MS-DEFCON 3: Get the March 2020 patches installed

Topic

New Reply

It’s been a strange patching month, with a Patch Tuesday, a Patch Thursday, the usual buggy “optional, non-security C/D Week” patch, a bonus fix for a
[See the full post at: MS-DEFCON 3: Get the March 2020 patches installed]

10 users thanked author for this post.

rontpxz81, Pepsiboy, SueW, Elly, The Surfing Pensioner, CyGuy, Kathy Stevens, jburk07, abbodi86, geekdom

Reply | Quote

Replies

Which Windows 10 1903/1909 patch should we install?  KB4540673 was the original March Patch Tuesday update.  KB4551762 was the second security update issued two days later on Thursday.

Reply | Quote

The latest one, offered by Windows Update (but NOT the C/D week patch KB 4541335).

3 users thanked author for this post.

Elly, jburk07, CyGuy

Reply | Quote

PKCano, I did not have this question but I wanted to recognize you for your many contributions to the AskWoody site and say Thank You!

6 users thanked author for this post.

Irene, Just Lurking, migongo, SueW, Julia

Reply | Quote

Just updated my HP ProBook 450 G2 Laptop to 1909, 18363.720.

Installed KB 4551762 (cum), MSRT, KB 4541338 (SSU that came with cum.), that’s all that was offered. Immediately afterward I used the “Pause for 7 Days” up to 35 days.

3 more computers to do, hopefully all will be as smooth as Laptop 🙂

Don't take yourself so seriously, no one else does 🙂
All W10 Pro at 22H2,(2 Desktops, 1 Laptop).

2 users thanked author for this post.

WinSoftHelpMore, jburk07

Reply | Quote

Finished the rest of the computers, no problems.

Don't take yourself so seriously, no one else does 🙂
All W10 Pro at 22H2,(2 Desktops, 1 Laptop).

Reply | Quote

I installed Windows 10 on a newly built computer on March 8.

I’m not seeing the March update and I think I should be seeing it with given my settings, e.g. not paused.

KB4537572 was waiting to be installed this morning.

Is it possible that the Windows install on March 8 included what was released on Patch Tuesday, two days later?

Thanks.

 

Reply | Quote

The install would not have access to updates. that had not yet been released.

Do you have Home or Pro?
Do you have any deferrals set?
Have you hidden any updates?
Do you have Metered connections ON?
Do you have any third-party update blockers installed?
Looked under “Installed updates.” What the latest CU and SSU installed?

1 user thanked author for this post.

chilton

Reply | Quote

Do you have Home or Pro? Pro
Do you have any deferrals set? No
Have you hidden any updates?  No
Do you have Metered connections ON? No
Do you have any third-party update blockers installed? No
Looked under “Installed updates.” What the latest CU and SSU installed?

KB4537572 Cumulative Update for .NET Framework 3.5 and 4.8 for Windows 10 Version 1903 and Windows Server 1903 RTM and Windows 10, version 1909 and Windows Server, version 1909

Current view of WU attached.

Thanks.

Reply | Quote

Looked under “Installed updates,” not Update History. What the latest CU and SSU installed?

Reply | Quote

From Installed Updates: KB4551762 was installed on 3/19/2020.

Is there a good reason why installed updates aren’t listed in history?

KB4537572 is listed in both places.

Reply | Quote

[CADesertRat]

@chilton,

On the Windows Update page you should have a “Pause for 7 Days” link. click it once and then you should get a “Resume Updates” button. click it and Windows Update will run immediately to see if you have any new updates pending.

This should have gone as a reply but it put my response at the bottom unless all these other post’s were replies??

Don't take yourself so seriously, no one else does 🙂
All W10 Pro at 22H2,(2 Desktops, 1 Laptop).

• This reply was modified 4 years, 11 months ago by CADesertRat.

Reply | Quote

I saw where Susan said it was okay to get the Office updates. I have one showing in WU for Word in Office 2010.  I’m taking it as okay to install it based on Susan’s post.

Being 20 something in the 70's was far more fun than being 70 something in the insane 20's

Reply | Quote

I went ahead an installed the Match 2020 KBs for my Windows 10(1809) Home laptop and have not had any issues so that update was installed on 03-30-2020 and I also updated my Windows Defender virus/other definitions and hope that that included the fix for any skipped files scans in Defender as well.

So now onto April where 1809 is on borrowed time and I do hope that MS does not push out 2004 until after 1809 is EOL because I’m being offered 1909 as the current feature update but because the 1903/1909(Feature update) still has issues that I’m hoping may be better resolved before 1809 goes EOL(May 12 2020).  And that leaves April’s patches as the last month’s patching for 1809 and May’s patch Tuesday is also the same date as 1809’s EOL(for consumers). And maybe by May 2020 those 1903/1909 issues will be fully fixed.

I really do not want to be forced to jump from 1809 directly to 2004 and skip an entire feature upgrade in the process and 1909 is not going EOL for consumers until May 11 2021. Graphics drivers are a big issue as well as WiFi and other hardware drivers on laptops and end users unable to update hardware on laptops as easily as Desktops. So it’s always advisable to wait a good few months before even considering any brand new feature release such as 2004 on laptops and my laptop actually shipped with Windows 10 1803 Home when I first purchased and booted the laptop for the first time. So the OEM only actually tested and vetted/certified that laptop for 10/1803 Home.

Reply | Quote

anonymous wrote:

my laptop actually shipped with Windows 10 1803 Home when I first purchased and booted the laptop for the first time. So the OEM only actually tested and vetted/certified that laptop for 10/1803 Home.

My laptop also shipped with 1803 and since then the OEM has updated BIOS, Intel firmware, utilities, battery..

I blocked drivers updates and download them manually from hardware vendor’s sites.

I am now on 1909 Feb. updates with zero problems and will install Mar. updates as Woody just gave the go-ahead.

Woody advised  to update to 1909.

Reply | Quote

PKCano- KB4551762 the march cumulative update is the latest update to install right? Just to clarify and it isn’t the one with the VPN disconnect bug correct?

Reply | Quote

KB4551762 is the correct update. There is an out-of-band update for the VPN bug, but the recommendation is to NOT install it unless you are affected. It is MS Catalog doenload/manual install only. See this thread.

Reply | Quote

I have 1909Pro and this is confusing to me. KB4540673 was installed along with MSRT and now kb4551762 is offered. Should I uninstall kb4540673 and then install kb4551762 or just install kb4551762 after kb4540673

Thanks

Reply | Quote

kb4551762 replaces KB4540673. You should let Windows Update install it (you don’t have to uninstall anything).

Reply | Quote

I build a new workstation and did a fresh Windows Pro install on March 12 using the MSFT install tool of that day.  I always set the updates to delay by 15-16 days.  Yesterday it showed KB4551762 only so I went ahead and installed it.  No issues at all.  Today, I see an update for NetFramework:  KB4537572  I’m not sure this is anything mission critical that needs to be installed right now.

Reply | Quote

I think the .NET patches for the last couple of months have only been non-security. So no rush.

2 users thanked author for this post.

agoldhammer, jburk07

Reply | Quote

I have Win7 ESU.  Is KB4540688 ok to install?

Reply | Quote

There haven’t been any reports otherwise about KB4540688. You will also need the SSU KB4550735.

Reply | Quote

[redknight]

Updated 3 machines with both KB’s.

• This reply was modified 4 years, 11 months ago by redknight.

Reply | Quote

I installed the March Servicing Stack update (KB4550735) and 2020-03 Security Monthly Quality Rollup for Windows 7 for x64-based Systems (KB4540688) back on March 20th and have had no issues.

Reply | Quote

CyGuy wrote:

PKCano, I did not have this question but I wanted to recognize you for your many contributions to the AskWoody site and say Thank You!

+ 1

And special thanks to be one of the reliable profiles which tries to keep this site on track…

I – for my part – find it quite difficult nowadays to wade through all those non-tech topics here at Askwoody…

2 users thanked author for this post.

gjacwel, DriftyDonN

Reply | Quote

PKCano-Should I install  KB4551762 or not? Or should I just leave it alone just in case-ya know play it safe

https://support.microsoft.com/en-us/help/4551762/windows-10-update-kb4551762

Because this KB is from March 12th and I don’t know if the one I his is an updated one or the 12th of march one.

Reply | Quote

See #2213462 above

Reply | Quote

Okay so let WIndows Update install it, but I have KB4551762 HIDDEN on WUShowHide. So I should Unhide it or keep it hidden? JUST TO CLARIFY. OTHERWISE Don’t install it if your not sure. i just want to know please.

Reply | Quote

PKCano wrote:

kb4551762 replaces KB4540673. You should let Windows Update install it (you don’t have to uninstall anything).

You can’t install an update that’s hidden. That says to install it. I think that means you have to unhide it to do so. “JUST TO CLARIFY.”

1 user thanked author for this post.

CADesertRat

Reply | Quote

should optional update

2020-03 cumulative update for 1909 64 bit kb4541335 be installed?

Reply | Quote

To quote Woody’s ComputerWorld article:

If you see a come-on for the “optional, non-security, C/D Week” patch KB 4541335 (screenshot), simply ignore it. There’s absolutely nothing in that patch that you need or want, and it’s causing all sorts of problems.

2 users thanked author for this post.

gjacwel, DriftyDonN

Reply | Quote

Windows 8.1 here. Updated just now with the 2 updates plus the service stack update. Everything seems to be running normal so far.

Reply | Quote

I waited for 14 days before installing the March updates.  During that time I saw an advice saying that KB4551762 was replacing KB4540673.  When I eventually came to download and install, I received KB4540673 but not KB4551762.  I am still not being offered KB4551762.  Do I need it?  Not having any problems.

Windows 10 Pro 64 bit 20H2

Reply | Quote

KB4551762 fixes an SMB3 vulnerability.

Reply | Quote

Bundaburra wrote:

I received KB4540673 but not KB4551762.

KB4540673 is the latest cumulative update, so you do not need KB4551762.

Reply | Quote

Do you have that backwards? I believe KB4540673 was issued on 3/10 and then replaced by KB4551762 on 3/12 as a fix for the SMB-3 vuln.

Reply | Quote

Yep, sorry. I confused the numbers.

I wish Woody had identified beyond “Install the latest Win10 March Cumulative Update”.

Reply | Quote

That update (Patch Thursday) was offered to me last month (15 days after release as per my deferral settings) but I clicked pause, and now, after 7 days, it’s gone.

Reply | Quote

OK….this was by far one of the the least eventful patching sessions, no double-booting, either. (!?) Installed:

2020-03 Security Monthly Quality Rollup for Windows 7 for x64-based Systems (KB4540688)

Windows Malicious Software Removal Tool x64 – March 2020 (KB890830)

Rebooted, checked again, and was offered, and took:

2020-03 Servicing Stack Update for Windows 7 for x64-based Systems (KB4550735)

…all of which took 35 minutes, 10 minutes off the old record. Probably the new RAM expansion helped.

No issues so far.

BTW, should I be posting these reports here, on Win 7 ESU, or both?

Win7 Pro SP1 64-bit, Dell Latitude E6330, Intel CORE i5 "Ivy Bridge", 12GB RAM, Group "0Patch", Multiple Air-Gapped backup drives in different locations. Linux Mint Greenhorn
--
"The more kinks you put in the plumbing, the easier it is to stop up the pipes." -Scotty

1 user thanked author for this post.

jburk07

Reply | Quote

I recently went through  the feature update on my Win 10 1809 home laptop and I’m now on 1909 home.  When I went through the feature update, I had to temporarily disable my 3rd party a/v (Malwarebytes) and then re-enable after the successful feature update to 1909.

So, will I have to temporarily disable Malwarebytes again so that the March updates will download & install smoothly?  Appreciate any advice on this.

 

regards

GeoffB

Reply | Quote

GeoffB wrote:

So, will I have to temporarily disable Malwarebytes again so that the March updates will download & install smoothly?  Appreciate any advice on this

I always disable my A/V service during the monthly Windows update as the A/V slows down the process considerably.
The A/V is on by default after the restart.

Just updated my Lenovo Y530 1909 Pro with March updates :
KB4551762
KB4541338
KB890830

No ill effects.

1 user thanked author for this post.

jburk07

Reply | Quote

Followed your advice and temp disabled the 3rd party a/v.  Updates downloaded and installed smoothly.  Everything seems to be running well.

regards

GeoffB

Reply | Quote

CyGuy wrote:

PKCano, I did not have this question but I wanted to recognize you for your many contributions to the AskWoody site and say Thank You!

Indeed. Impressive relentless support.

I figured this MS-DEFCON 3 advice was the right moment to update my 1809 Pro to 1909 Pro. I’m now on Build 18363.720.
All went well, I think. Took about 40 minutes up to the last reboot.
Last time I update from 1809 to 1903 my system seemed to be sluggish after that, so I reverted to 1809. This time Windows runs smoothly.

All update history was deleted by the update and I now have two extra folders: Windows.old and Windows10Upgrade. If all stays well, I will delete them.

The update left my gpedit.msc update settings as I had put them: deferral for 100/30 days.

The only thing that was changed is that the update deleted Speccy, so that means going back to HWiNFO64.

Thanks to @woody as well of course.

BE SAFE

MintDE is my daily driver now. Old friend Win10 keeps spinning in the background

1 user thanked author for this post.

jburk07

Reply | Quote

I have a quick question.  I have installed Windows 10 1909 in a new partition; Windows 7 is still my preferred system for a few more weeks.  On March 24, I installed (or technically Windows Update automatically installed) KB4551762.  I have read that this patch has been re-issued.  How do I know if I have the latest version installed?  Do I need to worry/care?  If I do not have the latest version, will Windows Update know and tell me what else I need to install the next time I check?  I see this as a problem with MS’s re-user of patch numbers.  Thanks.

Reply | Quote

bsfinkel wrote:

I have read that this patch has been re-issued. How do I know if I have the latest version installed?

KB4551762 was issued on 3/12 as a fix for the SMB-3 vulnerability.

1 user thanked author for this post.

woody

Reply | Quote

The patch Tues KB4540673 (3/10) was replaced by KB4551762 on 3/12. KB4551762 has not been reissued.

2 users thanked author for this post.

dhdoyle, woody

Reply | Quote

woody & patch Lady Susan:

this just came out on Softpedia news about KB4554364 causing a new network/internet connection problem:

https://news.softpedia.com/news/microsoft-s-windows-10-network-bug-fixing-update-causes-a-network-bug-529628.shtml

1 user thanked author for this post.

woody

Reply | Quote

Does not appear widespread. Just a few users? Confined to Italy?

Could even be an April Fools’ prank:

i and other MVP and Independents consultants were victim of a well-organized joke

c:/windows/SyWOW64/AppIdPolicyEngineApi.dll Errors?

Reply | Quote

Windows 8.1 – Just installed the Mar. 10 Windows Update and Service Stack Update.  Running normal so far 🙂

Win 10 ver. 22H2 x64

2 users thanked author for this post.

jburk07, DrBonzo

Reply | Quote

Win10 1809 Home here: just reporting that I installed successfully the 2020-03 Cumulative update, Windows Malicious Software Removal Tool x64 – March 2020 (KB890830), the March patches for Word 2013 and Skype for Business all without any apparent issue.

BTW, I’m sticking to 1809 for a little longer (any chance MS might delay EOL of 1809 due to the covid-19 situation?) before moving to 1909. I’m happy to rely on wushowhide to delay updates and I don’t feel that the “Pause Updates” feature really gives me that much more control. Also, it seems that 1903/1909 keeps getting its monthly load of annoying bugs (see e.g. the “disappearing profile” issue and the recent VPN issue) which makes me uncomfortable with updating from the (finally) sufficiently stable 1809.

Reply | Quote

I don’t believe MS has any intention of extending 1809 EOL.
You have two more months……..

Reply | Quote

Just reporting in from home confinement in the UK – I hope all are staying safe and well in these unprecedented times.

On my home desktop Windows 7 machine I installed the Office 2010 update 4484240 at the beginning of the week, and hid the MSRT. I will in due course upgrade this machine to Windows 10 but probably not until the current crisis is over (or at least eased).

On my home desktop Windows 10 machine I installed yesterday the cumulative update 4451762, the .net framework update 4537572 and the MSRT. It took about 40 minutes with one restart.  I ignored the optional update 4541335.

Fingers firmly crossed but no apparent issues as yet, and the the Windows 10 machine will now have updates paused.

1 user thanked author for this post.

jburk07

Reply | Quote

I upgraded my 1809 Pro to 1909 Pro (see #2213646 above) and everything seems well.

I just uninstalled Windows 10 Update Assistant using BCUninstaller, but 1 registry key was left over:

Windows 10 Update Assistant | Microsoft Corporation | 1.4.9200.22925 | “C:\Windows10Upgrade\Windows10UpgraderApp.exe” /Uninstall | – Confidence: Questionable – HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunOnce\Windows10UpgraderApp.exe

Can I safely delete it?

MintDE is my daily driver now. Old friend Win10 keeps spinning in the background

Reply | Quote

RunOnce registry keys will be removed after the next boot / login so you can leave it.

cheers, Paul

1 user thanked author for this post.

TJ

Reply | Quote

Why hide MSRT?  All it does, as far as I know, is replace \Windows\system32\mrt.exe and run it.  MRT is a tool that does a quick scan for malware (Malware Removal Tool).  I always install MRT as soon as I see it on Patch Tuesday.  I once tried to run it manually, and it had a problem.  The response on one of the computer fora was, “Don’t worry”.  MRT has never found a problem when I have run it.

Another related issue – My weekly full MSE scan on Windows 7 last weekend had, in the MSE window where I was monitoring its progress, a yellow triangle with a message that some malware may have been found.  But when the scan finished, there was no notice of any malware having been found and quarantined.  I did not check for any MSE logs.

 

Reply | Quote

Assuming your question about hiding MSRT is in response to my comment, MSRT never found any problems but created its own problem one time (and has done occasionally for others) so from then on I’ve not bothered with it. It’s not worth risking any further issues for no apparent benefit, the machine already being protected by other anti-virus/malware programs.

Reply | Quote

I’ve seen MSRT completely wipe out the add/remove services window in the control panel of a couple Win 7 Pro machines. I refuse to use it (MSRT) any more.

I’ve also seen the yellow triangle in MSE on both long and short scans on a Win 7 Pro machine, along with the message there may be some potentially unwanted software, only to find at the end of the scan that no bad software was found. It happened right after an “upgrade” from Dell (Support Assist, I believe). A full scan with the safety scanner (https://docs.microsoft.com/en-us/windows/security/threat-protection/intelligence/safety-scanner-download) which I believe uses essentially the same definitions as MSE, turned up nothing. I think the issue is an artifact of the Dell “upgrade”.

Reply | Quote

[TJ]

Thanks, @Paul-t. Good to know that for a next time.

MintDE is my daily driver now. Old friend Win10 keeps spinning in the background

• This reply was modified 4 years, 11 months ago by TJ.

Reply | Quote

I got the March updates today – KB4551762, MSRT, Defender – all fine.  But I also got Intel – net 8/26/2019 12:00 AM 20.70.12.5

I have searched, but cannot identify what this is or if I should install it.  Any ideas?  I have “Pending Download” button, but was thinking I could hide the Intel download, if necessary. thanks!

Reply | Quote

You need wushowhide.diagcab to hide an update. Doenload it from Microsoft.

Reply | Quote

I have wushowhide, but I don’t know if I should hide the Intel update.

Reply | Quote

I have not installed any of the Intel microcode patches, if that is what you are referring to. but you also have something about net(?). Is that .NET?  You don mention any KB number for reference.

Reply | Quote

It’s just intel net. No KB.  It says:

Intel – net – 8/26/2019 12:00:00 AM – 20.70.12.5

(I don’t know how to insert a screen shot here).

Reply | Quote

That may be a network driver for an Intel device. Our recommendation is to get the driver updates from the computer mfg or the device OEM and not through Windows Update. I would say hide it.

1 user thanked author for this post.

dmt_3904

Reply | Quote

[dmt_3904]

I hid it, but it’s still there.  How can I hide something that’s already in Windows Update?

It is a driver. I think for Bluetooth.  I have version 21.10.1.1 so I def don’t want to go backwards!

• This reply was modified 4 years, 11 months ago by dmt_3904.

Reply | Quote

AKB2000013 explains how to clear the Windows Update queue so the update that shows there does  not download and install.

1 user thanked author for this post.

Elly

Reply | Quote

I see the procedure for wushowhide, but I don’t see AKB2000013 to clear the Queue.  Where is AKB2000013 ? Is that in Lars220 reply? Sorry, I’m just confused, again!  I have cleared my update queue before and it wiped out everything  Maybe I am misreading the sentence after ‘Or’ in your response.  How do I clear the Q for that one update?  Or I clear & once updates are hidden, they will not download next time?

SO you can EITHER wait until WU checks for updates again on its own (may take upwards of 36 hours) at which time it will not find the ones you hid OR you can use the procedure in AKB2000013 to clear the queue of the hidden updates so you can download/install the ones you want.

Reply | Quote

You can find AKB2000013 by clicking on the link in the above post. If you use it, you need to follow the instructions exactly, no just some of them.

1 user thanked author for this post.

Elly

Reply | Quote

ok, but the updates are already in my Q.  So do I follow your response to KYKaren on February 13, 2020 at 6:09 pm ?

Do you first use wushowhide by itself, and THEN IF the ones you think you have hidden still appear in the queue, you use the directions in ABK2000013, which include using wushowhide again?

First, you look at the queue. Is there anything there you do NOT want?
If the answer is “NO” you are good to click on “Download.”.
If the answer is “YES” you use wushowhide to hide the ones you don’t want.

BUT what you see in the queue will not change to reflect the ones you hid until WU checks for updates again. So the ones you hid are still listed when you look in WU. If you click the “Download” button at this point, the ones you see in the queue will download/install (including the ones you hid if they still appear there there).

SO you can EITHER wait until WU checks for updates again on its own (may take upwards of 36 hours) at which time it will not find the ones you hid OR you can use the procedure in AKB2000013 to clear the queue of the hidden updates so you can download/install the ones you want.

Reply | Quote

I think you have pretty well covered the procedure, but it is written out in AKB2000013 in as good a detail as I can give. I will not repeat it all again here. You should follow the the procedure in AKB2000013 exactly.

2 users thanked author for this post.

Elly, dmt_3904

Reply | Quote

I noticed this evening that (after having updated from 1809 to 1909 two days ago) websites took a long time to load -both in Firefox and Edge- when on a vpn connection. Turns out Windows/the update put its own Wireguard tunnel driver in place of Wireguard’s own driver.

Reinstalling the vpn solved that, but it’s worrying that the update overruled gpedit’s “Don’t include drivers” setting. :-{

MintDE is my daily driver now. Old friend Win10 keeps spinning in the background

Reply | Quote

PKCano wrote:

I don’t believe MS has any intention of extending 1809 EOL.
You have two more months……..

Actually, isn’t it less than that since EOL is May 12?

Win 10 ver. 22H2 x64

Reply | Quote

Yes, but two more patch Tuesdays.

1 user thanked author for this post.

JD

Reply | Quote

TJ wrote:

The only thing that was changed is that the update deleted Speccy

So download Speccy again. This time use Portable version (I have it on my 1909 Pro)

1 user thanked author for this post.

TJ

Reply | Quote

You’re right. I forgot I also had the portable version somewhere.
I prefer Speccy’s easy overview.

MintDE is my daily driver now. Old friend Win10 keeps spinning in the background

Reply | Quote

Looks like an update broke Camera access to apps. The most common error seen is <NoCamerasAreAttached>

I did troubleshooting with a number of people and it was seen that the Camera device even vanished from the Device Manager.

An Example with 127+ votes.

https://answers.microsoft.com/en-us/windows/forum/all/the-camera-app-on-my-laptop-is-not-working-windows/4c729312-338f-4e97-9bb4-50459a033d83

Another thread with 88 votes:

https://answers.microsoft.com/en-us/windows/forum/all/camera-in-windows-10-not-working/4eb7c47b-6846-48d6-988e-c8845cda6998?page=3

I think it is related to the “D” release. Not sure, though.

 

1 user thanked author for this post.

b

Reply | Quote

Do you know what update broke the camera? We are having this issue pop up with a few users.

Reply | Quote

Re: Driver and Microcode Updates Included in Windows 10 Updates – Install or Not?

Woody – The general consensus of those who post on AskWoody seems to be that driver updates and microcode updates should be obtained from the device manufacturer’s website and the ones that are included with Windows Update should not be installed. In your ComputerWorld articles that greenlight monthly updates I have not seen any discussion of whether to install driver and microcode updates that Microsoft includes with Windows Update. Can you provide some guidance?

I have read extensively the discussions on this website about using Group Policy Editor and wushowhide to control updates but I have not used them and my understanding is that you generally don’t recommend using Group Policy Editor.

I purchased my computer in January with Windows 10 version 1809 installed and subsequently updated to versions 1903 and 1909. My Windows Update history indicates 28 drivers were installed on March 3 and everything seems to working fine.

Thanks.

Reply | Quote

Our recommendation is that you obtain the driver updates from your computer mfg or the device mfg, not through Windows Update.
Whether you install the microcode updates or not is up to you. Personally, I have installed none of them.
See AKB2000016 A Guide for Windows Update Settings for Windows 10.I have given an explanation of the different settings available for both Home and Pro versions. There is an example in the Win10 Pro settings that I use. Woody recommends that Home Users use Pause to delay updates (see his ComputerWorld Articles).

1 user thanked author for this post.

280park

Reply | Quote

I have Windows 10 Pro ver 1903. I just installed KB 4551762. Things went smoothly until I went to reset my settings for deferring updates. First, I paused updates in Updates & Security>Windows Update, but when I went to Advanced Options, I did not see the options to set the deferred days for featured and quality updates – they aren’t there anymore. Did this update do away with this choice? Do we now have to use wushowhide to block feature updates?

Reply | Quote

First, I paused updates in Updates & Security>Windows Update, but when I went to Advanced Options, I did not see the options to set the deferred days for featured and quality updates – they aren’t there anymore. Did this update do away with this choice? Do we now have to use wushowhide to block feature updates?

The deferral settings are still available, but other settings you have made have probably made them inactive. If you have set any deferrals in Group Policy, the settings in the GUI will disappear and not be available. Also, the use of Pause may have an effect on their appearance.

There is an explanation of the settings related to Windows Update in both the GUI and Group Policy, and their interaction, in AKB2000016. There are also illustrations and an example of use for Win10 Pro. If you have questions, there is a Comments thread available.

Reply | Quote

Sorry…..I just answered my own questions. I was not in my Administrator Account – I was in my User Account.

Reply | Quote

Windows 10 Pro – 1903

I need to install the March 2020 Windows 10 Cumulative Update because I’ve had Windows Updates paused until now.  NOTE – I’m using the default Windows Update that came with Windows 10 and have not (yet) changed any Windows Update Settings per AKB 2000016.

Windows Update is not offering any March 2020 Windows 10 Cumulative Updates.  The Microsoft Update Catalog offers four March 2020 Windows 10 updates.

I’ve read this blog and Woody’s Computerworld article in detail.  I plan to take the following actions based on the available information:

KB4540673 (Issued 3/10) – Do not install because it has been superseded by KB4551762

KB4551762 (Issued 3/12) – Install manually because it supersedes KB4540673

KB4541335 – Do not install because it is the Week C/D Update

KB4554364 – Do not install because I don’t use a VPN and it causes WiFi network/internet connection problems.

Please confirm that my plan to manually install KB4551762 is correct.

I hope you don’t mind me asking for this confirmation regarding the information already posted.

Thank you to PKCano for all of your on-going support and advice.

Reply | Quote

Before you install the CU KB4551762 manually, you need to install the Mar Servicing Stack KB4541338. It normally is bundled with the CU if you use Windows Update and you never see it, But if you install manually, the current SSU needs to be installed first and by itself.

1 user thanked author for this post.

Mike W

Reply | Quote

Thank you, PKCano.

When I attempted to install the Windows Servicing Stack KB4541338 , a new message stated that it was already installed even though Windows Updates does NOT list it as installed.  This prompted me to learn about and review Installed Updates for the first time ever.  KB4541338 is listed as installed in Installed Updates but not Windows Updates. Furthermore, the March 2020 Windows 10 Cumulative Update KB4551762 is listed as installed in Installed Updates but not Windows Updates.  Windows apparently installed these two updates on March 30 without my knowledge while my Windows Update Pause was inadvertently turned off.  This situation raises the following questions:

(1) Why do Windows Updates and Installed Updates include different information?

(2) Why are some but not all updates listed in Windows Updates?

(3) Why are some but not all updates listed in Installed Updates?

(4) Are only updates that I initiate listed in Windows Updates?

NOTE: I was a happy Windows 7 user for seven years until Windows 7 EOS in January 2020.  I bought and commissioned a new Windows 10 computer in February 2020 so I’m just learning Windows 10.  Windows 10 does not include many Windows 7 user-friendly features.  The Windows 7 Windows Update was easy to use.  The Windows 10 Windows Update design is awful.  The default design does not permit you to download but not install updates.  Updates are automatically installed as soon as they are downloaded.  I guess I’m going to have to implement AKB 200016 to regain Windows 7 type control over my Windows Updates.  I’m hoping the AKB 2000016 instruction are easy to accomplish.

1 user thanked author for this post.

Elly

Reply | Quote

Welcome to Windows 10 🙂

AKB2000016 MAY help you (if anything can with Win10 🙂 ).
Also, be sure to read Woody’s ComputerWorld article for DEFCON-3 today linked at the end of the blogpost. Follow the links therein for more explanation. That is also helpful.

2 users thanked author for this post.

Elly, Mike W

Reply | Quote

How many are skipping install KB 4541505 since it contains DiagTrack service component (AKA Unified Telemetry Client)?

I will be skipping it and will hope that next month update does not have telemetry.

Reply | Quote