![](\"https:\/\/images.techhive.com\/images\/article\/2016\/08\/patch_job-100676957-primary.idge.jpg\"\/)
<\/p>\n
Credit to Author: Woody Leonhard| Date: Tue, 05 Sep 2017 05:37:00 -0700<\/strong><\/p>\n August was a banner month for Windows and Office customers. If I counted correctly, we saw patches on 14 different days<\/a> last month. The current list of outstanding problems<\/a> with those patches weighs heavily on my mind, but with the first September non-security Office patches due today, and the September security patches due in a week, it\u2019s time for you to get the August patches out of the way.<\/p>\n As mentioned in the outstanding problems list<\/a>, the Windows 7 multi-monitor bug has been resolved \u2014\u00a0if you\u2019re careful to manually install the right patch (details below). The server redlining problem has also been fixed, as has the Excel 2016 hyperlink bug. Unfortunately, the Word\/Outlook merged cell bug is still around, but fortunately, you can skip that patch if it\u2019s going to affect you.<\/p>\n There were reports of eight undocumented Surface Pro 4 patches<\/a> delivered last Friday, but so far I\u2019ve seen no confirmation that they\u2019re widespread. Reports of a re-issued Server 2008 security patch<\/a>, KB 4019206, have been nailed down as a metadata change and nothing to be worried about. There\u2019s also an as-yet-unresolved problem with Microsoft Security Essentials definition 1.249.211.0<\/a> appearing over and over again \u2014 apparently if you hide it, it\u2019ll go away.<\/p>\n As always, I strongly recommend that you avoid installing the Preview Rollups on offer, such as KB 4034670<\/a>. That\u2019s easy \u2014 you have to check the right box to install the Preview, and you shouldn\u2019t be checking any boxes!<\/p>\n Here are my recommendations:<\/p>\n If you\u2019re very concerned about Microsoft\u2019s snooping on you, and only want to install security patches, realize that the path\u2019s getting more difficult. The old \u201cGroup B\u201d \u2014 security patches not only isn\u2019t dead, but it\u2019s no longer within the grasp of typical Windows customers. If you insist on installing security patches only, follow the instructions in @PKCano\u2019s AKB 2000003<\/a>.<\/p>\n Microsoft is still blocking updates to Windows 7 and 8.1 on recent computers. If you are running Windows 7 or 8.1 on a PC that\u2019s a year old, or newer, follow the instructions in AKB 2000006<\/a> or @MrBrian\u2019s summary of @radosuaf\u2019s method<\/a> to make sure you can use Windows Update to get updates applied.<\/p>\n If you want to minimize Microsoft\u2019s snooping but still install all of the offered patches, turn off the Customer Experience Improvement Program (Step 1 of AKB 2000007: Turning off the worst Windows 7 and 8.1 snooping<\/a>) before you install any patches. (Thx, @MrBrian).<\/p>\n If you have Office 2016 installed, and you use merged cells in tables in either Word or Outlook, don\u2019t install KB 3213656<\/a>. Microsoft still hasn\u2019t fixed the problem. If you see an entry in Windows Update for KB 3213656, uncheck the box so it won\u2019t be installed.<\/p>\n For most Windows 7 and 8.1 users, I recommend following AKB 2000004: How to apply the Win7 and 8.1 Monthly Rollups<\/a>. Watch out for driver updates \u2014 you\u2019re far better off getting them from the manufacturer\u2019s web site.<\/p>\n After you\u2019ve installed the latest Monthly Rollup, if you\u2019re intent on minimizing Microsoft\u2019s snooping, run through the steps in AKB 2000007: Turning off the worst Win7 and 8.1 snooping<\/a>. Realize that we don\u2019t know what information Microsoft collects on Win7 and 8.1 machines.<\/p>\n Also after you\u2019ve installed the latest Monthly Rollup, if you\u2019re having problems with a garbled second screen on Win7 machines, you need to download and manually install a separate patch, KB 4039884<\/a>. I don\u2019t recommend that you run through the manual fix, which Microsoft used to recommend \u2014 use the (newly updated) KB 4039884 hotfix instead.<\/p>\n Given the problems with recent patches to the Anniversary Update, version 1607, I now recommend that 1607 users upgrade to version 1703<\/a>, the Creators Update, using the Windows Update mechanism, if it\u2019ll work. Mind you, I recommend 1703 not because it\u2019s superior but because the patches now appear to be less buggy. As a bit of lagniappe, 1703 also gives you more control over forced patching.<\/p>\n If you decide to stick with 1607, do yourself a favor and manually install KB 4039396 <\/a>before you run Windows Update. Running KB 4039396 will preserve your Update history, keep your hidden patches hidden, and add a couple dozen bug fixes in the mix.<\/p>\n Those of you still on 1511, the Fall Update (later renamed to \u201cNovember Update\u201d), you need to move on to 1703 now. The last 1511 security patches will arrive on Oct. 10<\/a>. May as well swallow your medicine now.<\/p>\n To get Windows 10 patched, run the\u00a0eight steps to install Windows 10 patches like a pro<\/a>. If you have Office 2016 installed, and you use merged cells in tables in either Word or Outlook, use wushowhide as described in the article to \u201chide\u201d KB 3213656<\/a>. Microsoft still hasn\u2019t fixed the problem. You may also want to use wushowhide to hide any driver updates. All of the other updates should be OK, including Servicing stack updates, Office, MSRT or .Net updates (go ahead and use the Monthly Rollup if it\u2019s offered).<\/p>\n Microsoft finally told us last week<\/a> what the mysterious KB 4033637 is all about \u2014 it\u2019s an update to the Compatibility Appraiser, no doubt being pushed to ease the way to Fall Creators Update, due to arrive on Oct. 17<\/a>. You\u2019ll be hearing a lot more about that in the coming weeks.<\/p>\n As is always the case, DON\u2019T CHECK ANYTHING THAT\u2019S UNCHECKED<\/strong>.<\/p>\n Time to get patched. Tell your friends, but make sure they understand what\u2019s happening. And for heaven\u2019s sake, as soon as you\u2019re patched, turn off automatic updating! Full instructions are in the referenced guides to patching.<\/p>\n I just changed the MS-DEFCON level on the <\/em>AskWoody Lounge<\/em><\/a>.<\/em><\/p>\n http:\/\/www.computerworld.com\/category\/security\/index.rss<\/a><\/p>\n","protected":false},"excerpt":{"rendered":" Credit to Author: Woody Leonhard| Date: Tue, 05 Sep 2017 05:37:00 -0700<\/strong><\/p>\n August was a banner month for Windows and Office customers. If I counted correctly, we saw patches on 14 different days<\/a> last month. The current list of outstanding problems<\/a> with those patches weighs heavily on my mind, but with the first September non-security Office patches due today, and the September security patches due in a week, it\u2019s time for you to get the August patches out of the way.<\/p>\n<\/p>\n