MS-DEFCON 2: Deferring April

Topic

New Reply

ISSUE 19.14.2 • 2022-04-07 By Susan Bradley Don’t let April showers rain on your PCs. I love April. It’s the end of the busy tax season at the office,
[See the full post at: MS-DEFCON 2: Deferring April]

Susan Bradley Patch Lady/Prudent patcher

7 users thanked author for this post.

E Pericoloso Sporgersi, migongo, DrBonzo, Julian Finn, lmacri, OldMainframeGuy, Alex5723

Reply | Quote

Replies

Does pausing updates also pause Windows Defender updates?

Reply | Quote

Hi OldMainFrameGuy:

No, if you defer updates in Windows Update you’ll continue to receive regular definition updates for Windows Defender (now known as Microsoft Defender).

1 user thanked author for this post.

OldMainframeGuy

Reply | Quote

One of our computers is running 20H2. And that machine lists 21H2 as an optional update. So the idea that Microsoft will withdraw support for 20H2 in May, without first having installed 21H2 as a critical update, doesn’t compute for me.

I allow Microsoft to do Critical security or patch updates. In most all instances I disallow optional updates because that is Microsoft sneaking things onto the systems I administer which are automatically seen by me to be a destructive disadvantage to our needs.

Human, who sports only naturally-occurring DNA ~ oneironaut ~ broadcaster

Reply | Quote

Unless it’s changed, if you remain on a Feature version which has reached end of servicing then your machine will automatically update to the latest one (I think) after 90 days. I might be misremembering, but I believe this is or at least was the case.

Reply | Quote

I got today April’s KB4023057.
Installed.

Reply | Quote

Hey Susan thanks, as always, for all that you do. One question, why do you recommend the longer path to getting to your windows version, rather than just start-> type “winver”-> enter?

Reply | Quote

I try to stay with gui versus command line in order to make it easier for all.

Susan Bradley Patch Lady/Prudent patcher

1 user thanked author for this post.

DrBonzo

Reply | Quote

I’m confused. The winver command does run a command, but the EU never sees it, they just get a window like this:

 

 

Reply | Quote

This is the winver window.

Reply | Quote

I already have a April Update KB4023057. I thought I had until April 10th, to install March updates & the rest of the Updates since the Fall (when I moved to Win10 Pro)  & Hide those health checks that push Win 11 like KB5005463 and KB4023057 (the only 2 that I know to always hide) ??

I’m I too late and have to wait to do any updates??

Is there any new March Updates that I should hide ?

Just checked WU List: 

2022-04 Update for Windows 10 Version 21H1 for x64-based Systems (KB4023057)

2022-03 Cumulative Update for Windows 10 21H1 for x64-based Systems (KB5011487)

Windows Malicious Software Removal Tool x64 – v5.99 (KB890830)

Windows Malicious Software Removal Tool x64 – v5.98 (KB8908300)

2022-01 Cumulative update for .NET Framework 3.5 and 4.8 for Windows 10 Version 21h1 for x64 (KB4008876)

Optional Updates:  *the Download and Install Text of the grey box Button is Greyed-out*

under Drivers updates: there’s a list of Intel -Other hardware & Intel System related .

*But right under Driver Updates text, it says “If you have a specific problem, one of these drivers might help. Otherwise automatic updates will keep your drivers up to date.”

-I haven’t had any Driver problems that I am aware of (I’m not a tech person)

And last listed is Western Digital Tech – WDC_SAM – 11/30/2017 12:00AM – 1.2.0.0

 

 

*I have done the group policy to keep PC on 21H1 *  *And group policy is set to 2*

Windows updates for my 2014 Custom Built PC with Win 10 Pro Intel i7-5820K 3.30Ghz on Version 21H1 10.0.19043 Build 19043

Reply | Quote

Below, is List of Important Updates that was on my WU List when I  first opened my PC in the Winter since upgrading to Win 10 Pro in the Fall :

*I am assuming that IF the 1st, 3rd or 4th Updates listed below appears after doing March Updates (if I’m not already too late since it’s April)  that I should still install them ?? *

Windows Malicious Software Removal Tool x64 – v5.98 (KB890830)

2022-02 Cumulative Update for Windows 10 Version 21H1 for x64-based Systems (KB5010342)

2022-01 Update for Windows 10 Version 21H1 for x64-based Systems (KB4023057)

2022-01 Cumulative Update for .NET Framework 3.5 and 4.8 for Windows 10 Version 21H1 for x64 (KB5008876)

2021-10 Update for Windows 10 Version 21H1 for x64-based Systems (KB5005463)

Optional Updates:  None

 

*I have done the group policy to keep PC on 21H1 * *And group policy is set to 2*

Windows updates for my 2014 Custom Built PC with Win 10 Pro Intel i7-5820K 3.30Ghz on Version 21H1 10.0.19043 Build 19043

Reply | Quote

You should go ahead and do the March updates. They were under MARCH DEFCON-4.
The DEFCON-2 is now in effect only for the upcoming APRIL updates out next Tuesday.
The monthly updates for Windows are cumulative, so you only need KB5011487, not the CUs for earlier months. If there are .NET updates that are not Previews, install those and the MSRT..

Hide those health checks that push Win 11 like KB5005463 and KB4023057 if you don’t want them.

Reply | Quote

a) How do I tell if a .NET  update is a Preview ?? Will they say Preview within the update’s name?   Are these Preview updates, 2022-01 Cumulative update for .NET Framework 3.5 and 4.8 for Windows 10 Version 21h1 for x64 (KB4008876)

b) Soo If 2022-02 Cumulative Update for Windows 10 Version 21H1 for x64-based Systems (KB5010342) shows up then I should hide it, correct?

But, don’t hide CU update that is for .NET Framework ,right ?

c) Are KB5005463 and KB4023057 the only Health Checks to worry about/ to hide ?

 

Reply | Quote

.NET updates will say “Preview” if they are Previews.
Do not hide .NET updates that are not Previews.

If KB5011487 (March CU) shows up in the WU queue, you will not see earlier monthly updates (CUS) because they will be superseded.

TheFamilyIT wrote:

c) Are KB5005463 and KB4023057 the only Health Checks to worry about/ to hide ?

Yes

Reply | Quote

I noticed that a couple of April Updates were showing as available already.

KB4023057 2022-04 showed up for April already, as did the April edition of the Malicious Software Removal Tool, KB4052623.

I already updated for March last weekend. These were new; I hid them both in WuShowHide.

Reply | Quote

Update: I had a bright idea to google to check v5.99 and v5.98 release dates and they are from Feb. and March. So, I guess they’re safe to install even though both have same KB number.

Which of these are the April Edition?

Windows Malicious Software Removal Tool x64 – v5.99 (KB890830)

Windows Malicious Software Removal Tool x64 – v5.98 (KB8908300)

 

Windows updates for my 2014 Custom Built PC with Win 10 Pro Intel i7-5820K 3.30Ghz on Version 21H1 10.0.19043 Build 19043

Reply | Quote

Which of these are the April Edition?

Windows Malicious Software Removal Tool x64 – v5.99 (KB890830)

Windows Malicious Software Removal Tool x64 – v5.98 (KB8908300)

Neither one. Version 5.98 is the February release of MSRT and 5.99 is the March release of the tool. The April version of the tool will be released on April 12th, Patch Tuesday.

You can download and run both, running version 5.98 first followed by 5.99. The tool scans for a certain, specifically defined, set of malware that’s been deemed by Microsoft to be very prevalent in the few weeks prior to the tool’s release for a given month. Because of this, each version has the distinct possibility of scanning for different sets of malware, with an unknown amount of overlap from version to version.

1 user thanked author for this post.

WCHS

Reply | Quote

@brian1248 –

KB4052623 is not the latest version of MSRT, the Malicious Software Removal Tool.

KB4052623 is a very recent update for Windows Defender/Microsoft Defender which was released in the last couple of days. The most recent version of this update actually updates the anti-malware client portion of Windows Defender/Microsoft Defender from version 4.18.2202.4 to 4.18.2203.5. The web page for the KB hasn’t been updated yet as of this writing to reflect this change. This update is released approximately once a month.

The Malicious Software Removal Tool (KB890830) is a tool that’s designed to only scan for a small set of specific threats that have been deemed prevalent by Microsoft in the past several weeks. It is NOT meant to replace a default anti-malware program such as Windows Defender or Malwarebytes Anti-Malware. The MSRT will ONLY be updated under the above mentioned KB number of 890830.

I hope this clears things up a bit for you.

Reply | Quote

Thanks, Bob99.  I misread the description on the KB. I do know what the Malicious Software Tool is.

 

Reply | Quote

My Desktop Clock has the wrong time after Daylight Savings Time started.  When is it safe to change/fix the clock to the right time, before or after installing Updates ??      I don’t want to cause any PC issues, editing project saving after time is fixed issues, or Windows Updating issues.

I’m not tech savvy enough to know if simply changing the clock’s time can cause instant or near future PC issues

Reply | Quote

Your clock should auto update based on your location. Check your location in Settings > Time and Language > Region.

cheers, Paul

Reply | Quote

I’ll check my location in settings. But, if location is correct and Adjust for Daylight Saving Time Automatically” is turned on.  Will manually fixing the time right before installing Windows Updates cause any PC issues, editing project saving after time is fixed issues, or Windows Updating issues, etc ?

Reply | Quote

TheFamilyIT wrote:

My Desktop Clock has the wrong time after Daylight Savings Time started…

Hi TheFamilyIT:

Do you mean that the time on your system clock on your Win 10 Pro v21H1 machine didn’t automatically gain one hour on 13-Mar-2022 (the second Sunday in March) when Daylight Saving Time came into effect in North America? If so, go to Settings | Time & Language | Date and Time and make sure you’ve chosen the correct time zone for your location and that “Adjust for Daylight Saving Time Automatically” is turned ON. Also make sure your system clock is automatically synchronizing with a remote timer server (i.e., check that the “last successful time synchronization” shown above those settings has occurred in the past few days – see attached image).

As long as your system time clock isn’t loosing significant time (i.e., unless the date and time are off by several hours or days when you re-boot your computer because of a failing CMOS battery) then it should be safe to adjust your system clock to the correct time / date / year / timezone and then update to v21H2 and/or apply any available quality updates using Windows Update.
————–
Dell Inspiron 5584 * 64-bit Win 10 Pro v21H2 build 19044.1586 * Firefox v98.0.2 * Microsoft Defender v4.18.2202.4-1.1.19000.8 * Malwarebytes Premium v4.5.7.186-1.0.1645

Reply | Quote

Today, when I turned on my Desktop, my Desktop Clock has fixed itself and now has the correct time.  I still checked today, my Date & Time Settings which matched your Settings as seen in your Screenshot and my “last successful time synchronization” and it was April 7th 11:55pm. Which happened to be a few hours later after I 1st posted here my Clock time issue.

I did forget to mention in my original reply/question post that I remembered earlier in March after Daylight Savings Time had started that my clock’s time had the right time and then some time later when I checked the time it had changed to 1 hour back.

I hope all this means that everything with the Clock is fine and won’t cause any PC issues.

 

Reply | Quote

Out by one hour won’t be a clock issue – that would be years out.
One hour is a daylight saving thing so you may have some weirdness in your location settings.

cheers, Paul

Reply | Quote

I did also check my location settings and they are all correct.

Reply | Quote

I know of no reason not to set the time to the accurate time.  Low CMOS battery usually leads to a totally strange time, not one that is one hour off.

Most users should have an external drive and make full system image backups to it, before anything risky.  With USB3, depending on how much data you have, a backup could take as little as 15 minutes.  Restoring would take only the same 15 minutes.

Reply | Quote

You actually won’t be able to get to certain web sites if your time is off, the SSL certs will freak out.

Susan Bradley Patch Lady/Prudent patcher

1 user thanked author for this post.

wavy

Reply | Quote

Soo, IF all the date/time settings that I should check according the above/previous post #2437966 are what they are supposed to be.  What do you recommend on what should I do next ?….Like should it be safe/future PC issues free to Install Monthly Windows Updates first with the current time and then either right after or some other day manually fix the Desktop Clock time.

Reply | Quote

Before.  If the clock is way off the updates will fail to install as the digital certificate will be invalid.

Susan Bradley Patch Lady/Prudent patcher

Reply | Quote

no April showers whatsoever in southern California – we’ve had a heat wave in LA for the past few days in the 90s but things should start to cool down this Sat April 9

recently updated my dad’s Toshiba laptop a few days ago from Win10 Home 21H1 to 21H2. have April 2022 KB4023057 update hidden/blocked with wushowhide.diagcab

Reply | Quote

I’ve often been told (read it) one should defer Windows Update on mission critical computers until Susan Calvin Bradley (*) is good and ready for it.

Wel, my computer isn’t mission critical. Not because it’s mission is not critical, but because it simply HAS NO mission, not any more.

All my retired pensioner’s needs can be fulfilled with pen, paper, celluloid film and cassette recorder. But with a computer, jobs don’t tend to become boring chores and, most of all, I’ve always liked digital IT, ever since my Sinclair Spectrum 48.

Beginning with Windows 98 and a ZIP drive, I’ve always saved an image of my system and application partitions at least once each month. Though I do defer WU -I like the pretense of being in control- I also always resume with the new WU whenever it’s available, usually in a Wednesday very early morning.

If anything awry does happen, like me committing some irreparable error and once again damaging my multi-tweaked Windows, I can recover with my latest good image. Yes, it does work, like the 8 or 9 times since 2015 that I made my Windows 10 croak.

So to conclude, Susan, grant me your blessing to continue indulging in a risky updating habit.

(*) Susan Calvin, robopsychologist

 

1 Desktop Win 11
1 Laptop Win 10
Both tweaked to look, behave and feel like Windows 95
(except for the marine blue desktop, rgb(0, 3, 98)

Reply | Quote

Susan, what are your thoughts regarding the new Microsoft autopatch system for enterprise ?

Reply | Quote