Replies

Running Emsisoft and Defender.  Neither pings when installing the regs beyond basic UAC prompt.

I use reg entries for that as well as send-to, copy-to, and move-to.

But it seems every time we get the monthly MS Windows Malicious Software Removal Tool in updates, it wipes them away.

Should I have been hiding that KB all this time, I always thought it was a security feature vs just MS deciding they only wanted their approved software running the way they wanted it.

 

That fixed it, thanks

Re: Print Spooler

So what is the safest option for a household that has to have constant printer services for two work at home office Educators and Med professionals?

Computers have mix of direct USB printing as well as across MoCA LAN.  They also print from tablets and laptops over WiFi to same printer.

The MoCA LAN is hung off owned Cable Modem for ISP and the WiFi Router is hung off the owned Cable Modem.  Both Modem and WiFi Router have as much hardening as available in settings.

Manual Print Spooler reset every time is not viable for the amount of work they may have on any day.

Just stay with the current patches and follow normal security best practices in their daily usage?

Hello Susan,

I just read your latest post on ComputerWorld for version 21H1.

If we do that, won’t it also grab all the latest patches including this OOB item, or as well the July Updates that we are still on DEFCON 2 for?  And we won’t have any control over install.

I’d prefer to wait for your DEFCON update for both.

Yeah Thanks,

That’s the one I followed before.  But it seems it either didn’t take or Office Updates are overwriting it again.

I’ll reapply and check closely next update to see if it gets overwritten.

Thanks for this,

Can anyone also tell me how to turn off the “where you left off” when opening the same document again?

I followed some steps listed before but it seems to keep coming back.  Is there an option/setting somewhere to prevent it permanently or does it have to be re-applied every update?

Can News be disabled before the Updates?

Or do the keys not exist yet and would be overwritten anyway?

Are there News server connections that can be prevented from ever being established in the first place?

I have several PC to update and was just wondering on the sequence to use.

Just to follow up, I was eventually able to get his original install upgraded to Win 10 Pro using the new retail license.

It wasn’t looking like it was going to work because I had to do the original Win 8.1 DELL OEM Home to Free Win 10 Home on the original HDD and it was super clunky when done (I still hadn’t done any more cleanup of  Dell and MS OEM garbage) but I really didn’t want to have to re-install all his work stuff even if a clean install would get rid of all the bloat.

So I made a Macrium image of that and then restored it to the new SSD.

After that I was able to upgrade to Retail Win10 Pro after a few tries (I made the mistake of not re-starting after applying the license with PowerShell so it kept showing Home until I realized).  Decided to use the new retail for him because his original install still had MS Account login and tied into his Office and Acrobat suites from work.

I would have liked to Decrapify a clean install but I will get with him later and get rid of all the rest of the Universal apps and startup items that he doesn’t ever use and will get it as snappy as possible.  I also still have a disk clean that I can run to get rid of all the leftovers from the two upgrade.

All the other PC have local account logins, but he had this 8.1 Laptop on a MS login.  I haven’t determined yet if he had anything actually tied to MS Account, but he will def be using one of my Daughter’s Family Office 365 license when I am done.

The new WIn10 Pro SSD is still local account but I have one of my own Ofc365 licenses on the new Win10 SSD which is probably the only reason it is shown activated on my MS account.

It is just easier to keep all the Licenses and Microsoft Accounts between the 8 PC (my 2 and their 6) separate.

They have all local account logins but their 6 machines all have Microsoft App only accounts for Office365 and Minecraft and a few other required apps.

Giving him back this laptop with separate (daughters block of 365) licenses just keeps it easier for me to keep track of and do updates/maintenance/troubleshooting when I have to.

Update:

I went through the wumgr settings and it looks like it can’t remove an item already in the download queue directly.  But I hid it again on top of wushowhide.

That allowed me to clear the download list in wumgr so I could allow just the others to install and now the only thing left in WU is the KB4023057 and I can just let it sit there until it wants to disappear.

I just put a new ssd into a borrowed laptop to travel with and am at the point of first updates from clean win10 20H2 install.

I’m still waiting after wushowhide for KB4023057 to disappear from the Download List, it popped as soon as I allowed the install to activate and gave the April Updates.

I can afford to wait a few more days before I leave to get updates done, but will wumgr delete it from the download queue any sooner?

I’d really like to get it buttoned up so I can get back to other trip prep.

 

No joy on an AMD PC – AMD APU, no discrete GFX – WIN10 20H2 – Brother Printer

NOTE: I am managing this PC with AnyDesk from Texas to very elderly Mother in SC so I cannot see if/what PC HDD LED’s are showing.

I had to install a new Office 365 plus some other program updates so I went ahead and mad a Macrium backup and let WU start downloads of April items.  WU also still wanted to offer Intel Microcode but at least not the KB402 we are deferring.

KB5001330 was last to download and started fine but first seemed to hang at 25% then finally completed.

It started Install and first stopped at 45% then 65% and then finally 100% but stayed there for a good while w/o completion and request for Restart.  It finally requested restart so let that complete, no issue with Windows load and sign-in, standard “finishing up, do not turn off PC”.

Seemed to be okay but I always go back into WU afterwards to see that everything is complete in History etc.

As soon as I opened WU it said it was re-installing the KB5001330.  This hung at 25% and never completed.

I had to get this PC accessible  so I risked a restart and then went back to WU and manually paused updates.  I didn’t appear to suffer any damage with the interrupted/incomplete update and checking the History it is still not showing KB5001330 has been installed.

PC is still working properly after several hours of other program installs and cleanup.  I set max pause to late May and will not try April again.

I will be visiting in middle of May and may try again after we have all clear and have physical access to the PC and run Macrium restore if necessary.

Well as of a few moments ago I just got forced 2021-04 Cumulative Update for Windows 10 Version 2004 for x64-based Systems (KB5001330) update.

The Notifications Icon has been blank since before Tuesday when it will normally start giving the “updates are available” as it starts holding them for download with PKCano settings.

Now last hour I guess, I see the separate “Your Device Needs to Restart…” icon on the notification area.

I don’t remember changing anything this week on Update settings and don’t remember hitting a notification button to say update.  oh well, can’t back it until I let it restart.

 

 

Interesting, I can wushowhide the KB4023057 but the KB4589212 does not show up to be hidden??