[Tex265AskWoody Plus]

From Norton Community Forum:

Re: Is it safe to install August 2019 Windows 7 update??
Posted: 13-Aug-2019 | 3:56PM • Edited: 13-Aug-2019 | 3:59PM • Permalink

I’m running Norton Security v. 22.18.0.213 on Win 7 SP-1 Pro x64.

Windows Update informed me that KB4474419 was available. I installed it, and my computer works fine.

This update, however, is not the problem. The problem is apparently with KB4512506 — Monthly Rollup and KB4512486 — Security-only update. Even after installing KB4474419, MS Updates didn’t offer me either or the problematic ones.

The Symantic Enterprise KB article only indicates that the problem is with Enterprise Endpoint Solutions; it doesn’t mention any of the Norton products at all.

The answers provided to this Forum Thread are not at all clear except for this: “Defer the update until Norton has an official statement AND it clearly states a patch is available BEFORE attempting to install those updates at a later time.”

This should be in big red letters at the at the head of this Forum. I’m sure lots of Norton users around the world are wondering what’s going on with the August MS updates.

I’m wondering out loud how Norton intends to distribute its official statement and clearly state that a patch is available to address this specific issue.

And

As outlined in 2019 SHA-2 Code Signing Support requirement for Windows and WSUS, Microsoft will release an update to Windows 7 SP1 on August 13th, where the Microsoft Windows Updates are now SHA-2 signed instead of SHA-1 signed.

We have identified the potential for a negative interaction between Norton and the changes explained within the Microsoft KB. Symantec and Microsoft worked together to only allow the update to be visible to versions of Norton that offer full support for Windows 7 Updates that are solely SHA-2 signed.

We will release a Norton patch in the coming days to support the installation of updates that are only SHA-2 signed.

We don’t expect much impact. We can recommend that the customers click on ‘Always Allow’ when there is an alert, thereby allowing the Microsoft applications to function seamlessly.

We will be posting about this issue on the public forums, if we see large impact.
We already have an Enterprise KB article for this issue.

Norton Forums Global Community Administrator | Symantec Corporation

EDIT to remove HTML. Please use the “Text” tab in the entry box when you copy/paste.

Windows 10 Pro x64 v1803 and Windows 7 Pro SP1 x64

1 user thanked author for this post.

geekdom

[Tex265AskWoody Plus]

Could have – but in checking I didnt get an email for that date either.

Referencing it now here on the askwoody site I see that it was indeed mentioned.

Windows 10 Pro x64 v1803 and Windows 7 Pro SP1 x64

[Tex265AskWoody Plus]

As I’ve always said the best tool for fixing issues with Windows is another functional computer.  To both search for fixes as well as steal registry keys and functional code from.

Agree this would be nice, but per the reason for the Defcon rating many are on their own with one computer at a time.  Perhaps if possible someone could post the files referenced in your article links here or somewhere for those folks?

Windows 10 Pro x64 v1803 and Windows 7 Pro SP1 x64

[Tex265AskWoody Plus]

PK, thanks for the linkage.

Being an area I never gave a second though to, it is now more confusing than ever after reading the commentary and many of the config settings possible.  Is this now into “overkill”?  Also most of these posts are from Feb 2017 – info still applicable?

All these years with IE and Norton, never had a problem and never had to make a behind the scene setting (if there even are any).  If there was ever a suspected website problem, it was Norton that would pop up and prevent anything suspect.

Reading this leaves me with the impression that it is the browser that provides most of any protection – correct?

What are the issues for “everyday normal folks” who simply download and install the current version of Firefox and use it as they advertise?

Windows 10 Pro x64 v1803 and Windows 7 Pro SP1 x64

[Tex265AskWoody Plus]

The Remote Tab contains two (2) items:

1. Remote Assistance (checkmark to Allow)
2. Remote Desktop (Select dot one of three)

Windows 10 Pro x64 v1803 and Windows 7 Pro SP1 x64

1 user thanked author for this post.

woody

[Tex265AskWoody Plus]

I’m seeing the same thing as ? above with my Norton Security on Windows Pro SP1 x64.

Windows Update is now showing me 2019-08 KB4474419 (again) and the MSRT, but not KB4512506 (the real August Security Update).

Windows 10 Pro x64 v1803 and Windows 7 Pro SP1 x64

2 users thanked author for this post.

rontpxz81, OldBiddy

[Tex265AskWoody Plus]

Tex265 wrote:

Windows Update is now showing me 2019-08 KB4474419 (again) and the MSRT, but not KB4512506 (the real August Security Update).

Matthew wrote:

The IA64 architecture is different, mainly meant for servers, and usually cannot run 32-bit applications (unlike x64 which usually can). Most of us running a desktop or laptop don’t have IA64.

If true about IA64 and I have x64 – why am I receiving KB4474419 again as a Windows Update?

Windows 10 Pro x64 v1803 and Windows 7 Pro SP1 x64

[Tex265AskWoody Plus]

Windows 7 Pro SP1 x64

Per PKCano comment above, what does IA64 based mean?

Back on April 2 I installed the March Security Update KB4489878, the SHA-2 KB4474419, and separately first installed the Service Stack KB4490628.

Windows Update is now showing me 2019-08 KB4474419 (again) and the MSRT, but not KB4512506 (the real August Security Update).

Do I have to install KB4474419 again before Windows Update will give me KB4512506?

If KB4474419 was previously updated in May then June, why was this not provided by Windows Update back then? And, should’nt we be installing now 2 months later?

Windows 10 Pro x64 v1803 and Windows 7 Pro SP1 x64

[Tex265AskWoody Plus]

RetiredGeek,

Per ongoing reporting from PKCano and questions regarding ver 1903″s, Settings>Windows Update>Advance options, Registry Settings, and Group Policy settings can you please advise/describe what you are seeing in these areas with your ver 1903 installation?

Does Advance options area still show/allow the previous 1803/1809 Feature delay days and Quality updates delay days dropdown selections?

Do the Group Policies still work?

When you say “in-place update” did you use a CD/USB Windows Media or the Windows Updater?

Windows 10 Pro x64 v1803 and Windows 7 Pro SP1 x64

[Tex265AskWoody Plus]

MidwestMark wrote:

Pro on all 3 machines. Only 1 maintained the deferment options, so they have something odd going on there. I just use group policy, which is always there. Mine is set it and forget it with 210 days feature update (to skip one a year) and 14 days on quality updates.

Based on this response from MidWestMark up earlier in this topic thread, it appears there is still some Advanced options control in the Group Policy areas.

 

Windows 10 Pro x64 v1803 and Windows 7 Pro SP1 x64

[Tex265AskWoody Plus]

PK, sorry if this is confusing.

Within the link that I originally referenced, there is alot of conversation and testing by abbodi86 regarding what happens if you make different settings as well as utilize the Registry and Group Policy.

Your documented update experience seemed to differ from what abbodi86 was experiencing so my questioning centered around whether the upgrade to 1903 had now changed vs back when his/hers was documented. He seemed to be able to still have control over Feature and Quality updates via the Registry and some seemed to think that even when the Advanced options were changed (making them disappear) that the delay days were still being honored by MS.

Are you seeing any of this with your update or is it now all being ignored by MS?

Windows 10 Pro x64 v1803 and Windows 7 Pro SP1 x64

[Tex265AskWoody Plus]

PKCano wrote:

They are of no use if you can’t change them without their disappearance.

So now the Advanced options are not showing up at all regardless of leaving the delay days at zero “0”?

And even if the Advanced options disappear you can no longer set delays via the Registry and view your setting (greyed out) in Group Policy per the testing info in my referenced link?

Windows 10 Pro x64 v1803 and Windows 7 Pro SP1 x64

[Tex265AskWoody Plus]

Referencing PKCano’s reporting below, are you using Windows 10 Pro or Home?

If Pro, what are you seeing on the ver 1903 Settings > Windows Update > Advanced Options screen?

Windows 10 Pro x64 v1803 and Windows 7 Pro SP1 x64

[Tex265AskWoody Plus]

OK so regarding Windows 10 Pro ver 1903 Advanced Options, is the below link’s information still correct?

Win10 version 1903 disappearing Update settings described, but not explained

When feature updating to ver 1903 from either 1803 or 1809 and via either WUpdater or Windows Media, should you first reset your Advanced Options for Feature delay and Quality Update delay days to zero “0” before starting the update process? So those options dont disappear after the 1903 install restart?

Or will the Feature update to 1903 process set these to “0” and they will show up as long as you do not change them to a number higher than “0”?

Per info in the referenced link above, is the info still valid regarding still being able to change Advanced settings via the Registry and at least still seeing the changed settings via Group Policy? Or is all you really have left is the Pause delay?

Windows 10 Pro x64 v1803 and Windows 7 Pro SP1 x64

[Tex265AskWoody Plus]

Microfix wrote:

Ok so lets just clarify what chipsets this applies to before the thread goes pear-shaped: https://downloadmirror.intel.com/28966/eng/ReadMe.txt Excerpt taken from Intel Readme file linked above

Microfix wrote:

Don’t have any of these chipsets in you computer, it don’t apply to your PC

Based on my computer build comments and those from Alex, one can meet the Chipsets, etc enumerated in the excerpt and still not have Intel Rapid Storage installed on their system.

If you have the Chipsets, etc and a RAID array you most likely do.  If you have an SATA AHCI set up (check for Device Manager entry > IDE ATA/ATAPI controllers) you most likely don’t have RST, but you may depending on how the manufacturer set up the system.

Assuming you first meet the criteria referrenced by Microfix, seems best way to determine RST is per the Intel options outlined in my original post and also the link referred to by Alex.

Windows 10 Pro x64 v1803 and Windows 7 Pro SP1 x64

[Author]

Posts