Windows 10 – Servicing Stack Cadence

What are Servicing Stack Updates?

Servicing Stack Updates (SSU’s) are Critical, Security Updates. They are shipped separately to the monthly Latest Cumulative Updates (LCU’s) because they modify the component that installs Windows updates. Microsoft strongly recommend that you install the latest SSU before the LCU. More information on SSU’s can be found at:-

https://docs.microsoft.com/en-us/windows/deployment/update/servicing-stack-updates#why-should-servicing-stack-updates-be-installed-and-kept-up-to-date

Microsoft strongly recommends you install the latest servicing stack update (SSU) for your operating system before installing the LCU. SSUs improve the reliability of the update process to mitigate potential issues while installing the LCU and applying Microsoft security fixes.

Source: Microsoft

How do Microsoft advertise new SSU’s?

Traditionally, SSU’s have been difficult to differentiate from other Security updates. In fact its only since the beginning of this year that Microsoft started using the term “Servicing Stack Update” in the update name to help us quickly identify if an update was a SSU. Before then, it was quite “challenging” for admins to stage patches – having to ensure SSU’s were installed before the LCU’s…but not easily being able to identify them from month to month.

In November 2018, to try and clear up some confusion around SSU’s, Microsoft published Security Advisory 990001 https://portal.msrc.microsoft.com/en-us/security-guidance/advisory/ADV990001

This advisory indicates the latest SSU’s available and the previous SSU’s that were replaced. SSU’s haven’t always been cumulative to their predecessor and this has sometimes caused confusion when adopting or maintaining a patching strategy.

SSU Cadence

To help with my understanding, and SSU history, I went through the Microsoft Update Catalog to understand the cadence of SSU’s. They haven’t always superseded each other.

The table below has been grafted from the Microsoft Update Catalog. Indicating the latest SSU for supported Windows 10 Operating Systems.

Updated 05/04/19

Windows 10 – 1809

OSKBLast ModifiedSizeSuperseded BySupersedes
1809449351001/04/201913.7MB4470788, 4465664, 4465477
1809447078812/04/201813.7MB44935104465664, 4465477
1809446566409/11/201813.7MB4493510, 44707884465477
1809446547708/10/201813.6MB4493510, 4470788, 4465664

Windows 10 – 1803

OSKBLast ModifiedSizeSuperseded BySupersedes
1803448544908/02/201913.7MB4477137, 4465663, 4343669, 4465663
1803447713712/07/201813.3MB44854494465663, 4343669, 4338853
1803446566309/11/201813.3MB4485449, 44771374343669, 4338853
1803445665512/09/201813.5MB4343669, 4338853
1803434366917/07/201813.3MB4485449, 4477137, 4465663, 44566554338853
1803433885322/06/201813.1MB4485449, 4477137, 4465663, 4456655, 4343669

Windows 10 – 1709

OSKBLast ModifiedSizeSuperseded BySupersedes
1709448544808/02/201913.2MB4477136, 4465661, 4339420, 4132650, 4131372, 4099989, 4090914, 4087256, 4074608, 4058702, 4054022
1709447713607/12/201813.2MB44854484465661, 4339420, 4132650, 4131372, 4099989, 4090914, 4087256, 4074608, 4058702, 4054022
1709446566109/11/201813.2MB4485448, 44771364339420, 413265,0, 4131372, 4099989, 4090914, 4087256, 4074608, 4058702, 4054022
1709433942017/07/201813.1MB4485448, 4477136, 44656614132650, 4131372, 4099989, 4090914, 4087256, 4074608, 4058702, 4054022
1709413265021/05/201813.1MB4485448, 4477136, 4465661, 43394204131372, 4099989, 4090914, 4087256, 4074608, 4058702, 4054022
1709413137207/05/201813.2MB4485448, 4477136, 4465661, 4339420, 41326504099989, 4090914, 4087256, 4074608, 4058702, 4054022
1709409998906/04/201813.2MB4485448, 4477136, 4465661, 4339420, 4132650, 41313724090914, 4087256, 4074608, 4058702, 4054022
1709409091405/03/201813.0MB4485448, 4477136, 4465661, 4339420, 4132650, 4131372, 40999894087256, 4074608, 4058702, 4054022
1709408725613/02/201813.0MB4485448, 4477136, 4465661, 4339420, 4132650, 4131372, 409998,9 40909144074608, 4058702, 4054022
1709407460831/01/201813.0MB4485448, 4477136, 4465661, 4339420, 4132650, 4131372, 4099989, 4090914, 40872564058702, 4054022
1709405870204/01/201813.0MB4485448, 4477136, 4465661, 4339420, 4132650, 4131372, 4099989, 4090914, 4087256, 40746084054022
1709405402229/11/201813.0MB4485448, 4477136, 4465661, 4339420, 4132650, 4131372, 4099989, 4090914, 4087256, 4074608, 4058702

Windows 10 – 1703

OSKBLast ModifiedSizeSuperseded BySupersedes
1703448732708/02/201911.6MB4486458, 4465660, 4132649, 4093432, 4088825, 4049011, 4022405
1703448645804/01/201911.6MB44873274465660, 4132649, 4093432, 4088825, 4049011, 4022405
1703446566009/11/201811.6MB4487327, 44864584132649, 4093432, 4088825, 4049011, 4022405
1703413264917/05/201811.6MB4487327, 4486458 44656604093432, 4088825, 4049011, 4022405
1703409343207/04/201811.6MB4487327, 4486458, 4465660, 41326494088825, 4049011, 4022405
1703408882522/03/201811.6MB4487327, 4486458, 4465660, 4132649, 40934324049011, 4022405
1703404901110/11/201711.8MB4487327, 4486458, 4465660, 4132649, 4093432, 40888254022405
1703402240509/06/201711.5MB4487327, 4486458, 4465660, 4132649, 4093432, 4088825, 4049011

Windows 10 – 1607

OSKBLast ModifiedSizeSuperseded BySupersedes
1607448544708/02/201911.6MB4465659, 4132216, 4093137, 4089510, 4049065, 4035631, 4023834, 4013418, 3211320
1607446565909/11/201811.6MB44854474132216, 4093137, 4089510, 4049065, 4035631, 4023834, 4013418, 3211320
1607413221612/06/201811.6MB44854474093137, 4089510, 4049065, 4035631, 4023834, 4013418, 3211320
1607409313707/04/201811.6MB4485447, 4132216, 44656594089510, 4049065, 4035631, 4023834, 4013418, 3211320
1607408951021/03/201811.5MB4485447, 4132216, 4465659, 40931374035631, 4023834, 4013418, 3211320
1607404906510/11/201711.6MB4485447, 4132216, 4465659, 40931374023834, 4013418, 3211320
1607403563107/08/201711.4MB4485447, 4132216, 4465659, 4093137, 4089510, 40490654023834, 4013418, 3211320
1607402383409/06/201711.4MB4485447, 4132216, 4465659, 4093137, 4089510, 4049065, 40356314013418, 3211320
1607401341811/03/201711.4MB4485447, 4132216, 4465659, 4093137, 4089510, 4049065, 4035631, 40238343211320
16073211320 23/01/201711.4MB4485447, 4132216, 4465659, 4093137, 4089510, 4049065, 4035631, 4023834, 40134183199986, 3199209
1607321132023/01/201711.4MB4485447, 4132216, 4465659, 4093137, 4089510, 4049065, 4035631, 4023834, 40134183199986, 3199209
1607319998626/10/201611.2MB32113203199209, 3176936
1607319920917/10/201611.2MB3211320, 31999863176936
1607317693623/08/20163211320, 3199986, 3199209

Final Thoughts

As we move forwards, i believe (hope) we will be able to better manage patching SSU’s. Now the update name has the term “Servicing Stack Update” in the title we can start applying filters to our Automatic Deployment Rules in SCCM to ensure they get deployed before the LCU’s.

Mike Terrill has a pretty cool approach using Configuration Baselines, i recommend you take a look at his blog
https://miketerrill.net/2018/12/20/how-to-install-a-win10-ssu-before-the-lcu-using-configuration-manager/

If you haven’t already checked it out, David Segura’s OSDeploy tool makes light work of servicing WIMS and takes away the SSU headache from at least one aspect of your daily life
https://www.osdeploy.com/

Windows 10 – Servicing Stack Cadence
4.3 (86.67%) 3 votes

Leave a comment

Your e-mail address will not be published.

Time limit is exhausted. Please reload CAPTCHA.

 

This site uses Akismet to reduce spam. Learn how your comment data is processed.