Welcome to the August 2020 Patch Tuesday plop

Topic

New Reply

Willkommen, bienvenue, welcome! Fremde, étranger, stranger Glücklich zu sehen, je suis enchanté, happy to see you Bleibe, reste, stay Patch Tuesday is
[See the full post at: Welcome to the August 2020 Patch Tuesday plop]

7 users thanked author for this post.

Carl D, abbodi86, Alex5723, Mr. Natural, geekdom, Elly, Microfix

Reply | Quote

Replies

AKB 2000003 has been updated for Group B Win7 (ESU) and Win8.1 on August 11, 2020.

There are Security-only and IE11 Cumulative Updates for those with Win7 ESU subscriptions.
August Rollup KB4571729 Download 32-bit or 64-bit for those with Win7 ESU subscriptions.
You must have July Servicing Stack KB4565354 previously installed to receive these updates)

There is also a new  August Servicing Stack KB4570673. Download 32-bit or 64-bit for those with Win7 ESU subscriptions.

UPDATE: For those of you attempting to install Win7 updates for .NET 4.5.2 and later (patches with the .exe extension), see post #2287984 .

There is a revised Licensing Preparation Package KB4575903 dated 7/29/2020 for Win7 ESU subscriptions, if you need it.

6 users thanked author for this post.

jburk07, Carl D, abbodi86, SueW, woody, Microfix

Reply | Quote

Any thoughts to adding the Windows 7 .Net Updates to AKB2000003?

I see the post #2290149 references the .Net blog to find the .Net Updates.

I usually find the KB numbers through the Master Patch List.

Reply | Quote

.NET is not a part of AKB2000003, which was created for Group B to avoid telemetry in Windows OS updates by providing a list of Security-only updates not available through the Windows Update mechanism. .NET was not a factor in the telemetry avoidance.

.NET updates are available through Windows Update. The purpose of AKB2000003 was not a convenient list of all updates each month.

3 users thanked author for this post.

KP, SueW, abbodi86

Reply | Quote

There are also .NET framework updates for Win7 ESU subscribers:
3.5.1, 4.5.2, 4.6, 4.6.1, 4.6.2, 4.7, 4.7.1, 4.7.2 and 4.8
Hopefully this month these will be accepted.

If debian is good enough for NASA...

2 users thanked author for this post.

jburk07, woody

Reply | Quote

So seems like there are no fixes for the PDC.sys BSODs on Dell XPS, Latitude and Precision laptops while entering or leaving sleep states.

We are hosed with Windows 10, v2004 on those laptops with tons of users.

Dell’s ProSupport was waiting for this update to miraculously fix this and broken drivers are all over the place.

I am installing and hoping for a miracle.

Reply | Quote

Let us know how things turn out….

1 user thanked author for this post.

Fred

Reply | Quote

KB4566782 Cumulative Update for Windows 10 Version 2004 for x64-based Systems
KB4569745 Cumulative Update for .NET Framework 3.5 and 4.8 for Windows 10 Version 2004 for x64 downloaded and installed, no hiccups.

Was Version 2004 (OS Build 19041.388), now Version 2004 (OS Build 19041.450).

Always create a fresh drive image before making system changes/Windows updates; you may need to start over!

We all have our own reasons for doing the things that we do with our systems; we don't need anyone's approval, and we don't all have to do the same things.

We were all once "Average Users".

Computer Specs

Reply | Quote

They got pushed to my NAS and laptop after active hours early this morning.

Always create a fresh drive image before making system changes/Windows updates; you may need to start over!

We all have our own reasons for doing the things that we do with our systems; we don't need anyone's approval, and we don't all have to do the same things.

We were all once "Average Users".

Computer Specs

Reply | Quote

Just installed.I had the .net and new CU on my 2004 machine. It went pretty quick and no apparent problems.

Barry
Windows 11 v23H2

Reply | Quote

[geekdom]

Windows 1909 TestBeta
August 11, 2020

• 2020-08 Cumulative Update for Windows 10 Version 1909 for x64-based Systems (KB4565351)
• 2020-08 Cumulative Update for .NET Framework 3.5 and 4.8 for Windows 10 Version 1909 for x64 (KB4569751)

Installed updates from Windows Update:

• Windows 10 KB4565351 installed first.
• .NET Framework KB4569751 showed pending.

I was prompted to reboot, so I rebooted without error, and checked for updates again.

• There were no updates pending.
• Windows 10 KB4565351 showed installed.
• .NET Framework KB4569751 showed installed.

As a postscript:
July 21, 2020
2020-07 Cumulative Update Preview for .NET Framework 3.5 and 4.8 for Windows 10 Version 1909 for x64 (KB4562900) was installed from Windows Update. This was the uninvited preview patch.

On permanent hiatus {with backup and coffee}
offline▸ Win10Pro 2004.19041.572 x64 i3-3220 RAM8GB HDD Firefox83.0b3 WindowsDefender
offline▸ Acer TravelMate P215-52 RAM8GB Win11Pro 22H2.22621.1265 x64 i5-10210U SSD Firefox106.0 MicrosoftDefender
online▸ Win11Pro 22H2.22621.1992 x64 i5-9400 RAM16GB HDD Firefox116.0b3 MicrosoftDefender

• This reply was modified 4 years, 7 months ago by geekdom.

3 users thanked author for this post.

jburk07, rontpxz81, Coldheart9020

Reply | Quote

RANT – I absolutely despise Windows updates over the last 5 years or so!

6 users thanked author for this post.

gjacwel, Mr. Austin, lanceboil, Cee Arr, DriftyDonN, RamRod

Reply | Quote

geekdom wrote:

2020-07 Cumulative Update Preview for .NET Framework 3.5 and 4.8 for Windows 10 Version 1909 for x64 (KB4562900) was installed from Windows Update. This was the uninvited preview patch.

I didn’t install KB4562900 but can confirm that it has now disappeared from the hidden updates list in wushowhide, due to the release of KB4569751.

Reply | Quote

Seems to me that Defender or any other antivirus ought to be able to detect the bad signatures and block the files.

Reply | Quote

I have the updates paused but am reacting to the Mozilla story.  I wonder whether they can make a go of it without the Google money coming in.  I have used Firefox since almost day one and don’t relish switching.

3 users thanked author for this post.

Bill C., Mr. Austin, fk5353

Reply | Quote

Is there no KB890830 — Windows Malicious Software Removal Tool/MSRT (now on a quarterly cadence – May, Aug, Nov, Feb)?

Reply | Quote

I am happy to say Trend Micro, v2004, and my laptop has been working OK since this update. The preview update didn’t make a dent. I am spinning up Precision 5530 and 5520 to make sure they are OK too.

More justification to push for a UEM I have no visibility into what my people are doing out there.

One thing I gotta come clean on. I’ve always thought people on this site were too conservative when it came to using new software but the v2004 rollout gave me a real workout on the Windows Update life.

Reply | Quote

I’m new to 1909 and have updates paused but what about Defender’s Virus definition updates or even Defender’s engine updates is that paused as well. Do I also need to set a metered connection as well as I’m paused until Sept 2020 for updates waiting on DEFCON3.  This is my first update period where I have been making use of 1909 Home’s pause updates feature as I was on 1809 Home just 2 months ago.

Reply | Quote

As I understand it, Defender updates go ahead regardless of your Pause or Metered Connection settings.

Reply | Quote

On my Home boxes with metered connections the Defender updates are not automatic, but I get notification for updates, which are installed as soon as you open the notification. See the attached screenshots.

You must check Windows notifications in the tray

1 user thanked author for this post.

woody

Reply | Quote

Just a suggestion, but could it be that the people that aren’t seeing any Win Defender or Malicious Tool updates have 3rd party AV? In the same screen as Paul T, I see my 3rd party AV is up-to-date, with an option to check periodically for Win Defender AV updates (which I have off). I would assume it’s not going to offer or notify me of Win Def updates unless I choose to use it to periodically scan for viruses/threats OR I just use Win Def with no 3rd party AV.

I have Win 10 1909 x64 Home; set to metered connection and always paused until defcon 3 level or forums suggest updates are set. I do my updates manually (prob more work, but I have better control).

If Win Def updates were ‘sneaking in’ either with other updates or automatically, shouldn’t they still show up as being installed in the view installed updates of Control Panel and view update history in Windows Update?

Reply | Quote

MSRT is an update; if it were there you would have seen it in the queue.

On permanent hiatus {with backup and coffee}
offline▸ Win10Pro 2004.19041.572 x64 i3-3220 RAM8GB HDD Firefox83.0b3 WindowsDefender
offline▸ Acer TravelMate P215-52 RAM8GB Win11Pro 22H2.22621.1265 x64 i5-10210U SSD Firefox106.0 MicrosoftDefender
online▸ Win11Pro 22H2.22621.1992 x64 i5-9400 RAM16GB HDD Firefox116.0b3 MicrosoftDefender

Reply | Quote

Has that been your experience?

Reply | Quote

The August updates installed with no problems on my Dell 8930. Please note that I only install updates manually using the Microsoft Update Catalog. That way if a patch is not compatible it won’t *(shouldn’t) install.  Happy computing everyone. 🙂

1 user thanked author for this post.

WinSoftHelpMore

Reply | Quote

hmm…..last checked for updates at 9:33 p.m. yesterday.

And after I carefully set all according to PKCano’s #2000016 instructions.

PC been on all day, restarted it once after av update.

Well, wait n see!

DriftyDonN

(to self…PAUSE NOW while I have the chance??)

Reply | Quote

[woody]

From Usama Jawad at Neowin:

Google discloses ‘medium’ severity flaw in Windows following Microsoft’s incomplete fix

The flaw which was first reported to Microsoft on May 5, 2020 allows apps to bypass network authentication via a user’s credentials even when they don’t have that capability.

While Google’s summary of the vulnerability is full of technical jargon (and you’re free to read it in-depth here), the main issue is that the legacy Windows AppContainer grants access to Enterprise Authentication via single sign-on, which is a restricted capability providing access to sensitive functions. As such, this isn’t automatically approved for Windows Store apps and is primarily used in side-loaded enterprise applications….

Google Project Zero gave Microsoft the standard 90-days deadline to fix this vulnerability and also offered a grace period on July 31 so that the company could roll out the fix in August’s Patch Tuesday. While Microsoft did indeed release the fix in its CVE-2020-1509 yesterday and credit James Forshaw for discovering it, the Project Zero team claims that it is an incomplete fix since it does not rectify the DsCrackSpn2 target name resolving technique. As such, Google has now publicly revealed the flaw in accordance with its policies….this problem impacts numerous versions of Windows, including Windows Server 2012, 2016, 2019, Windows RT 8.1, 8.1, and Windows 10 all the way up to version 2004.

• This reply was modified 4 years, 7 months ago by woody.

2 users thanked author for this post.

fk5353, woody

Reply | Quote

Another one who’s taken a dive into the August 2020 Windows 10 Update Pool *Plop* 🙂

Remember – don’t try this at home without having a backup image to fall back on if needed.

No problems to report so far.

The Defragment and Optimize Drives ‘amnesia’ bug still hasn’t been fixed which is a little strange seeing as I’ve read somewhere that it was fixed in an insider build just recently. Maybe MS are also suffering ‘amnesia’ and they’ve forgotten to include it in this month’s updates?

I don’t have a stopwatch handy but I’m sure it takes less time to do a clean install of Windows 10 (onto an SSD from a USB3 thumb drive) than it takes to download and install the monthly Windows 10 updates these days. Especially this month’s.

Reply | Quote

[sheldon]

Strange problem with wushowhide.  This started when I tried to hide the latest updates.  Two versions of a driver show as hidden: “Intel System 10.1.7.3” and “Intel System 10.1.1.44”.  Sometimes both also show as not hidden too.  If I try to hide both  versions, 10.1.7.3 remains not hidden as well as hidden.  While 10.1.1.44 is just hidden.  Version 10.1.1.44 is what is installed on the PC.  On the Device Manage this driver is called “Intel(R) 300 Series Chipset Family LPC Controller (Z370) – A2C9”.  “Exclude drivers from Windows quality updates” is set via group  policy.  Any ideas how to fix this issue?

• This reply was modified 4 years, 7 months ago by sheldon.

Reply | Quote

When Windows Update scans for updates using the Windows Update Service, the pending updates are saved in a cache. That is what shows in the Windows Update queue. The cache is not cleared until Windows Update scans again. So what you see in the queue is static.

Wushowhide also uses theWindows Update Service to scan for updates. If you are scanning for/hiding updates with wushowhide, the scan is realtime (dynamic). So the hidden updates appear hidden and no longer show pending.

But the Windows Update cache hasn’t changed, b/c WU has not run a scan. So the updates you have hidden still show in the queue. If you “resume updates,” turn off metered connections, or otherwise unblock the download/install, you actually get what appears in the queue, even though you think you have hidden the updates.

So once you hide updates, you either need to clear the queue or wait until WU scans again on its own. Be sure the queue only has the unhidden updates before you pull the plug, b/c what you see there is what you get.

3 users thanked author for this post.

Speed Racer, Coldheart9020, woody

Reply | Quote

I have used Wushowhide many times.  When I hid something in the past it always immediately removed it from the from the “unhidden” side of Wushowhide.  When you talked about “que” and “pending”, I am not sure how these fit into “unhidden” side of Wushowhide.

Reply | Quote

WUMgr has far better functionality and control than the MS wushowhide. Why is anyone using an MS utility to prevent MS patches?

Reply | Quote

Queue referrs to Windows Update, not wushowhide. It is what you see listed in Settings\Update & Security\Windows Update.

Pending refers to any updates available to be downloaded/installed.

Reply | Quote

[sheldon]

Basically I have a driver in both the hidden and unhidden sides of wishowhide.  Is it really hidden?  How can I get rid of it on the unhidden side?

• This reply was modified 4 years, 7 months ago by sheldon.
• This reply was modified 4 years, 7 months ago by sheldon.

Reply | Quote

It’s now Patch Tuesday + 1.  I have 2 machines I work with – a laptop (shuts down every night) and a VM (always on).  This morning I found a pending .NET 3.5 update on the VM.  Installed, rebooted, and now Windows Update says “You’re up to date, Last Checked: Today, 7:07 AM” (EDT).  The laptop *did* update today and it had the .NET update as well as the Win10 cumulative and service stack patches.  Multiple “Check for updates” on the VM find nothing more.  This means that someday within the next fortnight I will come in to find my VM rebooted and all open windows and unsaved work from the previous day gone.  I’m a developer – I frequently have test cases, debugging runs, mid-edit files that get left until tomorrow.  Rebooting in the middle of that without my consent is the epitome of “not cool”.

I’m OK with forced updates (well, not really “ok”, just resigned to the fact).  What I am NOT OK with is that I have no way to tell windows to never, ever, EVER F******’ EVER, automatically restart after an update. Especially considering that I never know exactly when these updates are going to occur.

Reply | Quote

anonymous wrote:

What I am NOT OK with is that I have no way to tell windows to never, ever, EVER F******’ EVER, automatically restart after an update.

If you go to Windows Update > Advanced Options and then disable the toggle that reads Restart this device as soon as possible when a restart is required to install an update.

That should prevent Windows from forcing a restart after an update is installed and requires a reboot. Hope this helps.

Reply | Quote

We had a wild thunderstorm soon after patch release yesterday so, my usual precautions were put into action (disconnect router etc..)
Which gave me some time to update 2 of our 3 Win8.1 x64 devices.(I download SMQR via catalog for obvious reasons, and just in time)
No problems or issues flagged to report on either PC, TiWorker/Trusted installer was going at it for longer than usual this month on the CU patch before calming down and the .NET patch was a breeze.
No SSU for Win8.1 this month 🙂

If debian is good enough for NASA...

Reply | Quote

Microsoft Forum Report is here:

https://answers.microsoft.com/en-us/windows/forum/all/cumulative-updates-august-11th-2020/6a8f94e3-aae0-446e-862c-db55c43721a4

I haven’t seen any big rush on error reports.

On permanent hiatus {with backup and coffee}
offline▸ Win10Pro 2004.19041.572 x64 i3-3220 RAM8GB HDD Firefox83.0b3 WindowsDefender
offline▸ Acer TravelMate P215-52 RAM8GB Win11Pro 22H2.22621.1265 x64 i5-10210U SSD Firefox106.0 MicrosoftDefender
online▸ Win11Pro 22H2.22621.1992 x64 i5-9400 RAM16GB HDD Firefox116.0b3 MicrosoftDefender

Reply | Quote

Hey folks, I’m not seeing an August service stack update for server 2012r2 in WSUS. I triple checked just to be sure but not seeing one.

Red Ruffnsore

Reply | Quote

there is no SSU for Win8.1 or server 2012r2 for this month 🙂

If debian is good enough for NASA...

1 user thanked author for this post.

Mr. Natural

Reply | Quote

that’s right Microfix.

both Win8 Embedded Standard (server 2012 R0) and Win8.1 (Server 2012 R2) did not get any new servicing stack updates (and that’s a good thing)

same thing with older Win10 releases before v1809 (like v1803, etc.) which also did not get any new SSUs this August

1 user thanked author for this post.

Mr. Natural

Reply | Quote

This was already linked to by Woody on the blog regarding SSU’s for this month:
https://portal.msrc.microsoft.com/en-us/security-guidance/advisory/ADV990001

If debian is good enough for NASA...

1 user thanked author for this post.

Mr. Natural

Reply | Quote

you wrote this, woody

And I see Servicing Stack Update, uh, updates all over the place.

only most Windows versions (including Win7 and recent Win10 versions from v1809 to v2004) got new August 2020 servicing stack updates EXCEPT for Win8.x (Win8 Embedded & Win8.1) and older Win10 releases like v1507 & v1607 (both LTSB 2015 & 2016 versions respectively) along with other older Win10 versions from v1703 to v1803 which the latest servicing stack updates are those from July 2020.

1 user thanked author for this post.

woody

Reply | Quote

[doriel]

One question for all, please: How can versions 1507, 1607 or 1703 still recieve udates, when they should have been upgraded some time ago?

Understand my logic:
If 1507 is connected to internet to recieve udates, it should have been already upgraded to 1903, even if you set up max updates defferal to 365 days (if possible in mentioned version). Is my logic faulty?

Update:
I missed, that you mention LSTB versions. I think I get it now.

Dell Latitude 3420, Intel Core i7 @ 2.8 GHz, 16GB RAM, W10 22H2 Enterprise

HAL3000, AMD Athlon 200GE @ 3,4 GHz, 8GB RAM, Fedora 29

PRUSA i3 MK3S+

• This reply was modified 4 years, 7 months ago by doriel. Reason: update

Reply | Quote

why isn’t there a service stack update for some versions but not others? curious

Reply | Quote

Speaking of SSUs, it’s ridiculous that Windows 7 ESU is receiving new SSU every month
and for what? it did not / does not (and probably will not) stop ESU bypass

users who have Win7 x64 installed since 2016 or 2015 and have installed all SSUs, will end up with more than 350 MB of wasted space in WinSxS folder
since SSUs are permanent and not uninstallable (without manual workaround to edit mum files)

3 users thanked author for this post.

jburk07, Microfix, woody

Reply | Quote

Dism++ 10.1.1001.10 reduces the winSxS size by removing superseded components..doesn’t it help in this area to some extent? I’m aware that SSU’s are baked in once installed and that by removing superseded components, re-bakes the installed OS 🙂

If debian is good enough for NASA...

Reply | Quote

It does help, but there is a risk of breaking the component store integrity

i guess the manual workaround for uninstalling old SSUs are better to use, and perfectly safe

Reply | Quote

@abbodi86 and others

I was cleaning up a customer’s old Dell 486 x64 Windows 7 Pro Sp1 box with no ESU contract or ESU bypass tool and it showed 4 critical updates in August and 6 critical updates in July. Restore points take up space.

It appears his Win 7 box has Defender aka Security Essentials AV on and seems to get all critical updates. The critical updates seem random. The critical updates were noted in the restore point logs.

In his Box’s Your Update history for windows 7 updates there were no recent windows updates listed. His Microsoft updates are turned off. This is a head scratch. I guess if Win 7 has defender AV is active you get all critical updates via the connection to Microsoft servers along with new AV signatures.

Reply | Quote

You mean critical updates for Windows or Defender/SE?
detection and applicability for EU updates is not affected by Defender/SE

are you sure he didn’t use external tools?

Reply | Quote

August 2020 Patch Tuesday a welcome yawner on my end so far.  I’ve put the Win 10 2004 patch and the NET frame install (via Windows Update) on two laptops and one desktop so far.  All run Win 10 Pro.  No installation issues.  All 3 machines working fine after updating.

Desktop Asus TUF X299 Mark 1, CPU: Intel Core i7-7820X Skylake-X 8-Core 3.6 GHz, RAM: 32GB, GPU: Nvidia GTX 1050 Ti 4GB. Display: Four 27" 1080p screens 2 over 2 quad.

Reply | Quote

Indeed Tuesday plop. On 4 of my 5 machines, network discovery has died, and these four now only see themselves 🙁 .  have done every trick in the book, including uninstalling all the network components and letting windows re-install them as per:

https://www.bleepingcomputer.com/forums/t/712515/network-discovery-not-working/

The step of resetting the network worked on machine 5 in July

Reply | Quote

Windows 10 64 Home. 2-attempts to install, all updates. 1x fail, 1x installed. Looking good.

Windows 10 64 Pro. Upgraded to 2004. Stable.

Windows 10 32 Home. All OK.

Reply | Quote

Aug SSU, CU 1909-64 KB4565351 and NetFrmwk 3.5/4.8 & installed fairly fast with no issues/ Macrium Images were ready. I always have to chk Control Panel Update History to confirm SSU, which is the only place I see it. I recently inst’d the 2016 Hm-Stdnt Office C2R Updates without issues.

W10 Pro 22H2 / Hm-Stdnt Ofce '16 C2R / Macrium Pd vX / GP=2 + FtrU=Semi-Annual + Feature Defer = 1 + QU = 0

Reply | Quote

Nice try Microsoft and thank you for your buggy system. When I checked if the patch Tuesday update was available, I had a message saying the update stopped before completion and to verify my internet connection.  As usual the wi-fi was down, and I have to re-start it. When the connection went back on, I had two updates in the queue KB4569751 and KB4565351 plus a nice surprise, the feature update to Windows 10. Version 2004 was also in the queue to be installed after the two monthly patches. I cancelled the update in progress and when I re-started it, the feature update was finally out of the queue. In May, I moved from 1809 to 1909 specially to prevent that to happen. This time the buggy wi-fi save the day.

Reply | Quote

FYI,

2 Windows 10 Home v1909 systems.

Resumed Windows Update and installed 2020-08 CU KB4565351, SSU KB4569073 & CU KB4569751 .NET Framework 3.5 and 4.8 without
any untoward incident.

No Feature upgrade to Windows 10 2004 was done by Windows Update when resuming update or checking for update after installation of  the 2020-08 CUs. The Feature Upgrade is on a separate section below it with the optional “Download And Install” button.
Set the “Pause Date” to Sep 2020.

As reported by :
https://www.reddit.com/r/Windows10/comments/i7vojm/cumulative_updates_august_11th_2020/g1addgd/
https://help.pdf24.org/en/forums/topic/error-printing-on-pdf24-message/

PDF24 Creator 9.1.1 will not print in both Windows 10 v1909 and v2004 after the 2020-08 CUs were installed and a new build  PDF24 Creator 9.2.0 (https://tools.pdf24.org/en/creator) was later released to address the bug.
Take Note : Forum suggestion was to clean uninstall the old installation before installing the new PDF24 Creator 9.2.0 application.

Cheers.

Reply | Quote

Installed on 3 1909 test systems and my workstation. No issues noted so far.

Reply | Quote

I have to start my experience before it gets much longer.

System is Dell XPS 2720 AIO 16GB  2 TB HD. Windows 10 Pro 64 bit.

Installed version 2004 mid June no issues, applied July patches no issues.

Ensured backups and system images since.

Now, to this patch Tuesday.

created system image at build 19041.388, updates were Paused. gpedit #2.
resumed updates, no option presented for download, it downloaded 2020-08 
for both 2004 and .net. build now 19041.450.
No apparent issues.shutdown at end of day.
Wednesday morning booted sytem and presented with BITLOCKER RECOVERY screen.
Well, bitlocker was probably turned off around version 1903 and never 
thought anything about it since. I had no recovery key. No easy out here.
Rebooted from rescue usb and;
Restored 19041.388 system image using Macrium Reflect and it suggested 
I turn ON bitlocker on completion. I did (took about 5 hours), saved key.
Thursday morning, things ok, feeling smug so I resumed updates again and 
again Aug patches download and install so I system image for 19041.450.
Checked bitlocker and it was on, so I'm good right? Shutdown at end of day.
Friday (today) I boot up and presented with a Dell small window telling me 
"No HDMI" for video etc. This is an All-in-one pc and no HDMI connected 
anywhere, can't get out of this window so I force shutdown and on reboot 
Im presented with the BITLOCKER RECOVERY screen again. REALLY! So twice I 
try to enter the 48 character key (not counting dashes) and the pc shuts 
down because I'm not fast enough. Third time I enter ESC for more options 
at bottom of Recovery screen and I get another chance to enter key on next 
screen. That works, key good, dashes(auto) and I'm back in, at 19041.450.
Rebooted and no surprises.
Don't know what to expect now from Bitlocker. 
Will track down Dell HDMI thing with them.
Don't know why resume updates acted like Check for Updates?

Have backup and system image and good luck.
 

 

 

Reply | Quote

Resume updates downloads and installs anything in the queue. If the queue updates at the same time…

Pausing updates is really a double edged sword. Updates are paused, but so is checking. Even if you use wushowhide (or other) there are no updates shown to hide.

cheers, Paul

1 user thanked author for this post.

PFC

Reply | Quote

[PFC]

Paul T wrote:

Resume updates downloads and installs anything in the queue. If the queue updates at the same time…

Pausing updates is really a double edged sword. Updates are paused, but so is checking. Even if you use wushowhide (or other) there are no updates shown to hide.

cheers, Paul

so, having the gp at #2, when am I given the option to download?

or, should I not use Pause?

 

 

• This reply was modified 4 years, 7 months ago by PFC.

Reply | Quote

Please read AKB2000016 Guide for Windows Update Settings for Win10.

2 users thanked author for this post.

PFC, Microfix

Reply | Quote

An additional Win8.1 & Server 2012 R2 security update has been recently made available Aug. 19 – KB4578013

https://support.microsoft.com/help/4578013/

however, it’s only obtainable thru the MS Update Catalog site:
https://www.catalog.update.microsoft.com/Search.aspx?q=KB4578013

1 user thanked author for this post.

Microfix

Reply | Quote

EP wrote:

however, it’s only obtainable thru the MS Update Catalog site

Our Windows Update says different:

If debian is good enough for NASA...

Reply | Quote

I’ve got the same thing here on my Win8.1 – checked Important.

Reply | Quote

[Skider86]

What’s going on with the Security Update Guide site?  I visit this site and look at the links to known issues and the CVEs that have an asterisk beside them which used to mean there are extra steps to install such as setting a registry key.  Recently it seems there are all sorts of asterisks being used and NOTHING to actually do.  Now, I get it that it says “… may include * further steps to take after installing the updates”.

So there are two questions that come to mind:

1. Someone’s not paying attention and using “*” for CVEs that do not need additional action taken without regard to my limited time for patching…
2. Someone’s not including the action that needs to be taken in the linked article so they have no regard for keeping my systems secure…

Either way I am disappointed…

• This reply was modified 4 years, 6 months ago by Skider86. Reason: font issue
• This reply was modified 4 years, 6 months ago by Skider86. Reason: formatting

Reply | Quote

Are you saying AskWoody site has added these asterisks or MS has? Example please.

cheers, Paul

Reply | Quote

The asterisks must be from MS….

Reply | Quote

[geekdom]

Update Previews are now available, but don’t use Check for updates:

• 2020-08 Cumulative Update Preview for .NET Framework 3.5 and 4.8 for Windows 10 Version 1909 for x64 (KB4570723)
• 2020-08 Cumulative Update Preview for Windows 10 Version 1909 for x64-based Systems (KB4566116)

These updates were hidden, not installed.

On permanent hiatus {with backup and coffee}
offline▸ Win10Pro 2004.19041.572 x64 i3-3220 RAM8GB HDD Firefox83.0b3 WindowsDefender
offline▸ Acer TravelMate P215-52 RAM8GB Win11Pro 22H2.22621.1265 x64 i5-10210U SSD Firefox106.0 MicrosoftDefender
online▸ Win11Pro 22H2.22621.1992 x64 i5-9400 RAM16GB HDD Firefox116.0b3 MicrosoftDefender

• This reply was modified 4 years, 6 months ago by geekdom.
• This reply was modified 4 years, 6 months ago by geekdom.
• This reply was modified 4 years, 6 months ago by geekdom.
• This reply was modified 4 years, 6 months ago by geekdom.

1 user thanked author for this post.

Coldheart9020

Reply | Quote

those update previews only apply to 1903 & 1909

for v1809/RS5, the update previews are the following:

KB4571748 cumulative update:
https://support.microsoft.com/en-us/help/4571748

KB4571462 for .NET 3.5, 4.72 & 4.8:
https://support.microsoft.com/help/4571462/

1 user thanked author for this post.

woody

Reply | Quote

KB4566116
https://www.bleepingcomputer.com/news/microsoft/windows-10-kb4566116-update-fixes-crashing-settings-unlock-bug/

On permanent hiatus {with backup and coffee}
offline▸ Win10Pro 2004.19041.572 x64 i3-3220 RAM8GB HDD Firefox83.0b3 WindowsDefender
offline▸ Acer TravelMate P215-52 RAM8GB Win11Pro 22H2.22621.1265 x64 i5-10210U SSD Firefox106.0 MicrosoftDefender
online▸ Win11Pro 22H2.22621.1992 x64 i5-9400 RAM16GB HDD Firefox116.0b3 MicrosoftDefender

Reply | Quote

geekdom wrote:

KB4566116

I checked your link at Bleeping Computer and I see that it is an optional monthly update. I have to keep reminding myself that the FU setting now applies not only to Feature Updates, but also to optional monthly updates. That explains why it’s not appearing in wushowhide.

On the other hand, .NET Framework previews are a different animal (i.e., in a different kind of queue) and WILL appear in wushowhide.

This happened with the July 21 Week “C” previews, too. See abbodi86’s post at #2282610 about the two queues.

1 user thanked author for this post.

woody

Reply | Quote

WUMgr allows me to hide both updates:

• 2020-08 Cumulative Update Preview for .NET Framework 3.5 and 4.8 for Windows 10 Version 1909 for x64 (KB4570723)
• 2020-08 Cumulative Update Preview for Windows 10 Version 1909 for x64-based Systems (KB4566116)

On permanent hiatus {with backup and coffee}
offline▸ Win10Pro 2004.19041.572 x64 i3-3220 RAM8GB HDD Firefox83.0b3 WindowsDefender
offline▸ Acer TravelMate P215-52 RAM8GB Win11Pro 22H2.22621.1265 x64 i5-10210U SSD Firefox106.0 MicrosoftDefender
online▸ Win11Pro 22H2.22621.1992 x64 i5-9400 RAM16GB HDD Firefox116.0b3 MicrosoftDefender

1 user thanked author for this post.

jburk07

Reply | Quote

The Security Update Guide is a Microsoft site.  The asterisks have been used for some time there, but only recently have I noticed the problem of either being used when they should not be or the linked articles not being correct.

https://portal.msrc.microsoft.com/en-us/security-guidance/releasenotedetail/2020-Aug

1 user thanked author for this post.

woody

Reply | Quote

geekdom wrote:

Update Previews are now available

I am Win10/Pro, 1909, with FU set to 365 days and GPE set to #2-notify download/install. I checked the wushowhide queue and found KB4023057 (Update for Win 10 – no ‘Preview’ in the title) ) and KB4570723 (CU Preview for .NET Framework), both of which I have hidden. The former is not listed in the MS-Catalog for version 1909, 2020-08, which is strange, since it showed up in the wushowhide queue.

And, I did not find KB4566116 (2020-08 CU Preview for Win 10, version 1909) in the wushowhide queue so that I could hide it. Also, a strange phenomenon.

Reply | Quote

KB4023057
https://www.catalog.update.microsoft.com/Search.aspx?q=KB4023057

What is your complete Version and OS Build? 1909.18363.????

On permanent hiatus {with backup and coffee}
offline▸ Win10Pro 2004.19041.572 x64 i3-3220 RAM8GB HDD Firefox83.0b3 WindowsDefender
offline▸ Acer TravelMate P215-52 RAM8GB Win11Pro 22H2.22621.1265 x64 i5-10210U SSD Firefox106.0 MicrosoftDefender
online▸ Win11Pro 22H2.22621.1992 x64 i5-9400 RAM16GB HDD Firefox116.0b3 MicrosoftDefender

Reply | Quote

geekdom wrote:

What is your complete Version and OS Build? 1909.18363.????

1909.18363.959

The MS-Catalog shows lots of CUs for KB4023057(103 lines worth) at your link, but none of them are for 2020-08, Version 1909.

Reply | Quote

KB4023057 for v1809 and later is handled and delivered via UUP
you won’t find it in catalog

it’s actually consist of multi files, not regular MSI package like in v1803 and eariler

4 users thanked author for this post.

jburk07, woody, geekdom

Reply | Quote

abbodi86 wrote:

KB4023057 for v1809 and later is handled and delivered via UUP
you won’t find it in catalog

I read the MS support URL for KB4023057 . It says

It may take steps to free up disk space on your device if you do not have enough disk space to install Windows updates.

This update includes files and resources that address issues that affect the update processes in Windows 10 that may prevent important Windows updates from being installed. These improvements help make sure that updates are installed seamlessly on your device, and they help improve the reliability and security of devices that are running Windows 10.

Apparently, it addresses possible problems with sleep configurations, network settings, disabled or corrupted Windows operating system components, the WU database, and it may compress some files.

Is this an update that is covered by MS-DEFCON (in other words, does it merit waiting until guinea pigs have had experience with it)?

Reply | Quote

One of my Win10/Pro machines received KB4023057 in the WU queue, but the other did not. The one that received it is older, but they both are DELLs, have the same settings, have the same-sized SSD, and have the same space usage (30%). I wonder why one machine got it and the other did not.

Reply | Quote

KB4023057 is a paver for feature updates (and cumulative updates more or less)
its only purpose is to revert any user-choice configuration to block them

you should always avoid and hide this update

5 users thanked author for this post.

jburk07, ceruleandaze, Coldheart9020, PKCano

Reply | Quote

WCHS wrote:

And, I did not find KB4566116 (2020-08 CU Preview for Win 10, version 1909) in the wushowhide queue so that I could hide it. Also, a strange phenomenon.

See #2290142 for an explanation of why it does appear in the WU queue and thus, why it does not appear in wushowhide so that it can be hidden.

Reply | Quote

WCHS wrote:

why it does appear in the WU queue

correction: why it does NOT appear in the WU queue

Reply | Quote

I’m a Windows 7 ESU subscriber and am seeing failures when installing KB4570673.  I’ve got the prerequisites (KB4474419 and KB4490628) installed from when they were released in 2019, and I also successfully installed the July 2020 servicing stack update (KB4565354) that is replaced by this latest update. The error code is 80242016. I’d appreciate any tips on how I should go about resolving my current update failure.

Reply | Quote

Try downloading the August Servicing Stack KB4570673 and installing it manually, then reboot. Wait a few minutes after you log back in and try again.

There is a direct download link for the SSU in the first post at top of this thread #2287923.

1 user thanked author for this post.

Peter Yee

Reply | Quote

I tried the directly downloaded .msu file, rebooted, and then tried the Windows Update as well, but both installations show failures in the Windows Update->View update history. Anything else I should do? And barring that, if I can just unroll whatever is causing my machine to default to Shutdown on the Windows Start button (from the usual Sleep), that would help. At the moment, I have to be careful when putting the machine to sleep that I don’t inadvertently shut it down, losing whatever I was working on.

Reply | Quote

[PKCano]

I would normally under the circumstances recommend resetting Windows Update. But I do not know where the ESU keeps it’s information.

One thing you can try:
Close anything you are working on.
Set Windows Update to “Never check for updates”
In an elevated command prompt (run cmd.exe as Administrator):
ren C:\Windows\SoftwareDistribution\Download Download.old
Restart (not shutdown/startup)
In Windows Update, “Check for updates” and see if they will install.

You will need to reset Windows Update back to whatever you had it before the change to “Never check”

You could also try downloading and running the Windows Update Troubleshhooter.

• This reply was modified 4 years, 6 months ago by PKCano.

2 users thanked author for this post.

Fred, Peter Yee

Reply | Quote

[Peter Yee]

I set Windows Update to Never check and that seems to have eliminated the Shutdown being set (yay!). Unfortunately, renaming the Download directory didn’t get the update to install. It failed once again. Thanks for the pointer to the troubleshooter. Windows Update gives me a link to run the troubleshooter, but the link goes to what is now a non-existent location. The troubleshooter reported one error, but when looking at the details, that item did not show an error. I’ve rerun Windows Update and it still failed. I tried the troubleshooter again, just so I could copy down the problem found

that was not fixed: “Windows Update error 0x80070490 (2020_08_23-T07_35_16P)”. I printed the report to a PDF and it says:

RootCause: RC_DataStore
ErrorCode: 0x80070490
TimeDetected: 2020-08-23-T-07:35:16P

Looking in the CheckSURLog.cab file, the output.log contains

Last Displayed Message :2020-08-23 19:39:34:602 352 1228 Agent WARNING: Failed to add and register

service 7971f918-a847-4430-9279-4a52d1efe18d to the data store 0x80240031

Based on some sleuthing and the first error code above, I tried the more involved reset for Windows Update suggested here:

https://answers.microsoft.com/en-us/windows/forum/windows_10-update/hard-reset-windows-updates/2e26953d-58c4-4704-b627-4a743e87e15c?tm=1447931905306

That’s didn’t do the trick. It also had the unfortunate side effect of making all of my system commands have an Unknown publisher. Lovely.

Backtracking, I tried:

DISM.exe /Online /Cleanup-image /Scanhealth

That reported no errors. I also ran:

sfc /scannow

After running, it reported:

Windows Resource Protection found corrupt files but was unable to fix some of them.
Details are included in the CBS.Log windir\Logs\CBS\CBS.log. For example
C:\Windows\Logs\CBS\CBS.log

CBS.log is nearly 9 MB and I don’t know what to search for in there to determine what corruption I should be looking for. Given the number of times the word corrupted appears in the log, there are 196 corrupted files. Entries look like:

2020-08-23 13:06:37, Info CSI 000005e8 [SR] Could not reproject corrupted file [ml:520{260},l:120{60}]”\??\C:\Program Files (x86)\Common Files\Microsoft Shared\Ink”\[l:24{12}]”mshwchtr.dll”; source file in store is also corrupted

The vast majority of the entries appear to be IME/MUI related (I’ve got Chinese and Japanese language packs on the PC for my wife’s use). The one I cited above is apparently related to Chinese handwriting entry. I read through all the entries. Nothing popped out to me.

As a last resort, I tried a system restore to a prior date before this all happened, using:
rstrui

My system tells me that I have system protection turned off for my C: drive. So, despite Windows Update telling me it was setting a system restore point, it doesn’t seem to have done so. I have system protection turned on on a larger storage drive (my boot drive is a smaller SSD), but that doesn’t seem to have held any restore points for the C: drive.

Well, if nothing else, this is certainly educational and I do appreciate the pointers I’ve been given and the mess I get to make/have made.

Any other thoughts? 😀

 

(And sorry for the really long post – I was trying to save you having to spoon feed me suggestions one at a time.)

• This reply was modified 4 years, 6 months ago by Peter Yee.

Reply | Quote

Peter Yee wrote:

Based on some sleuthing and the first error code above, I tried the more involved reset for Windows Update suggested here:

Your experience here is why I refrained from suggesting resetting Windows Update (see my previous post).

The only other thing I could suggest is to check the status of your ESU license and be sure it is still registered correctly. There is also a new License Prep Pack that will be required for the Sept updates (linked in the first post above) but is not necessary for the Aug patches.

1 user thanked author for this post.

Peter Yee

Reply | Quote

I was able to get the license prep pack to install. I tried again with KB4570673. The standalone installer claims it has already been successfully installed on my system! The WU history (obviously cleared by my earlier efforts) show a single failure for KB4570673, but as of now WU is no longer offering me any other updates nor claiming I need to do anything. I’d consider that a resolution to the glitch in the matrix that kept the SSU from installing or perhaps being recognized as having been successfully installed. Of course, I’ll get to see next month what happens when the next batch of updates that depend on the SSU come around, but for now I think I’m in good shape.

Thanks so much!

Reply | Quote

Update History is not the place to look for what’s installed on your computer. I, for example, you uninstall an update that WU installed, it is not recorded in History.

If you want to see what’s installed, look in Installed Updates (lower left corner of WU interface.

1 user thanked author for this post.

ceruleandaze

Reply | Quote

Looking there, I do indeed see KB4570673 installed today.  Sounds like I’m genuinely in business.

Reply | Quote

I cannot seem to get August Tuesday updates! I am using win10 Pro Ver1909 bld18363.959.

I installed july updates on 6 Aug. No problems. I have gpedit set to 2, notify don’t download. Un metered. On 12Aug , 2 updates appeared in que, I dutifully used wushowhidediagcab to hide these . next day, wu checked and the updates I had hidden disappeared from the wu que. Great. No updates, pending- so all is good. Next day wu checked and the same 2 updates appeared. I looked in the hidden part of wushowhide, and they were there also. So not wanting these to be just sitting their waiting for the download button to be clicked, I tried to hide them again. They only appeared once in wushowhide but I just waited for the next auto check by wu. Not remembering how long but a day or 2 at least and then it checked and the que was cleared. Nothing was installed since 6 aug July updates. WU has checked several times since then and says I am up to date, yet no KB’s for Aug tuesday plop are installed. What do I do now??

Thanks a bunch!

Reply | Quote

Do you have any Pause or Quality update deferrals set (either in Group Policy or the Registry)? If you do, patches won’t show up in the queue. If you need to know where the GP and Registry settings are located, see the screenshots at the bottom of AKB2000016.

What are the two updates you have hidden?

Reply | Quote

I do not have PAUSE set  at all, I have quality updates deferred for 21 days in Settings. The patches DID appear — hidden with wushowhide- on two different days-as I recall, 2 0r 3 days apart but only showed in hidden 1x. Then after several days and wu checked, the patches disappeared from wushowhide AND update que, several wu auto checks since show up to date. I do not know what the KB #’s were- I ASSumed they would stay put in the hidden area . Belarc shows 2 missing security patches(kb4565351 and KB 4569751)

I JUST checked wushowhide and these 2(kb4565351 and KB 4569751) are NOW in the hidden area. I swear I have checked this 4x since 13 aug and they had disappeared, leaving only an intel offering. Incredible. So am I also missing any quality updates from aug patch tues? are these the only offerings? Hm from the above referenced message, it seems security and quality updates are the same thing. So I guess when given the go ahead I will have the proper Aug patches?

Thanks

Confused and abused by win 10 update.

Reply | Quote

Quality Updates released pn Patch Tuesday: Aug CU KB4565351 and .NET Rollup KB4569751.

It has been 13 days since August Patch Tuesday.
You have Quality Updates deferred for 21 days.
August updates shouldn’t show up in the WU queue for another week.
Looks like everything is working as it should.

Reply | Quote

bbearren wrote:

They got pushed to my NAS and laptop after active hours early this morning.

What is a NAS ?

Reply | Quote

I’m assuming in this context it’s Network-attached storage.

Reply | Quote

Win 10 1909 64 bit.  Downloaded SSU update KB4569073 and August CU KB4565351, standalone installed OK, several test PCs stable for 3 days.

Reply | Quote

I allowed Windows Update to install 2020-08 Cumulative Update KB4566782 on my Windows 10 Home laptop. I got random and repeated BSODs “secure kernel error” thereafter. I uninstalled -08 and no further BSODs. Laptop runs fine with the 2020-07 update KB4565503 installed on 7/15/2020 (its original install date was changed to the date I uninstalled -08). This is my first BSOD after running Windows 10 Home for 5 years. I am concerned that, when resuming Windows Updates, -08 will be re-installed. I assume the BSOD will be re-introduced, and I do not know how to resolve the root cause. I could pause updates “indefinitely” until I buy a new laptop :o) !!! Thanks in advance for any feedback.

Reply | Quote

Best to extend the Pause until the Sept updates are out and see what they look like. Hopefully they will have fixed your problem.

In the meantime, you should make a full disk backup of your system onto an external drive, and a data file backup.
You should also look at your hardware drivers and be sure they are up to date. Check you computer OEM or the hardware mfg’s website for updates.

1 user thanked author for this post.

Zep Head

Reply | Quote

Thx again. When you say “Hopefully they will have fixed your problem” I did not wittingly report anything to Microsoft Support. I guess there is some telemetry that feeds back to MS when an update is un-installed ? About 1 hour after un-install, I got a message in the Notification area, asking if that action fixed my problem. I responded by checking the Not Enough Information checkbox, and that I needed to run a few days to see if the problem recurs. But my message did not cite BSODs nor KB4566782 (which I am convinced is the culprit at this point). As one of the Great Unwashed Masses who got Windows 10 Home for free 5 years 2 months ago, and stayed with it, I don’t think MS has a forum in which MS listens to us riff-raff !

Reply | Quote

I’ve got news for you. They don’t listen to the Insiders either.

Reply | Quote