{"id":12541,"date":"2018-06-11T12:30:02","date_gmt":"2018-06-11T20:30:02","guid":{"rendered":"http:\/\/www.palada.net\/index.php\/2018\/06\/11\/news-6310\/"},"modified":"2018-06-11T12:30:02","modified_gmt":"2018-06-11T20:30:02","slug":"news-6310","status":"publish","type":"post","link":"http:\/\/www.palada.net\/index.php\/2018\/06\/11\/news-6310\/","title":{"rendered":"Make sure Windows auto update is temporarily turned off, and watch out for SMBv1 fixes"},"content":{"rendered":"<p><img decoding=\"async\" src=\"https:\/\/images.idgesg.net\/images\/article\/2018\/02\/outdated_technology_update_patch_fix_required_thinkstock_889592404-100749655-large.3x2.jpg\"\/><\/p>\n<p><strong>Credit to Author: Woody Leonhard| Date: Mon, 11 Jun 2018 13:12:00 -0700<\/strong><\/p>\n<p><span style=\"font-weight: 400;\">In May, we saw a host of bugs <\/span><a href=\"https:\/\/www.computerworld.com\/article\/3216425\/microsoft-windows\/microsoft-patch-alert-major-bugs-introduced-in-may-fixed-plenty-of-problems-remain.html\"><span style=\"font-weight: 400;\">introduced by the Patch Tuesday \u201csecurity\u201d patches<\/span><\/a><span style=\"font-weight: 400;\">. By the end of the month, patches for those patches killed almost all of the bugs \u2013 even the inability of Win10 version 1803 to run on certain kinds of solid-state drives, including the one in some Surface Pros.<\/span><\/p>\n<p><span style=\"font-weight: 400;\">We also saw Microsoft push Win10 version 1803 <\/span><a href=\"https:\/\/www.computerworld.com\/article\/3275955\/microsoft-windows\/microsoft-pushing-win10-version-1803-to-pcs-specifically-set-to-avoid-it.html\"><span style=\"font-weight: 400;\">onto machines that were specifically set to avoid it<\/span><\/a><span style=\"font-weight: 400;\">. I haven\u2019t seen any official response to Microsoft\u2019s inquiry into the reports, but we now have a sighting of a Win7 machine being <\/span><a href=\"https:\/\/www.askwoody.com\/forums\/topic\/ms-defcon-3-time-to-patch-but-be-aware-of-network-busting-bugs-in-win7\/#post-196495\" rel=\"nofollow noopener\" target=\"_blank\"><span style=\"font-weight: 400;\">pushed onto Win10<\/span><\/a><span style=\"font-weight: 400;\">, in spite of its settings.<\/span><\/p>\n<p><span style=\"font-weight: 400;\">Be careful out there.<\/span><\/p>\n<p><span style=\"font-weight: 400;\">By now, I hope you\u2019ve eliminated version 1 of the protocol known as SMB from your machine and your network \u2013 even if you had to throw away old scanners or printers or other worse-than-senseless things. I have a step-by-step review of the problem and its solution in a <\/span><a href=\"https:\/\/www.computerworld.com\/article\/3196673\/malware\/faq-are-you-in-danger-from-the-wannacrypt-ransomware.html\"><span style=\"font-weight: 400;\">FAQ from last year.<\/span><\/a><\/p>\n<p><span style=\"font-weight: 400;\">Unfortunately, some odd peripherals are still using SMBv1, and some odd Windows computers are still set up to use SMBv1. Many of us are anticipating widespread axing of SMBv1 in this month\u2019s round of Windows updates. (It&#8217;s long overdue, in my opinion. SMBv1 is a wide open security hole.) G\u00fcnter Born has a detailed analysis of the current state of the problem, and the effects of its possible solution, on his <\/span><a href=\"https:\/\/borncity.com\/win\/2018\/06\/10\/microsoft-plans-a-windows-10-v1803-smbv1-fix-on-june-2018\/\" rel=\"nofollow noopener\" target=\"_blank\"><span style=\"font-weight: 400;\">Born City blog<\/span><\/a><span style=\"font-weight: 400;\">.<\/span><\/p>\n<p><span style=\"font-weight: 400;\">If you have Win10 version 1803 and you <em>don\u2019t<\/em> want it, roll back as soon as you can. Click Start &gt; Settings &gt; Update &amp; Security. On the left, choose Recovery. On the right, under Go back to the previous version, click Get Started. When asked why you want to roll back, you might want to construct a particularly poignant response about half-baked bugs, but I&#8217;ll leave that up to you. Click Next, No Thanks, Next, Next (yes, again), and Go back to earlier build.<\/span><\/p>\n<p><span style=\"font-weight: 400;\">If you\u2019re part of the unpaid Win10 1803 beta testing crew, bless your heart, I suggest you turn off Automatic Updates as well. For those running Win10 Pro, Microsoft kindly eviscerated the easy way to set it to defer cumulative updates, but you can still dig into the belly of the machine and turn them off. Unfortunately, you need to revert to the manual Group Policy method that worked in Win10 1607, which I describe <\/span><a href=\"https:\/\/www.computerworld.com\/article\/3138088\/microsoft-windows\/woodys-win10tip-block-forced-win10-updates.html\"><span style=\"font-weight: 400;\">here in Steps 3C, E and F<\/span><\/a><span style=\"font-weight: 400;\">. <\/span><\/p>\n<p><span style=\"font-weight: 400;\">Susan Bradley has some <\/span><a href=\"https:\/\/www.askwoody.com\/2018\/patch-lady-simplification-in-the-gui\/\" rel=\"nofollow noopener\" target=\"_blank\"><span style=\"font-weight: 400;\">pithy observations<\/span><\/a><span style=\"font-weight: 400;\"> about 1803 removing the easy-to-use GUI that\u2019s available in 1703 and 1709. Yet another reason to avoid the 1803 version.<\/span><\/p>\n<p><span style=\"font-weight: 400;\">If you\u2019re running Win10, and you don\u2019t want to deal with Win10 version 1803 anytime soon, you\u2019d be well advised to follow the detailed steps in <\/span><a href=\"https:\/\/www.computerworld.com\/article\/3232632\/microsoft-windows\/how-to-block-windows-10-april-2018-update-from-installing.html\"><span style=\"font-weight: 400;\">How to block the Windows 10 April 2018 Update, version 1803, from installing<\/span><\/a><span style=\"font-weight: 400;\">. Yes, Microsoft has ignored those settings on some machines, but using all of the tricks \u2013 even setting Pro machines to metered connection \u2013 seems to block the forced march.<\/span><\/p>\n<p><span style=\"font-weight: 400;\">If you\u2019re using Windows 7 or 8.1, the Automatic Update block is easy: Click Start &gt; Control Panel &gt; System and Security. Under Windows Update, click the &#8220;Turn automatic updating on or off&#8221; link. Click the &#8220;Change Settings&#8221; link on the left. Verify that you have Important Updates set to &#8220;Never check for updates (not recommended)&#8221; and click OK.<\/span><\/p>\n<p><span style=\"font-weight: 400;\">If you\u2019re using Windows 10 Pro version 1703, or Pro 1709, and Microsoft doesn\u2019t change its mind again, you can use Windows\u2019 built-in tools to hold off on the looming patches \u2013 just follow Steps 7 and 8 in <\/span><a href=\"https:\/\/www.computerworld.com\/article\/3215668\/windows-pcs\/8-steps-to-install-windows-10-patches-like-a-pro.html#slide8\"><span style=\"font-weight: 400;\">8 steps to install Windows 10 patches like a pro<\/span><\/a><span style=\"font-weight: 400;\">. Other Windows 10 users, including all Win10 Home owners, aren\u2019t quite so lucky, but the general \u201cmetered connection\u201d approach is detailed in <\/span><a href=\"https:\/\/www.computerworld.com\/article\/3138088\/microsoft-windows\/woodys-win10tip-block-forced-win10-updates.html\"><span style=\"font-weight: 400;\">Woody&#8217;s Win10Tip: Block forced Windows updates<\/span><\/a><span style=\"font-weight: 400;\">.<\/span><\/p>\n<p><span style=\"font-weight: 400;\">A few minutes now could save you hours of headache. Get Automatic Update turned off, then watch here, or on your favorite bug-reporting site, to monitor for widespread pandemonium.<\/span><\/p>\n<p><i><span style=\"font-weight: 400;\">We\u2019re at MS-DEFCON 2 on <\/span><\/i><a href=\"https:\/\/www.askwoody.com\/2018\/ms-defcon-2-get-auto-update-turned-off-and-watch-out-for-smbv1-blocking-complications-this-month\/\" rel=\"nofollow noopener\" target=\"_blank\"><i><span style=\"font-weight: 400;\">AskWoody<\/span><\/i><\/a><i><span style=\"font-weight: 400;\">.<\/span><\/i><\/p>\n<p><a href=\"https:\/\/www.computerworld.com\/article\/3280845\/microsoft-windows\/make-sure-windows-auto-update-is-temporarily-turned-off-and-watch-out-for-smbv1-fixes.html#tk.rss_security\" target=\"bwo\" >http:\/\/www.computerworld.com\/category\/security\/index.rss<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"<p><img decoding=\"async\" src=\"https:\/\/images.idgesg.net\/images\/article\/2018\/02\/outdated_technology_update_patch_fix_required_thinkstock_889592404-100749655-large.3x2.jpg\"\/><\/p>\n<p><strong>Credit to Author: Woody Leonhard| Date: Mon, 11 Jun 2018 13:12:00 -0700<\/strong><\/p>\n<article>\n<section class=\"page\">\n<p><span style=\"font-weight: 400;\">In May, we saw a host of bugs <\/span><a href=\"https:\/\/www.computerworld.com\/article\/3216425\/microsoft-windows\/microsoft-patch-alert-major-bugs-introduced-in-may-fixed-plenty-of-problems-remain.html\"><span style=\"font-weight: 400;\">introduced by the Patch Tuesday \u201csecurity\u201d patches<\/span><\/a><span style=\"font-weight: 400;\">. By the end of the month, patches for those patches killed almost all of the bugs \u2013 even the inability of Win10 version 1803 to run on certain kinds of solid-state drives, including the one in some Surface Pros.<\/span><\/p>\n<aside class=\"fakesidebar\"><strong>[ Related: <a href=\"https:\/\/www.computerworld.com\/article\/3276311\/microsoft-windows\/windows-7-to-windows-10-migration-guide.html#tk.ctw-infsb\">Windows 7 to Windows 10 migration guide<\/a> ]<\/strong><\/aside>\n<p><span style=\"font-weight: 400;\">We also saw Microsoft push Win10 version 1803 <\/span><a href=\"https:\/\/www.computerworld.com\/article\/3275955\/microsoft-windows\/microsoft-pushing-win10-version-1803-to-pcs-specifically-set-to-avoid-it.html\"><span style=\"font-weight: 400;\">onto machines that were specifically set to avoid it<\/span><\/a><span style=\"font-weight: 400;\">. I haven\u2019t seen any official response to Microsoft\u2019s inquiry into the reports, but we now have a sighting of a Win7 machine being <\/span><a href=\"https:\/\/www.askwoody.com\/forums\/topic\/ms-defcon-3-time-to-patch-but-be-aware-of-network-busting-bugs-in-win7\/#post-196495\" rel=\"nofollow noopener\" target=\"_blank\"><span style=\"font-weight: 400;\">pushed onto Win10<\/span><\/a><span style=\"font-weight: 400;\">, in spite of its settings.<\/span><\/p>\n<p class=\"jumpTag\"><a href=\"\/article\/3280845\/microsoft-windows\/make-sure-windows-auto-update-is-temporarily-turned-off-and-watch-out-for-smbv1-fixes.html#jump\">To read this article in full, please click here<\/a><\/p>\n<\/section>\n<\/article>\n","protected":false},"author":4,"featured_media":0,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"colormag_page_container_layout":"default_layout","colormag_page_sidebar_layout":"default_layout","footnotes":""},"categories":[11062,10643],"tags":[13764,714,10525],"class_list":["post-12541","post","type-post","status-publish","format-standard","hentry","category-computerworld","category-independent","tag-pcs","tag-security","tag-windows"],"_links":{"self":[{"href":"http:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/posts\/12541","targetHints":{"allow":["GET"]}}],"collection":[{"href":"http:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"http:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"http:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/users\/4"}],"replies":[{"embeddable":true,"href":"http:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/comments?post=12541"}],"version-history":[{"count":0,"href":"http:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/posts\/12541\/revisions"}],"wp:attachment":[{"href":"http:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/media?parent=12541"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"http:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/categories?post=12541"},{"taxonomy":"post_tag","embeddable":true,"href":"http:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/tags?post=12541"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}