Microsoft KB294871

Usage and Config Patch
1

(imported topic written by Tim.Rice)

Are there plans for IBM to release Fixlets to remove the original KB
294871
patch now that Microsoft is recommending it be removed?

2

(imported comment written by BaiYunfei)

Hi Tim, can you double check the KB number, or paste here the MS article that recommended KB294871 removed?

Microsoft did recently pull back
security update 2982791 from MS14-045. You might want to use the “Microsoft Rollback Task Wizard” under site “Patching Support” to uninstall this patch if already installed.

Thank you!

3

(imported comment written by Tim.Rice)

Typo on my part. The KB in question IS “KB2982791”.

I did eventually use the Wizard to generate a Task to uninstall the patch, but unfortunately, it seemed to be targeting too many machines.

  • It was targeting any machine that had installed the patch
  • It was ALSO targeting any WinVista/Win7/2008/2008R2/2012/2012R2 machine that had pre-cached the patch from Windows Update but had NOT installed it yet.

I got around this by adding a Relevance clause to the Task the Wizard created so that it looked at two of the files updated in the different OS versions of the patch.

4

(imported comment written by sylviabeing)

Hi Tim,

Thanks for the report!

Please kindly provide registry keys under “HKEY_LOCAL_MACHINE\Microsoft\Windows\CurrentVersion\Component Based Servicing” on one of the false positive machine. We will look into the issue and try to address it asap.

Thanks,

Sylvia

5

(imported comment written by Tim.Rice)

I’ll see if I can get into one of the systems and export it’s keys.

Update : The attached file is from a Win7 computer that has it’s Windows Update client configured to download patches but to Ask before installing them. I have verified that the patch does not show in the Patch History in the Windows Update Control Panel applet. The Relevance provided by the Rollback Wizard reports this computer as “Relevant”, but when I compare the versions of the files that were included in the Win7 version of the patch, they have not been upgraded yet.

6

(imported comment written by Andy Yang Meng)

Hi Tim,

I’m looking into this. Will update you later.

Thank!

7

(imported comment written by Andy Yang Meng)

Hi Tim,

Can you try the attached custom copy of relevance on the false positive machines?

Let me know if it works or not.

Thanks!

Andy