s own good now.

Reply | Quote

Maybe Woody can increase what he’s charging for ads!

Group "L" (Linux Mint)
with Windows 8.1 running in a VM

Reply | Quote

Welcome, Patch Lady!

And may I remind all in attendance, that when it comes to decide when and what to patch, one should be mindful of what your friend in that picture once said about how really important things get done?

“Do. Or do not. There is no try.”

 

Ex-Windows user (Win. 98, XP, 7); since mid-2017 using also macOS. Presently on Monterey 12.15 & sometimes running also Linux (Mint).

MacBook Pro circa mid-2015, 15" display, with 16GB 1600 GHz DDR3 RAM, 1 TB SSD, a Haswell architecture Intel CPU with 4 Cores and 8 Threads model i7-4870HQ @ 2.50GHz.
Intel Iris Pro GPU with Built-in Bus, VRAM 1.5 GB, Display 2880 x 1800 Retina, 24-Bit color.
macOS Monterey; browsers: Waterfox "Current", Vivaldi and (now and then) Chrome; security apps. Intego AV

2 users thanked author for this post.

AJNorth, woody

Reply | Quote

Does this mean we can install the Febraury update (1703)?
I don’t know, there are people that reported issues with this patch…..

Reply | Quote

Therefore I think I will skip this month’s patch.  Nothing wrong with just skipping 1 month. I will wait until a more stable month to update, (hoping it’s March).
Thanks Patch lady for your advice.

Reply | Quote

Keep an eye on the MS-DEFCON level. When things look stable, I’ll move to MS-DEFCON 3 (or 4 or 5) and post the notice here, and in Computerworld.

Reply | Quote

thanks woody,  I just  dont want to blindly install a patch that messes my pc

Reply | Quote

SO HAPPY you are here.

Cheers!!
Willie McClure
“We are trying to build a gentler, kinder society, and if we all pitch in just a little bit, we are going to get there.” Alex Trebek

1 user thanked author for this post.

Great Lake Bunyip

Reply | Quote

I tried your command line instructions to switch Office from the monthly updates to the semi annual plan, but nothing much took place until I shut off the metered wireless connection setting. Hopefully the Office update process will be more fruitful this time; it’s running longer, in any case.

Welcome to Woody’s world.

Reply | Quote

Nope. It’s not happening for me, even with unmetered WiFi.

My Office 365 on Win10 Home v1703 still says Vers. 1801 (Build 9001.2171 Click-to-run) Monthly Channel.

Any ideas?

Reply | Quote

Susan Bradley wrote:

Do you manually download the updates from the catalog site? I’m just trying to cater to how folks patch.

I just need the KB numbers, I use WSUS for our organisation patching.

No matter where you go, there you are.

Reply | Quote

Hi Susan, thanks for the info on how to switch Office Click-to-Run from the monthly channel to the semi-annual channel.

However, my Office 365 automatic updates were still switched off when I applied the commands you provide, and the update window just kept on running and running.
So only after I reset Office to automatic updates the process was finalized.

Oddly enough, after that Office had signed into my secondary subscription account by itself. Had to switch back to my primairy subscription account.

All is well now. I’m on the semi-annual channel. Thanks a million!

Reply | Quote

It’s great to see your succinct patching posts here, Susan!

I’m currently a home user of Win 7 Pro 64-bit (three machines) firmly in “Group B”.  But I keep my finger on the pulse of Win 10 – in case I choose it instead of Linux in the future. 😉

Welcome!

Win10 Pro x64 22H2, Win10 Home 22H2, Linux Mint + a cat with 'tortitude'.

Reply | Quote

Please let me know what dism is and how to use it.

Thanks.

Charles

Reply | Quote

See https://support.microsoft.com/en-us/help/947821/fix-windows-update-errors-by-using-the-dism-or-system-update-readiness

1 user thanked author for this post.

Great Lake Bunyip

Reply | Quote

Hey, just a heads up; I installed KB 4074598 on my Windows 7 Desktop PC (I use AMD stuff etc) and it kept putting my PC into a weird hibernation state when trying to restart.. every single time. It wouldn’t show input from the monitors, mouse/keyboard, but the tower would still be running. To get out of this state I had to turn off the PC directly from the button on the tower itself, then turn it back on. It didn’t even do that “windows shut down unexpectedly” thing when you force turn off the PC.

The problem fixed by uninstalling the patch, but for whatever reason that patch basically made restarting impossible for me.. I mean, my PC is already feeling fragile enough and does weird glitchy things whenever I update it but this could be a potential issue for anyone that might decide to install it.

3 users thanked author for this post.

Great Lake Bunyip, woody, MrBrian

Reply | Quote

Perhaps similar to https://www.askwoody.com/forums/topic/kb4056894/#post-168525.

2 users thanked author for this post.

Great Lake Bunyip, woody

Reply | Quote

woody wrote:

Patch Lady Posts 2018-02-13: “Unless you take action, you are by default on the monthly channel – which is a bit of a misnomer – as lately the monthly channel has been updating more than once a month. As a result the first thing I want you to do after reading the Patch Lady post is to adjust how you get your click to run Office 2016 deployment. I’ll want you to change to the semi-annual feature update channel rather than the monthly update channel.”

This Microsoft page says that the Semi-Annual Channel is the default:

Semi-Annual Channel is the default update channel for Office 365 ProPlus.

Overview of update channels for Office 365 ProPlus

Windows 11 Pro version 22H2 build 22621.1778 + Microsoft 365 + Edge

1 user thanked author for this post.

Great Lake Bunyip

Reply | Quote

SAC is default for O365ProPlus SKU only
there are more than 7 major SKUs for Office 2016 C2R, not to mention Project and Visio

3 users thanked author for this post.

Great Lake Bunyip, woody, Alice

Reply | Quote

Very glad to see you aboard Susan. I used to subscribe to Windows Secrets when Brian was running the show. With you on board I’m happy to contribute to Askwoody as input from both of you has been invaluable in my 21 years as a system admin. We changed our office365 users to semi annual about a month ago after having our fill of the monthly channel fiasco. Most definitely semi annual is the way to go in a corporate environment.

Red Ruffnsore

1 user thanked author for this post.

Great Lake Bunyip

Reply | Quote

New here. Found this during search for how to get new update to install. Anyway, in this article In you state KB4076492 is an optional update, but on my win 7 computer, notifications lists it as an important update, not an optional one. In any case, it won’t install, despite numerous attempts and suggested ‘fixes’. Anyway, Why is it just showing up now a whole month after its release, and listed as ‘important’?

"It is better to seek forgiveness than to ask permission." ~Grace Hopper

Reply | Quote

Hello ArlisT, KB4076492 is the February Security and Quality Rollup for all versions of .NET Framework appropriate to your Win7 computer, and carries a classification of Recommended. This will be presented to you on either page of Windows Update offerings, depending on how you have chosen to see recommended items in your Windows Update Settings. There is a box that can be checked to ‘give me recommended updates the same way I receive important updates’; deselecting that box will drop any similarly classed items to the optional items page, where they will be listed in italics.

Kristy has an index page for AskWoody KnowledgeBase topics. In here are directions for both GroupA and GroupB patching disciplines. Each of which prefers a different use of this setting.

MrBrian has a recent topic that discusses in depth how Microsoft assigns classification to updates. I’ve re-read that now, and it may be more involved than your question is seeking.

Anyway, Why is it just showing up now a whole month after its release, and listed as ‘important’?

It is showing up for you now, because it is still the most recent security patches for the .NET Framework and you have not yet installed it. I also have not yet installed this item on my own machine, it is currently in my hidden list found under the label ‘Restore hidden updates’. I had delayed installing back in February because so many other items were causing conflict and I chose to set this one aside. I have not had any failures in tasks while missing this item, and currently plan to wait on the next rollup when it comes.

If you choose to hide it, you will then be presented the January Preview of the same package, they appear to be identical offerings. That could also be hidden. If you restore both, only the February instance will be listed.

I do not know enough to say why it has failed for you multiple times. Did you successfully install the last rollup from January, KB4055532? It would be listed by that number in your Windows Update History. But if you choose to view Installed Updates the rollup will be broken into component parts in the appropriate categories; e.g. the .NETv4.7 part is KB4074880. Or have you been skipping this patch in previous months as well?

Your sig line was familiar in reference, but also seen recently by César. Whether also a fan of Grace, RDML Hopper, or of getting advantages where they can be grabbed, you two seem agreed either way.

Reply | Quote