[German]Microsoft has released a slew of security updates for Windows 7 through Windows 11 and Windows Server 2008 R2 through Windows Server 2022, effective January 17, 2022. These are intended to fix the various issues (DC boot loop, IPSec VPN connection issue, ReFS support, Hyper-V boot issue) in the clients and server versions caused by the Jan. 11, 2022 security updates. Here is an overview of these special updates for Windows 7 through 11 and the corresponding Windows Server versions.
I had reported about the issues caused by the Windows security updates of January 11, 2022 in the blog post Microsoft Microsoft Januar 2022 Patchday Revisions (2022/01/14) as well as in the following posts.
Windows Server: January 2022 security updates are causing DC boot loop
Windows VPN connections (L2TP over IPSEC) broken after January 2022 update
Windows Server 2012/R2: January 2022 Update KB5009586 bricks Hyper-V Host
Microsoft patch day issues Jan. 2022: bugs confirmed, but updates not pulled
The out-of-band updates from January 17, 2022 shall fix, according to Microsoft the bugs for the Windows versions (Clients, Server) listed below.
- KB5010795: Windows 11
- KB5010796: Windows Server 2022
- KB5010793: Windows 10 version 20H2 till 21H2 and Windows Server 20H2
- KB5010792: Windows 10 version 1909
- KB5010791: Windows Server 2019 (Addendum: Now released)
- KB5010790: Windows 10 version 1607 and Windows Server 2016
- KB5010789: Windows 10 version 1507
- KB5010794: Windows 8.1, Windows Server 2012 R2
- KB5010797: Windows Server 2012
- KB5010798: Windows 7 SP1
- KB5010799: Windows Server 2008 SP2
The fixed bugs are described in the linked support posts as well as in subsequent blog posts.
All these updates are optional and some of them are only offered for download in the Microsoft Update Catalog.
Another tip for administrators who distribute the updates via WSUS. They need to be downloaded and installed from the Microsoft Update Catalog. Those who have disabled IE and are using Edge can use the approach I outlined in the blog post How-To: Import OOB Updates in WSUS without IE, but with Microsoft Edge to import via Edge.
Similar articles:
Windows Server: Out-of-Band Update fixes Remote Desktop issues (2022/01/04)
Microsoft Office Updates (January 4, 2022)
Microsoft Security Update Summary (January 11, 2022)
Patchday: Windows 8.1/Server 2012 R2 Updates (January 11, 2022), boot loop reported
Patchday: Windows 10 Updates (January 11, 2022)
Patchday: Windows 11 Updates (January 11, 2022)
Patchday: Updates for Windows 7/Server 2008 R2 (January 11, 2022)
Windows Server: January 2022 security updates are causing DC boot loop
Windows VPN connections (L2TP over IPSEC) broken after January 2022 update
Windows Server 2012/R2: January 2022 Update KB5009586 bricks Hyper-V Host
Microsoft patch day issues Jan. 2022: bugs confirmed, but updates not pulled
Microsoft Microsoft Januar 2022 Patchday Revisions (2022/01/14)
Windows Out-of-band Updates fixes Jan. 2022 patch day issues (Jan. 17, 2022)
Windows 10/Server: Out-of-band Updates fixes Jan. 2022 patch day issues (Jan. 17, 2022)
Out-of-band Updates for Windows Server 2019 fixes Jan. 2022 Patch day issues (Jan. 18, 2022)
no mention of server 2019 (1809) ?
Currently it seems that this update hasn't been released. I will add it, after it's release.
Server 16 patch will not install…shows not applicable. This whole thing is a total shit show.
did you install KB5005698 servicing stack update first, Jason?
KB5010790 requires latest SSU for Server 2016
Yes…it is already installed…downloaded it again and attempted to install just to be sure…greeted with the same not applicable message.
Try disconnecting the network before installing it.
What should I do now? I have uninstalled these updates:
KB5009624 2022-01 Security Monthly quality Rollup
KB5009595 2022-01 Security Only Quality Update
Should I re-install them and then install the fix?
not exactly
assuming you're using Server 2012 R2 / Win8.1,
first re-install KB5009624 but DON'T reboot right away yet; then install KB5010794 and THEN reboot
Tried in a WS 2012 R2.
Done, and fixed.
Hi,
Am I missing something?
If you import these updates into wsus that work but because they're optional the devices are no requesting them so its effectivley pointless. Is anyone else seeing the same thing?
Cheers
Vibs
Hi,
i've installed the KB5010796 on two DC's. One DC with KB5009555 pre installed and the other DC without.
Result : Both DC's restart after installing the patches. So no change at all.
Cheers
Mike
try installing the newer KB5009608 update instead:
https://www.catalog.update.microsoft.com/Search.aspx?q=5009608
I thought that it is safe to install KB5009624 on Jan 22 – had some entertaining weekend a week ago with crashing domain controllers and broken hyper-V. It was offered after checking for new updates toda, on January 22. And guess what – it is not fixed and broke my Hyper-V again. Microsoft, stop smoking weed on winter holidays, this is really frustrating!
Well, KB5009624 is still the old Security Monthly quality Rollup. You need to install KB5010794 (Windows 8.1, Windows Server 2012 R2)