News, tips, advice, support for Windows, Office, PCs & more. Tech help. No bull. We're community supported by donations from our Plus Members, and proud of it
Home icon Home icon Home icon Email icon RSS icon
  • Jonathan Handler

    Forum Replies Created

    Viewing 15 posts - 1 through 15 (of 47 total)
    • Author
      Posts
    • in reply to: MS-DEFCON 2: Get Windows automatic update locked down #1947617

      Jonathan Handler
      AskWoody Lounger

      Woody,

      I am running Windows 1809 with the August Quality Update.  This morning, I looked at Windows Update and saw that I was being teased with the names of one or two updates moving quickly across part of the screen.  I could not read them fast enough.

      Around lunchtime today, having read what you learned from Ed Bott and associated messages, I took the risk and clicked on “Updates are available.”  When I did so, the screen changed and I now could read the titles of the two updates which are available, which are the September Quality Update and a .NET update.  I cancelled out of Windows Update after I saw this.

      When I came back to Windows Update later today, the top of the Windows Update screen said “Restart required,”  which made me feel as though I had made a mistake by clicking on “Updates are available.”  I did not want to “Restart now” so I clicked on “Schedule the restart.”  Below, “Schedule the restart” on the new page it says “Schedule the time” with an off-on toggle set to off. I relaxed quickly.”  I am hoping that this will now stay this way until 20 days – which was my Quality Update Delay period that I had selected and has now disappeared.

      This is not exactly what I expected to see.  Maybe it will change again with Windows 1903.

      Hope this helps.

    • in reply to: Another report of an unwelcome 1803 upgrade #212613

      Jonathan Handler
      AskWoody Lounger

      Woody,  As you know, I am running Windows 10 Pro Version 1709 with a metered connection and quality updates set back 30 days and feature updates set back 269 days.  According to Windows Update -> View Installed Update History, Windows 10 Pro tried to install the 2018-07 quality update (KB4338825) 4 times on August 16, failing the last time with error code 0x80240034.

      Windows Update  Update Status is showing KB4338825 is awaiting install and so are three other updates, which all failed with error code 0x8024a206 : 1)  Windows MSRT July 2018, 2) 2018-07 Security Update for Adobe Flash Player and 3) 2018-06 Update (KB4023057).  These four updates have all been waiting for several days with no sign of any change.

      In other words, Windows Update for Windows 10 Pro Version 1709 is working correctly on my system.

      Just thought that I should report this because some messages in this thread do not mention whether or not they are using Windows 10 Home.  I have to believe that all reports of forced upgrades are for Windows 10 Home Version 1709 that is being upgraded to Windows 10 Home Version 1803.

      Hope this helps.

      Jonathan Handler

       

    • in reply to: Patch Lady – my response #209152

      Jonathan Handler
      AskWoody Lounger

      Susan,

      I also thank you for sending the survey results to Microsoft and all of your further contributions on this subject.  I participated in the IT professional version of your survey.

      I am a solo entrepreneur focused on HIPAA and NIST Cyber Security Framework security risk assessment/analysis.  My hardware is a Lenovo ThinkPad Yoga S1 (first generation Yoga) and the software center of my universe is Windows 10 Pro running Office 365 Business Premium.  Both Windows and Office 365 are being updated on the Semi Annual Channel.  I have been using this process for about twelve months and it has worked well for me.  I really like this combination for small businesses like mine.  I expect to add a desktop/tower device running Windows 10 Enterprise and Office 365 Enterprise E3 and also using the Semi Annual Channel to update both of them.  This will be so that I can understand what larger prospects and customers are doing.

      I believe that Microsoft will have to improve their update processes in order to grow their business.  In my mind, Microsoft will have to improve their update processes in the current iteration to be credible in selling Microsoft 365 for Business  and Microsoft 365 Enterprise versions (each of which consist of an integrated combination of Windows, Intune and Office 365) going forward.

      Very truly yours,

      Jonathan Handler

      1 user thanked author for this post.

    • Jonathan Handler
      AskWoody Lounger

      I am not surprised by the durability of Windows 7.  The Windows XP to Windows 7 transition demonstrated eloquently how many systems were running that could not or would not be upgraded to Windows 7 even up to EOL, XP in that case.

    • in reply to: Patch lady – IT pro survey on patches #199567

      Jonathan Handler
      AskWoody Lounger

      Susan,

      Thank you for doing this survey.  I am a solo entrepreneur selling HIPAA compliance solutions into the healthcare industry.  I recently was in an optometrist’s office.  There are two computers, one for administration which is Windows 10 Home Version 1803.  The other one is Windows 10 Pro which had not had the Advanced Settings for Quality Updates and Feature Updates set on it before I saw it.  It seemed to be ready to run the feature update to 1803 the next time that it started up after shutdown.  I set quality updates at 30 days and feature updates at 269 days, restarted it and it no longer showed the feature update or anything else ready to be installed.

      Because of this optometrist and other small healthcare businesses with e-PHI like him, I plan to vote as a home user even though I no longer have a Home license.


    • Jonathan Handler
      AskWoody Lounger

      BobbyB,

      Thank you for your reply.  I decided to settle on 269 days after I had started at 120 (thanks to PKCano, IIRC), 180 (while 1703 was being debugged by the Windows 10 Home crowd) and then 269 (after the first time that a 365 day in settings results in some users being upgraded prematurely).

    • in reply to: MS-DEFCON 3: Time to get the August 2019 patches installed #1945161

      Jonathan Handler
      AskWoody Lounger

      This is a test of my AskWoody account

      Jonathan Handler


    • Jonathan Handler
      AskWoody Lounger

      Woody,

      Wow that update information from the Windows IT Pro Center is excellent.  I had never seen that before and was unaware of the Windows IT Pro Center.  I did not read your article or this thread until today, Christmas, because last month at this time I was otherwise fully occupied.  Reading this article from Windows IT Pro Center somewhat implies to me that this has been MS’s intent with the Advanced Options since they were introduced.

      Because I only have one system currently and it is therefore a critical system, I am keeping quality updates with a 30 day delay and feature updates with a 269 day delay.

      I believe that it was PKCano who originally encouraged me a year or two ago to set the quality update delay at 30 days and the feature update delay at 120 days .

      I read Ask Woody actively enough (and will subscribe to it after you make the switchover, unless you suggest that it is easier for me to carry forward with beginning to pay before the conversion) and otherwise manage my system actively enough that I currently find it easier to click “Update Now” when I am comfortable with a quality update and to decrease the feature update delay manually from where it is to a low enough value that “x-ing out” of the Advanced Options window will trigger the feature (version) update.

      Merry Christmas and Happy Holidays,

    • in reply to: Hey PK – Windows Update KB4134661 #198582

      Jonathan Handler
      AskWoody Lounger

      PK,

      Not sure what happened, but KB4134661 slipped past me and is installed.

      The only thing that I may have noticed last night after I had seen it was installed is that I could not figure out where about 50% of my CPU was busy.  I could only account for 40+% in the Apps section under task list and no more than 5-10% in the 100+ background processes.  I cannot believe that there is crypto-jacking software running on this first generation Lenovo ThinkPad Yoga with an i5 U4200, 8GB RAM, 128GB SSD and integrated graphics.


    • Jonathan Handler
      AskWoody Lounger

      Note: I need to apologize for originally posting this without logging in through a different browser and showing up as Anonymous.    Signed Jonathan Handler.

      To: Oscar CP

      Thank you for posting your message.  I felt that Google moved away from this a long time ago.

      I do not trust any organization in information technology.  That said, the companies I “trust” the most, on a relative basis, are IBM and Microsoft.  The reason for that is that both of them have been convicted of abusing their monopolies (maybe its slightly different than that but this wording is what I use in my own mind) by the government.  They are therefore, at least, more easily convicted of other economic crimes in the future.

      I am still waiting for Google, Facebook and Apple to be penalized at least as much before I “trust” them as much as I “trust” IBM and Microsoft.

      1 user thanked author for this post.

    • Jonathan Handler
      AskWoody Lounger

      IMO, I have a perspective on mobile vs desktop hardware and therefore software different than most other people.  The first time that I tried using an iPhone and an iPad, I found them difficult to use with the touchscreen.  I sort of knew part of the answer but not the whole answer.  After two or three years, I realized that my physiology is 0 for 3 on the factors that make using a touch screen productive:

      1. Dealing with a touchscreen requires fine motor skills.  I was born without good fine motor skills and that has never improved.  In fourth grade, one of my grade cards had written on it “Jonathan needs to improve his fine motor skills.”  I had been building model planes and ships since I was in first or second grade and had glue everywhere on the models and the decals never ended in the correct places.

      2. The touchscreen also prefers skinny fingertips.  OTOH, my fingertips are well rounded. I have watched enough people to know that some people with stubby fingers must have very good fine motor skills because they have far fewer problems than I have.

      3.Touchscreens require the correct skin capacitance, which is dependent on the moisture in ones fingertips.  Shortly after learning this last lesson, I stopped into a mobile phone store, tried an iPhone and still had problems.  Then I tried a Windows Lumia 600 series and a Windows Lumia 500 series phone.  My fingers worked perfectly with them.  My fingertips work just fine with the Lenovo ThinkPad Yoga S1 (first generation) Windows 2-in-1 on which I am writing this message.  I conclude, therefore, that Apple’s specs are tighter (probably cheaper) than Microsoft’s specs.  Finally, my smartphone is still a BlackBerry Q10 and from the above you can understand why. I would have preferred to buy a Lumia 900 series to replace the Q10 but it was too expensive and I am still waiting.

      For me a keyboard and mouse are required in order to be at least minimally productive.

      While my situation is extreme, keyboard and mouse are, for most people, more productive than touchscreens, though I see some people who are productive with a smartphone.  I also see some people who struggle and others who still have flip-phones with physical keyboards.  This is all understandable.

      I loved Windows 8.1.  I was so frustrated with the Windows 10 upgrade cycle after 2 years that I upgraded to Windows 10 Home to Windows 10 Pro.  I recently asked someone at Microsoft about the cut-over point between Office 365 for Business and Office 365 for Enterprises (E3 or E5).  He reminded me that, from a licensing point of view, 300 licenses is the cut-over point.  However, in practice Microsoft has data that seems to average out the cut-over occurs below 100 licenses, at 77 licenses IIRC.

      I have had several conversations with Microsoft about small businesses because I am a specialized VAR/MSP that mostly is selling to small businesses.  A few months ago, the last time that I asked the question, I was told that Microsoft wants to grow its penetration in small businesses.  From my experience, that makes sense to me.  Gartner really is for enterprises and a lot of people in the SMB world are former enterprise employees and now SMB owners or employees.  From Gartner’s perspective, I understand trashing Pro.  From an SMB experience, I see the value of Pro and believe that it will always be there.  There are many product categories where there are small, medium and large subcategories.

      Jonathan

       

      2 users thanked author for this post.

    • Jonathan Handler
      AskWoody Lounger

      PK, thanks again.  I saw your message.  I tried to download the Quality Update to get to 16299.309 but it failed at first when I set Quality Update Delay = 0 days, left Metered Connection = On and restarted.

      When I switched my Metered Connection = On to Metered Connection = Off, the Download checkbox appeared and I started to download the Quality Update to 16299.309, the March 2018 MSRT and the March 2018 Adobe Flash Security Update.

      Once everything was downloaded, MSRT and the Adobe Flash Security Update were installed, and the Quality Update was waiting for a restart.

      Made a restart and now have 16299.309 also installed.

      Thank you again for your guidance.

      I have re-learned over this weekend that Metered Connection = On can really delay all Feature Updates and Quality Updates.

      Also, second, I have learned over this weekend that the Feature Update delay on Windows 10 Pro can be used as a switch that allows me to download only a Feature Update when delay = 0 days.

      Also, third, I have learned over this weekend is that the Quality Update delay on Windows 10 Pro can be used as a switch that allows me to download only a Quality Update when delay = 0 days.

      By following your example,  I used these controls in the Update & Security section of Settings to upgrade Windows 10 Pro from Version 1703 to Version 1709 and then used these controls to follow Woody’s advice at DEFCON3 to get updated through March 2018.

      All of this was done without GPEdit on my Windows 10 Pro machine.  I take this as proof that Microsoft has made Windows 10 Pro a product version that “careful but less sophisticated users” of Windows 10 can manage themselves following Woody’s DEFCON system and the advice of you and other MVPs.

      Very truly yours,

      Jonathan

       

       


    • Jonathan Handler
      AskWoody Lounger

      PK, the world may have changed a little since you upgraded that VM to Version 1709.

      I started working on my updates after 7pm CT at the local public library.

      I usually do my updates in my local public library and I usually have it set as a Metered Connection.

      I released turned off the Metered Connection setting on the library’s network and ran the update on Version 1703 from 15063.877 to 15063.909.  It was successful.

      I did another check for updates and was offered the update from 15063.909 to 15063.936.  I ran it also and now am at 15063.936, which is dated February 22.

      But now, I can’t get it to run another update even though the network still has Metered Connection off.  If it were to upgrade me again to the next version of 1703, that would also be 15063.936 but that is dated March 8. Oh-Oh.

      I am stopping for now, putting Metered Connection back on and waiting until tomorrow morning.

      Is there a support.microsoft.com webpage that I can use to get to Version 1709 without creating an ISO image or loading up a USB drive?

      Very truly yours,

      Jonathan Handler

       

       


    • Jonathan Handler
      AskWoody Lounger

      PK, I thought that you meant Version 1709, and I needed to make certain of it.

      I remember someone referring to GPEdit some time ago and I thought “oh good, an opportunity to understand Group Policy.”

      And, believe it or not, I believe that I only used RegEdit once in the past ten years that I have had my own Windows Computer to use.  I started with Windows 7.

      I already have some experience with WUSHOWHIDE and it is installed on my system.

      I am optimistic that this will really take care of my needs for the next few months.

      Very truly yours,

      Jonathan

       


    • Jonathan Handler
      AskWoody Lounger

      PK, I understand some of what you just wrote.

      Are you running some separate system management software to set Group Policy or do I have access to it directly through Windows 10 Pro?

      When Microsoft downloads a second Cumulative Update while I am waiting for DEFCON3 in a given monthly cycle, I can tell it from the new KB article number on it and the later date on it.  I am able to do this because I only restart my system one time per month.  Otherwise, I put it to Sleep every time I move it.  I also check my Update History every time that I see that the KB article number and the date on it change.

      Using Sleep mode seems to be giving me the same results without the same detail that you get from your process.  I should probably understand your process, starting with which additional tools you are using, so that I can improve my ability to manage my system today and any additional systems in the future.

      Finally, you wrote: “In s709n the CBB is gone – equivalent is Semi Annual Channel (SAC).”  I am aware of the Semi Annual Channel (SAC) as the new terminology.  “s709n” looks like a typo to me.

      Very truly yours,

      Jonathan

      —- Copied from PK Cano message —-

      I use Feature updates = 365 and quality updates = 0. In Group Policy I have Windows Update = Enabled = 2 (notify download/install). This means the quality updates show up in the queue so I can see what they are (know what I have to hide) but they don’t download until I hit the “download” button. I think if you use the delay quality updates = 30, you might not see them in the queue for 30 days.

      I also set Delivery Optimization\Download Mode = Enabled = 99 (no peering)

      In s709n the CBB is gone – equivalent is Semi Annual Channel (SAC)

    Viewing 15 posts - 1 through 15 (of 47 total)