KB5034441 Security Update for Windows 10 (21H2 and 22H2) - Jan. 9 Win Update

OK, your current boot manager is on partition 3. Your are lucky that you have an old unused partition 1
So run cmd (admin) copy&paste!
diskpart
sel disk 0
sel par 1
format quick fs=fat32 label="System"
assign letter="S"
set id="c12a7328-f81f-11d2-ba4b-00a0c93ec93b"
exit
bcdboot c:\windows /s s: /f UEFI

reboot

Now the bootmanager is in partition 1 where it should be!

After the reboot run cmd
diskpart
sel disk 0
sel par 3
delete partition override
exit
Now you are ready to create the new recovery partition!
(500 + 100 + 544) MB = 1144 MB

antares said:

Thanks everyone, yes, the creation of a Recovery Partition is explained in detail but seems to be a bit more sophisticated and complex than what Pentagon describes like assigning an id to the partition depending on whether the partition is GPT or MBR, etc. I understand the usefulness of a Recovery Partition, but just focusing on KB5034441, the Bitlocker vulnerability relies on using the unpatched Recovery Partition to hack Bitlocker, so AFAIK if there is no Recovery Partition (as is my case), then my system would not have that vulnerability and there would be no need to apply this patch, so I can simply hide the update from Windows Update.

You did not read/understand the important part:
post #551
°Before you transfer it to a "Recovery Partition" you have to check, if you have a WinRE.wim in your C:\Windows\System32\Recovery directory.°

Pentagon said:

You did not read/understand the important part:
post #551
°Before you transfer it to a "Recovery Partition" you have to check, if you have a WinRE.wim in your C:\Windows\System32\Recovery directory.°

Yes, I did read that requirement to create the Recovery partition in your post and in various sites as well. I don't have the WinRE.wim file in that directory or in any location of my C drive (I did a complete search). However, I was able to copy/paste the file from another Windows install with same Windows version into my C:\Windows\System32\Recovery directory, will that work? (the WinRE.wim file is 427MB in size)

UPDATE: I just ran Belarc Advisor and it reports the Security Updates as Up-to-Date even though KB5034441 is not installed and Windows Update keeps reporting the notorious error when trying to install it. Very strange as Belarc seems to keep on par with Microsoft Security updates.