2020-02 Updates KB4524244 Locks Up My Computer and Fails Install

Anonymous
2020-02-12T01:43:44+00:00

I received the Patch Tuesday releases today.  KB4532693, KB4537759 and KB4538674 dropped in the first wave and all installed successfully.  On a subsequent "Check for Updates"  KB4524244 downloaded and installed but on the reboot, it rebooted the first time but froze hard on the second re-boot with Step 2 information and a frozen spinner on my screen, no keyboard or any access.  After about 15 mins I finally forced the system down.  On the reboot, my Secure Boot flagged me that the keys were corrupted.  I was able to get those repaired and reboot into the system.  I rebooted a couple more times but no updates attempted to install.  On a third "Check for updates, the same (KB4524244) update attempted to download but freezes the system at 94% on the download.  Again freezes hard requiring a hard re-set.  I tried flushing the Software Distribution cache but get the same results.

FYI:  I am running Windows defender with VBS (Credential Guard and Hypervisor enforced Code Integrity on an HP EliteDesk 705 G4 MT with a AMD Ryzen 5 PRO 2400G with Radeon Vega Graphics.  I also have a similar set up running on an HP laptop (Intel i5), but the update installed fine on it.

Help

Windows for home | Windows 10 | Windows update

Locked Question. This question was migrated from the Microsoft Support Community. You can vote on whether it's helpful, but you can't add comments or replies or follow the question.

0 comments

179 answers

Sort by: Most helpful
Most helpful Newest Oldest
  1. Anonymous
    2020-02-15T19:43:27+00:00

    Good News

    Looks like Microsoft has pulled KB4524244 from the updates.

    url to post:

    https://support.microsoft.com/en-us/help/4524244/security-update-for-windows-10-february-11-2020

    "Important

    This standalone security update has been removed due to an issue affecting a sub-set of devices. It will not be re-offered from Windows Update, Windows Server Update Services (WSUS) or Microsoft Update Catalog.Note Removal of this standalone security update does not affect successful installation or any changes within any other February 11, 2020 security updates, including Latest Cumulative Update (LCU), Monthly Rollup or Security Only update."

    Was this answer helpful?

    3 people found this answer helpful.
    0 comments
  2. Anonymous
    2020-02-15T04:30:47+00:00

    Yes I have

    Was this answer helpful?

    2 people found this answer helpful.
    0 comments
  3. Anonymous
    2020-02-13T11:45:15+00:00

    Well based on all the quick responses sounds like I am not alone.

    For me I think it best to wait this out and see if it gets resolved upstream.  I am blocking the update.  I would caution anyone reading this about trying to turn off Sure Start and trying if you have already failed the initial install, unless maybe all you have dabbled with in the BIOS settings is turning  Sure Start on and off.

    Thanks for all of the feedback.

    Hi, Xipit.

    Your approach is the correct approach.

     This is one of those cases where efforts placed in using Windows Troubleshooting tools, resetting/repairing Windows Updates, renaming SoftwareDistribution, and/or manual KB installation has little value.

    Blocking it at this time is the best route.

    ....winston natoli

    Was this answer helpful?

    2 people found this answer helpful.
    0 comments
  4. Anonymous
    2020-02-12T18:55:35+00:00

    In our environment, this is happening on all HP AMD based machines with Sure Start Secure Boot Key Protection enabled.  If we turn that off before the initial attempt to install the KB then the KB will install.  After restart we can renable the Sure Start protection.  Each machine we've done this to also has to be rebooted two more times after the patch install for the NIC to be come active properly again.  During the time the NIC isn't working properly an "ipconfig /all" command won't show the NIC adapters, but they appear in Device Manager and in Control Panel/Network Connections.   On PCs where the Sure Start protections are in force at the time of patch install we get the same error Mikael Sillman

     did.  Sure Start then resets the keys and the system will boot up.  Subsequent attempts to install the patch fail.  Most often the error code is 0x80242FFF.

    Was this answer helpful?

    2 people found this answer helpful.
    0 comments
  5. Anonymous
    2020-02-12T04:00:54+00:00

    Thanks Greg,

    I will work on this for the next couple of days and report back.

    Just an FYI....I am on 1909.  Looking at the KB, it looks like it affects UEFI secure boots, a little suspect since I have that system so locked down.

    I will work through your list and see where that gets me, if I find it is something different I will update on what I find.

    Hang tight and give me a couple of days to let things settle

    Was this answer helpful?

    2 people found this answer helpful.
    0 comments