Where we stand with the August patches

Topic

New Reply

Lenovo warns about Win10 version 2004 patch problems; Win8.1 plays catch up – but clobbers Cisco Anyconnect; the 50th reincarnation of an old “blast a
[See the full post at: Where we stand with the August patches]

3 users thanked author for this post.

jburk07, geekdom, abbodi86

Reply | Quote

Replies

I can’t access that Google group. What kinds of printing problems are being reported?

Reply | Quote

The reports are very sketchy – which is why I pointed to the discussion.

You should join the group and ask the folks directly – go to patchmanagement.org

Good folks. You already know quite a few of them.

1 user thanked author for this post.

Pim

Reply | Quote

I can’t access that Google group either, and I can’t work out how to join it. Anyway, searches on the Internet lead me to believe that the printing problem on Win7 caused by the August 2020 rollup (KB4571729) and security only update (KB4571719) has not been solved. And there doesn’t appear to be any indication as to which Win7 systems would be affected by the problem and which ones wouldn’t be affected.

I’ve been installing the monthly security only updates using W7ESUI. Initially, I thought that I would install the August 2020 security only update and, if I found that I was not able to print subsequently, I would simply uninstall the update. However, the thread of communication starting at this post, @2295764, indicates that this is not possible, and there is no definite indication that restoring the system to a previous restore point would work either. Although I do create a system image before installing my monthly updates, I don’t really want the bother of having to restore the system from the system image for a problem that can be anticipated.

Until I can get a Win10 system running with all the function that I need, I am dependent on being able to print from my Win7 system. In consideration of all that I have stated, I have decided that the path of least risk for me is not to install the August 2020 updates.

Reply | Quote

Fresh report on the Win7 printing issue from MDL forums:

After installing KB4571729 and rebooting, I noticed that I couldn’t
use any printers, even virtual ones, like Adobe pdf. In fact, the
“devices and printers” command didn’t work anymore, getting hanged
every time.

After 2 weeks of failed experiments I simply uninstalled KB4571729 and
everything worked fine again. I’ve decided to wait and see what happens
in september patch tuesday.

Notes:

1) Same thing happens with KB4571719 (Security-only update)

2) Booting in safe mode, “devices and printers” doesn’t hang, but it
takes a lot to show devices; no printers either

3 users thanked author for this post.

Pim, jburk07, woody

Reply | Quote

Link please. We have the same problem at work.

Reply | Quote

Link for what? it’s just a report without solution
you must be registered member at MDL to see the post

Reply | Quote

Join MyDigitalLife.com (well worth the effort – but it’s definitely like drinking from a fire hose).

Then go here: https://forums.mydigitallife.net/threads/bypass-windows-7-extended-security-updates-eligibility.80606/page-206#post-1615711

(As best I can tell, no, nobody’s reported a workaround on the MDL forums.)

2 users thanked author for this post.

Pim, abbodi86

Reply | Quote

We are now at MS-DEFCON 4. What is the latest on this Win7 printing issue? Is it safe to install the August 2020 SO update, KB4571719? I need to be able to print from my Win7 system.

Reply | Quote

We had this occur on only 1 of about 20 Win7 machines we maintain. It also messed with uninstalling programs. Installed the Sep updates today and everything seems to be working fine again.

1 user thanked author for this post.

TonyC

Reply | Quote

@cyberSAR I would appreciate some elaboration on what you wrote.

One interpretation of what you stated is that only 1 of your Win7 machines exhibited the printing and uninstalling problems after you had installed the August 2020 Win7 update (rollup or SO). But then, with the August 2020 Win7 update still installed, after you had installed the September 2020 Win7 update, the problems were no longer present. Correct?

Reply | Quote

TonyC , you are correct. Installed the Aug Security Update KB4571719 on Monday and 1 machine exhibited problems. Installed the Sept. Sec only update and it solved the printer, devices and printers issue, and the windows installer issue on that machine.

I couldn’t uninstall KB4571719 because the client performed a system restore and although it stated it failed, KB4571719 was no longer listed as installed, so I just installed the new update and it solved the issues.

Reply | Quote

Oh dear, that doesn’t sound like what I suggested!

It comes across to me that the August 2020 Win7 SO update (KB4571719) was not installed when you installed the September 2020 Win7 SO update. If KB4571719 is not listed in Programs And Features > Installed Updates, I would assume that it is not installed.

So, if your system no longer has KB4571719 installed, could that be the reason why the printing and uninstalling problems are no longer present?

I hesitate to mention this because you probably know, but Win7 SO updates are not cumulative. So, even if the September 2020 Win7 SO update is installed, the system might still be missing some security function if the August 2020 Win7 SO update is not installed.

Reply | Quote

[cyberSAR]

Maybe I didn’t word it properly. Yes, KB4571719 was installed (verified after installation). Started having the printing issues.

Did a system restore instead of uninstalling the update. The system restore stated it failed, but it did replace some registry entries for sure and no longer showed KB4571719 as installed. It also had the option to undo the last restore point even though it supposedly failed. (I have seen this occur before. Part of the restore processes then I think fails on some file replacement)

Decided to install the new update rather than recovering from system image to see if it would work and it did.

Getting ready to upgrade this machine to 10 so I wasn’t extremely worried, and I had an image.

• This reply was modified 4 years, 7 months ago by cyberSAR.

Reply | Quote

Thank you.

I’m still a little confused, but it seems to me that there is a good chance that the August 2020 Win7 SO update (KB4571719) was not installed when you installed the September 2020 Win7 SO update. In which case, the printing problem was probably resolved by the uninstalling of KB4571719 rather than by installing the September 2020 Win7 SO update.

Reply | Quote

OK

1 user thanked author for this post.

SueW

Reply | Quote

Just installed August patch Tuesday for 1909 pro on a Lenovo laptop with 6-core i7, 16GB of RAM, 1Gb fiber Internet connection.
Took about an hour.
So far so good.

1 user thanked author for this post.

jburk07

Reply | Quote

Just installed Aug. Updates on 1 of my older desktops (Intel w/1909). The SSU is KB 4569073 which came with the cum. update. We’ll see how it goes. I cloned C and made a restore point before updating. 18363.1016 is the new build.

Don't take yourself so seriously, no one else does
All W10 Pro at 22H2,(2 Desktops, 1 Laptop).

1 user thanked author for this post.

jburk07

Reply | Quote

Interestingly, I just updated my 1 year old AMD 2700X with 1909 and it did NOT get the KB 4023057 offered!! Evidently there is some kind of selection process that MS see’s to offer that update.

Don't take yourself so seriously, no one else does
All W10 Pro at 22H2,(2 Desktops, 1 Laptop).

Reply | Quote

KB 4023057 was installed on my 1909 pro back in April.
Still no offer for 2004.

1 user thanked author for this post.

jburk07

Reply | Quote

Hey DesertRat – how old is your gear? Mine is 2012 stock intel 8300 Elite Core I-5 w/ 8 Gig and 40Gig free on my SSD with NO graphics card. Have failed all updates last 5 weeks. Curious to compare old gear notes

be well, breathe and honor wabi sabi

Reply | Quote

[CADesertRat]

noblame no gain wrote:

Hey DesertRat – how old is your gear? Mine is 2012 stock intel 8300 Elite Core I-5 w/ 8 Gig and 40Gig free on my SSD with NO graphics card. Have failed all updates last 5 weeks. Curious to compare old gear notes

The older Intel machine is 2013 built:

CPU-Intel Core i7 3770 @ 3.40GHZ Ivy Bridge 22nm Technology
RAM-32.0GB Dual-Channel DDR3 @ 799MHz (but I boosted in BIOS w/XMP)
Motherboard-ASUSTeK COMPUTER INC. P8Z77-V PRO (LGA1155)
Graphics-ASUS VS247 (1920×1080@60Hz)2047MB NVIDIA GeForce GTX 660 Ti (PNY)
C Drive-Samsung Pro 512 GB SSD ( 356 Gb free )

Don't take yourself so seriously, no one else does
All W10 Pro at 22H2,(2 Desktops, 1 Laptop).

• This reply was modified 4 years, 7 months ago by CADesertRat.

Reply | Quote

I just updated my 1909 with the August patches, it went smoothly but 4023057 was installed even though I had set TargetReleaseVersion to 1909 in the registry.

I’m not being offered 2004 though even after clicking check for updates several extra times, so that’s good

Reply | Quote

new Intel microcode update available on MS Update Catalog for v2004 released 9/1/2020 – KB4558130:

https://www.catalog.update.microsoft.com/Search.aspx?q=kb4558130

https://support.microsoft.com/help/4558130/

also, revised intel microcode updates like KB4497165 for v1903/v1909 (8/31/2020 release) available on MS Update Catalog as well:

https://www.catalog.update.microsoft.com/Search.aspx?q=kb4497165

1 user thanked author for this post.

woody

Reply | Quote

If Microsoft didn’t remove the ability to create ReFS drives in Storage Spaces for Home and Pro versions, you think they might not have had the horrible bug in the first place where the only “fix” they could issue for a while was if you drive isn’t completely corrupted yet, make it read only while we take our time fixing the bug? Maybe more free beta testers would have tested it. Maybe.

1 user thanked author for this post.

woody

Reply | Quote

At first I thought it was time to install August patches so I turned on metered and released pause and started wushowhide. But then I can’t find anything in article that says it is time to install August patches on Windows 10 v1909.  So is it is or is it isn’t?

Also, when I released pause, I was not offered KB4023057. Desktop is 6 months old and it is not in update history either.

Only two patches offered, KB4570723 and KB4565351.  Both are now hidden and listed as pending download.

Next time Windows checks for updates I expect they will disappear from the queue. (If I did everything right.)

Still on metered so I guess I’m safe because I can’t pause again now.

HP Pavilion Desktop TP01-0050 – 64 bit
Windows 10 Home Version 22H2
OS build 19045.5608
Windows Defender and Windows Firewall
Microsoft Office Home and Business 2019
-Version 2502(Build 18526.20168 C2R)

Reply | Quote

The go-ahead for patching is the DEFCON number at the top of the Blog changing to 3 or greater. We’re still on DEFCON-2, but that will probably change later this week.

Read through this thread – there is a way to cheat pause.

2 users thanked author for this post.

woody, mpw

Reply | Quote

Tada!  Updates paused until 9/9/2020 again.  Is it safe to release metered connection so defender definitions can get through?  I checked wushowhide and there is nothing listed to hide.

HP Pavilion Desktop TP01-0050 – 64 bit
Windows 10 Home Version 22H2
OS build 19045.5608
Windows Defender and Windows Firewall
Microsoft Office Home and Business 2019
-Version 2502(Build 18526.20168 C2R)

Reply | Quote

Go for it!

1 user thanked author for this post.

mpw

Reply | Quote

Thank you.  I will.

HP Pavilion Desktop TP01-0050 – 64 bit
Windows 10 Home Version 22H2
OS build 19045.5608
Windows Defender and Windows Firewall
Microsoft Office Home and Business 2019
-Version 2502(Build 18526.20168 C2R)

Reply | Quote

mpw wrote:

is it safe to release metered connection so defender definitions can get through?

Are you sure it is metered stopping updates? I have a lack of updates on my W8.1 system as well as “metered” W10 systems.

cheers, Paul

Reply | Quote

When metered is on wushowhide lists Defender updates waiting.  When I turn metered off, they install.  My experience is Definitions get through pause and yesterday a new Microsoft Defender Antivirus antimalware platform got through pause also.  That platform and two definitions were listed in wushowhide and did not install until I turned off metered connections.

Don’t forget, I have Windows 10 Home and my computer may work differently than yours.  But on my computer metered stops everything and pause lets Defender updates come through.

HP Pavilion Desktop TP01-0050 – 64 bit
Windows 10 Home Version 22H2
OS build 19045.5608
Windows Defender and Windows Firewall
Microsoft Office Home and Business 2019
-Version 2502(Build 18526.20168 C2R)

Reply | Quote

As a newbie with a Dell PC, following the August update, I paused the update 7 days option several times, as Woody recommended, until Saturday, September 5.  What is recommended at this point?  I have installed update 1909 and the cumulative update KB4565483.

Dell XPS 8910, Windows 10 Pro, 64 bit.

 

Reply | Quote

The DEFCON number is the big number at the top of the Blog page. It is an indication of when to patch (see information on the MS-DEFCON System) If the number is 1 or 2, it means to hold off on patching. When the number goes to 3 or above, Woody publishes instructions for safe patching in an article in ComputerWorld linked to the announcement.

The idea is to wait to patch to see if there any major problems with the updates (let others be the Guinea pigs), and see if there are mitigations or workarounds if so. At that time, you can remove the Pause by clicking “Resume Updates.”

Reply | Quote

The problem is that I can’t pause beyond September 5, as it was the maximum 35 day period I believe; so I assume the updates will then occur automatically, and whatever happens, happens?

Reply | Quote

Read through this thread – there is a way to cheat pause.

Reply | Quote

I am not a veteran of this site nor nearly as knowledgeable as many others, but the defcon number often changes to 3 the weekend before patch Tuesday, the second Tuesday of the month.

So, it is entirely possible that it will be deemed safe to download updates at the same time your current pause runs out on 9/5/2020.

If you can pause 7 more days do it, and you can click on Resume Updates when defcon 3 arrives.  But if you can’t you will probably be OK anyway.

HP Pavilion Desktop TP01-0050 – 64 bit
Windows 10 Home Version 22H2
OS build 19045.5608
Windows Defender and Windows Firewall
Microsoft Office Home and Business 2019
-Version 2502(Build 18526.20168 C2R)

Reply | Quote

Thank you.  If I succeed in going beyond the 35 day pause window, by resetting, is there any danger of pausing the August patches past the new September patch Tuesday updates?

Reply | Quote

That is no danger, because you can end the Pause whenever YOU want to by clicking “Resume Updates.”

1 user thanked author for this post.

woody

Reply | Quote

Defcon hasn’t changed yet and in about one hour it will be Friday Sept 4 here. So, I decided to try to install the cumulative update for 1809 anyway.

I got very nervous because it was taking FOREVER and I haven’t one be so slow before. So, I cancelled it.

So, what’s going on with Defcon? Isn’t next Tuesday when Microsoft will release the Sept cumulative update? When will it be safe to install this August patch?

Reply | Quote