Where we stand with the May 2019 Windows patches

Topic

New Reply

Whotta mess. Again. I was tempted to come up with a list of the days that we had new patches and patches of patches, and finally gave up. You’d be muc
[See the full post at: Where we stand with the May 2019 Windows patches]

4 users thanked author for this post.

Elly, abbodi86, Lori, geekdom

Reply | Quote

Replies

On the bright side Woody… you’ve got plenty of installation results from an abnormally large amount of “beta testers” already posted here for the May patches. 🙂

4 users thanked author for this post.

Mark, geekdom, jburk07, woody

Reply | Quote

All that said, mainly ver 1903 and 1809:

Where do we stand regarding ver 1803?

KB4499167  CU (5/14)

KB4497398 Service Stack (automatically installed with the CU?)

KB4499183 Update Patch (5/21) with the Download and install change

KB4495616 New standalone .NET 4.8

Windows 10 Pro x64 v22H2 and Windows 7 Pro SP1 x64 (RIP)

1 user thanked author for this post.

Fred

Reply | Quote

Tex265 wrote:

KB4499183 Update Patch (5/21) with the Download and install change

This is a non-security Patch and not recommended unless you choose to be a seeker.

2 users thanked author for this post.

Mele20, woody

Reply | Quote

More info please:

KB4497398 Service Stack – will Windows 10 Updater automatically installed this with the May CU, or does this need to be downloaded from the catalog and separately installed first, similar to Windows 7?

KB4499183 Update Patch (5/21) with the Download and install change – if not sought out, will it be included in the June C/Update?

KB4495616 New standalone .NET 4.8 updates – As I understand the .NET 4.8s are now separate from the Windows 10 Monthly C/Updates. How will they be presented to users? Will they appear along with, but separately, with monthly Quality Updates? Or do they need to be manually found in the catalog and installed?

Windows 10 Pro x64 v22H2 and Windows 7 Pro SP1 x64 (RIP)

Reply | Quote

In Win10 the SSUs are downloaded with the CUs automatically.

The Patch Tuesday CUs contain the Preview patches which are released after the Patch Tuesday CUs from the previous month. It has been this way and nothing has changed since last month and the month before that and the month before that.

The .Net CUs will be released as necessary for your PC through Windows Update automatically.

In Win10, nothing has to be “manually found” unless YOU choose to be a seeker.

1 user thanked author for this post.

Tex265

Reply | Quote

PK Sorry, I was confused regarding KB 4499183

KB4499167 May C/U (Security) was succeeded by
KB4505064 May C/U (Non-Security) was succeeded by
KB4499183 May C/U (Non-Security) which when succeeded by
KBxxxxxxx June C/U (Security) will include the “Download and install” enhancement.

Windows 10 Pro x64 v22H2 and Windows 7 Pro SP1 x64 (RIP)

Reply | Quote

PKCano wrote:
The .Net CUs will be released as necessary for your PC through Windows Update automatically.

Then why have I not yet received this .Net 4.8 CU KB4495616 released 5/14 for ver 1803?
I received the May CU KB4499167 on time and hide it via wushowhide.
My settings are Semi-Annual, Feature 365 day delay, Quality updates 3 day delay, Group Policy 2 – ask to download.

Windows 10 Pro x64 v22H2 and Windows 7 Pro SP1 x64 (RIP)

Reply | Quote

Try unhiding the May CU. That may knock it loose.

Reply | Quote

woody wrote:

Try unhiding the May CU. That may knock it loose

Unhid, downloaded and installed the May CU KB4499167 but still no .NET 4.8 KB4495616.

So I ran into a website that says this is an “Update” only needed if have .NET 4.8. installed. So I checked via my registry and it appears I may be up to only .NET 4.7.2

Question now is how do you obtain .NET 4.8? If automatically, why has it not come down the Windows Updater? Is it optional and my deferral settings are preventing download?

Do I need it?   Manual install from the MS Catalog?

My settings are Semi-Annual, Feature 365 day delay, Quality updates 3 day delay, Group Policy 2 – ask to download.

Windows 10 Pro x64 v22H2 and Windows 7 Pro SP1 x64 (RIP)

Reply | Quote

You need what Windows Update offers you (again).

Reply | Quote

If you haven’t already, patch for worm BlueKeep.

Maybe the worm is a problem, maybe not, but nobody is saying exactly how the worm infects.

On permanent hiatus {with backup and coffee}
offline▸ Win10Pro 2004.19041.572 x64 i3-3220 RAM8GB HDD Firefox83.0b3 WindowsDefender
offline▸ Acer TravelMate P215-52 RAM8GB Win11Pro 22H2.22621.1265 x64 i5-10210U SSD Firefox106.0 MicrosoftDefender
online▸ Win11Pro 22H2.22621.1992 x64 i5-9400 RAM16GB HDD Firefox116.0b3 MicrosoftDefender

Reply | Quote

Has 1809 MS-DEFCON been raised to 3 ?

Reply | Quote

I believe the DEFCON-3 was for XP and Win7. Today’s ComputerWorld article talks about Win10 1809 patches, but I didn’t find the “go ahead and patch” statement.

3 users thanked author for this post.

walker, Lars220, woody

Reply | Quote

Yep. I think XP, Vista and Win7 customers (and their related Servers) should patch now, but there’s still no pressing reason to update anything else.

Give it a few more days.

2 users thanked author for this post.

columbia2011, Lars220

Reply | Quote

Reposting for Window 7 users. SueW also has an excellent install post at #1664924.

Windows 7 SP1 64bit, with Broadcom network card. Group B.

Installed May’s updates; IE KB4498206, SO KB4499175 and .NET KB4495612 (SO 3.5.1) today.

From the catalog; Installed IE KB4498206 1st, SO KB4499175 2nd, SO .NET KB4495612 3rd, and MSRT (from WU) last.

Did NOT install the IE KB4505050 since they are going to fix it next month anyway.

Installed one at a time. Rebooted in between each update letting it sit 1 or 2 minutes after update was installed (one took 5 minutes to have the hard drive settle down).

No network issues. No oddities – other than slow 1st boot after SO update and 15 minutes @ 100% CPU after the .NET install.

Rebooted 3 times and let it sit for several minutes. (15 min after .NET for Disk activity and CPU to settle.)

I would recommend people on the last reboot to go to the desktop and let it sit 45 to 60 minutes to Process Idle Tasks, let the trusted installer (as per PKCano) do its thing and let the NGEN recompile the .NET image.

If you or others here are interested, one can run the MSCORSVW .net image compiler (NGEN) manually. (I do).
http://blogs.msdn.com/b/dotnet/archive/2013/08/06/wondering-why-mscorsvw-exe-has-high-cpu-usage-you-can-speed-it-up.aspx

You can force the Idle Tasks if you want by the administrative command prompt: rundll32 advapi32.dll,ProcessIdleTasks

You can enter that then walk away for 15 to 20 minutes. If the drive light is still on, it is still running, walk away again. Do not allow the computer to go to sleep. Reset the Power Options to 1 hour sleep if needed. Laptops make sure you are on AC power not battery!

Thanks to all here.

Edit: Moderators note: To paraphrase Lounge Rules: Posting anything that has already been posted, will be removed. Please provide a link and snippet of previous post, not a re-post. Thank you.

1 user thanked author for this post.

SueW

Reply | Quote

If it’s not security related like KB4505050( Gov Dot blighty de-borking patch to patch the patch what borked it for all ye gov’s UK governmental affairs To-Dos ) then yes by all means just wait for the next month’s cumulative IE update and that’s less work all around, unless you are needing to contact the Ministry Of Silly Walks and other such bodies.

Come to think of it, penguins have rather delightful walks as well and less need to be rebooted after updates!

 

Reply | Quote

So when is it safe to install 1903?

Reply | Quote

Wait to install 1903 until it is offered to your PC through Windows Update.

Microsoft is throttling the rollout based on the compatibility determined by their AI. It is being installed on those computers with the least likelihood of problems first. If you use your computer for your daily driver, you don’t need to be a Guinea pig.

3 users thanked author for this post.

cmptrgy, Fred, Lars220

Reply | Quote

PKCano wrote:

“go ahead and patch”

I didn’t see the “go ahead and patch” either, but Patch Lady on Master Patch List gave the OK.

Reply | Quote

Susan’s Master Patch List is based on a different business-oriented environment than Woody’s DEFCON consumer environment.

Susan’s list is based on a business environment where there are test machines available and IT departments are staffed to take care of problems. Often businesses have time constraints to get the patches applied to comply with their standards.

Consumers usually have few computers and they are necessary for daily functions. And they often do not have the technical knowledge to cope with major problems. So Woody’s DEFCON approach is more wait-and-see to give  them less exposure to BSODs, loss of networking, etc.

They are two different approaches to patching.

6 users thanked author for this post.

Elly, walker, bradam, doriel, Lars220, woody

Reply | Quote

Well put PKCano. An excellent description of the two green lights given here. I prefer Woody’s advice every time.

Reply | Quote

I get business twitchy when I get to the end of the month and DON’T have that month’s updates installed.  But like PK said, I have spare machines.

Susan Bradley Patch Lady/Prudent patcher

Reply | Quote

Susan most certainly, emphatically, did NOT give the go-ahead on Win10 1903.

We’re months away from moving our machines to the new version. Lots of cannon fodder yet to be dissected.

1 user thanked author for this post.

Kirsty

Reply | Quote

Testing go ahead for 1903, not prime time go ahead for 1903.  I get 1903 because I am testing it for the office and kicking the tires (and writing about it)  But it’s too soon for widespread go-ahead.  Trend Micro doesn’t support it yet as one example of a vendor that isn’t ready.

I like it.  I’m encouraged by it.  Microsoft better not mess it up with oopsies.

Susan Bradley Patch Lady/Prudent patcher

3 users thanked author for this post.

woody, Kirsty, NetDef

Reply | Quote

My 1803, 1809 and Server 2019 boxes with deferrals set to 14 days on quality updates have all updated with no issues. I continue to have 100% success with 0 issues with that policy set. YMMV, no warranty implied, offer good while supplies last.

Reply | Quote

Yeah I kinda figured-I’m waiting until it’s good to go for installing 1903, but I want to let you know-I will install it on my day off or the evening before bed before the day of my day off….Ya get what I mean. Also I would have to usb some of my stuff beforehand too.

Reply | Quote

[Alex5723]

So, I changed deferral days of quality updates on my 1809 to 14 (from 21) and got notification about new updates.
KB4499405 – .net 3.5, 4.7.2, 4.8
KB890830 – WMSR
KB4497932 – Adobe Flash Player

No KB4494441 security/quality update or any other update yet I LOST the deferral options in ‘Choose When Update are Installed’.

GPEdit update setting has change as well. No option 2 – Notify for download and notify for install
only deferral by days.

Version is 17763.437.

Edit: So I change deferral days for quality updates in GPedit to 21 and got BACK SAC in Windows Update advanced options. Deferral days are set by GPEdit and can’t be changed.

My HUGE question: I did Microsoft mess my system settings with no OS update !!

Edit2 : Microsoft has removed Wuau.adm from Administrative Templates – Windows\Inf folder.

https://support.microsoft.com/en-us/help/328010/how-to-configure-automatic-updates-by-using-group-policy-or-registry-s

• This reply was modified 5 years, 11 months ago by Alex5723.
• This reply was modified 5 years, 11 months ago by Alex5723.

Reply | Quote

Semi Annual channel is now irrelevant in 1903.  There is no longer a SAC or SAC-T.  So if you only see feature updates can be deferred for up to 365 – that’s the correct options/GUI you are supposed to have.

 

Susan Bradley Patch Lady/Prudent patcher

Reply | Quote

Granted I live in the USA, so I’m not impacted by the UK stuff, but I haven’t seen issues with the main security updates issued on Second Tuesday.    I agree with Zerodash, push off the updates AT LEAST a week and you avoid all the pain and dead bodies.

Susan Bradley Patch Lady/Prudent patcher

Reply | Quote

Alex5723 wrote:

Microsoft has removed Wuau.adm from Administrative Templates – Windows\Inf folder.

Can I download and install the missing Administrative Templates (.admx) for Windows 10 October 2018 Update (1809) :

https://www.microsoft.com/en-us/download/details.aspx?id=57576

Reply | Quote

[Alex5723]

Susan Bradley wrote:

I haven’t seen issues with the main security updates issued on Second Tuesday.

I haven’t got any security updates issued on Second Tuesday.
The only ‘security’ I see in the catalog (I an non UK) on May 14, is servicing stack (KB4499728).

• This reply was modified 5 years, 11 months ago by Alex5723.

Reply | Quote

The CUs released on Patch Tuesday are Security updates.
The CUs released later in the month are non-Security updates.

2 users thanked author for this post.

cmptrgy, walker

Reply | Quote

PKCano wrote:

The CUs released on Patch Tuesday are Security updates.

As I wrote (#1761010), I haven’t got any security updates for May 2019 for 1809 , yet, Microsoft has damaged my system Update settings.

Reply | Quote

Hello Alex, since you are saying that updates are NOT forthcoming, you might want to investigate running Microsoft’s Disk Cleanup and a Microsoft Windows Update tool.

In Microsoft’s “Disk Cleanup”, press the “Clean up System Files” button, and see about removing the “old MS updates and Previous Windows version OS”, reboot afterwards. Then run the Windows Update Troubleshooter.
https://support.microsoft.com/en-us/help/4027322/windows-update-troubleshooter

Also see the below video. The man goes into using Disk Cleanup and clearing system update files, then uses a MS Windows Update Repair tool and mentions power management settings to allow large updates to succeed. He has success with these tools on his PC which was Windows 10 failing to go to build 1709.

Windows Update Troubleshooter BuildOrBuy Published on Jan 28, 2018
https://www.youtube.com/watch?v=XmH5mDpXj-U

Hope this helps. Please let us know.

1 user thanked author for this post.

woody

Reply | Quote

Is Woody’s site now putting the youtube videos in the forum?? I only wanted the web address to be shown for users to click on and go to, not have the actual video taking up space in the forum. If this is new then that concept may cause slowness and troubles in the future.

Reply | Quote

I haven’t seen any slowness with linked YouTube videos.

Unless you click on the video, WordPress only has to hit the YouTube site once.

Reply | Quote

[PKCano]

anonymous wrote:

Hello Alex, since you are saying that updates are NOT forthcoming

Thanks, but I didn’t say that (#1761010).
My big problem is that Microsoft messed my Pro Windows Update settings, both in GPEdit and in Windows Update advanced options (please read my post) although there were no system updates apart from .net, Flash player, Windows Malicious Removal Tool. None should have affected Windows Update settings.
The security update missing for May 14 are Servicing Stack KB4499728 and KB4494441.

• This reply was modified 5 years, 11 months ago by PKCano.
• This reply was modified 5 years, 11 months ago by Alex5723.

Reply | Quote

One of Susan’s Master Patch List May links for Windows 10 Version 1709 is incorrectly pointing to the Windows 10 Version 1803 one instead:

• The 05/14/2019 4499179 (Version 1709) update link is pointing to the 4499167 (Version 1803) update

UPDATED [as of June 4, ~03:54 PM UTC-6]: Link fixed (thank you Susan! 🙂

Reply | Quote

PKCano wrote:

In Win10 the SSUs are downloaded with the CUs automatically.

The Patch Tuesday CUs contain the Preview patches which are released after the Patch Tuesday CUs from the previous month. It has been this way and nothing has changed since last month and the month before that and the month before that.

The .Net CUs will be released as necessary for your PC through Windows Update automatically.

In Win10, nothing has to be “manually found” unless YOU choose to be a seeker.

I dont agree with that. EVERYTHING has to be “found” if you are smart and decline to do it Woody’s way. I have great respect for Woody and this site but I don’t allow anything on 1803 to be installed via Windows Updates in Settings (except Windows Defender updates that I obtain manually each morning). I have Windows Updates disabled using Group Policy and I obtain all updates (including the servicing stack when there is a new one) and Flash Player for IE 11 via the Microsoft catalog. As for the .NETs I don’t generally update them as I would have to do that via the catalog as even if I wanted to use Windows Updates Microsoft has frozen the Windows Updates Settings page just as it did in 1709. That’s how they try to punish you for having some control over your own computer. I wouldn’t wish Windows 10 on my worst enemy.

Reply | Quote

Those are your choices. You chose to do it that way.

But the fact is, that fact is that nothing has to be manually found. It is YOU that have altered that fact, not Windows 10 or Windows Update.

1 user thanked author for this post.

geekdom

Reply | Quote

Was trying to follow your advice and do an incremental update to Win10 1809 rather than leap- frogging from 1803 to 1903.  Seemed like it was working, got most of the monthly updates, but stalled on what I think was the 1809 feature update at 100% complete. Shut down, updates uninstalled and then went to safe mode, restarted and decided to turn my update settings off again. I’m afraid if I leave it on, it’ll go to 1903, which is what I was trying to avoid. 1803 is fine but I’d still like to try and go to 1809 before 1903. Can I do that on Windows Update page. Can I trust them to install 1809 at this late stage?

Reply | Quote

Hello Alex, sorry your statement, “I haven’t got any security updates issued on Second Tuesday. The only ‘security’ I see in the catalog (I an non UK) on May 14, is servicing stack (KB4499728).” made me think you were not getting any main updates.

You also said, “The security update missing for May 14 are Servicing Stack KB4499728 and KB4494441.”

The security update “Servicing Stack KB4499728” will not be shown in update history, you need to look in the Uninstall-an-Update section to see if it is there.

As I understand it the SSU has to be installed when no other updates are available.

Also the KB4494441 requires the KB4499728 to be installed first.

Even though you have updates off, “an update to the Windows Update program” can still be installed, behind your back.

That could change setting in WU but you seem to be saying it, KB4499728, is not there.

Reply | Quote

In Win10, if you install through Windows Update, the Servicing Stack is bundled with the CU (doesn’t show separately in the list of pending updates) and WU manages the correct sequence of installation.

Reply | Quote

Thank you PKC! I appear to be quoting Windows 7 procedure for the SSU.

Reply | Quote

[Alex5723]

anonymous wrote:

You also said, “The security update missing for May 14 are Servicing Stack KB4499728 and KB4494441.”

I downloaded and installed KB4499728 manually. Ran Belarc Advisor (Windows Update Mini Tool, Show Or Hide Updates, didn’t show either of the updates due to the deferral settings) and got KB4494441 as missing.
Installed KB4494441 manually.

“Even though you have updates off, “an update to the Windows Update program” can still be installed, behind your back.”

That is unacceptable.

Will installing the deleted Administrative Templates (.admx) for Windows 10 October 2018 Update (1809) give me back control on Windows Update settings in GPEdit ?

https://www.microsoft.com/en-us/download/details.aspx?id=57576

• This reply was modified 5 years, 11 months ago by Alex5723.

Reply | Quote

You sure you can’t go into group policy now and set deferrals?  Even without this so called missing template?  As local group policy in Pro should be standard for all.  As I recall if you’ve set them in the GUI or used gpedit you get them in the gui.  If you’ve not gone uber advanced you don’t see the options.  (I think but I need to revisit this)

Susan Bradley Patch Lady/Prudent patcher

Reply | Quote

Tex265 wrote:

All that said, mainly ver 1903 and 1809:

Where do we stand regarding ver 1803?

KB4499167  CU (5/14)

KB4497398 Service Stack (automatically installed with the CU?)

KB4499183 Update Patch (5/21) with the Download and install change

KB4495616 New standalone .NET 4.8

June 11, 2019

Microsoft pushes “Download and install now” updates to Windows 10 1803 and Windows 10 1809 as part of Patch Tuesday. These updates – as optional updates available for manual download on May 21, they were marked KB4499183 (1803) and KB4497934 (1809) – will be automatically downloaded and installed by the two previous feature upgrades to add the new option letting users decide when to migrate to the next version.

(Note: Microsoft may not shove the “Download and install now” updates to all users immediately but could stage them over a period of days or even weeks.)

WWW-link:
https://www.computerworld.com/article/3234766/windows-10-update-and-retirement-calendar-mark-these-dates.html?utm_source=Adestra&utm_medium=email&utm_content=Read%20more%3A%20Windows%2010%20update%20%28and%20retirement%29%20calendar%3A%20Mark%20these%20dates&utm_campaign=Computerworld%20First%20Look&utm_term=Editorial%20-%20First%20Look&utm_date=20190531184534

.

 

* _ ... _ *

Reply | Quote

(just edited/updated the original post)

UPDATED [as of June 4, ~03:52 PM UTC-6]: Link fixed (thank you Susan! 🙂

1 user thanked author for this post.

Fred

Reply | Quote

[Alex5723]

Susan Bradley wrote:

You sure you can’t go into group policy now and set deferrals

I don’t want to set deferrals in GPEdit. I suddenly lost and want back option ‘2 – Notify for download and notify for install’ for Windows Updates in GPEdit, and I want back setting deferral in Windows Update – Advanced Options instead of in GPEdit. I even lost SAC setting but wrenched it back from Microsoft’s claws (see screen shots in post #1761010).

I an hesitant to install (restore?) Administrative Templates (.admx) as I don’t know what it adds/changes exactly.

• This reply was modified 5 years, 11 months ago by Alex5723.

Reply | Quote

For Windows 7, doesn’t BlueKeep affect only those using Professional, Enterprise, or Ultimate? If am not mistaken, Home Premium, Home Basic, and Starter can only initiate an RDC but cannot be connected to.

Reply | Quote

Alex5723 wrote:

want back option ‘2 – Notify for download and notify for install’ for Windows Updates

A miracle. Got my settings back both in FGEdit and in Advanced Options.

Reply | Quote

@Alex5723 said

…both in FGEdit and in…

Did ya mean GPEdit instead???

Reply | Quote

anonymous wrote:

Did ya mean GPEdit instead???

Yes, GPEdit 🙂

Reply | Quote

Add me to the list of those for whom setting my WiFi to a metered connection does not stop updates. (I have Windows 10 Home.) And add my grrr to that overall topic. Just looking away from my laptop long enough somehow allows the update to go forward without the ability to delay it. Aside from not wanting to install an update yet because of known bugs, the update has started at, to say the least, inopportune times such as while giving a lecture  – closing the PPT and not being able to restart the laptop for 15 or 20 minutes.

I don’t have regular times that I can schedule when I want MS to take over my machine, even overnight. I often have (non-MS) apps open that don’t automatically restart where I left off. So even if I don’t lose data, I may forget what I was working on. And that’s further annoying on top of the reboots at those bad times.

Reply | Quote

Adding a further complaint to my own complaint, Windows today updated in spite of having metering on AND having the laptop lid closed.

1 user thanked author for this post.

Fred

Reply | Quote

Are you sure you have the metered set to stop updates? You can set it to allow regardless.
Click on “set a data limit…” under metered connection.

cheers, Paul

1 user thanked author for this post.

woody

Reply | Quote

Most disturbing….

Reply | Quote

greenbergman wrote:

Adding a further complaint to my own complaint, Windows today updated in spite of having metering on AND having the laptop lid closed.

I have had the same unpleasant experience. Nothing could stop these updates. So finally I trained myself in imaging the laptop in order to set it back as it was before, at a convenient time. And at the same time I learned Linux a bit, to use it on a older laptop, so using internet (banking, hotelreservations, checking routes etc.) is garanteed. For using some programs Windows is still needed, but as soon as this is over, the Windows will be ditched; Microsoft can not be trusted anymore, and is still doing as they like. SnifSnif …

*Askwoody.com* is a fabulous help to keep up for lots of needed knowledge things *thanks to you all!*

* _ ... _ *

1 user thanked author for this post.

Cybertooth

Reply | Quote

What happened to the May 2019 patch information?

You jumped from April 2019 (the old way) to June 2019 (the new way).

PS: I’m not sure the new way is actually an improvement.

Reply | Quote

https://www.askwoody.com/patch-list-master/  I listed the May updates in the PDF.  For Office I didn’t list them individually, I just indicate that I’ve installed them.  I’m trying to give a better indication of what I patch to and why.

Susan Bradley Patch Lady/Prudent patcher

Reply | Quote

[PKCano]

The May patches are listed below the June patches in the PDFs.
Look for the release date 5/14.

UPDATE: Now added as a separate link.
Thank you, Susan.

• This reply was modified 5 years, 10 months ago by PKCano.

Reply | Quote