Windows 10 Build 1607 still getting cumulative updates?

jasonturk · 11 Dec 2019

Hello Friends,

First of all I want to say that this is my first message in this forum. So please forgive me for any typos or illegal forum rules.

So, as far as I see Windows 10 Enterprise Build 1607 version is still getting cumulative security updates. But when I looked at the link below, I thought we couldn't get updates after April 2019. Is there any special reason for me to upgrade versions from 1607 to 1909 since we can still get the updates? In short way, do we have to upgrade 1607 computers in terms of security viewpoint?

Windows lifecycle fact sheet
https://support.microsoft.com/en-us/...cle-fact-sheet

Regards

Megahertz · 11 Dec 2019

Welcome to the Forum.

Windows 10 Enterprise is delivered to big company s that have a IT department.
They (IT) normally install a Windows 10 Enterprise as soon the new computer arrives and then deliver to the user.
For security reasons and/or convenience they change the group policies to restrict some functions.
I believe that updates where blocked by IT.
You have to question your company IT department to ask what are the policies regarding updates.

pepanee · 11 Dec 2019

jasonturk said:

...do we have to upgrade 1607 computers in terms of security viewpoint?

The answer to that question is: Yes

All previous releases of any software (Microsoft Windows in this scenario), will eventually become "hackable" by hackers out there.

Let's take this example: If you use a computer that has Windows XP, it is very very VERY insecure to use that operating system now. Microsoft no longer releases any security updates for XP anymore, because it is ancient software. No one should use that operating system anymore, even if they have a 3rd party virus scanner / firewall. It is still very insecure. It's a goner.
The same applies to previous versions of this current operating system. Technology has become so complex these days, that Windows 10 v1607 is practically a different operating system than Windows 10 v1909, even though it looks exactly the same. The system's important files are always being upgraded/updated by Microsoft. (I still use v1903, but it's still very recent, not too old) (Here's a small hint that's useful to know, if you don't already know: "1909" The first two numbers, "19", is the year (2019), and the next two numbers are the month "09", 09 is September. So the version of Windows 10 v1607 you have is July 2016. That's more than 3 years old!) Technology is always advancing so quickly, that, as of today, it is most secure to update to the most recent versions of releases, hence why companies release so many updates all the time that they want you to upgrade.

But also be aware, notice how I still have the previous version 1903 (March 2019)? The reason why I still didn't upgrade is that at this moment in time, Windows Update says it is optional to upgrade to that version. I am waiting until it is required to upgrade, when it automatically installs it. Reason why is because there may be some bugs/incompatibilities at this moment in time, but when Windows Update automatically installs it, then it is very likely that all the bugs/incompatibilities have been fixed.

Hope my post is useful for you to decide what you want to do.

jasonturk · 13 Dec 2019

pepanee said:

The answer to that question is: Yes

All previous releases of any software (Microsoft Windows in this scenario), will eventually become "hackable" by hackers out there.

Let's take this example: If you use a computer that has Windows XP, it is very very VERY insecure to use that operating system now. Microsoft no longer releases any security updates for XP anymore, because it is ancient software. No one should use that operating system anymore, even if they have a 3rd party virus scanner / firewall. It is still very insecure. It's a goner.
The same applies to previous versions of this current operating system. Technology has become so complex these days, that Windows 10 v1607 is practically a different operating system than Windows 10 v1909, even though it looks exactly the same. The system's important files are always being upgraded/updated by Microsoft. (I still use v1903, but it's still very recent, not too old) (Here's a small hint that's useful to know, if you don't already know: "1909" The first two numbers, "19", is the year (2019), and the next two numbers are the month "09", 09 is September. So the version of Windows 10 v1607 you have is July 2016. That's more than 3 years old!) Technology is always advancing so quickly, that, as of today, it is most secure to update to the most recent versions of releases, hence why companies release so many updates all the time that they want you to upgrade.

But also be aware, notice how I still have the previous version 1903 (March 2019)? The reason why I still didn't upgrade is that at this moment in time, Windows Update says it is optional to upgrade to that version. I am waiting until it is required to upgrade, when it automatically installs it. Reason why is because there may be some bugs/incompatibilities at this moment in time, but when Windows Update automatically installs it, then it is very likely that all the bugs/incompatibilities have been fixed.

Hope my post is useful for you to decide what you want to do.

Thank you for your detailed explanation my friend. Our first aim is to upgrade all of our clients from 1607 to 1903 or 1909. But I'm just wondering why 1607 version is still getting cumulative security updates? If so, why Microsoft says 1607 is not supported or not secure?

Bree · 13 Dec 2019

jasonturk said:

I'm just wondering why 1607 version is still getting cumulative security updates? If so, why Microsoft says 1607 is not supported or not secure?

There is one edition of 1607 that is in mainstream support until October 12, 2021. That is the 'Windows 10 Enterprise 2016 LTSB'. The cumulative updates are for the LTSB. If you download one from the Update Catalog and attempt to install it on any other edition then the Standalone Installer will say that it is not applicable to your version of Windows.

That last CU that will install on 1607 Enterprise and Education editions is the one issued at their end of support: KB4493470, April 9 2019.

For 1607 Home, Pro, Pro Education, and Pro for Workstations editions the last CU that will install is KB4093119, April 10 2018.

So all those editions are, as Microsoft says, insecure now.

Lifecycle Fact sheet: https://support.microsoft.com/en-us/...cle-fact-sheet

zbook · 13 Dec 2019

jasonturk said:

So, as far as I see Windows 10 Enterprise Build 1607 version is still getting cumulative security updates.

If Windows updates displays successfully installed it may not have been installed.
There is something that triggers it to display successfully installed when it was never installed.
If the report that it was successfully installed was not verified then its a 50/50 chance that it was installed.

This computer has Windows 1607.
All Windows updates display successfully installed.

Windows 10 Build 1607 still getting cumulative updates?-windows-update-history-12-13-2019-version-1607-build-14393.2214.png

When you look beyond the successfully installed you will notice that the same Windows update was successfully installed many times.
In reality the Windows update was never successful.
It always failed and repetitively displayed successfully installed.

On this one page there were 8 successfully installed for KB890830.
And there were 6 successfully installed for KB4023057.

The same Windows update cannot be successfully installed in this manner.
There were repetitive attempted installations after failure that were displayed as successfully installed.

All updates must be verified to see whether they were or were not installed.

Windows Defender has continued to update.
The virus definition version is 1.307.356.0.
This version matches another computer with a new version and build.