MS-DEFCON 3: There are some oddities, but it’s time to install the July 2020 patches

Topic

New Reply

Looks like Microsoft’s fixed the bugs that it introduced this month. It’s time to get the July patches installed. There’s one potential oddity — you
[See the full post at: MS-DEFCON 3: There are some oddities, but it’s time to install the July 2020 patches]

8 users thanked author for this post.

Elrod, Berserker79, jburk07, Elly, SueW, Coldheart9020, Mr. Natural, abbodi86

Reply | Quote

Replies

I’ve been pushing the July updates for the past week or more and no issues to report with any of the July updates.

Red Ruffnsore

1 user thanked author for this post.

jburk07

Reply | Quote

I posted in the Win10 section.  I lost Android device and Bluetooth connectivity.

Reply | Quote

The recent Woody on Windows article references an issue regarding USB printers not being recognised, and Microsoft have addressed this in KB4566779.

While this pertains to USB printers, it is quite probably related in some way. Not much of a consolation to you unfortunately, but issues with other USB devices may also be addressed at some point.

3 users thanked author for this post.

rontpxz81, jburk07, woody

Reply | Quote

Here’s the original post:

I installed the July updates last night and they seemed to go OK.  This morning I needed to transfer a file to my Android phone.  Neither the Android Phone or Tablet are recognized by the File Explorer or Device Manager.  I tried looking for some trouble shooting techniques on the Internet but didn’t see any that applied to this situation. I transferred files the two days ago before the update without a problem so I expect the update broke something.

My Logitech Webcam which is driven off the front panel header is working fine.  However, it appears that my ASUS USB Bluetooth transponder is not working either.

Anyone have any help they can provide?  I am on Windows 10 1909

Reply | Quote

Thanks for moving it.  For whatever reason things came back to life after I restarted my phone and tablet.  They were then recognized in both File Explorer and Device Manager.  I reinstalled the Bluetooth driver just to be on the safe side there as well.  Everything is now working properly.  I never had this issue with previous Win10 updates and who knows which of the updates caused the issue.  If it happens next month I’ll try the Android device restarts before getting totally freaked out.

3 users thanked author for this post.

jburk07, CADesertRat, Coldheart9020

Reply | Quote

I was on 1809 Ent, and had set defer feature updates to on, but when I checked for updates yesterday 1909 got installed. It seems that deferring updates does literally nothing now.

So I’ve now set TargetReleaseVersion to 1909 in the registry, hope that prevents 2004

 

 

Reply | Quote

V1809 is beyond the maximum Feature Update Deferral of 365 days. That may be why you got updated.

1 user thanked author for this post.

woody

Reply | Quote

But 1809 Enterprise version should be alive until May 2021, shouldnt it?
Im still on 1809 Enterprise since I do not click “Check for updates” button.

Dell Latitude 3420, Intel Core i7 @ 2.8 GHz, 16GB RAM, W10 22H2 Enterprise

HAL3000, AMD Athlon 200GE @ 3,4 GHz, 8GB RAM, Fedora 29

PRUSA i3 MK3S+

Reply | Quote

You are right about the EOL for Ent.
BUT
If you defer for 30 days, it installs after 30 days.
If you defer for 120 days, it installs after 120 days.
If you defer for 365 days, it installs after 365 days. – And the 365 days is past.

1 user thanked author for this post.

doriel

Reply | Quote

Oh my, that is so rude. So it does make no sense to purchase Enterprise version since one does not use WSUS to fully control updates.
If I was mr. Anonymous, I would want my money back.

Dell Latitude 3420, Intel Core i7 @ 2.8 GHz, 16GB RAM, W10 22H2 Enterprise

HAL3000, AMD Athlon 200GE @ 3,4 GHz, 8GB RAM, Fedora 29

PRUSA i3 MK3S+

Reply | Quote

[KevinTMC]

It’s worth having a version of Windows 10 that allows you to set Group Policy settings. Ever since I adopted that method, I’ve had all the control over updates that I could need.

(Don’t recall offhand which precise set of instructions I wound up following. PKCano’s concise set here might be all you need: https://www.askwoody.com/forums/topic/configuring-update-on-win10-pro/#post-1662297 .)

Update still offered me 1903 when the 365 days were up, but all I had to do was hide it using wushowhide; a couple of days later the feature update was no longer being offered, and it was safe to install other updates again.

Between the still-unfixed “temporary profile” bug and continued uncertainty over how much 1903/1909 will respect various update settings, I’m definitely in no hurry to move on from 1809.

---
Home machines: Windows 10 Pro (21H2), Windows 7 Home (Group B)
Work machines: Windows 10 Enterprise (21H2)

• This reply was modified 4 years, 8 months ago by KevinTMC.
• This reply was modified 4 years, 8 months ago by KevinTMC.

Reply | Quote

[EP]

@doriel

there’s also Enterprise LTSC 2019 which is based on v1809 – though that one is supported until Jan. 2029

I already installed the optional preview KB4559003 CU on an ltsc 2019 machine and found no problems with it.

• This reply was modified 4 years, 8 months ago by EP.

Reply | Quote

A customer brought me their HP Envy 795 yesterday. Windows 10 v.2004. It started blue screening and rebooting mindlessly. The error was KMODE_EXCEPTION_NOT_HANDLED, which told me little, HP had 48 web pages with the same issue, on various Windows 10 builds. I rolled the machine back to an earlier restore point. All was well again. I then deferred updates for 35 days.

The customer understands that Microsoft is not using humans to test updates. An update broke Windows on his machine, since he saw it was finishing up a Windows update before booting into the desktop. As soon as the desktop displays, BAM! I showed him how to roll system restore back again, in 35 days, if MS doesn’t fix whatever caused the bluescreen when they force another update on his machine.

GreatAndPowerfulTech

3 users thanked author for this post.

Mr. Austin, jburk07, woody

Reply | Quote

Just installed July updates on a Windows 10 1909 Pro with Intel i7 and 16GB RAM. Took 30 minutes from start to finish (download of CU and .Net took 1 min. on a Optic Fiber 1Gb connection).

No problems so far.

2 users thanked author for this post.

rontpxz81, jburk07

Reply | Quote

Download and installation of July CU and Servicing Stack updates on my 1909, Intel i7, 16GB RAM, download speed 29Mbps — took 13 minutes from start to finish.  No problems.

Reply | Quote

I have Office 2010 updates dated 7/14/20 waiting in my Win 7 WU.  I haven’t as yet seen any mention or approval of these (Outlook, Project, and Word).  The Master Patch List has nothing on Office 2010 at all, at least that I can find.  Are these not approved and still on hold?

Thanks for any info., I’m still keeping my Office 2010 updated.

Being 20 something in the 70's was far more fun than being 70 something in the insane 20's

3 users thanked author for this post.

SueW, rontpxz81, jburk07

Reply | Quote

I have updated my Office 2010 Pro through July updates without any problems.
However, I do not use Outlook.

5 users thanked author for this post.

SueW, rontpxz81, Myst, jburk07, Charlie

Reply | Quote

I followed PK’s instruction using gpedit to hold updates until I want them installed. Now that is time to install I have a couple of questions before I pull the trigger.

I’ve got some Intel drivers pending that I don’t want, so I used wushonhide to  hide them from installing, but they are still in the cue on download page. I have Win 10 Pro, do I follow 2000013: How to clear the Windows Update queue in Win10? I found a link on how to clear the cue if you are using Win 10 Pro, but it appears to be the same procedure.

Do Win 10 home and Win 10 pro use the same process to clear the update cue before installing the wanted updates?

I noticed during July that KB2267602 for Microsoft Defender is pending. Is there any concern not installing security update until we are given the green light to install?

Thanks

1 user thanked author for this post.

rontpxz81

Reply | Quote

If you are in a hurry you can try to clear the queue. If you have Pro, don’t use the Metered connections in the process.
OR you can wait till the next time WU checks for updates on its own and that will clear the hidden updates from the queue.

Win 10 Home uses the same process, but I think you need Metered connections with it to keep the download from happening.

Update Defender whenever it asks.

 

Reply | Quote

Available updates:

2020-07 cumulative update for windows 10 1909 (KB4565483)

security intelligence update for Defender Antivirus (KB2267602)

The security update has been available, but not sure how I would download one, but not the other. When you push the download button you get everything pending.

 

Reply | Quote

If you don’t want one, you have to HIDE it with wushowhide.

But you should install both of those updates.

2 users thanked author for this post.

Fred, jimmythesaint53

Reply | Quote

My patch for July went without any issues.  bld 18363.959

Only thing I notice is under advanced options, number of days to defer quality update  is greyed out , with a zero .

Another Laptop went without problems and I can defer quality updates. I suspect that The script to keep me on 1909 may have something to do with that? Don’t recall running that on both machines but my memory is in retrograde these last months.

I notice the pending message when there is something else occurring-  I’d say wait until you get a message to restart, then that pending message should be gone and “you are up to date”

 

Reply | Quote

DriftyDonN wrote:

Only thing I notice is under advanced options, number of days to defer quality update is greyed out , with a zero . Another Laptop went without problems and I can defer quality updates. I suspect that The script to keep me on 1909 may have something to do with that?

It’s strange that it’s greyed out, but that may be the third party script/program that may be changing other WU behaviour.

At any rate, Quality updates refer to the monthly security updates like the ones a lot of people have just recently installed.

An update from 1909 to 2004 is a Feature update; I have mine deferred for 365 days which should be long enough to get the bugs ironed out before updating. I have Quality updates set to 0 days, so that whenever an update is available it can be seen in the update queue.

Reply | Quote

I am version 1909, updated through the July Week “B” patches.  I have QU set to 0, FU set to 365, and GPE set to ‘2 – notify download/install.

I have a similar question:  On July 29, I hid two driver updates via wushowhide.  They are addressing the security vulnerability CVE-2020-0551. However, I just now discovered that my machine already has the OEM updates, but in a later version and installed earlier on June 6.  How do I flush these two obsolete drivers out of the WU queue?

Reply | Quote

Hide the drivers with wushowhide, then either clear the queue (if you are in a hurry) or wait for the next time Windows Update searches on its own.

Reply | Quote

They have already been hidden since Jul 29.  WU has executed several times since that and they remain hidden.  I suspect that WU is not removing them from the queue because WU wants to install (were they not hidden) version 2.7.100.2 (two separate drivers — one for the Goodix Fingerprint sensor and the other to make sure a switch in the BIOS is enabled) BUT the OEM driver (both WU driver updates taken care of in one OEM driver update) that was installed on June 6, is a later one — 3.1.34.600.

WU seems not to have realized on July 29 that there was already a superceded driver installed (albeit an OEM driver in which the two WU drivers were coalesced).

That’s why I am asking if there is a way to flush these two drivers out of the WU queue.  They are redundant now.

Reply | Quote

WCHS wrote:

They are redundant now.

I am thinking that I could unhide them, let them install, and then the installation would fail, since there is a later version already on the system.

But, maybe the WU driver updates would install, since they are two separate updates, whereas the OEM update already installed was just one driver update (with a later version number) that coalesces the two WUs and adds an enhancement.  Although the WU driver updates would no longer be waiting to be installed, then if that happened, I’d have an earlier version without the enhancement rather than a later version with the enhancement.

 

Reply | Quote

Try rehiding them. If they are two different versions, they are two different updates. Then verify they are hidden.

1 user thanked author for this post.

Reply | Quote

I unhid them and they disappeared — neither hidden or unhidden.

Reply | Quote

WCHS wrote:

I unhid them and they disappeared — neither hidden or unhidden.

Sorry, I was not on this correct machine.  No wonder they weren’t there.

I am on the correct machine now.  I unhid them, then hid them again.  They are still there, listed as hidden — although they have been superceded by an OEM update.

Reply | Quote

I recently installed .NET 4.8 because it’s required by Paint.net. (I’ve had older versions of .NET but didn’t worry about updates since nothing I run uses them). Now, I’m faced with the decision of installing the .NET security/quality updates -OR- the security-only version.

For Win 7, I install the security-only, but for .NET, I wonder if there is any advantage to the “quality” portion. Does anyone have advice for me, or any knowledge about what might go into the quality changes for .NET?

Thanks for any insight.

Win 7 Pro, 64-Bit, Group B ESU,Ivy Bridge i3-3110M, 2.4GHz, 4GB, XP Mode VM, WordPerfect

Reply | Quote

Although this is an older article, it explains the differences between the two: https://devblogs.microsoft.com/dotnet/net-framework-monthly-rollups-explained/ (I have always installed the Security and Quality Rollups).

Win 7 SP1 Home Premium 64-bit; Office 2010; Group B (SaS); Former 'Tech Weenie'

Reply | Quote

Thank you. That article also led me to https://devblogs.microsoft.com/dotnet/ itself, which does have articles on exactly what “quality” improvements are in some of the updates. Also good to know that, like Windows, the .NET security-only updates are NON-cumulative while the quality/security ones are.

This should help me make my decision.

Win 7 Pro, 64-Bit, Group B ESU,Ivy Bridge i3-3110M, 2.4GHz, 4GB, XP Mode VM, WordPerfect

1 user thanked author for this post.

SueW

Reply | Quote

Grrr… shaky fingers got me again!

I installed July’s cumulative update, and was asked to restart my computer. As it came back up, there was a blue screen saying something about needing to finish setting up something… I looked away and adjusted my keyboard for a better typing position, and hit an unknown key with my shaky fingers, and whatever it was I was supposed to do vanished… I’ve gone through all my settings and nothing seems to have changed. Maybe it was trying to get me to set up a Microsoft account, which I don’t have on this machine…? I just didn’t read it, thinking I’d be responding to an option.

There is no back or undo or check to see if it was something I meant to answer, or confirmation of a change of any kind, so I’m just frustrated wondering what that was about!

I had used wushowhide to avoid the .Net preview update. Everything seems to be working fine, and I’m grateful for that.

Non-techy Win 10 Pro and Linux Mint experimenter

Reply | Quote

Elly wrote:

I installed July’s cumulative update, and was asked to restart my computer. As it came back up, there was a blue screen saying something about needing to finish setting up something…

Sounds like what you saw is the blue background screen that Microsoft throws up occasionally after an Update is installed. It shows up sometimes immediately after restart, or sometimes days later after a restart.  It says “Lets Finish Setting Up Your Device”.  It wants you to set up or enroll in about 5 things, two I remember is Windows Hello and Office 365.  At the bottom you can select Skip or Continue. Can’t remember if it times out, but Skip continues the normal boot to your desktop.

Windows 10 Pro x64 v22H2 and Windows 7 Pro SP1 x64 (RIP)

1 user thanked author for this post.

Elly

Reply | Quote

Tex265 wrote:

the blue background screen that Microsoft throws up occasionally after an Update is installed

The term “Update” here includes Defender updates.  I got this blue background screen yesterday after powering up.  The only update that had previously installed was a Defender update.

Reply | Quote

Speaking of oddities, just had this happen:

did check for updates downloaded kb4565633, kb4561600, kb4565483 (and a couple of realtek items), installed all, rebooted, and logged back in.

Now the odd part – this all happened in 3 minutes. Never in all my years of running windows updates has this ever happened. Didn’t even get the “Windows is updating, please wait” screenshot.

All 3 updates show as “installed”

Anyone else experience the same thing?

1 user thanked author for this post.

rontpxz81

Reply | Quote

OS build is 18363.836 (May 2020). Another ‘check for updates’ said ‘you are up-to-date’. What happened or, better yet, what didn’t happen? Just curious about it.

Reply | Quote

[geekdom]

After July 2020 updates are installed, you should see Windows Version 1909.18363.959; you are not up-to-date.

On permanent hiatus {with backup and coffee}
offline▸ Win10Pro 2004.19041.572 x64 i3-3220 RAM8GB HDD Firefox83.0b3 WindowsDefender
offline▸ Acer TravelMate P215-52 RAM8GB Win11Pro 22H2.22621.1265 x64 i5-10210U SSD Firefox106.0 MicrosoftDefender
online▸ Win11Pro 22H2.22621.1992 x64 i5-9400 RAM16GB HDD Firefox116.0b3 MicrosoftDefender

• This reply was modified 4 years, 8 months ago by geekdom.

Reply | Quote

I realize that.

My question is why would windows update show 4565483 installed, but not really. And why another check for updates would say I was up to date.

Did a manual install and now the os build is current (.959).

I have another 2 dozen plus win10 devices to update and if I have to do each  one manually instead of just running windows update, well, that’s really going to s…

And I didn’t think my opinion of Microsoft could sink any lower.

Reply | Quote

Does anybody have installed optionnal cumulative update KB4559004 ?

Is it recommanded.

Reply | Quote

See Microsoft releases some “optional, non-security C/D Week” patches. Avoid them., and read through the associated ComputerWorld article for more details.

Non-techy Win 10 Pro and Linux Mint experimenter

1 user thanked author for this post.

Coldheart9020

Reply | Quote

So I have a cheap hp laptop with 1903 home on it.  I have metered connection set on the wifi network and that plus defer x3 is how I “manage” updates.   Went to settings/updates, see the Jul update and .net 4565633 and a couple minor things.  One thing I’ve never understood is one update showed status “pending”  and another as “pending!”.  Does that exclamation mean something?   Went to advanced settings and turned on download over metered connection but that didn’t do anything (only option offered was download and install 2004) until I did a restart.  Then I got the check for update option and started things but if you have the settings / update window open  the status I see is really hard to understand what’s going on.  For example one update item eventually got to “pending restart” but I ha opened task manager and some processes were running hard.  So I waited and eventually got the “restart req” notification.  So it seems like it’s good to wait for that notification, and don’t just hit the restart when you see “pending restart” in status.  Any way eventually the updates did install though I did another check for updates and another .net update (4562900) appeared  so did another update cycle.  Then it seemed clean so unselected “download over metered connections” and I seem GTG.

Reply | Quote

Windows 10 1809 Home here and installed the following patches with no problems so far:
– manual install after downloading from the MS Update Catalog of the latest SSU (KB4558997), the 2020-07 Cumulative Update (KB4558998) as well as the .NET Framework Cumulative Update (KB4566516, actually I installed only KBKB4565625 since I don’t have .NET 4.8 on my system);
– install through Windows Update of various Office 2013 patches (KB4484442, KB4484349, KB4484363, KB4484450 and KB4484446).

BTW, I was being offered the .NET Framework Preview CU so I hid that in wushowhide and manually installed the earlier KB4566516.

Reply | Quote

July patches installed with no problems to report on Win 8.1 

Installation Successful: Windows successfully installed the following update: 2020-07 Security and Quality Rollup for .NET Framework 3.5, 4.5.2, 4.6, 4.6.1, 4.6.2, 4.7, 4.7.1, 4.7.2, 4.8 for Windows 8.1 and Server 2012 R2 for x64 (KB4566519)

Installation Successful: Windows successfully installed the following update: 2020-07 Security Monthly Quality Rollup for Windows 8.1 for x64-based Systems (KB4565541)

Installation Successful: Windows successfully installed the following update: 2020-07 Servicing Stack Update for Windows 8.1 for x64-based Systems (KB4566425)

Win 10 ver. 22H2 x64

2 users thanked author for this post.

Tom-R, DrBonzo

Reply | Quote

I had the same good results, although the order of installation was a bit different. I installed the SSU first, followed by the .NET update, and then the Rollup.

Reply | Quote

Win 10 Pro 1909. Resumed updates after backups. Was shown the cumulative, the pushed .Net and an Intel Display driver. WU went through the downloading and installing % rigamarole but apparently failed on the driver. Got a blue error screen which showed % and error data going to the mothership while my fans sounded like on early 747 taking off.

Rebooted itself and installed the cumulative and .Net. When I got my machine back, went into WU. It showed the Intel Display driver with a download button. Hit that and instantly the driver went away. Go figure. All this took ~ 1/2 hour. My connection is 10+ Mbps.

USB printer and Bluetooth still functional. Such fun…, NOT.

Reply | Quote

Block installing WU drivers in GPEdit.

Update Intel DCH drivers from the source

Reply | Quote

Window 7 Home Premium Grp A / ESU script

All updates installed with no issue.

1 user thanked author for this post.

jburk07

Reply | Quote

I’m on 10 1909 Home and have installed July’s updates no issues noticed and afterwards clicked the pause updates button once then 4 more times to get things paused until Sept. And no Notice of 10/2004 being offered so will that pause updates keep me safe from and 10/2004 feature update forcing as well?

I made a system Image Backup(7 Style) as well after the patching for July was completed but hopefully I can get online more often. But what’s with Edge(Non CrEdge Version) starting up by itself when I boot into 10/1909 as that did not occur with when I was on 10/1809. But I’m ready to make more use of the 10/1909 laptop online if that pause updates will keep any and all update forcing in check until DEFCON3 arrives for the Aug 2020 Patching cycle.

Reply | Quote

Updated 2 of my Desktops so far, an AMD and an Intel to W10 Pro 1909 18363.959.

KB 4562900 Cum Preview .NET 3.5/4.8, KB 4565483 Cum Update, KB 4565554 SSU

All smooth so far. 1 desktop and an HP laptop to go.

Don't take yourself so seriously, no one else does
All W10 Pro at 22H2,(2 Desktops, 1 Laptop).

Reply | Quote

Finished the last 2 computers today with no apparent problems.

Don't take yourself so seriously, no one else does
All W10 Pro at 22H2,(2 Desktops, 1 Laptop).

1 user thanked author for this post.

rontpxz81

Reply | Quote

Hi, I’m on W10 Home 1909.

Five hours ago, i started installing the July updates. Everything seemed to be OK; at some point, I restarted the system to end the process.

It was 5 hours ago. Since I made this, the screen is black after restart, I hear some rare noises indicating that it seems to work, but this is worrying.

If it stays longer like that, what should I do ? I tried to stop it again and resart it, but it didn’t change anything (black screen). Is there a way to start the system and come back to the preceeding situation ? (I didn’t make any backup).

Reply | Quote

You mean you restarted during install before the PC indicated it was ready? That doesn’t sound like a good idea; I don’t dare breath on my computers while they’re installing updates, however long it takes. I’m no techy, but it sounds as if your PC’s no longer able to boot up. Have you got a boot disk?

Reply | Quote

Well, finally, i put the power off. When it restarted, a ‘reparation tool’ indication appeared (i don’t know if it comes from W10 or Dell) and 5 minutes later, everything was OK. I really can’t stand all this W10 update stuff and the time and attention it requires. Next time, i think i’ll take a Chromebook…

Reply | Quote

Sorry! I don’t understand. Just checked, on the pdf for 14 July you still list all July patches for v.1903 as ‘defer’.

Reply | Quote

Check again later. Susan will probably update the Master Patch List sometime this weekend.

Reply | Quote

[Mr. Austin]

I launched Microsoft’s Windows July (alleged) updates on my main desktop. Meanwhile, I did non-patching work on the machine as it downloaded and installed them. When I allowed it, it rebooted and readied itself smoothly and without visible problems. It took around half an hour total. I run four automatic, separate backups of all my data. Two in the cloud and two local. One of those is a daily drive image.

The machine I tested with Microsofts’ July 2020 (alleged) patches is a Win 10 Home desktop on 1909, 32 GB RAM, Intel i7-7820X, eight 3.60 GHz cores, Asus TUF X200 Mark 2 motherboard, with an Nvidia GeFore GTX 1070 Ti display card feeding two monitors.

I won’t ever budget significant time to fine-tune any of Microsoft’s ridiculous patching minutia on its Windows’ machines. There is much more gnashing of teeth and biting of nails for which Microsoft is chief catalyst than I find acceptable. From the deep geeks here on Ask Woody I found and I’m using O&O Shutup 10 and very much appreciate it. But other than that, either the machine works great, or it doesn’t and I’d roll back any little changes I don’t like. And if in the future my machines’ have significant issues from Microsoft’s surveillance capitalisms which interrupt my work, I could always run a hypervisor which would help firewall me from them.

From a view of 25K feet above the comments on Ask Woody about Windows’ end-users and their deep geeks managing Microsoft’s quietly rapacious policies about its’ (alleged) software patches, it would seem to me that Ask Woody would derive great benefit from running a three-question, Yes/No, automated monthly poll to all its users which asks, 1.) did this month’s Windows (alleged) patches actually work without incident for you?, and 2.) if the (alleged) patches failed, then what happened? An automated user poll like that that would be spectacular grist for Ask Woody publications including Computerworld. 

Human, who sports only naturally-occurring DNA ~ oneironaut ~ broadcaster

• This reply was modified 4 years, 8 months ago by Mr. Austin.

Reply | Quote

Susan Bradley,

Woody says its a good time to update windows with the July patches. Is the same true for Office? I have the click to run version so Updating is either turned off or on. In my case it is currently off. I do not get to see or choose which updates get installed. I would appreciate a blurb from you or woody each month when we are told to update windows indicating if it is OK to also update office. If this info is being posted elsewhere I haven’t found it yet.

Thx.

Reply | Quote

If you read the full initial post, and click on the linked article in ComputerWorld, where Woody gives full instructions, you will see the title of his article is “Despite an unexpected monkey wrench, now is the time to install the July Windows and Office patches“.

If you have “Receive updates for other Microsoft products when you update Windows” turned on, as Woody recommends (it is found under advanced settings), then you will find it easy to do all your updating at one time. Any major problems are always covered by Woody in his linked ComputerWorld article at the time he recommends updating.

Non-techy Win 10 Pro and Linux Mint experimenter

2 users thanked author for this post.

SueW, Coldheart9020

Reply | Quote

Click to run will require you to turn on the updating manually… just do it at the same time.

Non-techy Win 10 Pro and Linux Mint experimenter

Reply | Quote

You’re right Elly. I missed the office reference in the Computer World article. I am aware thst my office update needs to be turned on manually. That’s why I was asking before I did so.

1 user thanked author for this post.

Elly

Reply | Quote

[bratkinson]

I thought I had locked down Windows updates until sometime in September on my W10 Pro v1909 computers.  What a joke that is!

Once again, Microsoft has taken it upon themselves to update my computers without my permission.  They did this several times under Win 7 as well.  And like those times, the latest set of forced updates left no trace that I could find of any updated Windows items (KB <whatever>).

One of my friends computers that I upgraded to Win 10 in January called last week to say his desktop background image was mysteriously changed and his mouse buttons were reversed!  Fortunately, that was an easy fix.  Then, 3 days ago, it ‘got me’ and reversed my mouse buttons (I normally have them reversed due to carpal tunnel) and it changed the display column settings for all the folders on my computer.  I hadn’t booted up my laptop in quite a while, so I fired it up and all the updates applied normally and no side effects.

Then today, the computer I use at church for online sermon distribution did it’s updates during the service (I thought I had that one locked down, too!).  When I went to use it at the end of the service, the sound drivers were gone!  The mouse buttons were OK, however, as were the folder settings.

So, at this point, I have now DISABLED the Windows Update ‘service’ after I re-extended the update delay to Sep 2!  If that fails to hold ’em back, I’ll start physically removing registry items as well as files used during updates!!!

Yes, I AM a control freak!  I will NEVER submit to the Borg “Resistance is futile” mentality!

• This reply was modified 4 years, 8 months ago by bratkinson.

Reply | Quote

[Elrod]

Woody:

I assume that Step 2 in the CW article should really be “Install the latest Win10 JULY cumulative update,” correct?  The section header says June.

• This reply was modified 4 years, 8 months ago by Elrod.

Reply | Quote

Yes, that should be JULY, not June.

1 user thanked author for this post.

Elly

Reply | Quote

Will a 08-2020 CU .NET Framework be coming out on patch Tuesday August 11 (Week “B”)?  I ask because a preview was released on July 21 — 07-2020 July Week “C” (KB4562900)– and I hid it with wushowhide. As a result, it replaced the 07-2020 July Week “B” .NET patch (KB4565633).

My usual practice is to wait for DEFCON 3+ after the monthly week “B” updates, which usually comes out a week or so prior to the upcoming monthly week “B” releases.

If the answer to my question is “yes”, it looks like my choices are:

1. unhide KB4562900, the week “C” 07-2020 .NET Framework preview patch, now and let it install when I get the “download” button (I have GPE set to ‘2’=notify download/install)
2. after the August week “B” 08-2020 release, wait until DEFCON is 3+ to unhide and install the 08-2020 .NET Framework patch. This would put the date of the installation somewhere between August 31 and Sept 7.
3. manually install KB4565633, the Week “B” 07-2020 .NET Framework patch now, because it is no longer available for wushowhide to put in the WU queue for download and installation.

Which is the best choice?

1 user thanked author for this post.

Coldheart9020

Reply | Quote

It’s almost certain that there’ll be a .NET CU security update next Tuesday, which will then supersede the optional, Preview KB4562900 July update that you’ve hidden with wushohide.

I would recommend installing KB4565633 if you have not already done so; it is a security update and is therefore important. Forget about KB4562900 (keep it hidden) and then when the August updates go to MS-DEFCON 3, install them and this will make KB4562900 redundant as it is only a ‘Preview’ of the actual August update to come, if that makes sense. At that point it should simply disappear from the hidden updates in wushohide altogether.

Hope this helps.

 

1 user thanked author for this post.

Reply | Quote

I was in the exact situation as you (KB4565633 overwritten in wushowhide “hidden” by the preview).  I did option 3 and it worked fine.  The preview is still hidden

2 users thanked author for this post.

Coldheart9020

Reply | Quote

The Preview overrides the actual July update, since it is cumulative so contains everything in the July update, plus some as of yet untested features. The strange thing is, you should really only be offered the Preview after KB4565633 has been installed.

It’s pretty ridiculous that a Preview update is superseding the current month’s actual update, despite the Preview being, from what I’ve read by Woody, quite safe to install.

The August .NET security CU will in turn override the KB4562900 July Preview update, rendering it outdated and therefore redundant.

Reply | Quote

Coldheart9020 wrote:

you should really only be offered the Preview after KB4565633 has been installed.

Yes, but KB4565633 was never installed because I hid it while waiting for MS-DEFCON to reach 3+.  Thus, it was superceded.

If I safely wait for the August .NET security CU (i.e., wait until after MS-DEFCON reaches 3+), that might be as much as another month.

I understand KB4565633 is a security update, so it might be a good idea to manually install it now and not wait for the August one.

Reply | Quote

WCHS wrote:

Yes, but KB4565633 was never installed because I hid it while waiting for MS-DEFCON to reach 3+. Thus, it was superceded.

Ah, that would explain it.

WCHS wrote:

I understand KB4565633 is a security update, so it might be a good idea to manually install it now and not wait for the August one.

Definitely install that before the August patches are released. You can get it from the Microsoft Update Catalog.

If you’re on a 1909 x64 PC, the file you need is: 2020-07 Cumulative Update for .NET Framework 3.5 and 4.8 for Windows 10 Version 1909 for x64 (KB4565633) – second from the top

Get it installed ASAP, and then provided you also have KB4565483 installed too, that should bring your build version up to 18363.959 and that means you are fully patched up to now.

1 user thanked author for this post.

Reply | Quote

sheldon wrote:

I did option 3 and it worked fine

Is this simply a matter of downloading it from the MS-catalog (of course, choosing the right Win10 version and the right bit-type), saving the downloaded file, and clicking on the file.  It’s an .msu file, right?

I’ve done this on Vista long ago and there were a number of steps, such as setting Windows automatic update to ‘never check for updates’ beforehand.  Will I have to install a stand-alone installer for it, as I had to do with Vista?

Reply | Quote

Download the KB file.
If it’s a .NET Rollup (which is a bundle of individual patches for different versions), you need to choose the file(s) applicable to the version(s) installed on your PC.
Double click on it.
Follow the directions from there.
Reboot if required.

Reply | Quote

PKCano wrote:

If it’s a .NET Rollup

The MS-catalog download link for KB4565633 for 1909, 64-bit lists one .msu file — windows10.0-kb4565633-x64-npd48_….  Does that mean that KB4565633 is NOT a Rollup??

Reply | Quote

It says “Cumulative Update” not Rollup.

1 user thanked author for this post.

Reply | Quote

looks like the July 2020 patches seem to fare better than the June 2020 patches

unrelated but I recently saw this article on Neowin – “The case for biannual Windows 10 feature updates”

https://www.neowin.net/news/the-case-for-biannual-windows-10-feature-updates

1 user thanked author for this post.

jburk07

Reply | Quote

I installed the two Office 2010 patches on my Win7  desktop a few days ago without problems, and installed the cumulative Win10, .Net Framework Preview, and Edge updates on my Win10 version 1909 desktop this morning.

While the Win10 machine completed the updates ok and is running normally thus far, including both the original restart plus a subsequent shutdown and cold boot when I went out for an hour or two, it took unusually long to do the updates with the downloads for .Net Framework and Edge completing in a few minutes as usual but the Cumulative Update for Win 10 download taking just over a further hour to complete, after which they were all installed and the machine restarted in just under half an hour. Version 2004 remains offered but not accepted.

1 user thanked author for this post.

jburk07

Reply | Quote

I have 32-bit Windows 7 Professional with extended security updates,  and almost everything went OK for the July updates,  except that the Servicing Stack Update (SSU) KB4565354 failed to install twice.  I rebooted and tried one more time to check for updates,  and now it’s not offering me that update any more.  What should I do?

Reply | Quote

In Windows Update in the lower left corner, open Installed Updates and see if it’s listed (it is small and doesn’t ask for a reboot).

If it’s not there, you can download it. Use the 32-bit link for KB4565354 listed here. Save it to your desktop and double click on it. Follow the instructions.

1 user thanked author for this post.

L95

Reply | Quote

Oh, and if there is any other update in the queue, you have to hide it before the SSU shows up. The queue has to be empty so the SSU installs by itself.

Reply | Quote

PK:  Thanks for your response.  It didn’t show up in the installed updates,  so I installed it manually as you suggested  (I hadn’t yet seen your second comment about other updates in the queue or I would have tried that first).   It installed successfully manually.  But I have a question about what Woody said in his ComputerWorld article.  He said “Microsoft just released a new Servicing Stack Update, but it now appears as if you won’t need it until the November patches roll out.”  Does this mean I won’t need this SSU (or any other SSU)  for the August, September, and October updates?

Reply | Quote

I believe that was a new License Prep Pack KB4575903 that you will need in Sept.
The SSUs are released each month and are required for the next month’s updates. In other words, Jul KB4565354 will be necessary to install Aug updates.

BTW the SSUs never show up in WU unless you have installed or hidden ALL the other updates. They have to be installed by themselves.

Reply | Quote

PK:  OK, thanks.  But Woody used the word “November”  (not “September”),  and he used the words “Servicing Stack Update”  (not “License Prep Pack”).  I’m wondering if he was referring to a comment by Microfix  at https://www.askwoody.com/forums/topic/july-2020-patch-tuesday/#post-2280427   where Microfix stated “SSU for W10 v1809 KB4558997 (still in support, extended to November)”.    Does this mean that it is only the Windows 10 SSU (but not the Windows 7 SSU)  that has been extended to November?

Reply | Quote

Ah, Win7 and Win10 don’t follow the same rules.
What applies to one doesn’t apply to the other.

Reply | Quote

PK:  In your reply dated August 5, 2020  at 12:34 PM, you stated “I believe that was a new License Prep Pack KB4575903 that you will need in Sept.”   However,  Microsoft has now issued the September update (KB4577053)  and the KB article for that update says in the  “prerequisite” section that the prerequisite is still the “Licensing Preparation Package (KB4538483) released February 11, 2020.”   So can you tell me where have you gotten this information that the new License Prep Pack will be needed in September?

In any event,  I assume that when you said “in September”,  you were referring to the September Updates,  which Woody has not yet given the clearance for,  rather than the August updates (for which Woody gave the clearance on September 4th).  Is that correct?

Reply | Quote

It appears now that any of the License Prep Packs will suffice and so far they haven’t required the latest KB4575903.

1 user thanked author for this post.

L95

Reply | Quote

I’d wait a day or two for WU to catch up. If the update is not offered it’s either installed or not needed.

cheers, Paul

1 user thanked author for this post.

L95

Reply | Quote

W10 Pro 1909 18363.959  Had paused update since Woody last gave the go ahead in June.  However, when I clicked on resume updates, W10 installed 2004 19041.388, .NET Framework cumulative preview KB 4562899 and and Adobe Flash update KB4561600.  Neither KB4562900 or anything else was offered.

So far, its been working.  Glad I have a full backup just in case. gm.

 

Reply | Quote

In these situations, is a full backup of disc 0 sufficient?

If I try to make a clone, the backup software requires the destination to be empty or accept that it will be erased. I did that with an external HDD which I had formatted, but the drive was not accessible after the clone was made. These was no security tab in the properties to configure either! I am using EaseUS workstation edition trial.

This pc runs on Win10 Pro 1909. I have set update delays in gpedit as well as paused for 35 days. Do I just override everything once the backup is made?

My wife’s pc runs on Win10 Home 1909, updates paused for 35 days. Do I just resume updates after I backup here? I did see some notice about 2004 not long ago! This pc has EaseUS Home edition.

 

Reply | Quote

Ken wrote:

If I try to make a clone

You should not make a clone. What you need is a full disk image backup. That should include the boot and all other partitions of the drive on which the OS is installed.

Ken wrote:

I have set update delays in gpedit as well as paused for 35 days.

If you use deferrals in Group Policy you should not also use Pause. Please look at  AKB2000016 for an explanation of the settings and their implications. Section 1 is general, Section 3 is specific to Win10Pro and Section 4 is an example of settings that work to give you control of Windows Update.

Ken wrote:

My wife’s pc runs on Win10 Home 1909, updates paused for 35 days. Do I just resume updates after I backup here?

If you resume updates, anything that is available (pending) will immediately download and install without notice. So you don’t want to resume updates till you are ready to install them.

1 user thanked author for this post.

Ken

Reply | Quote

In my Win Pro pc, where I have delayed updates using gpedit and also have paused: how do I unpause without creating problems? Just click resume updates?

 

Reply | Quote

If you resume updates, it will disregard your GP settings and download/install.

Did you read AKB2000016? – you should use the GUI pulldowns for deferral instead of Group Policy. Go back over the settings in Section 4.
Be sure you have the “2” (notify download/install) set in Group Policy.
Disconnect from the Internet.
Resume Updates – checking for updates should fail. That should reset the Pause.
If the Pause is reset, and you have “2” set, you can reconnect to the Internet. The “2” will keep the updates from downloading until you click “Download.”

1 user thanked author for this post.

Ken

Reply | Quote

Windows 10 Pro, 1909, with quality update deferrals set to 15 days and feature update deferrals set to 90 days. I never use the pause/resume option. I also have Windows Update configured to notify me when downloads area available.

Checked Windows Update today and noticed I’m being offered KB4562900, the .NET preview update. I wasn’t expecting to get offered this. For now, it’s sitting there waiting for me to download it. I haven’t decided if I’m going to use PowerShell to hide it or let it install.

Reply | Quote

jayinalaska wrote:

I’m being offered KB4562900, the .NET preview update. I wasn’t expecting to get offered this. For now, it’s sitting there waiting for me to download it. I haven’t decided if I’m going to use PowerShell to hide it or let it install.

You can run wushowhide to hide the update. If you do use it, on the first screen click on Advanced and then uncheck Apply repairs automatically.

Also, since you’re on Pro, do you have Group Policy set to stop Windows Update from downloading and installing updates automatically?

If not, run gpedit.msc as an Administrator, and navigate to Computer Configuration > Administrative Templates > Windows Components > Windows Update > Configure Automatic Updates – set Configure automatic updating to 2 – Notify for download and auto install.

I would also recommend setting the deferral setting for Quality updates to 0, so that way you can see exactly what is available at any given time. You can use wushowhide for this instead of clicking on ‘Check for updates’, which is a misnomer since it will download and install whatever is in the update queue but may not yet have appeared in the Windows Update menu – but again can be seen beforehand in wushowhide.

Reply | Quote

On Monday August 10th, I was set to install the July updates on my desktop PC (I am writing this on my fully patched laptop in the wee hours on Thursday). Unfortunately, our area was hit with a massive power outage at 1:50 pm. My power came back on Wednesday August 12, at 11:50 am. I did have time to do a controlled shutdown before the power went out. I unplugged the  PC to wait out the storm and power outage.

My question is this, if I try to install just the July updates now, am I going to get the August updates as well? I have made a complete image backup shortly before posting this (I disconnected the LAN cable before I powered up the desktop), so I could “roll back” if things don’t go well. Any advice would be greatly appreciated.

The desktop is running Windows 10 Pro 64 bit Version 1909 build 18363.900

Reply | Quote

Not installing the July patches until next month is an option – there are no major holes that need to be plugged.

If you are not using Group Policy to manage your updates, set the network connection to metered and install wushowhide.
Connect the network and let Windows find updates.
Hide the August updates and apply the July ones.

If you do use GP, install and use wushowhide.

cheers, Paul

1 user thanked author for this post.

bowled845

Reply | Quote