https://worldofeuc.com logo
Join Slack
Powered by
This message was deleted.
# _general
s
This message was deleted.
🙌 1
n
i just changed my dc's gpo's to not update based on that crazy thread
👍 1
o
Good call! The consulting / IT services company I work for only had one engagement AFAIK, but my division is mostly just Citrix/VMware, there could have been others. I didn't see much chatter on twitter, but that's probably just due to the mostly Azure/CTX/VMware folks I follow
n
Is this only affecting Server OS? There are W10 updates that reference similar fixes, but I see no mention of W10 issues.
o
Only reports I've seen / worked on so far are DC / exchange, server 2012 and R2
n
Yeah, that's all I'm seeing online, too.
Oh, and a ServiceNow ticket about 3 DCs being offline to SCOM, lol
n
others on reddit reporting 16/19 dc's affected as well
n
So I guess we're affected, too.
n
they patched during the week? i do mine on a weekend window
o
Oh snap, there you go. Fix is easy enough, remove network connection from impacted VM then uninstall the patch , reboot and reconnect network connection
n
Just an assumption on my part, as timing is conspicuous.
Could just be a SCOM issue
n
not your issue it sounds like, good, lol
n
Exactly 😄
L2TP/IKEv2 VPN tunnels, to be precise.
n
i saw that too, but my laptop with sonicwall vpn client was fine when i patched. i use myself as a test
n
I haven't started testing yet, and am literally in the middle of sealing my newly patched image. Not sure if I want to just hold off and wait for the inevitable patch patch.
o
You can check for the related event IDs to see if you're impacted , it's not always a 5 min boot loop
Not at my desk, but the reddit thread links to the blog post which shows the event ID related to lsas service failing
n
I think I'm going to just uninstall the two patches and call it a day.
o
Safe and fast ! Good idea
n
Is it fast if I just spent the last hour sealing my image, only to immediately delete it? 😄
o
🤔
n
snapshot!
your gold image should be fine. i patched a few non-dc's and end users with no issues
one of my clusters got the DC patches last night. i just realized I missed changing their GPO's for something I was testing. but they're just fine.
n
wusa.exe won't uninstall those patches, nice.
DISM didn't work, either. Anyone have another way to forcibly uninstall patches?
o
Hmm, I was able to remove 'em via add/remove programs > installed updates. I'm not super familiar with WSUS, does using WSUS disable normal windows updates removal?
PSWindowsUpdate has an un-install parameter, I've not used it, but it could work. Are you familiar with this Powershell module, @Nick Panaccio? I know it quite well, I could assist you today, PM me
Simple, but this should do it: 1. Install-Module PSWIndowsUpdate 2. Import-Module PSWIndowsUpdate 3. Get-HotFix ( will be used in step 4) 4. Remove-WindowsUpdate -KBArticleID KBID from step 3
n
Sorry, just seeing this now - not familiar with it, no. I may honestly just delete that layer and redo it. Just sucks because I had installed Edge, EdgeWeb, and something else afterwards.
👍 1
r
https://docs.microsoft.com/en-us/windows/release-health/windows-message-center#2777 An out-of-band update has been released to address issues related to VPN connectivity, Windows Server Domain Controllers restarting, Virtual Machine start failures, and ReFS-formatted removeable media failing.
👍 1
n
Nice try, I'll wait for the out of band out of band patch for the patch...
o
Patch the patch , it's patch inception
5 Views
Open in Slack
PreviousNext
Powered by