"Optional" Windows 10 Upgrade update

"Optional" Windows 10 Upgrade update

Postby jnewman67 » 14.10.2015, 08:41

This isn't directly WSUS Offline related, but it is.

I was updating an existing Win7 SP1 machine that had been updated about 2 weeks ago. Told it to check for new updates...

And found there was a new "Optional" update that was already checked for installation. To make sure I didn't accidentally check it, I unchecked it, and told WU to check for updates again. and it got rechecked for installation.

The problem is that this is a 2.67GB Windows 10 Upgrade update - it's being pushed as an "optional" update, but it's automatically getting checked for installation - hence NOT OPTIONAL. Anyone shutting their system down that doesn't uncheck/hide this update might be in a world of hurt next time they turn on their machine.

Is this a WSUSOffline vulnerability?
jnewman67
 
Posts: 14
Joined: 05.10.2015, 05:44

Re: "Optional" Windows 10 Upgrade update

Postby boco » 14.10.2015, 08:58

WSUS Offline Update is not Windows Update. The Windows 10 Package (KB 2990214?) is pushed through Windows Update via GWX (Get Windows X (=10 in Roman numbers)). GWX itself is KB3035583.

If you uninstall and hide KB3035583, the Windows 10 package should stop being offered. And please note that WSUS Offline Update does not contain those optional updates.

Here's a list of KB packages that are more or less taking part in that Win10 'offer':
Code: Select all
wusa /uninstall /kb:3083711 /norestart
wusa /uninstall /kb:3083710 /norestart
wusa /uninstall /kb:3083325 /norestart
wusa /uninstall /kb:3083324 /norestart
wusa /uninstall /kb:3080149 /norestart
wusa /uninstall /kb:3075853 /norestart
wusa /uninstall /kb:3075851 /norestart
wusa /uninstall /kb:3075249 /norestart
wusa /uninstall /kb:3072318 /norestart
wusa /uninstall /kb:3068708 /norestart
wusa /uninstall /kb:3065988 /norestart
wusa /uninstall /kb:3065987 /norestart
wusa /uninstall /kb:3050267 /norestart
wusa /uninstall /kb:3050265 /norestart
wusa /uninstall /kb:3044374 /norestart
wusa /uninstall /kb:3035583 /norestart
wusa /uninstall /kb:3022345 /norestart
wusa /uninstall /kb:3021917 /norestart
wusa /uninstall /kb:3014460 /norestart
wusa /uninstall /kb:3012973 /norestart
wusa /uninstall /kb:2990214 /norestart
wusa /uninstall /kb:2977759 /norestart
wusa /uninstall /kb:2976978 /norestart
wusa /uninstall /kb:2952664 /norestart
You can save that list as a .cmd file and executa as Administrator, to uninstall those packages. Might need to be run multiple times, as some updates might have more than one version installed.

ts;dr: No, the packages to get Windows 10 are not contained in WSUSOU. But the GWX package has been offered by Windows Update as 'Important', hence many users got it installed automatically.
Microsoft update catalog: http://catalog.update.microsoft.com/v7/site/
Windows Install media download: https://support.microsoft.com/en-us/help/15088/windows-create-installation-media
boco
 
Posts: 2212
Joined: 24.11.2009, 17:00
Location: Germany

Re: "Optional" Windows 10 Upgrade update

Postby jnewman67 » 14.10.2015, 14:22

thanks for the detailed info (I did know that WSUS Offline Update is not Windows Update - I may have referenced them wrong, sorry if I did).

I knew about KB3035583 as well (the visible one, mostly) - but I honestly don't remember whether it was installed at the time or not (I had to go through hoops to get that uninstalled too - at one point it was visibly running in the icon bar, and still showing up as installable in Windows Update!). I just don't remember if the Win10 Upgrade update was noticed before or after I got that uninstalled.

My concern was whether "optional" updates were installed as part of WSUS (or even as an option) - or if by automatically being checked would include it in the updates that WSUS would install.

Thanks for the clarification.
jnewman67
 
Posts: 14
Joined: 05.10.2015, 05:44

Re: "Optional" Windows 10 Upgrade update

Postby ericb7799 » 16.10.2015, 20:28

you may want to check out my post in this forum in the download section about another issue with the Kb3035583 and newer issue where is also seems to set the min allowable .net framework to 4.6 on your Windows 7 (and probably 8.1 also). So if then the .net 4.6 gets damaged it will no longer allow you to roll back, repair or uninstall it. the current .net repair tool will not fix it. only solution so far is to delete windows\system32\gwx.exe then uninstall that kb3035583. Hope it doesn't happen to anyone else because it will affect all programs that need/use .net 4 or greater and they will not run until you remove that update. Also need to hide it from updating in the future if you don't plan on doing Win 10 yet.
ericb7799
 

Re: "Optional" Windows 10 Upgrade update

Postby mbathen » 16.10.2015, 21:51

There is a script from a magzin, may be it can help you.
http://www.heise.de/newsticker/meldung/ ... 82984.html
--
Gruß
Manfred
mbathen
 
Posts: 79
Joined: 06.08.2009, 21:11


Return to Installation / Updating

Who is online

Users browsing this forum: No registered users and 17 guests