|
Patch reliability is unclear, but widespread attacks make patching prudent. Go ahead and patch, but watch out for potential problems. |
Microsoft has thrown a wrench into the last minute Windows 7 ESU updates. Now even though you’ve installed the ESU key and everything “was” ready to g
[See the full post at: Patch Lady – Windows 7 ESU last minute requirement]
Susan Bradley Patch Lady/Prudent patcher
It showed up on WSUS this morning, too, along with all the other 2020/02 updates (but they show as “not needed” for machines without the ESU patch.
No matter where you go, there you are.
To anyone who has purchased updates through any ESU program, as a shareholder of Microsoft I want to apologize for this really not well done, not automatic process. I personally will be calling several businesses that I assisted to obtain these extended security patches and will apologize for having to bother them to get their machines in a condition to get additional updates when I thought I already had them ready to go.
It’s very noble that you are apologizing, Susan; but in fact, it isn’t your fault. Even though you are a Microsoft shareholder, you weren’t in on any decisions at Microsoft as to how to implement this process.
Well maybe one of those big institutional MS investors will step up to complain and the big retirement funds and or even the small investors banding together to have more influence.
Personally I think that MS is missing out on some ESU revenue channels by not making 7’s ESU for a price available to a wider population of Windows 7 end users. But I guess that it’s not easy for anyone at any time past or present to deal with MS and licensing related issues as well as KB’s that appear with no logical notice and instructions or update dependency notifications.
to make Windows update show you updates for both any Windows 7 post ESU security updates *AS WELL AS* the Office updates.
does this mean, without paying for extended support, i won’t even see any office 2010 updates although office 2010 is still supported until later this year (october or something)?
PC: Windows 7 Ultimate, 64bit, Group B
Notebook: Windows 8.1, 64bit, Group B
I have a machine without ESU but with Office 2010. On that machine Windows Update does show the Office updates.
ASRock Beebox J3160 - Win7 Ultimate x64
Asus VivoPC VC62B - Win7 Ultimate x64
Dell Latitude E6430 - Win7 Ultimate x64, Win10 Pro 22H2 x64 (multiboot)
Dell Latitude XT3 - Win7 Ultimate x86
Asus H170 Pro Gaming - Win10 Pro 22H2 x64
I installed (late to the market) KB4538483 on my already ESU licensed W7 Pro x64 laptop. No problem.
I checked for updates, via WU, and found Rollup KB4537820 and MRT KB890830. Installed both, rebooted and no problems.
Finally, checked for updates again and found SSU KB4537829. Installed, no issues.
I gather this proves that my ESU license works.
this new KB4537829 SSU enforces new updates like KB4537820 to check for a valid ESU license and whether or not KB4538483 is installed and KB4537820 will fail to install with “Failure to configure Windows updates. Reverting Changes.” message unless all conditions are met.
Has anyone confirmed they will not update without this patch?
I didn’t get the needed Windows 7 updates without this additional patch. If you haven’t opted into the ESU program then you’ll probably still get the Office updates.
Susan Bradley Patch Lady/Prudent patcher
Ghacks: It appears that the Windows 7 ESU Bypass is indeed working
A bypass to use ESU-only patches on Home machines — basically any machine that has not joined the program officially — was discovered and published in December 2019. The bypass worked with the test ESU patch that Microsoft released but it was not clear back then if it would also work with “real” patches.
Now that the first post-Windows 7 support patch has been released, confirmations are coming in that the bypass is indeed working…
https://www.ghacks.net/2020/02/13/it-appears-that-the-windows-7-esu-bypass-is-indeed-working/
Quick one to say that KB4538483 showed up in WSUS, and was automatically approved and deployed by SCCM for our environment. No manual deployment necessary.
I’ve been thinking, Susan
once Win7 users paid for the ESU licenses, manually downloaded & installed the KB4538483 update and have successfully installed the Feb. 2020 updates, do they need to remove KB4538483 afterwards or should they keep the KB4538483 update installed in order to receive new updates in the upcoming months beyond this month?
that is something to think about
KB4538383 is now like the SHA2 support updates (KB4490628 & KB4474419), it’s baseline to get further updates through WU
Windows Update ESU Prerequisite Hierarchy
Winmgmt service not disabled
|
supported ESU editions
|
ESU key activated
|
ESU Preparation update KB4538483 installed
|
January SSU KB4536952 or later installed
thanks abbodi86.
perhaps Susan should explicitly state that Win7 users should manually download & install the KB4538483 update AND to not remove it
Opatch has it’s first Windows 7 micropatch- page with instructions-
https://blog.0patch.com/2020/02/our-first-weeks-of-securing-windows-7.html
Donations from Plus members keep this site going. You can identify the people who support AskWoody by the Plus badge on their avatars.
AskWoody Plus members not only get access to all of the contents of this site -- including Susan Bradley's frequently updated Patch Watch listing -- they also receive weekly AskWoody Plus Newsletters (formerly Windows Secrets Newsletter) and AskWoody Plus Alerts, emails when there are important breaking developments.
