• MS-DEFCON 2: 24H2 is around the corner

    Home » Forums » Newsletter and Homepage topics » MS-DEFCON 2: 24H2 is around the corner

    Author
    Topic
    #2701458

    ISSUE 21.36.1 • 2024-09-05 By Susan Bradley I can always tell when fall is in the air. No, it’s not a decrease in temperatures — we’re still very hot
    [See the full post at: MS-DEFCON 2: 24H2 is around the corner]

    Susan Bradley Patch Lady/Prudent patcher

    6 users thanked author for this post.
    Viewing 10 reply threads
    Author
    Replies
    • #2701517

      Hi Susan,

      Unless I read this alert wrong, there must be a typo. First you say to stay on Win11 23H2 but one paragraph later you say to stay on 23H3. Please advise.

    • #2701520

      Also be aware of the upcoming changes to certificate-based authentication on Windows domain controllers, as noted in KB5014754. And note the additional steps needed in KB5037754 relating to PAC validation changes (CVE-2024-26248 and CVE-2024-29056).

      This has me puzzled a bit. KB5037754 says:

      Updates released on or after October 15, 2024, will move all Windows domain controllers and clients in the environment to Enforced mode by changing the registry subkey settings to PacSignatureValidationLevel=3 and CrossDomainFilteringLevel=4, enforcing the secure behavior by default.

      So we don’t have to take action – the October updates will do it for us?

    • #2701522

      I’ve been running 24H2 in Release Preview since June, thankfully it has been fine for me. That’s not to say that anyone should install it immediately, just that it hasn’t given me any trouble at all.

      I haven’t heard any confirmation either way but I’m presuming that it will be a full feature upgrade rather than an enablement package. Usually when enablement packages are used, the build number is only incremented slightly, such as 19041-19045 being used for the Windows 10 builds from 2004 up to 22H2, or Windows 11 22H2 to 23H2 being 22621 to 22631. But 24H2 is build 26100.

      1 user thanked author for this post.
      PL1
    • #2701561
      I d/l’d and installed InControl per your suggestion. Thinking this through, what happens in when M$ releases a security patch? I turn off InControl and then the unwanted patch pours through with the desired security patch(?)
      Is that accurate? Do you see M$ modifying 24H2 to be safer/less intrusive, etc?
      Chris Owen
      SW Georgia USA
      • #2701578

        Incontrol does not control the monthly security updates.  It only controls the (now) annual feature releases.

        Susan Bradley Patch Lady/Prudent patcher

        1 user thanked author for this post.
      • #2701601

        @Chris Owen, Welcome to the madness 🙂
        What does control monthly patches is a cleverly orchestrated and engineered portable 3rd party program called Windows Update Manager. (WUMgr)
        Available as a zip: https://github.com/DavidXanatos/wumgr/releases

        I’m sure many will agree, this little gem is a MUST in a live Windows toolkit to avoid/ hold off patches.
        NOTE: Use instead of the proprietary OS vacuum Windows Update.

        There is also microsoft’s own ‘wushowhide.diacab’ from the redmond chocolate factory as an adequate runner up. (initially designed to avoid W10 msft drivers although can be used to avoid patches also)

        Windows - commercial by definition and now function...
        1 user thanked author for this post.
        • #2701624

          There is also Microsoft’s own ‘wushowhide.diacab’ from the Redmond chocolate factory as an adequate runner up.

          Like all the Windows troubleshooters, at least in Windows 11, the framework which supports wushowhide will be removed in some future Windows 11 upgrade or update. I’ve been preparing for that day by getting to know how Powershell can be used to manage Windows Updates. It’s good, but not easy to learn. Definitely not a simple to use GUI app like wushowhide.

          -- rc primak

          2 users thanked author for this post.
          • #2701635

            I speak only from my non-techie experience, but while WUSHOWHIDE continues to work on my Win 10 boxes, beginning with last month’s WU, not on my Win 11 box. Per the following excerpt from MS the future may be sooner than later.

            “…the MSDT deprecation process will be done in stages over the next three years:

            2023 – Begin redirecting some of the troubleshooters to the new Get Help troubleshooting platform
            2024 – Complete the troubleshooter redirection and remove the rest of the troubleshooters
            2025 – Remove the MSDT platform”
            “If you’re running Windows 11 version 22H2 and older, Windows 10, Windows 8.1, Windows 7 or any other earlier OS version, your device will not be affected by the MSDT Troubleshooter retirement,” Microsoft added.

            1 user thanked author for this post.
          • #2701641

            I am in the process of updating my Windows installations in preparation for backing up prior to Patch Tuesday. I can confirm that wushowhide.diagcab has apparently stopped working on my Win11 machines. It still sees hardware updates, but no Windows updates (like the pending Preview).

            I have moved to WUMgr for Windows Update control on Win11.

            5 users thanked author for this post.
        • #2701726

          What does control monthly patches is a cleverly orchestrated and engineered portable 3rd party program called Windows Update Manager. (WUMgr)
          Available as a zip: https://github.com/DavidXanatos/wumgr/releases

          I’m sure many will agree, this little gem is a MUST in a live Windows toolkit to avoid/ hold off patches.
          NOTE: Use instead of the proprietary OS vacuum Windows Update.

          I use the Windows Automatic Update Manager (WAU Manager) which serves a similar function. No installation is required to use it.

          Windows Update Manager was apparently last updated on December 2019, more than 4 years ago. Still working on Windows 10 and Windows 11?

          Also the Microsoft Windows Update Show and Update tool (wushowhide.diagcab) has stopped working on the latest builds of Windows 11? Good to know, although since I am NOT going to run Windows 11 for a long time it does not concern me.

          Hope for the best. Prepare for the worst.

          1 user thanked author for this post.
          • #2701832

            Windows Update Manager was apparently last updated on December 2019, more than 4 years ago. Still working on Windows 10 and Windows 11?

            Like myself (Windows 10 22H2), lots of Windows 10 & 11 users who post here still use it and it works great. So the answer to your question is yes.

            FYI, Windows Update Manager (WuMgr) is also a standalone app, just like WAU Manager, and doesn’t require installation.

            2 users thanked author for this post.
            • #2701880

              though wushowhide.diagcab still works on all Windows 10 versions and the RTM/21H2 release of Windows 11 without showing any deprecation message, which that message only appears when run on Win11 22H2/23H2 & newer

              2 users thanked author for this post.
    • #2701597

      Hello Susan, thank you for the information. I use Windows 10. Will this work on my computer?

      • #2701600

        InControl works on Win10.
        If your computer is eligible for Win11, and you set it a Win10 and 22H2, it will keep you from being upgraded to Win11.
        InControl DOES NOT control the Monthly Patch Tuesday Security Cumulative updates or other Windows updates such as .NET, Defender, etc.

        1 user thanked author for this post.
    • #2701897

      Recent laptop purchase upgraded me to Win 11 Home – In Control tells me I’m on 22H2…should I be searching for an updated version? Thanks in advance for your help

      GolOl

      • #2701906

        Susan recommends upgrading to 23H2.

        If you have InControl, click Release Control
        Change Version=11 and Release=23H2, click Take Control.
        Download the Enablement Package from here. You need the one for 64-bit machine. Follow the instructions below the link. It will be a short upgrade to 23H2 and restart.

        1 user thanked author for this post.
    • #2701987

      About that upcoming EOL for W10 … M$ isn’t planning to brick W10 machines on that date, is it? It didn’t with W7, or Vista, or earlier, but it also let machine owners fully control their machines then as well. With W10 it took update control away for owners of W10 Home installations, and created accounts more privileged than Administrator, such as SYSTEM and TrustedInstaller, using that to lock mere computer owners out of various directories and components, including a lot of the update machinery.

      Thus, I don’t trust that they won’t also try to force people to switch to W11 in 2025.

      Is it known for sure that they won’t? That they will, but there will be circumvention tools readily available as there are for W10’s updates? Or what?

      • #2702031

        About that upcoming EOL for W10 … M$ isn’t planning to brick W10 machines on that date, is it?

        Myth. No way this happens.

        Thus, I don’t trust that they won’t also try to force people to switch to W11 in 2025.

        Not possible if your hardware is not eligible.

        Most likely Microsoft will offer a ESU (extended service = updates for a subscription) like it did for Win7/8.1. Also 0Patch provides patches for a small annual fee 9they’re still patching Win7/8.1)

        1 user thanked author for this post.
        • #2702129

          Most likely Microsoft will offer a ESU (extended service = updates for a subscription) like it did for Win7/8.1.

          Microsoft did NOT offer an ESU for Windows 8.1. ESUs were/are offered for Windows 7 / Windows Server 2008 R2 / Windows Server 2012 / Windows Server 2012 R2.

          And Microsoft has committed to offer Windows 10 ESUs to consumers :
          https://www.theverge.com/2023/12/5/23988896/microsoft-windows-10-extended-security-updates-consumers-paid
          https://learn.microsoft.com/en-us/lifecycle/faq/windows

          If you are an individual consumer or an organization who elects to continue using Windows 10 after support ends on October 14, 2025, you will have the option of enrolling your PC in the paid Extended Security Updates (ESU) program. The ESU program enables PCs to continue to receive Critical and Important security updates (as defined by the Microsoft Security Response Center) through an annual subscription service after support ends. More details including pricing will be provided at a later date.

          We just don’t know how much it will cost for consumers yet.

          Hope for the best. Prepare for the worst.

          1 user thanked author for this post.
    • #2702041

      Susan recommends upgrading to 23H2.

      If you have InControl, click Release Control
      Change Version=11 and Release=23H2, click Take Control.
      Download the Enablement Package from here. You need the one for 64-bit machine. Follow the instructions below the link. It will be a short upgrade to 23H2 and restart.

      Thanks much Paul…

    • #2702334

      Question about 24h2, from what we know of it, what exactly is it, is it like 23h2, or a whole other os we have to install? I ask, as there are some sites, can’t remember exactly which, that point out that 24h2 is going to be run alongside 23h2 and users can switch back and forth.

      • #2702338

        You can roll back within 10 days but unless you did some sort of dual boot, you can’t run them side by side.

        Susan Bradley Patch Lady/Prudent patcher

        1 user thanked author for this post.
        • #2702344

          Alright, thanks Susan, and keep up the fantastic work

    • #2702396

      hello, i have question regarding 23h2 and 24h2, i plan to make new installation usb for win11 23h2 for the first time soon. is there any date for when the new 24h2 will be released? will it be out this week along with the new patch tuesday?

      • #2702439

        hi heybengbeng

        there is no “definite” release date for Win11 24H2 as it could come out either in late September or sometime in October and Microsoft has yet to provide the 24H2 ISO downloads on the Windows 11 download page

        either way, you just have to WAIT until MS offers it thru windows update or from the Win11 download page.
        no need to rush out & get 24H2

        2 users thanked author for this post.
        • #2702515

          @EP, for PCs that are still on Windows 11 22H2, is it advisable to manually download the 23H2 ISO while it’s still available? The concern is whether the 23H2 ISO might disappear from MS’s download pages once 24H2 comes into wide release.

          • #2702939

            of course, download the 23H2 ISO image as soon as possible whenever you get the chance either from Microsoft or from here (which have the most up-to-date 23H2 ISO downloads with recent 23H2 updates applied to them)

            just do it, Cybertooth…without any hesitation.
            what are you waiting for?

            I’m not waiting around for Microsoft to suddenly & unexpectedly replace the 23H2 ISO downloads with the upcoming 24H2 downloads, so I won’t get caught off guard.

            it’s already Wed. Sept. 11 and so far Microsoft has not yet generally issued the 24H2 feature update thru windows update (except for windows insiders and for those who got recent copilot based pcs with pre-installed 24H2 in which those users will get new 24H2 based cumulative updates)

            1 user thanked author for this post.
    • #2707198

      the official Windows 11 24H2 ISO downloads have been posted Tuesday early dawn October 1st

      patch lady Susan has yet to publish an updated article about the official release of Windows 11 24H2

    Viewing 10 reply threads
    Reply To: MS-DEFCON 2: 24H2 is around the corner

    You can use BBCodes to format your content.
    Your account can't use all available BBCodes, they will be stripped before saving.

    Your information: