Where we stand with the November patches

Topic

New Reply

Not all is doom and gloom. Microsoft’s finally learned how to approach Win10 1809 patching with some finesse — a trait that’s been in short supply ov
[See the full post at: Where we stand with the November patches]

9 users thanked author for this post.

Great Lake Bunyip, walker, cesmart4125, Myst, GreatAndPowerfulTech, DrBonzo, liamZ, SueW, abbodi86

Reply | Quote

Replies

Just a comment on Windows 7 November patches. I’m a Group B patcher.

After imaging our four Windows 7 computers (32 bit and 64 bit; one Pro and the other’s Home Premium) yesterday, I manually installed two patches: 4467106 Security only and 4466536 Cumulative IE11 Security.

 

I haven’t noticed any strange behavior on the computers.

Got coffee?

6 users thanked author for this post.

Pepsiboy, Chessie, rontpxz81, David F, DrBonzo, SueW

Reply | Quote

Seeing With latest WIN 7 Patches USB issues for printing….
The USB printing Support drivers got updated and the new drivers are not digitally signed.   Now no USB printers will work on these machines.

Reply | Quote

Inst’d Without issue (Macrium Images @ Ready) : W7-64 Nov Mo Sec Rollup KB4467107/ 4.72 NetFrmwk KB4467240/ Ofc ’10-(32) KB4032218/ Ofc ’10-(32) KB3114565/ ’10-(32) Excel KB4461530/ ’10-(32) Word KB4461526/ Outlook APP Not Active in Hm-Stud Ofc ’10 but WU Shows KB4461529 / inst’d …. Skipped MSRT — so far.

IF — EN — sees this …….. Your Regedit script (link below) did NOT produce the MRT Folder at HKEY_LOCAL_MACHINESOFTWAREPoliciesMicrosoft – BUT – Editor states the Mod Occurred when I try to open the MRT.reg “desktop save-in” folder you instructed. Maps & Heartbeat ONLY SHOW in mrt.log for last two monthly Sep-Oct WU MSRT runs, and I believe prior mods per the Forum prevent any other transmissions. Computer OK but I’d love to try your instructions again With Your Input – IF time/interest allows..
https://www.askwoody.com/forums/topic/telemetry-from-the-malicious-software-removal-tool/#post-30910

W10 Pro 22H2 / Hm-Stdnt Ofce '16 C2R / Macrium Pd vX / GP=2 + FtrU=Semi-Annual + Feature Defer = 1 + QU = 0

Reply | Quote

EN telemetry link is two-years old with no link to EN Profile. You may want to look for something more recent.

On permanent hiatus {with backup and coffee}
offline▸ Win10Pro 2004.19041.572 x64 i3-3220 RAM8GB HDD Firefox83.0b3 WindowsDefender
offline▸ Acer TravelMate P215-52 RAM8GB Win11Pro 22H2.22621.1265 x64 i5-10210U SSD Firefox106.0 MicrosoftDefender
online▸ Win11Pro 22H2.22621.1992 x64 i5-9400 RAM16GB HDD Firefox116.0b3 MicrosoftDefender

Reply | Quote

On roughly 5,000 Windows 7 x64 workstations and notebooks… roughly 2-3% of them have some strange icon issues after installing KB4467107, KB4467240, KB4466536, KB4461529…

The windows sound icon replaced all icons for some… The outlook icon replaced all icons on another machine… some weird stuff… some just had icons switched. For example with Outlook and Siemens NX open, NX had the outlook icon, Outlook had the NX icon… really confused some users!

3 users thanked author for this post.

Chessie, rontpxz81, GreatAndPowerfulTech

Reply | Quote

My 1803 14-day quality update deferral machines installed

2018-11 Cumulative Update for Windows 10 Version 1803 for x64-based Systems (KB4467702)
2018-11 Update for Windows 10 Version 1803 for x64-based Systems (KB4023057)

yesterday, with no ill effects or problems.

Reply | Quote

I am confused, I thought KB4023057 was a Telemetry type update that we are supposed to Hide and Avoid, and if we do have it, then Un-install it. Am I wrong/incorrect about that?

https://www.askwoody.com/forums/topic/new-cumulative-updates-for-win10-1803-and-1709-and-a-taste-of-what-might-be-right-in-1809/#post-237022

 

Reply | Quote

It’s part of the upgrade push. Most people don’t want it. But, then, there are the exceptions to everything.

Keep preferably hiding/uninstalling when it slips by.

2 users thanked author for this post.

walker, Myst

Reply | Quote

I run Win10 as a Group A user with deferrals.
I do run WUMT to see what updates my machine will pull, but I do not actively uncheck or hide updates.

I did formerly run Win7 as a Group B guy but at this point I’d rather not fret over updates – again, outside of deferrals. JMHO

Reply | Quote

Installed 2018-11 patches on several Windows 7 Pro x64 machines and 2016 servers (domain controller and member servers) without any issues.

 

1 user thanked author for this post.

rontpxz81

Reply | Quote

woody wrote:

Some folks would have you believe that the Insider Release Preview Ring was designed for testing new versions of Windows. But that isn’t the way it was designed.

Why should the Release Preview ring NOT be used to test new versions of Windows (as it had been for every previous feature update)?

You’ve quoted Microsoft’s definition of Release Preview Ring several times this month. Why do you interpret “early access to updates” as applying to quality updates but not feature updates?

Reply | Quote

This is what MS says (originally):

If you want to be on the current public release of Windows 10 but still get early access to updates, applications, and drivers without taking the risk of moving to the Development Branch, the Release Preview Ring is your best option. The Release Preview Ring is only visible when your Windows build version is the same as the current Production Branch.

That states very specifically that the Insider Release Preview Branch is for those who are running the “current public release.” Not the ones who are running the Fast Ring or Slow Ring beta builds.

The Insider Release Preview ring has been used, occasionally, in the past couple of years to distribute what amounts to an RTM candidate. That isn’t the way it was intended to be used — I’ve been kvetching about that for more than two years. The way they’re now using it for Win10 1809 makes lots of sense, and it matches the original definition.

Did I misinterpret something?

1 user thanked author for this post.

GreatAndPowerfulTech

Reply | Quote

woody wrote:

The Insider Release Preview ring has been used, occasionally, in the past couple of years to distribute what amounts to an RTM candidate.

Not occasionally, but every single time (pre-1809).

woody wrote:

That isn’t the way it was intended to be used

How do you know? Who says?

It was used that way for three years.

woody wrote:

Did I misinterpret something?

My two questions at #237183 I think, as you haven’t answered either of them.

Reply | Quote

A big part of the problem is the way Microsoft keeps changing the terminology, then doesn’t go back and update its earlier posts. Thus, “Current Branch for Business,” for example, is everywhere in the docs.

Here’s how I would re-cast Microsoft’s original post, using the terminology currently in vogue:

If you want to be on the current version of Windows 10 but still get early access to updates, applications, and drivers without taking the risk of moving to the next version’s Fast or Slow Ring, the Release Preview Ring is your best option. The Release Preview Ring is only visible when your Windows version is the same as the latest Semi-Annual Channel.

If you accept that translation, I think it answers your questions. If you don’t accept that translation, I sympathize, but I’d still argue that Microsoft desperately needs a testing mechanism for cumulative updates, particularly those destined for the most-recently released version.

I’ve been saying that in print for more than two years.

(FWIW, you’re absolutely right about the Insider Release Preview Ring being used for “RTM candidate” drops in 1803 and earlier. For 1803, the last Release Preview version dropped 3 days before RTM; for 1709 is was 4 days before RTM; for 1703 it was 6 days before RTM; for 1607, it was just the day before RTM. There was no “RTM candidate” drop for 1809.)

2 users thanked author for this post.

Great Lake Bunyip, b

Reply | Quote

Windows 10 1809 is never going to be production ready. In fact, it has been shipped with a preview of the upcoming .NET Framework 4.8; and Microsoft clearly states that such previews are not supported for production use. Windows 10 1809 is simply an Insider Preview for the masses.

Reply | Quote

anonymous wrote:

Windows 10 1809 is never going to be production ready. In fact, it has been shipped with a preview of the upcoming .NET Framework 4.8; and Microsoft clearly states that such previews are not supported for production use. Windows 10 1809 is simply an Insider Preview for the masses.

I don’t believe this is true. I’ve been using 1809 for two months and have .NET 4.7.2 installed but not 4.8.

Reply | Quote

For some reason, in the Master Patch List, already two weeks since Patch Tuesday, there is no mention, yet, of the November IE11 Security Only Cumulative patch for Windows 7. All the other November patches I would install regularly, as part of Group B, are listed there, still with the usual place-holder comments.

It is still too early to patch, anyways, except for those who may be in a rush to do it now, for some particularly pressing motive of their own, or who are impatient and want to get it over with. But I wonder at the absence of IE11 in the MPL. Is there something the matter with this patch?

Ex-Windows user (Win. 98, XP, 7); since mid-2017 using also macOS. Presently on Monterey 12.15 & sometimes running also Linux (Mint).

MacBook Pro circa mid-2015, 15" display, with 16GB 1600 GHz DDR3 RAM, 1 TB SSD, a Haswell architecture Intel CPU with 4 Cores and 8 Threads model i7-4870HQ @ 2.50GHz.
Intel Iris Pro GPU with Built-in Bus, VRAM 1.5 GB, Display 2880 x 1800 Retina, 24-Bit color.
macOS Monterey; browsers: Waterfox "Current", Vivaldi and (now and then) Chrome; security apps. Intego AV

Reply | Quote

Sorry to bring this topic up once again, but it seems each month we are all held up while we dwell on the “problem Windows version of the month”.  Last month it was Windows 7, this month Windows 10 ver 1809, etc. which seems to dominate and dictate the Defcon rating.

Seems like this month all versions of Windows are in pretty good shape except for 1809 again. But we aren’t hearing much of anything, even the good about what is OK.

So isn’t there some way via indicator, separate defcon, or something to separate the truely troubled monthly version(s) from the OK ones?

I realize Susan has the Master Patch List, but then it is always cautioned to stick with the Defcon rating so inevitably we all wait on all versions till the very last minute only to go ahead and install most updates anyway.

Lately we’ve kind of been everybody hold everything till the last minute then everybody update or not.

Reply | Quote

We recommend you WAIT on the DEFCON rating of 3 or above and Woody’s guidance in ComputerWorld.

Every month.

4 users thanked author for this post.

walker, Myst, Chessie, SueW

Reply | Quote

Another anonymous familiar with this recurring question offers this humorous take.

From the movie Pirates of the Caribbean: The Curse of the Black Pearl, a Disney production directed by Gore Verbinski, with writting credits to Ted Elliott and Terry Rossio, transcription clipped from Wikiquote. There is dialog where Miss Swann (pretending to be Turner for the plot) believes she has Capt. Barbossa on a legal point:

Elizabeth: Wait! You have to take me to shore. According to the Code of the Order of the Brethren-

Barbossa: First, your return to shore was not part of our negotiations nor our agreement so I must do nothing. And secondly, you must be a pirate for the pirate’s code to apply and you’re not. And thirdly, the code is more what you’d call “guidelines” than actual rules. Welcome aboard the Black Pearl, Miss Turner.

In a similar spirit, I suggest that reading AskWoody.com and following the MS-DEFCON system is a volunteer activity. There will be no skeletons knocking on your door some moonlit night seeking to run you through for breaking from the advice by updating early or late. The published advice is clear. Following it is a choice.

Remember the reasons that brought you here seeking advice and choose whether those reasons suggest the advice here is worth following. Adapt your own actions accordingly. Many millions update without knowing this advice exists. I wait for MS-DEFCON clearance because it makes sense to me.

1 user thanked author for this post.

Chessie

Reply | Quote

My point is, I like others come here for information regarding the pros, cons, goods, bads, for ALL versions of Windows ( I currently have Windows 7, Windows 10 versions 1709 and 1803.

Fully understand it is ultimately each one of us to make our own decision, but would like some information to do so.

Take this month as an example, almost everthing is about 1809, hardly a beep regarding the other versions.  So without any information do we assume all is well and fine with the other versions?  Are we just waiting until something corrects before we do anything on any version?

It would just be more helpful if there was a post or something addressing each version if only to say once or twice a week – Regarding  version(s) XYZ, so far so good”.

Reply | Quote

The DEFCON rating applies to ALL versions of Windows. Woody gives his instructions once a month for ALL versions of Windows when he changes the DEFCON rating for all of them.

You hear about 1809 mostly this month because it has most of the problems at this time. But any problems found with other versions or MS products (like Office) that are reported to us are scattered throughout the posts and topics. Woody summarizes them in his ComputerWorld instructions so we don’t have to go sorting through everything. And the summary is only as complete for a given month as he can make it, when Woody gives those instructions.

Of course, you are free to sort through that information at any time. And the decision of when to update is entirely up to you.

Reply | Quote

Thanks PKCano, also there is Susan Bradley’s Master Patch List to refer to in conjuction with the MS-DEFCON indicator. I find the Patch list more individual per OS and weigh up the risks involved from reports gathered on Askwoody and elsewhere.

Windows - commercial by definition and now function...

Reply | Quote

I am the Barbarossa quoting anon#post-237430. Sorry you found my humor too general.

I find irony that you request a periodic refresh of information in the comment section to a topic giving exactly that. Where you ask for

It would just be more helpful if there was a post or something addressing each version if only to say once or twice a week – Regarding version(s) XYZ, so far so good”.

Woody’s linked article (long link given here, https://www.computerworld.com/article/3216425/microsoft-windows/microsoft-patch-alert-after-months-of-bad-news-novembers-patching-seems-positively-serene.html) says in a summary way

As things stand now, I haven’t heard any loud screams of pain stemming from the Win10 Cumulative Updates, second monthly Cumulative Updates, or the Win7 or 8.1 Monthly Rollups.

It is small, but it is there. Hope that helps show our confusion over your request.

Reply | Quote

I misread Woody’s article.  kb4667240 is the monthly roll up for .NET 3.5.1… 4.7.2.  It’s not the monthly roll up for Win 7 32-bit.  (Edit won’t let me delete my comment all together.)

1 user thanked author for this post.

PKCano

Reply | Quote

My last try at this, as the Calvary is pouring in:

The DEFCON rating applies to ALL versions of Windows.

Exactly, whether applicable or needed to apply to each version or not.

But any problems found with other versions or MS products (like Office) that are reported to us are scattered throughout the posts and topics.

Exactly again, rather than gathering those few in an easy to check way (such as a weekly blog entry “Where we are with XXXX Updates to-date” so one can make a go or no go decision as the month progresses.  And since there is this scattering, one cannot tell if a version has no problems or a comment was simply missed.

there is Susan Bradley’s Master Patch List to refer to in conjuction with the MS-DEFCON indicator.

Originally given honorable mention in original post along with commentary that we are told Susan is more business related and we should wait for the Woody rating.

Thanks for the chance at the soap box – if no one sees merit in this, so be it.

Its Woody’s Lounge.

Reply | Quote

And I believe he really is trying to be helpful in his Lounge. I posted better above before I refreshed to find this comment. What you ask has merit. I only hope to show the need is already addressed. Or demonstrate that I still do not see the lack of information you seek.

Reply | Quote