News, tips, advice, support for Windows, Office, PCs & more. Tech help. No bull. We're community supported by donations from our Plus Members, and proud of it
Home icon Home icon Home icon Email icon RSS icon
  • Standalone installer script for Windows 7 ESU, regardless the license

    Posted on abbodi86 Comment on the AskWoody Lounge

    Home Forums AskWoody support Windows Windows 7 Win7 beyond End-of-life Standalone installer script for Windows 7 ESU, regardless the license

    • This topic has 14 replies, 10 voices, and was last updated 1 day, 6 hours ago by anonymous.
    Viewing 7 reply threads
    • Author
      • #2209020

        # W7ESUI #

        Automated batch script to install Windows 7 Extended Security Updates, regardless the ESU license and without requiring any eligibility check bypass.

        * Pros:

        – Process the updates from one same location

        – Detect and install servicing stack update first

        – Check required stack installer version for each update

        – Include the Telemetry neutralize tweaks

        – Works with Group A: Monthly Quality Rollup, or Group B: Security Only update / IE11 cumulative update

        * Limitations:

        – SHA2 support updates KB4490628 and KB4474419 are prerequisites for ESU updates.
        Either install them yourself first, or put their msu files with ESU updates files together and the script will install them

        – The script is specifically designed to process ESU updates only.

        while it still can install regular updates, but it has no specific checks or conditions for their prerequisites
        regular updates should be installed normally, manually, using Windows Update, or other tools

        – You must always use the script for any future ESU updates, you cannot install them manually afterwards

        * Download:

        Includes corrections for those downloading using IE11:

        * How to use on live OS:

        Download the ESU updates msu files from Microsoft Update Catalog, following history page or AskWoody Knowledge Base

        a) if you are Group A user, you need:
        latest Servicing Stack Update
        latest Security Monthly Rollup
        latest .NET rollup

        b) if you are Group B user, you need:
        latest Servicing Stack Update
        latest IE11 Cumulative Update
        Security Only Update for each month (e.g. February and March together)
        every .NET Security Only Update (if any)

        Extract W7ESUI.cmd from the zip file, or extract the whole zip file

        Copy or move W7ESUI.cmd and place it next to (in the same folder as) the downloaded msu files
        ini file W7ESUI.ini is not really necessary in this case

        Right-click on W7ESUI.cmd and “Run as administrator”

        If all goes well, you should get cmd window similar to this:

        Now press the zero 0 number on keyboard to start the process

        At the end, restart the system if prompted

        See ReadMe.txt for more details, and how to use the script for offline integration.


        The bypass is mainly meant for installing .NET 4 updates through WU, manual installation works too
        but it has compatibility issue and cause other MSI programs to fail (including KIS 2020 or Office C2R)

        the first installer was merely a simple script for installing .NET 4 updates manually using the ESU_LOCK workaround
        the revived version include temporary self-bypass to work with July updates is the safest approach so far


        REVISED January 2021:
        Comments from 2020 have been archived here – continue posting on this page.

        • This topic was modified 10 months, 1 week ago by abbodi86.
        • This topic was modified 9 months, 2 weeks ago by PKCano.
        • This topic was modified 9 months, 2 weeks ago by PKCano.
        • This topic was modified 9 months ago by PKCano.
        • This topic was modified 2 weeks, 3 days ago by PKCano.
        Total of 38 users thanked author for this post. Here are last 20 listed.
      • #2324873
        AskWoody Plus

        Did you mean W7ESUI_0.2?  W7ESUI_0.2 is the current release.

        • #2324970

          Both work 🙂
          v2 additionaly support installing SHA2 updates (KB4490628/KB4474419) if not already installed

          1 user thanked author for this post.
      • #2326830

        W7ESUI v3

        – Enhanced detection for updates files and KB number (to void issue with files downloaded from MU catalog via IE11)

        9 users thanked author for this post.
      • #2331747

        Here’s your .NET for January, 2021. There were no Security-only .NET updates.

        Download only the update for the version(s) installed on your PC.
        There were only updates for .NET 4.6-4-7-2 and 4.8 (non-Secruity only)
        The other updates in the Rollup are older and should already be installed.

        .NET Quality Rollup KB4598500
        .NET 3.5.1 KB4578952 (Oct 2020)
        .NET 4.5.2 KB4578955 (Oct 2020)
        .NET 4.6 – 4.7.2 KB4597239
        .NET 4.8 KB4597254

        4 users thanked author for this post.
      • #2331826
        AskWoody MVP

        Installed SMQR kb4598279 using W7ESUIv3 (it’s a double restart) and dotNET kb4598500 using dotnetfx4 on x86 Win7 Pro. No problems reported here in event viewer.
        Another clean run, so far, so good 🙂
        Peripherals still to check be updated

        Update: No issues with local Pixma Printer or scanner, SFC – no integrity violations.

        No problem can be solved from the same level of consciousness that created IT- AE
        • This reply was modified 1 week, 4 days ago by Microfix.
        3 users thanked author for this post.
        • #2331856
          Susan Bradley

          KB4598500 is an optional .net – meaning that there is no new security fixes in it.  If you have your system set to not offer up optional updates in the same manner as important updates it’s not shown to you in Important, but rather the Optional section.

          Susan Bradley Patch Lady

          2 users thanked author for this post.
          • #2331861
            AskWoody MVP

            yes I am aware of this as you posted on main blog 🙂

            No problem can be solved from the same level of consciousness that created IT- AE
      • #2336563
        AskWoody Lounger

        Jan. 2021 rollup (KB4598279) and .Net 4.8 update (KB4597254) installed without problems, using version 0.2 script, on both 32-bit desktop and 64-bit laptop.  I define “no problems” as Win loading normally or with a slightly longer 1st restart, and Firefox loading as usual and streaming youtube and basketball games.

        One oddity: all of the entries for previous security monthly quality rollups are missing from the list of installed updates (Control Panel > Programs and Features > view installed updates).  Even the ones prior to Win 7 EOL Jan. 2020.   The servicing stack updates and .Net updates are still listed.   I just noticed this; perhaps this was always true, i.e. a by-product of the rollups or the installer script.

        • #2336564

          Monthly Rollups are chained together, only the latest one show up in the list

          similar to KB2952664 multi versions

      • #2337012
        AskWoody Plus

        My wife’s Win 7 Pro 64-bit SoHo production machine wants to install Malicious Software Removal Tool KB890830 version 5.85 dated Jan 12, 2021.

        Anyone have any problems with it?



        • #2337032
          AskWoody Plus

          KB890830 No problem with that update. It is only released on a 3 monthly basis.

        • #2337038
          Paul T
          AskWoody MVP

          MSR is an additional protection mechanism provided by MS. There is no downside to running it.

          cheers, Paul

      • #2337230

        I have been running MSRT for a long time.  Never any problems with it.  Ran version 5.85 dated Jan 12, 2021 on Jan 15.

    Viewing 7 reply threads

    Please follow the -Lounge Rules- no personal attacks, no swearing, and politics/religion are relegated to the Rants forum.

    Reply To: Standalone installer script for Windows 7 ESU, regardless the license

    You can use BBCodes to format your content.
    Your account can't use Advanced BBCodes, they will be stripped before saving.

This website collects data via Google Analytics. Click here to opt in. Click here to opt out.