MS-DEFCON 3: Get your August patches installed

Topic

New Reply

August saw a jumble of patches, re-patches and re-re-patches, but the time has now come to get Windows and Office up-to-date. Post coming in Computerw
[See the full post at: MS-DEFCON 3: Get your August patches installed]

7 users thanked author for this post.

Elly, Pepsiboy, Microfix, JDeC, AJNorth, Noel Carboni, MrBrian

Reply | Quote

Replies

What is the status of .NET Framework 4.7 on Windows 7 now that we have MS-DEFCON 3? Since a couple of weeks it is a checked important update, but we were at MS-DEFCON 2. Before that it was unchecked, so I did not install it yet.

Reply | Quote

What is the status of .NET Framework 4.7 on Windows 7 now that we have MS-DEFCON 3? Since a couple of weeks it is a checked important update, but we were at MS-DEFCON 2. Before that it was unchecked, so I did not install it yet. – Pim

I have read on this site, without any details, that .NET 4.7 doesn’t work well on Windows 7.

I hid this on both my work and home Win 7 machines. A key program at my work can’t handle any .NET version higher than 4.5.2, and my Paint.NET program at home depends on .NET 4.6.

Unless you have a program that requires .NET 4.7, I would recommend you hide this.

6 users thanked author for this post.

HiFlyer, walker, JDeC, SueW, Pim, woody

Reply | Quote

Known issues in the .NET Framework 4.7

2 users thanked author for this post.

HiFlyer, Pim

Reply | Quote

Thank you for the warning about having to manually install KB4039884…. I would have otherwise not known about that, and I’m sure we’re days (if not hours) away from half our home office users screaming [blue] murder because their extra monitors are showing gobbledygook all the sudden.

I cannot for the life of me understand why that patch was not either incorporated into the rollup (which are CUMULATIVE now), or, pushed out via WU to machines with more than 1 monitor, and with KB4034664 (the August rollup) installed. Thanks for making the life of a SysAdmin even more difficult than it already is, Microsoft!

The sad thing is, I’m about to throw my arms up altogether and start running 10 1703 on everything I can at home, since that’s the one version of Windows left that isn’t being repeatedly borked by updates. You know, a more cynical person would say that was “intentional”…

Reply | Quote

The dual monitor issue was also in the July Windows 7 updates, and will probably be fixed in the September Windows 7 updates.

1 user thanked author for this post.

woody

Reply | Quote

I have added the link to the 8/30/17 release of KB4039884 (dual monitor hotfix) to AKB2000003

4 users thanked author for this post.

walker, Microfix, Charlie, woody

Reply | Quote

Please forgive me for asking, but is there a certain way the Dual Monitor Hotfix should be installed (i.e. after the IE11 security update)?

Win 7, Group B

Also, I’m assuming there are no Office 2010 Security Updates as none showed up in my WU.

Thanks!

Being 20 something in the 70's was far more fun than being 70 something in the insane 20's

Reply | Quote

Install security-only update, install the hotfix, install the IE11 patch.
You should not have to reboot between, but you may have to re-stop the WU service.

3 users thanked author for this post.

HiFlyer, Charlie, JDeC

Reply | Quote

I concur with the change to MS-DEFCON 3.

My test systems (Win 7, 8.1, 10) have all been on the August updates since right when they came out, and my production systems (Win 7, 8.1) have been on the August updates for well more than a week now. Last month I brought all systems up to date Group A style.

All’s been well here – I’ve seen no new problems or instability.

Note: I have no multi-monitor Win 7 systems, though my Win 8.1 workstation has 3 monitors. I’ve not installed anything special regarding the multi-monitor problems.

-Noel

4 users thanked author for this post.

HiFlyer, JDeC, AJNorth, SueW

Reply | Quote

I liked the bricks metaphor

8 users thanked author for this post.

Pepsiboy, Lori, SueW, Microfix, AJNorth, Noel Carboni, Seff, zero2dash

Reply | Quote

Every time I see it, I get a good chuckle out of that photo. It’s so true.

2 users thanked author for this post.

Pepsiboy, Microfix

Reply | Quote

I hope at least some of the Windows inmates escaped before the window was bricked. But, time is running out!! Looks like only 2 windows with bars left. Escape while you can!!

I’m still trapped in the Windows building, but my arms and legs are sticking out between the bars desperately clutching an old Vista machine that I’ve converted to Ubuntu. Save me, Ubuntu!

Reply | Quote

Please see https://www.askwoody.com/forums/topic/yet-another-reason-why-you-should-avoid-automatic-update-kb-4039396/#post-132313

Thanks

Reply | Quote

as group b on windows 7 i installed KB 4034679, KB 4039884 (dual monitor hotfix 8/30/17) & (IE11) KB 4034733
i am using two monitors on windows 7 machine and have to watch if anything weird goes on after todays patching.

on windows 8.1 i installed KB 4034672, (IE11) KB 4034733.

now i searched for office patches. no august patches for office 2010 available?
i only can see kb 2956078 for outlook 2010 32bit which i skipped last month.
is it still unsafe to install outlook patch? is it still not working, causing problems?

of course i will install malware removal tool for august which is also offered.
but no security/quality rollup as i want to stay in group b. and no optionals,
just c*** like previews, language packs, nvidia and snooping kb 2952664, etc.

windows 8.1 shows:
kb 2956078 for outlook 2010, malware removal tool and update for flash player.
along with group a security/quality rollup which i won’t touch. no optionals,
only previews, nvidia, one language pack (kb 3102429) and one snooping kb.

the one and only interesting optional would be .net framework 4.7 (kb 3186539),
which i still should not install, i assume? so i still won’t install this one.
btw. windows 7 still doesn’t offer any .net framework 4.7 update. only windows 8.

Reply | Quote

kb 2956078 for Outlook 2010 supposedly is OK to install.

Hold off on .NET 4.7 on Windows 7 – it’s relatively new and caused problems initially. You can wait a while on this one.

Reply | Quote

so is this update for outlook gone, which caused huge problems in june/july?
not being offered anymore?

Reply | Quote

kb 2956078 superseded the older patch

Reply | Quote

thx, i installed it on both computers.

Reply | Quote

kb 2956078 on windows 8.1 wanted a reboot. while on windows 7 it didn’t want a reboot?

why? and should i reboot windows 7 as well anyway?

Reply | Quote

You only need to reboot if it asks you to.

Reply | Quote

thx, and why did outlook kb 2956078 need a reboot on windows 8.1? as it’s for office 2010 32 bit, it’s the same update i installed on windows 7, i assume?

Reply | Quote

Don’t know the answer to that one!

Reply | Quote

I’m a Windows 7 Group B participant. Even though the July update didn’t go very well, because I continued to get a BSOD from the July 2017 KB 4025337 64-bit, no matter how many times I tried to install it, this August update, KB 4034679 64-bit & (IE11) KB 4034733 installed without a hitch. I know it’s supposed to be a cumulative process, but so far so good.

3 users thanked author for this post.

woody, MrBrian, JDeC

Reply | Quote

I too had the BSOD last month with the Security Patch for Win7 64bits…. so am very interested in what you’ve reported. When speaking about the problems last month, Mr Brian mentioned it might be an option to perhaps install August (this month’s) Security Patch and then go back and install the previous Security Patch (July) as there might have been a fix for the July patch problem in the August patch. And as I’m about to do something about it all…….. I thought to check here to see what’s what…. If you’re reading this Mr.Brian I would be so grateful for any thoughts on this….. and of course from anyone else! Thanks LT

PS Further update: Just installed the August Security Patch for Win7 64bit and after rebooting came back up with no problems………. so far! Will wait to hear further thoughts on whether to try and install the July Security Patch as well. LT

“Why do they call it rush hour when nothing moves ?” Robin Williams.

1 user thanked author for this post.

JDeC

Reply | Quote

On one of my 4 Windows 7 machines, after the update, I get this error message:

“Reboot & select proper boot device or insert boot media in selected boot device & press a key.”

Reply | Quote

One thing you can look at:
On bootup, get into the BIOS. Depending on what mfg. you have, it will be a keystroke immediately after power on. Dell=F2, HP=ESC, others have different ones. It is usually displayed during the POST sequence.

If the boot device is set to RAID, try AHCI. I that doesn’t work you can change it back.

Don’t know why this would have happened unless there was a driver included n the updates or maybe the HDD failed.

1 user thanked author for this post.

cmar6

Reply | Quote

PK:

BTW, your idea that one must use the password of the system where the share folder is enabled me to figure out how to re-enable shares on my lan after update of  Win 10 to version 1703.

My guess is that the 8/17 Win 7 rollup update included a driver update.

Reply | Quote

@lizzytish: If I recall, you use the security-only updates, which are not cumulative. If so, then yes I’d try the July security-only update after installing the August security-only update. It will probably still cause the same installation problems as the first time(s) you tried but it’s possible it might not.

4 users thanked author for this post.

HiFlyer, JDeC, lizzytish, woody

Reply | Quote

Thanks Mr.Brian for confirming that for me…….. I will have a go at that tonight probably and will let you know how it goes! It will be interesting! LT

“Don’t do something permanently stupid because you are temporarily upset!” Anon

3 users thanked author for this post.

HiFlyer, JDeC, MrBrian

Reply | Quote

I have only one monitor on my Win7 machine. I can’t imagine that I ever would have more than one monitor. Should I still install KB4039884 (hot fix for the dual monitor issue)?

I hope not since IMHO the fewer installed patches, the better.

Reply | Quote

I have only one monitor on my Win7 machine. I can’t imagine that I ever would have more than one monitor. Should I still install KB4039884 (hot fix for the dual monitor issue)?

I hope not since IMHO the fewer installed patches, the better. – DrBonzo

I don’t think that’s necessary. As at least one other user has posted, the hotfix will most likely be included in a future roll-up.

3 users thanked author for this post.

HiFlyer, Lori, DrBonzo

Reply | Quote

I don’t call it “easy ways to work around(s)” if you’re patching a hundred workstations with WSUS, especially the d*** dual-monitor bug.

No matter where you go, there you are.

Reply | Quote

I’ve now installed the Quality Monthly Rollup KB4034664 on both my Windows 7 home desktops with no apparent issues as yet *fingers crossed*. The usual MSRT was also installed without any problems. Nothing this month for Office 2010 so that’s hopefully me done for another month!

Thanks Woody and everyone for the ever-useful advice and comments.

Reply | Quote

Installed QMR KB4034664 on my Windows7 – Pro
I have a single monitor, should I also install the manual patch KB4039884 just in case and for if I ever do add a second monitor? Or, will the patch be part of the September QMR?

Reply | Quote

The hotfix patch will probably be incorporated into the Sept patches.

1 user thanked author for this post.

Lori

Reply | Quote

The monthly rollup KB 4034664 was installed on 4 year old win 7 x64 Dell and it is listed as pending instead of successful in the installed updates. What does that mean? Malicious Software Removal Tool KB 890830 was successful.

Reply | Quote

Have you rebooted? Perhaps it needs to complete the installation.

Reply | Quote

The computer asked for a restart and was restarted normally. I always check installed updates to make sure they were successful and the monthly rollup is showing as pending. Should I sit on it and give it time or should I try to uninstall it and reinstall it? Maybe the install got messed up somehow.

Reply | Quote

I’ve never seen “pending” before under installed updates.
It certainly wouldn’t hurt to try uninstall, reboot, reinstall.

Reply | Quote

I was able to update from Win 10 version 1607 to versioin 1703 thanks to excellent help from PK Cano and Woody. However, in the updated version 1703, although the Win 10 system can still see shared folders on the Win 7 systems, the reverse is no longer true. When I try to map from Win 7 system to a shared folder on Win 10 system, I get prompt for Win10 username/password.

On the Win 10 system/Advanced Sharing Settings:

Private;  Turn on network discovery; Turn on File & Printer sharing;

No homegroup.

When I try to map shared folder from Win 7 system, I am asked for password, even though shared folder is shared with Everyone. I am told that network folder specified is currently mapped using different name/password (not true.) To connect using different user name/password, disconnect any existing to this network share. (Does not help.)

Thanks to you Windows experts.

 

 

Reply | Quote

I’m going to shoot in the dark here:
The ID and password is that of the computer you are trying to connect to. You may have to use it when you map the drive, even if you think they are the same.

Under Control Panel\System\Computer name, domain, workgroup
Since you are not using Homegroups, the computers need to be in the same Workgroup

Under Control Panel\Network and Sharing Center\Advanced sharing options\Private
Try using “User Accounts and passwords to connect” instead of Windows managing.

These are just some things that come to mind. My Win10 are in VMs, so the VM software manages the access.

2 users thanked author for this post.

HiFlyer, cmar6

Reply | Quote

PK:

Greatly appreciated. BTW, I am grateful that the upgrade to version 1703 worked at all. I usually expect the worst from Windows, Your and Woody’s detailed ideas allowed the update to work.

I will try your network shares idea. I’ve found that one has to try many different fixes with Windows network shares to eventually get one to work.

1 user thanked author for this post.

woody

Reply | Quote

Sorry but I am a novice at this. In update history update KB4034664 is showing as pending and in installed updates it is not showing at all. The computer has been restarted a couple of times and is running normally. Sorry for the confusion. The update cannot be removed because it isn’t in installed updates and it shows in history so it doesn’t show as an available download now.  Although this isn’t a disastrous situation it is kind of an odd situation and I am not sure what to do. I would guess that something happened with the install and it never completed

Reply | Quote

I’ve never seen “pending in history either.
You can try this – manual install of update (it may not work)

Download KB4034664 64-bit and save it to the desktop.
Control Panel\Administrative Tools\Services – scroll down, highlight the Windows Update Service and at the top left click on STOP
Double click on the downloaded .msu file and see if it will install
Reboot

3 users thanked author for this post.

walker, HiFlyer, woody

Reply | Quote

@PKCano:  As of today, I’ve been successful in DL & installing the MSRT, and latest Definition update, however I cannot get KB4034664 to Install.   It goes through the motions, downloading and (restore point) “installing” and then prompt comes up saying it FAILED.   This is the first time I have been able to get online to install updates since about May 29th, 2017.

It only shows as “failed” in the “history”.   I was able to attempt this more than once, and with the same results.

Both  times  showed:    Windows Update error 80070308 (which provides NO help at all).

The only other “Important update” is for a May update,  PREVIEW of Security & Quality Rollup for NET framework 3.5.1, 4.5.2, 4.6,4.6.1, 4.6.2, 4.7 on Win 7 and Server 2008 R2 for x64.  This is KB4019112.  From May 2017.    I think there is a “newer” one for this, however it is not on either list (not the Important, nor the Optional).

I had problems with the catalog DL & installs , and never was able to return to getting this one updated.   Is it “safe” to update this one now?   I have no other updates other than the “Optionals”pending, and one of those is a “PREVIEW” (which I would not touch).

I even looked into the “Windows Update Service”, and it appears that it isn’t responding to “anything”  (either stop or restart), so I’m not certain there is a problem there or not (I think that the first time I had difficulty was with 2 “catalog updates” and I felt that this was the problem .  I never did get those Catalog Updates, and have not been able to get back online until after the failures in April (29th) and May (est. 29th) 2017.   I thought that the “May cumulative update” could possibly be the answer, however I had the same problem with the “catalog update” in May as I did in April.

I realize this is a very convoluted and “disjointed” situation, however I would like to try to DL & install the NET Framework update from May 2017 (if it is “safe”).   Any and all recommendations will most certainly be appreciated.   Thank you, as always for your invaluable assistance.   I’ve never had a problem with any NET Framework updates in the past.

Win 7 x64, (trying to get into Group A, after following the Group B unsuccessfully).   Your vast knowledge, and expertise are appreciated by everyone who consistently utilizes it.  Thank you once again.       

 

Reply | Quote

Up until September 12, it is safe to install any CHECKED update in the “important updates” list.

Do not check anything that is not already checked. That includes everything on the “optional updates” list. Preview patches are not checked – do not check them.

1 user thanked author for this post.

walker

Reply | Quote

@PKCano:  Thank you for your advice.   I appreciate the advice, and will continue to adhere to it.  I hope that I can now attempt to deal with the “error message”.  It’s either that, or I cannot get the update, it appears.   Once again, thank you for taking the time to reply to my questions.  Sincerely appreciated, as always.   

Reply | Quote

Your error is listed at Windows Update Error Codes.

2 users thanked author for this post.

HiFlyer, walker

Reply | Quote

@MrBrian:  Thank you so very, very much for the link for this error message.  I have read the information, and it appears that the primary information is “not intended” for anyone other than Support Agents and IT Professionals.

I’m not certain I can follow all of the instructions provided by the “reference number” (KB947821).  The non-techs (such as I) are referred to 2 separate windows (“Win Update Troubleshooter”), and (“Fix Windows Update Errors”).  I will “try” and hope that this will resolve the insurmountable problem for me.   There was no reference to the “Update Service” under the “Services” file – – –    Is it supposed to be “running” or should I forget about that perhaps being part of the equation (I apologize, however I am REALLY, REALLY lacking in experience with computers).

I appreciate the  link you provided, and as soon as I possibly can, I will pursue these avenues when I receive your reply to my inane questions.  Thank you for your patience, outstanding knowledge, and amazing abilities.  Everyone here owes you, and the talented others our deepest gratitude for all of the help you provide.  Thank you once again.  

1 user thanked author for this post.

MrBrian

Reply | Quote

@walker: You’re welcome and thank you :).

If you start a new topic for your update issue, I can help there.

1 user thanked author for this post.

walker

Reply | Quote

@Mr. Brian:  You are most welcome, and “thank you” once again for your outstanding expertise and the wealth of information which you provide.   I must “admit” that I do not even know “how” to start a “new subject”.  If I knew I would definitely do it immediately.   The problems I’m  having are making updating a “true nightmare”.    Thank you again for being one of our “TRUE STARS” who has helped so many of us unceasingly.   

1 user thanked author for this post.

MrBrian

Reply | Quote

@walker: Near the bottom of https://www.askwoody.com/forums/forum/askwoody-support/windows/windows-7/ask-windows-7-questions-here/, you can fill in the title for your new topic, and your desired post text. If you can’t do it, I can make a new topic for you.

1 user thanked author for this post.

walker

Reply | Quote

@Mr.Brian:  Thank  you so much for the link to the “Forums Questions”.    I will try to give it a name which will be relevant to the “one” error code which has been the one which has been blocking me from getting the KB4034664 successfully installed (since PKCano has indicated that the .NET ones can be ignored).   I hope that posting this will help, and in the interim I will try to begin to follow the guidelines you provided for computer illiterates such as I.   Thank you again, so very, very much.    I sincerely appreciate your invaluable help.   

Reply | Quote

 

@Mr.Brian:    I’ve set up the new topic, and hope that it will help.   I am already having a problem with following the “REFERENCES”  because I “do not have the following which is referenced for my Win7 x64 and both of the links show these icons which I do not have on this computer.   (This is the information that appears when I click on kb947821).

Right-click the <strong class=””>Network

I do not have either icon referenced. I was only able to copy one of the icons, not both because they came out very large.   These are supposed to connect to the network.    Here is the one I was able to copy:

<strong class=””>

icon in the notification area, and then select Troubleshoot problems.

 

 

<li class=””>Follow the steps in the wizard to diagnose and resolve your network problems.
1. Run Windows Update again.

I do not have either of these icons on the desktop, and this is not a laptop.  It is referencing Network Connections.  I do not have either of these icons in the task bar, so I cannot go any further.   Both of the options show that I need to find these icons, and I do not have them.  Do you have any ideas as to the reason I do not have these icons in the task bar?

I did navigate to one site that reflected that I “DO NOT HAVE BACKUPS”….   Is this something that I should change?

I was afraid I would have a problem or two, however I can’t seem to even get off the ground.  Any and all advice is always most appreciated.   I can’t determine the reason it is showing these icons which I have NEVER had on this desktop computer.   Yes, I’m as “ignorant” as ever, I’m sorry to say.    Thank you for your advice, guidance, and help, as always.

Reply | Quote

@PKCano:  This is about the KB4034664  update – – – –  I started another topic on the problem I’ve had trying to get this update installed, however since everything was “down” for a while, I don’t know if the “new topic” is still there.

I have tried everything I could think of to get this update installed, including going to the MS  Catalog and trying to install the update that appears to be the one (with the R2008 reference). It’s a Win 7 64x.  No matter what I have attempted (using the one on the “Important Update” list), and now trying to use the Catalog DL.  Everything comes up as “Failed”, or this update was not installed.    I tried the DL from the catalog stopping the “the Update Service”, and also NOT stopping the “Update Service”, and it makes no difference.

I will attempt to read further to determine is there may be another option.  I successfully installed the MSRT, and WD updates with no problems at all.  If there is any other option try, I am not aware of it.  Thank you for all of the help you continue to provide.   It is truly invaluable, and very much appreciated.

Reply | Quote

You were working with @MrBrian and your topic is here

https://www.askwoody.com/forums/topic/error-code-80070308-prevents-kb4034664-update-install/

1 user thanked author for this post.

walker

Reply | Quote

@PKCano:  Thank you so much for providing the link.   I see that my last message didn’t go through, however I hope that there was enough to relay the message  to Mr. Brian, that I was (and am) totally unsuccessful with everything that I attempted.

Thank you for your help in locating that “Topic”.   I could not find it.   Once again, I say “thank you” for your outstanding help, expertise, and kindness in sharing your knowledge with those, such as I, who do not possess sufficient computer skills.  

Reply | Quote

Thank you so much for your info. I will  save it for the future. After over 3 hours of showing pending in history, it by itself is now showing successful. I have never had an update that acted like this. Have no idea what was happening.

Thanks to all of you people on this board for the help and insight that you so freely give us that are not so knowledgeable.

Reply | Quote

Any time

Reply | Quote

@PKCano:   I found an e-mail referencing one from you, however I’ve not been able to locate it.  Here is a copy of the message:

0x80070308

kb947821

System Update Readiness tool

Post Link: https://www.askwoody.com/forums/topic/ms-defcon-3-get-your-august-patches-installed/#post-132789

     ********************************************

I had another message all ready to send, and then realized I had not logged in and after I logged in, my message disappeared, so I hope I can get it written again without any typos.

I did try to DL & install the “Important”, “checked”, update which is dated May 2017.   This is KB4019112.   I was not able to get to the computer to get it installed, and now the update listed remains as it is listed (for MAY).

This update was listed in July as being KB4032113, and because I couldn’t get any updates done, that one apparently was replaced by the “May 2017 update KB referenced now”.  I attempted twice to DL & install the MAY update which is listed as “Important” and “checked”.   It FAILED both times with the same error code as was referenced on my OTHER failure  (error code 80070308). This one was for KB4034664

Under the circumstances would it be best to “hide” this one?   There is a remote possibility that I can understand the directions provided my Mr.Brian, however I’m not certain I can manage to do what is necessary for “non-tech” people.

I will “try” to follow the directions provided by Mr.Brian, and hope that I will find some success which may allow me to be able to DL & Install both of these updates.  Thank you once again for all of your help.   It is sincerely appreciated.

Reply | Quote

KB4019112 and 4032113 are .NET patches, not Windows patches. Just ignore them for the moment. Don’t hide anything.

KB4034664 is the August Monthly Rollup. Follow the instructions given by @MrBrian as they are the same ones I would give for the error code 80070308.

1 user thanked author for this post.

walker

Reply | Quote

@PKCano:  Thank you for your very helpful message relevant to the impasse I have found myself in!  I appreciate your guidance with matters of which I am “totally ignorant” (and that is a true euphemism).     Knowing that I should just ignore the .NET patches helps me so much.  One less headache.

I will follow Mr.Brian’s instructions “to the letter” and hope that I can extricate myself from an untenable position (since I am not a “computer literate” {putting it mildly} person).

You and Mr.Brian are “TRUE STARS” for those of us who feel totally “lost in the wilderness. Thank you once again for all of the help you provide to us all.   

 

 

 

Reply | Quote

Update appears to have gone OK.

Does anyone know if the CVE-2017-8620 | Windows Search Remote Code Execution Vulnerability has been fixed in these updates?

Thanks.

Windows 10 Home 22H2, Acer Aspire TC-1660 desktop + LibreOffice, non-techie

Reply | Quote

Looks like it was fixed in August 2017.

1 user thanked author for this post.

samak

Reply | Quote