Windows patch issue?

Discussion in 'Interesting/Unrelated' started by bphlpt, Nov 3, 2019.

  1. bphlpt

    bphlpt A lowly staff member Staff Member

    Yeah, I know, what else is new. LOL

    I have no idea why, but a link to this was just posted over at MSFN yesterday, 2019-11-02, so I figured I'd pass it along here. It has most likely been addressed in the latest Lastxx releases, but just in case...


    =============================================================================

    https://msfn.org/windows-latest-patches-crash-event-viewer-but-microsoft-has-temporary-fix/

    Windows’ latest patches crash Event Viewer: But Microsoft has temporary fix

    POSTED ON JUNE 15, 2019

    [​IMG]

    Microsoft has confirmed that its latest updates for Windows 10 and below cause a problem in its Event Viewer app when using Customer Views.


    The problem may occur for anyone who installed cumulative updates, monthly rollups, and security-only updates released on June 11.

    Microsoft has now offered a workaround to the problem, but is planning on rolling out a proper fix in late June, according to a support note.


    The issue affects all versions of Windows, from Windows 10 version 1903 through to Windows 7, and corresponding versions of Windows Server.

    “When trying to expand, view or create Custom Views in Event Viewer, you may receive the error, ‘MMC has detected an error in a snap-in and will unload it’, and the app may stop responding or close,” Microsoft explains.

    Users may see the same error when using Filter Current Log in the Action menu.


    Event Viewer is an important tool for anyone interested in exploring Windows and troubleshooting problems.

    Microsoft’s workaround involves pasting a function it has provided into a PowerShell window and running it.

    After that users can type the command get-Event Viewer to view Custom Views. Users need to re-enter the same function every time a new PowerShell window is opened. It allows users to see previously defined Custom Views.

    The updates that may cause this problem in Event Viewer include:

    • KB4503293 LCU for Windows 10, version 1903.
    • KB4503327 LCU for Windows 10, version 1809 and Windows Server 2019.
    • KB4503286 LCU for Windows 10, version 1803.
    • KB4503284 LCU for Windows 10, version 1709.
    • KB4503279 LCU for Windows 10, version 1703.
    • KB4503267 LCU for Windows 10, version 1607 and Windows Server 2016.
    • KB4503291 LCU for Windows 10, version 1507.
    • KB4503276 Monthly rollup for Windows 8.1 and Windows Server 2012 R2.
    • KB4503290 Security-only update for Windows 8.1 and Windows Server 2012 R2.
    • KB4503285 Monthly rollup for Windows Server 2012 and Windows Embedded 8 Standard.
    • KB4503263 Security-only update for Windows Server 2012 and Windows Embedded 8 Standard.
    • KB4503292 Monthly rollup for Windows 7 SP1 and Windows Server 2008 R2 SP1.
    • KB4503269 Security-only update for Windows 7 SP1 and Windows Server 2008 R2 SP1.
    • KB4503273 Monthly rollup for Windows Server 2008 SP2.
    • KB4503287 Security-only update for Windows Server 2008 SP2.
    Source: ZDNet


    =====================================================================

    https://support.microsoft.com/en-us...-you-may-receive-an-error-when-using-custom-v

    Event Viewer may close or you may receive an error when using Custom Views
    Applies to: Windows 10, version 1903Windows 10, version 1809Windows Server 2019, all versions More

    Summary

    When trying to expand, view or create Custom Views in Event Viewer, you may receive the error, "MMC has detected an error in a snap-in and will unload it." and the app may stop responding or close. You may also receive the same error using Filter Current Log in the Action menu with built-in views or logs. Built-in views and other features of Event Viewer should work as expected.


    Workaround

    To work around this issue, copy and paste the following function into a PowerShell window and run it. You can now use the command get-EventViewer at the PowerShell prompt to view your Custom Views. You will need to re-enter the function each time you open a new PowerShell window. Note The get-EventViewer function will only allow you to view previously defined Custom Views. To create new Custom Views, see Creating Get-WinEvent queries with FilterHashtable.

    function get-EventViewer {
    Write-Output "List of custom views on the machine"
    Write-Output ""
    Get-ChildItem "C:\ProgramData\Microsoft\Event Viewer\Views" -Filter *.xml | % { select-xml -Path $_.FullName -xpath "//Name" } | Select-Object -ExpandProperty Node | Select-Object -ExpandProperty InnerXml

    Write-Output ""
    $view_name = Read-Host "Enter the name of custom view to execute"


    # Get the file name of the view
    $ViewFile = Get-ChildItem "C:\ProgramData\Microsoft\Event Viewer\Views" -Filter *.xml | where-object { (Select-Xml -Path $_.FullName -xpath "//Name").Node.InnerXml -eq $view_name }

    Get-WinEvent -FilterXml ([xml]((Select-Xml -Path $ViewFile.FullName -XPath "//QueryList").node.OuterXml))
    }


    Next Steps

    This issue is now resolved for all platforms in the following updates:

    • KB4501375 LCU for Windows 10, version 1903.
    • KB4501371 LCU for Windows 10, version 1809 and Windows Server 2019.
    • KB4503288 LCU for Windows 10, version 1803.
    • KB4503281 LCU for Windows 10, version 1709.
    • KB4503289 LCU for Windows 10, version 1703.
    • KB4503294 LCU for Windows 10, version 1607 and Windows Server 2016.
    • KB4507458 LCU for Windows 10, version 1507.
    • KB4503283 Preview of Monthly Rollup for Windows 8.1 and Windows Server 2012 R2.
    • KB4508773 Update for Windows 8.1 and Windows Server 2012 R2 for customers using Security-only updates.
    • KB4503295 Preview of Monthly Rollup for Windows Server 2012 and Windows Embedded 8 Standard
    • KB4508776 Update for Windows Server 2012 and Windows Embedded 8 Standard for customers using Security-only updates.
    • KB4503277 Preview of Monthly Rollup for Windows 7 SP1 and Windows Server 2008 R2 SP1.
    • KB4508772 Update for Windows 7 SP1 and Windows Server 2008 R2 SP1 for customers using Security-only.
    • KB4503271 Preview of Monthly Rollup for Windows Server 2008 SP2.
    • KB4508774 Update for Windows Server 2008 SP2 for customers using Security-only.
    Affected updates

    The following latest cumulative update (LCU), Monthly Rollups and Security Only released on June 11, 2019 for the affected platforms may experience this issue:

    • KB4503293 LCU for Windows 10, version 1903.
    • KB4503327 LCU for Windows 10, version 1809 and Windows Server 2019.
    • KB4503286 LCU for Windows 10, version 1803.
    • KB4503284 LCU for Windows 10, version 1709.
    • KB4503279 LCU for Windows 10, version 1703.
    • KB4503267 LCU for Windows 10, version 1607 and Windows Server 2016.
    • KB4503291 LCU for Windows 10, version 1507.
    • KB4503276 Monthly Rollup for Windows 8.1 and Windows Server 2012 R2.
    • KB4503290 Security-only update for Windows 8.1 and Windows Server 2012 R2.
    • KB4503285 Monthly Rollup for Windows Server 2012 and Windows Embedded 8 Standard
    • KB4503263 Security-only update for Windows Server 2012 and Windows Embedded 8 Standard-
    • KB4503292 Monthly Rollup for Windows 7 SP1 and Windows Server 2008 R2 SP1
    • KB4503269 Security-only update for Windows 7 SP1 and Windows Server 2008 R2 SP1
    • KB4503273 Monthly Rollup for Windows Server 2008 SP2
    • KB4503287 Security-only update for Windows Server 2008 SP2

    Last Updated: Jul 17, 2019
     
  2. Trouba

    Trouba Administrator Staff Member

    Looks like the 3 images are unaffected.
     
    Glenn and bphlpt like this.

Share This Page