Manyof the cumulative updates depend on having the Servicing Stack Updates installed beforehand, so my guess is when you tried to install KB4338814 it failed because you did not first install the prerequisite servicing stack update KB4132216.
Microsoft advises that customers always use the latest cumulative update. I have also talked to another Microsoft partner that does not update customers unless they have a specific problem that would be addressed by the update.
Thank you for your reply. It seems like it is probably a good idea to do maybe every six months from what others have said in this thread. Normally, we haven't been making process of applying cumulative updates because we are worried about breaking the customizations. It also didn't seem certain that there would be any benefits in applying the updates.
As Saurav said there is no point of applying the CU every month because it will increase your workload as well as the customer has to pay monthly. My suggestion is to apply the CU for every 3 months time.
Windows updates help you to stay productive and protected. They provide your users and IT administrators with the security fixes they need, and protect devices so that unpatched vulnerabilities can't be exploited. Updates for the Windows client OS are typically cumulative. They include all previously released fixes to guard against fragmentation of the operating system. Reliability and vulnerability issues can occur when only a subset of fixes is installed.
Most people are familiar with the monthly security update release. The monthly security update release is published on the second Tuesday of each month, typically at 10:00 AM Pacific Time (PST/PDT). This release might commonly be referred to as:
Monthly security update releases are cumulative. The release includes both new and previously released security fixes, along with nonsecurity content introduced in the prior month's Optional nonsecurity preview release. These updates help keep Windows devices secure and compliant by deploying stability fixes and addressing security vulnerabilities. Most organizations consider monthly security update releases as mandatory.
Optional nonsecurity preview releases provide IT admins an opportunity for early validation of that content prior to the monthly security update release. Admins can test and validate production-quality releases ahead of the planned monthly security update release for the following month. These updates are optional, cumulative, nonsecurity preview releases. New features might initially be deployed in the prior month's optional nonsecurity preview release, then ship in the following monthly security update release. Optional nonsecurity preview releases are typically released on the fourth Tuesday of the month at 10:00 AM Pacific Time (PST/PDT). These releases are only offered to the most recent, supported versions of Windows.
Out-of-band (OOB) releases might be provided to fix a recently identified issue or vulnerability. They're used in atypical cases when an issue is detected and can't wait for the next monthly release, because devices must be updated immediately to address security vulnerabilities or to resolve a quality issue impacting many devices. Out-of-band (OOB) releases are provided outside of the monthly schedule when there's an exceptional need.
Starting with Windows 11, version 22H2, new features and enhancements are introduced periodically to provide continuous innovation for Windows 11. These features and enhancements use the normal update servicing channels you're already familiar with. At first, new features are introduced with an optional nonsecurity preview release and gradually rolled out to unmanaged clients. These new features are released later as part of a monthly security update release.
Some of the new features may be disruptive to organizations. By default, these select features are turned off temporarily for all managed devices until the next annual feature update is installed. In this scenario, a device is considered managed if it uses one of the following to determine which updates to install:
Features that are turned off by default are listed in the KB article for the monthly cumulative update. If you want to enable these features, there's a client policy that allows admins to enable features that are behind temporary enterprise control. For more information about this policy, see Enable features that are behind temporary enterprise feature control.
Annual feature updates are released in the second half of the calendar year. These updates are typically cumulative and include all previously released fixes. They also include new features and enhancements. The annual feature update marks the start of the support lifecycle:
If the downloading is slow, you can try to manually download the cumulative updates (to a shared folder) and the install it manually AFTER you have run windows updates (without the CU). In that way you only need to download only once.
However I still prefer to manually update servers as there are too many updates and preconditions (eg some updates have to be added while some may need to be removed). So I just set the servers to automatically download but not to install. This is important as sometimes we may not want certain updates and I do not really have to wait for the install (I have over 200 servers) and downloading at the same time can take a while.
I do not think it is a problem with WSUS, or GPO settings.
None of that has changed, and too many other things work.
I am able to patch servers, and desktop computers (with this update), and Office related updates install on my Surface Laptos.
It appears to be only cumulative updates that are failing to install on Surface Laptops.
We came to the same conclusion that @foo mentions a couple of years ago. We did have an issue with Windows 10 LTSB 2016 refusing to apply cumulative updates after November of 2019. We fought it for months and finally re-imaged the endpoints to a newer version of Win 10 LTSC. Now anytime we have an endpoint miss more than one cumulative update, we reimage, it is much faster and less wasted time trying to discover the reasons why. BTW - we use WSUS as well in a 99% windows 10 LTSC environment.
Yes, unfortunately WUA is a very fragile piece of work. We see it breaking down all time with all kinds of repairable and unrepairable errors. The standard stop services/delete catroot2/SoftwareDisturbution/start services works in 80% of cases. We even added these repairs steps into our patch management product for automatic repairs. 80% success is what we statistically based on almost 1 million endpoints that we manage combined across all of our customer environments at Action1.
This is more of a "heads up" than anything else. I have ArcGIS Server 10.9.1 installed on a Windows Server 2022 VM in a test environment. After applying the latest cumulative update for Windows Server 2022 (KB5034129) the server's CPU usage pegged at 100% and wouldn't go down. Performance Monitor showed dozens of Windows Error Reporting and msedge processes running.
The other servers were not ArcGIS servers, they are there for testing other things. So it must be an interaction with ArcGIS Server. The problem went away when the Windows update was removed, so it must be the Windows update.
Note that i didnt do any further tweaking after pressing ok as windows didnt allow me to uninstall the Cumulative Update/Security Update all i did afterwards was restarting the pc to check if messed up something.
And i also tried the command in command prompt "wusa /uninstall /kb:5028166" and it said something along the lines of(KB5028166) is required by your computer and cannot be uninstalled. i clicked OK and did not do anything after that.
Windows Update is a Microsoft service for the Windows 9x and Windows NT families of the Microsoft Windows operating system, which automates downloading and installing Microsoft Windows software updates over the Internet. The service delivers software updates for Windows, as well as the various Microsoft antivirus products, including Windows Defender and Microsoft Security Essentials. Since its inception, Microsoft has introduced two extensions of the service: Microsoft Update and Windows Update for Business. The former expands the core service to include other Microsoft products, such as Microsoft Office and Microsoft Expression Studio. The latter is available to business editions of Windows 10 and permits postponing updates or receiving updates only after they have undergone rigorous testing.
As the service has evolved over the years, so has its client software. For a decade, the primary client component of the service was the Windows Update web app that could only be run on Internet Explorer. Starting with Windows Vista, the primary client component became Windows Update Agent, an integral component of the operating system.
The service provides several kinds of updates. Security updates or critical updates mitigate vulnerabilities against security exploits against Microsoft Windows. Cumulative updates are updates that bundle multiple updates, both new and previously released updates. Cumulative updates were introduced with Windows 10 and have been backported to Windows 7 and Windows 8.1.
3a8082e126