1. If you're receiving a message that you are banned from the Current Events or Politics forums, it's not you specifically: those forums have been hidden for all users. For more info, see here.
    Dismiss Notice

Windows Updates Thread - August 2019 - Patch Yo Shizzle

Discussion in 'Business & Enterprise Computing' started by PabloEscobar, Dec 11, 2014.

  1. looktall

    looktall Working Class Doughnut

    Joined:
    Sep 17, 2001
    Messages:
    26,668
    i forgot to come check this thread before approving patches yesterday.

    i did a test build to see how long the new updates added to my build times.

    [​IMG]


    god damn it.
     
  2. power

    power Member

    Joined:
    Apr 20, 2002
    Messages:
    66,954
    Location:
    brisbane
    Haha, worse than clippy or Bob for sure.
     
  3. scrantic

    scrantic Member

    Joined:
    Apr 8, 2002
    Messages:
    1,768
    Location:
    3350
    How bad is the broken network printer thing in the wild?
     
  4. OP
    OP
    PabloEscobar

    PabloEscobar Member

    Joined:
    Jan 28, 2008
    Messages:
    14,610
    I had no issues, but we already use point and print restrictions.
     
  5. wazza

    wazza Member

    Joined:
    Jun 28, 2001
    Messages:
    3,751
    Location:
    NSW
    If you use GP to deploy printers and don't fix the issue, your users will lose their deployed printers. If you assign the permissions prior to applying the patch, you shouldn't see any issues at all. I have users across 4 sites with the majority of printers being deployed by GP (only ones that aren't are the few that have printers on their desks) and all deployed printers disappeared. Unfortunately I've also got a junior tech who jumps in head first with little to no research, so he spent the day after the patch was released going around to computers (or remoting into the other site computers) and manually connecting printers, rather than figuring out the actual cause of/solution to the issue (which would have had it fixed in <30mins instead of the full day he spent on it) :thumbdn:

    Gotta admit my failure here too, applying the patch on day 0 rather than waiting for the success/failure reports to come out after patch day (plus by a stroke of bad luck I was off the following day, so didn't know my junior tech was running around slapping band-aids on rather than fixing the true cause until it was too late).
     
  6. scottath

    scottath Member

    Joined:
    Aug 16, 2007
    Messages:
    2,575
    Location:
    Sydney
    Who is going to be the guinea pig?
    I just downloaded the ISOs from Volume Licencing portal and they seem to be playing nice with my deployment tasks.
    Updating my laptop from the ISO took approx 20min.

    EDIT: August 16th for the WSUS release
     
    Last edited: Aug 3, 2016
  7. Gunna

    Gunna Member

    Joined:
    Dec 25, 2001
    Messages:
    7,889
    Location:
    Brisbane
    The offer for the free upgrade has ended
     
  8. NiRdoC

    NiRdoC Member

    Joined:
    Jun 27, 2002
    Messages:
    200
    Location:
    Cairns
    You could have got rid of that with Group Policy, very annoying in a corp environment.
     
  9. EvilGenius

    EvilGenius Member

    Joined:
    Apr 26, 2005
    Messages:
    10,835
    Location:
    elsewhere
    In theory yes. It still showed up on about half of our machines regardless of the GP setting.
     
  10. greebs

    greebs Member

    Joined:
    Dec 30, 2001
    Messages:
    958
    Location:
    Melbourne
    Never saw any of it using WSUS. I guess I didn't approve it. Or it was never there...
     
  11. OP
    OP
    PabloEscobar

    PabloEscobar Member

    Joined:
    Jan 28, 2008
    Messages:
    14,610
    It was there. I *think* we managed to get them all, but when it comes time to rebuild WSUS, for the first time ever, I'm going to need to migrate approvals, just to ensure that they won't come back.
     
  12. greebs

    greebs Member

    Joined:
    Dec 30, 2001
    Messages:
    958
    Location:
    Melbourne
    I guess I must have then (KB3035583 perhaps it was).
     
  13. NiRdoC

    NiRdoC Member

    Joined:
    Jun 27, 2002
    Messages:
    200
    Location:
    Cairns
    I walked into an environment that wasn't using WSUS so I used Group Policy to get rid of it and then implemented WSUS.
     
  14. Gunna

    Gunna Member

    Joined:
    Dec 25, 2001
    Messages:
    7,889
    Location:
    Brisbane
    Last edited: Aug 8, 2016
  15. OP
    OP
    PabloEscobar

    PabloEscobar Member

    Joined:
    Jan 28, 2008
    Messages:
    14,610
    August updates breaking printing for particular applications.

    https://support.microsoft.com/en-us/kb/3177725
    https://support.microsoft.com/en-us/kb/3178466

    Also, https://technet.microsoft.com/en-us/library/security/MS16-051 has been weaponized and included in Metasploit, so if you haven't patched already, you probably should.
     
  16. looktall

    looktall Working Class Doughnut

    Joined:
    Sep 17, 2001
    Messages:
    26,668
  17. OP
    OP
    PabloEscobar

    PabloEscobar Member

    Joined:
    Jan 28, 2008
    Messages:
    14,610
    Workaround is to uninstall windows.

     
  18. looktall

    looktall Working Class Doughnut

    Joined:
    Sep 17, 2001
    Messages:
    26,668
    But we're not gonna remove the broken patch though.
     
  19. freaky_beeky

    freaky_beeky Member

    Joined:
    Dec 2, 2004
    Messages:
    1,169
    Location:
    Brisbane
    Workaround: Stop Printing
    Fix: Move to paperless office where anyone seen with paper is fired. :thumbup: :rolleyes:

    I've just forwarded this information to the people in charge of patching this month to see how it effects us (follow me printing etc...)

    EDIT: Got interrupted posting and forgotten to say, a big thanks to Pablo for the update, we've been having quite the issues around printing lately (as I've mentioned elsewhere) and this would have definitely made matters worse had we not have known. Thanks again
     
    Last edited: Aug 15, 2016
  20. OP
    OP
    PabloEscobar

    PabloEscobar Member

    Joined:
    Jan 28, 2008
    Messages:
    14,610
    What are the printers you are having trouble with.

    Canon don't (and won't be, for a month or 2) provide "Package Aware V3" drivers, and as such, can't be deployed without installing the driver locally on each machine since MS16-087


    ---

    I've talked about offering a LOSUaaS (Lists of Shitty Updates As-A-Service) subscription list.

    So few people have money and time for test environments, and often, using a subset of users can miss critical things (The printer one, caught me out for example, as our mail printers were fine, but large format, and some receipt printers, not so much)

    But everyones environment is different, so such a service wouldn't really have any value, beyond a central place to check if things are 'possibly bad'.
     

Share This Page

Advertisement: