Windows Install Order

Topic

New Reply

I read your page about the installation order of Windows SSU’s namely KB3177467 and KB3172605, and today microsoft released another SSU KB4490628 dated 12th March 2019. Im looking to do a fresh install of Windows 7 so my question is what would you advise my installation order to be?

Im thinking Install:

1.Windows 7

2.Service Pack 1

3.System Update Readiness Tool for Windows 7 for x64-based Systems (KB947821) [October 2014]

4.April 2015 Servicing Stack Update for Windows 7: KB3020369

5.Servicing Stack Update for Windows 7 SP1: KB3177467

6.KB3172605

7.KB4490628

8.KB3125574

Then finally get all other updates via Windows/Microsoft update.

Basically i’m looking to install all updates with little or no issues from Windows Update at all.

Any advice would be welcome

Reply | Quote

Replies

4. KB4490628

5. KB4474419

6. The current Security and Quality Rollup (exclusive to install the latest version of the Windows Update Client)

7. Windows Update

 

Regards, VZ

Reply | Quote

[PKCano]

This has been updated from an older posting.

The older methods for a Clean Install need to be modified in the light of recent findings.
Four Topics you might want to become familiar with before you start are:
https://askwoody.com/2017/new-directions-for-win-7-and-8-1-patching/
https://askwoody.com/forums/topic/group-b-win78-1-missing-updates-hiding-rollups-security-only-patches/
https://askwoody.com/forums/topic/group-a-win-7-and-8-1-might-be-missing-updates-if-dont-hide-unwanted-updates/
and
https://askwoody.com/forums/topic/what-issues-can-result-from-hiding-a-windows-update/

The following is MY recommendation – not gospel, just the way I would do a Group A clean install. Others may have a different method.

Some of the settings external to Windows Update and in Windows Update that I use are found here:
https://askwoody.com/forums/topic/new-directions-for-win-7-and-8-1-patching/#post-139072
Set them before you go online if they are available. Some will not be available until after updates are installed.

I would not install .NET 7 or above unless you need it for a particular application.

For a Clean Install what I use (for Group A) is:
BEFORE YOU START
Download KB3020369, KB3138612, KB4490628 (SSU), KB3172605, and KB4474419 (SHA-2) for your bitedness.

OFFLINE:
1. Install Win7. Reboot.
2. If your installer does not include SP1, install SP1. Reboot.
3. Open Administrative Tools\Services. Highlight Win Update Service and at top left click “Stop”
4. Manually install the four downloaded patches in the order above. Reboot.
5. In Windows Update Change settings – CHECK “Give me recommended updates the same way I get important updates,” CHECK “Give me updates for other MS produces,” and set updates to “Never Check”

ONLINE:
1. Check for updates
2. If you don’t want the telemetry updates, HIDE the ones mentioned at the top of AKB2000003.
https://askwoody.com/forums/topic/2000003-ongoing-list-of-group-b-monthly-updates-for-win7-and-8-1/
You will have to keep watching for these every time before you install updates.
3. To be sure you get all the necessary updates: HIDE the current “Security Monthly Quality ROLLUP,” check for updates, HIDE the next earlier “Security Monthly Quality ROLLUP.” Repeat this procedure until you have hidden the “October 2016 Monthly ROLLUP.”
4. HIDE any other updates you don’t want to install (drivers, anything that has caused a problem with your PC, features you don’t want, etc)
5. Install everything else that is CHECKED in the “important updates” list. Reboot. (I like to do this in batches. (“Updates for Win7,”) reboot wait 15-20 min. & check, (IE11, .NET 4.5.2 or 4.6.1 ONLY, any additional  “Updates for Win7,” and in the optionals KB2670838 Platform Update), reboot wait 15-20 min. & check, (any “Update for User-Mode Driver Framework”, Update for Kernel-Mode Driver Framework,” and “Update for ActiveX Killbits”), reboot wait 15-20 min. & check, (“Security Updates for Win7”), reboot & check, (“Security Updates for MS .NET”), reboot wait 15-20 min. & check, (anything else in the “important updates” list), reboot wait 15-20 min. & check.)
6. Repeat #4 and #5 until there is nothing CHECKED left in the “important updates” list.
7. Now the rest of the updates: Go to the hidden updates. CAREFULLY check and UNHIDE all the “Security Monthly Quality ROLLUPS” from Oct 2017 to the current.
8. Check for updates. Repeat #4 and #5 until there is nothing left that is CHECKED in the “important updates” list.
9. HIDE any UNCHECKED important update that you don’t intend to install in the future.
10. Reboot. Wait 30 minutes. Run Disk Cleanup, click “Cleanup System Files,” be sure Windows Update Cleanup is checked, click OK.

The two-year-old reference for this procedure is here.

• This reply was modified 5 years, 9 months ago by PKCano.

4 users thanked author for this post.

columbia2011, Lugh, Microfix, Elly

Reply | Quote

Do you restart Win Update service after you install kb3020369, 3138612, 4490628, and 3172605 or do you do that later?

Reply | Quote

Many thanks PKCano i will try this method and see how i get on

Reply | Quote

If you are “looking to install all the updates with little or no issues” then download the latest Win7 iso from Microsoft.  I did so several weeks ago because I found that my last iso had introduced a report of cross-linked files in chkdsk on 2 installations!

The new iso installed all but 20-odd updates and I was loading applications after about 3 hours.  But you get everything including all the telemetry and NET Framework – but not the report of cross-linked files in chkdsk…

Reply | Quote

I dont suppose you or any have a link to the latest iso?

Reply | Quote

You can try this. Should be current through Nov. 2018 with all the Microsoft baggage (telemetry, etc) – if it’s still good.

Reply | Quote