kb4015549 & ms17-010 WannaCry

[tech-man]

Just to be sure if I have kb4015549 April Security Monthly Rollup am I protected and patched against ms17-010. I'm sure the answer is yes... just for my own peace of mind and sanity!

[burgemaster]

I believe yes, as it contains KB4012212

[tech-man]

I believe yes, as it contains KB4012212

 

Which is the March one.....

[mullet_man]

I've not seen this mentioned but does this only effect users who are admins of their devices?

 

E.g student devices would remain safe but still vulnerable?

Edited May 13, 2017 by mullet_man

[DrCheese]

I've not seen this mentioned but does this only effect users who are admins of their devices?

 

E.g student devices would remain safe but still venerable?

 

No affects you regardless of access as it uses an exploit to do it's dirty work.

[mullet_man]

No affects you regardless of access as it uses an exploit to do it's dirty work.

 

Ok thanks for that, just wondering if that was the case.

[tech-man]

I am still confused by this: We have KB4015549 (April Security Monthly Rollup) installed everywhere on all devices. However it will allow me to install KB4012212 (March 2017 Security Only Quality Update)

 

Please can someone shed some light on this...?!

[Michael]

To the best of my knowledge you need both, however the March update is where it was first patched. I've deployed both if anyone's wondering!

[tech-man]

If I search for KB4012212 in WSUS and view status report it is not approved and it says it is needed by 0 computers. If I download it manually and try to install, it will install.

 

Can anyone else shed any light on this?

[Michael]

Generally speaking Windows 7 updates are not CU like Windows 10, so I would recommend you deploy it.

[tech-man]

Michael,

 

I have just told Windows Update to check online for required updates and it does not return KB4012212??

[jthompson]

Just to be sure if I have kb4015549 April Security Monthly Rollup am I protected and patched against ms17-010. I'm sure the answer is yes... just for my own peace of mind and sanity!

 

I'd say that KB4015549 doesn't necessarily patch MS17-010, and you should install the March patch. The KB article for the April patch doesn't mention it. In our WSUS, the March rollup (KB4012212) shows as not being superseded yet by anything (and we have the April and May patches).

[Michael]

I think the other clue of course is Microsoft are calling them 'Rollups' rather than CUs... in the context of Windows 10. Rollup as in, all the updates for March, then April and so on.

[tech-man]

OK - I have authorised KB4012212 on WSUS and re-scanned for updates... the status of the patch is now that it is Not Applicable to that computer.....

 

Any thoughts?!

[jthompson]

OK - I have authorised KB4012212 on WSUS and re-scanned for updates... the status of the patch is now that it is Not Applicable to that computer.....

 

Any thoughts?!

 

It might be that it's just showing you the status "Installed/Not Applicable". Have a look in Windows Update on a client that it should be approved for and click on 'View update history'. Have a look through the list for the 4012212 update and see if it shows as successfully installed.

[tech-man]

As per https://blogs.technet.microsoft.com/configmgrdogs/2016/12/07/update-to-supersedence-behaviour-for-security-only-and-security-monthly-quality-rollup-updates/

I believe I am covered as per my actions above.