• How to install post-SP1 Security-Only updates?

    Home » Forums » AskWoody support » Windows » Windows 7 » Questions: Windows 7 » How to install post-SP1 Security-Only updates?


    Ok, I need your help now!

    My company has several Win 7 workstations that have never been updated since SP1. The reason is that they run an expensive and complex software which could suffer incompatibilities with some Windows updates.

    Anyway, they are connected to the company network and so I don’t think it’s a wise choice, especially if you think that the software supplier released a list of (1,000+) supported KBs till August 2017. So, we decided to update respecting the following restriction: install Security-Only updates that fits also the list of supplier-supported KBs.


    The problem is: Windows Update only shows monthly rollups, so I can’t use it for my purpose.

    I checked this page to retrieve the list of SecOnly updates, but it only goes back to 2016/07, while the Group B list starts from the 2016/10 “patchocalypse”. So, how can I know which updates the machines need?

    Is there maybe an offline tool that is capable of downloading the whole list of updates since SP1 and then separate Security and Quality updates?

    Thanks in advance.


    Viewing 2 reply threads
    • #191432

      use autopatcher


      “download once & then use on many machines”

      download the program & select what you want to update on your machine.  then put that on your flash drive, including the program, and then you can run it on your PC & it will tell you what needs to bring it up to the “patchocalypse”

      then choose what M$ has to offer after that, check on this site first to see what is safe to patch thou  😉

      have a good 1 🙂 cheers

      2 users thanked author for this post.
    • #191438

      Start by hiding the telemetry patches (see the top of AKB2000003).

      Then, hide the Rollups, starting with the current one. Search for updates, hide the next current one, search, hide…. until you hide the Oct 2016 Rollup (that was the beginning of the patchoclypse).
      Once you have the Rollups hidden, search for updates and you should have available the list of old Patches to compare to your software supplier list. You should probably check the optional updates list as well as the important list, as some of the permissible patches may be there. You will need to install/recheck for updates until you have all you need.
      For security-only patches after Oct 2016, you can use AKB2000003. The links are direct download links to the MS Catalog, so they are always current.

      Another alternative is Windows Update Mini Tool (WUMT) used by many on this site. It is an offline updater.


      3 users thanked author for this post.
    • #191448

      Thanks to both of you! I’ll try your solutions to catch the differences.

      Just one note: WUMT in Offline Mode uses wsusscn2.cab. It “contains metadata from the following classifications: security updates, update rollups, and service packs”. When I check for updates, WUMT only shows me Security Updates, so it seems good for my purpose, doesn’t it?


    Viewing 2 reply threads
    Reply To: How to install post-SP1 Security-Only updates?

    You can use BBCodes to format your content.
    Your account can't use all available BBCodes, they will be stripped before saving.

    Your information: