Skip to main content

Posts

Showing posts from 2018

SOLVED: GPO blocks Windows Meltdown / Spectre Update KB4056892

Dell was very fast to release BIOS updates (version A21) just a few days after the Meltdown / Spectre disaster became public. So I installed them on all of our Dell 9020 PCs and M4800 notebooks and I thought that everything was fine as I had automatic Windows Updates enabled... But then I noticed that the required Windows Meltdown / Spectre Update KB4056892 was not installed for some reason. So I decided to run the Meltdown / Spectre PowerShell test script released by Microsoft and the surprise was that everything showed up in red, i.e. nothing was patched, not even the BIOS! Then I suspected Kaspersky that might be preventing the Windows update from installing because I read about some AV conflicts. But Kaspersky did really fine this time - it had set the registry key allowing the update to install correctly on all computers. So what was the problem? Microsoft is the problem as usual! I had set some GPO to prevent preview builds and feature updates from installing immediat