|
MS-DEFCON 2:
Patch reliability is unclear. Unless you have an immediate, pressing need to install a specific patch, don't do it.
|
-
Comments on Abbodi86’s Win7 ESU Installer Script (2020 Archive)
Posted on Comment on the AskWoody Lounge- This topic is empty.
Viewing 577 reply threads-
-
-
See this thread for information, especially the note at the top about the Group B patches. And the similar blogpost about the Feb Patch Tues.
There are also notes in AKB2000003.
-
To see if kb4490628 is installed look in Windows Update. On the lower left corner click on “View installed updates.”
You can sort by any column. Click on the column title to choose the column to sort by. It is a toggle, alternating ascending/descending.
kb4490628 was issued in april 2019, so if you sort by date it will be 3/12/2019 or later. If you sort by title, each category will have the KB number sorted numerically. -
See AKB2000012.
5 users thanked author for this post.
-
Just out of curiosity: why? My reason for asking: I have seen other contributors on AskWoody claiming this is illegal.
I myself take a practical approach: I have lost so very many hours (> 100) because of Microsoft’s absence of client focus that I honestly do not care whether it is illegal (normally I do). One example: only informing that Ultimate is also covered by ESU in late November which caused me much stress trying to get my systems on Windows 10 in the months before November 2019, which failed, because of a lack of time and energy on my part caused by insufficient health.
ASRock Beebox J3160 - Win7 Ultimate x64
Asus VivoPC VC62B - Win7 Ultimate x64
Dell Latitude E6430 - Win7 Ultimate x64
Dell Latitude XT3 - Vista Ultimate x86 (still...)
Asus H170 Pro Gaming - Win10 Pro 1809 x641 user thanked author for this post.
-
Use 0patch or script installer (no ESU, Win 7 group B through Jan patches) or both?
I installed 0patch(free) after the Jan patches, and it’s been doing fine.
Also use the script installer because more is better and it will enhance things missing from 0patch, or is this 0patch tool probably sufficient?
Thanks for opinions..
C.
-
Does it violate licenses and eulas….. yes …but my morals are slipping. We are in unusual times where people are using Win7’s to remote in from home. I’ve sent an email to Satya to ask him to open up 7 patching for all given the circumstances.
Susan Bradley Patch Lady
-
Does it violate licenses and eulas….. yes …but my morals are slipping. We are in unusual times where people are using Win7’s to remote in from home. I’ve sent an email to Satya to ask him to open up 7 patching for all given the circumstances.
Yes, considering so many must now work from home, it would be good if Microsoft would step up and open up the ESU for some period of time. I guess this is most applicable to people who have their “home” computer and until now have only used the IT-supported computers at their work place.
Indeed, I saw a report that bad actor’s may have increased their efforts against homes and home users anticipating increased opportunities in these new circumstances.
Win 10, Win 7 Pro 64-bit, Office 2010.
Nethermost of the technically literate. -
Open Windows Update > click on View Update History (in left navigation) > click on the linked Installed Updates > copy & paste the KB number into the top left search field.
That way you don’t have to waste time sorting and searching by date.
Hope I could help.
1 user thanked author for this post.
-
-
Every time I think I’ve found a way to outsmart Mother Microsoft re: updating, it usually backfires…or at least causes more anxiety and takes more time than it’s worth.
My gut tells me that this unsanctioned (and per SB , a license violation) approach is not a good option. I acknowledge that I’m a non-techie home user with a less adventurous spirit than most. I agree, though, that MS should extend traditional W7 patching due to current circumstances.
-
Thank you so much for this, abbodi86. This should tide me over until i figure out what i’m going to do long term, with no option being ideal. However, i am a little concerned implementing it because this violates the EULA and i worry microsoft will start deactivating the product keys of genuine installs and then you’re effectively using a pirate copy. Also, it was my understanding that this workaround had been prevented with the latest SSU.
-
I have just run the script on one of my Win7 Ultimate x64 VMs that was updated through Jan.
There were no problems during the install.
There were two (2) reboots afterward.
Here is the result.
-
Oh, does it not? Susan upthread seems to agree that it does. My concern is just what microsoft will do to clamp down on obtaining ESUs for free.
Then again, we’re currently living through a period where so many more people are working from home and win7 still has a huge user base.
-
How does running abbodi86’s script violate the Win7 EULA?
8. SCOPE OF LICENSE.
You may not
· work around any technical limitations in the software;1 user thanked author for this post.
-
I think Susan’s assessment and subsequent action – to write to Satya asking for a waiver given the times are appropriate. This is a grey area and open to interpretation either way.
I would like to raise a technical issue though, only for clarification.
This script installs SSU first and the relevant update in the second step.
I was under the impression that this order does not matter anymore, because the SSU released in a specific month actually applies to the update released next month, this being done by Microsoft to avoid past issues. There is still a requirement to update regularly because SSU is not released each month.
Is this true about the SSU order, or is only true for Windows 10 or is not true at all?
-
You’re doing it wrong.
Got it, thanks.
-
Hello all. Wanted to share experience and ask a question:
Since FEB2020 updates were cleared for installation, I downloaded kb4537767-x64 and kb4537813-x64 msu from Microsoft Update Catalog. Followed the instructions so kindly provided by abbodi86.
Install ran without a hitch. After successful reboot, I opened Windows Update and selected View Update History. KB4537767 and KB4537813 do not appear.
Checked Control Panel > Installed Updates. KB4537767 and KB4537813 were listed there.
Is there a reason why the FEB2020 updates do not appear in View Update History?
-
Is there a reason why the FEB2020 updates do not appear in View Update History?
Yes, Windows Update History is the history of updates that Windows Update installed. Windows Update didn’t install those updates, you did. 🙂
But to verify that they are installed, they are listed in “Installed Updates.” -
Security-only updates are not released through Windows Update.
I could be wrong, but I believe that would be the case if you do a manual install.
An exception would be if the SO were released through WU.
I don’t think it shows in Update History, but it does in “Installed Updates.”
Also, if you uninstall an update, it doesn’t disappear from Update History. It is still listed in History at the time/date it was installed (but it is no longer in Installed Updates).Note: This applies to current updates that MS designated as Rollup and Security-only, not to the prior updates that were designated Updates for Windows and Security Updates for Windows (2016 and before)
-
-
Sure. 🙂
1 user thanked author for this post.
-
Yes, I was under the wrong impression.
Thanks for the correction.1 user thanked author for this post.
-
My goodness – this is the greatest thing since sliced bread. And since the last time I was in a grocery store there was no bread – that makes this the greatest thing going today!
I downloaded the script and installed per your instructions. I used to it to install the March Servicing Stack update (KB4550735) and 2020-03 Security Monthly Quality Rollup for Windows 7 for x64-based Systems (KB4540688). As advertised, the servicing stack was installed first, and then the roll-up.
As other users report, these updates did not appear in my Windows Update history, but they do appear when running, e.g., powershell (get-hotfix -id KB4540688). They also appear as installed updates in Control Panel.
Thank you so much!
5 users thanked author for this post.
-
I don’t feel so guilty. 🙂
Don’t know of any specific EULA or license that says you can’t use freely available patches on a licensed copy of Win7….
Playing devil’s advocate, of course.
-
I hear ya but… I’m not so sure that applying updates is working around a technical limitation.
For example, I don’t think 0patch patches violate the EULA.
One could make the argument that running any Win7 utility is working around a technical limitation in the software…. antivirus…
-
Not really, latest SSU first, is still the correct order
if you installed higher stack installer version, it will take precedence and work for all lower versions– Check required stack installer version for each update
if an update require higher SSU, the script will show error message and skip it
and that’s why for manual installation of ESU updates, you should only download and use latest SSU, even if current updates require previous SSU
-
Windows Update History show the history of updates installed via WU, or via msu file directly (double-click)
but not if the updates are installed via DISM.exe tool (like the script does)Update History can be reset/wiped easily, but “Installed Updates” will always show the updates
@RDRguy
Windows Update is more like a GUI front-end for CBS (the actual engine that process updates)
DISM.exe is the CLI front-end for CBS -
@abbodi86
My comment was more in relation to this (hypothetical) scenario:– SSU 2020-01 installed
– Patches for 2020-02 are released
– Install 2020-02 CU first (for whatever reason, see below for an example)
– Install 2020-02 SSUIf 2020-02 CU require minimum 2020-01 SSU, then the previous sequence would still work, while not installing the 2020-02 SSU first.
Same would be repeated next month 2020-03 in this example, if 2020-03 CU require as minimum 2020-02 SSU and not 2020-03 SSU.
This may have practical implications when let’s say 2 patches are pushed simultaneously via WSUS or SCCM and they are installed without a reboot between them. This is a very common scenario in fact and I have seen the SSU is not always installed first due to the sequence having other criteria like randomization, which patch is downloaded first from the update server etc.
Ideally the updates should be installed in 2 steps, SSU first, waiting for it to be deployed everywhere and then the CU for the month. But this is not practical or always possible taking in consideration the operational requirements, except for the smallest of environments and as such it is never done in 2 steps.
Note: In WSUS or SCCM which leverages the same WSUS, SSU and CU are always installed separately and not bundled as it is the case for Windows Update.
-
Hey Woody, good on you.
Every little bit helps right now.
Group B for WIN7 w/ ESU, plus trying out Linux builds in dual boot.
1 user thanked author for this post.
-
Used this on Windows 7 x64 Home Premium. Everything went well and after two reboots the computer still works. I did it with the network cable pulled. Once everything was done I ran the W10Tel.cmd After another reboot I replugged the network cable. So far so good.
W7 x64 Pro&Home
-
Used this on Windows 7 x64 Home Premium. Everything went well and after two reboots the computer still works. I did it with the network cable pulled. Once everything was done I ran the W10Tel.cmd After another reboot I replugged the network cable. So far so good.
According to the Pros above, this new script does “Include the Telemetry neutralize tweaks”. So you may not need W10Tel.cmd any more.
After running the new script on my system I see:
Directory of C:\ProgramData\Microsoft\Diagnosis
File Not Found
Directory of C:\ProgramData\Microsoft\Diagnosis\ETLLogs
11/15/2016 08:00 PM <DIR> .
11/15/2016 08:00 PM <DIR> ..
0 File(s) 0 bytesTotal Files Listed:
0 File(s) 0 bytesI did previously have files there, but I had stopped them from being updated. Now they are gone.
-
I forgot to mention this, sorry
the script is ment to disable the relevant schedule task after installing Monthly Rolup (they only can be disabled after restart)
therefore, you just need to run it as administrator, it will be self-deleted afterwards
or just delete it -
-
-
Have you been installing the SSUs before EOL?
Try installing KB4536952 Jan SSU manually first before running the script.
Also did you include Mar SSU KB4550735 in the download folder with the script?
You only need the latest IE11 CU b/c they are cumulative. -
You did not have required or latest SSU
you must include KB4550735 in the download folder with the script, or install it yourself1 user thanked author for this post.
-
Thank you both for your help. Followed your advice and updates installed OK now. Brilliant!!
1 user thanked author for this post.
-
Yes, placing March Security Only update (and March SSU) next to it
you don’t need to move the February update, the script should detect it as installed and skip it (after extraction)
3 users thanked author for this post.
-
I have been using 0Patch since 11/18/19, my husband about a month after. We both are on Win 7 Professional 64 bit SP1 computers, I am i7 6700, he is i3 4130. We both were group B until January when we had to install the rollups in order to assure that 0Patch would work properly.
Acting as guinea pigs for the 0Patch people on the board, and as per this link from 0Patch saying that it was not an issue to use both 0Patch and ESU at the same time https://0patch.zendesk.com/hc/en-us/articles/360011192299-Can-I-use-0patch-in-parallel-to-Windows-Extended-Security-Updates– I installed abbodi86‘s script and then the Feb. Security and IE updates today.
Installation went as described and both of us have had no problems at all. 0Patch is still working as expected, too.
Thank you abbodi86 and thank you everyone in this conversation who made it easier for me to give this a try.
Win 7 Professional, 64 bit, Defiantly Group B
1 user thanked author for this post.
-
0patch put out an email today mentioning only W7 users who HAVEN’T taken the ESU downloads are able to use the 0patch micro-patches . Mentions they are not compatible with the ESU downloads. Be interesting if some one with ESU and 0patch are having problems as 0patch is mentioning.
1 user thanked author for this post.
-
Yes
1 user thanked author for this post.
-
0patch website FAQ page states they are not needed and won’t be applied but doesn’t state that they’re not compatible and may cause problems in ESU updated systems.
EDITs: typos
Win7 - PRO & Ultimate, x64 & x86
Win8.1 - PRO, x64 & x86
Groups A, B & ABS -
-
-
Downloaded the required W7ESUI and then the Feb SO updates.
I made sure I had the SSU necessary installed which I already did way back when as I did installed the Group Jan update prior to buying 0patch subscription.
Well I thought I would try this new ESL and for me it didnt work. I got the cmd window with all of the same script as pictured but when I hit the zero key nothing happened.
Just noticed I needed SSU KB4550735 so I went to the Microsoft Update Catalog and downloaded it.
Must admit, I am kind of lost where to go from here but then I am not computer savvy
"An analog kid in a digital world"
Win7 Ultimate home built desktop Running 0patch Pro
Win 8.1 desktop and two 8.1 laptops
Win 10 Dell desktop (took the plunge)
and two very old home built Win XP desktops (offline for use with an old Epsom Photo scanner)
-
-
OK, so I need to skip the Feb SO updates and instead download the March SO updates instead?
I had just figured I would installed the Feb updates as we are still on DefCon 2 with the March updates.
Thanks PK. I may still have to wait until my IT brother visits and let him do it so he can show me in person. Who knows how long that will be though
I feel so stupid when it comes to this “stuff”
Also what I meant is that I have installed already the two prior SSU’s. I checked my installed updates just to be sure and they are listed.
"An analog kid in a digital world"
Win7 Ultimate home built desktop Running 0patch Pro
Win 8.1 desktop and two 8.1 laptops
Win 10 Dell desktop (took the plunge)
and two very old home built Win XP desktops (offline for use with an old Epsom Photo scanner)
-
You need the Feb and Mar SO (KB4537813 and KB4541500).
You need the Mar IE11 CU (KB4540671).
You need the Mar SSU KB4550735
All of them in the folder with the script3 users thanked author for this post.
-
I feel so stupid when it comes to this “stuff”
From a non-techy who is attempting to embrace tech- you aren’t stupid. You are asking questions, learning the terminology, and applying it to your personal situation. Pretty darn smart, if you ask me!
And the more you hang around here, the more you will learn… and the more it will make sense.
Also, the more you know, the better you can converse with your IT brother… if tech can improve your bonding… so much the better!
Just know that if you follow PKCano’s instructions, it will do what you want it to do… always works for me!
Non-techy Win 10 Pro and Linux Mint experimenter
-
Finally took the plunge and converted two fully up-to-date non-ESU Win7 “Group B” test systems to “Group A” by first installing KB4534310 (2020-01 Monthly Quality Rollup) then KB4536952 (2020-01 SSU).
After successful reboot, used @abbodi86‘s automated batch script to install the following ESU updates:
2020-02 – KB4537829 (Feb SSU)
2020-03 – KB4550735 (Mar SSU)
2020-02 – KB4537820 (Feb Monthly Quality Rollup)
2020-03 – KB4540688 (Mar Monthly Quality Rollup)ESU batch script processed both SSUs first then both Monthly Rollups successfully.
After reboot, the installed updates (via the control panel) listed both SSUs & the Mar Rollup as installed. As expected, the Feb Rollup was not installed due to supersession by the Mar Rollup. A subsequent Windows Update found only the March 2020 MSRT.
Afterwards, performed a couple of Windows Update offline scans via the Microsoft Baseline Security Analyzer (MBSA) tool using the current wsusscn2.cab file.
As the MBSA tool is no longer available for download as described here, I also performed additional offline scans via Powershell using a .vbs script found here and a .ps1 script found here.
MBSA and both Powershell offline scan scripts indicate the following updates are still missing:
2019-10 – KB4519108 (DST changes for Norfolk Island and Fiji Island)
2020-02 – KB4538483 (ESU Licensing Preparation Package)Interesting that KB4519108 is found via offline scanning but not via the normal WU scan since it’s pre-ESU, it’s not installed & it’s not hidden. No real concerns about the DST update as I don’t live on Norfolk or Fiji Islands.
But, have a question for @abbodi86 and/or other AskWoody_MVPs in the know concerning KB4538483 …
Should non-ESU Win7 updaters now in “Group ABS” (Abbodi86’s Batch Script) be concerned about the missing ESU Licensing Prep Package KB4538483 on non-ESU systems being patched with ESU updates?
Win7 - PRO & Ultimate, x64 & x86
Win8.1 - PRO, x64 & x86
Groups A, B & ABS -
Wow, I did it!! I kept trying and then recalled that I did something similar years ago with a file named “pciclearstalecache”.
I surprised myself when I hit the zero key and it began the installation process.
I waited a long time to reboot and then let it sit another good long time before signing in. Just checked the installed updates and I see four listed with today’s date./
I am also using 0patch Pro and so far it is working fine.
WOO HOO
Thank you to everyone in this thread, PK and of course abbodi.
BTW, I have been on askwoody site for many, many years as a devoted Group B’er. I decided to join as a Plus Member recently.
"An analog kid in a digital world"
Win7 Ultimate home built desktop Running 0patch Pro
Win 8.1 desktop and two 8.1 laptops
Win 10 Dell desktop (took the plunge)
and two very old home built Win XP desktops (offline for use with an old Epsom Photo scanner)
-
KB4538483 is solely ment for actived ESU-license customers to recieve ESU updates via WU.
no other purpose for non-ESU users, and the update contents are already included in the Monthly Rollup.now if you installed it and checked wsusscn2.cab again, it will still not show ESU updates (installed or not)
because WU engine check the status of active ESU license before it show the updates -
Win7 Home Premium 64-bit. Group B.
I just used abbodi86’s .cmd script to install the February Win7 64-bit security-only updates.
SHA2 support updates KB4490628 and KB4474419 had already been installed on my PC (in April and September, respectively, of 2019).
I put four files in an otherwise-empty folder: (1) abbodi86’s .cmd file, (2) the Feb. SSU (KB 4537829), (3) the Feb. Win7 SO update (KB 4537813), and (4) the Feb. IE SO update (KB 4537767).
Then I right-clicked on the .cmd file, chose Run as Administrator, and hit 0 in response to the opening menu.
The process took just about exactly 30 minutes. Then I rebooted, and then I ran (as Administrator) the RunOnce anti-telemetry file that the .cmd script had deposited on my desktop.
Everything seems fine, I thank abbodi86 for his assistance, and I plan to do the March updates the same way (when their time has come).
5 users thanked author for this post.
-
-
And I want to know, if I don’t update for many months, can I restart the updates from the most recent month rollup ? Skipping all the months in between ?
Technically, and in normal circumstances, the answer would be Yes, since Group A Rollups are cumulative.
BUT:
+ There is no guarantee that @abbodi86 ‘s script will work next month, or the month after. Microsoft may put another roadblock in the works. They won’t be happy with people getting for free, what they are charging subscription fees for.
+ There will probably be other qualifying installs, like the SSU changing.As long as things stay like they are, skipping monthly patches may work. But who knows??
1 user thanked author for this post.
-
I have already installed the SHA2 support updates KB4490628 and KB4474419 since the time of their release (more or less). Today, I have followed the advice of PKCano in #2210327 above. After rebooting, the four new updates are now listed in my “installed updates” and everything seems to work fine up to now.
System: Win7 x64 Ultimate and “Group B”.
Note: “RunOnce_W10_Telemetry_Tasks.cmd” did not appear, probably because I have already set the script “W10Tel.cmd” to run on startup as a scheduled task. No additional telemetry related tasks or services have shown.
Many thanks to abbodi86 for the scripts he provides and the people in this forum offering their knowledge.
Tryfonas
1 user thanked author for this post.
-
Thanks, @PKcano
I didn’t realize you could get the rollups from the update catalog.
So I would need to download 4540688 and 4550735?
-
-
Just wanted to join to say a big thank you to aboddi86 & PKcano especially for the creation of this and the help supplied to various people.
Just so Im clear, I dont use Windows 7 much anymore but do have a few boxes that its on, my old man however does still use it and I want to get him up to date. I think group A is the way I`ll go. So Ive checked the prerequisites KB4490628 and KB4474419 installed, Jan SSU [KB4531786] installed, everything done until EOL.
Downloaded the March CU [KB4540688] and the latest SSU [KB4550735] and placed them in the same folder as the extracted W7ESUI.cmd [as picture]
Now it should be a case of right click W7ESUI.cmd and “run as administrator”? I don`t need the February CU [KB4537820] or any other SSU?
Cheers
-
I didn’t know if it was good or bad, but I too thought Rollups were better at the EOL era after being strictly security-only all these years.
Foldered: W7ESUI.cmd / KB4550735 March SSU / KB4537820 (Feb Monthly Quality Rollup)Everything purposefully disabled in task scheduler was untouched after the Rollup install.
– or was it the Telemetry neutralize tweaks?:)
So nothing changed, although, the Installed Updates window got a clean-up albeit for a load of Microsoft .Net Frameworks; but comforting to find you can find old security-only numbers and older ssu’s if you place what you’re looking for in the upper corner search.I hope the coming month will still allow theW7ESUI, SSU & March rollup combo to install through this brilliant development.
The ReadMe has’# for offline integration’; I had disabled WU and didn’t go offline, # for offline integration meant for the desktop RunOnce_W10_Telemetry_Tasks.cmd but was too hasty to take this into account – I shall do it offline if i get to install again next month.Thanks to Creator of this, and wonderful and educational to read the poster’s questions and results on here. Big thank you.
-
This reply was modified 9 months, 3 weeks ago by
.
-
This reply was modified 9 months, 3 weeks ago by
.
1 user thanked author for this post.
-
This reply was modified 9 months, 3 weeks ago by
-
Windows 7 Home Group A
March SSU and March SMQ rollup installed with no issues
@abbodi86‘s script works like a dream.This was undoubtedly the smoothest update cycle I’ve ever done on a Windows system.
3 users thanked author for this post.
-
-
It will be updated when .NET need security fixes
after January, all .NET updates (for other Windows) were non-security
1 user thanked author for this post.
-
Defcon applies to all versions, but individual advice is provided for each version.
cheers, Paul
1 user thanked author for this post.
-
-
I’d put all three there just to be sure.
It’s supposed to install the SSU first.1 user thanked author for this post.
-
Shortly (~45 sec.) after running the script for the February patch batch, Bit Defender popped up an alert:
False positive? Unrelated coincidence?
-
BD is looking for activities that change Windows itself and that is exactly what the script does, so the report is correct. You can safely ignore the warning because you want Windows changed.
cheers, Paul
2 users thanked author for this post.
-
Shortly (~45 sec.) after running the script for the February patch batch, Bit Defender popped up an alert:
False positive? Unrelated coincidence?
add the script to “exclusion” or Ignore list in BitDefender
1 user thanked author for this post.
-
Rollups are CUMULATIVE. That means the later one contains the one(s) before. SO, once the March Rollup is installed it would be redundant to have the Fem also listed b/c it is contained in the Mar Rollup. So the Feb, Jan, Dec, Nov…. Rollups are no longer listed.
1 user thanked author for this post.
-
Are you using 0patch?
https://0patch.zendesk.com/hc/en-us/articles/360012826660–Patchable-module-found-string-appears-in-console-based-applicationsyou don’t really need W7ESUI.ini for live os installation, so just delete it and try again
for some reason, the script fail to set the required variables correctly because of W7ESUI.ini presence
so it error and exit before doing anything-
This reply was modified 9 months, 2 weeks ago by
.
-
This reply was modified 9 months, 2 weeks ago by
-
This reply was modified 9 months, 2 weeks ago by
2 users thanked author for this post.
-
This reply was modified 9 months, 2 weeks ago by
-
Are you using 0patch?
https://0patch.zendesk.com/hc/en-us/articles/360012826660–Patchable-module-found-string-appears-in-console-based-applicationsyou don’t really need W7ESUI.ini for live os installation, so just delete it and try again
for some reason, the script fail to set the required variables correctly because of W7ESUI.ini presence
so it error and exit before doing anythingI (of the 3 Win 7 laptops above) AM using 0patch. A study of running them together via this thread and 0patch lead me to conclude it would probably be ok, and I tried 0patch on the 3 machines first.
Anyway, got rid of the .ini file, and the script is running and chugging along right now. Thanks for your help.
(NB: I did NOT remove the ini file on the other 2 laptops, and the script ran fine. They also have 0patch. Also the “patchable module” message was gone on the latest one — 0patch probably updated. I saw a note to that effect.)
Chris
-
I deleted the ini file, and the script ran as expected. Thank you much. I have 0patch installed on the system, but it’s not active. That’s probably the reason the fix didn’t get installed.
1 user thanked author for this post.
-
abbodi’s suspicion that 0patch had a tie in to the script erroring out was right on.
I circled back (out of curiosity) and put the ini file back in with the cmd script, and with 0patch now fixed (according to the link posted above from 0patch.zendesk), the script runs through to asking to proceed or exit, which is past where the problem was occuring.
You are truly a wizard, sir!
Thanks for all you do.
Chris
3 users thanked author for this post.
-
-
-
-
0x800f081f – solution if this helps someone.
First, thanks to @abbodi86 for the 5-star W7ESUI.cmd .
This came about, installing patches in this order:
2020-02 Service Stack Update – KB4537829
2020-02 Monthly Rollup – KB4537820
2020-03 Service Stack Update – KB4550735
2020-03 Monthly Rollup – KB4540688(I know I did not need to run the February SSU and February Monthly Rollup, but I did it as an experiment.)
You can see it failed on the 2020-03 Monthly Rollup – KB4540688 {Failed 0x800f081f(1).PNG}
I let Windows Update run and you can see, it installed:
.NET 4.8 KB4503548
Windows 7 Update KB2952664
2019-07 Windows 7 Update KB4493132{WindowsUpdates for W7ESUI.PNG}
The last two are Telemetry
KB2952664 – see AKB2000004, AKB2000007
KB4493132 – see AKB2000003My guess is that .NET 4.8 (KB4503575) allowed KB4540688 (2020-03 Monthly Rollup) to succeed using W7ESUI. This you can see in the Program&Features picture{Program&Features.PNG}.
oddities:
1) .NET 4.8 shows up as KB4503548 in Windows Update and as KB4503575 in Program&Features
2) KB4537820 (2020-02 Monthly Rollup) is missing in the Program&Features listing, as noted in previous posts.After you get the March patches installed, you can remove the Telemetry in the following order (or not install them in the first place):
KB4493132
KB2952664
-
This reply was modified 9 months, 2 weeks ago by
.
-
This reply was modified 9 months, 2 weeks ago by
-
This reply was modified 9 months, 2 weeks ago by
-
This reply was modified 9 months, 1 week ago by
2 users thanked author for this post.
-
This reply was modified 9 months, 2 weeks ago by
-
Cheers bud, didnt know there was an SSU update this month…
p.s. They installed fine without it anyway.
p.p.s. Installed now on 2 boxes 🙂
1 user thanked author for this post.
-
-
Can anybody comment on what/why it was changed (e.g. bug fixes, new capability, etc) and whether or not we should now be using the updated 0.2 version vs the original 0.1 version?
Edit: Answered my own question …
Opened the Changelog contained in the “W7ESUI-ReadMe” file which states …– 0.2:
added support to install SHA2 updates KB4490628 and KB4474419 if detectedThat answers that 🙂
Win7 - PRO & Ultimate, x64 & x86
Win8.1 - PRO, x64 & x86
Groups A, B & ABS -
I was waiting to confirm that the procedure is still working with April updates, before announcing v.0.2 🙂
the second version simply add support to install SHA2 support updates, if not already installed
meaning, put msu files for KB4490628 and KB4474419 along with ESU updates msu files, and the script will install them for you first5 users thanked author for this post.
-
Does that mean we don’t need the 0.2 version if we already have the SHA2 updates installed?
Or would be a good idea to go ahead and download the newer script anyway?
1 user thanked author for this post.
-
-
Rollups include the Security-only updates, the IE11 Cumulative update and the non-security patches.
.NET updates are not included in the Rollups.1 user thanked author for this post.
-
-
-
So will .NET updates continue to show up in Windows Update if they are needed?
1 user thanked author for this post.
-
-
-
latest .NET Rollup for Windows 7 is KB4535102 from Jan 2020 – nothing higher than that:
https://support.microsoft.com/help/4535102/ -
-
Look on the MS pages for KB4535102.
KB4535102 is a .NET Rollup composed of a bundle of individual patches for each of the versions of .NET
The Rollup’s KB number will not show up in Installed Updates, but any of the individual patches that were installed will be listed.
Look under the section “Additional information about this update.” If any of those KB numbers show in Installed Updates, those are the version(s) of .NET installed on your computer that received updates.1 user thanked author for this post.
-
-
You are very good at explaining things in a way that even I can understand. Thank you.
1 user thanked author for this post.
-
-
The wording about placing the CMD file “next to” the MSU files has generated more than one question. (I would have been added to the list had I not seen the first time it was posed.) It may help to edit the original instructions to direct the user to place the CMD file in the same folder as the MSU files; that way you won’t have to keep explaining what “next to” means.
-
-
The April version works for March and April.
1 user thanked author for this post.
-
-
Yes, it will work for Server too
1 user thanked author for this post.
-
See here and here and here.
Be sure you have the prerequsites installed (see instructions at the top).
Put the script .cmd file, the latest SSU (April), the latest IE11 CU, and all SOs (Feb-April) in a folder. See #2257497.
Right-click and run the .cmd file as Admin.
Press 0 (zero) to install.
Wait till it finishes and reboot. -
So far no problems on mine.
I’m sure @abbodi86 will handle whatever comes up 🙂2 users thanked author for this post.
-
Win7 Home Premium 64-bit. Group B.
I just used abbodi86’s .cmd script to install the April Win7 64-bit security-only updates — having previously used it for February (as described in a previous post) and March.
SHA2 support updates KB4490628 and KB4474419 had already been installed on my PC (in 2019), and I’m helping another Group B-er to install each month’s updates, so I kept things simple and stuck with the original version of the script.
I put four files in an otherwise-empty folder: (1) abbodi86’s .cmd file, (2) the April SSU (KB 4550738), (3) the April Win7 SO update (KB 4550965), and (4) the April IE SO update (KB 4550905).
Then I right-clicked on the .cmd file, chose Run as Administrator, and hit 0 in response to the opening menu.
The script took just under 30 minutes to complete, and I hit 9 at the end (as instructed) to exit.
Then I restarted Windows (also per the script’s instructions), and it was the usual more involved (“Configuring Windows updates…”) post-updates restart, and it took around 10 minutes.
Everything seems normal, and I once again thank abbodi86 for his script.
5 users thanked author for this post.
-
WOW – IT WORKED!
Now I can update the old 7 machine in my wife’s SOHO.
THIS IS GREAT!!!
Will this work again in a month when Woody gives us Defcon 3 for the May updates?
Thanks to abbodi86 and PKCano for translating some of the details!!!
1 user thanked author for this post.
-
i just read about another ssu kb4550738 (april). is this covered by the 0.2 script or will it be only subject for future script version (may)?
if latter i think it’s better to wait until defcon 3 or higher for may to install all missing post-esu-updates and corresponding ssu using that script…
and will i still need march ssu as well (both ssu in same folder with that script) or only newer one?
PC: Windows 7 Ultimate, 64bit, Group B
Notebook: Windows 8.1, 64bit, Group B -
Will this work again in a month
No guarantee MS won’t try to plug this gap, but details will be provided here.
cheers, Paul
I think the chances are slim to none, how many people use this? A couple hundred? Not really worth the trouble to go out of your way to plug it. Also, the majority of us are using it on HOME PCs, so they are not losing money simply because we can’t even buy it. We “steal” updates we can’t pay for anyway. And Win10 is still for free as far as I know if you have a Win7 key. Correct me if I am wrong. 🙂
It’s an issue that costs MS money to fix, but gains them 0 money. Almost all business would not bother with this.
1 user thanked author for this post.
-
See the top post in this thread.
There is also a list on the Win7 Update History site. If you click on the support pages, the SSU is listed there.
-
Group A:
get the latest Monthly Rollup from Win7 update history
https://support.microsoft.com/en-us/help/4009469it should also contain reference to latest SSU
Group B:
you need latest SSU, latest IE11 Cumulative, and each month Security Only update
https://www.askwoody.com/forums/topic/2000003-ongoing-list-of-group-b-monthly-updates-for-win7-and-8-1/for .NET updates, you can foloow the blog:
https://devblogs.microsoft.com/dotnet/net-framework-may-2020-security-and-quality-rollup-updates/ -
So as folks may by now know there was an “issue” with the .Net update for May, Abbodi86 has posted a solution but there was another [not sure if posted] which is easy and worked for me.
All credit to vinzf and pesho_georgiev from mdl.
Here’s how to successfully install the infamous .NET May Update:
1. Download this:
http://download.windowsupdate.com/d/msdownload/update/software/secu/2020/05/ndp48-kb4552921-x86_608b67e4011b9e103ca18deadbfc013d1c328508.exe (x86)
http://download.windowsupdate.com/d/msdownload/update/software/secu/2020/05/ndp48-kb4552921-x64_6912af0422fc16a14f4f398fda98117f1e2f01b8.exe (x64)
2. Create a shortcut of the executable.
3. Right click on the shortcut and go to Properties.
4. On the Target box, add this: /msioptions “ESU_LOCK=2D40812E-974C-4EA2-8DCC-63C992D505B9” (make sure to add a space before adding it)
5. Click Apply and OK.
6. Run the shortcut and proceed with the installation.On the “Properties Box” of the right clicked shortcut, make sure you add the /msioptions, etc line from number 4. after the .exe that is already in the box [dont overwrite the lot].
Cheers…
4 users thanked author for this post.
-
You need the April SSU preinstalled before you can install the May Rollup or SO/IE11 if you don’t install the May SSU at the same time as the May patches.
The May SSU will be necessary for the June patches.
But if you install the May SSU along with the May Rollup or SO/IE11, you do not need to install the April SSU first. -
Reporting that I installed May Rollup, May SSU as well as NET. Framework 3.5.1 and 4.7.2 update with aforementioned methods. No issues and everything works smoothly. Thanks for all the help and assistance, as usual. 🙂
Out of curiosity: What would happen if you try to install a NET. Framework update version that you don’t have installed on your windows? I used a tool to determine which I had, it showed 3.5 and 4.7.2 so I only installed those two.
-
Referencing @Mattchu‘s post above #2262363, a word of warning … if you copy & paste:
/msioptions “ESU_LOCK=2D40812E-974C-4EA2-8DCC-63C992D505B9”
… the ESU .NET update will fail to install & you’ll get the 643 error.
But, if you copy & paste:
/msioptions "ESU_LOCK=2D40812E-974C-4EA2-8DCC-63C992D505B9"… from @abbodi86‘s post #2262211, the ESU .NET update should install correctly.
Though both look the same, the difference is the “” marks … “” (fails) vs “” (works)
This is true for both @abbodi86‘s command prompt method or @Mattchu‘s shortcut method.
EDIT: when this reply is submitted for posting, both “” marks end up looking the same – probably due to @Mattchu‘s post being originally submitted using “visual” text while @abbodi86‘s post was submitted using plain “text” mode and now because my post contains @Mattchu‘s “visual” quote marks, even though I’m submitting this post in plain text mode, after processing, it’s being posted as “visual” text so everyone’s “” marks in my post look exactly the same.
You need to actually look at both @Mattchu‘s & @abbodi86‘s posts to see the difference in their “” marks. Again, @Mattchu‘s fails & @abbodi86‘s works.
Moderator note: I’ve fixed the “correct” post so it copies correctly.
Win7 - PRO & Ultimate, x64 & x86
Win8.1 - PRO, x64 & x86
Groups A, B & ABS -
Can confirm, that happened to me too. Only abbodi86 works.
1 user thanked author for this post.
-
First of all, a sincere thank you to everyone for your informative contributions to this topic which allow us to continue staying safe while using Windows 7.
This has given me both a revelation and resulted in a few additional .NET related questions:
I have both 4.5.2 and 3.5.1 installed on my system but I ignorantly and erroneously assumed that by keeping 4.5.2 continually updated with 4.5.2 security fixes that 3.5.1 would also be updated. Oops. After checking my Windows Update history I have learned that the last time a security update to 3.5.1 was applied was with KB3163425 on July 12, 2016. (Did I say Oops?) I immediately went ahead and successfully installed 3.5.1 security only update KB4552965.
Here are my questions:
1. I assume .NET security and quality rollup updates are cumulative while .NET security only updates have to be applied successfully to get the full benefit of their intended protection, correct? While I’m OK with 4.5.2, I’m obviously way out of sync with 3.5.1.
2. What is the risk of installing the .NET security and quality rollups? Is there telemetry hidden in these updates like the regular Windows 7 security and quality rollups? I have always been a Group B user and I prefer to remain that way but I’m obviously concerned what risks are posed by not taking the appropriate sooner-than-later steps to plug the holes that are still present in 3.5.1.
Finally, rhetorically, why does Microsoft have to have such disdain towards Windows 7 users?
1 user thanked author for this post.
-
.NET has never been included in Group B patching. The telemetry Group B is avoiding is in the Windows Security and Quality Monthly Rollup and in the individual telemetry patches like KB2952664.
There is no problem with installing the .NET Rollup. -
I have updated one of my WIn7 Ultimate VMs with the MAY patches on May 17, 2020.
It have .NET 3.5.1 and 4.7 installed.I put KB4556836 (Rollup), KB4555449 (SSU) and KB4552940 (the .msu patch for .NET 3.5.1) in a folder with @abbodi86 ‘s script. Then executed the script as admin.
I executed (as admin) the .exe patch for .NET 4.7 KB4552919 with the Bypass switches as per @abbodi86 in #2262211.Everything installed correctly.
Update: Two more done (same versions of .NET) without problems.5 users thanked author for this post.
-
I know AKB 2000003 has never included .NET updates when there were some issued but I erroneously assumed they included telemetry of some sort.
It’s a rather unusual feeling when a Windows 7 user realizes that Microsoft is issuing quality updates that actually only include quality updates.
1 user thanked author for this post.
-
0patch would say “no, you are not vulnerable”, which is the whole point of switching to an alternative update mechanism. If 0patch misses stuff I’m sure we’ll hear about it, but in the meantime, continue to backup regularly.
cheers, Paul
1 user thanked author for this post.
-
-
-
So I have now run the APRIL updates on my wife’s Win 7 Pro 64-bit PC in her SOHO.
BUT … normal Windows Update is now prompting me to install this update from 2014:
System Update Readiness Tool for Windows 7 for x64-based Systems (KB947821) [May 2014]
This tool is being offered because an inconsistency was found in the Windows servicing store which may prevent the successful installation of future updates, service packs, and software. This tool checks your computer for such inconsistencies and tries to resolve issues if found.
More information: https://support.microsoft.com/kb/947821
I do not recall seeing anything like this when I ran the last normal Group A rollup update in January.
ALSO … just now, when I used this tool to install the April updates (KB4550738 and KB4550964), I was NOT prompted to reboot. Is that expected? I rebooted anyway.
Any thoughts about these two? Thanks.
-
Cheers RDRguy, never knew the board formatted quotation marks differently in visual or plain, I will remember to do plain next time if there are any “” 🙂 It even messes up when you put 2 single quotation marks in sentences, like I`m, etc…
1 user thanked author for this post.
-
Finished using this on our third and final Win 7 Pro 64-bit PC, a slow Dell Optiplex 3010.
Two odd small consequences —
1) In Belarc Advisor, the long list of installed updates to Win 7 is gone.
2) Normal Windows Update is now showing me “Update for Windows 7 for x64-based Systems (KB2952664),” whose MS article is captioned “Compatibility update for keeping Windows up-to-date in Windows 7”, and whose WUD Details say it has been superseded by numerous Monthly Security Quality Updates (rollups), including the 04-20 one I just installed using this tool.
Just a bit of static, I suppose.
-
W7ESUI don’t clean or remove any update history 🙂
KB2952664 show up in WU because of missing metadata for ESU updates
meaning, on metadata level, WU has knowledge only for 2020-01 Monthly Rollup KB4534310, but now 4534310 is superseded by the manually installed 2020-05 Monthly Rollup KB4556836
which lead to WU thinking that KB2952664 is not superseded -
abbodi86 – you are correct, and I owe you an apology. I rechecked, and in Belarc Advisor, the long Win 7 update history has returned.
Thanks for your explanation, and thanks with BIG KISSES WITH NO SOCIAL DISTANCE for your update tool.
… And let me add that this thread is a great reason for everyone reading this to donate a little something to Askwoody, as I have. A little something multiplied by each of us would let Woody and PKCano have a much-deserved vacation (as long as they don’t take breaks at the same time).
-
-
-
You do it the same way you do “sfc /scannow”
You run “filename /bypass”
One easy way is to make a shortcut to the file, right click on the shortcut, choose properties.
In the “target” box where it shows the file name, add the bypass switch to the end of the string.
Click OK and double click on the shortcut.1 user thanked author for this post.
-
Sanboxie user here and I can report no problems with the latest Sbie [5.33.3] and windows 7 updates up to May, x32 and x64 using the above script. Not sure about the official ESU way though!
Good luck.
1 user thanked author for this post.
-
Just FYI that, after running abbodi86’s tool for the May updates in my third Win 7 Pro 64-bit machine (a Dell Optiplex 3010 with 8GB RAM), the May updates show in Installed Updates, but the long list of historic updates in Belarc Advisor is now mostly gone – none of the Win 7 updates show, from 2014 to now. This has continued after a reboot, etc.
The last time, they came back after a while. But not yet this time.
-
Hello to all member of AskWoody.com! This is my first post here, though I’ve been following this site from long ago.
I wanted to thank everyone who made and refine this tool to let us keep using our beloved OS.
I’ve never update my system since ESU came in, so here’s what I did. I put the following files in the same folder as the installer:
- February SO Update – KB4537813
- March SO Update – KB4541500
- April SO Update – KB4550965
- May SO Update – KB4556843
- May IE Update – KB4556798
- .NET 3.5.1 Update – KB4552940
- May SSU – KB4555449
then ran it as administrator. Everything went super smooth, and these updates appear on the installed list in Windows Update.
Then I’ve installed .NET 4.7 Update (KB4552919) as explained here.
Again, everything was good, and my PC seems to run perfectly fine.
I did not install March and April SSU. Do I need them?
Is there any other important update that I miss?
Thanks again!
1 user thanked author for this post.
-
You only need the latest (May) SSU.
Looks like you are up to date.1 user thanked author for this post.
-
May I suggest a KB-style article that lists all of the files needed each month to keep a Windows 7 system up to date with @abbodi86‘s method? This would include not only Windows and IE11 patches, but also any new .NET patches and whatever else comes down the chute–especially the SSU for the corresponding month and any new versions of the installation script.
Having everything (or at least the links for it) together in one place would save considerable time hunting around for this bit “here” and that bit “over there.” A thread such as this one that’s currently running to 257 replies may not be the most practical method for listing new files, as they inevitably get buried in an avalanche of new comments and questions.
At the very least, it would be helpful to formally and regularly post availability of, and links for, the new SSU in a predictable place. The reason I’m asking is that two days ago, I installed the May patches on a Win7 laptop without problems. But today I used the same folder containing the same files (copied over, of course) on a different Win7 machine, and the installation kept failing. Eventually, I discovered somehow that another new SSU had been released, and put that in the folder for May, and then the installation worked. But then, why did the installation of the same set of patches (minus the May SSU) work just fine on the first laptop?
The greatest benefit IMO would come from posting announcements and links to each month’s new SSU in a fixed location. If this is already taking place, please let me know the page so that I can bookmark it.
Thank you.
-
You need to wait on the installation of the June patches until @abbodi86 has a chance to evaluate the situation. DO NOT try to install the June patches yet.UPDATE: It appears that W7ESUI_0.2 still works for June patches.
2 users thanked author for this post.
-
The script won’t proceed if required options are not met, specially “updates location”
can you post screenshoot of cmd window?
1 user thanked author for this post.
-
Here from MS Update Catalog, Qnu. KB4538483 is only available from the MS Catalog site & WSUS and not available thru Windows Update
manually download the 5-5-2020 version of KB4538483 for your Win7 system, install it and reboot
-
“May I suggest a KB-style article that lists all of the files needed each month to keep a Windows 7 system up to date with @abbodi86‘s method? This would include not only Windows and IE11 patches, but also any new .NET patches and whatever else comes down the chute–especially the SSU for the corresponding month… – Cybertooth”
Plus Members like us can use Susan Bradley’s month-end master patch list for this purpose, e.g., 2020-05-29-Pre-Win10-Updates-.pdf
Susan’s file includes links to the Microsoft support pages for all the various patches. That’s what I used to locate and download the appropriate 2020-05 updates from the Microsoft Update catalog.
-
This reply was modified 7 months, 1 week ago by
.
-
This reply was modified 7 months, 1 week ago by
-
This reply was modified 7 months, 1 week ago by
1 user thanked author for this post.
-
This reply was modified 7 months, 1 week ago by
-
Have any of you looked at the first post in the Patch Tuesday Main Blog thread?
Most of what you need is listed there with download links.That happens every month, thank you very much.
-
Just wanted to confirm the June updates worked for me using the V2 script [not tried the V1].
Win7 x64 and x32 Security + cumulative all installed fine 🙂
Couldn`t find a June SSU for Windows 7
Matt
1 user thanked author for this post.
-
-
“Remember, the suggestion is to have a single place listing everything that’s needed to keep Windows 7 patched. Basically, a page that combines the completeness of the Master Patch List with the simplicity of the AKB system–and throws in the W7ESUI to boot.” – Cybertooth
The procedure I outlined above isn’t that onerous. A find for the word “catalog” on each support page takes you right to the updates you need.
For April, I just searched the Update Catalog for “2020-04 Windows 7 x64” and was able to easily find the needed patches. But a search for “2020-05 Windows 7 x64” produced a long confusing list, and I discovered that using the Master Patch list for this purpose is much easier.
About the only thing the Master Patch list lacks is info about the W7ESUI script itself, so I just check the opening post of this thread for updates to the script.
-
1 user thanked author for this post.
-
1 user thanked author for this post.
-
1 user thanked author for this post.
-
@Mattchu, PK included the link in her response to you as it contains the June SSU download links. Just download whichever ‘bittedness’ you need and add it to the folder along with your script.
Win 7 SP1 Home Premium 64-bit; Office 2010; Group B (SaS); Former 'Tech Weenie'1 user thanked author for this post.
-
Whew.
A big ‘thank you’ to abbodi86 for this installer.
One of the major disruptions of the COVID-19 pandemic was that the “Stay at home” command meant I could not go to a venue to download these Windows® 7 ESU patches. Yes people, the only connection from the abode here to the Internet is a v.92 one.
No way I could download all of these patches (or for that matter, the newest versions of Firefox and TorBrowser) in any semblance of reasonable time.
The pandemic even shut down the Chicago Public Library branch where I could (and have) do this.
I’m keenly considering writing my Aldercritter. Yes, he has a few more crucial items now on his list, but I will allege that broadband internet connectivity is a utility, necessary as much as electricity and home heating. It is pathetic that the choices for broadband connectivity here is limited to corporations earning windfall profits for their abysmal product; laden with impossible to avoid fees, requiring two-year contracts, and dramatically escalating monthly charges with ‘cancellation‘ fees equal to the cost of the service if the contract was not cancelled.
I was without broadband internet access for 90 days. This past week, the Library finally reopened. Thankfully, it was not vandalized. However, due to its closed-air circulation, a patron is limited to one hour inside.
Downloading all these updates via the Library’s wi-fi network (onto a flash drive inserted into my Windows® 8.1 laptop) took 57:36. Yikes.
Bringing it back here and setting it up to execute was simple to follow. I have put prior updates from Microsoft into a specified folder, and that is where abbodi86’s script and the seventeen patches (February [Win7], March, April, May) went. I would have downloaded June’s, but owing to how little time I had left, did not.
The program ran exactly as described. (I also enjoyed the magenta text.)
Here is the picture of the patches installed on this Windows® 7 computer
(I also installed the regular patches on Windows® 8.1; but they are not shown in this picture.) This computer is finally caught up.Mod edit: Pic now removed as external link target has changed.
Important links you can use, without all the fluff or sales pitch = https://v.gd/sdr34 -
After an image backup, I gave this a try..
RESULT! x86Pro Test
Note for @abbodi86; close attention to screenshot above – minor really, Telemetry script didn’t appear on desktop upon douuble restart (no biggie) using the sandscript 😉
May the force AND your god be with you always!
Problems controlling W!N10 updates:
https://www.askwoody.com/forums/topic/2000016-guide-for-windows-update-settings-for-windows-10/ -
Hi,
W7 HP x64, W7ESUI_0.2.
Installed:
- Jun Service Stack update
- Jun IE cumulative update
- Feb – Jun SO updates
- May .NET 3.5.1 SO update
Everything ran super smooth, took about 25 mins. After reboot, ran the Telemetry script.
No problems to report. Very happy 🙂 .
A thousand thanks, @abbodi86.
-JB
1 user thanked author for this post.
-
If the updates are optional non-Security patches, it probably is not necessary to install them.
If the updates are rated important = Security patches, I would recommend installing them.
1 user thanked author for this post.
-
Have a look at Susan Bradley’s Master Patch list.
For instance: the last security/quality .net was in May kb4556399 and with this KB you can go directly to it in the catalog to download.
Listings of just May updates excel/pdf/html
Listings for that particular month shows what you need.
Problems controlling W!N10 updates:
https://www.askwoody.com/forums/topic/2000016-guide-for-windows-update-settings-for-windows-10/1 user thanked author for this post.
-
There is no point disconnecting as you are not turning off your standard protections.
Turning off AV for the duration doesn’t mean your machine will rush off to download a bunch of bad files, unless you tell it to. 🙂cheers, Paul
1 user thanked author for this post.
-
All – Happy and relentlessly safe Fourth!
I imagine we’ll soon see Woody’s DefCon “Go Ahead” for the June updates to Win 7. Susan Bradley has already indicated corporate users can go ahead.
Will aboddi86’s fabulous method work again? Also the .NET method?
Thanks!
1 user thanked author for this post.
-
Susan Bradley’s latest Master Patch list already gave the go-ahead on the June updates. So, on July 2nd, I used the script to install 2020-06 Security Monthly Quality Rollup for Windows 7 for x64-based Systems (KB4561643) and 2020-06 Servicing stack update (KB4562030).
No problems with either the script or the updates it installed.
1 user thanked author for this post.
-
On our spare (test) Win 7 Pro 64-bit machine, I have just now installed KB4562030, KB4561603 and KB4561643.
Thank you again abbodi86 and PKCano!!! And Woody for making this all possible. And Woody’s mom for making Woody possible !!!
Reminder to all to donate!!! I did, and it’s certainly worth it.
-
-
Win7 Home Premium 64-bit. Group B.
I neglected to report on the May updates, which I successfully installed using abbodi86’s script. That install also included the May .NET update — as a two-part task, with the script updating the older .NET versions and the separate .exe file we were linked to updating the bigger-than-4 .NET version. Or maybe it was the other way round; it’s been a month. In any case, I’m glad there isn’t a recommended .NET update every month.
In fresher news, I have just installed the June SSU, Win7 update and IE update using abbodi86’s script — Version 1! (I’m old fashioned) — and all seems normal. Including the post-installation reboot, the whole process took around 35 minutes.
The one little burp that’s maybe worth mentioning is that, as part of that post-installation reboot, I got a black screen that hung in there for quite a while, and for most (I think) of that time, there was a small message box in the upper left that said, “Setting up personalized settings for Windows Desktop Update.” I don’t recall ever seeing that message before, in any context — but in any case, the black screen yielded to my desktop after two or three minutes. And a while later I did another reboot, and it was completely normal.
And I once again thank abbodi86 for his script.
3 users thanked author for this post.
-
-
No .NET updates for June.
1 user thanked author for this post.
-
Results for June 2020 Windows 7 patching:
Win7 Home Premium x64:
After the regular image backup, used abbodi86’s script to install the June Rollup KB4561643 and June SSU KB4562030. Took about 10 minutes including the restart and both patches are showing up in Installed Updates.
I’m using primarily Linux Mint these days but I still occasionally need to use Windows 7 online. It’s great to be as up-to-date as possible. Thanks to abbodi86 and PKCano for all your help on this!
Linux Mint Cinnamon 19.2
Group A:
Win7 Pro x64 SP1 Haswell, 0patch Pro, dual boot with Linux
Win7 Home Premium x64 SP1 Ivy Bridge, 0patch Pro, mostly offline
Win 10 Pro x64 v1909 Ivy Bridge, dual boot with Linux -
Feedback: Downloaded respective kb’s for my system from the catalog and disconnected from the internet. I then disabled the AV and other security measures and continued to carried out the whole procedure as instructed above by abbodi86. (May) SSU and dotnet security patch, (June) monthly security and quality patch and SSU
Thank you sir, my reliable and trusty windows 7 lives on until hardware or MS decides.
illegitimi Non Carborundum1 user thanked author for this post.
-
July updates installed successfully with the script. x64 Security [KB4565479 + KB4565539] and Cumulative [KB4565524] and x86 Cumalitive [KB4565524] done so far with no issues.
Latest SSU [KB4565354] installed as well.
Just the .net one to do now.
-
those cab files are WU metadata, not needed for us, they accidentally included them in MU catalog download
—
there is no alternative for ESU_LOCK workaround, except using BypassESU v7
not to be discussed here 🙂1 user thanked author for this post.
-
Yes indeed, that is my experience exactly as the v3.5.1 .NET Security Only (.msu file) installed successfully while the later version of .NET (.exe file, v4.5.2 Security Only in my case) would not install.
Interestingly, I had neither the June nor July SSU installed and the v3.5.1 .NET Security Only update installed just fine using the May SSU.
YMMV, I suppose.
-
It’s not targeting particularly
they put same effort to validate ESU licenses in both Windows and .NET 4 updatesbut the design of Windows updates and WinSxS component store, allowed us to find a way to suppress the validation check
that’s cannot be done with .NET 4 updatesthere are two ways to bypass the validation for .NET 4
1- use external BypassESU hook
2- create administrative installation including the updatesthe first one allow to install .NET 4 updates directly
while the second way require uninstalling .NET 4 Framework, then reinstall the created updated pack -
The built-in workaround in May .NET 4 updates is the one not working anymore
.NET 4 ESU Bypass is external tool, was and still working
1 user thanked author for this post.
-
No. 0Patch pro takes care of any Windows 7 and even 3rd party software, updates.
1 user thanked author for this post.
-
Using the external BypassESU hook works for x86 with all pre-requesits 🙂
however, on x64 with all pre-requesits, it fails 🙁
screenshot of x86 post unhook:
EDIT 21st July: Winx64 .NET update succesful on 2 devices over the w/end, happy days!
Problems controlling W!N10 updates:
https://www.askwoody.com/forums/topic/2000016-guide-for-windows-update-settings-for-windows-10/1 user thanked author for this post.
-
It seems normal events
https://kb.eventtracker.com/evtpass/evtpages/EventId_15007_Microsoft-Windows-HttpEvent_61955.asp1 user thanked author for this post.
-
Successfully installed the Rollup, the SSU, .NET 3.5 on both 32-bit and 64-bit Win7 Pro SP1 using W7ESUI_0.2.
Successfully installed .NET 4.7 (KB4565623 v4.6-4.7.2) onboth32-bitand 64-bitWin7 Pro SP1 using dotNetFx4_ESU_Installer.I created two folders in the root of the C: drive, one for the OS and .NET 3.5 updates, one for the .NET 4.7.2 updates, along with the .cmd that was applicable.
I installed the Rollup, SSU, and .NET 3.5 first, then without rebooting, installed .NET 4.7.2.
After the install completed, I rebooted and verified the successful install.
Removed the install folders from the C: drive.Correction: I was mistaken. On a second inspection, I realize the 64-bit KB4565623 for .NET 4.6-4.7.2 did NOT install.
-
I did not know about dotNetFx4_ESU_Installer. Here is a link to it:
https://host-a.net/f/247682-dotnetfx4esuinstallerzip . You can also find it via a Google search.
1 user thanked author for this post.
-
In my above post, I went into Control Panel → Windows Update → View update history → Installed Updates (which brings me to the same screen as Control Panel → Programs Features → Installed updates) and Under Microsoft .NET Framework, and after following all your helpful steps and advice, the July update is still NOT listed.
I don’t understand where I’m going wrong or what I’m doing wrong. If you don’t mind, could you please check your Installed Updates and/or provide a screenshot of your successful July .NET update install?
-
I notice in your screenshot that you installed the Security and Quality Rollups for all your installed .NET updates, while I have only installed and am trying to install the Security Only .NET update for July (KB4565583).
I wonder if this difference is what may be causing my issue?
It would be helpful if someone else here could try to duplicate the same result.
-
Hi to all.
7ProSP1, I have your same problem while using the script.
I tried to apply Microfix’s advice, but the installation log file still report error 1603.
I’m on a 32 bit machine.
1 user thanked author for this post.
-
On July 23, 2020, update KB4565583 v2 was released to replace v1 for .NET Framework 4.5.2 for Windows 7 SP1 and Windows Server 2008 R2 SP1 and Windows Server 2008 SP2. The v1 update did not install for customers who had certain ESU configurations. The v2 update corrects the issue for customers who could not install the v1 update.
Source: https://support.microsoft.com/en-us/help/4565583/kb4565583
Remember, v1 needed some workarounds v2 may not??
so you’re on your own here at MS-Defcon2
Problems controlling W!N10 updates:
https://www.askwoody.com/forums/topic/2000016-guide-for-windows-update-settings-for-windows-10/1 user thanked author for this post.
-
There were version-2 for all the Win7 .NET updates (Rollup and Security-only, 4.5.2 to 4.8) released on 7/23/2020.
1 user thanked author for this post.
-
-
-
-
A simple path would be any folder 1 or 2 levels deep in the drive’s root directory like c:\DotNet4 or maybe even c:\ESU\DotNet4 but c:\2020-07-DotNet4 would work just fine.
A not so simple path might be a folder several levels deep and include spaces in the folders or sub-folders name(s) like c:\folder name 1\sub-folder name 1\sub-sub-folder name 2\etc-1\etc_2\etc~3
In reality though, a complex folder path will still work just fine only it’ll require a lot more typing setting the administrators command prompt path to the location of the folder containing the extracted “.bat” command file in order to execute it.
-
