You need the a/v registry key in order to get the patch via MU/WU to start with.
The other two (for servers) are only needed if you are running Hyper-V in Win10. From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] On Behalf Of Michael Leone Sent: Tuesday, January 9, 2018 2:17 PM To: ntsysadm@lists.myitforum.com Subject: [NTSysADM] Are the Meltdown/Spectre reg keys needed for workstations? Here's something (more) I am confused about. Suppose I have Win 7 and Win 10 workstations, and I have properly patched the OS. Do I *also* need to issue the 2 (or is it 3) registry entries? I *thought* the registry entries were only for servers, but I have seen other statements that say that the Meltdown/Spectre fixes are *not* enabled until you issue the registry entries. So without the reg entries, you are effectively unpatched? The patches are there, but dormant? (neither of my home PCs have BIOS updates issued - one is for a very old Dell Optiplex 755 that I only use to connect to a NAS, and the other is one I assembled from parts back in 2011. Neither has has had a BIOS upgrade released in years. Ah, the joy ....)