MS-DEFCON 3: No rush, but you should get the January Patch Tuesday patches installed

Topic

New Reply

Usually I wait until near the end of the month before giving the all-clear to install Microsoft’s Patch Tuesday patches. This month’s different. On th
[See the full post at: MS-DEFCON 3: No rush, but you should get the January Patch Tuesday patches installed]

17 users thanked author for this post.

deuce120, dgreen, Win7and10, ch100, LHiggins, Pepsiboy, Pierre77, Morty, abbodi86, SueW, CAS, rontpxz81, CyGuy, AmbularD, jburk07, AJNorth, fernlady

Reply | Quote

Replies

Windows 7 Users – please read this BEFORE applying January patches.

15 users thanked author for this post.

deuce120, Win7and10, KWGuy, byteme, Morty, abbodi86, rontpxz81, Nibbled To Death By Ducks, jburk07, AJNorth, PDX5802, Myst, woody, fernlady, Pim

Reply | Quote

I started pushing January updates earlier this week. Nothing to report so far with around 30% of our systems having been updated.

We still have around 100 windows 7 systems despite me mentioning the situation several times last year to my superiors. We just started replacing all windows 7 systems but it will be a while before we are done.

I haven’t had any calls so far on the desktop wallpaper issue. I guess no one is stretching their desktop photo….. shrugs.

Red Ruffnsore

1 user thanked author for this post.

jburk07

Reply | Quote

Thanks Woody.

Do I assume that the unusually early recommendation to install this month is really in respect of Windows 10 users? It seems to relate to a possible vulnerability that doesn’t apply to previous versions.

Reply | Quote

As usual, it applies to all versions.

The Win8.1 Monthly Rollup is puny.

The Win7 Monthly Rollup and Security-only have the Stretch bug. It’s a pain in the neck, but @PKCano has full preventive measures, if you’re concerned.

1 user thanked author for this post.

Win7and10

Reply | Quote

Thanks again Woody.

I should clarify my previous poorly worded comment. I realise the raised defcon is for all versions, I was trying to make the point that the its early lifting seemed to be triggered by the threat that applies only to Windows 10. There doesn’t seem to be any greater urgency than usual for other versions to be updated.

Reply | Quote

Thanks for the DEFCON change. 14 day deferral is putting a mini-pause on mine (until next Tuesday the 28th), so I’ll be waiting – though I don’t anticipate any issues. As you’ve stated, Woody, this month has been fairly benign, at least for Win10 users.

Reply | Quote

Thanks for the advice given along with the new DEFCON setting. I plan to keep Windows 7 offline until there has been more time to asses the situation, then I shall install whichever patches seem useful and trouble-free. Until then, I’ll exercise the options I have made ready, some time ago, for the post-EOL&EOS Age finally upon us. So I’ll be working online, for now, using only the Mac and, on the PC, only Linux, installed in dual-boot with Windows.

Ex-Windows user (Win. 98, XP, 7); since mid-2017 using also macOS. Presently on Monterey 12.15 & sometimes running also Linux (Mint).

MacBook Pro circa mid-2015, 15" display, with 16GB 1600 GHz DDR3 RAM, 1 TB SSD, a Haswell architecture Intel CPU with 4 Cores and 8 Threads model i7-4870HQ @ 2.50GHz.
Intel Iris Pro GPU with Built-in Bus, VRAM 1.5 GB, Display 2880 x 1800 Retina, 24-Bit color.
macOS Monterey; browsers: Waterfox "Current", Vivaldi and (now and then) Chrome; security apps. Intego AV

Reply | Quote

Installed

KB4536952 didn’t need to restart but did it anyway
KB4534310 restarted and wallpaper was fine, course I had it set to “fill”.
KB4535102 & KB 890830

No problems as far as I can tell.

Windows 11 Pro
Version 23H2
OS build 22631.4890

6 users thanked author for this post.

dgreen, Lars220, rontpxz81, Nibbled To Death By Ducks, Myst, jburk07

Reply | Quote

[WildBill]

As you said, Woody, Win7 & Win8.1 aren’t affected by CurveBall. Glad I’m still on 8.1… & haven’t rushed to Win10 yet. Probably will wait until Win10 2004 has marinated for 3-6 months before upgrading… or more, based on your say-so, Boss!

As for updating Win8.1, I can wait until tomorrow… no rush & too lazy to start now.

Bought a refurbished Windows 10 64-bit, currently updated to 22H2. Have broke the AC adapter cord going to the 8.1 machine, but before that, coaxed it into charging. Need to buy new adapter if wish to continue using it.
Wild Bill Rides Again...

• This reply was modified 5 years, 1 month ago by WildBill. Reason: Added to post; forgot

Reply | Quote

 

Version 1903 installed it yesterday. I’m Showing KB4532938 .Net update and KB 4516115 adobe flash update. I don’t know why when it updated after the install it didn’t catch these two. Anyone see any red flags regarding these 2 updates or should I go ahead with them?

Reply | Quote

The KB4532938 .Net was part of the Jan Patch Tues updates.
The last KB 4516115 Flash update listed in the Catalog was Sep. 9/9/2019. Perhaps you missed that one? Should be OK to install.

Reply | Quote

Thanks PK…will do.

Reply | Quote

To “celebrate” the end of the Win 7 WU era, I did something I have never, ever done…I activated the “Install Updates Automatically (Recommended)” option!  I figured I had little to lose and by letting Windows Update handle it, I wouldn’t have to worry with the SSU before or SSU after question.

Interestingly, the automated process did it’s thing and successfully installed KB4535102 (Net FW CU), MSRT, and Win Defender definitions.   It also attempted, but FAILED, to install KB4534130 (Jan ’20 CU).  Then, KB4536952 (Jan ’20 SSU)  appeared by itself as an important update.  I manually installed the SSU and allowed the automated process to take over once again.  KB4534130 installed successfully without a glitch.

So, as far as the WU auto process is concerned, the SSU must (still) be installed first.

Three more W7 machines to go…one last timed!

5 users thanked author for this post.

dgreen, TaskForce141, woody, Myst, jburk07

Reply | Quote

Please correct me if I’m mistaken, but now that you’ve changed that setting won’t all updates that you’ve intentionally avoided in the past get installed automatically? Other than those that have been superseded, that is.

1 user thanked author for this post.

Charlie

Reply | Quote

I’m about 97% certain that the answer to this question is yes.  It’s one of the main reasons why I’ve only done Security Only updates since MS started these massive Rollups which may contain many things you don’t want.

Thanks for asking that question.  I thought someone else would have answered it by now.

Being 20 something in the 70's was far more fun than being 70 something in the insane 20's

Reply | Quote

I am running Win 10 Pro version 1903. The last Windows update I did was on Jan. 11 to install the December patches. I had paused updates after that to delay the January updates. A few minutes ago I ran Windows Update to check for updates in order to install the January patches and it said ‘You’re up to date.’ When I went to update history, it showed only the updates that I did on Jan. 11, which included the December cumulative patch.

Does anyone have any ideas about why my system is not finding the January patches to install?

Reply | Quote

If updates are Paused, it is telling the computer not to show pending updates until the Pause period is over. So, when Paused, and you search for pending updates, they are not there.

With the Pro Edition, you can set the Quality deferral to 0 and in Group Policy you can set the Automatic Update to a value of 2 (notify download/install). That way, the pending updates are displayed in the queue but do not download until you click on “Download.”
In the Home Edition, you do not have this capability, only Pause, which gives you no way to see the pending updates until the Pause period is over.
But at least, you are protected from immediate install of (possibly bad) patches the first day they are released. That’s why you read reports on AskWoody – to see when it’s safe to end the Pause period.

3 users thanked author for this post.

abbodi86, rontpxz81, jburk07

Reply | Quote

Kobac wrote:

I had paused updates after that to delay the January updates. A few minutes ago I ran Windows Update to check for updates in order to install the January patches and it said ‘You’re up to date.’

PKCano wrote:

If updates are Paused, it is telling the computer not to show pending updates until the Pause period is over. So, when Paused, and you search for pending updates, they are not there.

You can’t check for updates while updates are paused.

2 users thanked author for this post.

woody

Reply | Quote

PK, I have a similar problem in ver. 1903 Pro. I don’t have Paused set, yet checking for updates finds nothing  Advanced options/Pause updates shows “Pause until/Select date”, which I think means that I have chosen not to pause. But Quality updates shows 15 days grayed out. How do I change that to zero? It has always been at “15” grayed out.

Or will Windows eventually find the latest updates, but when?

 

Reply | Quote

As long as you have a deferral set for Quality Updates, you will see no Monthly CUs. The system is doing what you asked it to do – not offer you updates for 15 days.

That is grayed out because you have the settings in Group Policy. Take a look at the settings I use (and the reasons I set them that way). If you use these settings, you should have no further problems. Semi-Annual Channel is no longer an option. GUI settings (you will have to undo your current GP settings under Windows Update and Windows Update for Business first so the pulldowns are not grayed out) and Group Policy setting. There should be only that one setting in Group Policy, everything else should be default.

Disconnect from the Internet before you make the changes so you don’t initiate Updates till you are ready.

4 users thanked author for this post.

Kobac, Lars220, cmar6, jburk07

Reply | Quote

PKCano, I had Defer Quality Updates set to 30 days. Once I set it to zero under my Admin account (I usually work as a Standard user), the January updates showed up and I installed them. Following your recommendation, I also used the Group Policy Editor to enable Configure Automatic Updates and selected 2. Notify for download and auto install.

This is only my second time running Windows Update under Windows 10 on my new PC. I had no issues with the December patches since the 30-day deferral for Quality Updates was past when I installed those updates, which came out on December 10, on January 11.

Thanks for your help!

Reply | Quote

[Nibbled To Death By Ducks]

Reporting in…installed:

2020-01 Security Monthly Quality Rollup for Windows 7 for x64-based Systems (KB4534310)

Installation date: ‎1/‎24/‎2020 6:54 PM

2020-01 Security and Quality Rollup for .NET Framework 3.5.1, 4.5.2, 4.6, 4.6.1, 4.6.2, 4.7, 4.7.1, 4.7.2, 4.8 for Windows 7 and Server 2008 R2 for x64 (KB4535102)

Installation date: ‎1/‎24/‎2020 6:30 PM

Windows Malicious Software Removal Tool x64 – January 2020 (KB890830)

Installation date: ‎1/‎24/‎2020 6:52 PM

…aaaand (drum roll) no ill effects so far…I even had a custom wallpaper background, but thanks to this site, it was set on “Fill”!

<SFX: raspberry to Redmond>

Time, usual 45 minutes start to finish. I’ll wait a day or so, then clean up the mess it always leaves behind, SOP.

Even decided to poke the bear in his cave and checked for updates again, and it wants to install SSU:

2020-01 Servicing Stack Update for Windows 7 for x64-based Systems (KB4536952) !!

I guess the saga continues!

Win7 Pro SP1 64-bit, Dell Latitude E6330, Intel CORE i5 "Ivy Bridge", 12GB RAM, Group "0Patch", Multiple Air-Gapped backup drives in different locations. Linux Mint Greenhorn
--
"The more kinks you put in the plumbing, the easier it is to stop up the pipes." -Scotty

• This reply was modified 5 years, 1 month ago by Nibbled To Death By Ducks.

3 users thanked author for this post.

Lars220, LHiggins, jburk07

Reply | Quote

OK, rebooted and ran WU AGAIN, and everything is up to date, green shield and all.. Wonder why they throw so many SSU’s at you? This one is supposed to ” Provide a robust and reliable servicing stack, etc.” and is dated Jan 14th:

2020-01 Servicing Stack Update for Windows 7 for x64-based Systems (KB4536952)

Installation date: ‎1/‎24/‎2020 10:24 PM

Installation status: Successful

Update type: Important

==========

This is all so hard to keep track of…This one came out of left field at me, wasn’t expecting it, but I have a bad habit of not re-running WU after installing patches until clear…a habit I just broke!…Hm! Food for thought!! Instead of the official statement, how about “Provide a completely confusing series of SSU’s which will leave you spinning on your ear,” eh?

Maybe that Raspberry WAS heard in Redmond…<Stage Direction: chews nails, looks around…>

Win7 Pro SP1 64-bit, Dell Latitude E6330, Intel CORE i5 "Ivy Bridge", 12GB RAM, Group "0Patch", Multiple Air-Gapped backup drives in different locations. Linux Mint Greenhorn
--
"The more kinks you put in the plumbing, the easier it is to stop up the pipes." -Scotty

1 user thanked author for this post.

Charlie

Reply | Quote

i can wait for one week or so. as i have read, this nsa thingamajigs doesn’t affect windows 7, i have time.

and my 8.1 notebook won’t be powered on until february, so on a not running computer there is also no risk at all. so next time i power on that notebook, it’s early enough to patch it… 😀

 

another question: do i need that january ssu as i’m not getting any updates anymore? and in which order? is january ssu to be installed LAST like december ssu?

PC: Windows 7 Ultimate, 64bit, Group B
Notebook: Windows 8.1, 64bit, Group B

Reply | Quote

If you are using Windows Update to update, just let Windows Update handle it. It has worked for me 8 times on my own machines.

2 users thanked author for this post.

jburk07, woody

Reply | Quote

PKCano wrote:

If you are using Windows Update to update, just let Windows Update handle it. It has worked for me 8 times on my own machines.

as i’m still group b i can’t use windows update for anything other than office, msrt and .net updates, so i’m concerned about order. for windows and ie patches, for these i’m following https://www.askwoody.com/forums/topic/2000003-ongoing-list-of-group-b-monthly-updates-for-win7-and-8-1/

PC: Windows 7 Ultimate, 64bit, Group B
Notebook: Windows 8.1, 64bit, Group B

Reply | Quote

If you are downloading the SSU from the Catalog, you can install the SSU first. To be sure it’s installed, you should wait after install until the activity drops, reboot (yes, I know it doesn’t say it’s required), than wait again until the activity drops before you install the SO and IE updates.

The only difference between the Group A Rollup and the Group B SO/IE CU is the non-security component of the Rollup, which also contains the SO and IE CU. I suspect it would also work if you install the SSU last, as that’s the way it happens using WU.

FYI, the SSU is available through WU if the Important Updates queue is empty, ie, everything (checked or unchecked) there is either installed or hidden.

Reply | Quote

PK:  Could you please answer this question for me?  I have Windows 7 and am in Group B.  I completely forgot about the SSU this month,  because I didn’t see anything in Woody’s Computerworld article about an SSU for this month.   I installed the SO and IE January updates from the Microsoft Catalog,  and my Windows Update history shows that they installed successfully.  Now I’m ready to install the Office Updates and the .NET Framework update,  and I decided to check first to see if there is an SSU for January,  and I found that there is one,  namely KB4536952.   What should I do at this stage?  It appears I have three options to choose from:    (1) Should I go back and uninstall the SO and IE updates,  then install the SSU,  and then re-install the SO and IE updates,  and then finally install the Office and .NET Framework updates?   (2) Or on the other hand,  can I leave the SO and IE updates installed as they are,  then install the SSU,  and then finally the Office and .NET Framework updates?   (3) Or,  as a third option,  should I leave the SO and IE updates installed as they are,  then install the Office and .NET Framework updates,  and then install the SSU last?    Those are the three options that come to my mind,  and I would appreciate it if you could tell me which option I should choose.

Reply | Quote

Leave the SO and IE update as is. I assume you have already hidden the Rollup.
You can Either:
+ Temporarily hide the Office and .NET patches so that there are no more updates in the Important list. Once Important Updates is empty, a search for updates should produce the the SSU. Install it, wait 5 min, reboot (even it didn’t ask you to). Then unhide the Office and .NET and install them.
OR
+ Install the Office and .NET updates, reboot, and install the SSU when it shows up after the reboot. This is the way it happens if Windows Update is on automatic and the sequence I have used (SO/IE or Rollup, same difference).

2 users thanked author for this post.

L95, abbodi86

Reply | Quote

Office and .NET updates do not need SSU, so just install them before it or after it

1 user thanked author for this post.

L95

Reply | Quote

honx wrote:

do i need that january ssu

If MS decide to release a patch for a critical flaw then you may need the SSU. I’d install it.

cheers, Paul

4 users thanked author for this post.

SueW, CADesertRat, jburk07, woody

Reply | Quote

Kobac wrote:

I had paused updates after that to delay the January updates

Have you changed the pause to 0 ? If there is a pause Windows Update won’t show any new updates.

1 user thanked author for this post.

Kobac

Reply | Quote

[Kobac]

Please see my post to PKCano. I had Quality Updates deferred for 30 days. Once I set that deferral to zero, all was fine.

Pause was NOT on.

• This reply was modified 5 years, 1 month ago by Kobac.

Reply | Quote

FYI… The link in last sentence in Computerworld article is wrong.

<i>We’ve moved to MS-DEFCON 3 on the</i> <i>AskWoody Lounge</i><i>.</i>

Leads to: https://www.askwoody.com/2020/ms-defcon-5-get-your-systems-patched/

Reply | Quote

Ay yay yay. Sorry about that. I’ll get it fixed….

1 user thanked author for this post.

Julia

Reply | Quote

I run Win10 1809 Pro with update deferral 365/30 via gpedit.msc. (Not upgrading to 1903 yet.)

Woody advises to install the January Patch Tuesday patches, but to my knowledge this means in case of 1809 only update KB4534273. (Apart from .NET updates.)
However, according to https://borncity.com/win/2020/01/23/windows-10-v1809-install-error-with-update-kb4534273/ this update can cause install error loops, which would leave no update to install in case of 1809 – for the moment.

Am I right in assuming so?

MintDE is my daily driver now. Old friend Win10 keeps spinning in the background

Reply | Quote

I only have one 1809 (Pro) machine. I updated it yesterday with Jan patches (all offered) with no problems.
One machine is a very small sample.

1 user thanked author for this post.

TJ

Reply | Quote

Hey TJ, I installed KB4534273 on my 1809 Home machine a few days ago and didn’t run into any issue either during installation or after.

1 user thanked author for this post.

TJ

Reply | Quote

[geekdom]

Windows 10 is patched, remains online, and in use.

Windows 7 will be patched offline using Microsoft Update Catalog files. It will remain offline, but in use and up-to-date as much as possible. A spare working computer is always useful.

The Master Patch List here is going to be very helpful in identifying Windows 7 patches.

Microsoft Windows 7 changes are in flux.

On permanent hiatus {with backup and coffee}
offline▸ Win10Pro 2004.19041.572 x64 i3-3220 RAM8GB HDD Firefox83.0b3 WindowsDefender
offline▸ Acer TravelMate P215-52 RAM8GB Win11Pro 22H2.22621.1265 x64 i5-10210U SSD Firefox106.0 MicrosoftDefender
online▸ Win11Pro 22H2.22621.1992 x64 i5-9400 RAM16GB HDD Firefox116.0b3 MicrosoftDefender

• This reply was modified 5 years, 1 month ago by geekdom.
• This reply was modified 5 years, 1 month ago by geekdom.

1 user thanked author for this post.

SueW

Reply | Quote

Thank you, Woody, especially for the instructions at Woody On Windows.

Reply | Quote

Windows 10 1809 Home here. Already installed the January 2020 CU (KB4534273) and MSRT update (KB890830) a few days ago, after testing “vulnerable” in the SANS test. These two patches installed without problems and the system is running fine as far as I can tell.

At this time, I have only a couple of Office 2013 patches to install and the January 2020 Cumulative Update for .NET Framework 3.5, 4.7.2 and 4.8. Is there any pressing reason to install these or can I skip these for the time being? In particular, I’m wondering whether there is any substantial risk if I wait to install the .NET update: I was originally offered KB4535101 (released on January 14, 2020), but this patch has been superseded by KB4535669 (released on January 23, 2020) and I’d like to wait a bit more to install a patch released just two days ago and see if any bug report surfaces. Alternatively, would you advise manually installing KB4535101 from the MS Update Catalog?

Reply | Quote

Havent heard any reason to get in a hurry with those patches.
BTW, I never install the non-Security patches released between Patch Tuesdays. They are Previews/optional.

1 user thanked author for this post.

Berserker79

Reply | Quote

the dotnet patch seems updated. so I just cancel the approve of wsus and wait to see what happened.

Reply | Quote

Thanks PK! I never install the optional updates myself. I might be mistaken, but the KB4535669 .NET update does not show up as optional on my system: apparently it has entirely replaced KB4535101.

Reply | Quote

Yes, I see that is correct. Strange a C or D week patch supersedes The Patch Tues update.

Reply | Quote

.NET updates in 1809, 1903 and later are chained by CBS package, just like general cumulative updates

meaning, each new .NET CU will auto-supersede previous one, regardless if security on not

i wish they backport this chain way to Windows 8.1 at least

2 users thanked author for this post.

jburk07, PKCano

Reply | Quote

PKCano wrote:

As long as you have a deferral set for Quality Updates, you will see no Monthly CUs. The system is doing what you asked it to do – not offer you updates for 15 days.

That is grayed out because you have the settings in Group Policy. Take a look at the settings I use (and the reasons I set them that way). If you use these settings, you should have no further problems. Semi-Annual Channel is no longer an option. GUI settings (you will have to undo your current GP settings under Windows Update and Windows Update for Business first so the pulldowns are not grayed out) and Group Policy setting. There should be only that one setting in Group Policy, everything else should be default.

Disconnect from the Internet before you make the changes so you don’t initiate Updates till you are ready.

As usual, superb tech support from PK. Even though my membership expires in 10/2020, I just extended it for an additional year, this time at mid level. You cannot beat PK’s expertise. He is Woody’s secret weapon against Windows confusion.

For mysterious reasons, GP did not have the correct settings in “Configure Update” or in Business Updates/Quality updates.

2 users thanked author for this post.

woody, PKCano

Reply | Quote

I installed all the patches and the servicing stack update, yesterday, without any problems. I did not install kb4525760 because of the issues connected to it. (Born’s Tech, and others, seem to say that the problems seem to relate to v 1909.) Am I  safe to install it on Win 10 Pro , v. 1903 build: 18362?

Reply | Quote

Win10 v1903 anf v1909 have the same core, are offered the same CUs and SSU through Windows Update.
The difference is evident in the Build numbers: v1903 is Build 18362.xxx and v.1909 is Build 18363.xxx. The difference is the Feature pack is turned on in v1909 and is NOT turned on in v.1903. Otherwise, they are basically the same.
So you will see the same KB numbers for both.

Reply | Quote

CAS wrote:

Am I  safe to install it on Win 10 Pro , v. 1903 build: 18362?

Yes. (It’s KB4528760)

1 user thanked author for this post.

CAS

Reply | Quote

My bad, b, about the patch number. Sometimes my finger slips on the keyboard and I hit the 5 instead of the 8  Nonetheless, I appreciate your reply and will install the patch and hope for the best.

1 user thanked author for this post.

b

Reply | Quote

I got my first 0patch update .  They beat out MS  on some problem MS is still working on.   The patch didn’t cause any problems.

5 users thanked author for this post.

Win7and10, David F, LHiggins, jburk07, Cybertooth

Reply | Quote

I just updated my Lenovo (Win10 1903 Pro). All is well.

1 user thanked author for this post.

jburk07

Reply | Quote

PKCano wrote:

If you are downloading the SSU from the Catalog, you can install the SSU first. To be sure it’s installed, you should wait after install until the activity drops, reboot (yes, I know it doesn’t say it’s required), than wait again until the activity drops before you install the SO and IE updates.

The only difference between the Group A Rollup and the Group B SO/IE CU is the non-security component of the Rollup, which also contains the SO and IE CU. I suspect it would also work if you install the SSU last, as that’s the way it happens using WU.

FYI, the SSU is available through WU if the Important Updates queue is empty, ie, everything (checked or unchecked) there is either installed or hidden.

thx, as i never downloaded ssu from catalog (always installed it using wu), i’ll install it last.

so first group b patches will be installed, then office, msrt and so on and then ssu.

PC: Windows 7 Ultimate, 64bit, Group B
Notebook: Windows 8.1, 64bit, Group B

Reply | Quote

[Charlie]

honx wrote:

so first group b patches will be installed, then office, msrt and so on and then ssu.

This will be okay IF you are talking about the December 2019 MS updates.  You will need the latest SSU – KB 4531786 installed before you do the January 2020 MS updates.

Where you get the SSU – WU or MS Update Catalog, it makes no difference.

 

Being 20 something in the 70's was far more fun than being 70 something in the insane 20's

• This reply was modified 5 years, 1 month ago by Charlie.

Reply | Quote

[Charlie]

Charlie wrote:

honx wrote:

so first group b patches will be installed, then office, msrt and so on and then ssu.

This will be okay IF you are talking about the December 2019 MS updates.  You will need the latest SSU – KB 4531786 installed before you do the January 2020 MS updates.

Where you get the SSU – WU or MS Update Catalog, it makes no difference.

 

• This reply was modified 5 years, 1 month ago by Charlie.

no, i’m talking about january ssu which only will be available after update queue is empty. so i’ll have to install windows patches and office patches first. and pkcano also said, that ssu would be last if i would use windows updates for installing everything (including win and ie monthly rollups)…

kb4531786 from december already is installed, it was last after december patches. so i’m gonna repeat the order i did in december (win, ie, office, msrt, … ssu for january). here i documented my installation order for december patches: https://www.askwoody.com/forums/topic/ms-defcon-5-get-your-systems-patched/#post-2054745

PC: Windows 7 Ultimate, 64bit, Group B
Notebook: Windows 8.1, 64bit, Group B

Reply | Quote

abbodi86 wrote:

.NET updates in 1809, 1903 and later are chained by CBS package, just like general cumulative updates

meaning, each new .NET CU will auto-supersede previous one, regardless if security on not

i wish they backport this chain way to Windows 8.1 at least

i am confused now. what’s the situation of current dotnet patch? I didn’t see any preview wording in wsus or kb description. it this a preview patch or re-released official January patch we should apply?

Reply | Quote

There is no Preview wording. The patch is not Preview.
According to @abbodi86 ,the .NET patches are cumulative and each one supersedes the past ones.
To the latest is the current patch to install in order to be up to date.
Install the patches when it is clear there is no problem with them (meaning, you may want to wat a few days and see if there is any problem report).

1 user thanked author for this post.

tbsky

Reply | Quote

Windows 7, Group A & B

Just trying to clarify if it’s SSU first or last this month.

For Group B:
– the Jan 2020 security only update KB4534314 notes reccommend installing the Jan 2020 SSU KB4536952 after.
– the Jan 2020 IE cumulative update KB4534251 notes reccommend installing SSU first, but the MS link provided takes you to the Nov 2019 SSU.

Reading through the thread I see that people have installed it first and last for Group A & B with no problems, from catalogue and WU, so is this the month we can install the SSU in any order.

Reply | Quote

It doesn’t matter the order as long as you install the SSU by itself.
If you install it first, wait 5 min to let the install complete, then reboot before installing the rest (even if it doesn’t tell you to reboot).
If you install the other patches first, reboot before you install the SSU.

4 users thanked author for this post.

Myst, derma, jburk07, SueW

Reply | Quote

fernlady wrote:

Installed

KB4536952 didn’t need to restart but did it anyway
KB4534310 restarted and wallpaper was fine, course I had it set to “fill”.
KB4535102 & KB 890830

No problems as far as I can tell.

Performed the same on 3 PCs running Windows 7 Home Premium x64. After usual restart KB4536952 appeared and was installed. No problems to report.

Please note I did remove the advisory for IE11 before installation but have not replaced it. SFC /SCANNOW  gives errors with it installed.

Also installed 2 updates for Office 2010 (32 Bit) – KB 4484243 and KB4484236 on just 1 PC at the same time.

 

3 users thanked author for this post.

Win7and10, jburk07, Myst

Reply | Quote

I have been in group B for my Win 7 Ultimate pc for many years now by always following the advice on this forum.

I am strongly considering signing up and paying with the  0 patch so I can keep using this computer. I have valuable, irreplaceable software on here.

My question is this: for the January patches I would normally install the SSU, then the SO and IE11 (well that was the order I used in Dec. I obtained the SSU from the Microsoft catalog rather than WU) I have never installed a Group A Security Monthly Quality update on this or any of my pc’s.

Now in order to sign up with 0patch I thought I read that one has to go group A and  install the Security/Monthly  Quality Rollup (kb4534310). Is this true? And I am assuming I also need to install the SSU kb4531786 as well.

Thank you so much for the advice. I am hoping for the best with 0patch and hope to sign up with them right after these last patches

Reply | Quote

Yes, using 0patch requires the installation of the Rollup. Basically the same requirements for obtaining the MS Extended Support Updates. Please read the documentation on their website.

2 users thanked author for this post.

jburk07, LHiggins

Reply | Quote

anonymous wrote:

I am strongly considering signing up and paying with the  0 patch so I can keep using this computer. I have valuable, irreplaceable software on here.

Or take regular backups, keep your anti virus up to date and run a regular malware scan, plus don’t ever use IE. Or both – what would it cost you if you lost the software / data.

cheers, Paul

3 users thanked author for this post.

Fritz, jburk07, Myst

Reply | Quote

Paul T wrote:

anonymous wrote:

I am strongly considering signing up and paying with the  0 patch so I can keep using this computer. I have valuable, irreplaceable software on here.

Or take regular backups, keep your anti virus up to date and run a regular malware scan, plus don’t ever use IE. Or both – what would it cost you if you lost the software / data.

cheers, Paul

My brother has a Windows 7 PC which I blocked from upgrading to Windows 10. I am going to pay for 0Patch for his PC.

2 users thanked author for this post.

jburk07, LHiggins

Reply | Quote

Re: No updates

I have a brand new computer that shipped with Windows 10 Pro version 1809. Yesterday was the first day that I was connected to the internet (other than briefly prior to that to download Macrium Reflect Free).

Windows Update states “No updates available. We’ll continue to check daily for newer updates. Your device is missiong important security and quality fixes.”

In the advanced options my settings are:

Give me updates for other Microsoft products when I update Windows. On
Automatically download updates, even over metered data connections (charges may apply). Off
Show a notification when your PC requires a restart to finish updating. On
Pause updates. Off
Semi-Annual Channel
Feature update deferral. 180 days
Quality update deferral. 0 days

I have not clicked the “Check for updates” button in Windows Update. I thought that now would be a good time to let Windows Update update the computer automatically to version 1903 and install security and quality updates but nothing is happening.

Reply | Quote

280park wrote:

I have not clicked the “Check for updates” button in Windows Update.

Why not?

Reply | Quote

@b – I have not clicked the “Check for updates” button because I am following Woody’s procedure for moving Windows 10 Pro version 1809 to version 1903 outlined in his November 25, 2019 Computerworld article.

https://www.computerworld.com/article/3481617/running-win10-version-1803-or-1809-you-have-options-heres-how-to-control-your-upgrade.html

In step 3 he states, “Don’t do anything else. In particular, don’t click ‘Check for updates.’ Just use your PC as usual, possibly turning it off then on again to awake the upgrade genie. You may have to wait a day, but sooner or later you’ll get upgraded to the version you’ve chosen.”

I don’t why Woody says not to click the “Check for updates” button.

Reply | Quote

Try lowering your Feature deferral to 140 days and wait for the computer to check for updates on its own.

Reply | Quote

@PKCano – As you suggested I reset Feature Deferral to 140 days, shut down the computer, and restarted it. I was going to write that I will wait to see what happens, but as I am writing this I see that Windows Update now has a long list of updates with a status indicator next to each one – getting things ready, downloading, pending install. I guess I will just let this process run its course without interrupting it. I will report back when it is finished.

Thanks very much.

Reply | Quote

@PKCano – After reducing the feature deferral from 180 days to 140 days as you suggested, Windows Update awoke and successfully updated Windows from version 1809 to version 1903 build 18362.592. I wanted to share what I observed as Windows Update went about its business and I wanted to ask you a question in the last paragraph about what update settings to use now.

Upon awakening Windows Update listed numerous updates including updates for Intel, HP (my computer is an HP), Realtek (my network adapter), and of course Windows, each with a status notification. Initially the status notifications indicated downloading. On my 3Mbps internet connection the downloading took six hours. After all of the status indicators reached 100% six of the status indicators indicated the respective updates were installing. Those six were as follows:

KB4516115 – Security update for Adobe Flash Player version 1809
KB4465065 – Update for Windows 10 version 1809 (Intel Microcode)
KB4535101 – Cumulative update for .NET version 1809
KB4486153 – .NET Framework 4.8 for version 1809
Malicious Software Removal Tool
Feature update version 1903

It took a long time for the feature update version 1903 status indicator to reach 100%, but once it did the computer automatically went through several restarts after which a checked a few things.

Update history shows just one update, the feature update version 1903 despite the fact that there were a couple of Intel updates in update history before I had ever connected the computer to the internet. Under Control Panel> Programs> Installed Updates only two updates are shown, KB4528760 (the January cumulative update for version 1903) and KB4528759 (the latest servicing stack). Under Control Panel> Programs shows several Intel and HP programs as being installed on January 26, the day that Windows Update awoke, even though I think many of those programs were installed when I first took the computer out of the box.

I have not connected to the internet since all of this updating. I have read your posts #1661966 (GUI settings) and #1662297 (Group Policy settings), but I am not yet comfortable using Group Policy or wushowhide. I have set feature deferral to 365 days to prevent getting updated to version 1909. How would you suggest that I set quality deferral and pause if I don’t use Group Policy and wushowhide?

Reply | Quote

I suggest you use the the settings as I recommended.
I do not use Pause b/c you have to install all the pending updates b4 you can use Pause again, you have to manually reset it each time you run updates, b/c when  the Pause period runs out you get the updates pushed,
If you use the settings I recommend, you can see what updates are pending, they do not download until you click the “download” button, because you can see them you have time to hide the ones you don’t want (like Drivers, microcode, etc), and you don’t have to reset anything every month.
I don’t recommend any other settings for Pro version than those, so if you don’t use them, you are free to choose whatever setting you think will work for you.

Reply | Quote

@PKCano – I understand your reasons for using Group Policy to better control the Windows Update function. Your screenshots and explanations are very instructive and helpful. Never having used a Pro version of any Windows edition I am just a little intimidated by this level of tinkering with Windows. I will reread your posts again.

Also in post #2087894 Woody says that he generally does not recommend using Group Policy to pause updates. I think I will ask him to elaborate on that statement.

But, as you said, in the end it comes down to a personal decision.

Thanks for all your help.

Reply | Quote

I only use that one Group Policy setting. It keeps the updates from downloading until I say so. The rest of the settings are in the GUI under Windows Update.

Reply | Quote

@PKCano – O. K. Thanks. I am still mulling all this over.

Reply | Quote

This is part of a message I sent to Woody. He asked me to post it here, so here it goes:

Hello Woody:

Even if for you it’s MS-DEFCON 3, for me it’s been MS-DEFCON 1 since last December.

Last month, I tried to install Windows 7 x64 cumulative update, and when I was asked to reboot, I just couldn’t. When trying to boot from Windows 7 partition, I was “greeted” with the following screen:

Admin. de arranque de Windows

No se pudo iniciar Windows. Es posible que un cambio de hardware o de software reciente sea la causa. Para corregir el problema:

1. Inserte el disco de instalación de Windows y reinicie el equipo.
2. Elija la configuración de idioma y después haga clic en “Siguiente”.
3. Haga clic en “Reparar el equipo”.

Si no tiene este disco, póngase en contacto con el administrador del sistema o el fabricante del equipo para obtener ayuda.

Estado: 0xc0000225

Información: Error al seleccionar el arranque; no se puede tener acceso a un dispositivo requerido

An approximate translation would be:

Windows start-up/boot-up administrator

Windows couldn’t start-up/boot-up. It’s possible for a recent software or hardware change to be the cause. To correct this problem:

1. Insert the Windows installation disk and restart the device.
2. Choose the language configuration and click on “Next”.
3. Click on “Repair this device”.

If you don’t have this disk, contact the system administrator or the device manufacturer to get help.

State: 0xc0000225

Information: Error when selecting boot-up; required device not accessible

Here I have to point out that I have a very particular partitioning structure on my hard drives (2 x 1TB units). The motherboard BIOS is set to “Legacy” (not “UEFI”) and I’ve manually created all the partitions (MBR, not GPT) using Acronis Disk Director boot CD. The first HDD unit is mainly for different operating systems and the second one, for documents and data (…). On the first drive I’ve set four primary (bootable) partitions according to this logic:
1. Windows XP boot loader + MS-DOS (FAT32, Active)
2. Extended partition containing several logical partitions for different flavors of Windows XP and the like (I used to have some Linux distros here, too, but I finally deleted them)
3. Windows 7 x64 Ultimate Spanish (NTFS)
4. Partition for experimenting with other systems (I ended up storing my emails here)

When I first installed Windows 7, I set the third partition as “Active” (bootable) with Acronis to install the system there without interfering with Windows XP boot loader on the first partition (I instructed the installer to use just the third primary partition and to put everything in there: boot files, system files, user accounts, etc.), and after having everything set up and running, I added Windows 7 to Windows XP boot loader (if you want to know how, just ask) and changed back the Active partition to the first one.

When I received the error message after installing December’s cumulative update, I had to set the third partition as Active to boot Windows 7 directly and with Windows 7 installation DVD I used a restore point I had manually created beforehand to undo all the changes.

Given the bad experience, I decided to hide the problematic update and wait for January’s latest (and greatest? 😛 ) cumulative update to see if the problem was fixed (spoiler alert: it wasn’t). I was ready to leave my system unpatched forever if I was just skipping the last two months of updates before Windows 7 end of support (for home users, at least), but this month I tried a different approach to the repair option from the DVD, and it worked! 🙂

So, the sequence I used, similar to December’s procedure (except for the Acronis part, as I didn’t mess with the partitioning scheme last month), was the following:
1. Download of SSU (KB4536952) and CU (KB4534310) for Windows 7 x64 from Microsoft’s catalog
2. Turn off the internet modem
3. Set the third primary partition as Active with Acronis boot CD
4. Create a manual restore point and wait until the HDD red led turned off
5. Install SSU KB4536952 and wait until the HDD red led turned off
6. Restart and wait until the HDD red led turned off
7. Another restart and wait until the HDD red led turned off (just to be sure everything was fine)
8. Create another manual restore point and wait until the HDD red led turned off
9. Install CU KB4534310 and wait until the HDD red led turned off
10. Restart and… Error 0xc0000225 when booting up!
11. Boot up with Windows 7 SP1 x64 installation DVD (pre-SP1 disks don’t work)
12. Choose: Repair
13. Choose: Repair boot-up/start-up (this is what I changed from last month’s System Restore with a restore point I had manually created beforehand)
14. Wait (and pray! 😛 ) until all the changes were made
15. Restart (from the hard drive)
16. Success!!! 🙂 Windows 7 booted up normally and finished installing the cumulative update.
17. Several reboots later, everything was still up and running.
18. Turn on the internet modem
19. Install .Net Framework pending (checked) update from Windows Update and wait until the HDD red led turned off (last month it was unchecked, so I just skipped it)
20. Restart and wait until the HDD red led turned off
21. Set the first primary partition as Active with Acronis boot CD
22. Start Windows 7 from Windows XP boot loader
23. Success! Everything is up and running again and my Windows 7 is up to date with all the patches. 🙂

Well, that’s been my experience with December and January patches. So… MS-DEFCON 3? Allow me to disagree. 😉

Anyway, I don’t understand why these patches have to mess with boot files, boot configuration or both of them. Maybe it was a “feature”? 😉 And, besides, the only way of checking what’s going on with Windows 7 boot system is to run some commands on a text console (BCDEDIT on cmd.exe) or use a third party software to have a graphical interface, but first you need to boot Windows 7 to fix Windows 7 boot, so you are in a “catch 22” situation. (I never tried Windows 7 DVD command line, for that matter; it was easier to try an automatic repair)

(…)

If I’m missing something or there’s something you don’t understand, just write back and ask.

(…)

I’m particularly interested in seeing if someone else can reproduce this abnormal behavior or if it’s just me who’s having this problem. Thank you. 🙂

Cheers,

César

Summary of hardware:
Motherboard: Gigabyte GA-Z87X-UD5H
Processor: QuadCore Intel Core i7-4770 (Haswell-DT)
Memory: 16 GB (2 x 8GB), 2 x Kingston HyperX KHX1866C10D3/8G
HDD: 2 TB (2 x 1TB), 2 x WDC WD1002FAEX-00Y9A
Optical drive: SONY DVD RW AD-7280S

Antivirus:
Avast! Free

As a side note, I use @abbodi86’s script to neutralize telemetry on a regular basis.
I also run it this time after installing the cumulative update and before going on-line again.
https://www.askwoody.com/forums/topic/2000012-neutralize-telemetry-sustain-win-7-8-1-monthly-rollup-model/
https://pastebin.com/zeJFe08G

So, I’m curious to know if someone else can reproduce this problem or if I’m the only one who doesn’t allow Windows 7 to create/manage partitions automatically.
Thanks in advance for any feedback. 🙂

César

1 user thanked author for this post.

woody

Reply | Quote

This is a very complex problem. At least to me.

I hope one of our Win7 internals gurus can sort it out….

1 user thanked author for this post.

Cesar

Reply | Quote

[geekdom]

Windows 7 Offline Update BetaTest
January 26, 2020

On Windows 10 online computer downloaded the following Windows 7 updates:

• KB4535102 — SIX FILES
• KB4536952
• KB4534310

From download files, installed or attempted to install all updates. (Four KB4335102 updates were deemed “unnecessary” when I attempted to install them.)

Updates:

• KB4536952 installed and rebooted.
• KB4534310 installed and rebooted.
• Two updates from KB4535102 installed: KB4532941 KB4532945
  

On permanent hiatus {with backup and coffee}
offline▸ Win10Pro 2004.19041.572 x64 i3-3220 RAM8GB HDD Firefox83.0b3 WindowsDefender
offline▸ Acer TravelMate P215-52 RAM8GB Win11Pro 22H2.22621.1265 x64 i5-10210U SSD Firefox106.0 MicrosoftDefender
online▸ Win11Pro 22H2.22621.1992 x64 i5-9400 RAM16GB HDD Firefox116.0b3 MicrosoftDefender

• This reply was modified 5 years, 1 month ago by geekdom.
• This reply was modified 5 years, 1 month ago by geekdom.
• This reply was modified 5 years, 1 month ago by geekdom.

Reply | Quote

“Or take regular backups, keep your anti virus up to date and run a regular malware scan, plus don’t ever use IE. Or both – what would it cost you if you lost the software / data”

Actually I have Avast free, Malwarebytes Pro, Hitman Man and Trojan Remover installed on both laptops (Win 8.1) a both desktops (Win 8.1 and Win 7)

 

I plan to get a Win 10 pc later this year but after watching my IT brother fighting with his laptop yesterday while trying to update (it broke his internet connection) I am in no hurry

2 users thanked author for this post.

jburk07, Demeter

Reply | Quote

Installed in the following order as offered: KB4534310, restart, KB4535102, restart, KB890830, no restart. Check updates once more, KB4536952 2020-01 SSU offered, downloaded and installed with no restart. So long Win 7 Updates. But not “so long”to  Win 7 just yet; I plan to run it for awhile. Where does one sign up & pay for the 0patch?  Win 7 Pro x64, SP1, Grp. A. i7Core “Haswell”, HP ZBook

3 users thanked author for this post.

Microfix, dgreen, jburk07

Reply | Quote

opatch website.

1 user thanked author for this post.

Demeter

Reply | Quote

I’m on Win 10 1809 (home) and fairly new to Win 10. In Windows update  Win 01-2020 Cumulative Update KB 4534273  is shown as ‘pending download’, but without any obvious way to move from that state.  I ran the troubleshooter, which did not come up with anything unusual.  I’ve rebooted and tried again, but the status still shows as ‘pending download’.

I run Windows Defender and Malwarebytes.  Do I need to turn off Malwarebytes to allow the Windows Cumulative Update to work?

appreciate any help on this.

regards
GeoffB

Reply | Quote

Further to my previous post, #2110408 I ran the update troubleshooter again and it found a problem described as ‘problem with BITS service.  the requested service has already been started. More help available by typing NET HELP 2182‘.  I did that, and there was some information but I’m none the wiser.

GeoffB

 

Reply | Quote

Do you have your Internet connection set to metered? If so, turn metered off. CUs won’t download over metered connections.

Reply | Quote

PK:  yes, I usually have it set to ‘metered ‘.  I had just thought of that when I checked how I had installed the Dec 2019 CU.  In my notes, in large letters ‘turn off metered connection’ then try again.

The 01-2020 CU has downloaded and installed without any problems as far as I can tell.

Thanks for your help.

regards

GeoffB

Reply | Quote

Mine is set to “metered” and I get a button to download/install updates. Works every time.

cheers, Paul

Reply | Quote

Jan 2020 monthly rolllup & 0patch

If you’re in group B, everytime you check WU you get offered the latest monthly rollup even if you’re up to date with security only updates, but will the Jan 2020 rollup KB4534310 still be offered after the next patch Tuesday in February. WU won’t offer any rollups for February, so will it default to the Jan 2020 rollup.

If in 6 months I decide, ok, I want to sign up for 0patch, will the Jan 2020 rollup still be offered or should I download it from the catalogue now to apply at a later date.

At this point, I’m starting to wonder if there’s any advantage to remaining in Group B.

Reply | Quote

The pre-EOS updates for Win7 will continue to be available.
If you have not installed the Jan Rollup, it will still be offered by WU (unless you hide it).
Feel free to install it at any time.

1 user thanked author for this post.

derma

Reply | Quote

Thanks for the update! Will install the January patches this week and report back!

On another note, thought long and hard about Opatch.com, and seems like a reasonable solution.

Would be interested to know how that goes with those registered for it here and if you had any problems receiving, downloading and installing patches when they arrive. Maybe it is too early to state that right now, however, let us all know!

Thanks, over and out… 🙂

Win 10 Home 22H2

Reply | Quote

Group B here….

Well yesterday I went ahead and installed the SO and IE11 update as well as the .NET security update on both Win 8.1 laptops and the desk top.  I allowed for plenty of time and everything went well.

I updated an old Win 7 laptop that my folks still keep for a back up. I have kept that one on Group B also for years but for this final update I first installed the SSU and then moved it to Group A with the Security/Quality update. That took a long time to download of course and then it failed to install the first time but it did install on the second attempt. Everything seems ok on that one.

Now, later today I will start the update process on my Win 7 desktop moving from my beloved group B status to group A.

First I am going to install the SSU, wait a bit and then install the Security/Quality update. Then I will look into the 0patch service.

Fingers crossed on this because after the Dec. update process a couple of weeks ago for some odd reason my win 7 went into an endless reboot at start up. Couldn’t even get to the sign on screen. How I got out of that mess I really cant explain except I managed to get into safe mode and shut it down. When I started it back up it was fine although it has happened twice again at random. This has never happened on this pc before and I have had it a very long time (my brother built it for me  years ago)

So here I go, about to enter a new era as I join Group A   (well on one pc anyways 🙂 )

 

2 users thanked author for this post.

Microfix, jburk07

Reply | Quote

Just so there’s no doubt, I’ve concluded that KB 4536952 is the SSU to use to do the January Windows Updates, whether S.O. or WU, either before or after, as long as the SSU is run all by itself.  Have I got this right?

I won’t be updating right away, but when (or if) I do, I want to have all my ducks lined up correctly.  Thanks.

Being 20 something in the 70's was far more fun than being 70 something in the insane 20's

Reply | Quote

KB 4536952 is the correct SSU for January.

1 user thanked author for this post.

Charlie

Reply | Quote

[Win7and10]

Just received a weird update after installing the MSRT and SSU for January 2020.

KB2968294 a Security Update for .NET 3.51, should I install it??
It is from October 14, 2014.

UPDATE: Checked my update history of installed UPDATES and it is there.
KB2968294 so it wants to give it to me again. I hid it!

Win 10 Home 22H2

• This reply was modified 5 years, 1 month ago by Win7and10.

Reply | Quote

I was planning to install the updates as indicated by the Master Patch list and may have found a discrepancy between the 2020-01-14 Pre-Win 10 Updates Excel and PDF versions of the patch list.  Just under KB4534251,  the PDF version shows 4535102 while the Excel version shows 4535104 while not showing the 4535102 and the PDF version does not show the 453104 version.  Since 4535102 is on both of my computers (Win 7 Pro), I assume this is the correct one for me.  However, since the 4535102 is a .NET patch, I plan to defer installing that per the Excel version of the Master Patch list.  KB4503548 (released on 8-13-19 and which I deferred per the Master Patch list at the time), returned this January to Windows update on both my computers. I assume that I should defer this one as well.  Is that correct?  Also what is the reasoning for deferring the .NET updates?  Thank you very  much for the help and assistance from all of those on AskWoody.

Reply | Quote

Just FYI
4535102 is the Jan .NET Rollup for Win7 and 4535104 is the Jan .NET Rollup for Win8.1
I wonder if you made that distinction?

Reply | Quote

After reviewing the list of updates on both my computers to see whether i should  install or defer, I found that all of the patches (KB4484243, KB4484236, KB 4535102, KB4534310 and KB4503548) on my computers are in the defer category. I plan on waiting to install anything until the fix for KB4534310, the Security Monthly Quality Rollup is released.  Per Microsoft, this KB causes the black screen when wallpaper is in stretch mode.  Microsoft anticipates a solution will be available mid February.  Is it possible to install this if your computer wallpaper is NOT in stretch mode (Both of mine are in FIT mode) or is it better to wait for the fix?   This is the first month that I did not have an update that I could install.

Reply | Quote

I have installed KB4534310 on 4 of my Win7 computers that DID NOT have the “Stretch” setting with no problem. If you have one with “Stretch,” change it to something else (Fill, Fit) before you install and you should be OK.

2 users thanked author for this post.

dgreen, Geo

Reply | Quote

[Win7and10]

I just installed the KB4535102 the January .NET Cumulative update and it took forever.
I’m happy to report my Windows 7 computer made it to the light and survived.
I thought it was going to be the end it took so long.
All is well, and one more to do, and will save the January Monthly Security Rollup until tomorrow, that’s the one with the stretch incident.

Win 10 Home 22H2

• This reply was modified 5 years, 1 month ago by Win7and10.

1 user thanked author for this post.

jburk07

Reply | Quote

Finished the last of my W10 computers yesterday. All updated to 1903 18362.592, no problems so far.

Don't take yourself so seriously, no one else does 🙂
All W10 Pro at 22H2,(2 Desktops, 1 Laptop).

1 user thanked author for this post.

jburk07

Reply | Quote

With respect to the patches offered by Microsoft in January, why are KB4484243, Security Update for Excel 2010 and KB4484243 Security update for Office 2010 on the defer list? I cannot find a discussion of either patch on AskWoody.  It would be educational to see the logic for the defer listing.  Thank you to PK CANO for advice on the KB4534310.  Since I had my computers set to FIT, I had no issues,yet, with the install of KB4534310.

Reply | Quote

now i updated both machines:

on windows 7 i installed january security only updates for windows and ie, as usual it rebooted twice. then i installed all checked important office 2010 updates, msrt and .net. i hid qualitysecurity update. after another reboot i did a drive clean up to remove unused update files and i installed ssu for january.

currently i’m waiting for TrustedInstaller and mscorsvw processes (all that “post update” work) to be ended and then i’ll reboot another time.

btw. this proxy trick for blocking ie off internet interferred with windows update. search for updates didn’t work, it showed an error code. so i had to undo this workaround for the sake of windows update. i’ll leave it this way, until this fix for wallpaper bug is available. my wallpapers are set to fill but i want this fix anyway. i’m curious how this fix will be provided to non paying crowd like me… 😀
for office 2010 (which gets updates until october or something) i’ll have to undo this proxy trick monthly to get those updates installed.

on windows 8.1 notebook i installed security only win and ie updates, after reboot i installed all checked important like office, defender,… of course i did not install qualitysecurity update. 😀

PC: Windows 7 Ultimate, 64bit, Group B
Notebook: Windows 8.1, 64bit, Group B

2 users thanked author for this post.

Microfix, jburk07

Reply | Quote

these two .net optimization processes are finished already but trustedinstaller still is running! several hours after installing servicing stack! how long does this take? when can i reboot finally?

PC: Windows 7 Ultimate, 64bit, Group B
Notebook: Windows 8.1, 64bit, Group B

Reply | Quote

this just in from Born’s blog – KB4532695 update for v1903 & v1909 in the release preview ring:

https://borncity.com/win/2020/01/28/windows-10-v190x-update-kb4532695-fr-insider/

this may get publicly released later this week

1 user thanked author for this post.

woody

Reply | Quote

Yep, that’s just about on time.

It looks like the old 1903 patching cadence now includes 1909. That’s as expected – but it’s remarkable because 1909 is more complex.

Big open question: Will MS finally, finally fix the File Explorer Search bug?

Reply | Quote

Just received a weird update after installing the MSRT and SSU for January 2020.

KB2968294 a Security Update for .NET 3.51, should I install it??
It is from October 14, 2014.

UPDATE: Checked my update history of installed UPDATES and it is there.
KB2968294 so it wants to give it to me again. I hid it!

UPDATE 2: After I installed the .NET Cumulative update for this month, checked the update history and noted that the October 14, 2014 update had disappeared from the hidden updates *since I hid that one*.

Also, after the .NET Cumulative update for this month, the SSU was offered again and installed so to speak in the update history twice.

As noted previously, the .NET update took some time, thought it was hanging on for a bit and glad that it installed.

I’ve had enough fun for a few days, will install the January Monthly Security Stretch Patch Incident update later in the week. Then I am done…unless MS decides to patch us and I enroll in Opatch.

Win 10 Home 22H2

Reply | Quote

This article says to go ahead with the January 2020 Windows updates, but it also makes indirect reference to the latest Patch Watch Column at

https://www.askwoody.com/newsletter/closing-the-book-on-windows-7/#patch-watch-0

and Master Patch list at

https://www.askwoody.com/wp-content/uploads/2020/01/2020-01-14-Windows10-Updates.xlsx

which have not been updated since 01/20/2020 and 01/14/2020 respectively and indicate that consumers should defer updates.

Am I missing something here?

Win 10 Pro 1809 x64 Dell Inspiron i7

 

1 user thanked author for this post.

Marcus Weldby

Reply | Quote

As far as I can see, that article (published only six days after patch Tuesday) does not say go ahead with January 2020 updates. It says defer for at least 15 days.

1 user thanked author for this post.

STBC Mapper

Reply | Quote

I have the same question. I’ve kind of waiting for Patch Lady Susan Bradley to give the Green Light to patching.

1 user thanked author for this post.

STBC Mapper

Reply | Quote

Windows 7 Home, Group B and also install security only updates for .NET Framework. For January 2020 there is KB4534976 Security Only Update for .NET Framework for3.5.1,4.5.2, 4.6,…..4.8 for Windows 7 x64. Within this KB4534976 there is a file, “msipatchregfix-amd64-5011cb….exe”. Which version of .NET Framework needs this file, and when to execute this file? Somehow I can’t find the answer in my notes. Thanks.

Reply | Quote

When you go to the Catalog for the update, instead of clicking on “Download,” click on the title column link. In the box that pops up, click on “More Information.” That will take you to the MS Support pages that explain about each of the files in the .NET Rollup.

Reply | Quote

Thanks PK, That’s the way I found out which file I need to download for my version of .NET Framework. The only file that doesn’t have any explanation is this file “msipatchregfix-amd64-5011cb…exe”.

Reply | Quote

Try this. If you put the downloaded updates in a folder, download that file and put it in the same location where you execute the patches. It may execute automatically when the update it “belongs to” is installed.

I’m just guessing, but I have seen that kind of behavior in two incidents before. one of them was with the pciclearstalecashe and the other I can’t remember. But if that’s the case, you may get a flash of a command prompt window when it executes.

Reply | Quote

When you said, put the downloaded updates in a folder, download that file and put it in the same location, do you mean in the same folder, or not only in the same folder but also next to each other?

Reply | Quote

In the same folder as the patch.

Reply | Quote

Thanks again for your help PK,  I really appreciate!

Reply | Quote

Checking in as Group A user, Win7Pro 32bit with machine display background set to FIT not STRETCH:-)

Installed, without issue, KB4534310, KB4535102, MSRT, and then SSU KB4536952 after the three prior KB installs had stabilized.  I am so grateful for all those who commented over the past few days.  I utilized your inputs along with Woody’s great info and the excellent inputs of PKCano and others who’ve so graciously shared their experiences and advice.

Made for smooth sailing.  Now trying to decide in which direction I head with my trusty Win7 box.  The 0Patch route is sounding worth it for my particular use model.

 

4 users thanked author for this post.

Microfix, jburk07, Myst, Pierre77

Reply | Quote

I have been looking at 0Patch and have received some info from my sources. The service is NOT free but will cost $26.00 US per year per PC.

https://0patch.zendesk.com/hc/en-us/articles/360010269560-What-are-the-advantages-of-0patch-compared-to-Extended-Security-Updates-

Hope this link helps.

Reply | Quote

Pierre77 wrote:

I have been looking at 0Patch and have received some info from my sources. The service is NOT free but will cost $26.00 US per year per PC.

https://0patch.zendesk.com/hc/en-us/articles/360010269560-What-are-the-advantages-of-0patch-compared-to-Extended-Security-Updates-

Hope this link helps.

I just subscribed my brother’s Windows 7 SP1 64 bit to 0Patch.
His PC is blocked from Windows 10 with GWX Control Panel : http://ultimateoutsider.com/downloads/

Reply | Quote

Reporting in regarding January Updates
Had an unusual occurance

Hid all updates and did search (yesterday 1/29)
kb4536952 Servicing stack appeared and installed first
Unhid  kb4534310 (rollup)
Rebooted waited about 1/2 hr

When I went back to now install the rollup
Did a search for updates**
**NOTE: This was taking so long that I actually had to “end task” in task manager and rebooted my computer.  It still was taking long so I ended it in task manager again and deceided to wait a few hours.  Shut down my computer.
Tried again and the search for updates went smoothly and installed the roll up.
For the 1st time this automatically rebooted twice.

unhid kb4535102 (.net Security and Quality Rollup) which took a long time to restore….
so I deceided to wait until this morning.
Once again search for updates was taking a long time, ended via task manager, rebooted and tried again.  This time search for update worked.**
Installed the .net update and it installed fine.
Waited about an hour.
I unhid the MSRT update and that installed without issue.

I have never had the need to end the task of “search for updates” because it was taking too long.  This is the first time that has ever happened.
Trust me, I was a little worried there for a moment.
Big sigh of relief!

Dell Inspiron 660 (new hard drive installed and Windows 7 reloaded Nov. 2017)
Windows 7 Home Premium 64 bit SP 1 GROUP A
Processor: Intel i3-3240 (ivy bridge 3rd generation)
chipset Intel (R) 7 series/C216
chipset family SATA AHCI Controller -1 E02
NIC Realtek PCLE GBE Family Controller
Bitdefender (free version) installed 12/6/19 (replaced MSE)
Chrome browser
DSL via ethernet (landline)

 

2 users thanked author for this post.

Microfix, jburk07

Reply | Quote

Microsoft has released revised Intel Microcode updates this Thursday Jan. 30, 2020:

KB4497165 for 1903/1909
KB4494174 for 1809
KB4494451 for 1803
KB4494175 for 1607, LTSB 2016

These revised updates have added Denverton, Sandy Bridge, Sandy Bridge E/EP, Valley View & Whiskey Lake U support

2 users thanked author for this post.

abbodi86, geekdom

Reply | Quote

Microsoft Updates Driver Shiproom Schedule
https://www.tenforums.com/windows-10-news/148158-microsoft-updates-driver-shiproom-schedule-2020-windows-10-a.html

On permanent hiatus {with backup and coffee}
offline▸ Win10Pro 2004.19041.572 x64 i3-3220 RAM8GB HDD Firefox83.0b3 WindowsDefender
offline▸ Acer TravelMate P215-52 RAM8GB Win11Pro 22H2.22621.1265 x64 i5-10210U SSD Firefox106.0 MicrosoftDefender
online▸ Win11Pro 22H2.22621.1992 x64 i5-9400 RAM16GB HDD Firefox116.0b3 MicrosoftDefender

1 user thanked author for this post.

abbodi86

Reply | Quote

EP wrote:

Microsoft has released revised Intel Microcode updates this Thursday Jan. 30, 2020: KB4497165 for 1903/1909

I totally missed this item.  Also refer to gHacks.

Are we supposed to install?

Windows 10 Pro x64 v22H2 and Windows 7 Pro SP1 x64 (RIP)

Reply | Quote

1903 Pro Jan. updates : .NET KB4532938, CU KB4528760, MSRT KB890830.

No surprises.

1 user thanked author for this post.

jburk07

Reply | Quote

Windows 7 SP1 64bit, with Broadcom network card. Group B.

Installed January’s updates; IE KB4534251 and SO for .NET KB4532960. Did NOT install, SO KB4534314 (with nagware), SSU KB4536952 (or SSU KB4531786 or SSU KB4523206).

From the catalog; Installed KB4534251 1st, KB4532960 2nd. The MSRT was installed during the December patch installs in the middle of January so that MSRT was the January MSRT.

I can not see installing an SSU when EOL is upon us (past us) and I am not a paid support customer. I can not see installing nagware when there does not seem to be any real threats to worry about. I have backups, I am covered.

Installed one at a time. Rebooted in between each update letting it sit 1 or 2 minutes after update was installed (when hard drive light settled down).

No network issues. No install oddities.

Rebooted 3 times and let it sit for several minutes.

I would recommend people on the last reboot to go to the desktop and let it sit 45 to 60 minutes to Process Idle Tasks and let the trusted installer (as per PKCano) do its thing.

You can also force Processing of Idle Tasks as I do if you want by the administrative command prompt: rundll32 (space) advapi32.dll,ProcessIdleTasks

You can enter that then walk away for 15 to 20 minutes. If the drive light is still on, it is still running, walk away again. Do not allow the computer to go to sleep. Reset the Power Options to 1 hour sleep if needed. Laptops make sure you are on AC power not battery!

Thanks to all here.

Windows 7 Group B

2 users thanked author for this post.

SueW, jburk07

Reply | Quote

WIN10 HOME 1909 new laptop HP Envy i7, 1 TB , 12BG RAM

When I set up the laptop around the Holidays, accepted version 1909, currently on pause for max amount of time for windows updates, I believe just past the Feb patches, will have to check on the exact date in February.

Should I accept all of the updates by checking for updates and taking off the pause, or just wait until Defcon green here?

It is a home laptop, therefore, no server issues, etc….

Thanks!

 

Win 10 Home 22H2

Reply | Quote

We are at DEFCON-3 for Jan patches currently, which means go ahead an patch with caution.

If you undo the Pause, you shuld get the updates, even without “checking for updates”, the next time the system checks.

1 user thanked author for this post.

Win7and10

Reply | Quote

Thanks PK,

Also, is Chredge being sent via the Windows Update or is that an optional download?

Win 10 Home 22H2

Reply | Quote

Win7and10 wrote:

Also, is Chredge being sent via the Windows Update or is that an optional download?

7: Direct download only
10: Windows Update eventually (or direct download if you don’t want to wait)

Download Microsoft Edge

Reply | Quote

The old Edge was part of WU. I’m not sure if Credge will be handled through WU or will be in the “Updates for other MS products,” since it is considered a separate app.

Reply | Quote

It’s pushed though regular WU (not other MS products)
and published in catalog
http://www.catalog.update.microsoft.com/Search.aspx?q=Edge

1 user thanked author for this post.

PKCano

Reply | Quote

But not the updates, I see from your comment below.
The updates will be pushed throught the app itself then?

Reply | Quote

Installed the following Win 7 Home x64 and Office 2010 x64 patches:

1) All offered Office 2010 x64 patches – reboot
2) SSU – 4536952 – reboot
3) Rollup – 4534310 – reboot
4) .NET – 4535102 – reboot

No real issues except the download of the Rollup took 30 minutes.
No double reboot.

Thanks to all who shared there update experiences over the years.
A big thanks to Woody and PKCano for guiding us to the end of the light for Win7 Home users.

1 user thanked author for this post.

Myst

Reply | Quote

[Alex5723]

abbodi86 wrote:

It’s pushed though regular WU (not other MS products)
and published in catalog
http://www.catalog.update.microsoft.com/Search.aspx?q=Edge

How can ChrEdge updates be pushed via WU when it is a separate program needing daily/weekly.. updates like other browsers and not tied to patch Tuesday/C/D ?

• This reply was modified 5 years, 1 month ago by Alex5723.

Reply | Quote

Only the first installation comes through WU, updates are normally by itself

1 user thanked author for this post.

Alex5723

Reply | Quote

[280park]

RE: Windows 10 Updates, Pause, and Windows Defender

The update settings on my Windows 10 Pro version 1903 build 18362.592 are set as follows:

Feature updates: Deferred for 365 days
Quality updates: Deferred for 15 days
Updates paused: Until March 4, 2020

The following two behaviors seem a bit odd:

1. Windows Defender only updates itself automatically when I start the computer for the first time on any given day. This is only a minor inconvenience because I update Windows Defender throughout the day by clicking the “Check for updates” button under “Virus & threat protection updates.”

2. When I start the computer for the first time on any given day and immediately open the main Windows Update page I see that Windows Update, even though it is set to paused, shows that it is checking for updates. At the end of the updating only Windows Defender has been updated. This is all exactly as I want Windows to behave. It just seems odd that Windows Update shows that it is checking for updates when it is set to paused.

• This reply was modified 5 years, 1 month ago by 280park.

Reply | Quote

Windows Update checking is set as a task by the system. It will run if WU is enabled on whatever schedule is set.

Pause and Deferral tell WU when the patches can be made available. If you Defer for 15 days, the patches won’t be available to WU for 15 days after release, That means when WU searches, it won’t find anything for 15 days.

If you Pause until March 4, you prevent the patches from being available when WU searches until March 4.

WU will search on whatever schedule is set (on bootup, once/day, at 1:00am, etc) but it won’t find anything until the Pause/defer time has elapse b/c the patches won’t be presented as available until then.

You haven’t Paused/deferred Defender updates, only system updates. So defender updates should be available whenever the schedule is set for that.

1 user thanked author for this post.

280park

Reply | Quote

PKCano – Thanks. I think I understand now. I thought (apparently erroneously) that by clicking the “Pause updates for 7 days” button in Windows Update I was pausing Windows Update from checking for updates. But if I understand you correctly, clicking that button does NOT stop Windows Update from checking but DOES stop Windows Update from making updates available to install, except for Windows Defender updates.

PKCano wrote:

WU will search on whatever schedule is set (on bootup, once/day, at 1:00am, etc)

On my computer Windows Update seems to check automatically for updates once per day, specifically when I start up and connect the computer to the internet for the first time each day. I don’t see anything in Windows Update that specifies that schedule. I am not interested in fiddling with that schedule until I am much more familiar with Windows 10, but I am curious if that schedule is irrevocably set by Microsoft. If not, how would one go about changing the schedule?

Reply | Quote

Personally, I wouldn’t mess with that schedule. The less you “fiddle” with, the less you will have to wonder about where problems come from if you have them.

1 user thanked author for this post.

280park

Reply | Quote

[280park]

PKCano wrote:

The less you “fiddle” with, the less you will have to wonder about where problems come from if you have them.

I agree with you 100%. That is why I have made very few changes to my new Windows 10 Pro computer since taking it out of the box other than upgrading from version 1809 to version 1903 build 18362.592 and changing the Windows Update settings to prevent further updates until Woody clears the February updates for installation.

PKCano wrote:

Personally, I wouldn’t mess with that schedule.

And not knowing how to fiddle with that schedule is probably the best inoculation for the urge to do so.

• This reply was modified 5 years, 1 month ago by 280park.

Reply | Quote

Hello Group B’ers.  I finished doing my updating today and all seems fine so far as I can see.

Only had two Office 2010 updates and I did them first, no reboot required.  Then did the .NET update and rebooted.  I next did the S.O. IE update and Win 7 updates.  They took a little bit longer than usual but went okay.  I always wait for the high memory use to go back down after rebooting which usually takes about 10 to 15 minutes. The memory use was real high this time for KB4534314 and KB4534251 – 2.72 gigabytes at the highest, the highest I’ve seen yet to install an update.

Well that’s about it.  Just thought I’d report in with some good news.  Thanks again to Woody and the crew for all the help to make this possible.  You guys & gals are great!

Being 20 something in the 70's was far more fun than being 70 something in the insane 20's

4 users thanked author for this post.

Lars220, jburk07, Microfix, SueW

Reply | Quote

You should install the Servicing Stack KB4536952. It should show up if the Important Update queue is empty (did you hide the Rollup?)

Reply | Quote

AH…. I forgot to mention it but I downloaded KB4536952 from the MS Update Catalog a few days ago and installed it then.  So I should be okay.  Thanks PK.

Being 20 something in the 70's was far more fun than being 70 something in the insane 20's

Reply | Quote

And I thought I was the last one to update 🙂  Here is my feedback:

1 – just in case, double-checked Task Scheduler — Application Experience, CEIP, and PerfTrack — all subtasks were still disabled

2 – imaged my disk with Macrium Reflect Free

3 – downloaded Updates KB4534314 (January SO) and KB4534251 (IE11 January Cumulative)

4 – installed both Updates and then restarted. Note: my computer partially configured, restarted, and then finished configuring, taking 8 minutes total; I then waited 15 minutes

5 – re-checked Task Scheduler — Application Experience, CEIP, and PerfTrack — all subtasks were still disabled (as expected)

6 – checked Task Scheduler — EOSNotify & EOSNotify2 — were still disabled after disabling them after December’s updates

7 – ran “Windows Update” => 5 Important (all checked): 2 Office 2010 and 3 Win 7; 1 Optional (unchecked)

8 – unchecked and hid “Important” Update KB4534310 (January Rollup)

9 – hid the unchecked Optional update KB4503548 (.NET Framework 4.8)

10 – ran “Windows Update” again => 4 Important (all checked): 2 Office 2010 and 2 Windows; 0 Optional

11 – installed 4 Updates: 2 Office 2010 (KB4484243, KB4484236), January S&Q Rollup for .NET Framework (KB4535102) and MSRT (KB890830)

12 – rebooted and waited around 45 minutes

13 – ran “Windows Update” again, since the SSU wasn’t offered yet => 1 Important (checked)

14 – installed KB4536952 (January’s SSU)

15 – no restart was necessary; restarted anyway and waited around 15 minutes

Note: Windows Media Player was still reconfigured!

And, once again, my thanks and gratitude to PKCano, Woody and everyone else who, with their time and expertise, helped make our monthly updating go as smoothly as possible!

Win 7 SP1 Home Premium 64-bit; Office 2010; Group B (SaS); Former 'Tech Weenie'

6 users thanked author for this post.

Northwest Rick, Lars220, jburk07, Myst, PKCano, Microfix

Reply | Quote

[Win7and10]

I have this one left to go for January for WIN 7. KB4534310 (January Rollup)
Did anyone find that they had disable the task scheduler for EOS notify like we did for December’s patches?
Will wait a few more days and then install.
Any more news on the “stretch” issue?

Also will probably install Windows 10 1909 updates this week as long as there are no further issues since I am a HOME User.

Thanks to all for their updates.

Win 10 Home 22H2

• This reply was modified 5 years, 1 month ago by Win7and10.
• This reply was modified 5 years, 1 month ago by Win7and10.

Reply | Quote

Win7and10 wrote:

Any more news on the “stretch” issue?

See microsoft agrees to clean up a small win7 mess. You won’t be able to see the whole article, but you get the idea.

If you disabled the EOS nag last month, I believe it stays disabled.

1 user thanked author for this post.

SueW

Reply | Quote

Ran a System Image on my external HD before running updates.
Installed … 5 Important Updates as presented in the Update queue, installed each individually except for the Office 2010 updates (put those two in last)
KB4535102 January Rollup for .NET Framework REBOOT
KB4534310 January Rollup REBOOT – Took more time than usual to install. No black screen, background is set to “Fit” by default
Gave the system time to process the above two updates after installing
KB890830 MSRT

2 Important Office 2010 updates – no reboot required

Ran another Check for Updates and the SSU KB4536952 showed up. Installed it and no reboot needed but I did it for the heck of it. After reboot I let the PC sit to settle everything into the system.

Had also gone to the Task Scheduler to make sure both EOS Notify tasks were still disabled and they were, as were all other tasks previously disabled, App Experience, CEIP, Media Center and PerfTrack, along with all subtasks.

A special thanks to SueW for your detailed account and feedback for each monthly update. You always remind me to check the Task Scheduler! And a big Thanks to everyone else who post their results, and of course a huge hug of appreciation for Woody, the admin staff – MVPs, bosses, etc., y’all are incredibly gifted!

MacOS iPadOS and sometimes SOS

3 users thanked author for this post.

SueW, Lars220, jburk07

Reply | Quote

I have one January patch left to go for WIN 7:

January for WIN 7. KB4534310 (January Rollup)

Will wait a few more days and then install.

I restarted last evening and did not have the “you do not have permission to shut down this computer” error that was described over the weekend. Was glad that this was not an issue on the Win 7 laptop

Has anyone attributed anything else to this error?

(1) January patch to go for Win7 and Win10 is still on pause.

Win 10 Home 22H2

Reply | Quote

Sorry to grab your procrastinator trophy from you (not unlike the classless KW grabbing TS’ microphone) but I am clearly MILES behind YOU!

Just wanted to say I appreciate your handy & condensed & detailed guide, especially on how to shut down the EOS nagware.  Yeah, I know all this information is sprinkled throughout this gargantuan AW repository, but when you only look in once in a blue moon, it is terrific to find it all pulled together in one place.

Cheers!

Reply | Quote