Wednesday, August 20, 2014

ALERT ALTER ALERT: Urgent communication to customers

Hi,

I would like to alert you about a set of patches that were released on Aug 12th that can potentially cause Blue Screens (crashes, bug checks) on customers’ Windows machines from Vista all the way up to 8.1. Microsoft is currently investigating these patches and more details will be shared as they become available.

These patches are being Automatically installed on customers’ machine via the Windows Update feature and/or they are being rolled up and packaged via the System Center updates in the Enterprises automatically. We need to immediately alert ALL our customer to make sure that these 4 patches are NOT installed on their machines until further notice.

For more details:
MS14-045: Description of the security update for kernel-mode drivers: August 12, 2014
Mitigations
Open the Programs and Features item in Control Panel, and then click View installed updates. Find and then uninstall any of the following updates that are currently installed:
◦KB2982791
◦KB2970228
◦KB2975719
◦KB2975331

If you search the update via article ID only on “Installed Updates” UI, you won’t see the updates listed. You need to search as “KB2982791”.  I have this update and KB2975719 installed on machines..



Based on the queries I’m getting I’ve consolidated these FAQ for all:

When this update was released? August 12
How many incident did we receive? I know about 10 cases on the first 3 days, and we had our first one in MEA today.
Can customers still download these updates? No, PG expired these updates on Aug 15th
What about customer who downloaded and installed these updates already? Not all machines hit the issue, we advise customers to uninstall these updates as a pre-caution.
What are the symptoms on the affected machine? Blue screen bug check 0x50
What is the solution if the machine crashed from this update? Solution documented on the same article http://support.microsoft.com/kb/2982791 under “known issue 3”
Is it ok not to uninstall the update? We recommend to uninstall these update as a pre-caution only, PG are still investigating the behavior.


SQL report will show Name Serial Number Manufacturer Model OS Type OS Version TopConsoleUser0 Last Logged BIOS Date IP Address Default IP Gateway Chassis Type

For Server :
SQL :

SELECT   
 dbo.v_GS_COMPUTER_SYSTEM.Name0 AS [NetBIOS Name], 
 --dbo.v_GS_COMPUTER_SYSTEM.Roles0 AS [Roles],
 dbo.v_GS_OPERATING_SYSTEM.Description0 AS [Description], 
 dbo.v_GS_COMPUTER_SYSTEM.Manufacturer0 AS [Make],
 dbo.v_GS_COMPUTER_SYSTEM.Model0 AS [Model], 
 dbo.v_RA_System_IPAddresses.IP_Addresses0 AS [IP Address], 
 dbo.v_GS_SYSTEM_ENCLOSURE.SerialNumber0 AS [Service Tag (Dell)]
 
FROM         dbo.v_GS_COMPUTER_SYSTEM
  
 INNER JOIN  
  dbo.v_GS_PC_BIOS 
  ON 
  dbo.v_GS_COMPUTER_SYSTEM.ResourceID = dbo.v_GS_PC_BIOS.ResourceID 
 INNER JOIN 
  dbo.v_RA_System_IPAddresses 
  ON
  dbo.v_GS_PC_BIOS.ResourceID = dbo.v_RA_System_IPAddresses.ResourceID 
 INNER JOIN
  dbo.v_GS_SYSTEM_ENCLOSURE 
  ON
  dbo.v_RA_System_IPAddresses.ResourceID = dbo.v_GS_SYSTEM_ENCLOSURE.ResourceID 
 INNER JOIN
  dbo.v_GS_OPERATING_SYSTEM 
  ON
  dbo.v_GS_SYSTEM_ENCLOSURE.ResourceID = dbo.v_GS_OPERATING_SYSTEM.ResourceID 
 WHERE    
  (dbo.v_RA_System_IPAddresses.IP_Addresses0 LIKE '10.%')
  AND
  (Roles0 like '%Server_NT%')
ORDER BY
  [NetBIOS Name]

SQL report will show Name Serial Number Manufacturer Model OS Type OS Version TopConsoleUser0 Last Logged BIOS Date IP Address Default IP Gateway Chassis Type


For client

SQL:
SELECT DISTINCT 
v_GS_COMPUTER_SYSTEM.Name0, v_GS_PC_BIOS.SerialNumber0, v_GS_COMPUTER_SYSTEM.Manufacturer0, v_GS_COMPUTER_SYSTEM.Model0, 
 v_GS_OPERATING_SYSTEM.Caption0 AS [OS Type], v_GS_OPERATING_SYSTEM.CSDVersion0 AS [OS Version], v_GS_SYSTEM_CONSOLE_USAGE_MAXGROUP.TopConsoleUser0, 
 v_R_System.User_Name0 AS [Last Logged], 
 v_GS_PC_BIOS.ReleaseDate0 AS [BIOS Date], v_GS_NETWORK_ADAPTER_CONFIGUR.IPAddress0, v_GS_NETWORK_ADAPTER_CONFIGUR.DefaultIPGateway0, CASE WHEN v_GS_SYSTEM_ENCLOSURE.ChASsisTypes0 LIKE '1' THEN 'Virtual' WHEN v_GS_SYSTEM_ENCLOSURE.ChASsisTypes0 LIKE '2' THEN 'Blade Server' WHEN 
v_GS_SYSTEM_ENCLOSURE.ChASsisTypes0 LIKE '3' THEN 'Desktop' WHEN v_GS_SYSTEM_ENCLOSURE.ChASsisTypes0 LIKE '4' THEN 'Low-Profile Desktop' WHEN 
v_GS_SYSTEM_ENCLOSURE.ChASsisTypes0 LIKE '5' THEN 'Pizza-Box' WHEN v_GS_SYSTEM_ENCLOSURE.ChASsisTypes0 LIKE '6' THEN 'Mini Tower' WHEN v_GS_SYSTEM_ENCLOSURE.ChASsisTypes0 
LIKE '7' THEN 'Tower' WHEN v_GS_SYSTEM_ENCLOSURE.ChassisTypes0 LIKE '8' THEN 'Portable' WHEN v_GS_SYSTEM_ENCLOSURE.ChassisTypes0 LIKE '9' THEN 
'Laptop' WHEN v_GS_SYSTEM_ENCLOSURE.ChASsisTypes0 LIKE '10' THEN 'Notebook' WHEN v_GS_SYSTEM_ENCLOSURE.ChASsisTypes0 LIKE '11' THEN 'Hand-Held' 
WHEN v_GS_SYSTEM_ENCLOSURE.ChASsisTypes0 LIKE '12' THEN 'Mobile Device in Docking Station' WHEN v_GS_SYSTEM_ENCLOSURE.ChASsisTypes0 LIKE '13' 
THEN 'All-in-One' WHEN v_GS_SYSTEM_ENCLOSURE.ChASsisTypes0 LIKE '14' THEN 'Sub-Notebook' WHEN v_GS_SYSTEM_ENCLOSURE.ChASsisTypes0 LIKE '15' THEN 
'Space Saving Chassis' WHEN v_GS_SYSTEM_ENCLOSURE.ChASsisTypes0 LIKE '16' THEN 'Ultra Small Form Factor' WHEN v_GS_SYSTEM_ENCLOSURE.ChASsisTypes0 
LIKE '17' THEN 'Server Tower ChASsis' WHEN v_GS_SYSTEM_ENCLOSURE.ChASsisTypes0 LIKE '18' THEN 'Mobile Device in Docking Station' WHEN v_GS_SYSTEM_ENCLOSURE.ChASsisTypes0 
LIKE '19' THEN 'Sub-ChASsis' WHEN v_GS_SYSTEM_ENCLOSURE.ChASsisTypes0 LIKE '20' THEN 'Bus-Expansion chASsis' WHEN v_GS_SYSTEM_ENCLOSURE.ChASsisTypes0 
LIKE '21' THEN 'Peripheral ChASsis' WHEN v_GS_SYSTEM_ENCLOSURE.ChASsisTypes0 LIKE '22' THEN 'Storage ChASsis' WHEN v_GS_SYSTEM_ENCLOSURE.ChASsisTypes0 
LIKE '23' THEN 'Rack-Mounted ChASsis' WHEN v_GS_SYSTEM_ENCLOSURE.ChASsisTypes0 LIKE '24' THEN 'Sealed-Case PC' ELSE 'Unknown' END AS 'Chassis Type' 

FROM         v_GS_PC_BIOS INNER JOIN 
                      v_GS_COMPUTER_SYSTEM ON v_GS_PC_BIOS.ResourceID = v_GS_COMPUTER_SYSTEM.ResourceID INNER JOIN 
                      v_GS_NETWORK_ADAPTER_CONFIGUR ON v_GS_COMPUTER_SYSTEM.ResourceID = v_GS_NETWORK_ADAPTER_CONFIGUR.ResourceID INNER JOIN 
                      v_GS_OPERATING_SYSTEM ON v_GS_COMPUTER_SYSTEM.ResourceID = v_GS_OPERATING_SYSTEM.ResourceID INNER JOIN 
                      v_R_System ON v_GS_COMPUTER_SYSTEM.ResourceID = v_R_System.ResourceID LEFT OUTER JOIN 
                      v_GS_SYSTEM_CONSOLE_USAGE_MAXGROUP ON v_GS_COMPUTER_SYSTEM.ResourceID = v_GS_SYSTEM_CONSOLE_USAGE_MAXGROUP.ResourceID INNER JOIN 
v_GS_SYSTEM_ENCLOSURE ON v_R_System.ResourceID = v_GS_SYSTEM_ENCLOSURE.ResourceID 
WHERE     (v_GS_NETWORK_ADAPTER_CONFIGUR.IPEnabled0 = 1) AND (NOT (v_GS_NETWORK_ADAPTER_CONFIGUR.DefaultIPGateway0 IS NULL)) AND 
                      (v_R_System.Operating_System_Name_and0 LIKE '%Workstation%') 
ORDER BY v_GS_PC_BIOS.ReleaseDate0