Patching recommendations for unpatched W10 1803 "April Update" machines

Topic

New Reply

Dear community,

For every month since the Windows 10 April 2018 build was released, AskWoody’s Master Patch List has advised holding off on installing cumulative updates for this build. As of yesterday 9/23/2018, the list has been updated to say “no major issues” are being track, with W10 1803 updates now listed “Safe to Install.”

In our office, we have a handful of machines running the W10 April 2018 release but have not installed any updates on most of them after reading patch advisories like these. Are we in the clear to install the 9/11/2018 (KB4457128) update on these machines? My main concern are the MS Edge browser security updates released over the past couple of months, as we have not installed any browser patches on these machines since the April release.

Patch recommendations appreciated. Thank you.

– Jonathan

Reply | Quote

Replies

Woody is still holding on the Sept patches with a DEFCON-2. If you can wait a little longer, Woody will have instructions for patchinf when the DEFCON number is 3 or above.

But let me give you some information.
There is a Servicing Stack that should be installed before the CU – KB4456655
KB4457128 Build 17134.285) 2018-09 CU has a problem with Intune.
The problem with Intune is fixed by KB4464218 (Build 17134.286 released 9/17)
Under no circumstances install KB4458469 – it has been pulled from WU but still lurks in WSUS and the Catalog (I think).

1 user thanked author for this post.

Jon

Reply | Quote

Thank you PKCano, that is very useful information.

As far as latest patches are listed, I am seeing Dynamic Updates and Previews for October in our WSUS server catalog (2018-09). I am going to hold off on these for now.

Regarding latest CUs, I am only seeing 9/17/18 patches listed in our WSUS server catalog, not 9/20/18 ones, so I guess this is a good thing. I am also seeing Intel microcode updates, but I will hold off on those as well for now.

Reply | Quote

It appears the feature update was re-released on the 26th, but does have the same KB number.

 

https://support.microsoft.com/en-us/help/4458469/windows-10-update-kb4458469

Reply | Quote

First, make sure you have a good image backup of your systems. If you have essentially the same hardware and software configurations pick one of the systems and update it. If it works OK update the rest. Since you have an image backup you should be able to recover in short order should something bad happen.

 

 

--Joe

1 user thanked author for this post.

Jon

Reply | Quote