Installing Win7 Dec update results:
1) after performing a complete system backup, installed Security Only (KB4530692) & IE11 CU (KB4530677) previously downloaded from MS Update Catalog then performed 1st reboot – resulted in a normal relatively quick single boot only (no double boot experienced).
2) after sufficient delay, performed 1st Windows Update check – got the following 9 important/recommended updates:
a) Security Update for Microsoft Office 2013 (KB4484184) 64-Bit
b) Security Update for Microsoft Office 2013 (KB4484186) 64-Bit Edition
c) Security Update for Microsoft Excel 2013 (KB4484190) 64-Bit Edition
d) Security Update for Microsoft Word 2013 (KB4484094) 64-Bit Edition
e) Security Update for Microsoft PowerPoint 2013 (KB4461590) 64-Bit Edition
f) 2019-12 Security Monthly Quality Rollup for Windows 7 for x64-based Systems (KB4530734)
g) 2019-12 Security and Quality Rollup for .NET Framework 3.5.1, 4.5.2, 4.6, 4.6.1, 4.6.2, 4.7, 4.7.1, 4.7.2, 4.8 for Windows 7 and Server 2008 R2 for x64 (KB4533095)
h) Windows Malicious Software Removal Tool x64 – December 2019 (KB890830)
i) Security Intelligence Update for Windows Defender Antivirus – KB915597 (Version 1.307.2168.0)
3) unchecked then hid the Security Monthly Quality Rollup (KB4530734) then performed 2nd Windows Update check – got the remaining 8 important/recommended updates listed above.
4) installed all 8 remaining important/recommended updates listed above then performed 2nd reboot – again resulted in another normal relatively quick single boot.
5) after sufficient delay, performed 3rd Windows Update check – got 1 important update.
a) 2019-12 Servicing Stack Update for Windows 7 for x64-based Systems (KB4531786)
6) installed the Dec SSU (KB4531786) then performed 3rd reboot – again resulted in a normal single boot.
7) after sufficient delay, performed a 4th Windows Update check – only got the various optional unchecked updates which I expect & leave alone (should be noted that I get these whenever I do a WU check).
8) logged into AskWoody to write this post 
This is the way I do monthly updates following the Group B method of updating for both Win7 & Win8.1.
Though not criticizing or trying to convince others nor portraying the correct sequence of installing SSU updates, my rational for NOT doing SSU updates before any/all corresponding monthly updates:
1) when performing a normal Windows Update, that month’s SSU update seems to always show up AFTER all other corresponding monthly updates have been either been successfully installed or hidden.
a) if Microsoft required you to install that month’s SSU update prior to that month’s corresponding updates, why doesn’t Microsoft do this when you perform a normal automatic monthly Windows Update? That month’s SSU update never seems to show up before the corresponding month’s other updates are either successfully installed or hidden.
b) hiding an update is essentially telling the Microsoft Update Servers that you do not intend to install the update being hidden so that month’s SSU update’s meta-data logic has to assume that all previous updates have been successfully installed and therefore it now appears when you perform a subsequent check for Windows Updates. I suspect that if you did not install the Dec SSU update this month, it should first appear as a standalone update in Jan and, after it’s installed, Jan’s updates would appear but as I’ve already installed the Dec SSU, I can no longer verify this.
2) as described by PKCano here, Security Only updates downloaded from the Microsoft Update Catalog website are that month’s security updates that were added to the preexisting security updates contained within that month’s corresponding Security Monthly Quality Rollup.
a) if Microsoft’s normal WU session incorporates presenting/updating the SSU update AFTER all of the corresponding month’s updates including the Monthly Rollup have been installed, why then would this NOT work for the SO update if the SO update is essentially a subset of the security updates within the Rollup? It does not make any sense for it to work this way for Monthly Rollups via WU but not for manual SO updates.
3) Microsoft’s prerequisites in the Dec 2019 SO (KB4530692) & Rollup (KB4530734) articles here and here are ambiguous at best.
Prerequisite:
You must install the updates listed below and restart your device before installing the latest Rollup. Installing these updates improves the reliability of the update process and mitigates potential issues while installing the Rollup and applying Microsoft security fixes.
1. The March 12, 2019 servicing stack update (SSU) (KB4490628). To get the standalone package for this SSU, search for it in the Microsoft Update Catalog.
2. The latest SHA-2 update (KB4474419) released September 10, 2019. If you are using Windows Update, the latest SHA-2 update will be offered to you automatically. For more information on SHA-2 updates, see 2019 SHA-2 Code Signing Support requirement for Windows and WSUS.
After installing the items above, Microsoft strongly recommends that you install the latest SSU (KB4531786). If you are using Windows Update, the latest SSU will be offered to you automatically. To get the standalone package for the latest SSU, search for it in the Microsoft Update Catalog. For general information about SSUs, see Servicing stack updates and Servicing Stack Updates (SSU): Frequently Asked Questions.
a) both articles provide the exact same itemized list of prerequisites for installing the Dec SO or Rollup updates. The itemized list specifically includes only the Mar SSU (KB4490628) & the Sep SHA-2 (KB4474419).
b) if Microsoft really wanted you to install Dec’s SSU (KB4531786) as a prerequisite to installing either the Dec SO or Rollup, why wasn’t it included as an itemized item within the specific itemized list along with the other 2 items listed?
c) installing the latest SSU (KB4531786) excerpt from the quote above is worded as a “strong recommendation” NOT a “requirement”:
After installing the items above, Microsoft strongly recommends that you install the latest SSU (KB4531786).
d) excerpt from the quote above also states that latest SSU (KB4531786) will be offered automatically if using Windows Update: (this only happens if all current month’s important/recommended updates are either first successfully installed or hidden):
If you are using Windows Update, the latest SSU will be offered to you automatically.
e) if latest Dec SSU (KB4531786) really is required as a prerequisite, why then is the Mar SSU (KB4490628) specifically listed? Won’t the Dec SSU simply supersede the previous Mar SSU? Assume one hasn’t installed updates in a while (Group W or at least after Feb 2019) and now wants to bring their system up to date prior to Win7 EOL, wouldn’t the Dec SSU simply supersede the previous Mar SSU? As such, why not just list/install the latest Dec SSU?
By normally presenting the SSU updates via WU only AFTER all of the current month’s updates are either successfully installed or hidden, I strongly believe Microsoft’s intent is to prepare the Windows Servicing Stack to properly process/install any or all subsequent “yet to be released” future monthly updates which may or may not need the newly updated Windows Servicing Stack to do so.
Win7 - PRO & Ultimate, x64 & x86
Win8.1 - PRO, x64 & x86
Groups A, B & ABS
