Important Notice: On February 29th, this community was put into read-only mode. All existing posts will remain but customers are unable to add new posts or comment on existing. Please feel to join our Community Discord for any questions and discussions.

KB3159398 uninstall please

 

Edit: powershell to se whst gpo's are affected

https://blogs.technet.microsoft.com/poshchap/2016/06/16/ms16-072-known-issue-use-powershell-to-check-gpos/

 

 

Could you plase provide a uninstall for this?

 

Possably others as well. But for us it is just KB3159398 causing issues.

 

I have tried to make a command step, based of this:

https://community.spiceworks.com/how_to/38624-uninstall-specific-windows-updates-via-cmd-or-batch-file-in-windows-7-8-and-server-2008-2012

but it wont fly.

 

 

Sources for the problem...:

https://support.microsoft.com/en-gb/kb/3163622

http://www.theregister.co.uk/2016/06/15/microsoft_fix_borks_group_policy/

 

EDIT: 17.06.2016
This was just a quick fix to get our systems working again. Permanent fix (witch allows you to install these "fixes" from MS) is to add "Authenticated Users" to the the delegation tab on every GPO. And if you use security filtering, as i assume most people do you also need to add domain computers to the delegation tab of every GPO. Both with Read permissions on the GPO. 

The problem with this is that if you don't have this setting on some GPO's that are "Silent"/ a security setting witch you don't see the affect of. User or admins don't detect they are not working. You might think you are not affected by this but the policy will not apply.

On the opposite side you will most def. notice this if you have a GPO that deploys printers to all users and don't have Authenticated users and Domain computers set in delegation tab...

Thank you MS for changing witch settings makes a GPO apply!!!! Pun intended.

0

Comments

1 comment
Date Votes
  • Never mind. My stupid mistake. spicworks writes:

     /forcestart

    BUT 

    Offcause it shold be /forcerestart

     

    So add this as a command step.

    wusa /uninstall /kb:3159398 /quiet /forcerestart

    success codes:

    0,1641,3010,2359303

     

    If you dont want to restart (or you want that as seperate step in PDQ) just use:

    wusa /uninstall /kb:3159398 /quiet /norestart

    0