Windows Updates Thread - August 2019 - Patch Yo Shizzle

Discussion in 'Business & Enterprise Computing' started by PabloEscobar, Dec 11, 2014.

  1. greebs

    greebs Member

    Joined:
    Dec 30, 2001
    Messages:
    958
    Location:
    Melbourne
    That's been happening for a long time (from time to time that is).
     
  2. Punk

    Punk Member

    Joined:
    Mar 15, 2002
    Messages:
    1,058
    Location:
    Walking on Sunshine
    I have come across it once or twice, it does not seem to be any particular update that does it and it seems to just go away.

    Just blame the gremlins :thumbup:
     
  3. OP
    OP
    PabloEscobar

    PabloEscobar Member

    Joined:
    Jan 28, 2008
    Messages:
    14,621
    Coming up to D-Day...

    https://blogs.technet.microsoft.com...-windows-7-and-windows-8-1-servicing-changes/

    More info here, which does a little bit to allay my concerns

    Firstly, they are pushing a "Security-Only Quality Update" that does NOT appear to be cumulative. So systems that have declined updates (for reasons) aren't going to crash and burn.

    Secondly, the Cumulative Updates (Monthly Quality Rollup) won't start filling out until the start of 2017, and won't be complete for several months.

    .Net has its own Rollup patches, not included in the above.
     
  4. looktall

    looktall Working Class Doughnut

    Joined:
    Sep 17, 2001
    Messages:
    26,649
    i like that i don't have to change my ADR's in sccm.
    i only push critical and security patches from there.

    i will be watching it like a hawk though.


    EDIT:
    i can't understand why they're having security updates and non security updates in the one release.

    why don't they have a security rollup and a non security rollup?
    why mix the two?
     
    Last edited: Oct 10, 2016
  5. OP
    OP
    PabloEscobar

    PabloEscobar Member

    Joined:
    Jan 28, 2008
    Messages:
    14,621
    If you approve Security, then you will be approving both, which looks like it will lead the situation mentioned partway down (depending on what order they get installed in).

    Security Rollup is avaialble only via WSUS channels.

    Security + Updates rollup is available via Normal Windows Update.

    I guess it would have been to much work to break out Updates Rollup and make both available via all channels.
     
  6. looktall

    looktall Working Class Doughnut

    Joined:
    Sep 17, 2001
    Messages:
    26,649
    well then maybe i should re-asses my ADR's.

    they download critical and security classification, so they will download both security-only and monthly rollup because they're both "security" classification right?
    i don't think it's going to matter too much if i leave my ADR's to just grab them both, but if it goes pair shaped i could change my ADR to search for "Security Only Quality Update" instead, but how long do you reckon it will be before they start dicking around with the title of the patches?

    if i'm following this correctly, the monthly preview rollup (week C) won't download via my ADR because it has the "updates" classification, but the following month the fixes released will be moved into the monthly rollup (which has the "security" classification) and will then come down via my ADR.
     
  7. OP
    OP
    PabloEscobar

    PabloEscobar Member

    Joined:
    Jan 28, 2008
    Messages:
    14,621
    Thats my understanding, yes

    It depends on what you want :), Unexpected things might happen if you deploy both though I'll just be approving the Security Only ones I think... I hope they do dick around with them.

    security-only quality update
    security monthly quality rollup
    preview of the monthly quality rollup

    Are pants-on-head names.

    Monthly - Security Updates
    Cumulative - All Updates
    Cumulative - Preview Updates

    make more sense


    Yep, so if you don't want any 'updates' then you need to not approve the "security monthly quality rollup"
     
  8. looktall

    looktall Working Class Doughnut

    Joined:
    Sep 17, 2001
    Messages:
    26,649
    which is why i'm questioning the decision to mix security and non-security fixes into the one patch.

    i'm sure they could quite easily release them as:
    "Security" - contains cumulative security updates
    "Updates" - contains cumulative non-security updates
    "Preview" - contains a preview of "Updates"

    if they wanted they could have a preview of security updates as well.

    they talk about using rings to roll the updates out, surely having 4 releases consisting of 1 x security, 1 x non-security and a preview of each would make that a much simpler task.

    updates released in previews that are found to be bad can be fixed or removed before going out in the following month's patch.
     
  9. OP
    OP
    PabloEscobar

    PabloEscobar Member

    Joined:
    Jan 28, 2008
    Messages:
    14,621
    Previews of Security would tip their hand to soon and allow nefarious types to focus on bugs that they *know* exist. Everyone would be forced to run on the Preview ring for security, or be at increased risk.
     
  10. looktall

    looktall Working Class Doughnut

    Joined:
    Sep 17, 2001
    Messages:
    26,649
    Good point.
    Still can't see why they have to mix security and non security fixes though.
     
  11. OP
    OP
    PabloEscobar

    PabloEscobar Member

    Joined:
    Jan 28, 2008
    Messages:
    14,621
    Simplifies distribution to the unwashed masses.

    Now, home users either have "the October update" or don't.
     
  12. fredhoon

    fredhoon Member

    Joined:
    Jun 27, 2003
    Messages:
    2,820
    Location:
    Brisbane
    Out of interest, what's the percentage of unwashed home PC's compared to Business licenses?

    I know this has been often stated in the rant thread, but it appears MS strategy of chasing iOS market share (and the cumulative update model that appears to be tied to it) will eventually erode their conservative, risk adverse and slow moving base.
     
  13. phrosty-boi

    phrosty-boi Member

    Joined:
    Jun 27, 2003
    Messages:
    1,102
    Location:
    Altona North
    looks like we've received our first groups of updates on our WSUS server at work, but the naming is a bit confusing...

    For each server / workstation OS we have updates for we have October 2016 security monthly quality rollup and October 2016 security only quality update...

    we normally just do security updates on servers, if we just want updates and no extra things which update should we be using, i'm guessing the security only one but can someone confirm?
     
  14. OP
    OP
    PabloEscobar

    PabloEscobar Member

    Joined:
    Jan 28, 2008
    Messages:
    14,621
    Fitting...

     
  15. looktall

    looktall Working Class Doughnut

    Joined:
    Sep 17, 2001
    Messages:
    26,649
    correct. security only.
     
  16. OP
    OP
    PabloEscobar

    PabloEscobar Member

    Joined:
    Jan 28, 2008
    Messages:
    14,621
    What have people been doing, and hows it been going?

    Plan here I think will be
    Quality Updates unless something is broken in them, with a fallback position of Security Only.

    Once the Preview Update is fully cumulative, we'll start a mini-project to bring everything up to that level.
     
  17. NSanity

    NSanity Member

    Joined:
    Mar 11, 2002
    Messages:
    18,393
    Location:
    Brisbane
  18. OP
    OP
    PabloEscobar

    PabloEscobar Member

    Joined:
    Jan 28, 2008
    Messages:
    14,621
  19. tin

    tin Member

    Joined:
    Jul 31, 2001
    Messages:
    6,420
    Location:
    Narrabri NSW
    OK. Cool. You're all scheduled to impregnate some goats on Saturday. :thumbup:
     
  20. CptVipeR

    CptVipeR Member

    Joined:
    Jun 28, 2001
    Messages:
    847
    Location:
    Hobart
    Dear god! Just found a rather nasty one.

    Applied some Server 2012 R2 updates tonight on Hyper-V VMs one of which is running Exchange 2013

    On reboot the vm hangs for ages on "Getting windows ready, Do not turn off"

    Seems related to this KB3063109

    https://social.technet.microsoft.co...k-screen-after-new-updates?forum=winservergen

    Just starting in Safe Mode with Networking now to rollback the updates and see if it recovers.

    Edit: Took two restarts to safe mode (first one restarted before a login screen) but it finally got me a Safe mode desktop, then I could restart again and start normally, and the KB was gone and system functional again.
     
    Last edited: Nov 9, 2016

Share This Page

Advertisement: