Windows 7 Forums
Welcome to Windows 7 Forums. Our forum is dedicated to helping you find support and solutions for any problems regarding your Windows 7 PC be it Dell, HP, Acer, Asus or a custom build. We also provide an extensive Windows 7 tutorial section that covers a wide range of tips and tricks.


Windows 7: KB4056897 (January 2018 Security Only update) prerequisites

01 Jun 2018   #1
stmarco

Windows 7 Enterprise x64
 
 
KB4056897 (January 2018 Security Only update) prerequisites

Hello,

I would like to ask you quite curious question related to W7 patches that has been released since January 2018.

In our environment I have discovered multiple workstations that did not get OS patches installed - first of missing updates is KB4056897 (January 2018 Security Only update).

It is well known that AV compatibility registry key is required before these patches can be applied by WU. But all the affected clients have had this reg key already (QualityCompat / cadca5fe-87d3-4b96-b7fb-a231484277cc).

After long investigation the findings are following:
- Clients have McAfee for several years already
- Before McAfee has been installed - there has been Symantec Endpoint Protection installed.
- It seems there remained some leftovers after SEP has been replaced by McAfee
- solution was to run CleanWipe from Symantec to remove any leftovers. After that action clients can find and apply KB4056897 (January 2018 Security Only update) and others that follow.

So the conclusion is that WU is actually checking more things than just AV compatibility registry key (QualityCompat / cadca5fe-87d3-4b96-b7fb-a231484277cc) before the KB4056897 is verified as applicable.

And the question is - do you know what exactly could be blocking KB4056897 to get applicable until CleanWipe from SEP is run? I would assume it could be some more registry keys related to Symantec. And it would be very helpful to know which key(s) it is exactly. Having this information we could apply the fix more easily. Running SEP cleanwipe on tens of computers seems quite aggressive solution which I would like to avoid to.

Thank you in advance for any advice


My System SpecsSystem Spec
.
01 Jun 2018   #2
torchwood

W7 home premium 32bit/W7HP 64bit/w10 tp insider ring
 
 

Hi stmarco,

As you had to wipe the previous AV's registry entries for WU to work, Endpoints original uninstall must have left behind the ORIGINAL parent key, obviously not updated as program removed.
The criteria was for a registry search ONLY, it did not look for - is it still installed as well.

Roy
My System SpecsSystem Spec
01 Jun 2018   #3
torchwood

W7 home premium 32bit/W7HP 64bit/w10 tp insider ring
 
 

Hi

note this prerequisite no longer applies

please force download KB4093108 to update your computers


April 10, 2018 - KB4093108 (Security-only update) Windows 7 - Windows 7 Help Forums


Roy
My System SpecsSystem Spec
.

01 Jun 2018   #4
stmarco

Windows 7 Enterprise x64
 
 

Hi,

Thank you for your replies.

I have done some more testing and I have found the exact registry removal that fixes this issue!

I just need to run this command:
reg delete "HKLM\SOFTWARE\Symantec\InstalledApps" /v AVENGEDEFS /f

After that - once new update scan is triggered - patches are being installed.

It so great that this mystery is solved for me now!
My System SpecsSystem Spec
Reply

 KB4056897 (January 2018 Security Only update) prerequisites




Thread Tools




Similar help and support threads
Thread Forum
January 3, 2018 - KB4056897 (Security-only update) Windows 7
Source: https://support.microsoft.com/en-us/help/4056897 See also: Important: Windows security updates released January 3, 2018, and antivirus software Direct download links for KB4056897 MSU file from Microsoft Update Catalog: :ar: Download KB4056897 MSU for Windows 7 32-bit (x86) -...
News
January 2018 Office Update Release
See: January 2018 Office Update Release Office Updates KB4058103 - January 2018 updates for Microsoft Office
News
Microsoft Security Bulletin(s) for January 2018
January 2018 Security Updates Release Date: January 09, 2018 The January security release consists of security updates for the following software: Internet Explorer Microsoft Edge Microsoft Windows Microsoft Office and Microsoft Office Services and Web Apps SQL Server ChakraCore .NET...
Windows Updates & Activation
Market Share January 2018
Here is the NetMarketShare data for the 6 months to January. Data from NetMarketShare If you visit the site, you'll notice that the info listed in the table does not match the data points on the graph. https://www.tenforums.com/images/smilies/009.png
News
January 2018 Non-Security Office Update Release
Source: January 2018 Non-Security Office Update Release Office Updates
News


Our Sites

Site Links

About Us

Find Us

Windows 7 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 7" and related materials are trademarks of Microsoft Corp.

Designer Media Ltd

All times are GMT -5. The time now is 13:43.
Twitter Facebook