techie17 Posted March 10, 2021 Posted March 10, 2021 (edited) It looks like we have a bad windows update in SCCM thats causing clients to blue screen. How to i disable windows update in SCCM or ADR so that other clients dont update? Thanks EDIT: Looks like a bad windows Update https://www.windowslatest.com/2021/03/10/windows-10-kb5000802-march-update-is-crashing-pcs-with-bsod/ and relating to kyocera printers/copiers. If someone can let me know how to temporiliy stop the ADR/Windows updates being deployed, at least then i can save a few clients! Edited March 10, 2021 by techie17
techie17 Posted March 10, 2021 Author Posted March 10, 2021 Its definitely pointing to issues with the updates KB5000802, KB5000808 and KB5000809 . How can i roll back updates on clients that were deployed via SCCM and would i have to disable that update in SCCM or WSUS?
CHiLL Posted March 10, 2021 Posted March 10, 2021 (edited) Great. We have Kyocera MFDs as our follow-me fleet and I can see that our SCCM synced updates last night (being patch Tuesday and all). The easiest way to stop the updates to clients would be to remove the deployment: Software Library > Overview > Software Updates > Software Update Groups. Then select the ADR baseline/update group, select the Deployment tab in the bottom window and remove the collection that the ADR has been deployed to. Thanks for the warning though. I'll remove our Windows 10 updates ADR from clients now. Edited March 10, 2021 by CHiLL
techie17 Posted March 10, 2021 Author Posted March 10, 2021 Great. We have Kyocera MFDs as our follow-me fleet and I can see that our SCCM synced updates last night (being patch Tuesday and all). The easiest way to stop the updates to clients would be to remove the deployment: Software Library > Overview > Software Updates > Software Update Groups. Then select the ADR baseline/update group, select the Deployment tab in the bottom window and remove the collection that the ADR has been deployed to. Thanks for the warning though. I'll remove our Windows 10 updates ADR from clients now. Thanks. Ive create a task sequence to uninstall the windows update but im getting this error on the clients when run. Does anyone know why? "Task sequence 'Uninstall KB5000809' has failed with the error code 0x00000057 in the task sequence step 'Uninstall KB5000809'. For more information, contact your system administrator or helpdesk operator."
CHiLL Posted March 10, 2021 Posted March 10, 2021 Thanks. Ive create a task sequence to uninstall the windows update but im getting this error on the clients when run. Does anyone know why? "Task sequence 'Uninstall KB5000809' has failed with the error code 0x00000057 in the task sequence step 'Uninstall KB5000809'. For more information, contact your system administrator or helpdesk operator." I'm not sure why that's happening. I have found that the update also KB5000802 is also deployed to my Office 2019 and SCEP ADR groups, I'm not sure why. I might have to disable those too.
CHiLL Posted March 10, 2021 Posted March 10, 2021 (edited) I think the best way to remove the update from your SCCM Software Update Groups (instead of removing the update deployment entirely): Software Library > Overview > Software Updates. Search for the update in question, select the update(s) from the list (can select multiple). Right click and select Edit Membership. After the list populates, remove the check from all groups that the update is listed in and press OK. When you search for the update again, the "Is Deployed" column should change from "Yes" to "No". Edited March 10, 2021 by CHiLL
bondbill2k2 Posted March 11, 2021 Posted March 11, 2021 The related updates for those wanting to remove/decline/approve uninstall are: Windows 10 version 1803 — KB5000809 (OS Build 17134.2087) Windows 10 version 1809 — KB5000822 (OS Build 17763.1817) Windows 10 version 1909 — KB5000808 (OS Build 18363.1440) Windows 10 version 2004 and 20H2 — KB5000802 (OS Builds 19041.867 and 19042.867) Just removing it now with the below command, replace kb article with relevant kb: wusa /uninstall /kb:5000809 /quiet
Koldov Posted March 11, 2021 Posted March 11, 2021 And '2021-03 Cumulative Update for Windows 10 Version 1607 for x64-based Systems (KB5000803)....? If anyone has got that installed...? Asking for a friend...
free780 Posted March 11, 2021 Posted March 11, 2021 Are people still printing? I thought WFH had killed printing? I'm guessing the 1607 (yes you should upgrade Windows 10 unless using LTSC) patch will be very similar to the Server 2016 patch. I wonder if that will break your print Server if you have Kyocera Printers. 1
CHiLL Posted March 11, 2021 Posted March 11, 2021 Are people still printing? I thought WFH had killed printing? Just like how we're now a "paperless" school?
dibekem Posted March 15, 2021 Posted March 15, 2021 Hello. We have the same issue. We don’t have windows server setup so I’m trying to send out a start-up script to remove this update. I would like it to remove the update silently but prompt for a restart. I tried this line via my laptop in command prompt but hasn’t worked wusa /uninstall /kb:5000808 /quiet /promptrestart I tried this one too but no luck wusa /uninstall /kb:5000808 /quiet Any help would be much appreciated
Boredguy Posted March 15, 2021 Posted March 15, 2021 Wusa only works if you are running it once logged in to the workstation Otherwise via logon script is a viable option start /wait /min DISM.exe /Online /Remove-Package /PackageName:Package_for_RollupFix~31bf3856ad364e35~amd64~~18362.1440.1.7 /quiet /norestart has been working for other schools in our MAT who don't have a SCCM server. that will uninstall 5000808 on Windows 10 1909.
dibekem Posted March 15, 2021 Posted March 15, 2021 Thank you so much for this! So If I set this up as a startup script it will remove the update but will not restart the machine. Will then the users have to restart their pc to finish the uninstallation process? Thanks
Boredguy Posted March 15, 2021 Posted March 15, 2021 Thank you so much for this! So If I set this up as a startup script it will remove the update but will not restart the machine. Will then the users have to restart their pc to finish the uninstallation process? Thanks Logon script, not start up Users will need to restart the computer for it to complete. You can remove the norestart switch if you wish to force it but that might upset your users
dibekem Posted March 15, 2021 Posted March 15, 2021 Thank you. I will keep the norestart in place. Do you know the package name for KB5000802? I need to remove that too but cannot find the name for it. Thank you very much in advance!
Boredguy Posted March 15, 2021 Posted March 15, 2021 Its package_for_ServicingStack~31bf3856ad364e35~amd64~~XXXXXXX From a CMD session run as Admin, if you run the following command you will get a list of the patches applied with the correct version number at the end dism /online /get-packages /format:table 1
dibekem Posted March 15, 2021 Posted March 15, 2021 (edited) Thank you this is very helpful! Edited March 15, 2021 by dibekem
dibekem Posted March 16, 2021 Posted March 16, 2021 Hello. I have applied the script but it only works if I login as systemadmin. I'm not very good with scripts as you can see! Is there a way of running this script on a non administrator account? Can the credentials be added to the script? Thank you
Koldov Posted March 16, 2021 Posted March 16, 2021 Hi, Sorry to hear you are still struggling with this. But for those who haven't removed the CU (or even if you have), things have moved on.... please someone correct me if I'm wrong. There should now be a new improved 2021-03 CU for your version of Windows. If you download that, it should fix things automatically (it should patch the old CU or if that has been removed it will be a fixed CU), so everything should work OK after installing it. YMMV and UAYOR - do some research or please wait and see if someone confirms this... 1
Koldov Posted March 16, 2021 Posted March 16, 2021 Sorry for the double post, but for those who aren't in the other thread (and I see some talk about the SSU): Interesting to note this (just to say KB numbers are not for versions I have - just the first page I Googled - so don't take them as read): https://support.microsoft.com/en-us/topic/march-9-2021-kb5000802-os-builds-19041-867-and-19042-867-63552d64-fe44-4132-8813-ef56d3626e14 Microsoft now combines the latest servicing stack update (SSU) for your operating system with the latest cumulative update (LCU). If you encounter the error, 0x800f0823 – CBS_E_NEW_SERVICING_STACK_REQUIRED, close the error message and install the last standalone SSU (KB4598481) before installing this LCU. You will not need to install this SSU (KB4598481) again for future updates. If you want to remove the LCU To remove the LCU after installing the combined SSU and LCU package, use the DISM/Remove-Package command line option with the LCU package name as the argument. You can find the package name by using this command: DISM /online /get-packages.
supportman Posted March 17, 2021 Posted March 17, 2021 (edited) Urgent Fix released out of the normal update window https://support.microsoft.com/en-us/topic/march-15-2021-kb5001567-os-builds-19041-868-and-19042-868-out-of-band-6e0844a2-7551-4b2d-9c4b-4274a5949bf3 Highlights Updates an issue that might cause a blue screen when you attempt to print to certain printers using some apps. Edited March 17, 2021 by supportman
supportman Posted March 17, 2021 Posted March 17, 2021 Direct link here to the update file https://www.catalog.update.microsoft.com/Search.aspx?q=KB5001567
Recommended Posts
Create an account or sign in to comment
You need to be a member in order to leave a comment
Create an account
Sign up for a new account in our community. It's easy!
Register a new accountSign in
Already have an account? Sign in here.
Sign In Now