How to install post-SP1 Security-Only updates?

Topic

New Reply

Ok, I need your help now!

My company has several Win 7 workstations that have never been updated since SP1. The reason is that they run an expensive and complex software which could suffer incompatibilities with some Windows updates.

Anyway, they are connected to the company network and so I don’t think it’s a wise choice, especially if you think that the software supplier released a list of (1,000+) supported KBs till August 2017. So, we decided to update respecting the following restriction: install Security-Only updates that fits also the list of supplier-supported KBs.

 

The problem is: Windows Update only shows monthly rollups, so I can’t use it for my purpose.

I checked this page to retrieve the list of SecOnly updates, but it only goes back to 2016/07, while the Group B list starts from the 2016/10 “patchocalypse”. So, how can I know which updates the machines need?

Is there maybe an offline tool that is capable of downloading the whole list of updates since SP1 and then separate Security and Quality updates?

Thanks in advance.

-Andrea

Reply | Quote

Replies

use autopatcher

http://www.autopatcher.net/

“download once & then use on many machines”

download the program & select what you want to update on your machine.  then put that on your flash drive, including the program, and then you can run it on your PC & it will tell you what needs to bring it up to the “patchocalypse”

then choose what M$ has to offer after that, check on this site first to see what is safe to patch thou  😉

have a good 1 🙂 cheers

2 users thanked author for this post.

Sheldon88, columbia2011

Reply | Quote

Start by hiding the telemetry patches (see the top of AKB2000003).

Then, hide the Rollups, starting with the current one. Search for updates, hide the next current one, search, hide…. until you hide the Oct 2016 Rollup (that was the beginning of the patchoclypse).
Once you have the Rollups hidden, search for updates and you should have available the list of old Patches to compare to your software supplier list. You should probably check the optional updates list as well as the important list, as some of the permissible patches may be there. You will need to install/recheck for updates until you have all you need.
For security-only patches after Oct 2016, you can use AKB2000003. The links are direct download links to the MS Catalog, so they are always current.

Another alternative is Windows Update Mini Tool (WUMT) used by many on this site. It is an offline updater.

 

3 users thanked author for this post.

walker, Elly, Sheldon88

Reply | Quote

Thanks to both of you! I’ll try your solutions to catch the differences.

Just one note: WUMT in Offline Mode uses wsusscn2.cab. It “contains metadata from the following classifications: security updates, update rollups, and service packs”. When I check for updates, WUMT only shows me Security Updates, so it seems good for my purpose, doesn’t it?

-Andrea

Reply | Quote

You can also choose to include superseded to get all of the older updates.

Reply | Quote