Time to install Microsoft patches, except KB 4054517 for Win10 Fall Creators Update

December has brought some surprises in Windows PatchLand, but in general, the coast is clear. "Sure", that is, unless you have made the mistake of installing Win10 Fall Creators Update, version 1709 (or has been included) before the nominal trial period of four months has elapsed.

Generally speaking, it is safe to install Windows and Office patches this month, unless you are using Win10 1709, although there are some unclear issues that can bite you if you use Win7 with encrypted shared files or the Active application login. Directory. For those who installed Win10 1709 before letting unpaid beta testers move on Crait, there are very few reasons to install this month's security patches, as long as you do not use Internet Explorer or Edge. Which, if the statistics are credible, probably not.

Office tches

Microsoft has a general webpage for known (that is, officially recognized) errors in Office patches. In it, you will find entries for known Outlook issues ("After upgrading to Win10 1709, the Outlook People Panel no longer shows any results"), Excel issues ("You may experience problems loading the Excel Solver add-in if you have WPS Office installed on your machine ") and OneNote (" You can not change the name of the sections in OneNote for Windows "). There is also a general warning that if you have problems opening files located in OneDrive, you must install the latest version of OneDrive.

I do not know why, but that page does not mention the big change in the way Word blocks DDEAUTO fields after installing this month's Word security patches. I talked about that earlier this week. Bottom line: you should install this month's Word security patch, KB 4011575, 4011590, 4011608, 4011612 and 4011614, but consider the possible problem. If you then open a Word document, and it no longer responds correctly (for example, by dropping data from an Excel spreadsheet and placing the data in the document), you must go through the manual solutions, edit the record and place the correct DDE new.

Windows 7 and 8.1 patches

The coast is clear, unless you are using Active Directory to log in to applications, or you are opening Office documents from an exchange of encrypted files. If you do not understand the gibberish, do not worry, it's fine. If you understand the gibberish, hook on the Patch Management mailing list.

Microsoft is blocking Windows 7 and 8.1 updates on recent computers. If you are running Windows 7 or 8.1 on a PC that is a year or older, follow the instructions in AKB 2000006 or the @Rubrian summary of the @ radosuaf method to make sure that you can use Windows Update to apply the updates.

If you are very concerned about Microsoft's intrusions on you and want to install only security patches, keep in mind that the privacy route is becoming more difficult. The old "Group B" - only security patches - is not dead, but it is no longer available to typical Windows clients.

For most users of Windows 7 and 8.1, I recommend following AKB 2000004: How to apply the Win7 and 8.1 monthly Roll Up. If you want to minimize Microsoft espionage activity, but still install all offered patches, turn off the User Experience Improvement Program (Step 1 of AKB 2000007: Deactivating the worst of Windows 7 and 8.1 snooping) before install any patch. (Thx, @MrBrian).

Be careful with driver updates: it's much better to get them from the manufacturer's website. After installing the latest monthly Rollup, if you are trying to minimize Microsoft's spy activity, follow the steps in AKB 2000007: Deactivating the worst of the Win7 and 8.1 queries. Please note that we do not know what information Microsoft collects on Windows 7 and 8.1 machines.

Windows 10

If you are stuck in Windows 10 Fall Creators Update, version 1709, I strongly recommend that you stop using Internet Explorer and Edge, and wait until Microsoft fixes the numerous errors in this month's Win10 1709 cumulative update, KB 4054517. If you have Do it using IE or Edge, hold your breath, turn off your antivirus, and if you have any problems, follow the references in yesterday's article.

If you run Win10 Creators Update, version 1703 (my current preference) or 1607, Anniversary Update, and you want to remain in 1607 or 1703, while those in 1709 can eat Microsoft's dog food, follow the instructions here to avoid updating. As you go through the steps, remember that Microsoft forgot to respect the "Current Branch for Business" settings, so you must run the "update" deferment settings.

It's time to be patched It's time to fix your friends. As you are fooled by the provision of technical assistance for all your family and friends, it is time to patch them as well. The complete instructions can be found in the guides referenced for patching.