Patch Deployment

KB install KB4485448

Attempts to silently install kb patch. Patch is for Windows 10. Can report using $KBinstall$ and $KB4485448$.

Read More

July 2018 patches

This is a folder of scripts that apply a set of Windows patches for July 2018. The scripts in this folder are: Apply Patch: Runs appropriate patch script, if applicable. KB4345397 Install (Server 2008, July 2018 patch): Script Desc: Attempts to silently install kb patch for Server 2008. Can report using $KBinstall$ and $KB4345397$. KB4345424…

Read More

Enable Windows 10 Auto Upgrade

Script deploys 2 registry keys that enable Windows 10 Auto Upgrade. Also enables upgrade notifications using the registry keys provided by Microsoft in this article: https://support.microsoft.com/en-us/help/3080351/how-to-manage-windows-10-notification-and-upgrade-options.

Read More

Disable Windows 10 Auto Upgrade

Script deploys 2 registry keys that disable Windows 10 Auto Upgrade. Also blocks upgrade notifications using the registry keys provided by Microsoft in this article: https://support.microsoft.com/en-us/help/3080351/how-to-manage-windows-10-notification-and-upgrade-options.

Read More

Defer Windows 10 Auto Updates

Prompts for deferment type and time and updates registry keys based on this article: https://pureinfotech.com/defer-windows-10-upgrades-updates/ This script makes use of Microsoft’s new “Windows Update for Business” (WUB) which is a new set of protocols built into Windows 10 (above Home edition) that allow you to have more control over when and how Windows installs updates.…

Read More

KB4093112 install (Win10 1709 Update)

Attempts to silently install kb patch for Win10 cumulative update to 1709 (Apr 2018). Script makes a few checks first. Script first will check that the patch is not already installed, that the system has the meltdown reg key and that the build number is less than 16299.371. Once these checks are verified the patch…

Read More

Rename Windows Update (WU) folder

You can use this script to clean up Patch scan issues.   The script stops the bits and wuauserv services, deletes the Network Downloader cache as well as renames the Software Distribution folder, then restarts the 2 services. This is a free script, we are not sure of its original origins, but thank you to whomever…

Read More

KB4074588 install (Win10 1709 Update)

Attempts to silently install kb patch for Win10 cumulative update to 1709. Script makes a few checks first. Script first will check that the patch is not already installed, that the system has the meltdown reg key and that the build number is less than 16299.248. Once these checks are verified the patch (about 680MB)…

Read More

KB4078130 – Disable Spectre Variant 2 Patch

Scripts downloads and runs Microsoft’s KB4078130 patch. This script disables Intel Microcode meant to mitigate against Spectre variant 2. Machines running this KB will be vulnerable to Spectre attack vectors from malicious third parties. This KB will do nothing on machines that have not yet installed the new Microcode firmware update for their Intel CPU.

Read More

Enable Spectre Variant 2 Patch

Script checks for the existence of 2 registry keys. Then sets them to enable Spectre Mitigation. If the machine is a server, there will be a 3rd registry key that will be checked as well. Script will report the result of these checks. More details here. Report using $Spectre2$. Use the following video to setup…

Read More