And we get Security Bulletins! https://technet.microsoft.com/en-us/library/security/ms17-mar.aspx I count 18 of ’em…[See the full post at: Patch Tuesday just hit]
|
There are isolated problems with current patches, but they are well-known and documented on this site. |
-
Patch Tuesday just hit
- This topic has 155 replies, 33 voices, and was last updated 6 years, 6 months ago.
Viewing 54 reply threadsAuthor-
-
-
I meant that Microsoft’s info indicates that those two vulnerabilities have already been exploited.
1 user thanked author for this post.
-
-
For Windows 10 “Anniversary”, we are taken to 14393.953…
So far in very brief testing I’m not seeing any problems with my updated Win 10 test system. It booted back up. The only issue is that the Aero Glass for Win 8+ add-on sensed a compatibility issue, and apparently downloaded symbols from the Microsoft servers to compensate, because it’s working.
Note that I have not had time to do any substantive tests yet. Those who rely on Win 10 should definitely heed Woody’s MS-DEFCON 2 setting and hold off updating for now.
-Noel
-
-
CHECKED in the important update list
Not for me on Win 8.1 it wasn’t. I had previously hidden it, and I did not uncheck it before right-clicking…
It’s now hidden. Again.
By the way, I had some anomalies on the first bootup of my test Win 8.1 system after installing the other updates (e.g., some odd errors in the System event log, and the firewall didn’t start up right). A second reboot corrected all those it seems.
-Noel
1 user thanked author for this post.
-
They’ll appear as checked if you have “Give me recommended updates the same way I receive important updates” selected in Windows Update.
2 users thanked author for this post.
-
-
-
Important for Woody’s Group B: The Microsoft Catalog download link listed in “MS17-006: Security update for Internet Explorer: March 14, 2017” (https://support.microsoft.com/en-us/help/4012204/ms17-006-security-update-for-internet-explorer-march-14-2017) is http://catalog.update.microsoft.com/v7/site/search.aspx?q=kb3218362 but the cumulative Internet Explorer update is actually at http://catalog.update.microsoft.com/v7/site/search.aspx?q=kb4012204.
Reminder: From https://blogs.technet.microsoft.com/windowsitpro/2017/01/13/simplified-servicing-for-windows-7-and-windows-8-1-the-latest-improvements/:
“Starting with February 2017, the Security Only update will not include updates for Internet Explorer, and the Internet Explorer update will again be available as a separate update for the operating systems listed above.”
-
From “MS17-006: Description of the security update for Internet Messaging API on Windows Vista and Windows Server 2008 R2: March 14, 2017” (https://support.microsoft.com/en-us/help/3218362/ms17-006-description-of-the-security-update-for-internet-messaging-api):
“If you are running Windows Vista or Windows Server 2008, install this security update (3218362) in addition to security update 4012204, in order to be fully protective from this vulnerability.”
1 user thanked author for this post.
-
-
Information on the Security-Only UPDATES and the Security Monthly Quality ROLLUPS (Security + non-security) is on the Win7 History page
And on the Software Update Services page
1 user thanked author for this post.
-
-
-
Because these WU improvements were not introduced in KB3172605 itself, they are part of KB3161608, which got replaced by KB3172605
https://support.microsoft.com/en-us/help/3161608rest assure that every “telemetry” change will be documented
1 user thanked author for this post.
-
-
-
-
The time to download and install the updates is when Woody’s MS-DEFCON number is 3 or greater. So WAIT.
For further reference check AKB2000003 – I am keeping the links there up to date.
https://www.askwoody.com/forums/topic/2000003-ongoing-list-of-group-b-monthly-updates-for-win7-and-8-1/#post-98061But to answer your questions:
Yes, those two links are correct for Group B. “Win 7 Security Only x64” is Security Only Quality UPDATE for Windows 7 and “Win 7 x64” under IE is the security only patch for IE11.Also I do not know exactly what “stand-alone” means.
This means the patch is not delivered through Windows Update, but must be downloaded fromt he Microsoft Update Catalog and installed manually. To do this:
1. Download the file
2. Go to Control Panel\Administrative Tools\Services. Scroll down and highlight Windows Update Service. At the top left click on “Stop” to stop the service.
3. Double click on the downloaded file.
4. After installation finishes, reboot the computer, log back in, and wait 10 minutes before doing anything else.If you have any questions, come back here and get help.
-
-
hey woody.
New “magic” win32k.sys updates for Windows Vista SP2 to speed up Windows Update scans on Vista: KB4012497. Replaces KB3204723 & previous win32k.sys fixes.
And Microsoft is STILL publishing new MS security bulletins like they did with MS17-005 and earlier.
1 user thanked author for this post.
-
-
-
-
-
MS17-018: Security Update for Windows Server 2008, Windows Vista, and Windows XP Embedded (KB4012497)
Locale: All
Deployment: Important/Automatic Updates, WSUS, and Catalog
Classification: Security Updates
Security severity rating: Critical
Supersedes: MS16-151 (KB3204723) on Windows Server 2008, Windows Vista, and Windows XP Embedded
Target platforms: Windows Server 2008, Windows Vista, and Windows XP Embedded -
-
-
-
-
Microsoft Security Advisory 3123479 (“SHA-1 Hashing Algorithm for Microsoft Root Certificate Program”) (https://technet.microsoft.com/en-us/library/security/3123479.aspx) was revised on March 14, 2017.
1 user thanked author for this post.
And we get Security Bulletins! https://technet.microsoft.com/en-us/library/security/ms17-mar.aspx I count 18 of ’em…[See the full post at: Patch Tuesday just hit]
Woody,
Thanks for the comprehensive list and the big heads up ! ! I’m sure everyone appreciates all the hard work you do to help keep our computers safe.
Dave
1 user thanked author for this post.
-
KB4012212 (Win7)
32-bit or 64-bitYes, the 2017/02 folder (unless MS has it wrong on their site). Maybe held over from the non-existent Feb?
The IE security updates are included in the Security Monthly Quality ROLLUP. But if you are in Group B, they are NOT included in the Security Only Quality UPDATE so you have to download them separately. Group B has two updates from the Catalog as of March.
The big rollups promised starting with March 2017 including older patches for windows 7 / 2008 R2 and Windows 8.1 / 2012 R2 have not been released today.
Why? Will everything be delayed for one month because of the February 2017 glitch?
https://blogs.technet.microsoft.com/windowsitpro/2016/10/07/more-on-windows-7-and-windows-8-1-servicing-changes/1 user thanked author for this post.
I would imagine Woody will want to write about this, I left in is Mail Box earlier…
Here is a peek:
--------------------------------------
1. Tower Totals: 2xSSD ~512GB, 2xHHD 20 TB, Memory 32GB
SSDs: 6xOS Partitions, 2xW8.1 Main & Test, 2x10.0 Test, Pro, x64
CPU i7 2600 K, SandyBridge/CougarPoint, 4 cores, 8 Threads, 3.4 GHz
Graphics Radeon RX 580, RX 580 ONLY Over Clocked
More perishable2xMonitors Asus DVI, Sony 55" UHD TV HDMI
1. NUC 5i7 2cores, 4 Thread, Memory 8GB, 3.1 GHz, M2SSD 140GB
1xOS W8.1 Pro, NAS Dependent, Same Sony above.-----------------
1 user thanked author for this post.
I’m excitedly awaiting them next Tuesday
it’s been 3 boring months 😀
1 user thanked author for this post.
-
-
The correct full is “Security Only Quality Update,” shortened to Security Only, meaning the patch for Windows that contains only security fixes.
If you haven’t patched IE since the new updating system, can you install the IE kb?
Since you don’t provide a date, I have no way of answering that question. Here is the information on the IE Update.
The Cumulative Security Update for IE is KB4012204.
Information can be found here by searching for that number https://support.microsoft.com/en-us/help/894199/description-of-software-update-services-and-windows-server-update-services-changes-in-content-for-2017
Or more specifically here https://support.microsoft.com/en-us/help/4012204/ms17-006-security-update-for-internet-explorer-march-14-2017
-
-
-
6 updates for Office 2007 today:
Antec P7 Silent * Corsair RM550x * ASUS TUF GAMING B560M-PLUS * Intel Core i5-11400F * 4 x 8 GB G.Skill Aegis DDR4 3200 MHz CL16 * Sapphire Radeon 6700 10GB * XPG GAMMIX S70 BLADE 1TB * SanDisk Ultra 3D 1TB * DVD RW Lite-ON iHAS 124 * Windows 10 Pro 22H2 64-bit
-
KB4012215 is the Security Monthly Quality ROLLUP for Windows 7. This is for Group A. This ROLLUP contains the Cumulative Rollup for IE11 as well as Windows.
KB4012212 is the Security Only Quality UPDATE for Windows 7. It does NOT include the update for IE11. This is for Group B. Since the IE11 update is not included in this patch, Group B now has to download a second update to cover Internet Explorer 11.
KB4012204 is the Cumulative Security Rollup for IE11. This is for Group B.
From now on, Group B will need to download TWO updates from the Catalog to stay patched
-
-
If you manually install an update that requires a boot, you should go ahead and reboot the computer after the installation. After the reboot and login, rule of thumb is wait 10 minutes before proceeding to allow Trusted Installer to finish it’s work. But one way to gauge this is to open Task Manager and watch the CPU usage. Wait until it drops below 7-10% and stays there.
Normally TrustedInstaller continues where it was left.
However, if Windows update is configured on Never check for updates, there is a good chance that TrustedInstaller (and TiWorker which is an associated process in Windows 8 and Windows 10, not Windows 7) never completes its task, until the next scan which may take much longer that normal due to this configuration.
The other post mentioned was probably asking for the computer not to be restarted following any update, until TrustedInstaller becomes quiet.
This is monitored with Task Manager.
I think for regular users, the original recommendation from Woody for most users to select Check for updates but do not download has merit as it allows TrustedInstaller to do its work in the background. Users who are fully patched until the last month (Group A) should never have any issues with slow scans.
I personally prefer the Download but do not install configuration, but this has downsides as it may install at shutdown if the user does not fully understand its behaviour.1 user thanked author for this post.
Microsoft Silverlight KB4013867 appeared in my update list. I do not want, or have Silverlight installed here. Hidden.
I am on Windows 10 Pro 1607 “Anniversary”.
I looked in “Programs and Features”, also ran a registry search, and a file search to see if I had a hidden Silverlight install. Nada.
Weird!!!
Security Update for Microsoft Silverlight (KB4013867) https://www.microsoft.com/en-us/download/details.aspx?id=54857
Windows 10 Pro 22H2
Some of my early testing feedback, after having applied the March updates (group A style with a few exceptions) to Windows 7 x64 Ultimate, Windows 8.1 x64 Enterprise, and Windows 10 x64 Pro VMs:
Windows 7:
- The updates went in smoothly and quickly.
- SFC /VERIFYONLY passed.
- Brief tests of system functionality are all good. No problems found so far.
Windows 8.1:
- The updates went in smoothly and quickly.
- After the first reboot I saw an error message in the System event log implying the user registry was found corrupted and recovered. I also saw two other messages implying something went wrong with enabling event publisher “Microsoft-Windows-Kernel-ShimEngine/Operational”.
- I found my Sphinx Windows Firewall Control driver had not started.
- After a second reboot, all seems well, no errors were logged, and the firewall software was performing nominally. Based on this experience I suggest rebooting twice after the updates go in.
- SFC /VERIFYONLY passed.
- Development operations I typically do (e.g., builds with Visual Studio) seem to be functioning nominally.
Windows 10:
- A check for updates with the WUShowHide tool went smoothly and quickly.
- The update installation with the Settings App went smoothly and quickly.
- After reboot, Aero Glass for Win 8+ reported an incompatibility error and inability to find debug symbols for the new modules, but works okay anyway.
- SFC /VERIFYONLY passed.
- The Sphinx firewall software is performing nominally.
- Development operations I typically do (e.g., builds with Visual Studio) seem to be functioning nominally.
- O&O ShutUp10 did not show any privacy settings reverted.
-Noel
-
Hey Noel,
I was just curious about a couple of your procedures. Of course we have our own way of doing things. SFC, why only Verify? and why no DISM /RestoreHealth? 😀
W 8.1 Pro Test partition. All WU updates presented installed. All OKAY so far.
SFC /Scannow clean.
DISM /RestoreHealth on last released ESD W 8.1.3 Pro Clean
DISM /RestoreHealth on current MS Servers clean.
DISM Component Cleanup Clean.W 10.0 1607 RR partition RTM CU and other Updates presented on WU Installed. All OKAY so far.
SFC /Scannow Clean.
DISM /RestoreHealth on CBB Released ESD Clean
DISM /RestoreHealth on current MS Servers clean
DISM component Cleanup Clean.W 10.0 1703 RS2 IP Build 15058
Full ESD > ISO Created
UUP > Delta ISO CreatedDelta ISO Install Pending but soon.
--------------------------------------
1. Tower Totals: 2xSSD ~512GB, 2xHHD 20 TB, Memory 32GB
SSDs: 6xOS Partitions, 2xW8.1 Main & Test, 2x10.0 Test, Pro, x64
CPU i7 2600 K, SandyBridge/CougarPoint, 4 cores, 8 Threads, 3.4 GHz
Graphics Radeon RX 580, RX 580 ONLY Over Clocked
More perishable2xMonitors Asus DVI, Sony 55" UHD TV HDMI
1. NUC 5i7 2cores, 4 Thread, Memory 8GB, 3.1 GHz, M2SSD 140GB
1xOS W8.1 Pro, NAS Dependent, Same Sony above.-----------------
1 user thanked author for this post.
-
SFC, why only Verify? and why no DISM /RestoreHealth?
I always like to know whether something’s wrong before giving a command that will try to correct problems.
If it passes SFC /VERIFYONLY why do more?
I have used the others in the past when I’ve detected problems. In this case there were none.
-Noel
1 user thanked author for this post.
-
-
Noel,
If I knew at one time, I don’t remember now. I just never use them, sorry. I can’t imagine that they are the same. To what degree difference, I just can’t say….
--------------------------------------
1. Tower Totals: 2xSSD ~512GB, 2xHHD 20 TB, Memory 32GB
SSDs: 6xOS Partitions, 2xW8.1 Main & Test, 2x10.0 Test, Pro, x64
CPU i7 2600 K, SandyBridge/CougarPoint, 4 cores, 8 Threads, 3.4 GHz
Graphics Radeon RX 580, RX 580 ONLY Over Clocked
More perishable2xMonitors Asus DVI, Sony 55" UHD TV HDMI
1. NUC 5i7 2cores, 4 Thread, Memory 8GB, 3.1 GHz, M2SSD 140GB
1xOS W8.1 Pro, NAS Dependent, Same Sony above.-----------------
1 user thanked author for this post.
-
Just a guess, but it looks from the output like /ScanHealth is a superset of /CheckHealth. The former took minutes to run, while the latter put out its result immediately.
-Noel
-
The most useful ones
dism.exe /online /Cleanup-Image /AnalyzeComponentStore
dism.exe /online /Cleanup-Image /StartComponentCleanupdism.exe /online /Cleanup-Image {/CheckHealth | /ScanHealth | /RestoreHealth}
1 user thanked author for this post.
-
You got that Right CH100,
I can’t live without any of them!!!
--------------------------------------
1. Tower Totals: 2xSSD ~512GB, 2xHHD 20 TB, Memory 32GB
SSDs: 6xOS Partitions, 2xW8.1 Main & Test, 2x10.0 Test, Pro, x64
CPU i7 2600 K, SandyBridge/CougarPoint, 4 cores, 8 Threads, 3.4 GHz
Graphics Radeon RX 580, RX 580 ONLY Over Clocked
More perishable2xMonitors Asus DVI, Sony 55" UHD TV HDMI
1. NUC 5i7 2cores, 4 Thread, Memory 8GB, 3.1 GHz, M2SSD 140GB
1xOS W8.1 Pro, NAS Dependent, Same Sony above.-----------------
1 user thanked author for this post.
-
-
I just installed all the March Window Updates on my Exchange 2016 Edge server on Windows Server 2016 and the Exchange Transport won’t start:
Microsoft Exchange couldn’t initialize the Content Filter agent because ExSMime.dll couldn’t be initialized.
Failed to create agent factory for the agent ‘Content Filter Agent’ with error ‘Failed to create type ‘Microsoft.Exchange.Transport.Agent.ContentFilter.ContentFilterAgentFactory’ from assembly ‘C:\Program Files\Microsoft\Exchange Server\V15\TransportRoles\agents\Hygiene\Microsoft.Exchange.Transport.Agent.Hygiene.dll’ due to error ‘Exception from HRESULT: 0xC0630005′.’. Please verify the corresponding transport agent assembly and dependencies with correct version are installed.
1 user thanked author for this post.
-
-
Windows Server 2016Datacenter
1 user thanked author for this post.
-
-
I haven’t been offered any Office 2010 updates yet on my Win7 machine with Office 2010 installed. Both my Win7 machines have Silverlight long since uninstalled but received an update for it (KB4013867). It’s hidden on both machines, along with our dear friend KB2952664.
The standard monthly roll-up KB4012215 caught someone on Windows 7 Help forum with a catastrophic boot error:-
https://www.sevenforums.com/news/405958-patch-tuesday-march-2017-a-2.html
1 user thanked author for this post.
Windows 10: March 15th 2017 Update KB3150513 for Windows 10 Version 1607
https://www.catalog.update.microsoft.com/Search.aspx?q=KB3150513
1 user thanked author for this post.
-
This is being offered on all versions of Windows. It is a compatibility definition update. A new release for Win10, but Win7 and Win8.1 are seeing the earlier version appear if they installed KB2952664 (Win7) or KB2976978 (Win8.1) with the recent updates. The latter are prerequisites. It is also showing up in Win10.
It appears as an additional update after WU install and reboot
-
-
I think this is a late release, at least for Windows 10 1607.
It was not released in the original batch of files for Patch Tuesday March 2017.
Other versions were released in the past for Windows 10 1511.
To me, without having the full details, it indicates that the functionality from KB2952664 in Windows 7 is built-in at least in Windows 10 1511 and 1607. Otherwise we wouldn’t see KB3150513 being on offer for those versions of Windows 10.
There was no KB3150513 release for Windows 10 1507.It makes me wonder if we should revise the advise for Windows 7 Group A model of patching in relation to KB2952664/KB3150513 in the sense that maybe we should let them be installed when KB2952664 moves to Recommended.
1 user thanked author for this post.
-
I hated myself when I did it, but starting in December, I had people in group A install all recommended patches.
That still sticks in my craw.
1 user thanked author for this post.
-
-
-
Appraiser KB2952664 and Telemetry DiagTrack are built-in Windows 10 since RTM
Both KB2952664/KB3150513 are only needed for upgrade
they have nothing useful for current Windows 7 (well, except providing MSFT with Appraiser statistics)
-
Antec P7 Silent * Corsair RM550x * ASUS TUF GAMING B560M-PLUS * Intel Core i5-11400F * 4 x 8 GB G.Skill Aegis DDR4 3200 MHz CL16 * Sapphire Radeon 6700 10GB * XPG GAMMIX S70 BLADE 1TB * SanDisk Ultra 3D 1TB * DVD RW Lite-ON iHAS 124 * Windows 10 Pro 22H2 64-bit1 user thanked author for this post.
Anyone getting WSUS failures with the new patches?
WSUS has been rock solid over here and suddenly now with three March patches (KB 4014329, KB 4013418 and KB 4013429) – I get this:
“Client computers are installing updates with a higher than 25 percent failure rate. This is not normal.”
This appears in the event log on the server when I manually check for updates from a Windows LTSB 1607 or a Enterprise 1607 workstation. Both stations are configured correctly and have been reporting into WSUS correctly and regularly.
I also see all three March patches for 1607 have a big red X on them within the WSUS console – with a blurb “The update failed to install on 2 computers”?
I have checked the update server – all is well. IP is correct. Machine is pingable from the clients. Ran the Windows Troubleshooter etc etc.
Appreciate anyone checking in that is updating via WSUS and has had success.
Cheers!
Sonic.
1 user thanked author for this post.
-
First thing comes to mind: check to see if you installed KB4012215 the Security Monthly Quality ROLLUP. If so, the security-only UPDATE will give you that message if you try to install it.
Second thing, check the bittedness of the file you downloaded. There will be x86 or x64 in the file name. Does that match your computer 32-bit or 64-bit respectively?
1 user thanked author for this post.
-
-
Hmmm. I’m running out of ideas. Try reboot, wait 10 min after login, stop Windows Update Service, try manual install again.
1 user thanked author for this post.
-
-
-
PKCano’s suggestion (reboot, stop the Windows Update Service, and try to install again) did the trick. Thank you!
The other suggestions are also appreciated, thankfully it didn’t come to that.
-
-
Meh, seem to have some trouble on all three of my Win 10 machines. Hangs at 95% download for updates on one, the other failed twice to install KB4013429 and finally found a Windows update reset tool that seem to fix it. Funny my oldest desktop with a Hazwell CPU i3 updated without issues. It was only a KabyLake notebook and a Dell Mini desktop that had issues. Well I guess you had to figure after taking a month off that Microsoft couldn’t do a smooth roll out of updates. That company has totally gone down the wrong path with updates. I think their image is worse than ever now, and it won’t help sell users on Windows 10. too many of these flubs and people will avoid Win 10 like the plague. I sort of wish I did looking back.
1 user thanked author for this post.
My WSUS issues just got a bit more strange. After my earlier post this monring – I decided to “unapprove” the 3 Windows 10 1607 patches on the WSUS server.
As soon as I did that – and then manually pressed Check for Updates on my 10 Win 10 workstations – they ran thru the check motions normally and reported back that they were up to date. Which they should be (assuming nothin new was found on WSUS).
Then just moments ago – I approved just one of the three patches (KB 4013429) – the cumulate update patch – and clicked Check for Updates again. Instantly I get the error message attached….
Then if I “unapprove” this file – and do another manual check – it goes fine. Just what the heck is going on here?Oddly – for a brief second before the above error appears – I can see a quick reference to the actual Cumulative Update file descriptor etc – which disappears and is replaced by the error above.
And over in the update history – the following failures are record…
Any ideas?
Sonic.
-
Suggestion: Try converting the post to text before cut/paste-ing.
1 user thanked author for this post.
NOT to pit colleague against colleague, in her 2017.03.16 Patch Watch column for Windows Secrets, Susan Bradley is recommending the installation of the OS March security patches KB4012215 (Win7) and KB4012216 (Win8.1), as well as the Office security patches (not the optional updates); curiously, for Windows 7 she has this:
Windows 7 KB4012215
7 gets only security fixesThe March release for Windows 7 only includes security updates. This month update includes fixes for Windows DVD Maker, Microsoft Graphics Component, Windows kernel-mode drivers, Windows Media Player, Microsoft XML Core Services, Windows OS, SHA-1 deprecation for SSL/TLS certificates, Internet Explorer, Windows kernel, Microsoft Uniscribe, SMB Server, Windows Hyper-V, Internet Information Services, and Active Directory Federation Services.
For my machines, and those of my clients, I shall continue to hold-off until the Oracle of Brentwood and his able associates also issue their imprimatur.
1 user thanked author for this post.
-
@AJNorth
Susan Bradley is targeting a different audience, which is sysdmin/sysengineer type.
Woody is targeting mostly the home user audience.
However there is no conflict as there is a lot of overlapping and if you can follow both and if you can make up your own mind, it is probably the ideal situation. As a good example of how Woody is supporting the enterprise users, just follow the recent CRM 2011 related posts and notice how successful were those threads, which provided a very good solution in only 2 days from the release of the problematic patches.
I think this is the only public site which provides a solution until now.
While Microsoft originally issued that solution as it is their duty to do so, they prefer to keep it private at this stage and work on individual cases. However, not everyone can afford to pay Microsoft for custom solutions and the fact that there is a public forum posting a possible solution, even if it is early and only experimental at this stage, is a very good thing. Good developers can take it from here and fine tune further if they find it necessary.For the purpose of this forum, you should support Woody’s approach.
If you post on patchmanagement.org, where Woody posts often, you should support Susan’s approach.
I would say it is a matter of courtesy for the host of each site. 🙂 -
Thank you for your reply.
Yes, I certainly appreciate that each forum has its own subset of followers; still, there is quite a bit of overlap — and well before reaching the horizon, both approaches do usually tend to converge. (The matter of CRM 2011 is point well taken.)
My post was intended to reflect that there are other readers of both (and even additional) forums for whom some of the same questions may arise.
As is the nature of knowledge, when confronted with issues that may not strictly resolve with absolute objectivity, then some degree of art enters into the equation which one then uses in conjunction with the science to balance the various parameters involved and arrive at a solution (even if only interim).
And, of course, trust — which for Susan and Woody (together with their respective cadres of highly-skilled and conscientious associates and contributors) is implicit — and never in doubt.
To borrow something from those old enough to remember (or younger fans of Old Time Radio), once again with Windows this is akin to Molly warning Fibber, “Don’t open that closet door, McGee!”
1 user thanked author for this post.
-
-
Personally I think it’s too soon to tell whether the March patches cause havoc amongst any particular audience.
There could be some, for example, who updated earlier this week and lost system functionality entirely, or lost network connectivity. They’re not necessarily back online with their war stories yet. The patches are only a few days old!
Others might not know why their systems became unstable (or more unstable, in some cases). Not everyone runs a tight ship and they might just view what’s happening to them this week as another step toward reinstallation of the whole thing.
And certainly no one does everything their system can do every day. Maybe there are classes of applications that are only run occasionally (e.g., monthly tasks) that are utterly broken but as it happens few have tried them yet. Yes, it’s a big, statistical world. But Windows is a BIG, complex blob of software!
Personally, I update my virtual test systems right away, but often wait nearly a month to update my critical working systems. I do my OWN testing on virtual machines as well as online research – before choosing to (or NOT to) install a particular set of updates on my hardware.
Finally, let’s not forget that individual users and systems have specific needs… Sure, it sounds like bunches of things are fixed in Windows 7. I have a particular system that’s running Windows 7 and has a very specific use as a server, and doesn’t get interactive use. For that it’s already utterly reliable and efficient. Microsoft hasn’t fixed anything I need for that system, thus that particular system continues running with updates deferred indefinitely, and only if something I really do or will need is documented in the updates will that change.
I suggest that Woody’s MS-DEFCON system – which Woody usually only switches to 3 or higher after some weeks of observation – is being operated adeptly and with seasoned insight few folks – even including other respected journalists – have.
-Noel
-
Good advice, Noel.
I usually wait a while before I even do the “check for updates”. (Paranoia perhaps? ). Then once everything is there to review, I await the Defcon number going up to 3 or above before taking any action. Thank you the information you have provided. 🙂 🙂 🙂
1 user thanked author for this post.
-
Security Update for Microsoft Excel 2010 (KB3178690) has some issues 😀
https://support.microsoft.com/en-us/help/3178690it’s not pulled
1 user thanked author for this post.
-
regular Windows Update never recognize Security Only updates
just the managed environments like WSUS/SCCM have the ability to choose between Security Only and Monthly Rollup
3 users thanked author for this post.
-
An interesting item in the rollup previews for Win 7 and 8.1 released today:
“Enabled detection of processor generation and hardware support when PC tries to scan or download updates through Windows Update.”
Sources:
https://support.microsoft.com/en-us/help/24717/windows-8-1-and-windows-server-2012-r2-update-history
https://support.microsoft.com/en-us/help/22811/windows-server-2012-update-history
1 user thanked author for this post.
On March 23, 2017,Microsoft released these two new non-security updates:By the Release Notes: Windows Management Framework (WMF) 5.1 Release Notes
KeithB | Last Updated: 1/31/2017
https://msdn.microsoft.com/en-us/powershell/wmf/5.1/release-notes
………
Both of these updates are available only on Microsoft Update Catalog.If you really like using the Catalog one can BUT this might be a bit nicer:
Install and Configure WMF 5.1
https://msdn.microsoft.com/en-us/powershell/wmf/5.1/install-configureOR
For those of you that haven’t been following the following information this may very well may be new BUT it was actually released in January.
PowerShell- Learning Virtually on MV Academy & MSDN Channel 9 from Videos, eBooks and Blogs
https://www.askwoody.com/forums/topic/powershell-learning-virtually-on-mv-academy-msdn-channel-9-from-videos-ebook/…….
Windows PowerShell
Automating the world one-liner at a time…
https://blogs.msdn.microsoft.com/powershell/Windows Management Framework (WMF) 5.1 Released
https://blogs.msdn.microsoft.com/powershell/2017/01/19/windows-management-framework-wmf-5-1-released/Update January 27, 2017: .Net version info updated.
“We are pleased to announce that we are releasing the Windows Management Framework (WMF) 5.1 via the Microsoft download center.
WMF 5.1 upgrades Windows 7, Windows 8.1, Windows Server 2008 R2, Windows Server 2012, and Windows Server 2012 R2 to the PowerShell, WMI, WinRM and SIL components that were released with Windows Server 2016 and Windows 10 Anniversary Edition.
You can find out more about the WMF 5.1 release in the Release Notes.
Please note that for Windows 7 and Windows Server 2008 R2 the installation instructions have changed significantly. Please read the Install and Configure topic in the release notes. We have removed the requirement for pre-installing WMF 4 on Windows 7 and Windows Server 2008 R2, but to do so we had create a script for checking the prerequisites that accompanies the MSU in a ZIP file. WMF 5.1 requires .Net version 4.5.2, and cannot be installed on Windows 7 or Windows Server 2008 R2 if WMF 3.0 is installed. This affects only Windows 7 and Windows Server 2008 R2. The Install and Configure topic in the release notes provides details on using the script.
As always, we welcome your feedback on PowerShell and WMF via our UserVoice site.
Thank you –”
The PowerShell Team
…….
I was almost caught on this, I had even Downloaded the MSU but when I started my usual cross checks, I found I have the same KB’s and information I had in January. In short if you already have WMF 5.1 there is nothing to see here folks.
However, with the extra talk of DISM lately, maybe it is a good opportunity to become more aware of Powershell and Powershell ISE.
--------------------------------------
1. Tower Totals: 2xSSD ~512GB, 2xHHD 20 TB, Memory 32GB
SSDs: 6xOS Partitions, 2xW8.1 Main & Test, 2x10.0 Test, Pro, x64
CPU i7 2600 K, SandyBridge/CougarPoint, 4 cores, 8 Threads, 3.4 GHz
Graphics Radeon RX 580, RX 580 ONLY Over Clocked
More perishable2xMonitors Asus DVI, Sony 55" UHD TV HDMI
1. NUC 5i7 2cores, 4 Thread, Memory 8GB, 3.1 GHz, M2SSD 140GB
1xOS W8.1 Pro, NAS Dependent, Same Sony above.-----------------
-
-
Golly Pwpsiboy,
I am not sure I really understand what you’re asking????
WMF’s are what is downloaded for installation of Powershell, Powershell ISE(both x86 & x64), as well as the group of stock Modules and Scripts. The most important ones in my opinion are PowershellGet and PackageManagemet Modules that allows one to get established with Repositories for the purpose of expanding ones Module and Script collection.
There are 3 ways one can download the WMF I.x, one is from the Catalog which MS is getting more and more complete it seems. For the more experienced to advanced user there is probably little difference between them BUT for somebody whom has never been in the Catalog, is could seem very foreign. If one tries searching around in the Catalog and they haven’t found the list of search terms, etc, that can be very daunting.
Therefore, many people may feel more comfortable using one of the other methods to download WMF’s as well, in general, other things that MS makes available. Is the Catalog going to become more of a common repository, I do not know BUT surely they can do better then their antiquated Catalog approach.
My teaching guide is not meant to be in depth. Instead it is a starter for the beginner to novice. Woody’s article mention at the beginning is a starter for the novice/mid user to more advanced entry but even his is not meant to be in depth.
Sorry to poop all over you premises, but I believe in complete and clear answers designed to teach(albeit more verbose then a seasoned writer).
I hope this helps get you started in a much more competent CLI than CMD is. As I pointed out in the Post, PS ISE is a great way to start since it’s semi GUI. Yes, I know that, the more advanced user see it as an avenue to develop scripts BUT it is also designed to be used in a non development way as well, like I use it too.
--------------------------------------
1. Tower Totals: 2xSSD ~512GB, 2xHHD 20 TB, Memory 32GB
SSDs: 6xOS Partitions, 2xW8.1 Main & Test, 2x10.0 Test, Pro, x64
CPU i7 2600 K, SandyBridge/CougarPoint, 4 cores, 8 Threads, 3.4 GHz
Graphics Radeon RX 580, RX 580 ONLY Over Clocked
More perishable2xMonitors Asus DVI, Sony 55" UHD TV HDMI
1. NUC 5i7 2cores, 4 Thread, Memory 8GB, 3.1 GHz, M2SSD 140GB
1xOS W8.1 Pro, NAS Dependent, Same Sony above.-----------------
1 user thanked author for this post.
-
Crysta,
OK, I guess I misunderstood what was being talked about. My mistake. Sorry.
Dave
1 user thanked author for this post.
-
-
-
Viewing 54 reply threads
Plus Membership
Donations from Plus members keep this site going. You can identify the people who support AskWoody by the Plus badge on their avatars.
AskWoody Plus members not only get access to all of the contents of this site -- including Susan Bradley's frequently updated Patch Watch listing -- they also receive weekly AskWoody Plus Newsletters (formerly Windows Secrets Newsletter) and AskWoody Plus Alerts, emails when there are important breaking developments.
Get Plus!
Recent Topics
-
Microsoft Backup triggers help-desk calls and confusion
by 7 minutes ago
-
How Amazon ejected AI-written e-books from its bestseller lists
by 8 minutes ago
-
Ten stunning features in Microsoft Word
by 10 minutes ago
-
Thunderbolt
by 10 minutes ago
-
VeraCrypt updates
by 2 hours, 15 minutes ago
-
A.I. and AskWoody
by 3 hours, 28 minutes ago
-
Where is Windows Update?
by 1 hour, 52 minutes ago
-
mailwasher
by 6 hours, 14 minutes ago
-
Windows Photos
by 7 hours, 3 minutes ago
-
OT QuickBooks payroll module not letting you efile 941
by 8 hours, 3 minutes ago
-
MSA logins have been retired from DPC May 1st
by 8 hours, 1 minute ago
-
Administrator Lock
by 12 hours, 1 minute ago
-
Skype cancels loopback audio
by 15 hours, 52 minutes ago
-
Python re-installation
by 14 hours, 16 minutes ago
-
Finally updated to Thunderbird 115
by 6 hours, 46 minutes ago
-
Hard drive boot up problem in Windows AND Linux
by 1 hour, 45 minutes ago
-
WSUS fails to download monthly Cumulative Update for Windows 11 Version 22H2
by 7 hours, 16 minutes ago
-
Excel tone
by 11 hours, 58 minutes ago
-
Wait for the bugs to be worked out
by 18 hours, 25 minutes ago
-
What Windows Really Needs [Pure OPINION]
by 10 hours, 39 minutes ago
-
“Winmail.dat” attachments when email is sent from Outlook to Thunderbird
by 1 day, 2 hours ago
-
win 11 22H2 Memory itegrity error
by 1 day, 10 hours ago
-
McLaren Health Care 6TB data breach
by 1 day ago
-
Long Live the Red Envelope Era | Farewell to DVDs | Netflix
by 1 day, 13 hours ago
-
Faststone Image Viewer updates
by 2 days, 15 hours ago
-
Malicious ad served inside Bing’s AI chatbot
by 2 days, 15 hours ago
-
win10 pro 22H2 current minus 1 mo,to, win11. suggestions…
by 2 days, 3 hours ago
-
Microsoft entered negotiations to sell Bing to Apple in 2020
by 3 days ago
-
X CEO shows her iPhone’s Home Screen – and X isn’t there
by 3 days, 1 hour ago
-
Keeping an older Mac secure
by 3 days, 2 hours ago
