MS-DEFCON 3: Consumers get a break

Topic

New Reply

ISSUE 21.13.1 • 2024-03-27 By Susan Bradley Business patchers take heed. Usually, monthly updates have the same impact on both business and consumer P
[See the full post at: MS-DEFCON 3: Consumers get a break]

Susan Bradley Patch Lady/Prudent patcher

13 users thanked author for this post.

jburk07, LH, Steve S., MrToad28, CADesertRat, Geo, deuce120, windbg, 8string, lmacri, abbodi86, analogkid, DLivesInTexas

Reply | Quote

Replies

I assume and hope that all users are making a complete backup of their systems before installing any updates or new programs.  This has saved me in several situations.

Reply | Quote

We’re still seeing Copilot in dribble mode. Savvy forum participant WCHS noted that once Edge Beta was installed, it also seemed to bring along a new Microsoft Copilot app — for Windows 10! It is not installed if you merely have Edge, but gets installed with the current Edge beta. It’s unclear what exactly it is or does, especially given that it was installed on a computer that does not have Microsoft Copilot plus or Microsoft 365 Copilot. I’m making inquires about this.

I was able to update both of my computers to Edge 123 last Friday the 23rd, and the “Microsoft Copilot” mini app (8k in size) was on my list of installed apps at Settings>Apps under the “Apps& features” listing right after the update had finished installing itself. I promptly uninstalled it from all users’ accounts on both computers. Uninstall went smoothly, no issues at all and it was VERY quick.

So, when folks get updated to Edge 123, they might very well be finding themselves with the same thing…a little Microsoft Copilot listing for an app in the “Apps & features” area of Settings>Apps on their Windows 10 systems.

6 users thanked author for this post.

jburk07, Berserker79, sheldon, WCHS, analogkid, fernlady

Reply | Quote

Found Microsoft Copilot in the installed  apps after I updated Edge, but its gone now.

Windows 11 Pro
Version 23H2
OS build 22631.5189

1 user thanked author for this post.

jburk07

Reply | Quote

Bob99 wrote:

I was able to update both of my computers to Edge 123 last Friday the 23rd, and the “Microsoft Copilot” mini app (8k in size) was on my list of installed apps at Settings>Apps under the “Apps& features” listing right after the update had finished installing itself. I promptly uninstalled it from all users’ accounts on both computers. Uninstall went smoothly, no issues at all and it was VERY quick.

Does/Will it come back when Edge updates again?

Reply | Quote

Saw it too and deleted it.  Wonder if it will return at some point?

Reply | Quote

Same here!

Dell Precision 3630 w/32 GB RAM, 500 GB (C:), 1 TB (D:)
Window 10 Pro x64
Internet: FTTC (Fibre to the Kerb)

Reply | Quote

Thanks Bob, just noticed the Copilot app got installed with the Edge update on my Windows 11 Pro 22H2 machine and I promptly got rid of that thing.

I use Firefox as my browser and keep Edge as a second browser for ‘backup’ (i.e. in case some site does not load in Firefox), but if that Copilot app gets re-installed whenever Edge updates I will take steps to uninstall Edge entirely and install an entirely different browser to serve as backup.

2 users thanked author for this post.

LH, NaNoNyMouse

Reply | Quote

I updated my Windows 10 Home with an AMD processor this evening and had no issues. I have yet to consider updating my Windows 11 Pro with an Intel processor.

Here is the specs of my Windows 10 Home PC.

 

2 users thanked author for this post.

Nedi, jburk07

Reply | Quote

There is also an oob update for Server 2019 to solve the DC memory issues.

Reply | Quote

https://support.microsoft.com/en-us/topic/march-25-2024-kb5037425-os-build-17763-5579-out-of-band-fa8fb7fa-8185-408f-bdd6-ea575ce2fcb5 is the one for 2019.  Apologies, forgot to include that one.

You have to get it from here:

https://www.catalog.update.microsoft.com/Search.aspx?q=KB5037425

 

Susan Bradley Patch Lady/Prudent patcher

Reply | Quote

Note I haven’t updated the patch list yet, was waiting for the other prerelease patches to be posted.  I’ll be updating it tonight.

Susan Bradley Patch Lady/Prudent patcher

Reply | Quote

I’ve updated the post for the OOB for Server 2019.

Susan Bradley Patch Lady/Prudent patcher

Reply | Quote

Just updated my WIN10 Pro 22H2 with KB5035845 with no issues.   Also updated Office 2021 retail with no issues.

1 user thanked author for this post.

jburk07

Reply | Quote

Hi Susan,
The section with the heading “Consumers” seems to be making recommendations for users on the Windows 11 platform. What about Windows 10 (22H2) users?

1 user thanked author for this post.

stewagreen

Reply | Quote

WCHS wrote:

What about Windows 10 (22H2) users?

Well, so far @sheldon and @Rush2112 have both documented no problems at all installing this month’s update on Windows 10 systems. @sheldon ‘s post is here, and @Rush2112 ‘s post is here. Both are in this thread.

As @garbo is known for saying, HTH.

1 user thanked author for this post.

WCHS

Reply | Quote

Bob99 wrote:

Well, so far … Both are in this thread.

I had read those two posts before I posted.

Actually, I was asking Susan and I’ve edited the post to address the question to her.

57% of AskWoody members responding to Will’s survey are Windows 10 users.

2 users thanked author for this post.

stewagreen, Bob99

Reply | Quote

My sincere apologies, I was just trying to help. As you have probably seen by now, Susan has provided a response below to remove doubt for everyone with regards to her advice for Windows 10 with respect to the March patches. 

1 user thanked author for this post.

WCHS

Reply | Quote

I only call out the problems, so when you see me NOT talk about Windows 10, rest assured I’m not tracking anything.  But my apologies, I will call it out better in the future.

Susan Bradley Patch Lady/Prudent patcher

5 users thanked author for this post.

stewagreen, jburk07, Nick452, Donald Wright, WCHS

Reply | Quote

Hey– so wondering if anyone else is experiencing this:

Running a WS2016 DC and trying to install the OOB update mentioned in the post. I went to the Catalog site and downloaded both the SSU and the OOB (KB5037423) MSUs.

The SSU update installed with no complaints, but the actual OOB threw “The update is not applicable to your computer”. Except it is applicable. I double-checked the link to make sure I was downloading the version for Server 2016 rather than Windows 10, and I even downloaded it twice just in case the first download was somehow corrupt. I also rebooted the DC just for laughs, but that OOB KB refuses to install.

For what it’s worth, I had not previously installed the March Patch Tuesday update on this server. (I defer them 21 days.) And I don’t plan to install them given the guidance I received in the Windows Release Update, which says “We strongly recommend you do not apply the March 2024 security update on DCs and install the Resolved KBs listed above instead. As this is a cumulative update, you do not need to apply any previous update before installing the Resolved KBs listed above. “

So I’m at a loss as to what’s going on here. Anybody else have trouble installing this OOB update on WS2016?

Thanks,

Joe

Reply | Quote

Hey Joe,

We’re still in testing at my company, but we have been able to successfully install the OOB on 2016, 2019, and 2022 DCs that had been patched with the memory leak patch earlier.  We haven’t tested on DCs that did not receive the bad patches, however, with it being end of quarter.  Supposedly, the OOB is cumulative, and should be able to be installed on a machine in either state.

I will say for the forum, that this was actually a pretty impactful issue, as LASS was running away with Gigs.  While waiting for the OOBs to be released on our non-critical DCs, we actually scheduled periodic controlled reboots to alleviate the issue.

Reply | Quote

newphoenix wrote:

Hey Joe,

We’re still in testing at my company, but we have been able to successfully install the OOB on 2016, 2019, and 2022 DCs that had been patched with the memory leak patch earlier.  We haven’t tested on DCs that did not receive the bad patches, however, with it being end of quarter.  Supposedly, the OOB is cumulative, and should be able to be installed on a machine in either state.

I will say for the forum, that this was actually a pretty impactful issue, as LASS was running away with Gigs.  While waiting for the OOBs to be released on our non-critical DCs, we actually scheduled periodic controlled reboots to alleviate the issue.

Thanks for your response. Just so I’m clear, you’re saying you were able to install the OOB on a server that already the faulty March patch installed?

Maybe that’s my issue– that I need to install the bad patch fist and then the OOB, even though Microsoft explicitly tells you to install the OOB in lieu of the March update.

Sigh. My maintenance window for this week has passed, so I guess I’ll try it that way next week.

Thank you again!

Reply | Quote

No you should be able to jump to the OOB as they are cumulative.  What is the version of your server OS?

Susan Bradley Patch Lady/Prudent patcher

Reply | Quote

I had this same ‘not applicable’ issue on the domain controllers on my network. After a few guesses, I got the fix. The problem is that your delay of twenty-one days (mine was thirty) makes the MSU think that its patch is not yet applicable. The fix is to set that down to one day and then run the MSU. Note that the MSU does not care about the setting that says whether or not to delay quality updates, it only cares about the number of days. Also note where your group policy will apply for the number of days setting. In my case, I make the thirty day setting I use in the default domain policy. I do not want to change that group policy because I do not want every machine in my domain to apply April updates. The way I worked around it for my domain controllers was to make the following regedit on my domain controller:

Windows Registry Editor Version 5.00

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate]
"DeferQualityUpdatesPeriodInDays"=dword:00000001

Then run the MSU and reboot when prompted. Once the machine comes back up, then do gpupdate/force to re-apply the default domain policy setting of having your twenty-one (thirty in my case) days of cushion.

Reply | Quote

This month’s update (KB5038545) stuck at 99%. After waiting about 30 minutes, searched “KB5038545 stuck at 99%.” One of the results was at EaseUS (third listed solution) “[Solved] Windows 10 Update Assistant Is Stuck at 99%
EaseUS https://www.easeus.com › Computer Instruction”

Tried “Fix 6 – Temporarily Disable the Internet Connection” and it worked! Not sure why. Update began to download again. Went to 100% and installed.

Never tried that solution before but it worked quickly. Note that instructions reference “Update Assistant” but I was just doing a normal update from the Windows Update page.

https://www.easeus.com/computer-instruction/windows-10-update-assistant-is-stuck-99-percent.html

3 users thanked author for this post.

jburk07, CADesertRat, WCHS

Reply | Quote

I appreciate your comment about seeing more problems with AMD than Intel, and I tend to agree. recently one of my companies I support bought an AMD machine, and it started blue screening right out of the box. It’s a Lenovo. I spent a number of months sending the machine back to Lenovo getting it back and having a blue screen randomly again. I told the company and all of my companies to not buy any AMD machines. I’ve never seen this happen with any Intel machines on windows.

Reply | Quote

I see @Rush2112 updated an AMD with no problems. I have Intel on 1 Desktop and 1 HP Laptop so they should be ok but my other ( main ) Desktop is a home built AMD 2700X and I’m a bit leery of updating it.

Are the problems mostly with OE AMD computers ( Lenovo,HP, etc. )??

Don't take yourself so seriously, no one else does
All W10 Pro at 22H2,(2 Desktops, 1 Laptop).

Reply | Quote

Made a clone and decided to update my AMD 2700X. All went well. MSRT, KB 5035845, SSU 10.0.19041.4163.

Still need to do my Intel machines.

Don't take yourself so seriously, no one else does
All W10 Pro at 22H2,(2 Desktops, 1 Laptop).

Reply | Quote

Regarding the Lenovo firmware update with bitlocker issues:

I bindiffed it, the included db and dbx have been updated. The first to include the new set of MS certs, the second to update to the latest dbx (which includes the win8/winblue/th1 bootmgr binaries vulnerable to baton drop).

So older win8.x media will no longer boot after applying that UEFI firmware update (even after restoring factory keys, as that’s what’s been updated), this is probably relevant to anyone who’s still working on the official MS provided revocation timeline..

Reply | Quote

I decided to update my Dell 15 5510 Laptop with Windows 11 Pro with an Intel processor and it too updated without any issues.

Here is the info of my Dell.

Reply | Quote

Just updated my AMD Ryzen desktop with WIN10 Pro 22H2 with KB5035845 with no issues.

Decided not to try updating my Win 11 Home Levano laptop – it’s dual boot with Linux so I’ll stick to Linux thank you MS!

Reply | Quote

Susan Bradley wrote:

No you should be able to jump to the OOB as they are cumulative.  What is the version of your server OS?

It’s Server 2016– patched up though February 2024 updates.

Reply | Quote

Can you type in ver and hit enter in the search box and tell me exactly what Version number and Build number?

Susan Bradley Patch Lady/Prudent patcher

Reply | Quote

Susan Bradley wrote:

Can you type in ver and hit enter in the search box and tell me exactly what Version number and Build number?

Hi Susan.

It’s Version 1607, Build 14393.6709

Reply | Quote

Well that’s for sure

https://support.microsoft.com/en-us/topic/february-13-2024-kb5034767-os-build-14393-6709-e64b104e-984a-49fc-95ef-c3d84c159ba9

https://catalog.s.download.windowsupdate.com/d/msdownload/update/software/updt/2024/03/windows10.0-kb5037423-x64_1032bb3554d40ec5df5f9c08b8f1078905fb5157.msu

Can you download that and see what it says when you go to install it?

Susan Bradley Patch Lady/Prudent patcher

Reply | Quote

Susan Bradley wrote:

Well that’s for sure

https://support.microsoft.com/en-us/topic/february-13-2024-kb5034767-os-build-14393-6709-e64b104e-984a-49fc-95ef-c3d84c159ba9

https://catalog.s.download.windowsupdate.com/d/msdownload/update/software/updt/2024/03/windows10.0-kb5037423-x64_1032bb3554d40ec5df5f9c08b8f1078905fb5157.msu

Can you download that and see what it says when you go to install it?

Same error message. Weird, right? I don’t get it…

Reply | Quote

The only other thing I’d recommend is a sfc /dism because yes, that doesn’t make sense.

Susan Bradley Patch Lady/Prudent patcher

Reply | Quote

Updated my Windows 10 Home 22H2 machine with March patches and nothing seems to be amiss. In particular, the March CU (KB5038545) installed correctly, albeit slowly, without getting stuck.

As for my Windows 11 Pro 22H2 machine, given the reports of BSODs with the March CU (KB5035853) I have decided to hold off installation of that update and installed only the March updates for .NET 6.0 and MSRT. Those two updates were installed successfully and do not seem to cause issues.

Incidentally, I have spotted several users on reddit reporting that the ‘explorer.exe’ error from the February CU (supposedly suffered by systems with a gaming controller installed) was not fixed. However, of these users reported a workaround to solve the issue:

Not fixed yet for me but as the only effective workaround so far you can go to Services and Disable “GameInput” service, then Stop it and Reboot.

My Xbox controller and Wireless headset still work perfectly after the change and the error on shutdown is now gone.

I have not installed the update, but anyone having those ‘explorer.exe’ errors after the update might give the above suggestion a try.

1 user thanked author for this post.

jburk07

Reply | Quote

No problems updating.

2024-03 Cumulative Update for Windows 11 Version 23H2 for x64-based Systems (KB5035853)
Windows Malicious Software Removal Tool x64 – v5.122 (KB890830)
Update for Windows Security platform antimalware platform – KB5007651 (Version 1.0.2402.27001)

Had two optional preview updates which I refused and clicked pause.
KB5035942
KB5036035

Windows 11 Pro
Version 23H2
OS build 22631.5189

1 user thanked author for this post.

jburk07

Reply | Quote

Intel cpu in a windows 11 laptop, no problems with the updates, except a doble realtek AudioProcessingObject version 13.294.1136.240. one went in just fine, but the second one keeps coming up retry. Both had the same version number, and WUShowHide can’t even find the duplicate. I’ve tried a restart and it’s still there, granted, it doesn’t try to retry to install the duplicate. Am I fine just leaving it as is?

Reply | Quote

Nvm. it vanished when windows update auto-checked for updates

Reply | Quote

For the cumulative update for march 12th: Why does it say Install if not AMD? What does that mean? Is it safe to install or not?

Reply | Quote

If the processor in your PC is made by Intel, it is safe to install.
If it is an AMD processor, not.

1 user thanked author for this post.

MrToad28

Reply | Quote

Oh. Well, my Lenovo  has an Intel Core. So since its intel, its safe to install right?

Reply | Quote

PKCano wrote:

If the processor in your PC is made by Intel, it is safe to install.

2 users thanked author for this post.

Mark, satrow

Reply | Quote

Hi. So I am seeing some reports of KB5035845 not installing on win 10. Is this a widespread issue? And if it is not are March updates considered safe for W10 now? (Intel desktop pc.)

Reply | Quote

Hi Jim,

Jim wrote:

Is this a widespread issue?

I can’t say for sure, but I am the only person who seems to have had an issue with this update. I don’t think it really was the update, but something with my laptop.

Here’s the solution  that finally worked for me, but you probably won’t have any issues installing it.

1 user thanked author for this post.

PKCano

Reply | Quote

Jim wrote:

KB5035845

Installed without issue on our systems.

It’s prudent to image your drive before doing updates.

 

1 user thanked author for this post.

LHiggins

Reply | Quote

Thank you both.

Reply | Quote

I have updated and install went as normal. No issues thus far in the monthly carousel of madness, fingers crossed.

1 user thanked author for this post.

LHiggins

Reply | Quote

Thank you for your advice. I am a consumer home user with a Lenovo Thinkpad X1 Carbon with Windows 10 Pro (22H2) and an Intel chip. Should I install the March Windows update or defer? Thank you.

Reply | Quote

Yes I would go ahead and install the update.

Susan Bradley Patch Lady/Prudent patcher

1 user thanked author for this post.

Mike W

Reply | Quote