Page 7 of 8

Re: Windows Home Server 2011 Updates

PostPosted: 01.06.2020, 19:17
by aker
lioninstreet wrote:So you don't want KB4534976 = 2020-01 SecOnly update for .NET 3.5.1, 4.5.2, 4.6, 4.6.1, 4.6.2, 4.7, 4.7.1, 4.7.2 and 4.8 in the install tool?

There is no "Windows6.1-KB4534976-xxx.exe/cmd/msu".
KB4534976 is a collection of KB4532960, KB4532964, KB4532971 and KB4532952.
https://www.catalog.update.microsoft.com/Search.aspx?q=KB4534976 wrote:2020-01 Sicherheitsupdate für .NET Framework 3.5.1, 4.5.2, 4.6, 4.6.1, 4.6.2, 4.7, 4.7.1, 4.7.2, 4.8 für Windows 7 und Server 2008 R2 für x64 (KB4534976)
ndp45-kb4532964-x64_4e90c195438094eadc62b08daa62b518087c1cde.exe
msipatchregfix-amd64_5011cb29b096fb674a4795ee8fc2f7fdad33863a.exe
30626317_1d3b80da08d5087e9eb9ec88b6250c7d3a4850ab.cab
windows6.1-kb4532960-x64_f99f406b14c6cb4a501cdff53728c8631330fc08.msu
windows6.1-kb4019990-x64_35cc310e81ef23439ba0ec1f11d7b71dd34adfe5.msu
30626318_408ee27480ea2b5877c75e8329d24024e1ac0191.cab
ndp48-kb4532952-x64_0a355388bb48f45a25ac326c2cc227fab9c8c3b4.exe
30626313_a2bc094f2a1170d5d992bb831b744222fb9f12af.cab
30626316_979b3169bfb740eca5ed1b061fbf8f0b71641652.cab
ndp47-kb4532971-x64_561d5fd49457ab4652156a66c728572a8a4a2a98.exe


--------------------------------------------------

lioninstreet wrote:Run log showing updates skipped due to black list entries I referred to above.

Did you install the convenience rollup?
KB982018 is included using a static list (.\static\custom\StaticUpdateIds-w61-x64.txt), but excluded using a convenience-rollup exclusive exclude list (.\exclude\custom\ExcludeList-KB3125574.txt).
The files excluded using these update-dependant exclude lists were excluded to prevent an installation loop because they are in a static list, but superseded by another rollup. Either as they are marked as superseded by MS (.\exclude\ExcludeList-KB3125574.txt) or behave strange [installation loops, fail to install, not listed by WUMT after installing the rollup anymore] (.\exclude\custom\ExcludeList-KB3125574.txt). For the updates on my own convenience update ExcludeList (.\exclude\custom\ExcludeList-KB3125574.txt) I cannot tell you, why I put them on it. I had a reason for all of them.

You can try to install the updates listed in .\exclude\custom\ExcludeList-KB3125574.txt, but it might not work as expected.

--------------------------------------------------

lioninstreet wrote::!: After all this work, Im pretty puzzled about the differences in what WUMT and a wmic qfe list show as being installed. Comparing the two, they both pickup some and miss others. How in the heck can you be sure what is actually being installed?

Using two ways:
1) The most complete list is provided by DISM. Combined with the others (Windows Update history, list of installed updates under "Control Panel -> Programs -> View installed updated", reports of wmic/systeminfo/...) I can get a pretty complete list. You can use the script ".\cmd\ListInstalledDISMPackages.cmd" to get the installed updates using DISM. Run it as admin and it will store a file named "InstalledDISMPackages.txt" or similar in your TEMP-folder.
2) Due to the fact, that WUMT/... don't show the updates as missing anymore.

--------------------------------------------------

lioninstreet wrote:4) After running the update tool, WU still wants to install 16 updates. Most are time zone related, GWX/Telemetry related, a driver, or not related to WHS11 functionality. On the five remaining below, was there anything specific about them that you chose to leave them out of the tool, should they just be installed with WU, or?

kb2603229 - U - values of the 32-bit versions of two registry entries are incorrect in 64-bit versions
kb2798162 - U - Improves messaging in dialog boxes when you run executable files
kb2893519 - U - "Remember my credentials" option cannot be hidden when the SspiPromptForCredentials function is called
kb3054205 - U - Update for SIP to enable WinVerifyTrust function ins2k8r2 to work with a later version of Windows
kb3118401 - U - Allows w10 dependent Universal Runtime apps to run on earlier versions of Windows.

Just saw this edit.
Please post new aspects in new posts, just edit posts to correct mistakes (such as me posting the wrong .NET version). This reduces the confusion on the side of all others reading this topic.
I'll take a look at the updates.

Re: Windows Home Server 2011 Updates

PostPosted: 01.06.2020, 20:40
by aker
lioninstreet wrote:kb3140245 - U - Update to enable TLS 1.1 and TLS 1.2 as default secure protocols in WinHTTP (re-released 2019-07)
kb982018-v3 - U - Improves compatibility with Advanced Format Disks

Both of them are included, but will be ignored, if the convenience rollup is installed.

lioninstreet wrote:kb2603229 - U - values of the 32-bit versions of two registry entries are incorrect in 64-bit versions
kb2798162 - U - Improves messaging in dialog boxes when you run executable files
kb2893519 - U - "Remember my credentials" option cannot be hidden when the SspiPromptForCredentials function is called
kb3054205 - U - Update for SIP to enable WinVerifyTrust function ins2k8r2 to work with a later version of Windows
kb3118401 - U - Allows w10 dependent Universal Runtime apps to run on earlier versions of Windows.

All of them are included, but ignored, if the convenience rollup is installed.
kb2603229, kb2798162, kb2893519 and kb3118401 are superseded by the convenience rollup according to MS; kb3054205 has been excluded by me.

lioninstreet wrote:
Code: Select all
Thu 05/28/2020  7:35:51.11 - Info: Skipped update kb2506928 due to matching black list entry
Thu 05/28/2020  7:35:51.11 - Info: Skipped update kb982018 due to matching black list entry
Thu 05/28/2020  7:35:51.11 - Info: Skipped update kb2603229 due to matching black list entry
Thu 05/28/2020  7:35:51.11 - Info: Skipped update kb2607047 due to matching black list entry
Thu 05/28/2020  7:35:51.11 - Info: Skipped update kb2660075 due to matching black list entry
Thu 05/28/2020  7:35:51.11 - Info: Skipped update kb2640148 due to matching black list entry
Thu 05/28/2020  7:35:51.11 - Info: Skipped update kb2608658 due to matching black list entry
Thu 05/28/2020  7:35:51.11 - Info: Skipped update kb2719857 due to matching black list entry
Thu 05/28/2020  7:35:51.11 - Info: Skipped update kb2732059 due to matching black list entry
Thu 05/28/2020  7:35:51.11 - Info: Skipped update kb2726535 due to matching black list entry
Thu 05/28/2020  7:35:51.11 - Info: Skipped update kb2791765 due to matching black list entry
Thu 05/28/2020  7:35:51.11 - Info: Skipped update kb2798162 due to matching black list entry
Thu 05/28/2020  7:35:51.11 - Info: Skipped update kb2853952 due to matching black list entry
Thu 05/28/2020  7:35:51.11 - Info: Skipped update kb2846960 due to matching black list entry
Thu 05/28/2020  7:35:51.11 - Info: Skipped update kb2808679 due to matching black list entry
Thu 05/28/2020  7:35:51.11 - Info: Skipped update kb2893519 due to matching black list entry
Thu 05/28/2020  7:35:51.11 - Info: Skipped update kb2891804 due to matching black list entry
Thu 05/28/2020  7:35:51.11 - Info: Skipped update kb2843630 due to matching black list entry
Thu 05/28/2020  7:35:51.11 - Info: Skipped update kb2919469 due to matching black list entry
Thu 05/28/2020  7:35:51.11 - Info: Skipped update kb2908783 due to matching black list entry
Thu 05/28/2020  7:35:51.11 - Info: Skipped update kb2852386 due to matching black list entry
Thu 05/28/2020  7:35:51.11 - Info: Skipped update kb2800095 due to matching black list entry
Thu 05/28/2020  7:35:51.11 - Info: Skipped update kb2985461 due to matching black list entry
Thu 05/28/2020  7:35:51.11 - Info: Skipped update kb2970228 due to matching black list entry
Thu 05/28/2020  7:35:51.11 - Info: Skipped update kb2978120 due to matching black list entry
Thu 05/28/2020  7:35:51.11 - Info: Skipped update kb3006121 due to matching black list entry
Thu 05/28/2020  7:35:51.11 - Info: Skipped update kb3006137 due to matching black list entry
Thu 05/28/2020  7:35:51.11 - Info: Skipped update kb3013531 due to matching black list entry
Thu 05/28/2020  7:35:51.11 - Info: Skipped update kb3020370 due to matching black list entry
Thu 05/28/2020  7:35:51.11 - Info: Skipped update kb3054476 due to matching black list entry
Thu 05/28/2020  7:35:51.11 - Info: Skipped update kb3054205 due to matching black list entry
Thu 05/28/2020  7:35:51.11 - Info: Skipped update kb3078667 due to matching black list entry
Thu 05/28/2020  7:35:51.11 - Info: Skipped update kb3080079 due to matching black list entry
Thu 05/28/2020  7:35:51.11 - Info: Skipped update kb3107998 due to matching black list entry
Thu 05/28/2020  7:35:51.11 - Info: Skipped update kb3102429 due to matching black list entry
Thu 05/28/2020  7:35:51.11 - Info: Skipped update kb3118401 due to matching black list entry
Thu 05/28/2020  7:35:51.11 - Info: Skipped update kb3147071 due to matching black list entry
Thu 05/28/2020  7:35:51.11 - Info: Skipped update kb3137061 due to matching black list entry
Thu 05/28/2020  7:35:51.11 - Info: Skipped update kb3133977 due to matching black list entry
Thu 05/28/2020  7:35:51.11 - Info: Skipped update kb3138378 due to matching black list entry
Thu 05/28/2020  7:35:51.11 - Info: Skipped update kb3140245 due to matching black list entry
Thu 05/28/2020  7:35:51.11 - Info: Skipped update kb2973112 due to matching black list entry
Thu 05/28/2020  7:35:51.11 - Info: Skipped update kb3122648 due to matching black list entry


All of them are included using a static definition.
kb2603229, kb2607047, kb2660075, kb2640148, kb2719857, kb2732059, kb2726535, kb2791765, kb2798162, kb2853952, kb2846960, kb2808679, kb2893519, kb2891804, kb2843630, kb2919469, kb2908783, kb2852386, kb2800095, kb2985461, kb2970228, kb3006121, kb3006137, kb3013531, kb3020370, kb3054476, kb3078667, kb3080079, kb3107998, kb3102429, kb3118401, kb3147071, kb3137061, kb3133977 and kb3138378 are superseded by the convenience rollup according to MS; kb2506928, kb982018, kb2608658, kb2978120, kb3054205, kb3140245, kb2973112 and kb3122648 have been excluded by me.

Re: Windows Home Server 2011 Updates

PostPosted: 02.06.2020, 05:42
by lioninstreet
aker wrote: All of them are included using a static definition.
kb2603229, kb2607047, kb2660075, kb2640148, kb2719857, kb2732059, kb2726535, kb2791765, kb2798162, kb2853952, kb2846960, kb2808679, kb2893519, kb2891804, kb2843630, kb2919469, kb2908783, kb2852386, kb2800095, kb2985461, kb2970228, kb3006121, kb3006137, kb3013531, kb3020370, kb3054476, kb3078667, kb3080079, kb3107998, kb3102429, kb3118401, kb3147071, kb3137061, kb3133977 and kb3138378 are superseded by the convenience rollup according to MS;
kb2506928, kb982018, kb2608658, kb2978120, kb3054205, kb3140245, kb2973112 and kb3122648 have been excluded by me.

Not that it matters as most of the functionality of this list doesn't apply to WHS11, I actually checked supersedence on all of these last weekend and what shows by MS differs slightly from what you posted. Your record shows kb2719857 & kb2852386 are included in the CR, MS now says they are not replaced.

aker wrote:
lioninstreet wrote: kb982018-v3 - U - Improves compatibility with Advanced Format Disks
kb3140245 - U - Update to enable TLS 1.1 and TLS 1.2 as default secure protocols in WinHTTP (re-released 2019-07)

Both of them are included, but will be ignored, if the convenience rollup is installed.

Looks like the issue with kb982018 was the need for updated RST drivers before it would install. Since AF disks are so common, maybe something from the readme, that being if you want the functionality of kb982018 and your using older hardware, you should first update to the most recent RST driver compatible with your motherboard.

The kb3140245 that enables TLS 1.2 as the default protocol appears to have a requirement for a registry edit. The alternate to the edit is to download a Microsoft Easy Fix tool that is still downloadable. It's somewhat unlikely a typical user would be browsing with WHS11, but it is possible. Again, maybe something to add to the readme?

Lastly, are those 2014 & 2016 .NET 3.51 updates kb2973112 , kb2978120, kb3122648. These are now showing as not superseded as well. Was there install problems with them back in the day?

I'm going to start placing links to the application on a the Home Server websites I frequent to see what user feedback is. So no hurry to make changes.

Re: Windows Home Server 2011 Updates

PostPosted: 02.06.2020, 10:36
by aker
Your record shows kb2719857 & kb2852386 are included in the CR, MS now says they are not replaced.

Then the newer list is broken. Mine is created from an official MS list downloaded a short time after the convenience rollup was released.

you should first update to the most recent RST driver compatible with your motherboard

My „motherboard“ is a „VirtualBox_rev6.1.8“. ;)
An I use the latest drivers.
The funny part is, that kb982018 gets reported as missing without the convenience rollup. If I install the convenience rollup, WUMT/WuMgr doesn‘t show that update anymore.
I‘ll try to manually install it and, if this succeded, unblacklist it.

The kb3140245 that enables TLS 1.2 as the default protocol appears to have a requirement for a registry edit.

Lastly, are those 2014 & 2016 .NET 3.51 updates kb2973112 , kb2978120, kb3122648.

As I said, I‘ll take a look at all of them.

Re: Windows Home Server 2011 Updates

PostPosted: 02.06.2020, 17:21
by lioninstreet
aker wrote:
Your record shows kb2719857 & kb2852386 are included in the CR, MS now says they are not replaced.

Then the newer list is broken. Mine is created from an official MS list downloaded a short time after the convenience rollup was released..


This is so weird. I'm using the update catalog and after searching for an update, clicking on update details/package details. Now when I pull these two, they show included in the CR. I'm seeing the same with the catalog on some updates that are not found, but are available from the download center by simply googling the kb number.

Example:
KB2446710 / 2011-04 / Net 3.5.1 patch ms11-28 for w7sp1 & s2k8r2 (this one is not in the *\glb folder by the way, superseded?)

Search for this one in the update catalog and no results are found. But google the kb and the first search result is the download page with the release detail and download link...

Re: Windows Home Server 2011 Updates

PostPosted: 03.06.2020, 09:55
by aker
I just did a first check of the custom blacklist.
Results:
Code: Select all
kb2506928 -> not applicabale after installing the convenience rollup
kb982018 -> not applicabale after installing the convenience rollup
kb2608658 -> not applicabale after installing the convenience rollup
kb2973112 -> not applicabale after installing the convenience rollup
kb2978120 -> not applicabale after installing the convenience rollup
kb3122648 -> not applicabale after installing the convenience rollup
kb3140245 -> not applicabale after finishing wsusou
kb3054205


I'll check the last to after my VM finished updating itself.

Will be edited, if new results appear.

Re: Windows Home Server 2011 Updates

PostPosted: 03.06.2020, 22:05
by aker
kb3054205 has been unblacklisted in the current version (currently creating ISO and uploading).
[edit]Should be online now[/edit]

The rest is left unchanged as they seem to be superseded by the convenience rollup (without being documented).

Re: Windows Home Server 2011 Updates

PostPosted: 24.09.2020, 01:49
by lioninstreet
Just noticed the download was updated in 2020-06.

Positive changes?

Re: Windows Home Server 2011 Updates

PostPosted: 24.09.2020, 23:22
by aker
:arrow: viewtopic.php?f=6&t=9931&start=50#p30933

aker wrote:2020-06-03
Code: Select all
- unblacklisted KB3054205 for systems with convenience rollup installed


Re: Windows Home Server 2011 Updates

PostPosted: 01.11.2020, 09:20
by lioninstreet
Hello Aker,

I hope you and your family are in good health and getting use to the "new normal" that seems to be the way of life now.

Since March, I've been slowly compiling a list of s2k8r2 security updates & hotfixes that were not on my original master list of updates nor included in the currently installed updates on the WHS11 wol update tool. None appear to have been superseded, none were included in the Enterprise Hotfix Rollup or the convenience rollup.

Once I have it done, are you open to review for potential integration into the tool?

Also, I know the nt6.1 updates post 1/20 are locked down, has anyone tried to install any of the newer SSU's?