W10 Warning Notice.

https://www.reviewgeek.com/109133/microsoft-plans-to-forcibly-update-some-windows-10-pcs/
To the many reluctant W10 Updaters, please view the link.

 

And I say to those folks, update now on your terms. And remember, millions and millions (and millions more) have updated with no problems.

I certainly have mixed feeling about this. Nobody like things forced upon them. But I see Microsoft's side too. Systems that are not kept current are more susceptible to infection. And once infected, those systems can be used to infect others. Sound familiar?

The problem for Microsoft is, who will get blamed? History has shown us over and over again, that Microsoft will get blamed even though it is the users who fail to keep their systems updated and it is the bad guys who exploit those out-of-date systems.

So clearly, Microsoft is stuck between a rock and hard place. They can get blamed for forcing updates on users but help them stay secure. Or they can ignore the facts, do nothing and then get blamed for not blocking the spread of infections.

So they err an the side of better security and IMO, that is the better choice.

Now the article points out, this is NOT forcing W11 on users. It is just ensuring users who connect to the internet (a key point) are not using obsolete, less secure, and superseded versions of W10.

 

Now the article points out, this is NOT forcing W11 on users. It is just ensuring users who connect to the internet (a key point) are not using obsolete, less secure, and superseded versions of W10.
As I read it Bill; If you want to be safe on the web - Update to the latest Versions and keep getting the Security Patches.

 

That's how I read it too. But it also says if the user blocks Windows Update from updating to the latest version of W10, Microsoft will do it for you. And it does specifically say,

And that makes sense since there are a lot of W10 systems out there with hardware that is incompatible with W11.

I don't know about "long before" but certainly "before" the expiry date. It would not make sense to wait until it already expired as that would expose a potentially insecure system to the bad guys. Plus, since that expiry date is a fixed point in time... well... 24 fixed points in time (with 24 time zones on this blue marble)... ...it would be irresponsible to have all those computers in any given time zone requesting a big download at exactly 12:00am and May 10th. So it has to be staggard and it has happen before support actually expires.

 

Well, the definition of "long before" is subjective and arbitrary. Three weeks might be "long before" for some while 6 months may not be long enough for others.

The truth of the matter is, Microsoft typically gives at least a year's notice - often several years' notice of the "End of life" date for "their" products. Yet over and over again, we see users procrastinate until the 11th hour and then complain they were not given enough notice.

It really is a "no win" scenario for Microsoft.

I emphasis "their" products because, for example, Microsoft does not make graphics cards. I currently have 5 computers here and I have never had "Windows" force a graphics driver on me. I cannot say the same thing for AMD or NVIDIA! Yes, by default, Windows may want to keep our drivers updated, but that's a different issue. And for sure, the onus is not on Microsoft to ensure each and every hardware driver if fully compatible with every possible hardware and software configuration out there, and doesn't break someone's Windows.

There's the old saying I first heard in the military a very long time ago; "One oh sh!t wipes out a 1000 attaboys!"

It is so true for Microsoft, but on a much worse/larger scale. 10s of millions of updates can go perfectly, but if there is just one failure, Microsoft is persecuted relentlessly with that one report repeated millions of times, over and over again.

Now for sure, if that one failure is with one of my machines, I'm going to be pi$$ed too! Like I said Microsoft cannot win.

Frankly, considering each and every one of the 1.6 billion Windows systems out there became a unique computer within the first few minutes after it was booted for the very first time, I think it remarkable how exceptionally well Windows Update does work!

 

I had a similar tour.

They were specifically asked about this and said they would love to test all hardware but with 100s and 100s of manufacturers around the globe producing 1000s and 1000s of different products, the logistics alone to get each protect to a testing facility is a near impossible task. And then the resources (time, test equipment, qualified technicians, etc.) would be cost prohibitive - and a never ending task as new models come out every day.

For example, to illustrate the numbers, NVIDIA currently over 50 graphics cards on the market. And then ASUS, Gigabyte, MSI, EVGA and others will take those cards and modify them to their own set of specs.

So Microsoft publishes a set of standards (many industry standards and many MS/Windows standards) for the various categories of devices to comply with. For example, all SATA drives must comply with the various SATA standards. Same with USB, Bluetooth, 802.3 (Ethernet) and 802.11 (wifi), HDMI, DisplayPort, etc.

Then they test as many products as they can to ensure they (and Windows too) comply with those same published standards. And this makes sense. The OS has to know how to communicate with CPUs and GPUs, RAM, PCIe, drives, monitors, keyboards and mice right out of the box or else users could not see and control what is going on during a brand new build BEFORE and during the Windows installation - and before those specific hardware drivers have been downloaded and installed.

Were those invisible manufacturers?

 

Christer, my W10 Pro 64bit comp (which doesn't comply for W11) shows:

Windows Specs: Version 21H2
Installed on: 7/01/2021
OS Build: 19044.1466

Update History:
2022-01 Cumulative Update for Windows10 Version 21H2 for x64-based Systems (KB5009543)
Successfully installed on 16/01/2022.

Seems to be a bit different to yours.

 

Ditto. I installed the optional update and the OS build is now 19044.1503.
I thought "Optional" was optional. Go figure?

 

It is. The problem is, there is no "apparent" consistency in how it is offered by default. Do you have to "opt-in"? Or "opt-out". A critical security update may be automatically installed unless you opt-out. But a low priority feature update or bug fix that only affects a few people may be something you need to opt-in to get.

I think it is important to note KB5010342 is a "cumulative update". If the user has consistently kept their computer updated, there is no need to install the cumulative update. In effect, the computer would already be at that same version. But because the cumulative update was not specifically installed, the version number did not change.

That said, some "cumulative updates" also contain new updates not previously released as individual updates. So again, do you opt-in or opt-out?

I think it also important to note that if the user opted-out (or didn't opt-in? ) to an update for what ever reason, then later decided to install the cumulative update, they may get that first update they opted-out of, or didn't opt-in for, or something.

I know it seems like there is no rhyme or reason for some of these opt-in or opt-out updates. But I do believe Microsoft actually has guidelines for this. But I also think the line between critical and routine can be very fuzzy - especially when the update does not affect every user, as is often the case. Microsoft as little choice but to err on the side of caution and security.

Better to be blamed for forcing security on users than getting blamed for allowing them to get infected.

 

Are you saying cumulative updates only contain earlier cumulative updates? If that is what you mean, then no. That is not correct.

Yes, your laptop in storage scenario is a valid scenario, but that is just one and not the only scenario. And let's not forget that "cumulative update" is an industry term not exclusive to Microsoft. In fact, Microsoft has at least 4 types of updates that are "cumulative" See Description of the standard terminology that is used to describe Microsoft software updates.

So a cumulative update typically contains some or all the updates since the last big update. It does not care if the computer has been in storage, or if the user neglected to install updates for over the last year, or if the computer has been kept current.

I never said "all" cumulative updates are optional. In fact, I specifically some contain new fixes.

And no doubt, there are some updates users cannot opt-out of. I was not clear on that. Sorry.

See also, What is Cumulative Update (CU)in SQL Server? – MS SQL DBA (wordpress.com) and,

Windows Update - Wikipedia