![]() |
MS-DEFCON 2:
Patch reliability is unclear. Unless you have an immediate, pressing need to install a specific patch, don't do it.
|
-
Installing Win updates on Win 7 or 8.1 computers with Kaby Lake or Ryzen CPUs
Home › Forums › AskWoody support › Windows › Installing Win updates on Win 7 or 8.1 computers with Kaby Lake or Ryzen CPUs
This topic contains 24 replies, has 7 voices, and was last updated by
anonymous 2 years, 6 months ago.
-
AuthorPosts
-
Here is my summary of radosuaf’s method for installing Windows updates on Windows 7 or 8.1 computers with Kaby Lake or Ryzen CPUs:
Steps that should be done when you wish to manually install updates with Windows Update or standalone Windows update file(s):
(Note: The recent Shadow Brokers code dump has made it clear how important it is to always have the patch for MS17-010 applied.)
Group A:
1. (This step should need to be done only once.) Uninstall all security-only updates (from October 2016 and later) except for the March 2017 security-only update (if it’s installed), and then reboot if asked to. To see a list that includes all of the security-only update knowledge base numbers, see https://www.askwoody.com/forums/topic/2000003-ongoing-list-of-group-b-monthly-updates-for-win7-and-8-1/.
2. If a monthly rollup from April 2017 or later is installed, or a preview monthly rollup from March 2017 or later is installed, uninstall it and reboot if asked to.
3. Repeat step 2 as many times as needed.
4. (This step should need to be done only once.) Install the March 2017 security-only update if it’s not already installed. Reboot if asked to. For links to this update, see https://www.askwoody.com/forums/topic/2000003-ongoing-list-of-group-b-monthly-updates-for-win7-and-8-1/.
5. Install all desired update(s) except monthly rollups or security-only updates. Reboot if asked to.
6. Install the desired monthly rollup. Reboot if asked to.
Group B:
1. Uninstall the security-only updates that have the “lock” and then reboot if asked to. As of June 2017, these security-only updates have the “lock”: April 2017 and June 2017.
2. Install all desired updates except for security-only updates that have the “lock,” and reboot if asked to.
3. Install the security-only update(s) that you uninstalled in step 1, rebooting only after the final update that you installed.
-
Can you test to see if dism /add-package with cab file works on blocked system? thanks
And MrBrian replied
Result: package successfully added ?
-
Nice to know it works :). I’m on Skylake so that might apply to me since June or July as well. I’d just add a 1st point to set WU to “Never check for updates” – just to be sure :).
MSI H110 PC MATE * Intel Core i5-6402P * 2 x 8 GB Corsair Vengeance LPX DDR4 2133 MHz * Aorus Radeon RX 570 4GB * Samsung 840 EVO 250GB SSD * Western Digital Blue 1TB HDD * Seagate Barracuda 1TB HDD * DVD RW Lite-ON iHAS 124 * Creative X-Fi XtremeGamer PCI * Windows 10 Pro 1909 64-bit -
A different method that might work for VirtualBox virtual machines: https://www.askwoody.com/forums/topic/for-you-testers-heres-how-to-spoof-a-kaby-lake-processor-inside-a-virtualbox-win7-vm/#post-108402. I’m still looking for feedback on whether it works or not.
-
I found a purported user report that this works: https://forums.virtualbox.org/viewtopic.php?f=2&t=82299#p390709.
-
-
There is some confusion about why I included step 3 in the Group A instructions. The reason is that after uninstalling a given monthly rollup, your computer might have an older monthly rollup that still is recent enough that it contains the CPU blocking code. Example: Suppose you installed the April 2017 monthly rollup in April, and the May 2017 monthly rollup in May. When you uninstall the May 2017 monthly rollup and reboot, the April 2017 monthly rollup may still be present.
-
Hi MrBrian,
how were you able to install the May Rollup with April’s CPU blocking in place? 🙂
-
Using the method in this topic (hopefully) :).
-
This means you uninstalled the April Rollup first. 🙂
-
Correct :).
-
But…then you don’t have April’s and May’s blocking installed – only May’s. 🙂
-
Correct :). And when it’s time to install the June 2017 updates, temporarily uninstall the May 2017 monthly rollup. And when it’s time to install the July 2017 updates….
-
Sure, but you’re never in the situation of having to remove two blocking rollups at once. 🙂
-
@Volume Z: For Group A, no. For Group B, in the future there might be more than one security-related update with the CPU blocking code, although there is only one at this time.
-
You can’t have several of those installed either, because the blockage won’t let you run the Standalone Installer. 🙂
-
True, but the code might not go into effect until a reboot, and before the reboot multiple CPU blocking updates can be installed.
-
-
-
-
-
-
New solution for the block if anybody’s interested – seems to solve the problem permanently :
https://github.com/zeffy/wufuc
MSI H110 PC MATE * Intel Core i5-6402P * 2 x 8 GB Corsair Vengeance LPX DDR4 2133 MHz * Aorus Radeon RX 570 4GB * Samsung 840 EVO 250GB SSD * Western Digital Blue 1TB HDD * Seagate Barracuda 1TB HDD * DVD RW Lite-ON iHAS 124 * Creative X-Fi XtremeGamer PCI * Windows 10 Pro 1909 64-bit -
If anybody has an affected processor and also uses the Group B update strategy, please report if this method still works for the Group B June 2017 updates.
-
anonymous“Group B is wrong for you and for 99% of the users here, regardless of what they believe.”
You are presuming to know the capabilities, background, experience, motives and rationale of users who frequent these threads. Also, at least in my world (gray beards), one should be careful when professing such expertise.
Many people, for example, use Ultimate in their home office while using Enterprise/Edu SKUs in their data center(s) and that includes road warriors, IT contractors, etc. Others might value privacy above all else (and some people, including me, never use social media because of this.)
Edit for content
Please follow the –Lounge Rules– no personal attacks, no swearing, and politics/religion are relegated to the Rants forum. -
More information about this alternative method: How to use DISM to install a hotfix from within Windows
1 user thanked author for this post.
-
@Mr. Brian:
I’m getting dizzy trying to keep up with all of the various instructions from different ppl. It’s all too much for me. I think I’ll just try to forget the “headache” of trying to keep up with and understand what’s the ONLY method to use to overcome this untenable situation??
Thank you to all who have the capability and the expertise to come up with solutions. Kudos to you all!! I am more totally “lost” than ever (if that’s possible). 🙁
-
The easy and only reliable method to have your computer in good shape is to use Windows Update.
Forget about anything that other people say here and use Windows Update to install ALL updates available, checked or not by default only when Woody says it is OK to install for that month.
Do not reinvent the wheel as a lot of other people seem to be fond of, just use the proven and reliable method of updating.
Group B is wrong for you and for 99% of the users here, regardless of what they believe.
Although technically correct, Group B is only for those using Enterprise solutions for updating and not for anyone else. -
@ch100: Thank you for the information you sent relevant to the Group A vs Group B. I am leaning more and more towards doing as you have suggested because I do not have the knowledge or skills required for the Group B approach. I’m at an impasse presently due to personal problems, however I have given your advice much thought, in the past, as well as again presently. As much as I dislike being forced into Group A, it’s just not worth the tremendous amount of time, and frustration that is facing those who attempt to follow Group B. Thank you once again for taking the time to present what I am beginning to think of as the “common sense” approach. Your computer skills, knowledge, and expertise are admirable and sharing this is very much appreciated. 🙂
-
AuthorPosts
-
-
Welcome to our unique respite from the madness.
It's easy to post questions about Windows 10, Win8.1, Win7, Surface, Office, or browse through our Forums. Post anonymously or register for greater privileges. Keep it civil, please: Decorous Lounge rules strictly enforced. Questions? Contact Customer Support.

Plus Membership
Donations from Plus members keep this site going. You can identify the people who support AskWoody by the Plus badge on their avatars.
AskWoody Plus members not only get access to all of the contents of this site -- including Susan Bradley's frequently updated Patch Watch listing -- they also receive weekly AskWoody Plus Newsletters (formerly Windows Secrets Newsletter) and AskWoody Plus Alerts, emails when there are important breaking developments. Click here for details and to sign up.
Search The Lounge
Recent Replies
Charlie on Firefox 71.0 – Is it safe or not?
29 minutes agowilson123 on VirtualBox Install Issue
49 minutes agoSpeccy on OK Google. Say where is the taxi stand in Portuguese.
1 hour, 2 minutes agocmptrgy on Revert back to Win7 then install Win10
1 hour, 42 minutes agoOscarCP on Worth considering: 0patch for Win7 after January 2020
1 hour, 47 minutes agoCWBillow on Root folder rights
2 hours, 34 minutes agoCybertooth on HP all-in-one printer in Mint
4 hours, 22 minutes agoEyesOnWindows on OK Google. Say where is the taxi stand in Portuguese.
5 hours, 11 minutes agoEyesOnWindows on OK Google. Say where is the taxi stand in Portuguese.
5 hours, 55 minutes agoAJNorth on Worth considering: 0patch for Win7 after January 2020
6 hours, 29 minutes agoSlowpoke47 on HP all-in-one printer in Mint
6 hours, 45 minutes agoCthru on Imported extra pst
7 hours, 44 minutes agoSlowpoke47 on HP all-in-one printer in Mint
8 hours, 4 minutes agoSlowpoke47 on HP all-in-one printer in Mint
8 hours, 13 minutes agoCybertooth on HP all-in-one printer in Mint
8 hours, 17 minutes agoSlowpoke47 on HP all-in-one printer in Mint
8 hours, 27 minutes agoCharlie on Firefox 71.0 – Is it safe or not?
8 hours, 29 minutes agoSlowpoke47 on HP all-in-one printer in Mint
8 hours, 38 minutes agojburk07 on New to Macrium – how to best configure
8 hours, 42 minutes agoanonymous on HP all-in-one printer in Mint
8 hours, 45 minutes agoGeo on Worth considering: 0patch for Win7 after January 2020
8 hours, 48 minutes agowavy on OK Google. Say where is the taxi stand in Portuguese.
8 hours, 57 minutes agoCharlie on OK Google. Say where is the taxi stand in Portuguese.
9 hours, 2 minutes agoAscaris on HP all-in-one printer in Mint
9 hours, 21 minutes agojabeattyauditor on OK Google. Say where is the taxi stand in Portuguese.
9 hours, 29 minutes agoNightOwl on HP all-in-one printer in Mint
9 hours, 30 minutes agoCybertooth on HP all-in-one printer in Mint
9 hours, 31 minutes agoKirsty on Do not use the extended visual toolbar button to change the text color.
9 hours, 43 minutes agogeek on Know problems with Win10 version 1909
10 hours, 44 minutes agoSlowpoke47 on HP all-in-one printer in Mint
10 hours, 46 minutes ago
Recent Topics
-
Is a Firefox Account good to have?
50 minutes ago
-
Windows Defender False Positives?
3 hours, 8 minutes ago
-
New Orleans Declared A State of Emergency After Cyber Attack
10 hours, 39 minutes ago
-
Distibuted Comm error 10016
11 hours, 3 minutes ago
-
Uploading Files to Virus Total (and like) maybe dangerous
11 hours, 34 minutes ago
-
Do not use the extended visual toolbar button to change the text color.
9 hours, 43 minutes ago
-
Screen goes black – computer beeps
20 hours, 51 minutes ago
-
Login Password Windows 10
1 day, 2 hours ago
-
3 monitor Gaming set up Borked by Win update 1909
1 day, 7 hours ago
-
Printer goes offline
1 day, 13 hours ago
-
OK Google. Say where is the taxi stand in Portuguese.
1 hour, 2 minutes ago
-
Microsoft "Boosters"
21 hours, 39 minutes ago
-
Updating a New Lenovo Yoga C740-14 with Windows 10 Home 64
1 day, 17 hours ago
-
Corrupt Recycle Bin?
1 day, 11 hours ago
-
Set date in user form with date field
1 day, 21 hours ago
-
Is there a way to check the pending updates for Windows 10 1909?
17 hours, 47 minutes ago
-
How to configure Windows Update for Win10 1909?
2 days, 5 hours ago
-
TAP-Windows Adapter V9 — can I change the interface speed higher than 10 Mbps
1 day, 5 hours ago
-
Help with convert to hWind
20 hours, 3 minutes ago
-
Switching active apps to access mouse
2 days, 8 hours ago
-
Avidemux and Win 10 1909
2 days, 7 hours ago
-
Buying Win7 Extended Security won’t get you MS Security Essentials updates. Or will it?
1 day ago
-
Windows updates won't install
1 day, 21 hours ago
-
Imported extra pst
7 hours, 44 minutes ago
-
DeskTop Reluctant to Upgrade, 1903 to 1909
3 days, 6 hours ago
-
Lost Internet Connections on Windows 7 SP1 PC
2 days, 2 hours ago
-
Foley: This is how Microsoft’s Azure organization makes Windows
1 day, 10 hours ago
-
Microsoft Outlook in Windows 10 disappears when minimized
3 days, 2 hours ago
-
Random Shut Down of Edge
3 days, 11 hours ago
-
Reported problem with Drive Mappings after installing this month’s Win10 1909 cumulative update, KB 4530684
2 days, 7 hours ago
Search for Topics
Recent blog posts
- OK Google. Say where is the taxi stand in Portuguese.
- Buying Win7 Extended Security won’t get you MS Security Essentials updates. Or will it?
- Foley: This is how Microsoft’s Azure organization makes Windows
- Reported problem with Drive Mappings after installing this month’s Win10 1909 cumulative update, KB 4530684
- Installing November’s Win7 Servicing Stack Update KB 4523206 may lock up your PC
- Windows Server 2012 (not R2) goes into reboot loop after installing .NET patch KB 4533096
- December 2019 Patch Tuesday foibles and quibbles
- December 2019 Patch Tuesday running commentary
Copyright © 2019 AskWoody LLC. All rights reserved.