We're community supported and proud of it!
|
MS-DEFCON 2:
Patch reliability is unclear. Unless you have an immediate, pressing need to install a specific patch, don't do it.
|
-
Standalone installer script for Windows 7 ESU, regardless the license
Posted on Comment on the AskWoody Lounge- This topic has 101 replies, 18 voices, and was last updated 11 hours, 28 minutes ago.
Viewing 38 reply threads-
-
# W7ESUI #
Automated batch script to install Windows 7 Extended Security Updates, regardless the ESU license and without requiring any eligibility check bypass.
* Pros:
– Process the updates from one same location
– Detect and install servicing stack update first
– Check required stack installer version for each update
– Include the Telemetry neutralize tweaks
– Works with Group A: Monthly Quality Rollup, or Group B: Security Only update / IE11 cumulative update
* Limitations:
– SHA2 support updates KB4490628 and KB4474419 are prerequisites for ESU updates.
Either install them yourself first, or put their msu files with ESU updates files together and the script will install them– The script is specifically designed to process ESU updates only.
while it still can install regular updates, but it has no specific checks or conditions for their prerequisites
regular updates should be installed normally, manually, using Windows Update, or other tools– You must always use the script for any future ESU updates, you cannot install them manually afterwards
* Download:
Includes corrections for those downloading using IE11:
https://github.com/abbodi1406/WHD/raw/master/scripts/W7ESUI_0.3.zip* How to use on live OS:
– Download the ESU updates msu files from Microsoft Update Catalog, following history page or AskWoody Knowledge Base
a) if you are Group A user, you need:
latest Servicing Stack Update
latest Security Monthly Rollup
latest .NET rollupb) if you are Group B user, you need:
latest Servicing Stack Update
latest IE11 Cumulative Update
Security Only Update for each month (e.g. February and March together)
every .NET Security Only Update (if any)– Extract W7ESUI.cmd from the zip file, or extract the whole zip file
– Copy or move W7ESUI.cmd and place it next to (in the same folder as) the downloaded msu files
ini file W7ESUI.ini is not really necessary in this case– Right-click on W7ESUI.cmd and “Run as administrator”
– If all goes well, you should get cmd window similar to this:
– Now press the zero 0 number on keyboard to start the process
– At the end, restart the system if prompted
See ReadMe.txt for more details, and how to use the script for offline integration.
******************************
******************************The bypass is mainly meant for installing .NET 4 updates through WU, manual installation works too
but it has compatibility issue and cause other MSI programs to fail (including KIS 2020 or Office C2R)the first installer was merely a simple script for installing .NET 4 updates manually using the ESU_LOCK workaround
the revived version include temporary self-bypass to work with July updatesdotNetFx4_ESU_Installer_r.zip is the safest approach so far
https://host-a.net/f/252903-dotnetfx4esuinstallerrzip
******************************
******************************REVISED January 2021:
Comments from 2020 have been archived here – continue posting on this page.-
This topic was modified 1 year ago by
.
-
This topic was modified 12 months ago by
.
-
This topic was modified 12 months ago by
-
This topic was modified 11 months, 2 weeks ago by
-
This topic was modified 3 months ago by
Total of 38 users thanked author for this post. Here are last 20 listed.
-
This topic was modified 1 year ago by
-
-
Both work 🙂
v2 additionaly support installing SHA2 updates (KB4490628/KB4474419) if not already installed1 user thanked author for this post.
-
-
Here’s your .NET for January, 2021. There were no Security-only .NET updates.
Download only the update for the version(s) installed on your PC.
There were only updates for .NET 4.6-4-7-2 and 4.8 (non-Secruity only)
The other updates in the Rollup are older and should already be installed..NET Quality Rollup KB4598500
.NET 3.5.1 KB4578952 (Oct 2020)
.NET 4.5.2 KB4578955 (Oct 2020)
.NET 4.6 – 4.7.2 KB4597239
.NET 4.8 KB4597254-
-
October 2020.
1 user thanked author for this post.
-
-
-
Installed SMQR kb4598279 using W7ESUIv3 (it’s a double restart) and dotNET kb4598500 using dotnetfx4 on x86 Win7 Pro. No problems reported here in event viewer.
Another clean run, so far, so good 🙂
Peripherals still to check over..to be updatedUpdate: No issues with local Pixma Printer or scanner, SFC – no integrity violations.
W10, the itch you simply cannot scratch!3 users thanked author for this post.
-
KB4598500 is an optional .net – meaning that there is no new security fixes in it. If you have your system set to not offer up optional updates in the same manner as important updates it’s not shown to you in Important, but rather the Optional section.
Susan Bradley Patch Lady
-
-
-
-
-
-
-
I will continue to post this information in this thread as of 2/9/2021.
AKB 2000003 has been updated for Group B Win7 (ESU) and Win8.1 on February 9, 2021.
There is a Security-only Update for those with Win7 ESU subscriptions.
There was no February IE11 CU for Win7.February Rollup KB4601347 Download 32-bit or 64-bit for those with Win7 ESU subscriptions.
You must have at least the August Servicing Stack KB4570673 previously installed to receive these updates).
The latest is the December Servicing Stack KB4592510 – Download 32-bit or 64-bit for those with Win7 ESU subscriptions.There is a revised Licensing Preparation Package KB4575903 dated 7/29/2020 for Win7 ESU subscriptions, if you need it.
There are .NET updates listed for Win7. See #2342225.
5 users thanked author for this post.
-
Here’s your .NET for February, 2021. There were Security-only .NET updates.
Download only the update for the version(s) installed on your PC.
There were only updates for .NET 4.6-4-7-2 and 4.8
The other updates in the Rollups are older and should already be installed. -
I’ve been installing the .NET 3.5.1 & 4.7 updates from the .NET Quality Rollup. Can I switch to installing the .NET 3.5.1 & 4.7 updates from the Security-only Quality Rollup without breaking anything?
-
The SOs are a part of the Rollups. But SOs by themselves are NOT cumulative.
You can install the SOs whenever you want, but if you have installed the Rollup of the same date, you already have that SO and any SO that came before b/c the Rollups are cumulative.1 user thanked author for this post.
-
-
-
It’s created with each new installed Monthly Rollup
1 user thanked author for this post.
-
-
-
-
-
-
-
-
Just to let everyone know that on two Win 7 Pro 64-bit machines I successfully installed
in the W7ESUI:
KB4601347in the dotNetFx4_ESU:
KB4600944As PKCano pointed out, although I also put the KB4578952 installation file in the W7ESUI, it was ignored because it is just a regurgitation of the same file from before.
(Doing these updates is important for the production machine in my wife’s SoHo, a Dell Optiplex 780 I bought used on eBay seven years ago. But although she acknowledges my taste for keeping junky old computers running, she plans to throw it out and get an iMac. Oh well …)
Thanks again, and cheers!
1 user thanked author for this post.
-
-
-
-
With the advent of DEFCON-4 on Feb. 28 I installed the following on two Win 7, SP 1, x64 machines.
Using W7ESUI:
Feb Rollup KB4601347
Using dotNetFx4_ESU_Installer
Feb .NET 4.8 KB4600944
1 user thanked author for this post.
-
-
I tried to install ndp48-kb4600944-x64_20a6a012e02c9d905f6f3a24850f1218bc849a26.exe…
Per the message you’re getting from the script, it’s looking for a file that starts “ndp45…” and per your statement above, you’re putting a file that starts with “ndp48…” in the folder.
Also, the update you’re trying to install is only for .NET version 4.8 and not for any other versions.
From the sounds of the installer script’s error message, you might have .NET version 4.5 on your system instead of 4.8. If that is indeed the version you have, then the last update released for it was back in October of last year, KB4578955, so you don’t need to worry about an update for .NET this month. 🙂
1 user thanked author for this post.
-
-
-
Before you can install an update, you have to have .NET 4.5.2 installed on your PC.
If you do not know if .NET 4.5.2 is installed on your computer, download the .NET version checker mentioned here to find the version of .NET installed on your computer.
If you do not have v4.5.2 already installed, download the .NET 4.5.2 installer from Microsoft and install it. It will not be up to date.
If you have the ESU subscription, you should receive the update through Windows Update.If you do not have the ESU subscription, to install the update, create a folder on your C: drive and unzip dotNetFx4_ESU_Installer_r.zip into the folder.
Download KB4578955 from the MS Catalog (link in #2342225 above) and place it in the same folder.
In an elevated command prompt (right click on cmd.exe and “Run as Administrator) right click on the .cmd file in the folder and “Run as Administrator. Follow the instructions.1 user thanked author for this post.
-
-
You can probably install the .NET 4.5.2, and any updates for it up to and including Jan. 2020 using Windows Update.
But after Jan 2020, WIn7 is EOL and you cannot install any of the later updates without either the ESU or circumventing the EOL with abbodi86 ‘s script. They will not install in Win7 EOL.
1 user thanked author for this post.
-
-
-
-
-
-
-
The .NET 4.8 installer can be downloaded from Microsoft.
Win7 is EOL. The same restrictions will apply as for .NET 4.5.2 in #2347965 above. It will not be up to date.You will be able to install updates up to , and including, Jan 2020 using Windows Update. For updates after Jan 2020, including KB4600944, you will need to have the ESU subscription or you will need to use @abbodi86 ‘s bypass mentioned at the top of this thread.
A word of caution.
Although you can install .NET 4.8 on Win7, it is better to use one of the earlier versions of .NET. (4.5.2, 4.6-4.7.2 Unless you have software that specifically needs .NET 4.8, I wouldn’t worry about installing it.1 user thanked author for this post.
-
-
If you already have .NET 4.8 installed, and you have no problems with it, then keep it as is.
Information about the updates still goes.1 user thanked author for this post.
-
-
-
-
-
-
-
I will continue to post this monthly information in this thread as of 2/9/2021.
AKB 2000003 has been updated for Group B Win7 (ESU) and Win8.1 on March 9, 2021.
There is a Security-only Update for those with Win7 ESU subscriptions.
There is a March IE11 CU KB5000800 for Win7. Download 32-bit or 64-bit.March Rollup KB5000841 Download 32-bit or 64-bit. for those with Win7 ESU subscriptions.
You must have at least the August Servicing Stack KB4570673 previously installed to receive these updates).
The latest is the December Servicing Stack KB4592510 – Download 32-bit or 64-bit for those with Win7 ESU subscriptions.There is a revised Licensing Preparation Package KB4575903 dated 7/29/2020 for Win7 ESU subscriptions, if you need it.
There are .NET updates listed for Win7. See #2349123.
****UPDATE: On 3/22/2021, Microsoft released a fix for printer issues caused by the March Patch Tuesday updates.
Out-of-Band update KB5001639 – Download 32-bit or 64-bit -
Here’s your .NET for March, 2021. There were no Security-only .NET updates.
Download only the update for the version(s) installed on your PC.
NOTE: Updates for v3.5.1 are older (Oct 2020) and should already be installed.
Updates for v5.2, v4.6 – 4.7.2 and v4.8 have been re-signed as version 2 and should be installed.-
2021-03 Security and Quality Rollup for .NET Framework for Windows 7 (KB4579977)
2021-03 Security and Quality Rollup for .NET Framework for Windows 7 (KB4603002)all .NET 4.x updates (including 4.5.2) were re-signed and bumped version, for both Rollups
-
indeed they were, well spotted 😉
no initial problems here SFC in tact /event viewer-no errors/no additional telemetry
W10, the itch you simply cannot scratch!1 user thanked author for this post.
-
-
-
-
No need if v1 of both are already installed
otherwise, just install kb4600945 v2
1 user thanked author for this post.
-
-
You don’t need that
kb4578963 v2 is ment for Windows 7 Embedded family1 user thanked author for this post.
-
-
-
-
-
-
Installed at any time or skipped.
Susan Bradley Patch Lady
1 user thanked author for this post.
-
-
Win7 HP x64, W7ESUI_0.2
Installed;
- Jan – March 2021 SO updates (KB 4598289, KB 4601363, KB 5000851)
- Mar 2021 (IE11) – KB 5000800
No problems to report.
Thanks,all.
1 user thanked author for this post.
-
Heads Up!
For those who are having issues with printers post March SO/CU updates for Win7/ Windows Server 2008 R2 SP1
MSFT have released OoB updates kb5001639 for x86 and x64 versionsavailable from the catalog:
https://www.catalog.update.microsoft.com/Search.aspx?q=kb5001639MSFT documentation: kb5001639
W10, the itch you simply cannot scratch!-
AKB2000003 has been updated for both Win7 and Win8.1.
5 users thanked author for this post.
-
-
-
I have helped several with a new Win7 install. This information may be of some help to you.
Because there are several prerequisites along the install route, and because the updates associated with Meltdown/Spectre caused so much trouble, the installation was done in segments.
You can get Win7 up to date as of Jan 2020 EOL using Windows Update, but it is wise to to it in steps as described in Any advice on how to safely update a new Win7 installation. The outlined steps begin at #1982141, but it would probably be a good idea to read through the whole thing to understand the method used.
After your reach Jan 2020 updates, see the instructions at the top of this thread and #2349121 above to use the installer scripts for ESU updates. If you use the Rollups, they are cumulative, Security-only patches are not. The Rollups contain the IE11 CUs, so you do not need to install them separately, but be aware of the prereq’s (read “before installing this update” here).Another similar thread for navigating a clean install is #1907521.
-
-
I assume DEFCON-3 applies to these Win7 updates. Therefore I have a question.
Do both kb5000841 and kb5001639 go into the folder with W7ESUI.cmd at the same time, or does each need to be run separately (in sequence), or is only the later update, KB5001639, needed?
1 user thanked author for this post.
-
-
With the DEFCON System moving to DEFCON-4 I installed the following on two Win 7, SP 1, x64 machines yesterday (Mar. 27).
Using W7ESUI:
Mar. Rollup KB5000841
Mar. Rollup fix KB5001639
Using dotNetFx4_ESU
Mar. .NET 4.8 KB4578977
Mar. .NET 4.8 KB4600944
No problems to report as of late today (Mar. 28).
-
-
-
All worked for me – see screenshots.
The SO, OOB< and IE11 CU download links are available from AKB2000003.1 user thanked author for this post.
-
-
-
-
-
-
-
kb4592510 SSU Dec 2020 and attempted to install dotNET 4.5.2 kb4578955, failed
Although I just installed March 2021 kb4578955 v2 without issue. Yeah I know it’s not a NET security update but has the security within AFAIK (Originally from an image at EOL Feb 2020)
this is what I done from EOL image resurrection:SSU Jul 2020 ( manual restart)
ESU LLP Jul 2020 (manual restart)
SSU Dec 2020 (manual restart)
SMQR CU Feb 2021 (double restart)
.NET Oct 2020 kb4578955 Failed
.NET Mar 2021 kb4578955 v2 (manual restart)
All ok with no violationsEdit: All .NET 3.5.1 patches installed also.
W10, the itch you simply cannot scratch! -
Like i said, SSUs has no affect on .NET 4.x updates at all 🙂
regarding the failed installation, it’s digital signature issue, thus they created v2
see the “Known issues”
http://support.microsoft.com/kb/4578955
-
-
-
AKB 2000003 has been updated for Group B Win7 (ESU) and Win8.1 on April 13, 2021.
There is a Security-only Update for those with Win7 ESU subscriptions.
There was no April IE11 CU for Win7.April Rollup KB5001335 Download 32-bit or 64-bit. for those with Win7 ESU subscriptions.
You must have at least the August Servicing Stack KB4570673 previously installed to receive these updates).
The latest is the December Servicing Stack KB4592510 – Download 32-bit or 64-bit for those with Win7 ESU subscriptions.There is a revised Licensing Preparation Package KB4575903 dated 7/29/2020 for Win7 ESU subscriptions, if you need it.
There were no new .NET updates listed for Win7. See #2357362.
There is a Time Zone Change update for The Republic of South Africa and Sudan KB4601275 for Win7 and Win8.1 if you want to install it.
-
Here’s your .NET for April, 2021. There were no new .NET updates for April, 2021.
There were metadata (only) changes to the following Security-only .NET updates. You do not have to reinstall the updates.
+ 2020-05 Security Only Rollup KB4556403 (.NET 4.5.2-4.8)
KB4552952 (.NET 4.5.2), KB4552951 (.NET 4.6-4.7.2), and KB4552953 (.NET 4.8)
+ 2020-07 Security Only Rollup KB4566466 (.NET 4.5.2-4.8)
KB4565583 (.NET 4.5.2), KB4565586 (.NET 4.6-4.7.2), and KB4565589 (.NET 4.8)
+ 2020-08 Security Only Rollup KB4570500 (.NET 4.5.2-4.8)
KB4569743 (.NET 4.5.2), KB4569740(.NET 4.6), and KB4569733 (.NET 4.8)
+ 2020-09 Security Only Update KB4576490 (.NET 4.8)
+ 2020-10 Security Only Rollup KB4580467 (.NET 4.5.2-4.8)
KB4578983 (.NET 4.5.2), KB4578987 (.NET 4.6), and KB4578990 (.NET 4.8)
+ 2021-02 Security Only Rollup KB4602958 (.NET 4.5.2-4.8)
KB4601090 (.NET 4.6-4.7.2), and KB4601089 (.NET 4.8)1 user thanked author for this post.
-
Noticed both aitstatic (Application Impact Telemetry Static Analyzer) and CompatTelRunner were updated with kb5001335 SMQR. Due to the nature of the bypass script, it may be something to monitor/ check for those who do not use it.
Otherwise, seems like a a clockwork update so far.
No errors in event viewer and SFC post patch output below:
Will update should anything go south, west ot otherwise, generally too early to commit..
aitAgent, aitstatic and CompatTelRunner are already on the firewall outgoing blocklist here, as a secondary precaution.
W10, the itch you simply cannot scratch!
-
Viewing 38 reply threads
Welcome to our unique respite from the madness.
It's easy to post questions about Windows 10, Win8.1, Win7, Surface, Office, or browse through our Forums. Post anonymously or register for greater privileges. Keep it civil, please: Decorous Lounge rules strictly enforced. Questions? Contact Customer Support.
Plus Membership
Donations from Plus members keep this site going. You can identify the people who support AskWoody by the Plus badge on their avatars.
AskWoody Plus members not only get access to all of the contents of this site -- including Susan Bradley's frequently updated Patch Watch listing -- they also receive weekly AskWoody Plus Newsletters (formerly Windows Secrets Newsletter) and AskWoody Plus Alerts, emails when there are important breaking developments. Click here for details and to sign up.
Recent Replies
Microfix on Make Windows 10 look and work like Windows 7
10 minutes agoAlex5723 on April Patch Tuesday out – Exchange once again
32 minutes agoMrGreen365 on Importing multiple XML files into Excel
1 hour, 17 minutes ago- 1 hour, 35 minutes ago
- 1 hour, 52 minutes ago
- 1 hour, 54 minutes ago
Cybertooth on Upgrade Firefox…recommendations please.
2 hours, 14 minutes agoPim on April Patch Tuesday out – Exchange once again
2 hours, 43 minutes agoPaul T on Importing multiple XML files into Excel
3 hours, 11 minutes ago- 3 hours, 16 minutes ago
OscarCP on DuckDuckGo updates its plugin to block Google’s creepy FLoC
3 hours, 58 minutes agoAscaris on DuckDuckGo updates its plugin to block Google’s creepy FLoC
4 hours, 30 minutes ago- 4 hours, 59 minutes ago
Charlie on Tips to protect a Laptop without battery?
5 hours, 10 minutes agoFred on DuckDuckGo updates its plugin to block Google’s creepy FLoC
6 hours, 2 minutes agoHamsa Vicerra on How can I locate Bitlocker key in OEM refurb HP laptop?
7 hours, 8 minutes agoDriftyDonN on MS-DEFCON 2 – Deferring the April Updates
7 hours, 33 minutes agoanonymous on New smartphone? Great! Now don’t charge it past 80%
7 hours, 44 minutes agocastiel on The ides of March
9 hours, 54 minutes ago- 10 hours, 2 minutes ago
Moonshine on 20H2 Printer Queue Icon now missing from Task Bar
10 hours, 32 minutes agoTex265 on 20H2 Printer Queue Icon now missing from Task Bar
10 hours, 47 minutes ago- 10 hours, 48 minutes ago
- 10 hours, 50 minutes ago
- 11 hours, 8 minutes ago
- 11 hours, 8 minutes ago
- 11 hours, 19 minutes ago
Zaphyrus on Tips to protect a Laptop without battery?
11 hours, 25 minutes ago- 11 hours, 27 minutes ago
CraigS26 on April Patch Tuesday out – Exchange once again
11 hours, 39 minutes ago