Windows Home Server 2011 Updates

Re: Windows Home Server 2011 Updates

Postby aker » 13.05.2020, 00:41

lioninstreet wrote:Absolutely! A .txt doc outlining how to set up the tool to install these three would resolve. Taking it one step further, It would totally elegant if the tool could ultimately handle the install of the reference WU updates, as well as these without additional user intervention (maybe with optional tick boxes).

But if the project doesn't warrant that extra time & effort (or the code in the tool just wont permit it) I fully understand. Even providing the user a document advising how manually install these is still 500% better than any other option out there.

Will do so this weekend. And I'll have to do some tests afterwards.

--------------------------------------------------

lioninstreet wrote:For more information about these prerequisite hotfixes, click the following article numbers to view the articles in the Microsoft Knowledge Base:

2781272 A hotfix is available to add backup support for UEFI-based computers to back up to servers that are running Windows Home Server 2011

2781270 A hotfix is available to add backup support for UEFI-based computers to back up to servers that are running Windows Small Business Server 2011 Essentials

2781274 A hotfix is available to add backup support for UEFI-based computers to back up to servers that are running Windows Storage Server 2008 R2 Essentials


Now it's getting interesting. I found another source for the confusion.
MS' documentation isn't the same on all pages.
Take a look at this:

https://support.microsoft.com/en-us/help/2781278/a-client-hotfix-is-available-that-adds-backup-support-for-uefi-based-c wrote:2781274 A hotfix is available to add backup support for UEFI-based computers to backup to servers that are running Windows Storage Server 2008 R2 Essentials

2781270 A hotfix is available to add backup support for UEFI-based computers to backup to servers that are running Windows Small Business Server 2011 Essentials

2781272 A hotfix is available to add backup support for UEFI-based computers to backup to servers that are running Windows Home Server 2011


The positions for Storage Server and Home Server are exchanged.

Most likely I mixed up some tab, while writing my previous post and copied the wrong number. I meant KB2781272 and not KB2781274. I‘ll fix this.

If I can get my hands on KB2781270 and KB2781274 I'll have to check, if the files are identical. I wouldn't wonder, if they are.

lioninstreet wrote:Nevertheless, kb2934953 shows 2781272 as a must install prerequisite to get UEFI backup functionality on WHS11.

So yes, you were right, it was a confusion on my site, while writing my previous post.
Actually I used KB2781272 in my wsusou fork.

So everything should be clear now.
KB2781270/KB2781272/KB2781274 adds the UEFI- and GPT-support to the Server and KB2934950/KB2934953 fix bugs with a .NET update for the clients.
Also the UEFIHotfix KB2781272 seems to require UR4 to be installed, even if it is not listed in the article. The correct order of updates would be
a) UR4, KB2934950, ...
b) UR4, KB2781272, KB2934953, ...
which is used by the custom wsusou fork.

--------------------------------------------------

lioninstreet wrote:Using the WHS11 system fully updated by your v2 beta version of the tool, I manually Installed the Enterprise rollup, it's post requsites, and the convenience rollup on the system. The install method I'm using is simply clicking on the update, the installer opens, verifies applicability, and begins the install.
[...]

I'll check and test it this weekend.
Wer Rechtschreibfehler findet, darf sie behalten oder an den Meistbietenden versteigern. / Everybody finding a misspelling is allowed to keep or sell it.
aker

WSUS Offline Update „Community Edition“
https://gitlab.com/wsusoffline/wsusoffline/-/releases
aker
 
Posts: 3999
Joined: 02.03.2011, 15:32

Re: Windows Home Server 2011 Updates

Postby lioninstreet » 13.05.2020, 02:39

I tried to figure out the GPT/UEFI update path but MS made is so confusing I'd pretty much given up until you jumped in and started sorting it out.

Loading the OS again to try loading in the CR and hofix w/post requisites early on shortly.
lioninstreet
 
Posts: 108
Joined: 21.06.2018, 00:06

Re: Windows Home Server 2011 Updates

Postby lioninstreet » 17.05.2020, 04:04

The hotfix rollup installed as a stand alone update, but the post-requisites marked below with an "X" would not install. This with whs11 fully update with the v2 tool.

Then on a fresh install, I ran v2 of the tool (without auto reboot). After the third install run (only ie11 pre-req, ie11, & npd4.8 installed) the system successfully accepted both the hotfix rollup KB2775511 all the below post requisite hotfixes:

KB2581608 Applies a required registry entry not included in the enterprise hotfix rollup (Removed from Update Cat)
KB2752259 Applies a required registry entry not included in the enterprise hotfix rollup (Removed from Update Cat)
X - kb2601014-v2 Regression in Mrxsmb10.sys causes Samba incompatablity (Removed from Update Cat)
KB2728738-v3 Regression in Profsvc.dll causes delayed Write Fail for .pst files stored on Network (Not Replaced)
X - KB2732673-v4 Regression in Rdbss.sys causes extended login time with roaming profiles (Not Replaced)
X - KB2878378-v2 Regression in Advapi32.dll. causes OpsMgr 2007r2 to have "Heartbeat Failure" (Not Replaced)
X - KB2921916 "Untrusted publisher" dialog box appears when you install a driver (Removed from Update Cat)

The unavailable updates can still be found at http://thehotfixshare.net The last hotfix KB2921916 is included for installs that require drivers that are not typically part of the OS or update install.

Next will be a comparison of what the Convenience Rollup installs by injecting it immediately after wsusou installs the SSU to installing after the last update run.
lioninstreet
 
Posts: 108
Joined: 21.06.2018, 00:06

Re: Windows Home Server 2011 Updates

Postby aker » 17.05.2020, 09:50

The convenience rollup is checked. A blacklist excluding updates superseded by the convenience rollup is already included in the tool.
Wer Rechtschreibfehler findet, darf sie behalten oder an den Meistbietenden versteigern. / Everybody finding a misspelling is allowed to keep or sell it.
aker

WSUS Offline Update „Community Edition“
https://gitlab.com/wsusoffline/wsusoffline/-/releases
aker
 
Posts: 3999
Joined: 02.03.2011, 15:32

Re: Windows Home Server 2011 Updates

Postby lioninstreet » 17.05.2020, 17:56

Understood.

It looks like there are no SSU updates installed until run 5 when the 2019-03 kb4490628 goes in. Since SSU updates are rollups, the Convenience Rollup itself can be injected at any point after that, yes?

BTW, I've found three telemetry related and one GWX update in the CR. If they aren't already, they should probably be on the black list:
kb3068708 - T - Not superseded
kb3075249 - T - Removed from Update Catalog
kb3080149 - T - Not superseded
kb2966583 - GWX - Superseded by 2020-01 Security Monthly Quality Rollup

[EDIT:] On the subject of Telemetry/GWX. I know there is a high chance the 2020-01 Security Monthly Quality Rollup has other Telemetry/GWX updates from earlier Rollups baked in.

As currently built, the tool installs Security Only Quality Updates for 2016-10 & 2016-11, from 2017-03 to 2017-12, and 2018-04 & 2018-05. Then to pickup the remaining monthly updates, installs the 2020-01 Security Monthly Quality Rollup. To build a cleaner & lighter install, what would I have to do on my end to update with the other missing Security Only Quality Updates instead?

It seems like the SOQU updates are cleaner as the only snooping update that MS seems to inject in (2-3 times) that have been found in those is KB2952664, which is already on your black list.
Last edited by lioninstreet on 17.05.2020, 21:49, edited 2 times in total.
lioninstreet
 
Posts: 108
Joined: 21.06.2018, 00:06

Re: Windows Home Server 2011 Updates

Postby aker » 17.05.2020, 21:03

lioninstreet wrote:kb3075249 - T

Wasn't included at any point.

lioninstreet wrote:kb3068708 - T
[...]
kb3080149 - T

Have been excluded in the second beta (currently online).

lioninstreet wrote:kb2966583 - GWX

Wasn't included at any point.
But it's not GWX; KB3035583 was GWX. This update looks more like an update to the management tools (DISM, ...).

--------------------------------------------------

I found some updates reported as missing after installing the 2014 enterprise rollup.
As far as I can see, it doesn't break anything existing. But I don't know, if these "new" update break something, if the 2014 enterprise rollup isn't installed.
Will continue to work on it next weekend.

--------------------------------------------------

That's how the "README" currently looks like. That's not final, but the content is correct as far as I can see now.
2014 Enterprise Hotfix
- install the Servicing Stack Update KB4490628 from 2019-03 (.\w61-x64\glb\windows6.1-kb4490628-x64_6d7e7f728029598fc4b9b4ddd86c8bf1d43289a2.cab or download it from somewhere)
- reboot, if required
- install the following updates (all of them in .\w61-x64\glb) in the order they are listed; reboot, if requested: KB2775511, KB2732673, KB2728738, KB2601014, KB2878378, KB2581608, KB2752259
- reboot
- now start UpdateInstaller.exe and let it do its job

Convenience Rollup (KB3125574)
- install the Servicing Stack Update KB4490628 from 2019-03 (.\w61-x64\glb\windows6.1-kb4490628-x64_6d7e7f728029598fc4b9b4ddd86c8bf1d43289a2.cab or download it from somewhere)
- reboot, if required
- install KB3125574 (Convenience Rollup)
- reboot
- now start UpdateInstaller.exe and let it do its job

UEFIHotfix
- install the Windows Home Serevr 2011 Update Rollup 4 (.\w61-x64\glb\windows6.1-kb2757011-x64_d01351ef77faa57aff72b862902b847155f7da52.cab)
- reboot, if required
- install the UEFIHotfix / KB2781272 (.\w61-x64\glb\Windows6.1-KB2781272-x64.msu)
- reboot
- now start UpdateInstaller.exe and let it do its job
Wer Rechtschreibfehler findet, darf sie behalten oder an den Meistbietenden versteigern. / Everybody finding a misspelling is allowed to keep or sell it.
aker

WSUS Offline Update „Community Edition“
https://gitlab.com/wsusoffline/wsusoffline/-/releases
aker
 
Posts: 3999
Joined: 02.03.2011, 15:32

Re: Windows Home Server 2011 Updates

Postby lioninstreet » 17.05.2020, 21:48

Please note the edit regarding the 2020-01 Security Monthly Quality Rollup in my post edit above.

aker wrote:
lioninstreet wrote:kb2966583 - GWX

Wasn't included at any point.
But it's not GWX; KB3035583 was GWX. This update looks more like an update to the management tools (DISM, ...).

I think the title of the kb reading "compatablity tool" threw me for a curve. I just checked the file for names for keywords like “telemetry”, “diagtrack” and “appraiser. There aren't any.

--------------------------------------------------

aker wrote: I found some updates reported as missing after installing the 2014 enterprise rollup.
As far as I can see, it doesn't break anything existing. But I don't know, if these "new" update break something, if the 2014 enterprise rollup isn't installed.
Will continue to work on it next weekend.

When you have a chance, can you post what showed as missing?

--------------------------------------------------

aker wrote:That's how the "README" currently looks like. That's not final, but the content is correct as far as I can see now.

The readme draft is very concise, showing these optional updates. Comments/Questions:

1) The readme instructs to first install the 2019-03 SSU. It doesn't appear to be a prereq for the hotfix rollup and as noted in a post above, it successfully installed along with the post requisites without it. Would you prefer the SSU be a pre-requisite?

2) I don't think I have a misspelling to sell, but the hotfix rollup is 2013-03

3) I'm assuming the readme is intending for these individual installs to be done prior to running the tool, yes?

4) Maybe a short preface explanation for the three optional installs would be helpful. This would give a bit of clarity for those uneducated about what they are and why they might (or might not) want to install them.

5) Due to existing and potential update/hotfix availability issues, are you open to include these hotfixes/rollups/updates in the user .iso and then just direct the user to the file location in the readme?

6) Or better (in my opinion), is it possible to included them all in the .iso, but instead of the readme text instructing what to manually install, write it to instruct (if the user wanted to add them to the install) how to edit the tools install list. This way the tool would just install these updates with minimum user intervention.

(EDIT) 7) WHS11 hotfix kb2781272, see below.

kb2871272 is a hotfix that permits the successful backup of clients utilizing UEFI with GPT formatted disks. kb2934950 is needed for client backups to be successfully performed after installing a .NET framework update (or newer versions of .NET in the 3 scenarios you earlier described). kb2934953 is used to address the same scenario as kb2934950, but when kb2871272 is also present.

So the question (presuming I have the correct understanding of the kb articles). Should the tool be setup to install kb2934950 without kb2781272 & kb2934953 (since it seem to be required due to the .NET update)? As currently setup the tool auto installed kb2934853 (that has kb2781272 as a pre-requisite). If kb2781272 & kb2934953 are interdependent and you are considering them optional, it seems that the tool should be installing kb2934950 instead. Your thoughts?

The readme could instruct users who want the UEFI / GPT support to install both kb2781272 & kb2934953. Since the kb articles about this subject are somewhat confusing, I would think the readme should include some kind of reference why they would install them (see #4 above).

Thanks again!
Last edited by lioninstreet on 18.05.2020, 00:40, edited 3 times in total.
lioninstreet
 
Posts: 108
Joined: 21.06.2018, 00:06

Re: Windows Home Server 2011 Updates

Postby aker » 17.05.2020, 22:50

lioninstreet wrote:When you have a chance, can you post what showed as missing?


wsusou reports these:
Code: Select all
17.05.2020 20:07:49,87 - Warning: Update kb3022777 (id: 05ae0271-7ba9-45f2-ac0a-0b9a1172828e) not found
17.05.2020 20:07:49,87 - Warning: Update kb3068457 (id: 0033933d-74d2-45e7-b790-740b68f51a3e) not found
17.05.2020 20:07:49,87 - Warning: Update kb3076949 (id: efc9b9f1-8f04-43fb-85b9-59e61a811510) not found
17.05.2020 20:07:49,87 - Warning: Update kb3124280 (id: ba332c1d-8e4b-41d4-bcda-24e08f8a71c1) not found


WUMT reports these:
Code: Select all
KB2798162
KB2846960
KB3022777
KB3068457
KB3072630
KB3076949
KB3080079
KB3124280


--------------------------------------------------

lioninstreet wrote:1) A SSU doesn't appear to be a prereq for the hotfix rollup

It's always a good idea to update the Servicing Stack before doing something else. A user friendly installer is still missing, I know...
lioninstreet wrote:2) Not a misspelling but, the hotfix rollup is 2013-03

Found it somewhere named like this, now changed to "Enterprise Hotfix Rollup"
lioninstreet wrote:3) I'm assuming the readme is intending for these individual installs to be done prior to running the tool, yes?

Yes. As I said, it isn't final. At the moment it's more a documentation on how it works.
lioninstreet wrote:4) Due to existing and potential update/hotfix availability issues, can these hotfixes/rollups/updates be included in the user .iso and then just direct the user to the file location in the readme?

As far as I know, I already added all of them (except the convenience rollup) to the ISO.
lioninstreet wrote:5) Or even better (in my opinion), is it possible to included them all in the .iso, and just write the readme to instruct how (if the user wanted to add them to the install) to edit the install list. This way the tool would just install them with minimum user intervention.

I'm not sure about it. I'll think about it until next weekend and then choose one way of doing it.

--------------------------------------------------

lioninstreet wrote:As currently built, the tool installs Security Only Quality Updates for 2016-10 & 2016-11, from 2017-03 to 2017-12, and 2018-04 & 2018-05. Then to pickup the remaining monthly updates, installs the 2020-01 Security Monthly Quality Rollup. To build a cleaner & lighter install, what would I have to do on my end to update with the other missing Security Only Quality Updates instead?

That's most likely caused by the Windows Update bug. It's not needed. These SecOnly updates get installed "by accident"; I could safely exclude them.

lioninstreet wrote:It seems like the SOQU updates are cleaner as the only snooping update that MS seems to inject in (2-3 times)

For sure. But due to the Windows Update bug, I cannot promise, that all updates get installed.

lioninstreet wrote:KB2952664, which is already on your black list

I never blacklisted KB2952664.
KB2952664 came at the same time as GWX, but is just an AppCompat-update. It was a litte annoying, that it came in as far as I know about 30 revisions, but there is no telemetry/GWX inside.
On the other hand it isn't required for anything in any way.
Also it's not included in any rollup (at least I haven't seen that).
Wer Rechtschreibfehler findet, darf sie behalten oder an den Meistbietenden versteigern. / Everybody finding a misspelling is allowed to keep or sell it.
aker

WSUS Offline Update „Community Edition“
https://gitlab.com/wsusoffline/wsusoffline/-/releases
aker
 
Posts: 3999
Joined: 02.03.2011, 15:32

Re: Windows Home Server 2011 Updates

Postby lioninstreet » 18.05.2020, 00:44

aker wrote:wsusou reports these:
Code: Select all
Warning: Update kb3022777 - Shows as not found on my v2 wsusou report as well
Warning: Update kb3068457 - Shows as not found on my v2 wsusou report as well
Warning: Update kb3076949 - Never on the list for either v1 or v2 of the tool
Warning: Update kb3124280 - Shows as not found on my v2 wsusou report as well

WUMT reports these:
Code: Select all
KB2798162 - In Convenience Rollup / Improves messaging in dialog boxes when you run executable files
KB2846960 - In Convenience Rollup / Never on the install list for either v1 or v2 of the tool or downloaded by v11.9.1 tool / Error in SharePoint Document Library w/ ie10 (also supposed to be in 2020-01 rollup)
KB3022777 - Shows as not found on my v2 wsusou report as well / Vulnerability in Network Location Awareness
KB3068457 - Shows as not found on my v2 wsusou report as well / Vulnerability in Netlogon
KB3072630 - Shows as not found on my v2 wsusou report as well / Vulnerability in Installer service
KB3076949 - Never on the install list for either v1 or v2 of the WHS11 tool or downloaded by v11.9.1 tool / Vulnerability in WebDAV (supposed to be in 2020-01 rollup)
KB3080079 - In Convenience Rollup / Adds RDS support for TLS 1.1 and TLS 1.2
KB3124280 - Shows as not found on my v2 wsusou report as well / To Address Elevation of Privilege in WebDAV

note edits above
--------------------------------------------------

aker wrote:
lioninstreet wrote:4) Due to existing and potential update/hotfix availability issues, can these hotfixes/rollups/updates be included in the user .iso and then just direct the user to the file location in the readme?

As far as I know, I already added all of them (except the convenience rollup) to the ISO.?

during the week I'll double check. I recall looking a week or so ago and seeing the hotfix rollup missing. Could be mistaken
aker wrote:
lioninstreet wrote:5) Or even better (in my opinion), is it possible to included them all in the .iso, and just write the readme to instruct how (if the user wanted to add them to the install) to edit the install list. This way the tool would just install them with minimum user intervention.

I'm not sure about it. I'll think about it until next weekend and then choose one way of doing it.

Great! Thanks for watching the details.

--------------------------------------------------

If my choice, I'd remove the 2020-01 rollup and put all the Security only Monthly updates on the custom list. If someone wanted the updates included in latest rollup, they could manually install.

--------------------------------------------------

I just edited item 7 above on hotfix kb2781272

I must have read the kb's for kb2781272, kb2934950, & kb2934953 along with your posts about this at least 5 times now. I think I have it figured out. When you have a chance, let me know if you read it differently. This is really shaping up to be something special.

BTW I noticed there have been 50+ downloads of the tool you wrote for WHSv1. Good to see!
lioninstreet
 
Posts: 108
Joined: 21.06.2018, 00:06

Re: Windows Home Server 2011 Updates

Postby aker » 19.05.2020, 22:55

lioninstreet wrote:If my choice, I'd remove the 2020-01 rollup and put all the Security only Monthly updates on the custom list. If someone wanted the updates included in latest rollup, they could manually install.

I'll keep the rollup.
In the most recent build (I just added the required 3 lines of code), the SecOnly-Option in UpdateInstaller.ini will also affect the static updates.

--------------------------------------------------

lioninstreet wrote:I must have read the kb's for kb2781272, kb2934950, & kb2934953 along with your posts about this at least 5 times now. I think I have it figured out. When you have a chance, let me know if you read it differently. This is really shaping up to be something special.


lioninstreet wrote:(EDIT) 7) WHS11 hotfix kb2781272, see below.

kb2871272 is a hotfix that permits the successful backup of clients utilizing UEFI with GPT formatted disks. kb2934950 is needed for client backups to be successfully performed after installing a .NET framework update (or newer versions of .NET in the 3 scenarios you earlier described). kb2934953 is used to address the same scenario as kb9234950, but when kb2871272 is also present.

Correct.

lioninstreet wrote:So the question (presuming I have the correct understanding of the kb articles). Should the tool be setup to install kb2934950 without kb2781272 & kb2934953 (since it seem to be required due to the .NET update)? As currently setup the tool auto installed kb2934853 (that has kb2781272 as a pre-requisite). If kb2781272 & kb2934953 are interdependent and you are considering them optional, it seems that the tool should be installing kb2934950 instead. Your thoughts?

The tool is able to detect, if KB2781272 is installed or not. It will then install KB2934950 or KB2934953 depending on the installation status of KB2781272.
.\cmd\ListUpdatesToInstall.cmd wrote:
Code: Select all
rem *** WHS2011 mod: additional static updates ***
if "%OS_NAME%"=="w61" (
  if "%OS_InstallationType%"=="Server" (
    if "%OS_EditionID%"=="ServerHomePremium" (
      if exist "%TEMP%\InstalledUpdateIds.txt" (
        %SystemRoot%\System32\find.exe /I "2781272" "%TEMP%\InstalledUpdateIds.txt" >nul 2>&1
        if not errorlevel 1 (
          call :EvalStatics ..\static\custom\StaticUpdateIds-whs2011-UEFIHotfix.txt
        ) else (
          call :EvalStatics ..\static\custom\StaticUpdateIds-whs2011.txt
        )
      )
    )
  )
)


Without KB2781272 it will use .\staic\custom\StaticUpdateIds-whs2011.txt
Code: Select all
kb2757011,Update Rollup 4 for Windows Home Server 2011
kb2885314,404 Error when you use Internet Explorer 11 to access RWA on a Windows Home Server 2011-based server
kb2934950,Client Backup fails on a computer that connects to a Windows-based server (non-UEFIHotfix)


With KB2781272 it will use .\staic\custom\StaticUpdateIds-whs2011-UEFIHotfix.txt
Code: Select all
kb2757011,Update Rollup 4 for Windows Home Server 2011
kb2885314,404 Error when you use Internet Explorer 11 to access RWA on a Windows Home Server 2011-based server
kb2934953,Client Backup fails on a computer that connects to a Windows-based server (UEFIHotfix)



lioninstreet wrote:The readme could instruct users who want the UEFI / GPT support to install both kb2781272 & kb2934953. Since the kb articles about this subject are somewhat confusing, I would think the readme should include some kind of reference why they would install them (see #4 above).

Not required, the wsusou-mod will automatically decide, what to do.

--------------------------------------------------

I'm still working on the post-EnterpriseHotfix updates.
Just fixed an installation loop, but still have to add 4 updates to satisfy WU.
Wer Rechtschreibfehler findet, darf sie behalten oder an den Meistbietenden versteigern. / Everybody finding a misspelling is allowed to keep or sell it.
aker

WSUS Offline Update „Community Edition“
https://gitlab.com/wsusoffline/wsusoffline/-/releases
aker
 
Posts: 3999
Joined: 02.03.2011, 15:32

PreviousNext

Return to Fehlende Updates / Missing updates

Who is online

Users browsing this forum: No registered users and 3 guests

cron