Windows 10 Security Alert As Microsoft Says: ‘Do Not Install This Update’

Forbes ^ | Oct 18, 2019 | Davey Winder

[dayglored]

Microsoft appears to have been really struggling to get updates for Windows 10 users right of late. What with advising Windows 10 users to install a critical update before any others to avoid potential problems, and then confirming the Windows Update Assistant itself had a security vulnerability. However, just days after the latest Windows 10 update, KB4520062, was released, Microsoft is advising that some users, "should not install this update," as it can break the Windows Defender Advanced Threat Protection (ATP) service. So, what’s gone wrong this time and who needs to avoid this latest Windows 10 update? What is the Windows 10 KB4520062 cumulative update?

This is the second cumulative update for Windows 10 to hit users in October, and it's not a particularly important one from the security perspective. Or, rather, it shouldn't be. The update, KB4520062, or OS build 17763.832 if you prefer, has several highlights, according to Microsoft. These include preventing blank tiles from appearing in the Start menu when upgrading to version 1809 from any other previous version of Windows 10 and fixing an issue with the settings app failing if you change a theme. Other "highlights" include fixing a power consumption issue in standby mode and stopping a black screen from appearing after the first sign in following an update installation. There is one notable lowlight though, as Microsoft itself has now stated:

"After installing this update, the Microsoft Defender Advanced Threat Protection (ATP) service might stop running and might fail to send reporting data. You might also receive a 0xc0000409 error in Event Viewer in MsSense.exe."

[ducttape45]

Well, schnizzle. I got 19.1 only because I honestly didn't know any better.

So far:

1. I got the monitors and USB connections to work in Virtualbox, but

2. I haven't tried anything regarding networking with other Windows machines in Linux or Virtualbox/Windows 7.

3. I also found out that I can't use my HQ Audio in Virtualbox and have to use regular speakers instead.

But so far I haven't delved any more deeply than that. I'm taking it slowly so as to not get frustrated with my lack of knowledge in Linux.

[Openurmind]

“But so far I haven’t delved any more deeply than that. I’m taking it slowly so as to not get frustrated with my lack of knowledge in Linux”

I’m about two years into it now, and the core OS is pretty easy and straight forward to use for a normal non-techy user. But if you dive into more technical capabilities it takes some extra homework with trail and error. So same thing here, still learning more about the deeper more technical stuff like when I set up my VPN server and Virtualbox.

But if you are not having any trouble you should be good with that. Apparently the issues are only on some hardware and PC brands. But I figure even if I stick with 18.3 I can keep updating to new kernels and be good for a long time. It’s not like linux stuff depreciates like Windows. Old stuff works on new, and new stuff works on old. :)

But I should get back on topic here with Win 10. Just sharing a heads up. PM anytime if you like. :)

[dayglored]

> I plan to request that a Microsoft software engineer be sent to my house to fix the licensing error and rebuild, in its entirety, the SSD.

Best of luck. Truly. But don't hold your breath, unless "RideForever" is a screen name used by Bill Gates...

[ducttape45]

I appreciate the offer, and I’ll probably take you up on that someday soon. I need to get Linux to see my Windows network, and I’d like for my Virtualbox Windows 7 to see it as well. After that, try and see if Virtualbox will pick up the HD Audio. Thanks for the ear!

[Openurmind]

Anytime! I will share what I know or help run down the cure. It will help expand my knowledge base too. :)

[ducttape45]

I use a program called Winaero Tweaker to stop Microsoft from updating my Windows 10 hard drive.

There are also tweaks you can make to the registry as well.

First, How to block automatic updates using Registry

On Windows 10 Pro, you can alternatively stop automatic updates using the Registry. Here's how:

Warning: This is a friendly reminder that editing the Registry is risky, and it can cause irreversible damage to your installation if you don't do it correctly. It's recommended to make a full backup of your PC before proceeding.

1. Use the Windows key + R keyboard shortcut to open the Run command.

2. Type regedit, and click OK to open the Registry.

3. Browse the following path:

HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows

4. Right-click the Windows (folder) key, select New, and then click on Key.

5. Name the new key WindowsUpdate and press Enter.

6. Right-click the newly created key, select New, and click on Key.

7. Name the new key AU and press Enter.

8. Right-click the newly created key, select New, and click on DWORD (32-bit) Value.

9. Name the new key NoAutoUpdate and press Enter.

10. Double-click the newly created key and change its value from 0 to 1.

11. Click the OK button.

Try these registry hacks as well:

HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsStore /v AutoDownload /t REG_DWORD /d 00000002 /f

HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\CloudContent /v DisableWindowsConsumerFeatures /t REG_DWORD /d 00000001 /f

HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\ContentDeliveryManager /v SilentInstalledAppsEnabled /t REG_DWORD /d 00000000 /f

I've done all these and Windows 10 doesn't update anymore, and if you want to have a program that'll download updates and install only what you want, try Windows Update Minitool.

Let me know what you think.

[daniel1212]

I use a program called Winaero Tweaker to stop Microsoft from updating my Windows 10 hard drive. There are also tweaks you can make to the registry as well.

Indeed: http://www.freerepublic.com/focus/bloggers/3771368/posts?page=110#110

On Windows 10 Pro, you can alternatively stop automatic updates using the Registry.

Also, How to disable automatic updates using Group Policy

I used this in the past

if you want to have a program that'll download updates and install only what you want, try Windows Update Minitool. Let me know what you think.

Thanks, though i have had no issues with updates so far, and am at 1903 (run winver in the Run command to find out what version you are running).

[daniel1212]

Such searches are mostly how I learn stuff also, but the opportunity to tap existing knowledge was too good to pass up (as your response demonstrates). Thanks muchly (and I am sure others on-thread also will)! . Good. Maybe we should have a tweaker thread. See my above post relative to that ability.

And I agree with your closing line...

Glory to God!

[Concentrate]

MS means “Bring your own security”

[rockrr]

Hi TomGuy!

If you’re on a tablet you’re likely connecting to the internet via WiFi. If that’s the case you can turn off updates altogether. Microsoft allows this in the case of “metered connections”

Here is more info from Microsoft including a step by step:

https://support.microsoft.com/en-us/help/4028458/windows-metered-connections-in-windows-10