Install Microsoft Updates & Verify KB Numbers

This guide walks you through manually installing Microsoft security updates on Windows and verifying that the correct KB (Knowledge Base) number is applied. This is useful when Windows Update fails, when you need to install a specific patch for compliance, or when you’re troubleshooting a known issue. You’ll need an administrator account and a stable internet connection to download the update files.

What You’ll Need

• A Windows PC with an administrator account
• Internet access to download update files
• The KB number of the update you want to install (found on the Microsoft Update Catalog or a security advisory)
• Optional: a USB drive or network share if you need to transfer the update to an offline machine

Step-by-Step

1. Identify the exact KB number. Go to the Microsoft Security Response Center (MSRC) page or the Microsoft Update Catalog website. Search for the update by its KB number (e.g., KB5034441). Make sure you have the correct KB for your Windows version (Windows 10, Windows 11, Server 2019, etc.) and architecture (x64, x86, ARM64).
2. Download the update file. On the Microsoft Update Catalog page, find the row that matches your system. Click the Download button next to it. A pop-up will show a direct link; click that link to save the .msu (Windows Update Standalone Installer) file to your computer. Note the file name – it usually contains the KB number and architecture.
3. Verify the file signature (recommended). Right-click the downloaded .msu file, select Properties, then go to the Digital Signatures tab. Confirm that the signer is “Microsoft Windows” and that the signature shows “This digital signature is OK.” This ensures the file hasn’t been tampered with.
4. Close all running programs. Save your work and close any open applications. Some updates require a restart, and having files open can cause the installation to fail or hang.
5. Run the installer. Double-click the .msu file. If a User Account Control prompt appears, click Yes. The Windows Update Standalone Installer window will open. Click Yes when asked if you want to install the update.
6. Wait for the installation to complete. The progress bar will show the installation status. Do not turn off your PC during this time. Depending on the update size, it may take a few minutes to over an hour.
7. Restart if prompted. If the installer asks you to restart, do so immediately. Some updates only finish applying during the restart phase. Save any open work before restarting.
8. Verify the KB number is installed. After restarting, open the Start menu, type View installed updates, and press Enter. In the Control Panel window that opens, look for the KB number you installed. It should appear in the list with “Security Update” or “Update” in the Program column.
9. Double-check via PowerShell or Command Prompt (optional). Open Command Prompt as administrator and run: wmic qfe list brief | findstr "KB". This lists all installed updates with their KB numbers. Alternatively, in PowerShell, run: Get-HotFix | Sort-Object InstalledOn -Descending | Select-Object -First 10 to see the most recent updates.
10. Check the update history in Settings. Go to Settings > Windows Update > Update history. Under “Quality Updates” or “Other Updates,” you should see the KB number with the date you installed it. This confirms the update was applied successfully.

Common Mistakes

• Downloading the wrong architecture: Installing an x86 update on an x64 system will fail. Always check your system type (Settings > System > About) before downloading.
• Skipping prerequisites: Some updates require a previous update or a specific servicing stack update (SSU) to be installed first. If the installer says “The update is not applicable,” check the KB article for prerequisites.
• Interrupting the installation: Closing the installer or shutting down mid-install can corrupt the update. Let it finish, even if it seems stuck.
• Installing the wrong KB: KB numbers are specific to Windows versions. A KB for Windows 10 will not install on Windows 11. Verify the KB article lists your exact OS version.
• Not restarting when prompted: Some updates don’t show as installed until after a reboot. Skipping the restart can leave the system in an inconsistent state.

Tips

• Use the Microsoft Update Catalog search filters: After searching a KB, use the filters for “Product” and “Architecture” to narrow down the list. This reduces the risk of picking the wrong file.
• Check the KB article before downloading: The official support page for the KB often lists known issues, prerequisites, and restart requirements. Read it before installing.
• Create a system restore point: Before installing a security update, create a restore point (Control Panel > System > System Protection). If the update causes problems, you can roll back.
• Install servicing stack updates first: If the KB article mentions an SSU, install that first. SSUs improve the reliability of the update installation process.
• Use DISM to check system health: If updates keep failing, run DISM /Online /Cleanup-Image /RestoreHealth in an elevated command prompt to fix component store corruption before retrying.

Troubleshooting

• Error 0x800f081f (source not found): This usually means a prerequisite is missing. Check the KB article for required updates and install them first. You may also need to install the latest servicing stack update.
• Error 0x80070005 (access denied): Run the installer as administrator. Right-click the .msu file and select “Run as administrator.” If that fails, temporarily disable third-party antivirus software.
• The installer says “The update is not applicable to your computer”: You likely downloaded the wrong version (wrong OS, architecture, or edition). Re-check the KB article and the Update Catalog entry.
• The update installs but doesn’t appear in the list: Try running wmic qfe list brief in Command Prompt. If it’s still missing, restart the PC and check again. Some updates require a reboot to finalize.
• Installation hangs at a certain percentage: Wait at least 30 minutes before doing anything. If it’s still stuck, restart the PC and try again. If it fails repeatedly, run the Windows Update Troubleshooter from Settings > System > Troubleshoot.
• After installing, the system is unstable: Boot into Safe Mode and uninstall the update via Control Panel > Programs > View installed updates. Then check the KB article for known issues and possible fixes.

Frequently Asked Questions

Q: Can I install multiple .msu files at once?
A: Yes, but it’s safer to install them one at a time, restarting between them if prompted. Some updates depend on others being present.

Q: How do I find the KB number for a specific vulnerability?
A: Search the Microsoft Security Response Center (MSRC) for the CVE number. Each CVE page lists the relevant KBs for affected Windows versions.

Q: What is the difference between a security update and a cumulative update?
A: A security update fixes a specific vulnerability. A cumulative update bundles all previous fixes plus new ones. Most modern Windows updates are cumulative.

Q: Will installing an update manually affect Windows Update in the future?
A: No. Manually installed updates are recorded the same way as automatic ones. Windows Update will still work normally and won’t try to reinstall the same update.

Q: Can I uninstall a manually installed update?
A: Yes. Go to Control Panel > Programs > View installed updates, find the KB, and select Uninstall. Some updates cannot be removed; the KB article will say if that’s the case.

Q: How do I know if an update is already installed before downloading it?
A: Check “View installed updates” or run wmic qfe list brief in Command Prompt. You can also check the Update History in Windows Settings.

Related

• Clear Blocked Trackers List in Microsoft Edge
• Profit from Financial Statements: A Practical Guide
• Windows Clipboard History: Pin & Reuse Items