New
#1
As always... thank you, Brink!
Today we released security updates to provide additional protections against malicious attackers. As a best practice, we encourage customers to apply security updates as soon as they are released.
More information about this month’s security updates and advisories can be found in the Security TechNet Library.
MSRC Team
Source: February 2016 Security Update Release Summary - Microsoft Security Response Center - Site Home - TechNet Blogs
See also:
I'm curious when I open my current Windows Update I see that one box, which is the second one down, has no tick in the box. I have never seen that before. Can somebody please tell me the reason behind that? I mean I can click on the box itself and what have you, but I was just wondering.
Cheers.
Dialog between Susan Bradley and Doug Neal:
More:From: 'RE: should I concentrate on patching my webservers first' - MARC
"Although we don't generally use the word 'throttling' externally, that's exactly what \
this is. An unchecked update in the WUapp (Windows Update Control Panel applet) is \
an indication of an update that's being throttled (publicly called, "gradually \
releasing update x over a period of time"). This only affects the consumer \
scenarios: automatic update (AU) and Windows/Microsoft Update (WU/MU). And usually \
only the tech savvy folks would see it since they would need to open WUapp, see the \
update and notice it's unchecked). Enterprise scenarios (WSUS, SMS, SCCM, SBS, SCE, \
MBSA) and the MU Catalog are not affected since there's no concept of throttling \
(local admins like you have this control).
Updates are generally throttled when they are (a) major releases that need to be \
gradually deployed (like a major version upgrade for Internet Explorer), (b) when \
there are potential quality issues found in the first day or two of release (so we \
can slow the deployment while we gather data to assess the scope of an issue), or - \
as in this case - (c) we don't want to hit every Windows consumer PC on the planet \
at an inopportune time (like during the holidays) - but still give tech-savvy admins \
the ability to release the update (through WSUS/SMS/SCCM or by checking the box in \
WUapp).
A throttled update can be seen in the LOGs as the "regulation server" not permitting \
the download of the update. Of course, if you interactively check the checkbox in \
WUapp, you will circumvent the regulation server (throttling) and receive the update \
anyway. "
doug neal
Microsoft Update (MU)
Why are some important Windows Updates not checked automatically?
Do we have a definitive list of which MS updates that should be avoided like the plague please?
Yeah, I know, .... all of them maybe, but just thought I'd ask.
Not sure why yours is unchecked--I installed that a couple of weeks ago.
FWIW the two we need be wary of re: Windows 10 are these:
KB2952664 This update helps Microsoft make improvements to the current operating system in order to ease the upgrade experience to the latest version of Windows.
KB3123862 The update adds capabilities to some computers that lets users easily learn about Windows 10 or start an upgrade to Windows 10.
But KB3135445 appears to just be an update client fix and likely is good.
The general answer is to leave all updates uninstalled for a few days and keep an eye on sites like this one, Ask Woody, and Windows Secrets. Only if no problems are being reported should you then consider installing the ones rated Important (as long as they're checked for installation, hold fire if they're offered unchecked) although Optional ones should generally be avoided altogether unless you have good reason to install any particular ones.
Susan Bradley at Windows Secrets always recommends holding back on updates relating to kernel-mode drivers for a couple of weeks pending her further recommendations, and that includes KB3134214 this week.