Windows 10 Cumulative update

---

Hello

I need some clarification about how the cumulative updates works in Windows 10. We have some isolated Windows 10 Workstation running the 1607 where i cannot connect to any WSUS Service. I need to preceed with some update and i need to do it downloading the patch from the Microsoft Catalog. Obviously i cannot download everything, and they told me to dowload only the Cumulative Security Update, but it's not clear for me what i need to download considering that these workstation didn't receive any update in 2 years.

I need only to dowload this one to add the security parch?

2020-02 Cumulative Update for Windows 10 Version 1607 .................... x64 (KB4537806)

or i need to download additional patch?

Tanks in Advance.

Hello @Giovanni-Baldi,

I think the easiest solution would be to use the media creation tool from Microsoft, to download the latest ISO and upgrade the machines to the latest build of Windows 10. Then you could apply the latest cumulative update to that.

https://www.microsoft.com/en-us/software-download/windows10

Hello Mike tanks for your reply.

the problems is that this few workstation has a very complicated and they don't want to upgrades also because they need to do an exercise and they don't want to risk to breaks something. They are agree only to apply the minimun security patch available, so i was asking to myself if other then this

2020-02 Cumulative Update for Windows 10 Version 1607 .................... x64 (KB4537806)

i need to apply some other patch.

Probably after the exercise we will reinstall from scratch.but at the moment we can't.

Hello @Giovanni-Baldi,

I see, that makes sense. In that case, I think you will be ok just applying that one patch, but really hard to say for sure. The Microsoft Update Catalog indicates that this update replaces all previous cumulative updates back to 2017-05 (KB4019472). Unfortunately, I don't know of a way to verify this without trying it. Do you have the ability to clone one of the machines and try it in a sandbox first?

There are a couple of cumulative .NET Framework updates that might need to be applied, but when you install 2020-02 cumulative update, it should let you know if it has any dependencies that need to be applied first. The 2020-02 cumulative update also supports removal, if something breaks.

Tanks Mike for Your reply Mike

Just for the last clarification i started to look for the last cumulative update for windows 10 1607 and i saw particularly two of them:

• 2020-02 Cumulative Update for Windows 10 Version 1607 for x64-based Systems (KB4537806) --> classified as update released 24 february 2020

and

• 2020-02 Cumulative Update for Windows 10 Version 1607 for x64-based Systems (KB4537764) --> classified as Security update released 10 february 2020

I suppose i need to install both of them the security update (KB4537764) and the update (KB4537806) ? correct?

Thanks
Gio

@Giovanni-Baldi ,

Yep, I would apply both of them!

Isolated in what way? Outside the building? Use VPN to attach them. You can provide them a manual GPO policy to connect to the WSUS via a VPN. I created a downstream WSUS server for VLANs. You could place a WSUS server inside their VLAN using that master WSUS as its update place.