-
Patch Lady – Business view of updates
While Woody has yet to declare the all clear, I’m listing the updates and giving the “business report” for consultants, admins or anyone who has to handle updates for key machines. I’ve updated my Master patch list with the known issues I’m tracking at this time.
The big issue was the Windows 7 loss of static IP addresses after the install of March and April updates on some machines. Microsoft re-packaged and released the April 10 update of 4093118 to include the networking fix on Thursday April 12th. If you installed the prior version and had no issues, you do not need to install this revised version.
As noted in the notes on the master patch list, the side effects that are still being tracked for Windows 7/Server 2008 R2 fortunately appear to not be as bad as once first thought. The memory leak is limited to server situations where symbolic links are used. If you rolled back the Spectre/Meltdown updates and felt your machine was peppier, remember that these updates will have a performance impact to older systems.
We still have no eta for the next feature update at this time.
I have determined that whether you use WSUS or WU, the 1709 Servicing stack updates install silently and before the main Windows 10 cumulative update installs. I say silently because I can see evidence that they are being installed when I use dism commands to list the updates, but they are not listed in the settings when I go to view my update history. If you manually install updates by going to the Windows catalog and download updates make sure you install 4099989 first. If you install updates via Microsoft update or WSUS, this update will be installed as part of the updating process, you do not need to install this.
I’ve seen comments that more and more consultants are taking the drastic steps of turning off windows update and in fact scripting a task to turn off the update services each day. I wince when I see these comments and urge consultants and those concerned about update quality to push off updates for a week but not to turn off the updating process completely. Remember for Windows 10 you can push off updates easily in Windows pro by going to the advanced section in updates and defer quality updates. Pushing them off for 7 days means that you can make sure there are no major issues. In my personal opinion it strikes the right balance between the risk of non updating and the risk of update side effects.