Newsletter Archives

  • More help with Windows 7 extended support


    By Susan Bradley

    Windows 7 extended-security updates are easier to buy than to deploy. The entire process seems to be a work in progress.

    It’s been over a week since the February Win7 Extended Security Updates (ESU) patches were released … and I’m still helping people get these updates in place. In many cases, folks ran into problems through no fault or misstep of their own. For sure, Microsoft has not made keeping Windows 7 patched an easy process. Here are some of the things we’ve found:

    Read the full story in AskWoody Plus Newsletter 17.8.0 (2020-02-24).

  • A new list of minimal updates for Windows 7

    If you’re installing Windows 7 on test machines – or re-installing on your trusty old production machine – ch100 has come up with a worthwhile set of patches that you should include (and, by implication, ones you can safely avoid), in addition to all of the Important updates.

    Keep in mind that this is for fresh Win7 installations only.

    Here’s what he says:

    I installed a new VM and did Windows Update with Important updates only.

    I came up with a new list (yes, another one!) which I consider the minimal list of updates for the current state of Windows 7 – before September 2016 patches.

    It may be useful to post it before the major October 2016 Windows Update overhaul to assist your readers to be well prepared for what will soon follow.

    Here it is with full instructions:

    Set Windows Update on Never check for updates and run only manually, at least until the following list is completely installed.
    Install manually in this order first (this is essential on a new installation):


    Next, run Windows Update, still with the setting on Never check for updates and select all Important updates, (not Recommended) and non-security.

    Here is the list of what will eventually get installed as reference:

    KB976902 (this should come with the SP1 ISO)
    KB2533552 (installed previously, manually – if not installed manually, it may come up as “Service Pack 1” which means is the last bit of SP1 and it is correct)
    KB3138612 (Recommended to be installed second manually after KB2533552 and BEFORE running Windows Update to avoid 7.6.7600.320 which is broken and superseded by KB3138612)

    Note: I am actively avoiding KB971033 which I consider Optional, although it comes as Important. I still have to find a current use case for it, because I believe that the original purpose for it, to verify the authenticity of Windows, was largely abandoned. I don’t have an opinion either in favour or against, it is entirely each user’s option what to do with it.

    After installing this set of updates which can be easily verified by anyone by following exactly the steps that I did, the installation should be well-prepared for what is to be installed next.

    I am aware that there are users who do not install any update or any security update (if it ain’t broke…)

    The previous list is for them, and minimal for any reliable Windows 7 installation.

    A few recommendations for those installing patches:

    • Do not install too many updates at the same time, you will run out of physical memory and slow down the process.
      About 10 -20 updates at a time depending on RAM installed, should be OK.
    • Restart when asked.
    • Always install ALL Important Updates non-security and non-recommended. They are the most important updates of all for the reliability of the system. Those are named Critical Updates, although are not labelled as such in Windows Update, only in documentation and WSUS.

    Further updates suggested as useful and minimal for most users:

    • .NET Framework 4.5.2 (or 4.6.1)
    • KB2670838 – Platform Update. This is Optional but becomes Important in the context of installing Internet Explorer 10/11 for which is a pre-requisite.
    • Internet Explorer 11 (Internet Explorer 10 is as good or better, but many web sites are dropping support).

    There are additional updates which are installed automatically with IE10/11.

    • KB982018 – Native support for 4k sector disks
    • KB2852386 – Disk Cleanup add-on for deleting superseded updates (very useful after too many patches installed on the system!)

    Next, go ahead and install everything else!

    Note: The regular end-users should never use Microsoft Catalog or other direct Microsoft download sites for updates, unless fixing something that otherwise cannot be fixed – patches refusing to install otherwise.

    The practice of installing manually is very likely to break interdependencies because some updates come with further hidden updates and this has been happening forever, regardless of the big thing coming October 2016. Just look at the (in)famous patch KB2992611 re-release and there are many more examples.

  • Win7 updates take hours – or days? Try this combination to fix it

    As reported here by EP, with ch100 and Noel Carboni.

    InfoWorld Woody on Windows