There are caveats.
[See the full post at: MS-DEFCON 5: Rare opportunity to get Windows and Office completely patched]
|
Patch reliability is unclear. Unless you have an immediate, pressing need to install a specific patch, don't do it. |
-
MS-DEFCON 5: Rare opportunity to get Windows and Office completely patched
- This topic has 106 replies, 25 voices, and was last updated 8 years, 1 month ago.
Viewing 36 reply threadsAuthor-
-
-
Very few – but there are some, and they’re well-behaved. That’s why I dropped all the way down to MS-DEFCON 5.
Wait for the article on InfoWorld, though. There are a couple of twists.
UPDATE: The articles up on InfoWorld.
-
The couple of twists make it a 4.5 😀
1 user thanked author for this post.
-
-
-
-
For that matter, except for a few stray driver patches (blacklisted in wushowhide) nothing for Win 10 Pro 1607 either.
-- rc primak
1 user thanked author for this post.
-
Maybe it is the right time to update the advisory for Group A.
Most people understand that Group A patching include EVERYTHING available.
Those users can still be in Group A if they install all available patches, but MAY EXCLUDE if they choose so:– All true Optional updates – see note below for further recommendations
– KB2952664 (all 21 versions of it)
– KB3021917
– KB971033I still recommend installing the following Optional updates, all related to RDP:
– KB2574819
– KB2952687
– KB2830477
There are further security patches to those 3 optional updates.
If you don’t know what it is or don’t use RDP (Remote Desktop Protocol) at all, which is typical for single user, single computer home user machines, then you may skip those updates.All Important and Recommended updates except for those mentioned above in the exclusion list must be installed. They improve Windows security and functionality significantly.
Group B users miss out on huge functional enhancements because they typically do not install Recommended updates. Their systems are only updated for Security and only marginally for functionality (Critical Updates under Important).If you decide to keep it simple and install ALL updates, including Optional updates, it is still OK for Group A.
Avoid the Preview Patches though, as they are released only on a temporary basis. It is not a mistake to install them, but they are intended only for testing.Woody says on InfoWorld:
The check takes many minutes. If it takes many hours, follow these steps. (Microsoft claims it has solved the slow Win7 Update scan problem, but you still may need to kick-start the process by following those steps.This happens for certain users who have selectively installed updates in the past and certain combinations of patches might still produce unexpected results due to complex supersedence relationships.
Follow the advice here if you encounter that issue:
http://www.infoworld.com/article/3136677/microsoft-windows/how-to-speed-up-windows-7-update-scans-forever.html1 user thanked author for this post.
-
Those products are older, although still under support.
Most of their problems are likely resolved.
They receive only now and then security updates and rarely functional updates.
It is not something completely unusual.
1 user thanked author for this post.
-
It is not something completely unusual.
With respect, I think it is extremely unusual. Up until August last year I always had a solitary monthly update for Office 2010 (typically to do with the Junk Email Filter), but from September onwards there hasn’t been a single one. Not one.
It’s clearly nothing to do with the particular problem they’ve had in February, as there weren’t any in September, October, November, December, or January either!
1 user thanked author for this post.
-
Ask yourself: Does their continuing to actively support an older product suit their goals to get people off those “old, terrible” versions?
I don’t know about you, but I’m not getting any more junk mail breaking into my inbox lately. And when they DO update Office they undo several tweaks I have to re-make.
-Noel
-
While your second point is a fair one, the first point raises the question of whether they should make an announcement if they have changed their support timetable and have now dropped support for these products, rather than just doing so without saying anything. Extended support for Office 2010 is still listed as expiring in October 2020. The monthly updates continued after the end of mainstream support so were presumably seen as part of the extended support but appear to have stopped when there were still 4 years of extended support to go.
It hasn’t caused me any issues, I just find it yet another confusing and unexplained twist in the update story that Microsoft don’t seem to have a full grip on.
1 user thanked author for this post.
-
The updates are meant to fix ongoing issues, either from a security perspective or functional perspective.
Why do we complain when there are no outstanding issues?1 user thanked author for this post.
-
Because we know that despite there being no updates generally in February there were outstanding security issues that remain unpatched. Plus we have become so sceptical where MS are concerned that we don’t for a moment believe that the reason they haven’t issued any updates for a product in 6 months is because they’ve perfected the security of that product, not least in the absence of a statement to that effect. So when a product that has been updated monthly for 6 years or so runs for 6 months without a single update despite still being under extended maintenance and with no explanation then we do indeed get curious as to why!
1 user thanked author for this post.
-
Noel:
Speaking of Office updates, I’m in the process of moving to Libre Office and away from MS Office. I’m getting tired of having to work so hard for the privilege of using Microsoft software. Word and Excel documents aren’t always 100% compatible, so I’ll have to retype some of them.
I’m going to keep a copy of Windows 7 / Office 2007 around in a sandboxed VM for those docs which I can’t work on in Libre office.
It is very restful using Libre Office rather than MS Office (and Linux instead of Windows). I don’t have to stay on my guard against rogue updates; and the danger of malware is less, although still present.
Jim
Group "L" (Linux Mint)
with Windows 10 running in a remote session on my file server
-
-
-
Took only a few minutes for me (on Win 8.1). The Flash update and Malicious Software Removal Tool are all I got. It didn’t even need a reboot.
I hid the optional telemetry update. Again.
By the way I noticed afterward that all these Task Scheduler items got a scheduled run time of tomorrow, where the date was “N/A” before… This kind of sneaky stuff is why I keep the Windows Update service disabled normally.
“\Microsoft\Windows\WindowsUpdate\Scheduled Start”,”3/3/2017 1:16:53 PM”,”Ready”
“\Microsoft\Windows\WindowsUpdate\Scheduled Start”,”3/3/2017 1:16:54 PM”,”Ready”
“\Microsoft\Windows\WindowsUpdate\Scheduled Start”,”3/3/2017 1:17:19 PM”,”Ready”
“\Microsoft\Windows\WindowsUpdate\Scheduled Start”,”3/3/2017 1:16:55 PM”,”Ready”
“\Microsoft\Windows\WindowsUpdate\Scheduled Start With Network”,”3/3/2017 1:17:07 PM”,”Ready”
“\Microsoft\Windows\WindowsUpdate\Scheduled Start With Network”,”3/3/2017 1:17:47 PM”,”Ready”
“\Microsoft\Windows\WindowsUpdate\Scheduled Start With Network”,”3/3/2017 1:17:46 PM”,”Ready”
“\Microsoft\Windows\WindowsUpdate\Scheduled Start With Network”,”3/3/2017 1:16:51 PM”,”Ready”-Noel
1 user thanked author for this post.
-
-
See further details on the Office patches here:
https://www.askwoody.com/forums/topic/need-help-from-woody-with-office-patches/
-
If your printer is connected wirelessly, and you are using DHCP to make the connection to the router, you might have the problem you describe. Some of the older versions of printer software (my experience with HP particularly) were not able to cope with the change of IP address. I found the best results if you assign a wireless printer a static IP address in the printer menu setup. That way the printer is at the same location every time.
Just guessing…
1 user thanked author for this post.
-
-
On the printer itself, there is usually menu choice setup\network (or something like that). choices auto\manual. Choose manual.
Your home router has a range of IPs it issues by DHCP – pick one on the high end. I like to use 192.168.1.200. The subnet mask will be 255.255.255.0 (most likely) and DNS will be your router address (in my example 192.168.1.1). It will scream and holler that if you change the address you may not get back on the network – ignore that. (If you make a mistake, you can always choose to set it back to the default).
Once you do this, the printer will stay at that address. You may have to go back to each computer and “add a printer.” But once you do that the printer will always be in the same place.1 user thanked author for this post.
-
-
-
-
@bymar
These links may help you to find Windows 7 articles on the new AskWoody Lounge:https://www.askwoody.com/forums/forum/askwoody-support/windows/windows-7/
-
Congratulations for making a good decision. 🙂
1. To get rid of all hidden updates and start clean, reset your SoftwareDistribution folder.
a. Open the Services console and stop the Windows Update service
b. Delete C:\Windows\SoftwareDistribution folder
c. Restart your computer2. Select Install recommended… check box to have them listed as Important
3. Install everything under Important (which now include Recommended) if it is checked by default.
4. You may except all Optional updates (but you can install them as well, there is no hard rule here, I install them all, except for those marked as Preview which are meant to be temporary updates released early for testers)
5. You may except from the Important (including Recommended) only the following:
KB971033
KB3021917 – normally unticked by default
KB2952664 – this one tends to move around depending on the release, between Optional and Recommended. If you wish to avoid one and only update, this is the one to avoid. Otherwise you can install it too, no hard rule determined.Note:
1. Never again hide updates. It causes more trouble than not. Just avoid installing them.
2. Most people would avoid the 3 patches mentioned above and all those coming under Optional, which are only 5 as far as I know (except for the Preview patches which come and go) and come unticked by default in all circumstances.
3. For March and the future, wait for Woody to give all clear before installing anything, unless you are ready to experiment and assume the risks.
4. If you configure CEIP correctly and do not install KB2952664, you are not subject to telemetry. KB3021917 is not known to be damaging, but its status is unclear and this is why I recommend not to install. Why is unclear? It comes unticked by default, it is not offered to the server equivalent 2008 R2, nobody can precisely explain what it does, except for abbodi86 who offered a reasonable and accurate explanation at the component level, but it still did not explain exactly the effects of this update. It is known not to be damaging though.
See my post here for further details:
https://www.askwoody.com/forums/topic/ms-defcon-5-rare-opportunity-to-get-windows-and-office-completely-patched/#post-98347 -
Additional info about KB3021917 is at https://www.askwoody.com/forums/topic/care-to-join-a-win7-snooping-test/#post-21433.
1 user thanked author for this post.
-
MrBrian had a series of outstanding posts in that thread.
https://www.askwoody.com/forums/topic/care-to-join-a-win7-snooping-test/
Excellent reading for everyone interested in the subject of telemetry and how it is implemented in Windows 7.1 user thanked author for this post.
-
-
-
-
2. Select Install recommended… check box to have them listed as Important
3. Install everything under Important (which now include Recommended) if it is checked by default.5. You may except from the Important (including Recommended) only the following:
KB971033
KB3021917 – normally unticked by default
KB2952664 – this one tends to move around depending on the release, between Optional and Recommended.ch100’s instructions are above
1 user thanked author for this post.
-
@CraigS26
Use your good judgment.
If you need Silverlight, install Silverlight and make sure it is all up to date. It is in the same league with Flash, on the way out, but still in use.
If you don’t need it or don’t know, then do not install it.
It is not a Windows Update, but a Microsoft Update, i.e. for other Microsoft products than Windows.
It may come as mandatory Security Update if you have one of the base versions already installed, in which case you have to decide, either uninstall Silverlight (preferable if not needed), or keep it patched.The purpose of resetting the SoftwareDistribution folder was to unhide everything hidden and lost from syncing with the Microsoft master repository. This is a good thing.
Why do you need the history, as it may be misleading often? All the software installed is listed under Installed Updates in Programs and Features.Everything else is in my original post.
1 user thanked author for this post.
-
Here is abbodi86’s post about KB3021917: https://www.askwoody.com/forums/topic/martin-brinkmanns-deep-dive-into-removing-telemetry-in-win7-and-8-1/#post-93764.
1 user thanked author for this post.
-
No need to uninstall the Jan security only patch. Just install the Jan Security Monthly Quality ROLLUP for Windows and Windows will be up to date. You will also need to install any other checked patches for IE, .NET, MSRT, C++, Office, etc.
1 user thanked author for this post.
-
All full updates install gracefully over the security only updates.
You don’t need to uninstall the security only updates, but you could if you wish.
Once the system is fully updated, you may wish to to run Disk Cleanup and allow this software to remove obsolete updates.
Be prepared, because it takes long time if there are many updates installed and also the restart (or multiple automatic restarts) take a long time too. It can run into hours, depending on the performance of the computer.1 user thanked author for this post.
Advice needed please: Am in group B but thinking of going to Group A. Have installed the January security only update. If now want to go to group A do I first have to uninstall the security update or will it install over it.
Glenda: If you are moving to Group A, I have two suggestions for you:
1. Do regular complete backups of your Windows hard drive, so that if a rogue update somehow hoses Windows, you can easily get back to where you were prior to the update being installed on your computer.
2. Consider installing a second hard drive and keeping your data on it rather than on the primary hard drive. (Be sure to do a regular backup of the Data drive as well, but separate from the Windows backup.) In this way, if you have to restore a Windows backup, your data will not get erased in the restore process.
Group "L" (Linux Mint)
with Windows 10 running in a remote session on my file server1 user thanked author for this post.
The bottom line for Win 7 group B is that there is nothing except the MSRT in Feb. for us. Nothing in the MS Update Catalog, and no Office 2010 updates. I guess we can sit back and relax after getting the MSRT.
Being 20 something in the 70's was far more fun than being 70 something in the insane 20's1 user thanked author for this post.
Finally!
OK, I went for it. I ran the search for updates Friday afternoon around 12:30 and it was still going a few hours later. I let it go until I checked it Saturday night and it gave me the list of available updates (which is said started around 6:30 on Friday). They looked OK and I ran the update.
Thank you!
Morty
Description FixComments HotFixID InstallDate InstalledBy InstalledOn
Update KB3078667 Admin-PC\Admin 3/5/2017
Update KB3080149 Admin-PC\Admin 3/5/2017
Update KB3092627 Admin-PC\Admin 3/5/2017
Update KB3107998 Admin-PC\Admin 3/5/2017
Update KB3118401 Admin-PC\Admin 3/5/2017
Update KB3121255 Admin-PC\Admin 3/5/2017
Update KB3133977 Admin-PC\Admin 3/5/2017
Update KB3140245 Admin-PC\Admin 3/5/2017
Update KB3147071 Admin-PC\Admin 3/5/2017
Update KB3161102 Admin-PC\Admin 3/5/2017
Update KB3170735 Admin-PC\Admin 3/5/2017
Update KB3172605 Admin-PC\Admin 3/5/2017
Security Update KB3177186 Admin-PC\Admin 3/5/2017
Update KB3179573 Admin-PC\Admin 3/5/2017
Update KB3181988 Admin-PC\Admin 3/5/2017
Update KB3184143 Admin-PC\Admin 3/5/2017
Security Update KB3205394 Admin-PC\Admin 1/29/2017
Update KB3210131 Admin-PC\Admin 3/5/2017
Security Update KB3212646 Admin-PC\Admin 3/5/20171 user thanked author for this post.
-
@morty
Your copy and paste came through unreadable, sorry (we’ve had a couple of issues this weekend), so I have removed it as it was rather long.
It may be possible to save your working as text somehow, but I’m sorry I’m not much help with that (I’ve tried my magic trick, but it didn’t help).
Might I suggest you create a topic in the relevant Support: Windows Question section for your computer, which may be more appropriate than the blog here, if you need assistance that is. There you could try to post it again, or perhaps save the results and upload, which might be more successful.
Sorry I’ve not been more help. -
Thank you! I edited it and resubmitted it.
1 user thanked author for this post.
-
-
-
Frankly, this tech stuff is over my head. But I’m managing to tread water….
Morty, seriously, you should consider moving to Group A type of updating and stop worrying so much and not wasting time with technical stuff which you shouldn’t even know that exists.
But I will leave this for Woody to convince you one way or the other. 🙂2 users thanked author for this post.
-
-
-
Hi Morty, the text version from that page should be a better match:
If you would rather have a text file, the command would be:
wmic qfe list brief /format:texttablewsys > “%USERPROFILE%\hotfix.txt”
1 user thanked author for this post.
-
Now the question is do I have to go back and install the monthly security updates I missed because I just kept spinning wheels? Those are October, November and December.
From November on, the Security Monthly Quality ROLLUPS are cumulative. Dec contains Nov. Jan contains Nov & Dec. So the only one you need is the last one, and it is the one that will show up in Windows Update. If you wait till patch Tues this month, March will contain Nov & Dec & Jan.
1 user thanked author for this post.
-
Answer is here
https://www.askwoody.com/forums/topic/ms-defcon-5-rare-opportunity-to-get-windows-and-office-completely-patched/#post-990701 user thanked author for this post.
-
I am so pleased that @PKCano is so prompt and has all the answers for all the replies that some of us are most likely to miss for various reasons. 🙂
@CraigS26 I replied to you only after noticing that @PKCano has already pointed you to one of the possible solutions. Otherwise you were right in sayingand I don’t know how you’ll notice it
1 user thanked author for this post.
If you’re not overly concerned about snooping, Group A is the way to go.
This coming from a guy who uses Win10 constantly and has already made the plunge… so what do I know?
If you don’t know who does? (Besides Microsoft, Google, Apple and the NSA…)
1 user thanked author for this post.
-
Better to wait than install a zombie 🙂
Windows - commercial by definition and now function...1 user thanked author for this post.
-
Good advice.
1 user thanked author for this post.
-
-
If you need Silverlight, install and use Silverlight. If you need Flash, install and use Flash. If you need Java, install and use Java. But keep them always up to date. Those technologies exist to be used and enough reputable sites implement them. Avoid them only when you don’t use them.
That’s a sensible approach :). I use Silverlight for my online TV (my cable provider still uses it), I use Flash (Spotify Web Player for example), have updates set to automatic and no problems whatsoever.
Fractal Design Pop Air * Thermaltake Toughpower GF3 750W * ASUS TUF GAMING B560M-PLUS * Intel Core i9-11900K * 4 x 8 GB G.Skill Aegis DDR4 3600 MHz CL16 * ASRock RX 6800 XT Phantom Gaming 16GB OC * XPG GAMMIX S70 BLADE 1TB * SanDisk Ultra 3D 1TB * Samsung EVO 840 250GB * DVD RW Lite-ON iHAS 124 * Windows 10 Pro 22H2 64-bit Insider * Windows 11 Pro Beta Insider1 user thanked author for this post.
Back to business.
Regular Office Updates have been released today, first Patch Tuesday of March 2017.I can also see new versions of KB2952664 and KB2976978.
Maybe it is the right time now to get back to MS-DEFCON 2 for a little while. 🙂
1 user thanked author for this post.
Advice needed please: Am in group B but thinking of going to Group A. Have installed the January security only update. If now want to go to group A do I first have to uninstall the security update or will it install over it.
Glenda: If you are moving to Group A, I have two suggestions for you: 1. Do regular complete backups of your Windows hard drive, so that if a rogue update somehow hoses Windows, you can easily get back to where you were prior to the update being installed on your computer. 2. Consider installing a second hard drive and keeping your data on it rather than on the primary hard drive. (Be sure to do a regular backup of the Data drive as well, but separate from the Windows backup.) In this way, if you have to restore a Windows backup, your data will not get erased in the restore process.
Great advice, but one caveat:
I was having problems with a PC (I won’t name the company), back in 2001. I was on the phone with them often and, finally, a rep told me, “Everything you’re doing is a band aid. You need to reformat and start over.”
So here’s where the caveat comes in: I had two hard drives in the box and used one of them for backups. I explained this to the rep. And she told me to put in the system recovery disk and follow the instructions. What she didn’t tell me was that the system recover disk would reformat all the drives in the box.
I lost eight months of work, plus all the backups.
The company agreed it was their fault and paid for me to attempt retrieving the data with Ontrack (I think that was the name). But the backups were image files that were too big to retrieve.
Lesson learned: Use an external drive for backups, even if you have a second internal drive.
1 user thanked author for this post.
-
-
-
If you are installing the Security Monthly Quality ROLLUPS from Windows Update, the answer in no, you do not have to go back and install everything after Oct. The ROLLUPS are cumulative, meaning the last one contains all the patches from the previous ones. So Jan will bring you up to date.
If you are in Group B, and installing Security Only Quality UPDATES (these have to be downloaded and manually installed), these are NOT cumulative and you have to install each one.
1 user thanked author for this post.
-
-
-
-
Viewing 36 reply threads
Plus Membership
Donations from Plus members keep this site going. You can identify the people who support AskWoody by the Plus badge on their avatars.
AskWoody Plus members not only get access to all of the contents of this site -- including Susan Bradley's frequently updated Patch Watch listing -- they also receive weekly AskWoody Plus Newsletters (formerly Windows Secrets Newsletter) and AskWoody Plus Alerts, emails when there are important breaking developments.
Get Plus!
Recent Topics
-
Connecting hard drive on USB 3.2 freezes File Explorer & Disk Management
by 9 minutes ago
-
Shellbag Analyser & Cleaner Update
by 43 minutes ago
-
CISA warns of increased breach risks following Oracle Cloud leak
by 2 hours, 20 minutes ago
-
Outlook 2024 two sent from email addresses
by 6 hours, 24 minutes ago
-
Speeding up 11’s search
by 13 hours, 36 minutes ago
-
HP Pavilion Will Not Wake Up After Being Idle for Longer Period
by 12 hours, 55 minutes ago
-
Make a Windows 11 Local Account Passwordless
by 16 hours, 22 minutes ago
-
Ubuntu 25.04 (Plucky Puffin)
by 23 hours, 55 minutes ago
-
24H2 fixed??
by 13 hours, 24 minutes ago
-
Uninstalr Updates
by 1 day, 5 hours ago
-
Apple zero days for April
by 9 hours, 45 minutes ago
-
CVE program gets last-minute funding from CISA – and maybe a new home
by 2 hours, 38 minutes ago
-
Whistleblower describes DOGE IT dept rumpus at America’s labor watchdog
by 2 days, 3 hours ago
-
Seeing BSOD’s on 24H2?
by 1 day, 10 hours ago
-
TUT For Private Llama LLM, Local Installation and Isolated from the Internet.
by 1 day, 18 hours ago
-
Upgrade from Windows 10 to 11
by 2 days, 12 hours ago
-
Microsoft : AI-powered deception: Emerging fraud threats and countermeasures
by 2 days, 15 hours ago
-
0patch
by 1 day, 16 hours ago
-
Devices might encounter blue screen exception with the recent Windows updates
by 2 days, 8 hours ago
-
Windows 11 Insider Preview Build 22631.5261 (23H2) released to Release Preview
by 2 days, 18 hours ago
-
Problem opening image attachments
by 2 days, 19 hours ago
-
advice for setting up a new windows computer
by 3 days, 10 hours ago
-
It’s Identity Theft Day!
by 12 hours, 15 minutes ago
-
Android 15 require minimum 32GB of storage
by 3 days, 15 hours ago
-
Mac Mini 2018, iPhone 6s 2015 Are Now Vintage
by 3 days, 15 hours ago
-
Hertz says hackers stole customer credit card and driver’s license data
by 3 days, 16 hours ago
-
Firefox became sluggish
by 1 day, 8 hours ago
-
Windows 10 Build 19045.5794 (22H2) to Release Preview Channel
by 3 days, 20 hours ago
-
Windows 11 Insider Preview Build 22635.5235 (23H2) released to BETA
by 3 days, 20 hours ago
-
A Funny Thing Happened on the Way to the Forum
by 2 days, 17 hours ago
Remembering Woody
