If the managed endpoint has no AV software the registry key check detailed above will fail and the updates will not target. If the vendor of the AV software in the environment didn't release the update that sets the registry key detailed above then the updates will not target for the registry key check detailed above will fail and the updates will not target. If the AV software is not updated the registry key check detailed above will fail, so the AV needs to be updated before these Software Updates will be applicable. NOTE: This check has the following side effects and these Software Updates won't be detected as applicable/vulnerable for systems that have the CPU vulnerability for they do not pass the initial check of the registry key outlined above:. Subkey="SOFTWARE\Microsoft\Windows\CurrentVersion\Qualit圜ompat" The following check for the presence of this registry key has been added to the Assessment Scan as part of the applicability rule check as directed by Microsoft to antivirus vendors to indicate their compatibility with these recent changes:. 
The following registry check below was implemented for Patch Management rule logic, for this is similar to when the Microsoft Windows Update Tool is run it will check for similar prerequisites prior to installing these updates, and Patch Management will only deploy updates which have updated Antivirus (AV) software. Create the custom Hardware Inventory Job and schedule/run on targeted filter, and then import and run the Endpoints with AMD Report to see which listed endpoints have an AMD CPU and need to be excluded from deploymentĬaution: These Software Updates are known to cause the Blue Screen of Death (BSOD) on Intel CPU systems as detailed on TECH248545: Optional: Utilize the attached process to isolate: Endpoints with AMD Report.zip to import into the ITMS Console 8.1 RU4. Workaround: Exclude all AMD devices through static filters as targeted by the individual Software Update Policy for deployment of these specific Software Updates. Note: This update was developed by Patch Dev and provided in PMImport 7.2.122 in MSNS18-01-4073576. 
Following this initial release, Patch Management Solution added KB4073576 which resolves this issue for AMD based computers:.
These Software Updates were made available for download on 1/5/18 per HOWTO73079 and INFO4731 release notes via the Import Patch Data for Windows (PMImport) through the Console.Ĭaution: Found some AMD devices getting into an unbootable state after installation of recent Windows operating system security updates as detailed by Microsoft: Microsoft released the following Software Updates on January 3, 2018:
0 kommentar(er)
