Standalone installer script for Windows 7 ESU, regardless the license

Topic

New Reply

[abbodi86]

Management note: On February 14, 2021, Microsoft changed its policies with respect to extended security updates (ESU) for legacy products. Extended security updates will no longer be available unless a customer has an Azure licensing agreement or a volume licensing agreement that specifically includes a provision for ESU.

The management of this site neither recommends nor encourages the use of any software or system unless it is properly licensed. Any entity (business or individual) may be liable for criminal and/or financial penalties for doing so. Further, we do not advocate the use of so-called “bypass” mechanisms to avoid licensing, nor any other form of software piracy. An overview of Microsoft’s licensing agreements can be found at Microsoft’s Partner Site.

The management of this site neither recommends nor encourages the use of unsupported software. The use of unsupported software may have severe and adverse security ramifications. We understand that operational continuity may depend on such use and that any entity (business or individual) must make its own decisions, for which we take no responsibility.

The management of this site pays the most attention to agreements written for the United States market. Licensing and support agreements differ from country to country, so we recommend that you carefully review the relevant documents for your country and act in accordance with those.

# W7ESUI #

Automated batch script to install Windows 7 Extended Security Updates, regardless the ESU license and without requiring any eligibility check bypass.

* Pros:

– Process the updates from one same location

– Detect and install servicing stack update first

– Check required stack installer version for each update

– Include the Telemetry neutralize tweaks

– Works with Group A: Monthly Quality Rollup, or Group B: Security Only update / IE11 cumulative update

* Limitations:

– SHA2 support updates KB4490628 and KB4474419 are prerequisites for ESU updates.
Either install them yourself first, or put their msu files with ESU updates files together and the script will install them

– The script is specifically designed to process ESU updates only.

while it still can install regular updates, but it has no specific checks or conditions for their prerequisites
regular updates should be installed normally, manually, using Windows Update, or other tools

– You must always use the script for any future ESU updates, you cannot install them manually afterwards

* Download:

Includes corrections for those downloading using IE11:
https://github.com/abbodi1406/WHD/raw/master/scripts/W7ESUI_0.4.zip

* How to use on live OS:

– Download the ESU updates msu files from Microsoft Update Catalog, following history page or AskWoody Knowledge Base

a) if you are Group A user, you need:
latest Servicing Stack Update
latest Security Monthly Rollup
latest .NET rollup

b) if you are Group B user, you need:
latest Servicing Stack Update
latest IE11 Cumulative Update
Security Only Update for each month (e.g. February and March together)
every .NET Security Only Update (if any)

– Extract W7ESUI.cmd from the zip file, or extract the whole zip file

– Copy or move W7ESUI.cmd and place it next to (in the same folder as) the downloaded msu files
ini file W7ESUI.ini is not really necessary in this case

– Right-click on W7ESUI.cmd and “Run as administrator”

– If all goes well, you should get cmd window similar to this:

– Now press the zero 0 number on keyboard to start the process

– At the end, restart the system if prompted

See ReadMe.txt for more details, and how to use the script for offline integration.

******************************
******************************

The bypass is mainly meant for installing .NET 4 updates through WU, manual installation works too
but it has compatibility issue and cause other MSI programs to fail (including KIS 2020 or Office C2R)

the first installer was merely a simple script for installing .NET 4 updates manually using the ESU_LOCK workaround
the revived version include temporary self-bypass to work with July updates

dotNetFx4_ESU_Installer_r.zip is the safest approach so far

https://github.com/abbodi1406/WHD/raw/master/scripts/dotNetFx4_ESU_Installer_r.zip

******  NOTE changes beginning November 12, 2024: ******
There is a new .NET 4.x ESU updates installer for Win7

dotNetFx4_ESU_Installer_v4.zip

https://github.com/abbodi1406/WHD/raw/master/scripts/dotNetFx4_ESU_Installer_v4.zip

******************************
******************************

REVISED January 2021:
Comments from 2020 have been archived here – continue posting on this page.

• This topic was modified 4 years, 11 months ago by abbodi86.
• This topic was modified 4 years, 11 months ago by PKCano.
• This topic was modified 4 years, 11 months ago by PKCano.
• This topic was modified 4 years, 10 months ago by PKCano.
• This topic was modified 4 years, 2 months ago by PKCano.
• This topic was modified 3 years, 6 months ago by Susan Bradley.
• This topic was modified 2 years ago by PKCano.
• This topic was modified 2 years ago by PKCano.
• This topic was modified 2 years ago by PKCano.
• This topic was modified 2 years ago by Susan Bradley.
• This topic was modified 3 months, 4 weeks ago by PKCano.

Total of 46 users thanked author for this post. Here are last 20 listed.

Lees7676, Erik, jitterdither, Pexiler, rick41, Kinjiru, Kranium, MikeL, glnz, Stephen Henry, Metanis, MrChaz, Microfix, JimBean, Silenus, Charles Pugh, ioneye, Steve, thompsgd, NetDef

Reply | Quote

Replies

Did you mean W7ESUI_0.2?  W7ESUI_0.2 is the current release.

Reply | Quote

Both work 🙂
v2 additionaly support installing SHA2 updates (KB4490628/KB4474419) if not already installed

1 user thanked author for this post.

italiangm

Reply | Quote

W7ESUI v3

– Enhanced detection for updates files and KB number (to void issue with files downloaded from MU catalog via IE11)

11 users thanked author for this post.

Steve, byteme, TaskForce141, T, Cyrus Khambatta, AusJohn, SueW, Moonbear, RDRguy, zat_so, Microfix

Reply | Quote

Here’s your .NET for January, 2021. There were no Security-only .NET updates.

Download only the update for the version(s) installed on your PC.
There were only updates for .NET 4.6-4-7-2 and 4.8 (non-Secruity only)
The other updates in the Rollup are older and should already be installed.

.NET Quality Rollup KB4598500
.NET 3.5.1 KB4578952 (Oct 2020)
.NET 4.5.2 KB4578955 (Oct 2020)
.NET 4.6 – 4.7.2 KB4597239
.NET 4.8 KB4597254

5 users thanked author for this post.

byteme, jburk07, abbodi86, zat_so, SueW

Reply | Quote

When was the 3.5.1 patch in this rollup originally released?

Reply | Quote

October 2020.

1 user thanked author for this post.

Moonbear

Reply | Quote

[Microfix]

Installed SMQR kb4598279 using W7ESUIv3 (it’s a double restart) and dotNET kb4598500 using dotnetfx4 on x86 Win7 Pro. No problems reported here in event viewer.
Another clean run, so far, so good 🙂
Peripherals still to check over..to be updated

Update: No issues with local Pixma Printer or scanner, SFC – no integrity violations.

If debian is good enough for NASA...

• This reply was modified 4 years, 1 month ago by Microfix.

3 users thanked author for this post.

TaskForce141, jburk07, abbodi86

Reply | Quote

KB4598500 is an optional .net – meaning that there is no new security fixes in it.  If you have your system set to not offer up optional updates in the same manner as important updates it’s not shown to you in Important, but rather the Optional section.

Susan Bradley Patch Lady/Prudent patcher

2 users thanked author for this post.

jburk07, abbodi86

Reply | Quote

Jan. 2021 rollup (KB4598279) and .Net 4.8 update (KB4597254) installed without problems, using version 0.2 script, on both 32-bit desktop and 64-bit laptop.  I define “no problems” as Win loading normally or with a slightly longer 1st restart, and Firefox loading as usual and streaming youtube and basketball games.

One oddity: all of the entries for previous security monthly quality rollups are missing from the list of installed updates (Control Panel > Programs and Features > view installed updates).  Even the ones prior to Win 7 EOL Jan. 2020.   The servicing stack updates and .Net updates are still listed.   I just noticed this; perhaps this was always true, i.e. a by-product of the rollups or the installer script.

Reply | Quote

Monthly Rollups are chained together, only the latest one show up in the list

similar to KB2952664 multi versions

Reply | Quote

My wife’s Win 7 Pro 64-bit SoHo production machine wants to install Malicious Software Removal Tool KB890830 version 5.85 dated Jan 12, 2021.

Anyone have any problems with it?

Thanks.

 

Reply | Quote

KB890830 No problem with that update. It is only released on a 3 monthly basis.

Reply | Quote

MSR is an additional protection mechanism provided by MS. There is no downside to running it.

cheers, Paul

Reply | Quote

I have been running MSRT for a long time.  Never any problems with it.  Ran version 5.85 dated Jan 12, 2021 on Jan 15.

Reply | Quote

On the morning of Jan. 31 I installed these two updates to two Windows 7 Home Premium,  Service Pack 1,  x64 machines using W7ESUI.

Latest .NET for 4.8 KB4597254

Jan. Rollup KB4598279

I have been using the machines and have not encountered any problems.

Reply | Quote

Correction:

Jan. Rollup was installed using W7ESUI ,  but .NET was installed using dotNetFx4_ESU_Installer.cmd.

Sorry for the error in the original post.

Reply | Quote

I will continue to post this information in this thread as of 2/9/2021.

AKB 2000003 has been updated for Group B Win7 (ESU) and Win8.1 on February 9, 2021.

There is a Security-only Update for those with Win7 ESU subscriptions.
There was no February IE11 CU for Win7.

February Rollup KB4601347 Download 32-bit or 64-bit for those with Win7 ESU subscriptions.

You must have at least the August Servicing Stack KB4570673 previously installed to receive these updates).
The latest is the December Servicing Stack KB4592510 – Download 32-bit or 64-bit for those with Win7 ESU subscriptions.

There is a revised Licensing Preparation Package KB4575903 dated 7/29/2020 for Win7 ESU subscriptions, if you need it.

There are .NET updates listed for Win7. See #2342225.

6 users thanked author for this post.

Erik, byteme, Cyrus Khambatta, jburk07, SueW, abbodi86

Reply | Quote

Here’s your .NET for February, 2021. There were Security-only .NET updates.

Download only the update for the version(s) installed on your PC.
There were only updates for .NET 4.6-4-7-2 and 4.8
The other updates in the Rollups are older and should already be installed.

.NET Quality Rollup KB4603002
.NET 3.5.1 KB4578952 (Oct 2020)
.NET 4.5.2 KB4578955 (Oct 2020)
.NET 4.6 – 4.7.2 KB4600945
.NET 4.8 KB4600944

.NET Security-only Quality Rollup KB4602958
.NET 4.6 – 4.7.2 KB4601090
.NET 4.8 KB4601089

7 users thanked author for this post.

Steve, Microfix, Cyrus Khambatta, zat_so, jburk07, SueW, abbodi86

Reply | Quote

[Moonbear]

@PKCano

I’ve been installing the .NET 3.5.1 & 4.7 updates from the .NET Quality Rollup. Can I switch to installing the .NET 3.5.1 & 4.7 updates from the Security-only Quality Rollup without breaking anything?

• This reply was modified 4 years, 1 month ago by Moonbear.

Reply | Quote

The SOs are a part of the Rollups. But SOs by themselves are NOT cumulative.
You can install the SOs whenever you want, but if you have installed the Rollup of the same date, you already have that SO and any SO that came before b/c the Rollups are cumulative.

1 user thanked author for this post.

Moonbear

Reply | Quote

[Moonbear]

Okay, I didn’t think about the SOs not being cumulative updates.

• This reply was modified 4 years, 1 month ago by Moonbear.

Reply | Quote

The first time I used the W7ESUI script it ran the anti-telemetry file but it hasn’t any time since.  Is that by design or should that file exist each time the script is run?

Thank you.

Reply | Quote

It’s created with each new installed Monthly Rollup

1 user thanked author for this post.

Microfix

Reply | Quote

Where did everything go?

Reply | Quote

https://www.askwoody.com/2021/try-to-fix-one-thing-break-another/

Slight temporary bug.  Don’t panic.

Susan Bradley Patch Lady/Prudent patcher

Reply | Quote

Reminds me of Star Trek Next Generation episode in which Dr. Crusher notices that crew starts disappearing and the Enterprise gets smaller and smaller.

Am I the only one left?

Ready to use abbodi86’s lifesavers here (again) to install the following on my Win 7 Pro 64-bit:

In the W7ESUI:
KB4601347
KB4578952

In the dotNetFx4_ESU:
KB4600944

These are “permitted” in Susan’s latest list.  Do you agree these are OK?

And please say SOMETHING so I know someone in the whole wide universe is seeing this.  (Hello?)

Thanks!

Reply | Quote

The SSU KB4578952 is from Oct 2020. You probably already have it installed. There wasn’t a Feb SSU.

KB4600944 is for .NET 4.8, KB4600945 is for .NET 4.6-4.7.2 depending on which version you have installed.

Reminder: We’re still on DEFCON-2 until maybe Sunday.

Reply | Quote

Officially I’m waiting until the newsletter goes out to make the change.  But I always look at the weekend as a good time to install updates.

Susan Bradley Patch Lady/Prudent patcher

Reply | Quote

Susan B – Thanks.  But I got your “Install” from your current Patch List.  Still wait for a few days?

Reply | Quote

PKCano – What would be the February update for .NET 3.5 for Win 7 Pro 64-bit? Looks like I got it wrong.

Reply | Quote

Latest update for .NET 3.5 is 2020-10 KB4578952

Reply | Quote

There is information on this above, but you won’t be able to see it until the site is fixed Sun. morning (28th) server time. Wait a few.

Can you see #2342227 and #2342225?

Reply | Quote

PKCano – No, cannot see those two.

This is like getting on a NYC bus and seeing only the driver and me. (Drivers today, as we have abbodi86, Susan and yourself.) So, let’s go to Miami!

Reply | Quote

[glnz]

Just to let everyone know that on two Win 7 Pro 64-bit machines I successfully installed

in the W7ESUI:
KB4601347

in the dotNetFx4_ESU:
KB4600944

As PKCano pointed out, although I also put the KB4578952 installation file in the W7ESUI, it was ignored because it is just a regurgitation of the same file from before.

(Doing these updates is important for the production machine in my wife’s SoHo, a Dell Optiplex 780 I bought used on eBay seven years ago. But although she acknowledges my taste for keeping junky old computers running, she plans to throw it out and get an iMac. Oh well …)

Thanks again, and cheers!

• This reply was modified 4 years ago by glnz.
• This reply was modified 4 years ago by glnz.

2 users thanked author for this post.

Lees7676, jburk07

Reply | Quote

See #2346543 above.  The latest  is SSU KB4578952 from Oct 2020.  There is no update for .NET 3.5 for Feb.

2 users thanked author for this post.

Lees7676, jburk07

Reply | Quote

I wait until DEFCON says it is time to install.  (Hello back at ya!)

Reply | Quote

With the advent of DEFCON-4 on Feb. 28 I installed the following on two Win 7,  SP 1,  x64 machines.

Using W7ESUI:

Feb Rollup KB4601347

Using dotNetFx4_ESU_Installer

Feb .NET 4.8 KB4600944

1 user thanked author for this post.

jburk07

Reply | Quote

I tried to install ndp48-kb4600944-x64_20a6a012e02c9d905f6f3a24850f1218bc849a26.exe using  dotNetFx4_ESU_Installer, but it responded with the message “NDP45 exe update files are not detected.” The two files are in the same folder.

Please help. Thanks.

Reply | Quote

I tried to install ndp48-kb4600944-x64_20a6a012e02c9d905f6f3a24850f1218bc849a26.exe…

Per the message you’re getting from the script, it’s looking for a file that starts “ndp45…” and per your statement above, you’re putting a file that starts with “ndp48…” in the folder.

Also, the update you’re trying to install is only for .NET version 4.8 and not for any other versions.

From the sounds of the installer script’s error message, you might have .NET version 4.5 on your system instead of 4.8. If that is indeed the version you have, then the last update released for it was back in October of last year, KB4578955, so you don’t need to worry about an update for .NET this month.  🙂

2 users thanked author for this post.

Lees7676, abbodi86

Reply | Quote

Could anyone please tell me how I can install .NET 4.5.2 update (KB4578955) via administrative installation if I don’t have .NET and I would like to install it from scratch along with the latest update? I would like to avoid replacing system DLLs like dotNetFx4_ESU_Installer_r.zip does.

Reply | Quote

Before you can install an update, you have to have .NET 4.5.2 installed on your PC.

If you do not know if .NET 4.5.2 is installed on your computer, download the .NET version checker mentioned here to find the version of .NET installed on your computer.
If you do not have v4.5.2 already installed, download the .NET 4.5.2 installer from Microsoft and install it. It will not be up to date.
If you have the ESU subscription, you should receive the update through Windows Update.

If you do not have the ESU subscription, to install the update, create a folder on your C: drive and unzip dotNetFx4_ESU_Installer_r.zip into the folder.
Download KB4578955 from the MS Catalog (link in #2342225 above) and place it in the same folder.
In an elevated command prompt (right click on cmd.exe and “Run as Administrator) right click on the .cmd file in the folder and “Run as Administrator. Follow the instructions.

1 user thanked author for this post.

abbodi86

Reply | Quote

Thank you for your reply, but you haven’t got what I mean. Here abbodi86 wrote that it’s possible to install .NET updates in a way which I’ve described. dotNetFx4_ESU_Installer_r.zip replaces system DLL, I would like to avoid that. I don’t have ESU subscription. I’ve already downloaded .NET 4.5.2 installer as well as KB4578955. Now how can I install .NET along with the KB4578955 without bin folder which is stored in dotNetFx4_ESU_Installer_r.zip?

Reply | Quote

You can probably install the .NET 4.5.2, and any updates for it up to and including Jan. 2020 using Windows Update.

But after Jan 2020, WIn7 is EOL and you cannot install any of the later updates without either the ESU or circumventing the EOL with abbodi86 ‘s script. They will not install in Win7 EOL.

1 user thanked author for this post.

SueW

Reply | Quote

Hello everyone
i tried to install .NET Framework 4.8 but it gives me this error

 

Reply | Quote

Pexiler wrote:

i tried to install .NET Framework 4.8 but it gives me this error

KB4600944 is an update, not the installer for .NET 4.8. Is .NET4.8 already installed on your computer?

Reply | Quote

PKCano wrote:

Pexiler wrote:

i tried to install .NET Framework 4.8 but it gives me this error

KB4600944 is an update, not the installer for .NET 4.8. Is .NET4.8 already installed on your computer?

i don’t have framework installed.

how do I solve?

Reply | Quote

The .NET 4.8 installer can be downloaded from Microsoft.
Win7 is EOL. The same restrictions will apply as for .NET 4.5.2 in #2347965 above. It will not be up to date.

You will be able to install updates up to , and including, Jan 2020 using Windows Update. For updates after Jan 2020, including KB4600944, you will need to have the ESU subscription or you will need to use @abbodi86 ‘s bypass mentioned at the top of this thread.

A word of caution.
Although you can install .NET 4.8 on Win7, it is better to use one of the earlier versions of .NET. (4.5.2, 4.6-4.7.2 Unless you have software that specifically needs .NET 4.8, I wouldn’t worry about installing it.

1 user thanked author for this post.

abbodi86

Reply | Quote

Why do you think “,,,it is better to use one of the earlier versions of .NET. (4.5.2, 4.6-4.7.2,,,” rather than .NET 4.8?

Should I remove .NET 4.8 and install .NET 4.7.2?

PS. I have both .NET 3.5 and .NET 4.8 installed on my machine.

Reply | Quote

If you already have .NET 4.8 installed, and you have no problems with it, then keep it as is.
Information about the updates still goes.

1 user thanked author for this post.

GoneToPlaid

Reply | Quote

I agree. I held off on installing .NET 4.8 since it was initially buggy. Eventually I installed it on my Win7 computers. I haven’t encountered any obvious issues when running programs which require .NET 4.8 or earlier versions.

Reply | Quote

I could use a little help, I am not that tech savvy.

I use windows 7, with an ESU.

Worked fine last year.

When I installed the year 2 ESU and attempt to update, it gives me error Code 800B0101

That error message says the time on my PC is incorrect.

I 2x checked and the time and date are fine.

Any ideas on how I can fix this?

Thanks for your input.

Reply | Quote

We haven’t seen problems with the Feb patches so far.
Since Feb is the first of the year-2 subscription, I would suggest you go back over the ESU setup and be sure it is correct.

For Feb, there was a Rollup (or SO if you are using Group B) and .NET 4.6-4.7.2 or 4.8 depending on what .NET you have installed. There was no new Servicing Stack or update for .NET 3.5 – the latest of these was Oct 2020.

Reply | Quote

I had that 800B0101 with net framework recently and set date to febuary helped install without any problem,weird thing

2 users thanked author for this post.

kipock, T

Reply | Quote

Thanks for suggesting this, i was at my wit’s end wondering why it wouldn’t install (failed with error code – 2146762495) until i saw your comment, changed my system date to a month ago and it worked. I also noticed that it’s a known issue on the .Net 4x pages but i’m pretty sure i’ve installed .Net 4x updates outside of their release month previously so presumably the required certificate in the .Net package would not have matched the system time then either.

https://support.microsoft.com/en-us/topic/security-only-update-for-net-framework-4-6-4-6-1-4-6-2-4-7-4-7-1-4-7-2-for-windows-7-sp1-and-windows-server-2008-r2-sp1-and-windows-server-2008-sp2-kb4601090-582f84bd-c341-83c9-e428-eac9b50f021e

Reply | Quote

Much appreciation for the comments regarding this little issue.
Thank you T, for your post and thank you very much anonymous. It worked like a charm.
The new month brought this on? Never realized.

I also had [Failed. Error code: -2146762495] today
for both of these (ndp47 downloads)
2021-02 Security and Quality Rollup for .NET Framework (KB4603002)
2021-02 Security Only Update for .NET Framework (KB4602958)

Thank for helping out!

Reply | Quote

It worked, thanks for your help!!

Reply | Quote

Wow thank you so much that worked like a charm I have been trying to install this update for a few days and this finally worked.

Reply | Quote

I will continue to post this monthly information in this thread as of 2/9/2021.

AKB 2000003 has been updated for Group B Win7 (ESU) and Win8.1 on March 9, 2021.

There is a Security-only Update for those with Win7 ESU subscriptions.
There is a March IE11 CU  KB5000800 for Win7. Download 32-bit or 64-bit.

March Rollup KB5000841 Download 32-bit or 64-bit. for those with Win7 ESU subscriptions.

You must have at least the August Servicing Stack KB4570673 previously installed to receive these updates).
The latest is the December Servicing Stack KB4592510 – Download 32-bit or 64-bit for those with Win7 ESU subscriptions.

There is a revised Licensing Preparation Package KB4575903 dated 7/29/2020 for Win7 ESU subscriptions, if you need it.

There are .NET updates listed for Win7. See #2349123.

****UPDATE: On 3/22/2021, Microsoft released a fix for printer issues caused by the March Patch Tuesday updates.
Out-of-Band update KB5001639 – Download 32-bit or 64-bit

4 users thanked author for this post.

jburk07, SueW, Microfix, abbodi86

Reply | Quote

Here’s your .NET for March, 2021. There were no Security-only .NET updates.

Download only the update for the version(s) installed on your PC.
NOTE: Updates for v3.5.1 are older (Oct 2020) and should already be installed.
Updates for v5.2,  v4.6 – 4.7.2 and v4.8 have been re-signed as version 2 and should be installed.

.NET Quality Rollup KB4579977 (2020-10)
.NET 3.5.1 KB4578952 (Oct 2020)
.NET 4.5.2 KB4578955 v2
.NET 4.6 – 4.7.2 KB4578963 v2
.NET 4.8 KB4578977 v2

.Net Quality Rollup KB4603002 (2021-02)
.NET 3.5.1 KB4578952 (Oct 2020)
.NET 4.5.2 KB4578955 v2
.NET 4.6 = 4.7.2 KB4600945 v2
.NET 4.8 KB4600944 v2

7 users thanked author for this post.

Lees7676, abbodi86, Pim, jburk07, Moonbear, SueW, Microfix

Reply | Quote

2021-03 Security and Quality Rollup for .NET Framework for Windows 7 (KB4579977)
2021-03 Security and Quality Rollup for .NET Framework for Windows 7 (KB4603002)

all .NET 4.x updates (including 4.5.2) were re-signed and bumped version, for both Rollups

4 users thanked author for this post.

Pim, jburk07, Microfix, PKCano

Reply | Quote

indeed they were, well spotted 😉

no initial problems here SFC in tact /event viewer-no errors/no additional telemetry

If debian is good enough for NASA...

2 users thanked author for this post.

Lees7676, jburk07

Reply | Quote

NONE exhibit ANY local (USB) printer printing/comms/crash issues and print queues as expected with no violations via SFC integrity check, all good here this month.

If debian is good enough for NASA...

2 users thanked author for this post.

jburk07, abbodi86

Reply | Quote

Both refreshed rollups pulled

however, the updated files were added to the old rollups: 2021-02 (KB4603002), 2020-10 (KB4579977)

3 users thanked author for this post.

jburk07, Pim, Microfix

Reply | Quote

PKCano,

Microsoft Update Catalog cannot find any results for KB4578952 (for .NET 3.5.1).

Message returned from search: We did not find any results for “KB4578952”

Reply | Quote

Because KB4578952 is not listed as an individual patch. It is included in the .NET Rollup. If you click the “Download” button for the Rollup (linked) in the Catalog, you will find all the .NET updates for a given Rollup KB. That is the usual listing.
The reason the others are listed separately is because they were re-released.

Reply | Quote

[Moonbear]

@PKCano

Do both kb4578963 v2 and kb84600945 v2 need to be installed to be up to date?

 

• This reply was modified 3 years, 11 months ago by Moonbear.

Reply | Quote

No need if v1 of both are already installed

otherwise, just install kb4600945 v2

1 user thanked author for this post.

Moonbear

Reply | Quote

Will doing that also bring the October upadate to v2 as well?

Reply | Quote

You don’t need that
kb4578963 v2 is ment for Windows 7 Embedded family

1 user thanked author for this post.

Moonbear

Reply | Quote

Should the MSRT (KB890830) be considered as under the Def-Con umbrella or can it be installed at any time?

Reply | Quote

Installed at any time or skipped.

Susan Bradley Patch Lady/Prudent patcher

1 user thanked author for this post.

Moonbear

Reply | Quote

Win7 HP x64, W7ESUI_0.2

Installed;

• Jan – March 2021 SO updates (KB 4598289, KB 4601363, KB 5000851)
• Mar 2021 (IE11) – KB 5000800

No problems to report.

Thanks,all.

1 user thanked author for this post.

SueW

Reply | Quote

Heads Up!
For those who are having issues with printers post March SO/CU updates for Win7/ Windows Server 2008 R2 SP1
MSFT have released OoB updates kb5001639 for x86 and x64 versions

available from the catalog:
https://www.catalog.update.microsoft.com/Search.aspx?q=kb5001639

MSFT documentation: kb5001639

If debian is good enough for NASA...

4 users thanked author for this post.

jburk07, SueW, PKCano, abbodi86

Reply | Quote

AKB2000003 has been updated for both Win7 and Win8.1.

5 users thanked author for this post.

Susan Bradley, jburk07, Kirsty, SueW, Microfix

Reply | Quote

Need to re-install windows.

I assume I don’t need to re-install all prior ESU updates, just the latest one.

Is that the correct path?

Let MS Windows Update install the regular updates.

Then by using W7ESUI …

Latest Servicing Stack Update
Latest Security Monthly Rollup
Latest .NET Rollup

Thanks

Reply | Quote

I have helped several with a new Win7 install. This information may be of some help to you.

Because there are several prerequisites along the install route, and because the updates associated with Meltdown/Spectre caused so much trouble, the installation was done in segments.
You can get Win7 up to date as of Jan 2020 EOL using Windows Update, but it is wise to to it in steps as described in Any advice on how to safely update a new Win7 installation. The outlined steps begin at #1982141, but it would probably be a good idea to read through the whole thing to understand the method used.
After your reach Jan 2020 updates, see the instructions at the top of this thread and #2349121 above to use the installer scripts for ESU updates. If you use the Rollups, they are cumulative, Security-only patches are not. The Rollups contain the IE11 CUs, so you do not need to install them separately, but be aware of the prereq’s (read “before installing this update” here).

Another similar thread for navigating a clean install is #1907521.

2 users thanked author for this post.

unleashed, abbodi86

Reply | Quote

I assume DEFCON-3 applies to these Win7 updates.  Therefore I have a question.

Do both kb5000841 and kb5001639 go into the folder with W7ESUI.cmd at the same time, or does each need to be run separately (in sequence), or is only the later update, KB5001639, needed?

 

1 user thanked author for this post.

jburk07

Reply | Quote

I did it that way, both at the same time. The script processed both and both show installed.

If you are installing the Rollup (KB5000841), I believe you need both. KB5001639 is not a cumulative update and doesn’t contain the IE11 CU.

2 users thanked author for this post.

jburk07, glnz

Reply | Quote

Am I correct in the following?

1.) Both .NET 4.8 4578977 and .NET 4.8 4600944 need to be installed again and can be put            into the folder with dotNetFx4_ESU_Installer together.

2.) Again,  there is no SSU for March.  The last SSU was KB4592510 released in December 2020.

Reply | Quote

anonymous wrote:

1.) Both .NET 4.8 4578977 and .NET 4.8 4600944 need to be installed again and can be put into the folder with dotNetFx4_ESU_Installer together.

See #2349123 above. Yes both in the same place together.

anonymous wrote:

2.) Again, there is no SSU for March. The last SSU was KB4592510 released in December 2020.

See #2349121 above.

Reply | Quote

With the DEFCON System moving to  DEFCON-4 I installed the following on two Win 7,  SP 1,  x64 machines yesterday (Mar. 27).

Using W7ESUI:

Mar. Rollup KB5000841

Mar. Rollup fix  KB5001639

Using dotNetFx4_ESU

Mar. .NET 4.8 KB4578977

Mar. .NET 4.8 KB4600944

No problems to report as of late today (Mar. 28).

 

2 users thanked author for this post.

glnz, jburk07

Reply | Quote

Sorry, that should be DEFCON-3 not DEFCON-4.

Reply | Quote

Is anyone else not able to download the patches from the update catalog?

When I tried to to begin downloading the update this morning, all 3 patches had the same strange behavior. Clicking the download button would bring up the window with the patch as normal, but clicking the patch did not trigger the download as it should.

Clicking the patch a second time triggered the blocked download warning as if clicking the first time had actually triggered the download.

Right-clicking and selecting open link in new tab acts as if your using a popup blocker to keep new tabs from opening.

If you right click and select open in a new window, all you get is a black window with untitled in the tab.

I’m posting this here in case the direct download links in the posts by @PKCano are misbehaving as well.

Reply | Quote

All worked for me – see screenshots.
The SO, OOB< and IE11 CU download links are available from AKB2000003.

1 user thanked author for this post.

Moonbear

Reply | Quote

I actually figured out what was happening.

Google Chrome in tightening the settings for insecure content on a secure site.

I had to add the update catalog to the allow list.

Reply | Quote

Yes,  I had the problem and could not figure out what was happening so I went to Firefox and did the downloads there.

Thank you for solving the problem for me,  and for sharing the solution with all of us.

 

Reply | Quote

Where did you find the allow list in  Chrome?

Reply | Quote

While on the Microsoft Update Catalog website,
tap on the lockpad icon on the top left of Chrome.
Choosing, Site settings, toggled down to ‘Insecure content’
and changed ->Block (default) to Allow

That worked for me 🙂
My thanks too, to Moonbear for solving this, much appreciated.

Reply | Quote

This is how I made the catalog downloads work.

Open the Chrome settings, scroll down to and click Site settings.

In Site settings, Scroll down to where it says Content and click on Additional content settings.

After that, scroll down to Insecure content and click.

You’ll then see 2 buttons: Add & Block

Click the Add button and type this:

https://[*.]www.catalog.update.microsoft.com

(Be sure to type this as copy/paste acts weird in the settings menus and can sometimes add random characters to what your pasting.)

Now the patch downloads should start as normal.

Reply | Quote

I spent hours in Chrome help as well as on the internet trying to find out where the “allow list” is in Chrome.  The trouble is that there is nothing called “allow list” in Chrome.

Reply | Quote

It looks like this is the “correct” way to do it,  with Chrome doing it.  Very easy to do when you know how.  Thank you for posting this.

Reply | Quote

Of course #2354415 must refer to #2354237 as the “correct” way to do it. Many thanks to anonymous for that bit of Chrome education.

Reply | Quote

Interesting, I just updated Chrome to Ver.90.0.4430.72 (Official Build) as ‘Google rolls out Chrome 90, which defaults to HTTPS instead of HTTP’ and downloaded a catalog file with Block (default) insecure content back on – it’s fine again!

Google’s release notes say that Chrome 90 contains 37 security fixes, six of which are categorised as “high”, including a zero-day vulnerability that was recently revealed to be affecting all Chromium-based browsers.

The news comes as the company gears up to release its FLoC system, which is designed to replace third-party cookies for ad tracking through a new API which was recently added to Google Chrome. However the system has already met opposition, with a number of other browser makers saying they won’t support FLoC over concerns around user privacy.

Reply | Quote

With the previous version of Chrome I had to go to Firefox to download from the Update Catalog.  It seems crazy,  but I just did a download and can confirm catalog downloads are fine again with Ver.90.0.4430.72 (Official Build) (64-bit) with insecure content turned on.

Reply | Quote

Observation:
Older dotNET won’t update with a newer SSU using slc redirect method here!
Nand and Nor gates at work with 2021 SSU’s and 2020 dotNET’s (SMQR)
Abbodi86 can you confirm this? Is this date/year affected by SSU?
Thanks in advance

If debian is good enough for NASA...

Reply | Quote

SSU and .NET 4.x updates are totally separated
which updates failed?

dotNetFx4_ESU_Installer is manual installer, not via WU

Reply | Quote

[Microfix]

kb4592510 SSU Dec 2020 and attempted to install dotNET 4.5.2 kb4578955, failed
Although I just installed March 2021 kb4578955 v2 without issue. Yeah I know it’s not a NET security update but has the security within AFAIK (Originally from an image at EOL Feb 2020)
this is what I done from EOL image resurrection:

SSU Jul 2020 ( manual restart)
ESU LLP Jul 2020 (manual restart)
SSU Dec 2020 (manual restart)
SMQR CU Feb 2021 (double restart)
.NET Oct 2020 kb4578955 Failed
.NET Mar 2021 kb4578955 v2 (manual restart)
All ok with no violations

Edit: All .NET 3.5.1 patches installed also.

If debian is good enough for NASA...

• This reply was modified 3 years, 11 months ago by Microfix.

Reply | Quote

Like i said, SSUs has no affect on .NET 4.x updates at all 🙂

regarding the failed installation, it’s digital signature issue, thus they created v2

see the “Known issues”
http://support.microsoft.com/kb/4578955

2 users thanked author for this post.

Microfix, PKCano

Reply | Quote

Yeah, no SSU or dotNET updates this month 🙂
Although kb4601275 (?) is there..no documentation yet

If debian is good enough for NASA...

Reply | Quote

[EP]

KB4601275 appears to be a standalone timezone patch of some sort (I checked the contents of a KB4601275 cab file and has a bunch of timezones.resources manifest files)

no need to install KB4601275

• This reply was modified 3 years, 11 months ago by EP.

2 users thanked author for this post.

Microfix, abbodi86

Reply | Quote

AKB 2000003 has been updated for Group B Win7 (ESU) and Win8.1 on April 13, 2021.

There is a Security-only Update for those with Win7 ESU subscriptions.
There was no April IE11 CU for Win7.

April Rollup KB5001335 Download 32-bit or 64-bit. for those with Win7 ESU subscriptions.

You must have at least the August Servicing Stack KB4570673 previously installed to receive these updates).
The latest is the December Servicing Stack KB4592510 – Download 32-bit or 64-bit for those with Win7 ESU subscriptions.

There is a revised Licensing Preparation Package KB4575903 dated 7/29/2020 for Win7 ESU subscriptions, if you need it.

There were no new .NET updates listed for Win7. See #2357362.

There is a Time Zone Change update for The Republic of South Africa and Sudan KB4601275 for Win7 and Win8.1 if you want to install it.

6 users thanked author for this post.

byteme, jburk07, unleashed, Microfix, SueW, abbodi86

Reply | Quote

Here’s your .NET for April, 2021. There were no new .NET updates for April, 2021.

There were metadata (only) changes to the following  Security-only .NET updates. You do not have to reinstall the updates.

+ 2020-05 Security Only Rollup KB4556403 (.NET 4.5.2-4.8)
KB4552952 (.NET 4.5.2), KB4552951 (.NET 4.6-4.7.2), and KB4552953 (.NET 4.8)
+ 2020-07 Security Only Rollup KB4566466 (.NET 4.5.2-4.8)
KB4565583 (.NET 4.5.2), KB4565586 (.NET 4.6-4.7.2), and KB4565589 (.NET 4.8)
+ 2020-08 Security Only Rollup KB4570500 (.NET 4.5.2-4.8)
KB4569743 (.NET 4.5.2), KB4569740(.NET 4.6), and KB4569733 (.NET 4.8)
+ 2020-09 Security Only Update  KB4576490 (.NET 4.8)
+ 2020-10 Security Only Rollup KB4580467 (.NET 4.5.2-4.8)
KB4578983 (.NET 4.5.2), KB4578987 (.NET 4.6), and KB4578990 (.NET 4.8)
+ 2021-02 Security Only Rollup KB4602958 (.NET 4.5.2-4.8)
KB4601090 (.NET 4.6-4.7.2), and KB4601089 (.NET 4.8)

4 users thanked author for this post.

jburk07, Microfix, unleashed, abbodi86

Reply | Quote

[Microfix]

Noticed both aitstatic (Application Impact Telemetry Static Analyzer) and CompatTelRunner were updated with kb5001335 SMQR. Due to the nature of the bypass script, it may be something to monitor/ check for those who do not use it.
Otherwise, seems like a a clockwork update so far.
No errors in event viewer and SFC post patch output below:

Will update should anything go south, west ot otherwise, generally too early to commit..

aitAgent, aitstatic and CompatTelRunner are already on the firewall outgoing blocklist here, as a secondary precaution.

UPDATE: nothing to report, all good here 🙂

If debian is good enough for NASA...

• This reply was modified 3 years, 11 months ago by Microfix.
• This reply was modified 3 years, 10 months ago by Microfix.

1 user thanked author for this post.

jburk07

Reply | Quote

Those using .NET <4.8, you want to read this post as a warning:
Various .NET End of Service Date

If debian is good enough for NASA...

3 users thanked author for this post.

jburk07, SueW, abbodi86

Reply | Quote

Reminder: This post is Important if you are upgrading from a previous version of .NET using the SMQR updates.

(NOTE: Applies to all Win7 ESU users whether using the bypass or not)

PKCano wrote:

Here’s your .NET for March, 2021. There were no Security-only .NET updates.

Download only the update for the version(s) installed on your PC.
NOTE: Updates for v3.5.1 are older (Oct 2020) and should already be installed.
Updates for v5.2,  v4.6 – 4.7.2 and v4.8 have been re-signed as version 2 and should be installed.

.NET Quality Rollup KB4579977 (2020-10)
.NET 3.5.1 KB4578952 (Oct 2020)
.NET 4.5.2 KB4578955 v2
.NET 4.6 – 4.7.2 KB4578963 v2
.NET 4.8 KB4578977 v2

.Net Quality Rollup KB4603002 (2021-02)
.NET 3.5.1 KB4578952 (Oct 2020)
.NET 4.5.2 KB4578955 v2
.NET 4.6 = 4.7.2 KB4600945 v2
.NET 4.8 KB4600944 v2

If debian is good enough for NASA...

Reply | Quote

Microfix wrote:

Those using .NET <4.8, you want to read this post as a warning:
Various .NET End of Service Date

No rush. There is another year (April 2022) before EOL.

Reply | Quote

though at least .NET 4.6.2 will be the minimum .NET version supported beyond April 22

Reply | Quote

DEFCON 4!  Time to install KB5001335 using W7ESUI.

I just installed it on two Win 7,  SP 1,  x64 machines.

Reply | Quote

kb5001335 installed smoothly. (including a double restart.)

System is running fine.

Something I did notice though, the 2 restore points created by the installation are labeled Windows Module Installer instead of Windows Update.

Is this because of the ESU script?

Reply | Quote

Yes, Dism.exe = Windows Module Installer

1 user thanked author for this post.

Moonbear

Reply | Quote

Which means its been showing up that way since last year.

This is what happens when i skip my morning coffee.

Reply | Quote

One more question if I may, can the Windows Server version of a patch be installed on a normal Windows system?

And, if it was installed on a non-server how could you tell?

Do server patches even work with the ESU script?

(For context, after I asked my question about the Windows Module Installer restore points, I began to wonder if I had managed to download and install the wrong version of the patch before you answered me @abbodi86 I don’t still think I did this, now I’m just curious.)

Reply | Quote

Update files (monthly rollup or security only) are the same for Server 2008 R2 x64 and Win7 x64 and Win 7 Embedded x64

except few old specific updates for each

1 user thanked author for this post.

Moonbear

Reply | Quote

I didn’t know the files were the same.

I knew the rollups were the same size but I never really thought about why that might be.

Thanks again.

Reply | Quote

While I understand that the update files are the same, I still have a question if the installer is good for Windows Server 2008 R2?

Thank you!

Reply | Quote

I’m not aware that anyone has wanted to put their production server at risk to test it out.

Susan Bradley Patch Lady/Prudent patcher

1 user thanked author for this post.

abbodi86

Reply | Quote

Hi all

Updated my win7 until jan2020 (i’m almost a year and half late…) and was trying to use the W7ESUI script to update from there.

When I run the initial command I get options 1, and E, but not D… Though it  allows me to go on with february 2020 patches but then i get the error 0x80004005 at the end  (dism log and screenshot attached).

Does anyone have any ideas about what to do?

Thanks a LOT to the author of W7ESUI

Reply | Quote

To make the script work (instructions in at top of thread):
+ Create a folder (best in the root of C:
+ Add the downloaded .zip file and expand it.
+ Add the Rollup, and you will also need the Servicing Stack Update, to that folder.
+ Right click on the .cmd file and choose “Run as Administrator”
+ Choose “0” to run the sctipt – and WAIT (it takes a while).

 

See #2357353 for some information about prerequisites. (Just ignore the “for people with ESU”)
Also, the .NET updates have to be treated differently, put in a different folder, and use a different script. The instructions are in the top Post on this thread.

1 user thanked author for this post.

joao_h

Reply | Quote

“+ Add the Rollup, and you will also need the Servicing Stack Update, to that folder.”

I thought I should install the Servicing Stack Update that the script was asking for, instead of just adding it to the folder. IDK if it is that action that caused the successive 0x80004005 errors,

I tried to rollback/restore the system to previous points but now there is a BIG mess.  the “view update history” shows the last updates but the installed updates does not show them at all (see screenshots).

Already run update troubleshooter but to no avail. Any recommendations?

Reply | Quote

You don’t seem to have success using whatever you are doing.

I’ve been using the method above for 1 1/2 years on 6 Win7 machines. since Win7 went EOL without any problems or error codes.
In addition to helping a lot of people here do the same.

My suggestion would be to follow the instructions in the top post, which are the same as above. You don’t need the ESU stuff (license, prep pack). The rest of the links are in #2357353 except for the latest SHA-2 update (KB4474419) released September 10, 2019, which is also a prerequisite. The computer should be up to date as of Jan Patch Tuesday. The Prerequisites are listed in the MS Support Pages for the latest Rollup KB5001335 if you want to be sure you are not missing some of them. After the prereqs are installed, you will only need the latest Rollup (it’s cumulative) and latest SSU.
Only the .NET  installer (.msu file) goes in that folder. The .NET updates (.exe files) do not belong in the same folder – they require the other script mentioned in the top post.

Reply | Quote

Hello and Greetings to all,

First I would Like to show appreciation to abbodi86 for the W7ESUI script. Many thanks.

I do have a question the Script left some temp files on one of my drives and i would like to know if it’s ok to delete them and any others left after installations are finished? It usually deletes the folders but some have been missed and I was wondering if there is a reason for this?

Again Thanks for the script!!!!

Reply | Quote

Could you tell us the name of the folder and contents? And the Path would be helpful too.
And the path to the folder you ran the script from?

Reply | Quote

I have my user folders in a drive other than the C Drive
The path I have been installing from: F:UsersEaglecomanderDownloads-Win 7 ESU
The Path and name of the first folder: F:W7ESUItemp_4301 and inside that folder is a Folder named Windows6.1-KB4592510-x64 and inside that is a file named x86_microsoft-windows-servicingstack_31bf3856ad364e35_6.1.7601.24563_none_0bb911db3ed3f553.manifest
The Path and name of the first folder: F:W7ESUItemp_13364 and inside that folder is three Folders (See screenshot 1). 1st folders name is 201E78BA-F422-45A9-8B80-39561070AA4D (It has a lock icon on it) and contents are 1 folder named en-US and several files (See Screenshot2) contents of Folder en-US are shown in screenshot 3. 2nd folders name is 0870618B-7276-4673-B7FA-EC4B0EC1550F and it doesn’t have any contents. 3rd folders name is Windows6.1-KB4592510-x64 and it has 2 folders and numerous files (See screenshot 4) contents of folder amd64_microsoft-windows-servicingstack_31bf3856ad364e35_6.1.7601.24563_none_67d7ad5ef7316689 are (See screenshot 5) and contents of folder x86_microsoft-windows-servicingstack_31bf3856ad364e35_6.1.7601.24563_none_0bb911db3ed3f553 are (See Screenshot 6)

 

Reply | Quote

The installation has nothing to do with your User folders.
The .msu files for the Rollups and the SSUs contain .cab files. You do not extract anything in the update files.

If you want this to work, please follow the instructions.
To make the script work (instructions in at top of thread):
+ Create a folder (best in the root of the system drive C:) See screenshot above)
+ Add the downloaded W7ESUI_0.3.zip file and expand it. (see screenshot above)
+ Add the Rollup (.msu file), and you will also need the Servicing Stack Update, (.msu file) to that folder. (Do not expand them, the installation script does that)
+ Right click on the W7ESUI.cmd file and choose “Run as Administrator”
+ Choose “0” to run the sctipt – and WAIT (it takes a while).
+ Restart your computer.

When you log in again, you can delete the .msu files if the updates installed. The script cleans up the .cab files and they are no longer there. If you leave the folder on the C: drive with the extracted W7ESUI_0.3.zip, it will make it easier next month.
You use this same procedure to install any .msu files.

1 user thanked author for this post.

abbodi86

Reply | Quote

The updates were already installed I just think these were left over for some reason. I had to restore my computer from an older image and did all the updates after all the updates were done I found those Temp file folders on my F user drive I just want to know if I can delete them since the updates are already installed and I have rstarted numerous times I probably should have found them earlier. So since I have restarted since these folders were made would it be safe for me to delete all three?

Again thanks for the script it has worked flawlessly and I have been using it since you first posted it and this is the first time I found any left overs. When the cab files were unpacked they were saved in the root of my F drive and thats the first time it ever did that or at least the first time it didn’t delete the temp files/folders.

And I think you deserve a great big hurrah for making that script.

Reply | Quote

You don’t need the .cab files if the updates are installed. You can delete those.
I suspect that if you had installed from the C: drive, those would have been deleted by the script.

Each Patch Tuesday, I publish the Win7 information in this thread (like #2357353 and the .NET information below it) and on the main Blog under the Patch Tuesday post. The direct Catalog download links are included to make it easier.

BTW, @abbodi86 and the gurus on MDL are responsible for this workaround.
I’m just the helper here at AskWoody.

1 user thanked author for this post.

MikeL

Reply | Quote

I’ve been installing from my F:UsersEaglecomanderDownloads-Win 7 ESU for the past year and it has always deleted everything before. I wonder if it was because I installed 3 months of updates one right after the other (After restarting of course). Thanks for the info and the Script!

Reply | Quote

AKB 2000003 has been updated for Group B Win7 (ESU) and Win8.1 on May 11, 2021.

There is a Security-only Update for those with Win7 ESU subscriptions.
There is a May IE11 CU KB5003165 for Win7. Download 32-bit or 64-bit.

May Rollup KB5003233 Download 32-bit or 64-bit for those with Win7 ESU subscriptions.

You must have at least the August 2020 Servicing Stack KB4570673 previously installed to receive these updates).

The latest is the December Servicing Stack KB4592510 – Download 32-bit or 64-bit for those with Win7 ESU subscriptions.

There is a revised Licensing Preparation Package KB4575903 dated 7/29/2020 for Win7 ESU subscriptions, if you need it.

There are .NET updates listed for Win7. See #2364213.

6 users thanked author for this post.

byteme, MrChaz, Microfix, abbodi86, pandarunnerpt, SueW

Reply | Quote

Here’s your .NET for May, 2021 . There were no Security-only .NET updates.

Download only the update for the version(s) installed on your PC.

.NET Quality Rollup KB5001878
.NET 3.5.1 KB4578952 (Oct 2020)
.NET 4.6 – 4.7.2 KB5001848
.NET 4.8 KB5001843

Correction: My mistake. .NET 3.5.1 KB4578952 was issued in Oct 2020 and should already be installed.

9 users thanked author for this post.

byteme, jburk07, Moonbear, MrChaz, zat_so, SueW, Microfix, abbodi86, pandarunnerpt

Reply | Quote

Thank you.

Reply | Quote

Does v2 of kb4578952 need to be installed if v1 already has been?

Or is v2 only metadata?

Reply | Quote

v2 is for ndp45-kb4578955-v2
it’s not needed if v1 is installed, or you have .NET 4.6 or later

2 users thanked author for this post.

jburk07, Moonbear

Reply | Quote

Test Win7 Pro x86 (ESUb)imaged prior to installation.
SMQR = kb5003233 (May 2021 CU)
Smooth installation, no issues via Event Viewer,
Nothing re-activated in ‘Data Collector Sets’
Canon Pixma local printer working as intended.
SFC check as below:

Any issues encountered will be added here..tbc

If debian is good enough for NASA...

3 users thanked author for this post.

jburk07, MrChaz, abbodi86

Reply | Quote

Missed March and April’s ESU patches which entailed a double restart when May’s patch was installed. No issues here whatsoever. Thank you again abbodi86

illegitimi Non Carborundum

Reply | Quote

Installed April rollup kb5001335 using W7ESUI 0.3 on a Windows 7 Pro 64bit SP1.

Had installed .NET 4578977 v.2 and 4600944 v.2 previously with no problems at all (manual restart) but skipped the March rollup to avoid the printer issue.

Kb5001335 caused my computer to repeatedly and quickly fluctuate CPU from 10 to 45% or so (when it usually runs under 5%). I rebooted twice  restarted completely twice but it didn’t settle down. Finding no other reason save the April rollup, I uninstalled it. Now all is back to normal.

Win 7 Professional, 64 bit, was Defiantly Group B, but installed 0Patch and needed to become group A to comply.

1 user thanked author for this post.

jburk07

Reply | Quote

Oh, I see my signature – I was group B I am no longer, since installing 0Patch  a year + ago I’ve been group A.

Win 7 Professional, 64 bit, was Defiantly Group B, but installed 0Patch and needed to become group A to comply.

Reply | Quote

pandarunnerpt wrote:

since installing 0Patch  a year + ago I’ve been group A.

Since you installed 0Patch (Pro?) you should be Group 0P. No need of any of Microsoft updates, A or B.

Reply | Quote

Alex5723 wrote:

pandarunnerpt wrote:

since installing 0Patch  a year + ago I’ve been group A.

Since you installed 0Patch (Pro?) you should be Group 0P. No need of any of Microsoft updates, A or B.

I do have 0Patch Pro and have continued with group A  based on this info from opatch:

“As long as original vendor’s security updates are available and free, we recommend applying them as quickly as you can. Monthly Windows Updates, as well as any other software product’s updates, often include fixes for vulnerabilities we don’t have micropatches for…” https://0patch.zendesk.com/hc/en-us/articles/360018988493-Can-0patch-be-used-as-a-substitute-for-Windows-Updates-

I was hoping that I was better covered.

Win 7 Professional, 64 bit, was Defiantly Group B, but installed 0Patch and needed to become group A to comply.

1 user thanked author for this post.

Alex5723

Reply | Quote

KB5003233 and KB5001848 installed with no issue and system is running fine.

I tried to install KB4578952 but it was not detected by the ESU script even though it was in the same folder as KB5003233,

1 user thanked author for this post.

jburk07

Reply | Quote

KB4578952 is released in October 2020, it should already be installed since then

2 users thanked author for this post.

jburk07, Moonbear

Reply | Quote

KB4578952 was installed in October

I mistakenly thought the KB4578952 that’s part of KB5001878 was a replacement for the original.

Thanks again

Reply | Quote

Ooops. See correction in #2364213 above.

3 users thanked author for this post.

jburk07, abbodi86, Moonbear

Reply | Quote

I am very confused because PKCano made this entry in #2364213.
.NET 3.5.1 KB4578952 v2 non-security, install v2 (Other ver. updated to v2 in March)
Based on this message I thought KB4578952 v2 needed tobe installed. Note the entry says there was an update to v2 in March.
The version installed on my machines is dated October 2020, as you say it should be. Since W7ESUI was giving me the message “All applicable updates are installed” I was about to uninstall it and install this new v2.
Thank goodness I saw your message. Now I am confident in leaving KB4578952 dated October 2020 installed.

Reply | Quote

DEFCON 4!  Time to install May updates.

using DOTNETFX4 for

.NET Framework 4.8 – KB5001843

and W7ESUI for

Windows Monthly Rollup – KB5003233

I installed these updates on two Win 7,  SP 1,  x64 machines.

 

1 user thanked author for this post.

jburk07

Reply | Quote

I turned on a Win 7 Pro 64-bit desktop that was out of service since January, and I used the techniques here to install ONLY

KB5003233 for Win 7 64-bit and
KB4600944v2 for .NET 4.8

I did not install updates that came out between January and these, hoping that these are cumulative.

1. So, am I OK?
2. Is KB4600944v2 the last good update for .NET 4.8?

Thanks!

Reply | Quote

You should have the SSU from Dec 2020 already installed (?)

Reply | Quote

PKCano – You wrote “You should have the SSU from Dec 2020 already installed (?)”

What is its KB?

Thanks.

Reply | Quote

It’s KB4592510

Win7 - PRO & Ultimate, x64 & x86
Win8.1 - PRO, x64 & x86
Groups A, B & ABS

Reply | Quote

See #2364212 above.
The current information is posted on this thread every month on Patch Tuesday. Check back next week on the 8th for June updates.

Reply | Quote

Yes
although, you could install latest .NET 4.8 update KB5001843, but it’s non-security update

Reply | Quote

AKB 2000003 has been updated for Group B Win7 (ESU) and Win8.1 on June 8, 2021.

There is a Security-only Update for those with Win7 ESU subscriptions.
There was a June IE11 CU KB5003636 for Win7. Download 32-bit or 64-bit.

June Rollup  KB5003667 Download 32-bit or 64-bit for those with Win7 ESU subscriptions.

You must have at least the August 2020 Servicing Stack KB4570673 previously installed to receive these updates).

The latest is the December Servicing Stack KB4592510 – Download 32-bit or 64-bit for those with Win7 ESU subscriptions.

There is a revised Licensing Preparation Package KB4575903 dated 7/29/2020 for Win7 ESU subscriptions, if you need it.

There are .NET updates listed for Win7. See #2369921.

8 users thanked author for this post.

byteme, TaskForce141, Pim, jburk07, Moonbear, abbodi86, Microfix, SueW

Reply | Quote

Here’s your .NET for June, 2021. There were no Security-only .NET updates.

Download only the update for the version(s) installed on your PC.
There were only updates for .NET 4.6-4.7.2 and 4.8
The other updates in the Rollups are older and should already be installed.

.NET Quality Rollup KB5003779
.NET 3.5.1 KB4578952 (Oct 2020)
.NET 4.5.2 KB4578955 (Oct 2020)
.NET 4.6 – 4.7.2 KB5003547
.NET 4.8 KB5003543

7 users thanked author for this post.

byteme, TaskForce141, jburk07, Pim, SueW, Moonbear, abbodi86

Reply | Quote

I think there is a typo here.  Microsoft Update Catalog shows KB5003543 as the June, 2021 .NET 4.8 Rollup,  not KB5004543.

3 users thanked author for this post.

Microfix, Pim, SueW

Reply | Quote

Yes, both 4.6-4.7.2 and 4.8 corrected to 35. Thanks.

2 users thanked author for this post.

Pim, SueW

Reply | Quote

PKCano wrote:

There is a Security-only Update for those with Win7 ESU subscriptions.
There was no/a June IE11 CU KBxxxxxxx for Win7. Download 32-bit or 64-bit

KB5003636 for IE not included?

MSRC Number: n/a
MSRC severity: Critical
KB article numbers: 5003636
More information:
https://support.microsoft.com/help/5003636

If debian is good enough for NASA...

Reply | Quote

Can you not read?

PKCano wrote:

Under construction……….

It’s not finished yet. MS still hasn’t published the June History page

Reply | Quote

Hi,

Win7 HP x64, W7ESUI_0.2

Installed;

• Apr – Jun 2021 SO updates (KB 5001392, KB 5003228, KB 5003694)
• Jun 2021 (IE11) – KB 5003636

No problems to report.

Thanks,all.

3 users thanked author for this post.

Microfix, TaskForce141, SueW

Reply | Quote

Installed June rollup kb5003667 using the script last weekend and no issues to report, all working well here 🙂

illegitimi Non Carborundum

3 users thanked author for this post.

jburk07, Microfix, TaskForce141

Reply | Quote

Thank you for reporting no issues with June rollup kb5003667

Reply | Quote

DEFCON 4!  Time to install June updates.

using DOTNETFX4 for

.NET Framework 4.8 – KB5003543

and W7ESUI for

Windows Monthly Rollup – KB5003887

I installed these updates on two Win 7,  SP 1,  x64 machines.

1 user thanked author for this post.

jburk07

Reply | Quote

Can’t find KB5003887 in the Widows Update Catalogue.
Did you mean KB5003667?

A1ex

Reply | Quote

Ooooops, my bad.  Yes the correct Windows Monthly Rollup KB is KB5003667.

Sorry.

 

Reply | Quote

I might have fallen behind in my updates for .NET 4.8 on my old Win 7 Pro 64-bit production machine.  The last ones I installed using the methods here were in late February — KB 4597254 and KB 4600944.

Which ones have I missed that should now be installed under DefCon 4?

Thanks.

Reply | Quote

Scroll up.
There is a .NET entry just below the monthly information entry each month. Start here.
The information is there.
I don’t think there have been any security contents in the .Net updates since Feb.

Reply | Quote

PKCano – Thanks.  Looks like the latest .NET 4.8 (after my prior) is KB5003543.

Now, I had also downloaded but not yet installed KB5001843 – should I install that one first or just skip to KB5003543 ?

Reply | Quote

I’d put both in the folder. Can’t hurt.
If both are needed, they will install. If not, the one needed will install.

Reply | Quote

July updates are released 1 week earlier

2021-07 Security Monthly Quality Rollup for Windows 7 (KB5004953)
2021-07 Security Only Quality Update for Windows 7 (KB5004951)

Edit:
false alarm, they are Out of Band
https://docs.microsoft.com/en-us/windows/release-health/windows-message-center#1646

couldn’t they just release small separate update instead?

1 user thanked author for this post.

PKCano

Reply | Quote

AKB 2000003 has been updated for Group B Win7 (ESU) and Win8.1 on July 6, 2021. A Monthly Rollup and Security-only Out-of-band have been released to address the Print spooler exploit (PrintNightmare).

There is a Security-only Update for those with Win7 ESU subscriptions.

2 users thanked author for this post.

SueW, abbodi86

Reply | Quote

I guess the entry should say (Out-of-band), not (Monthly Rollup Out-of-band)

Reply | Quote

Repeating what’s on the Win7 history page – says “(Monthly Rollup) Out-of-band” 🙂

Support pages aren’t up yet as of this post.

Reply | Quote

I ment that AKB 2000003 is for Security-only updates 🙂

KB5004951 s a security only update (replace June update KB5003694)

1 user thanked author for this post.

SueW

Reply | Quote

OK, SO was linked, wording wrong. Fixed. Thanks.

2 users thanked author for this post.

abbodi86, SueW

Reply | Quote

Question about this out-of-band “July 6, 2021—KB5004951 (Security-only update) Out-of-band” —

In my wife’s mini-office, we have two Win 7 Pro 64-bit PCs that I keep updated with the techniques here (and thanks again).  We also have an HP OfficeJet Pro 8600 All in One that the PCs connect to on the LAN.  Do I need to install this KB5004951 out-of-band rush that deals with this “exploit in the Windows Print Spooler service, known as PrintNightmare” because the exploit is serious, or should I wait for DefCon 4 for the next monthly updates (as I usually do)?

Reply | Quote

I think the exploit mainly affect Print servers

Reply | Quote

Windows 7 is not affected as far as we know – this may change.
Home users are not targeted as far as we know – this may change.

Keep an eye on the home page for updates.

cheers, Paul

1 user thanked author for this post.

glnz

Reply | Quote

Think I’m going to hang off untill the July week B patch is released.

illegitimi Non Carborundum

Reply | Quote

From my experience for July patches, installed SSU kb5004378 and Monthly Rollup kb5004289 using the bypass method. Restarted then installed Net4.8 kb5004116 using the slc redirection method. No problems to report since installation on the 15th july, all working well here, long live Windows 7!

illegitimi Non Carborundum

1 user thanked author for this post.

jburk07

Reply | Quote

AKB 2000003 has been updated for Group B Win7 (ESU) and Win8.1 on July 13, 2021.

There is a Security-only Update for those with Win7 ESU subscriptions.
There is a July IE11 CU KB5004233 for Win7. Download 32-2it or 64-bit.

July Rollup KB5004289 Download 32-bit or 64-bit for those with Win7 ESU subscriptions.

You must have at least the August 2020 Servicing Stack KB4570673 previously installed to receive these updates).

Note: There is a new July Servicing Stack KB5004378 – Download 32-bit or 64-bit for those with Win7 ESU subscriptions.

There is a revised Licensing Preparation Package KB4575903 dated 7/29/2020 for Win7 ESU subscriptions, if you need it.

There are .NET updates listed for Win7. See #2377439.

7 users thanked author for this post.

byteme, jburk07, MrChaz, RDRguy, abbodi86, Microfix, SueW

Reply | Quote

Here’s your .NET for July, 2021. There were no Security-only .NET updates.

Download only the update for the version(s) installed on your PC.
There were only updates for .NET 4.6-4.7.2 and 4.8
The other updates in the Rollups are older and should already be installed.

.NET Quality Rollup KB5004229
.NET 3.5.1 KB4578952 (Oct 2020)
.NET 4.5.2 KB4578955 (Oct 2020)
.NET 4.6 – 4.7.2 KB5004120
.NET 4.8 KB5004116

8 users thanked author for this post.

byteme, jburk07, glnz, MrChaz, RDRguy, abbodi86, SueW, Microfix

Reply | Quote

Are you saying July Serving Stack KB5004673 should be installed only if I have a Win7 ESU subscription,  and if I do not have a Win7 ESU subscription I should NOT install July Serving Stack KB5004673 using WIN7ESUI?

 

Reply | Quote

Ignore the ESU part (everything says ESU). Install the Servicing Stack the same way you install the Rollup or SO (put it in the same folder). You don’t need the ESU if you are using this method.

Reply | Quote

I suspect you meant to say … “KB5004378” not … “KB5004673” {this doesn’t exist}

Win7 - PRO & Ultimate, x64 & x86
Win8.1 - PRO, x64 & x86
Groups A, B & ABS

Reply | Quote

You are correct.  I saw the error as soon as it was posted,  but could not figure out how to make a correction.

Reply | Quote

All July updates installed with no issues.

2 users thanked author for this post.

SueW, jburk07

Reply | Quote

Although the July 2021 Rollup (KB5004289) installed without issues the script would not install the July 2021 Servicing Stack (KB5004378).  First attempt was with the Rollup and it was ignored.  Second attempt was separately and the script did not seem to recognize it.

My mistake.  I forgot that I previously installed the July SSU after the June 2021 Rollup.

Reply | Quote

DEFCON 4!  Time to install July updates.

using DOTNETFX4 for

.NET Framework 4.8 – KB5004116

and W7ESUI for

Windows Monthly Rollup – KB5004289

Service Stack Update – KB5004378

I installed these updates on two Win 7,  SP 1,  x64 machines.

P.S. Chrome would not download from Microsoft Update Catalog.  Is anyone else having this problem with Chrome?  Does anyone know what the problem is/how to fix the problem?

 

1 user thanked author for this post.

jburk07

Reply | Quote

Go to the Microsoft site instead of the Catalog. There is a page specifically for Chromium Edge.

https://www.microsoft.com/en-us/edge

1 user thanked author for this post.

jburk07

Reply | Quote

The name is in the link – Edge.  All see there is ads for, hype about,  and links for downloading,  Edge.

Reply | Quote

using dotNetFx4

.NET Framework 4.8 – KB5004116

and W7ESUI_0.3

Windows Monthly Rollup – KB5004289

Service Stack Update – KB5004378

I installed these updates on two Win 7, SP 1, x64 machines with no problems.

Also – a very quick set of updates compared to the last few.

Win 7 Professional, 64 bit, was Defiantly Group B, but installed 0Patch and needed to become group A to comply.

1 user thanked author for this post.

jburk07

Reply | Quote

what should i do with file RunOnce_W10_Telemetry_Tasks.cmd that is on my desktop?

Reply | Quote

When I used the script on my Win7 systems it also created the telemetry related .cmd file.  I allowed the script to run.  So far, I’ve not noticed any ill effects.

1 user thanked author for this post.

Alex5723

Reply | Quote

Anonymous and EricB – My Win 7 Pro 64-bit machine also has this on its desktop.

Do we have any idea what it does, or why it appears as an option on our desktops?

I could copy and paste its lines here, but is there a way to shrink or temporarily hide them here, like “Spoiler”?

Reply | Quote

glnz wrote:

Do we have any idea what it does, or why it appears as an option on our desktops?

This question is best answered by the author of the script.  Having said that, a cursory inspection showed that Microsoft data collection/telemetry  have been deleted.  For example, the scheduled tasks used by the CEIP and ApplicationExperience that fed data to Microsoft are now gone.  Before using the script I had manually disabled such tasks.

Reply | Quote

See AKB2000012: Neutralize Telemetry & Sustain Win 7, 8.1 Monthly Rollup Model .

2 users thanked author for this post.

EricB, abbodi86

Reply | Quote

Should we run it?

Reply | Quote

I did the manual clean out as described in AKB2000012, then set the script up in Task Scheduler to run on startup (for both my Win7 and Win8.1). It assures that whatever MS tries to put back gets wiped out again on a regular basis.
Follow the instructions in AKB2000012.

2 users thanked author for this post.

jburk07, abbodi86

Reply | Quote

AKB 2000003 has been updated for Group B Win7 (ESU) and Win8.1 on August 10, 2021.

There is a Security-only Update for those with Win7 ESU subscriptions.
There is an August IE11 CU KB5005036 for Win7. Download 32-bit or 64-bit.

August Rollup KB5005088 Download 32-bit or 64-bit for those with Win7 ESU subscriptions.

You must have at least the August 2020 Servicing Stack KB4570673 previously installed to receive these updates).

There is a July 2021 Servicing Stack KB5004378 – Download 32-bit or 64-bit for those with Win7 ESU subscriptions.

There is a revised Licensing Preparation Package KB4575903 dated 7/29/2020 for Win7 ESU subscriptions, if you need it.

There are .NET updates listed for Win7. See #2382937.

6 users thanked author for this post.

byteme, MrChaz, jburk07, Microfix, abbodi86, SueW

Reply | Quote

Here’s your .NET for August, 2021. There were no Security-only .NET updates.

Download only the update for the version(s) installed on your PC.
There were only updates for .NET 4.6-4.7.2 and 4.8
The other updates in the Rollups are older and should already be installed.

.NET Quality Rollup KB5004871
.NET 3.5.1 KB4578952 (Oct 2020)
.NET 4.5.2 KB4578955 (Oct 2020)
.NET 4.6 – 4.7.2 KB5004757
.NET 4.8 KB5004755

6 users thanked author for this post.

byteme, MrChaz, jburk07, SueW, Microfix, abbodi86

Reply | Quote

SMQR kb5005088 installed using ESUb, no event errors, integrity good, no telemetry added and pixma printer/ scanner works as intended. Only one restart required post patch.

If debian is good enough for NASA...

2 users thanked author for this post.

MrChaz, jburk07

Reply | Quote

Homeuser – Another month free of bugs, Windows 7, simply the best! (of microsoft) Still have print nightmare mitigations in place. (have no printer anyway)

illegitimi Non Carborundum

Reply | Quote

DEFCON 4!  Time to install August updates.

using DOTNETFX4 for

.NET Framework 4.8 – KB5004755

and W7ESUI for

Windows Monthly Rollup – KB5005088

I installed these updates on two Win 7,  SP 1,  x64 machines.

P.S. Chrome would not download from the Microsoft Update Catalog.

 

Reply | Quote

Just want to point out that Susan Bradley’s Patch List might have an error for which update is which for Win 7.  I ported about it on her new thread on these forums at

https://www.askwoody.com/forums/topic/ms-defcon-4-all-clear-for-consumers-less-so-for-businesses/#post-2385842

What do you think?

Reply | Quote

You were correct about the KB numbers. See #2382936 above

1 user thanked author for this post.

glnz

Reply | Quote

August updates installed with no issue and printer still works as intended.

No problems to report at this time.

1 user thanked author for this post.

GoneToPlaid

Reply | Quote

Hi! If i have Internet Explorer uninstalled on my system, do i still have to install IE11cU?

Also, should i install the latest Servicing Stack Update (KB4570673) before starting the whole procedure?

Reply | Quote

You CANNOT uninstall IE11 from Win7. You CAN, however, remove access to the use of the browser to view the Internet.
IE is built into the functioning of the OS in Win7. Since it is still there (even when you cannot use the browser), you need the security updates.

When you run Win7ESUI, put the SSU in the same folder as the updates (either the Rollup OR the SO + IE11 CU). The script will take care of the order of installation.

Unless you have an ESU paid subscription, you should not be able to install the updates directly. Check “Installed Updates” (not Update History) to verify they are installed.

Reply | Quote

They are visible in Update history but not in Installed Updates. Does it mean they were not installed? Then why did the installation process took so long and required restart of the system?

Reply | Quote

If you are using Rollups, at least the last one you installed should show in Installed Updates.
If you are using SOs and IE11 CUs, then you should see all the SOs and at least the last installed IE11 CU in Installed Updates.
If they are not in Installed Updates, they did not install or the install failed.

Reply | Quote

Three questions:

1. IE11CU is a cumulative update. If i understand it correctly i only need the latest one if i’m up-to-date till January 2020? I don’t have to install it one-by-one like the SOs?
2. I haven’t installed the telemetry updates (listed in the separated thread). Should I install them now to make it all work properly? I would like to avoid the telemetry patches but i’m afraid that not installing them may cause the system to malfunction.
3. KB4541500 is one of the latest SOs that features telemetry. Should I avoid it too?

Reply | Quote

1. Correct. IE11 CUs are cumulative.
2. Win7 SOs are listed in AKB2000003. Avoidance/problems/comments are listed with each patch if applicable. Telemetry patches to avoid are listed at the top of the AKB and should be uninstalled if found in Installed Updates. You can use @abbodi86 ‘s guidance in AKB2000012 to minimize telemetry. If you set the script up in Task Scheduler to run on startup, you will avoid any surprises MS might try to install.
3. KB4541500 contains DiagTrack components. AKB2000012 may have instructions for controlling it. If not, and you don’t want telemetry, do not install. Remember, however, since SOs are not cumulative, you will also miss any other security patches included in the update.

Reply | Quote

Why is it necessary to have the script as a scheduled task? Wouldn’t it be enough to just launch it once after installing the updates? Does that telemetry function re-restart after some time?

Reply | Quote

Because sometimes Windows tasks put things back that you have removed/disabled. Not neccessarily during an update install.

Reply | Quote

Are you aware if AKB2000012 is effective against DiagTrack components in KB4541500?

Reply | Quote

If you run the script on startup in Task Scheduler (instructions in AKB2000012) it avoids any problems on put-back.

Reply | Quote

I have also noticed that it’s possible to install the ESU updates by just launching the regular MSU files. Is it normal?

Reply | Quote

Only if you have real ESU license, or BypassESU project

Reply | Quote

Is there any list of .NET framework Security Only updates since the free support was dropped?

Reply | Quote

Scroll up. If there were any .NET SOs, they are listed in the monthly notices on each Patch Tues.
When you run out of information in this thread, there is a link at the bottom of the first post to the Archive of earlier posts from this thread.

Also, on Patch Tuesdays (if you look at older Main Blog posts on those days), the first post at the top of the “comment on the Lounge” has update information and links to .NET.

Reply | Quote

I thought about a list like the one in the separate topic which features all the Win7 Security-Only patches.

Anyway, if i have .net framework 4.8, is it enough to install the security only updates for 4.8 or i also need the security only updates for various versions including 4.8 (like 2020-05 Security Only Update for .NET Framework 3.5.1, 4.5.2, 4.6, 4.6.1, 4.6.2, 4.7, 4.7.1, 4.7.2, 4.8 for Windows 7)?

By the way, if i have 4.8, is there any point in installing older versions like 4.7 or 3.5? Would 4.8 be enough to make all the .net framework applications to work properly?

Reply | Quote

.NET 3.5 is part of Win7. It’s updates are .msu files and should be included in the folder with the CUs, SOs, SSUs using Win7ESUI.
.NET 4.8 updates are .exe files and should be installed from a different folder using  dotNetFx4_ESU_Installer_r

When you download a Rollup (the one listed with all the versions of .NET) from the catalog, you will find it is a bundle of individual updates, one for each version of .NET. From that bundle, you only need the one(s) for the version(s) you have installed on your computer. The version will be listed in the update file name. You do not need to reinstall ones in the bundle you have previously installed. See #2382937 above.

Since .NET updates (Rollups or SOs) do not include telemetry, they are not listed in AKB2000003, the purpose of which is to avoid telemetry. The Rollups contain non-security and security fixes. The SOs only contain security patches.

Reply | Quote

What I meant was that besides Security Only patches for a specific version like:

2020-05 Security Only Update for .NET Framework 4.8 for Windows 7

next to it, there are Security Only patches in a single pack for various versions like:

2020-05 Security Only Update for .NET Framework 3.5.1, 4.5.2, 4.6, 4.6.1, 4.6.2, 4.7, 4.7.1, 4.7.2, 4.8 for Windows 7

Does the latter pack contain the same as the first when it comes to patching 4.8 only?

Reply | Quote

The first is the individual patch for .NET 4.8

The latter is the Rollup that contains the bundle of patches for all versions (including the individual patch for .NET 4.8). The Rollup (bundle) is just a collection of individual patches, not ONE single patch.

1 user thanked author for this post.

abbodi86

Reply | Quote

OK. Thanks for clearing that up.

By the way, if i have 4.8, is there any point in installing older versions like 4.7 or 3.5? Would 4.8 be enough to make all the .net framework applications to work properly?

Reply | Quote

3.5 is already installed.
I believe 4.8 removes the other earlier versions. Those should be the only two updates you need.

Reply | Quote

On my Win7 machine Programs and Features shows .NET 4.8,  but does not show 3.5.  Should I install 3.5 from the update catalog?

 

Reply | Quote

Look in Programs & Features.
Upper left corner “Turn Windows features on or off.”
.NET 3.5 is part of WIn7 (whether it’s turned on or off).

Reply | Quote

AKB 2000003 has been updated for Group B Win7 (ESU) and Win8.1 on Sept 14, 2021.

There is a Security-only Update for those with Win7 ESU subscriptions.
There was a September IE11 CU KB5005563 for Win7. Download 32-bit or 64-bit.

September Rollup KB5005633 Download 32-bit or 64-bit for those with Win7 ESU subscriptions.

You must have at least the August 2020 Servicing Stack KB4570673 previously installed to receive these updates).

There is a July 2021 Servicing Stack KB5004378 – Download 32-bit or 64-bit for those with Win7 ESU subscriptions.

There is a revised Licensing Preparation Package KB4575903 dated 7/29/2020 for Win7 ESU subscriptions, if you need it.

 

For .NET updates listed for Win7. See #2389777.

9 users thanked author for this post.

jburk07, byteme, Steve, TaskForce141, MrChaz, Moonbear, SueW, Microfix, abbodi86

Reply | Quote

Here’s your .NET for Sept, 2021.
There were no Security .NET updates.
There were no Security-only .NET updates.

9 users thanked author for this post.

jburk07, byteme, TaskForce141, MrChaz, Fred, Moonbear, SueW, Microfix, abbodi86

Reply | Quote

Installed kb5005633 last week, no issues to report as I have no printer.

illegitimi Non Carborundum

1 user thanked author for this post.

TaskForce141

Reply | Quote

Me too.  No issues with the bypass and September rollup KB 5005633 on my last Win 7 Home desktop since installing on Sept. 20.  I have the last servicing stack update (July, KB 5004378), the last .Net 4.8 update, MS Security Essentials, MS EMET 5.52, Edge 93, and Firefox.

I define ‘no issues’ as no bluescreens, no delay or stuck on rebooting during update installation, Youtube working, and VLC media player working.  My old Laserjet is parallel port and works, so I can’t testify if the PrintNightmare patch bugs are hitting me.  That problem seems to be for network printers, not local printers.

1 user thanked author for this post.

Moonbear

Reply | Quote

No issues to report with the install of kb5005633

Everything running as intended.

The install even seemed to go a little bit faster than normal.

Reply | Quote

DEFCON 4!  Time to install September updates.

using DOTNETFX4 for

No .NET Framework updates

and W7ESUI for

Security Update for IE 11 – KB5005563

Windows Monthly Rollup – KB5005633

I installed these updates on two Win 7,  SP 1,  x64 machines.

P.S. Had to use Firefox to get the downloads from the Microsoft Update Catalog.

 

Reply | Quote

If you install the Rollups, you do not need to install the IE11 CUs. They are contained in the Rollups. You only need them if you install the Security-only patches.

The MS catalog download is from http:// not https://. That is probably you had to use Firefox (without https everywhere).

Reply | Quote

Changed https:// to http:// and still will not download in Chrome.

Reply | Quote

It’s not the catalog itself that’s http. The catalog is https.
It’s the download itself that’s http, and you don’t have any control to change that. Look at the url in the download box that pops up.
Chrome is probably blocking downloads from http.

1 user thanked author for this post.

abbodi86

Reply | Quote

Here is everything that comes up in the download box.  I do not see any url.

Download

Download Updates

2021-09 Security Monthly Quality Rollup for Windows 7 for x64-based Systems (KB5005633)

<hr />

windows6.1-kb5005633-x64_59086895fe5fdba20aba8361778708f76489f834.msu 

If I have no control over it,  it really doesn’t matter does it?  I guess I will just have to continue switching to Firefox for downloads from the catalog.

Reply | Quote

Right click on the msu link and “Save link as ..” don’t work too?

Reply | Quote

Yes!  “Save link as…” works.  Thank you very much.

Reply | Quote

I’m having the same HTTP problem and “Save as” does NOT help.  Instead, I get a further error message that says, “The download cannot be saved because an unknown error occurred.”

Si, I can’t download  2021-09 Security Monthly Quality Rollup for Windows 7 for x64-based Systems (KB5005633).

Any ideas?  Thanks.

Reply | Quote

See my post #2394106.

Reply | Quote

Hi, this first happened around March this year on Chrome,
and a helpful lounger posted the solution on this thread.

→ I actually figured out what was happening.
Google Chrome in tightening the settings for insecure content on a secure site.
I had to add the update catalog to the allow list.

So you need to be on the Microsoft Update Catalog website firstly
and then click the tiny padlock pic next to the https:// address bar
* Select, “Site settings” gets you to, Permissions
Choose↓
⟁ Insecure content – Change → Block (default) to Allow

Reply | Quote

I have never done this in Firefox, and have no problems with downloading given the information in the above link.

Reply | Quote

It took months for someone to finally post the correct step by step procedure for to solve this problem.  Thank you very much.

Reply | Quote

So this is how you get something to the allow list in Chrome.  Thanks for the info.

Reply | Quote

the procedure is a little different with Google Chrome versions 95 & greater [and with MS Edge Chromium 95 & newer] as they are tightening insecure content settings a little further in recent versions of Chrome/MS Edge

I set it up like this in the attached pic [currently using Chrome 96.0.4664.45] in order to download files from MS Update Catalog

Reply | Quote

Ah, thank you, perhaps it is better to manually Add in the insecure contents category – the original poster typed [*.]www.catalog.update.microsoft.com, but [*.]microsoft.com and/or windowsupdate.com looks well covered!

Reply | Quote

AKB 2000003 has been updated for Group B Win7 (ESU) and Win8.1 on Oct 12, 2021.

There is a Security-only Update for those with Win7 ESU subscriptions.
There was a October IE11 CU KB5006671 for Win7. Download 32-bit or 64-bit.

October Rollup KB5006743 Download 32-bit or 64-bit for those with Win7 ESU subscriptions.

You must have at least the August 2020 Servicing Stack KB4570673 previously installed to receive these updates).

There is a October 2021 Servicing Stack KB5006749 – Download 32-bit or 64-bit for those with Win7 ESU subscriptions.

There is a revised Licensing Preparation Package KB4575903 dated 7/29/2020 for Win7 ESU subscriptions, if you need it.

For .NET updates listed for Win7. See #2395474.

5 users thanked author for this post.

jburk07, byteme, zat_so, SueW, abbodi86

Reply | Quote

Here’s your .NET for Octobert, 2021. There were no Security-only .NET updates.

Download only the update for the version(s) installed on your PC.
There were only updates for .NET 4.6-4.7.2 and 4.8
The other updates in the Rollups are older and should already be installed.

.NET Quality Rollup KB5006761
.NET 3.5.1 KB4578952 (Oct 2020)
.NET 4.5.2 KB4578955 (Oct 2020)
.NET 4.6 – 4.7.2 KB5006061
.NET 4.8 – KB5006060

6 users thanked author for this post.

jburk07, byteme, zat_so, SueW, Microfix, abbodi86

Reply | Quote

.NET 4.8 link kb5006066 is for Win8/embedded/2012 Server..tut tut 🙂
NET4.8 for Win7

If debian is good enough for NASA...

1 user thanked author for this post.

PKCano

Reply | Quote

Thanks. Wrong KB number – fixed.
That’s my first mistake (snick) 🙂

Reply | Quote

Thanks.

Reply | Quote

Time to install October updates.

using DOTNETFX4 for

.NET Framework 4.8 KB5006060

and W7ESUI for

Servicing Stack Update KB5006749

Windows Monthly Rollup – KB5006743

I installed these updates on two Win 7,  SP 1,  x64 machines.

 

1 user thanked author for this post.

A1ex

Reply | Quote

Installed October Win7 SP1 ESU patches using the bypass method for both service stack update KB500674 and monthly rollup KB5006743, then .NET4.8 KB5006060
All is well here after near on a week since botch tuesday.

Reply | Quote

Hi there,

kb5006743 does not install here, (even with all prerequisites) W7ESUI saying “all applicable updates are detected as installed”, but that’s not true, nothing happened and Belarc confirm that, only <span id=”ctl00_catalogBody_searchString”>KB5005633</span> (sept-2021) is installed. Something wrong with this month release?

Any idea?

Reply | Quote

Did you install the new Servicing Stack KB5006749 first?

Reply | Quote

Did you download the correct file architecture (x86 – x64)?

Reply | Quote

Can I use the same script for Windows Server 2008 R2 SP1 extended security updates without license?

Reply | Quote

Updates all installed with no issues.

Printing tested and still working as normal

2 users thanked author for this post.

Kranium, jct

Reply | Quote

On a window 7 x32 machine,  the computer was unable to install the Sept. IE KB5005563, but was able to install SO KB5005615.   However, both Oct. S0 KB5006728 and IE KB5006671 failed.  The message was window failed to install update, and reversed back to previous window.  Any advice?

Reply | Quote

See #2395473.
Do you have the prerequisite August SSU KB5004378 installed?
Have you installed the Oct SSU KB6749?

Reply | Quote

SSU KB5004378 was installed on Aug. 21.   Oct SSU KB 5006749 has not been installed yet, but that SSU should only be required for Nov. updates?

Reply | Quote

AKB 2000003 has been updated for Group B Win7 (ESU) and Win8.1 on Nov 9, 2021.

There is a Security-only Update for those with Win7 ESU subscriptions.
There was no Nov. IE11 CU  for Win7.

November Rollup KB5007236 Download 32-bit or 64-bit for those with Win7 ESU subscriptions.

You must have at least the August 2020 Servicing Stack KB4570673 previously installed to receive these updates).

There is a October 2021 Servicing Stack KB5006749 – Download 32-bit or 64-bit for those with Win7 ESU subscriptions.

There is a revised Licensing Preparation Package KB4575903 dated 7/29/2020 for Win7 ESU subscriptions, if you need it.

There are .NET updates listed for Win7. See #2400690.

7 users thanked author for this post.

byteme, pandarunnerpt, jburk07, RDRguy, SueW, Microfix, abbodi86

Reply | Quote

Here’s your .NET for Nov, 2021. There were no Security-only .NET updates.

Download only the update for the version(s) installed on your PC.
There were updates for .NET  4.5.2, 4.6-4.7.2 and 4.8
The other update in the Rollups are older and should already be installed.

.NET Quality Rollup KB5007299
.NET 3.5.1 KB4578952 (Oct 2020)
.NET 4.5.2 KB5007167
.NET 4.6 – 4.7.2 KB5007150
.NET 4.8 KB5007149

8 users thanked author for this post.

byteme, pandarunnerpt, Steve, jburk07, RDRguy, SueW, Microfix, abbodi86

Reply | Quote

This is difficult to find. Thank you.

Reply | Quote

November Report:
Imaged prior to installation then installed SMQR which invokes a double re-start once injected. No errors in Event logs and SFC verification all good. NET 4.8 patch was installed, all in for the fun of it.
Fully patched and Local Canon Pixma Printer works as normal. Bring on December…

If debian is good enough for NASA...

4 users thanked author for this post.

pandarunnerpt, jburk07, abbodi86, RDRguy

Reply | Quote

SMQR and .NET 4.7 patch both installed smoothly. no issues to report.

Printing still working as expected.

 

1 user thanked author for this post.

jburk07

Reply | Quote

DEFCON-3.  Time to install October updates.

using DOTNETFX4 for

.NET Framework 4.8 KB5007149

and W7ESUI for

Windows Monthly Rollup – KB5007236

Installed these updates on two Win 7,  SP 1,  x64 machines.

1 user thanked author for this post.

jburk07

Reply | Quote

Of course you meant November updates not October updates.

Reply | Quote

AKB 2000003 has been updated for Group B Win7 (ESU) and Win8.1 on Dec 14, 2021.

There is a Security-only Update for those with Win7 ESU subscriptions.
There was no Dec. IE11 CU  for Win7.

December Rollup KB5008244 Download 32-bit or 64-bit for those with Win7 ESU subscriptions.

You must have at least the August 2020 Servicing Stack KB4570673 previously installed to receive these updates).

There is a October 2021 Servicing Stack KB5006749 – Download 32-bit or 64-bit for those with Win7 ESU subscriptions.

There is a revised Licensing Preparation Package KB4575903 dated 7/29/2020 for Win7 ESU subscriptions, if you need it.

There are .NET updates listed for Win7. See #2406293.

6 users thanked author for this post.

pandarunnerpt, Kranium, jburk07, abbodi86, SueW, Microfix

Reply | Quote

Here’s your .NET for Dec, 2021. There were no new  .NET updates for December 2021..

3 users thanked author for this post.

pandarunnerpt, jburk07, SueW

Reply | Quote

Win7 HP x64, W7ESUI_0.2

Installed;
Oct – Dec 2021 SO updates (KB 5006728, KB 5007233, KB 5008282)
Oct 2021 (IE11) – KB 5006671
Oct 2021 KB5006749 Servicing Stack
System File Check – All clear.

No problems to report.

Thanks all.

1 user thanked author for this post.

SueW

Reply | Quote

Probably out of my depth here, so go easy on me. Just trying to keep my Win 7 Pro alive as long as possible, but it’s getting a little wonky lately, especially online.

Haven’t updated W7 in months – last few times I tried it just downloaded updates that wouldn’t install after several tries, so I turned WU off.

For this Standalone installer script, I’m stuck here: “– Copy or move W7ESUI.cmd and place it next to (in the same folder as) the downloaded msu files”

I can’t find any folder with msu files to move it to. In fact I can’t find any msu files on this computer at all.

Any help?

"It is better to seek forgiveness than to ask permission." ~Grace Hopper

Reply | Quote

You download the msu  (Microsoft Update)  files,  the ones you need,  from the Microsoft Update Catalog.

1 user thanked author for this post.

ArlisT

Reply | Quote

ArlisT wrote:

For this Standalone installer script, I’m stuck here: “– Copy or move W7ESUI.cmd and place it next to (in the same folder as) the downloaded msu files”

That means: Create a folder. Download the updates (.msu files) from the MS Catalog to that folder. Put the W7ESUI.cmd file in that same folder. Right click the W7ESUI.cmd and choose “Run as Administrator”

2 users thanked author for this post.

abbodi86, ArlisT

Reply | Quote

DEFCON-4.  Time to install December updates.

using DOTNETFX4 for

No .NET updates for December

and W7ESUI for

Windows Monthly Rollup – KB5008244

Installed these updates on two Win 7,  SP 1,  x64 machines.

Reply | Quote

AKB 2000003 has been updated for Group B Win7 (ESU) and Win8.1 on Jan 11, 2022.

There is a Security-only Update for those with Win7 ESU subscriptions.
There was no Jan. IE11 CU  for Win7.

January Rollup KB5009610 Download 32-bit or 64-bit for those with Win7 ESU subscriptions.

You must have at least the August 2020 Servicing Stack KB4570673 previously installed to receive these updates).

There is a October 2021 Servicing Stack KB5006749 – Download 32-bit or 64-bit for those with Win7 ESU subscriptions.

There is a revised Licensing Preparation Package KB4575903 dated 7/29/2020 for Win7 ESU subscriptions, if you need it.

There are .NET updates listed for Win7. See #2414280.

4 users thanked author for this post.

JimBean, SueW, abbodi86, Microfix

Reply | Quote

Here’s your .NET for January, 2022. There were Security-only .NET updates.

Download only the update for the version(s) installed on your PC.
There were updates for .NET all versions

.NET Quality Rollup KB5009719
.NET 3.5.1 KB5008867
.NET 4.5.2 KB5008860
.NET 4.6 – 4.7.2 KB5008859
.NET 4.8 KB5008858

.NET Security-only Update KB5009711
.NET 3.5.1 KB5008890
.NET 4.5.2 KB5008887
.NET 4.6 – 4.7.2 KB5008886
.NET 4.8 KB5008885

7 users thanked author for this post.

JimBean, Pepsiboy, jburk07, SueW, lanceboil, abbodi86, Microfix

Reply | Quote

Early Report: imaged prior to January 2022 updates.

Win7 SP1 ESUb updated with SMQR kb5009610, NET 4.8 kb5009719 and NET3.51 kb5008867. (AW Group A style)
Double restart on CU together with NET 3.51 kb5008867
NET4.8 kb5009719 injected after restart.
Notes:
No Event Viewer errors
SFC clean
Component store cleaned up thereafter usiing DISM++
Working smoothly as intended with canon pixma printer here.

If debian is good enough for NASA...

2 users thanked author for this post.

jburk07, abbodi86

Reply | Quote

For January 2022 what you entitile Quality Rollup is indeed both Security and Quality.

1 user thanked author for this post.

SueW

Reply | Quote

Yes, that is correct (and sometimes confusing). This month there are both .NET Security-Only Updates and .NET Security and Quality Rollup Updates.

Win 7 SP1 Home Premium 64-bit; Office 2010; Group B (SaS); Former 'Tech Weenie'

Reply | Quote

UPDATE: OoB January 2022 patch available for Win7 ESU: kb5010798

INFO: https://support.microsoft.com/en-us/topic/kb5010798-out-of-band-update-for-windows-7-sp1-and-server-2008-r2-sp1-january-17-2022-5b976915-5de5-4197-9b45-35c19050f656

If debian is good enough for NASA...

4 users thanked author for this post.

JimBean, M. Paquet, SueW, Moonbear

Reply | Quote

Does everyone still patching Windows 7 need this patch?

Or is this more for people maintaining servers?

2 users thanked author for this post.

7ProSP1, SueW

Reply | Quote

@Moonbear, it seems to pertain to Server 2008 R2 w/ ESU rather than Win7, although we shouldn’t be updating at MS-DEFCON1.
Instructions will be given once the all clear is issued.
Personally, my test Win7 Pro w/ESUb is working fine after 6 days..

If debian is good enough for NASA...

4 users thanked author for this post.

JimBean, SueW, Moonbear, 7ProSP1

Reply | Quote

I concur, @Microfix, but I still nevertheless feel confused by this OOB patch for Win 7 ESU users.

Pardon my grammar, but, “If it ain’t broke, don’t fix it” would seem to apply here if that is your situation with Win 7 ESU; however, if you are a Group B patcher and you choose to skip this OOB patch it will never get applied, unlike if you are a Group A patcher which will have it end up being rolled into and subsequently installed with the February 2022 cumulative patches.

Due to the size of this OOB patch, it is obviously a security only patch but Microsoft fails to mention this explicitly in the catalog entry for it, hence adding to the confusion.

As a group B patcher, I’ll indeed be looking for clarification and further guidance on whether or not to ultimately install this on my Win 7 system.

Why, oh why, Microsoft do you have to make things so confusing for your users, regardless of what version of OS they choose/prefer to use?

 

 

 

2 users thanked author for this post.

SueW, Microfix

Reply | Quote

Bleeping computer https://www.bleepingcomputer.com/news/microsoft/microsoft-releases-emergency-fixes-for-windows-server-vpn-bugs/

says “Those who cannot immediately install today’s out-of-band updates can remove the KB5009624, KB5009557, KB5009555, KB5009566, and KB5009543 updates causing these issues”

None of these KBs are listed in #2414279 or #2414280 above.  This seems to imply,  if you apply Win7 patches as documented by PKCano,  you should not need these emergency fixes.

Reply | Quote

DEFCON-4.  Time to install January updates.

using DOTNETFX4 for

.NET 4.8 – KB5008858

and W7ESUI for

.NET 3.5.1 – KB5008867

Windows Monthly Rollup – KB5009610

Installed these updates on two Win 7,  SP 1,  x64 machines.

2 users thanked author for this post.

JimBean, Microfix

Reply | Quote

After imaging with Reflect:

KB5008282 = SO
KB5010798 = OoB Update for Win 7
KB5008867 = S&QR for .NET Framework 3.5.1
KB5008859 = S&QR for .NET Framework 4.7

Windows Update = KB890830 MSRT (v5.97)

So far, so good . . .

Win 7 SP1 Home Premium 64-bit; Office 2010; Group B (SaS); Former 'Tech Weenie'

2 users thanked author for this post.

JimBean, Microfix

Reply | Quote

AKB 2000003 has been updated for Group B Win7 (ESU) and Win8.1 on Feb 8, 2022.

There is a Security-only Update for those with Win7 ESU subscriptions.
There was no Feb. IE11 CU  for Win7.

February Rollup KB5010404 Download 32-bit or 64-bit for those with Win7 ESU subscriptions.

You must have at least the August 2020 Servicing Stack KB4570673 previously installed to receive these updates).

There is a February 2022 Servicing Stack KB5010451– Download 32-bit or 64-bit for those with Win7 ESU subscriptions.

There is a revised Licensing Preparation Package KB4575903 dated 7/29/2020 for Win7 ESU subscriptions, if you need it.

There are .NET updates listed for Win7. See #2424003.

5 users thanked author for this post.

jburk07, Microfix, SueW, Moonbear, abbodi86

Reply | Quote

Here’s your .NET for February, 2022. There were no Security-only .NET updates.

Download only the update for the version(s) installed on your PC.
There were updates for .NET versions 4.6-4.7.2 and 4.8

NET Quality Rollup KB5010581
.NET 3.5.1 KB5008867 (1/22)
.NET 4.5.2 KB5008860 (1/22)
.NET 4.6 – 4.7.2 KB5010458
.NET 4.8 KB5010457

There was no Feb. .NET Security-only Updates

5 users thanked author for this post.

jburk07, Microfix, SueW, Moonbear, abbodi86

Reply | Quote

Group A – SSU kb5010451, SMQR kb5010404 and NET4.8 kb5010457 installed on Win7 Pro using scripts. No issues with printer, event logs nor SFC.
Now what was that XP wallpaper called? ah yes… ‘Bliss’

If debian is good enough for NASA...

2 users thanked author for this post.

jburk07, SueW

Reply | Quote

I’m going to be be trying to use the Bypass for my Win 7 pc starting this year.  (I’ve already installed all of the 2020 & 2021 Security, Quality and dotNet updates, installed using WU and ESU licenses which have now expired.)  But I’m kind of overwhelmed by perusing the 113 posts here.  Would really appreciate any suggestions/link(s) to the latest, bottom-line instructions for the Bypass.  I’m OK with either security-only or security+quality — whichever is the most straightforward.

Reply | Quote

IMHO the easiest method is to install the Security and Quality updates since they are cumulative.  Presumably you have already installed any necessary prerequisites (SHA2 updates/Servicing Stack updates) if you have used an ESU license for updating in 2020 and 2021.  So installing the script and using it with the most recent cumulative updates makes sense to me.  However, I don’t know if the prior use of the ESU license has any impact on how to move forward in 2022.  Hopefully a more knowledgeable member can address that question.

1 user thanked author for this post.

rick41

Reply | Quote

You don’t need to study all of these posts to learn how to use the Standalone installer script (Bypass).  It is all explained in the very first post,  #2209020,  at the top of the list.

I agree with EricB  (post #2424596),  “the easiest method is to install the Security and Quality updates since they are cumulative”.  This means you will be in what is called   “Group A”.

If you have not installed January updates,  you might want to install those first  (see posts #2414279 and #2414280).

I am not sure,  but I don’t think installing January updates is necessary since the updates are cumulative and you can just start with February updates (see posts #2424002 and #2424003) keeping in mind The MS-DEFCON system.  Someone please correct me if this is incorrect.

 

Reply | Quote

My question directly above really should have referenced the Standalone Installer rather than the Bypass.

BTW, does the Windows Update cleanup feature of Disk Cleanup/System Files still work with ESU updates installed via the Standalone Installer?

 

Reply | Quote

Disk Cleanup still works. Run as Administrator.

1 user thanked author for this post.

rick41

Reply | Quote

With Windows Update, any new Servicing Stack Update always appeared for install AFTER the monthly rollup installed.  With W7ESUI can I just run them together instead?  For example I know there’s a new SSU released this month (Feb 2022), KB5010451.  Can I run both at the same time withW7ESUI, or should I install the rollup first and then the newly-released SSU?

Reply | Quote

Put the Rollup/SO (whichever you use), the SSU, and the .NET 3.5 update (if you have that version) in the same folder with the W7ESUI .cmd file. Run the .cmd as Administrator. The installation will be done in the correct order.

If you have .NET version 4.5.2 or 4.6-4.7.2 or 4.8, you need to put only the file(s) for those version(s) you have installed in a separate/different folder with the expanded contents of dotNetFx4_ESU_Installer_r.zip. Also run that .cmd as Admin.

4 users thanked author for this post.

Steve, jburk07, abbodi86, rick41

Reply | Quote

Thanks, really helpful (again!).

Now that you mention dotNET, I see that in the Installed Updates section of Programs and Features, all of the dotNET update entries (which go back to September 2019) say they are for dotNet 4.8. Similarly, in the Uninstall Programs section all I see listed for dotNet is 4.8. However, in Windows Updates’ Update History, all of the dotNet updates back to September 2019 are titled “3.5.1, 4.5.2, 4.6, 4.6.1, 4.6.2, 4.7, 4.7.1, 4.7.2, 4.8.”

Does this mean that I can always install solely the updates for dotNet 4.8 (using the dotNet installer), even though I do see a dotNet 3.5 subfolder in Explorer?

Reply | Quote

If I remember correctly .Net Framework 4.8 is an in-place update for previous versions.  You can determine the installed version of the .Net Framework by checking the registry.  See https://docs.microsoft.com/en-us/dotnet/framework/migration-guide/how-to-determine-which-versions-are-installed#detect-net-framework-45-and-later-versions

.Net Framework version 3.5 received its last update in 1/2022 with KB5008867 which would be installed separately as a Windows Update since the 3.5 framework is a Windows component.

1 user thanked author for this post.

rick41

Reply | Quote

Asoft Portable .NET Version Detector

1 user thanked author for this post.

rick41

Reply | Quote

Thanks for the tip on the Asoft.  Nice utility.

Reply | Quote

Oh that’s right, I forgot 3.5 was a Windows 7 component.  I see it’s shown as 3.5.1.

Reply | Quote

Unbelievable – DEFCON-5!  Time to install February updates.

using DOTNETFX4 for

.NET 4.8 – KB5010457

and W7ESUI for

Servicing Stack Update – KB5010451

Windows 7 Monthly Rollup – KB5010404

Installed these updates on two Win 7,  SP 1,  x64 machines.

 

2 users thanked author for this post.

jburk07, SueW

Reply | Quote

AKB 2000003 has been updated for Group B Win7 (ESU) and Win8.1 on Mar 8, 2022.

There is a Security-only Update
There was a Mar. IE11 CU  for Win7 KB5011486  for those with Win7 ESU subscriptions.

March Rollup KB5011552 Download 32-bit or 64-bit for those with Win7 ESU subscriptions.

You must have at least the August 2020 Servicing Stack KB4570673 previously installed to receive these updates).

There is a March 2022 Servicing Stack KB5011649 – Download 32-bit or 64-bit for those with Win7 ESU subscriptions.

There is a revised Licensing Preparation Package KB4575903 dated 7/29/2020 for Win7 ESU subscriptions, if you need it. You will need a year-3 ESU license.

There are .NET updates listed for Win7. See #2430179.

7 users thanked author for this post.

Steve, jburk07, rick41, SueW, abbodi86, Microfix, Moonbear

Reply | Quote

Here’s your .NET for March, 2022.
There were no .NET updates listed.

6 users thanked author for this post.

Steve, jburk07, rick41, SueW, abbodi86, Moonbear

Reply | Quote

Hi,

Updated Jan to Mar in two rounds.

• Jan 2022 KB5009621 SO
• Jan 2022 KB5008890 Security Only Update for .NET Framework 3.5.1
• Jan 2022 KB5010798: Out-of-band update

Then;

• Feb 2022 KB5010422 SO
• Mar 2022 KB5011529 SO
• Mar 2022 (IE11) KB5011486
• Mar 2022 KB5011649 Servicing Stack

Reason for two rounds; I wasn’t sure how the script would handle KB5010798 and KB5010422 together, as  although KB5010798 was released first, numerically it comes after KB5010422 and I feared a potential problem if they were not installed in the right order.

Anyhow, all went well.

Thanks, all!

1 user thanked author for this post.

SueW

Reply | Quote

DEFCON-4.  Time to install March updates.

Using DOTNETFX4 for

No .NET 4.8 updates for March.

And W7ESUI for

Servicing Stack Update – KB5011649

Windows 7 Monthly Rollup – KB5011552

Installed these updates on two Win 7,  SP 1,  x64 machines.

1 user thanked author for this post.

jburk07

Reply | Quote

Was there a reason you didn’t install the March 2022 IE11 CU for Win7 (KB5011486)?

Win 7 SP1 Home Premium 64-bit; Office 2010; Group B (SaS); Former 'Tech Weenie'

1 user thanked author for this post.

Microfix

Reply | Quote

no need, KB5011552 is SMQR (not security only) which has IE stuff within.

If debian is good enough for NASA...

1 user thanked author for this post.

SueW

Reply | Quote

If the Security Monthly Quality Rollup(SMQR) is installed, the Internet Explorer update does not need to be installed. The IE update is part of SMQR, so installing the IE update is a waste of time.

[from poster of #2433623]

1 user thanked author for this post.

SueW

Reply | Quote

AKB 2000003 has been updated for Group B Win7 (ESU) and Win8.1 on Apr 12, 2022.

There is a Security-only Update
There was no Apr. IE11 CU  for Win7 .

April Rollup KB5012626 Download 32-bit or 64-bit for those with Win7 ESU subscriptions.

You must have at least the August 2020 Servicing Stack KB4570673 previously installed to receive these updates).

There is a March 2022 Servicing Stack KB5011649 – Download 32-bit or 64-bit for those with Win7 ESU subscriptions.

There is a revised Licensing Preparation Package KB4575903 dated 7/29/2020 for Win7 ESU subscriptions, if you need it. You will need a year-3 ESU license.

There are .NET updates listed for Win7. See #2438917.

7 users thanked author for this post.

JimBean, Steve, jburk07, abbodi86, rick41, SueW, Microfix

Reply | Quote

Here’s your .NET for April, 2022. There were Security-only .NET updates.

Download only the update for the version(s) installed on your PC.

.NET Quality Rollup KB5012329
.NET 3.5.1 KB5012138
.Net 4.5.2 KB5012141
.NET 4.6 – 4.7.2 KB5012131
.NET 4.8 KB5012125

.NET Security-only Quality Rollup KB5012324
.NET 3.5.1 KB5012151
.NET 4.5.2 KB5012154
.NET 4.6 – 4.7.2 KB5012148
.NET 4.8 KB5012145

7 users thanked author for this post.

JimBean, Steve, jburk07, abbodi86, rick41, SueW, Microfix

Reply | Quote

ah, the last dotNET Framework patches for v4.5.2, 4.6, and 4.6.1..

If debian is good enough for NASA...

4 users thanked author for this post.

jburk07, abbodi86, PKCano, SueW

Reply | Quote

April 2022 ESUb report:
Win7 Pro – Installed SMQR kb5012626 which required a double restart.
Then onto dotNET4.8 kb5012145…plain sailing
SFC – no violations
Event Log – clean, no errors
Telemetry – none injected

If debian is good enough for NASA...

3 users thanked author for this post.

jburk07, rick41, SueW

Reply | Quote

DEFCON-4.  Time to install April updates.

Using DOTNETFX4 for

.NET 4.8 – KB5012125

And W7ESUI for

.NET 3.5.1 – KB5012138

Windows 7 Monthly Rollup – KB5012626

Installed these updates on two Win 7,  SP 1,  x64 machines.

Thanks to PKCano for providing this information.

4 users thanked author for this post.

pandarunnerpt, jburk07, SueW, rick41

Reply | Quote

I just finished the same installs as you, on Win7 Pro, without issue.  Although, I seem to recall (perhaps incorrectly?) that both of the previous two times I’ve used W7ESUI there was a restart request at the end   Not this time.  Restarted anyway, and got the typical blue “installing updates” screens.  But no double-restart required for SMQR KB5012626 as Microfix had noted on April 13.  Hope that doesn’t portend any issues.

This was easily the lengthiest of the three W7ESUI sessions since I started using that much-appreciated script.

 

1 user thanked author for this post.

jburk07

Reply | Quote

I got the restart request,  everything ran as usual.  No double-restart,  I have no idea why Microfix would have had to do a double-restart.  Did the script remove the work files at the end as usual?

Yes, SMQR KB5012626 was quit a big update.

[from poster of ##2442143]

1 user thanked author for this post.

jburk07

Reply | Quote

Yes, the script did remove the work files at the end, and everything is shown as installed in the Installed Updates section of Programs and Features.

I guess it’s possible I somehow missed the restart request, but I doubt that.  I ran the .NET 3.5.1 update KB5012138 at the same time as SMQR KB5012626, but I think that’s the usual procedure.

Since everything else looked as-expected during and after the update process, I guess I won’t worry about it, especially since I’m using rollups.  On the slight chance something didn’t “take,” next month will cover it.  BTW, the two scripts generated a total of four restore points, all called “Windows Module Installer.”

1 user thanked author for this post.

jburk07

Reply | Quote

AKB 2000003 has been updated for Group B Win7 (ESU) and Win8.1 on May 10, 2022.

There is a Security-only Update for those with Win7 ESU subscriptions.
There was no May. IE11 CU  for Win7 .

May Rollup KB5014012 Download 32-bit or 64-bit for those with Win7 ESU subscriptions.

You must have at least the August 2020 Servicing Stack KB4570673 previously installed to receive these updates).

There is a March 2022 Servicing Stack KB5011649 – Download 32-bit or 64-bit for those with Win7 ESU subscriptions.

There is a revised Licensing Preparation Package KB4575903 dated 7/29/2020 for Win7 ESU subscriptions, if you need it. You will need a year-3 ESU license.

There are .NET updates listed for Win7. See #2445539.

 

There is also a May Servicing Stack Update for Win8.1 KB5014025 download 32-bit or 64-bit.

7 users thanked author for this post.

JimBean, pandarunnerpt, Steve, rick41, jburk07, abbodi86, SueW

Reply | Quote

Here’s your .NET for May, 2022. There were/no Security-only .NET updates.

Download only the update for the version(s) installed on your PC.
2022-04 (April) .NET security-only updates have been re-released. See @abbodi ‘s comment in #2445612.
There were 2022-05 (May) updates for .NET 3.5.1, 4.6-4-7-2 and 4.8

2022-04 .NET Security-only Quality Rollup KB5012324  (released 5/9/2022)
.NET 3.5.1 KB5012151 (old released 4/8/22/2022)
.NET 4.5.2 KB5012154 (released 5/9/2022)
.NET 4.6-4.7.2 KB5012148 (released 5/9/2022)
.NET 4.8 KB5012145 (released 5/9/2022)

2022-05 .NET Quality Rollup KB5013870
.NET 3.5.1 KB5013637
.NET 4.5.2  N/A
.NET 4.6 – 4.7.2 KB5013644
.NET 4.8 KB5013632

2022-05 .NET Security-only Quality Rollup KB5013837
.NET 3.5.1 KB5013620
.NET 4.5.2  N/A
.NET 4.6 – 4.7.2 KB5013612
.NET 4.8 KB5013617

4 users thanked author for this post.

JimBean, rick41, jburk07, abbodi86

Reply | Quote

There appears to be a difference between the offering for .Net Framework 4.8 (Win7SP1 x86) contained in the catalog for KB5013870 and KB5013632.  While both contain the same .exe there is a discrepancy between the .cab files.  The images of the catalog download content are below.

Presumably, the .cab file and the .exe should be placed in the same folder that is used when running the installer script.

Reply | Quote

Those cab files are metadata for WU (hence the different revision ID for each)
they are not updates and not needed with .NET 4.x exe (or .NET 3.5 msu)

4 users thanked author for this post.

jburk07, rick41, PKCano, EricB

Reply | Quote

For the future, is it safe to disregard as metadata .cab files offered from the catalog for .Net Framework 4.8 updates?

1 user thanked author for this post.

jburk07

Reply | Quote

Yes, any cab file not named windows6.1-kbxxxxx is not an update

4 users thanked author for this post.

jburk07, Steve, rick41, EricB

Reply | Quote

DEFCON-4.  Time to install May updates.

Using DOTNETFX4 for

.NET 4.8 – KB5013632

And W7ESUI for

.NET 3.5.1 – KB5013637

Windows 7 Monthly Rollup – KB5014012

Installed these updates on two Win 7,  SP 1,  x64 machines.

Thanks to PKCano for providing this information.

 

3 users thanked author for this post.

rick41, SueW, jburk07

Reply | Quote

My PC has difficulty with the Standalone installer script.  I can run the script with no issues, but when it comes down to hitting the “9” key to exit it becomes a ticking time bomb.The PC will lock up after only a couple of keystrokes.  It is usually locked up by the time I can bring up Task Manager.  It beeps and becomes unresponsive.  I have to force shutdown, sometimes more than once.  After I can successfully boot into Windows, it looks like the updates are applied.  Any suggestions on how to fix this appreciated.

Reply | Quote

AKB 2000003 has been updated for Group B Win7 (ESU) and Win8.1 on June 14, 2022.

There is a Security-only Update for those with Win7 ESU subscriptions.
There is no June. IE11 CU  for Win7 .

June Rollup KB5014748 Download 32-bit or 64-bit for those with Win7 ESU subscriptions.

You must have at least the August 2020 Servicing Stack KB4570673 previously installed to receive these updates).

There is a March 2022 Servicing Stack KB5011649 – Download 32-bit or 64-bit for those with Win7 ESU subscriptions.

There is a revised Licensing Preparation Package KB4575903 dated 7/29/2020 for Win7 ESU subscriptions, if you need it. You will need a year-3 ESU license.

There are .NET Framework updates listed for Win7. See #2453333.

6 users thanked author for this post.

JimBean, rick41, Steve, pandarunnerpt, SueW, abbodi86

Reply | Quote

Here’s your .NET Framework for June, 2022. There were no Security-only .NET updates.

Download only the update for the version(s) installed on your PC.
There were no 2022-06 (June) Security-only updates for .NET Framework

.NET Quality Rollup KB5014806
.NET 3.5.1 KB5013637 (May 2022 should already be installed)
.NET 4.5.2 N/A
.NET 4.6 – 4.7.2 KB5014635
.NET 4.8 KB5014631

7 users thanked author for this post.

jburk07, JimBean, rick41, Steve, pandarunnerpt, SueW, abbodi86

Reply | Quote

Hi,

Updated:

• Apr 2022 KB5012649 SO
• Apr 2022 KB5012151 Security Only Update for .NET Framework 3.5.1
• May 2022 KB5013999 SO
• May 2022 KB5013620 Security Only Update for .NET Framework 3.5.1
• Jun 2022 KB5014742 SO

No problems to report.

Thanks, all.

2 users thanked author for this post.

jburk07, SueW

Reply | Quote

DEFCON-3.  Time to install June updates.

Using DOTNETFX4 for

.NET 4.8 – KB5014631

And W7ESUI for

Windows 7 Monthly Rollup – KB5014748

Installed these updates on two Win 7,  SP 1,  x64 machines.

Thanks to abbodi86 for providing these scripts.

 

1 user thanked author for this post.

jburk07

Reply | Quote

AKB 2000003 has been updated for Group B Win7 (ESU) and Win8.1 on July 12, 2022.

There is a Security-only Update for those with Win7 ESU subscriptions.
There is July. IE11 CU  for Win7 ESU subscriptions.

July Rollup KB5015861 Download 32-bit or 64-bit for those with Win7 ESU subscriptions.

You must have at least the August 2020 Servicing Stack KB4570673 previously installed to receive these updates).

There is a July 2022 Servicing Stack KB5016057– Download 32-bit or 64-bit for those with Win7 ESU subscriptions.

There is a revised Licensing Preparation Package KB4575903 dated 7/29/2020 for Win7 ESU subscriptions, if you need it. You will need a year-3 ESU license.

There are .NET Framework updates listed for Win7. See #2459969.

7 users thanked author for this post.

Pexiler, jburk07, Steve, rick41, SueW, Microfix, abbodi86

Reply | Quote

Here’s your .NET Framework for July, 2022. There were no 2022-07 (July) Security or  Security-only .NET updates for Win7.

5 users thanked author for this post.

jburk07, rick41, SueW, Microfix, abbodi86

Reply | Quote

Regarding must have at least August 2020 Servicing Stack KB4570673 previously installed, is there any reason to NOT install a more recent SSU? Should I take the at least literally or should I interpret it as do not go beyond the August 2020 SSU?

Dumb question for sure but I do not want to do something foolish.

Thanks in advance!

Reply | Quote

The SSU is the update for Windows Update mechanism.

You need AT LEAST the August 2020 SSU to be able to install the current CU.
But, you should always install the latest SSU.
Put the SSU in the same location/folder as the W7ESUI executable and the CU. The installation will handle everything.

Reply | Quote

After such a long wait, I decided to try out the W7ESUI mechanism after first making a system image I could restore back if needed. Well, the script worked flawlessly. But then I happened to go into Windows 7 Control Panel – System and found my activation status had disappeared. Activation status showed as NOT AVAILABLE and Product ID was missing. And stayed that way.

So I restored back to the system image I had made and then my Windows 7 activation status and Product ID returned.

Is loss of activation status a known behavior or side-effect of using the W7ESUI script? Has everyone who has used the W7ESUI script lost their activation status?

If loss of activation status is a consequence of using the W7ESUI script, what are the potential consequences that may present over time?

Basically, was it a just me problem or an everybody problem – and is it really a problem?

Reply | Quote

I’ve been using W7ESUI since February, and my “Windows Activation” still shows as “Windows is activated,” with a product ID listed (although it shows as Not Available for a second or two before it appears).  While I doubt this makes any difference, I did purchase W7 extended support in 2020 and 2021.

I notice that in a late May post Gunter Born’s blog reported that “a few” readers have reported losing the Windows 7 activation after using ESU Bypass v11.  (I have not used ESU Bypass.)

https://borncity.com/win/2022/05/29/reports-about-deactivated-windows-7-sp1-systems-with-esu-bypass/

(Meant to post as a reply to #2462174.) 

1 user thanked author for this post.

castiel

Reply | Quote

Did some reading related to the link contained in the reply from rick41 and there seems to be an ancient KB971033 Windows 7 update which is suspected of being related to activation failures and issues. I DO have that KB971033 installed (back in early 2014 when my Windows 7 was installed). Problem is that I do not know with certainty that KB971033 is the cause of my problem with the W7ESUI script result. As for trying to uninstall KB971033, I fear that would brick my Windows 7 (as someone claimed happened to them).

I also find several posts in AskWoody years later saying to avoid installing KB971033.

Anyone else have any thoughts or experience with KB971033 and/or my W7ESUI activation problem? I am beginning to feel I have hit a brick wall on being able to use the W7ESUI mechanism. Does anyone use W7ESUI successfully despite KB971033 installed? Is that even the problem?

Reply | Quote

I uninstalled KB971033 from all my Win7 computers long ago. Didn’t have any negative effects. I recommend uninstalling it. You have a backup if it causes any problems.

If no problems, update your Win7 and check if it causes activation failure. Again, you have a backup if it does. All my remaining Win7 computers are up to date using W7EUSI.

2 users thanked author for this post.

Microfix, castiel

Reply | Quote

I agree with your advice and will uninstall KB971033 and then give W7ESUI another try. I will post the results I get either way.

Being ultra paranoid, I will first make another system image backup before just for the extra comfort level for fall-back.

I should have included this already, but my OS is Windows 7 Home Premium 32-bit SP1 currently at the EOL update level.

Reply | Quote

@castiel, I’ve been using W7ESUI every month, starting in March 2020. I just checked, and my “Windows Activation” still shows as activated, along with its Product ID.

As for KB971033: I installed it right after I bought my Win 7 Home Premium 64-bit SP1 computer in late 2014. I uninstalled it in early 2019 and my notes at the time said “out of date & may cause issues w/ Win7 activation.”  So uninstalling it looks like the way to go.  Good luck ~

Win 7 SP1 Home Premium 64-bit; Office 2010; Group B (SaS); Former 'Tech Weenie'

Reply | Quote

Got this to work – KB4537820 (FEB 2020 Rollup) with KB4537829 (FEB 2020 SSU) – and it retained my Win7 Activation Status and Product ID. So going for one month kept activation when the quantum leap from JAN 2020 to JUN 2022 lost activation. Apparently one month at a time is the absolute safest (?).

One other difference on my latest try was doing it offline (not connected to internet) – does that make a difference at all? Should W7ESUI be run connected or offline or irrelevant?

I guess I face a choice now of doing W7ESUI 30-ish times to catch up or try smaller leaps of a few months.

(Sorry – this got posted out of order and I do not know how to move it)

Reply | Quote

Now that one month worked without the activation impact, maybe you should try six months next?  Just a guess.

Reply | Quote

No luck. I uninstalled KB971033 successfully and then rebooted even though not required. I then ran W7ESUI for the June 2022 updates (KB5011649 SSU and KB5014748 June Rollup) which again ran flawlessly. Rebooted after W7ESUI finished and had a momentary feeling of glee when I checked Control Panel – System and found Activation Status and Product ID retained.

But then I rebooted one more time to verify and this time Activation Status and Product ID had both disappeared again and showed as Not Available. (Likely this is the same as what happened on my original try).

Not clear what is going on. Maybe the quantum leap from JAN 2020 to JUN 2022 was too big a jump. When I get time, I may try a one month jump from JAN 2020 to FEB 2020.

If anyone has thoughts, please chime in. I do believe I am better off without KB971033 even though it did not lead to the result I hoped. BTW, when I checked the Microsoft Update Catalog, I saw no presence of KB971033 so further reinforces no need for it.

Reply | Quote

I’ve been using W7ESUI every month since it came out and Microsoft discontinued standard support for Windows 7 PRO. I also have KB971033 installed and have had it installed since 2013. I have never had any problems and my Windows activation still shows active with the product ID intact. I am wondering if I should uninstall the update, or should I just leave it installed since I don’t have and haven’t had any problems.

Reply | Quote

Just for such occasions with activation issues, I backed up my activation on Win7 using josh cell’s advanced token manager for re-introduction should things go haywire with actvation issues can re-introduce the activation token (has happened and reported here on askwoody somewhere).
KB971033 not installed here since 2015 been using this ESU method since May 2020, all good here. I have found that if you leave it too long between Cumulative Updates (group A patching), the ESU patch update fails. I update every month regardless and make time to update my Win7.

If debian is good enough for NASA...

2 users thanked author for this post.

analogkid, castiel

Reply | Quote

Thank you for the tip on Advanced Token Manager! Even though I have gotten beyond my initial problem, it did plant in my mind that Activation could possibly be a bit fragile going forward. And yeah, my Group A quantum leap attempt from JAN 2020 to JUN 2022 was overly ambitious. Then again, I learned a lot from the AskWoody faithful like about KB971033 and now Advanced Token Manager. My ignorance was truly bliss.

1 user thanked author for this post.

Microfix

Reply | Quote

DEFCON-4.  Time to install July updates.

Using DOTNETFX4 for

There were no .NET updates for July

Using W7ESUI for

Service Stack Update – KB5016057

Windows 7 Monthly Rollup – KB5015861

Installed these updates on two Win 7,  SP 1,  x64 machines.

1 user thanked author for this post.

jburk07

Reply | Quote

AKB 2000003 has been updated for Group B Win7 (ESU) and Win8.1 on August 9, 2022.

There is a Security-only Update for those with Win7 ESU subscriptions.
There is a August IE11 CU KB5016618  for Win7 ESU subscriptions.

August Rollup KB5016676 Download 32-bit or 64-bit for those with Win7 ESU subscriptions.

You must have at least the August 2020 Servicing Stack KB4570673 previously installed to receive these updates).

There is a July 2022 Servicing Stack KB5016057– Download 32-bit or 64-bit for those with Win7 ESU subscriptions.

There are .NET Framework updates listed for Win7. See #2468767.

******EDIT UPDATE: ********
Microsoft has released a new ESU Licensing Preparation Package KB5016892 for the extension of Win7/Windows Server 2008 R2 SP1 ESU on Aug 25, 2022. Requires SHA-2 KB4474419 9/23/2019 or later and SSU KB4490628 3/12/2019.

Thanks, @Microfix

6 users thanked author for this post.

A1ex, rick41, Microfix, Just another Forum Poster, SueW, abbodi86

Reply | Quote

Here’s your .NET Framework for Aug, 2022. There were no Win7 Security-only .NET updates.

Download only the update for the version(s) installed on your PC.
There were no 2022-08 (Aug) Security-only updates for .NET Framework

.NET Quality Rollup KB5016738
.NET 3.5.1 KB5013637 (May 2022)
.NET 4.5.2 N/A
.NET 4.6 – 4.7.2 KB5016368
.NET 4.8 KB5016367

8 users thanked author for this post.

A1ex, jburk07, rick41, SueW, Microfix, Pexiler, Just another Forum Poster, abbodi86

Reply | Quote

Early August 2022 ESU patch report:

Win7 Pro x86 (mbr/ legacy) SMQR fully ESU patched to July 2022..
Once kb5016676 was triggered, faced with the following upon restart:

Failure configuring Windows updates, reverting changes at 8%

Event viewer reported:

Package KB5016676 failed to be changed to the Installed state. Status: 0x80070490

SFC reports no violations and KB5016367 .Net4.8 went in ok
Looks like I’ll be skipping this months SMQR (not that it’s online anyway)

If debian is good enough for NASA...

3 users thanked author for this post.

jburk07, rick41, RDRguy

Reply | Quote

After the changes were reverted and windows was restarted did you try again?

1 user thanked author for this post.

rick41

Reply | Quote

yes @EricB, and no change to the result..

2 users thanked author for this post.

rick41, EricB

Reply | Quote

@Microfix … tried duplicating your experience with W7ESUI & KB5016676 (Aug-22 SQMR)

I used an old ThinkPad laptop running Win7 PRO SP1 x86 brought fully up-to-date thru Jul-22 except for the latest Jul-22 Servicing Stack Update (SSU) KB5016057 … the SSU currently installed is the previous Mar-22 SSU – KB5011649.

Though I’m absolutely sure my system parameters differ GREATLY from yours … KB5016676 installed successfully without errors and without any deviation from previous W7ESUI installs.

Maybe MS “salted” the latest Servicing Stack Update (SSU) KB5016057 breaking @abbodi86’s W7ESUI script ??? … I’ll find out soon enough once MS DEFCON is lifted to 4 as all my other Win7 systems (both x86 & x64) have the latest Jul-22 SSU already installed.

My Win7 PRO SP1 x86 test system depictions are below along with KB5016676 successful installation and the SFC Scannow results (post Aug-22 SQMR installation) …

p.s.
I know … it’s a really old & practically useless laptop in this day & age but it’s been my Win7 Pro SP1 x86 “W7ESUI Test System” and for this task it’s performed exceptionally well … and I’m also using it right now for this reply … 🙂

Win7 - PRO & Ultimate, x64 & x86
Win8.1 - PRO, x64 & x86
Groups A, B & ABS

4 users thanked author for this post.

jburk07, rick41, abbodi86, Microfix

Reply | Quote

Yesterday, nature of all things presented an opportunity to look at Win7 x86 Pro again…during a local thunderstorm no less. So with router off and lines unplugged along with a few other things, tackled the SSU theory.

After trying to install the August SMQR kb5016676 and failing for the third time, I decided to restore from a June 2022 pre-patch image. Skipped June patches and proceeded to July 2022

Successfully installed July SMQR kb5015861, this time omitting the July SSU kb5016057 and once system restarted, sfc /verifyonly report was all good.

Changed the batting order and installed August .NET4.8 kb5016367 first and restarted.
once again SFC all good.

CRUNCH TIME!..
August SMQR kb5016676 unpacked and installed via the script no problem. Time for a restart……which failed again at 8% and reverted back 🙁

After a post patch cleanse and wnSxS purge, I’m where I was before with the March 2020 kb5011649 SSU installed.
SFC all good at this point so imaged as a timesaver 🙂

Digital Delorean and flux capacitor at the ready!

If debian is good enough for NASA...

Reply | Quote

Many thanks @RDRguy, nice work!
A simple restore of an earlier image with catch-up omitting the July SSU, can be done here but, for now I intend on waiting to see what develops (if anything) and digest relative feedback going forward on the thread. There’s no hurry here as the OS is on an offline test device, although those who do have the same 32bit OS will no doubt benefit from your time and findings and be wary of the possibilities.

If debian is good enough for NASA...

1 user thanked author for this post.

RDRguy

Reply | Quote

Nothing changed with SSU KB5016057 in regard of ESU processing
the new SSU merely add support for the additional 3 years of ESU keys

there are multiple failure reports at MDL forums, all are related to OS drivers updating error

4 users thanked author for this post.

jburk07, Microfix, rick41, RDRguy

Reply | Quote

Thanks @abbodi86 … good to here that nothing’s changed in the Aug-22 SSU update that might impair ESU processing with W7ESUI

Win7 - PRO & Ultimate, x64 & x86
Win8.1 - PRO, x64 & x86
Groups A, B & ABS

Reply | Quote

Cool!

abbodi86 wrote:

there are multiple failure reports at MDL forums, all are related to OS drivers updating error

driver signing, non-SHA2 a possibility of failure on windows 7??
I have legacy drivers installed that hasn’t recieved updates since circa 2016

If debian is good enough for NASA...

Reply | Quote

Microsoft has not re-issued certs for some of the old drivers (Intel, I think). I ran into this problem with one Win8.1 installation a month ago. Parallels could not install Parallels Tools because of it. I sent some info to @abbodi86 at the time. Quote from the DM.

Are you aware of this?:

Well, MS has screwed Win Vista/7/8.1 running in VMs.
MS must have made this change yesterday. Have not done the July updates on Win8.1 yet. This has to be on the Parallels side – expired certificates that cannot be renewed.

This morning when I started my Main Win8.1 I got the notice in the screenshots.
Here is the Parallels in info:
https://kb.parallels.com/en/125539

Here are the relatedMS Docs:
https://docs.microsoft.com/en-us/windows-hardware/drivers/install/deprecation-of-software-publisher-certificates-and-commercial-release-certificates

https://docs.microsoft.com/en-us/windows-hardware/drivers/install/the-testsigning-boot-configuration-option

It wouldn’t surprise me if this is how they are going to kill Vista/7/8.1 – making it impossible for vendors to install to install “legacy” drivers. Implying no driver updates and the inability to reinstall any older drivers.

My Win8.1 now has a “Test Mode” watermark in the lower right corner.

4 users thanked author for this post.

Cybertooth, SupremeLaW, jburk07, Microfix

Reply | Quote

My Win8.1 now has a “Test Mode” watermark in the lower right corner.

no watermark required, we are all in MSFT
‘T E S T M O D E’ and have been for quite some while now.
[blackeye emoji]

If debian is good enough for NASA...

2 users thanked author for this post.

Cybertooth, SupremeLaW

Reply | Quote

abbodi86:

You said:

“Nothing changed with SSU KB5016057 in regard of ESU processing
the new SSU merely add support for the additional 3 years of ESU keys

There are multiple failure reports at MDL forums, all are related to OS drivers updating error.”

I am running a Windows 7 Pro 64 bit  SP1 tower computer. I have the additional ESU support. It is not clear to me from this thread whether I should install KB5016057 (Servicing Stack Update) or not. Could you provide more details?

Harry

 

Reply | Quote

So far officially, only Server 2008 R2 will get additional one ESU year support on Azure

nevertheless, you can install latest SSU, it does not break or cause the update failures

1 user thanked author for this post.

PKCano

Reply | Quote

I updated the July SSU last month.
I have installed the Aug Rollup KB5016676 and the .Net 4.8 KB5016367 on one of my two Win7 machines without a problem. Will try the other shortly.

UPDATE: No problem with the same updates on the second Win7 machine.

4 users thanked author for this post.

jburk07, abbodi86, rick41, RDRguy

Reply | Quote

Microfix wrote:

Cool!

abbodi86 wrote:

there are multiple failure reports at MDL forums, all are related to OS drivers updating error

driver signing, non-SHA2 a possibility of failure on windows 7??
I have legacy drivers installed that hasn’t recieved updates since circa 2016

By “OS drivers” i ment the system drivers, that are updated by Windows updates
such as cpu.inf / disk.inf / machine.inf …etc

here is excerpt of the failure in CBS.log

Info CBS Doqe:   q-uninstall: Inf: bth.inf, Ranking: 2, Device-Install: 0, Key: 6, Identity: bth.inf, Culture=neutral, Type=driverUpdate, Version=6.1.7601.24511, PublicKeyToken=31bf3856ad364e35, ProcessorArchitecture=amd64, versionScope=NonSxS
Info CBS Doqe:   q-uninstall: Inf: tsusbhub.inf, Ranking: 2, Device-Install: 0, Key: 7, Identity: tsusbhub.inf, Culture=neutral, Type=driverUpdate, Version=6.1.7601.24543, PublicKeyToken=31bf3856ad364e35, ProcessorArchitecture=amd64, versionScope=NonSxS
Info CBS Doqe:   q-uninstall: Inf: rdvgwddm.inf, Ranking: 2, Device-Install: 0, Key: 8, Identity: rdvgwddm.inf, Culture=neutral, Type=driverUpdate, Version=6.1.7601.24306, PublicKeyToken=31bf3856ad364e35, ProcessorArchitecture=amd64, versionScope=NonSxS
Info CBS Doqe:   q-uninstall: Inf: machine.inf, Ranking: 2, Device-Install: 0, Key: 10, Identity: machine.inf, Culture=neutral, Type=driverUpdate, Version=6.1.7601.24441, PublicKeyToken=31bf3856ad364e35, ProcessorArchitecture=amd64, versionScope=NonSxS
Info CBS Doqe:   q-uninstall: Inf: cpu.inf, Ranking: 2, Device-Install: 0, Key: 12, Identity: cpu.inf, Culture=neutral, Type=driverUpdate, Version=6.1.7601.24545, PublicKeyToken=31bf3856ad364e35, ProcessorArchitecture=amd64, versionScope=NonSxS
Info CBS Perf: Doqe: Uninstall started.
Info CBS Doqe: [Forward] Uninstalling driver updates, Count 5
Info CBS DriverUpdateUninstallUpdates failed [HRESULT = 0x80070490 - ERROR_NOT_FOUND]
Error CBS Doqe: Failed uninstalling driver updates [HRESULT = 0x80070490 - ERROR_NOT_FOUND]
Info CBS Perf: Doqe: Uninstall ended.
Info CBS Failed uninstalling driver updates [HRESULT = 0x80070490 - ERROR_NOT_FOUND]
Error CBS Startup: Failed while processing non-critical driver operations queue. [HRESULT = 0x80070490 - ERROR_NOT_FOUND]
Info CBS Startup: Rolling back KTM, because drivers failed.

1 user thanked author for this post.

Microfix

Reply | Quote

Regarding the problems encountered with attempted install of KB5016676 failing to complete and reverting, I see that as a known issue described in the doc for the rollup and a statement of one possible cause that:
This is expected in the following circumstances:
If you are installing this update on a device that is running an edition that is not supported for ESU. For a complete list of which editions are supported, see KB4497181.

Does this mean that the W7ESUI mechanism will no longer work for Win7 Home Edition systems?

(I realize the failure encountered by @Microfix was for a Win7 Pro system)

PS – Excuse my lack of better formatting for this post – I’m not familiar with the ways to format to look more professional.

Reply | Quote

That’s warning is added to all ESU updates, it’s not real issue

“failing to complete and reverting” can happen for any other reasons, like actual installation error

1 user thanked author for this post.

castiel

Reply | Quote

My concern was indeed unfounded. On a Windows 7 Home Premium 32-bit SP1, the 2022-08 SMQR KB5016676 installed just fine and configured successfully on restart.

Reply | Quote

DEFCON-3.  Time to install August updates.

Using DOTNETFX4 to install

.NET 4.8 – KB5016367

And using W7ESUI to install

Windows 7 Monthly Rollup – KB5016676

Installed these updates on two Win 7,  SP 1,  x64 machines.

Thanks to abbodi86 for providing these scripts.

1 user thanked author for this post.

jburk07

Reply | Quote

HEADS UP 🙂

New ESU Licensing Preparation Packages issued for Win7 x86 and x64 kb5016892 (August 25th 2022)
https://www.catalog.update.microsoft.com/Search.aspx?q=kb5016892

over to PKCano to update the necessary..

If debian is good enough for NASA...

2 users thanked author for this post.

Steve, PKCano

Reply | Quote

Forgive me for possibly asking the obvious, but this uprade IS required to install future sec updates?

Reply | Quote

PKCano wrote:

Microsoft has released a new ESU Licensing Preparation Package KB5016892 for the extension of Win7/Windows Server 2008 R2 SP1 ESU on Aug 25, 2022. Requires SHA-2 KB4474419 (9/23/2019 or later) and SSU KB4490628 (3/12/2019).

This is for the extension of the ESU after the current ESU ends in Jan, 2023.

1 user thanked author for this post.

Steve

Reply | Quote

Just used this to script to update a friend’s computer. I’d like to know if there is a way to donate to @abbodie86 because he/she deserves it!

Reply | Quote

AKB 2000003 has been updated for Group B Win7 (ESU) and Win8.1 on Sept 13, 2022.

There is a Security-only Update for those with Win7 ESU subscriptions.
There is no September IE11 CU for Win7 ESU subscriptions.

September Rollup KB5017361 Download 32-bit or 64-bit for those with Win7 ESU subscriptions.

You must have at least the August 2020 Servicing Stack KB4570673 previously installed to receive these updates).

There is a Sept 2022 Servicing Stack KB5017397 – Download 32-bit or 64-bit  for those with Win7 ESU subscriptions.

There are .NET Framework updates listed for Win7. See #2477558.

****** UPDATE: ********
Microsoft has released a new ESU Licensing Preparation Package KB5016892 for the extension of Win7/Windows Server 2008 R2 SP1 ESU on Aug 25, 2022. Requires SHA-2 KB4474419 (9/23/2019 or later) and SSU KB4490628 (3/12/2019).

 

There is a Sept, 2022 Servicing Stack KB5017398 – Download 32-bit or 64-bit for Win8.1

6 users thanked author for this post.

Steve, JimBean, rick41, jburk07, abbodi86, SueW

Reply | Quote

Here’s your .NET Framework for Sep, 2022. There were no Win7 Security-only .NET updates.

Download only the update for the version(s) installed on your PC.
There were no 2022-09 (Sep) Security-only updates for .NET Framework

.NET Quality Rollup KB5017529
.NET 3.5.1 KB5013637 (May 2022)
.NET 4.5.2 N/A
.NET 4.6 – 4.7.2 KB5016368 (Aug 2022)
.NET 4.8 KB5017036

6 users thanked author for this post.

Steve, JimBean, rick41, jburk07, abbodi86, SueW

Reply | Quote

PKCano,

“There is a Sept 2022 Servicing Stack KB5017397 —  for those with Win7 ESU subscriptions”

Does this mean that this update should be installed ONLY if you have an ESU subscription and should NOT be installed using the W7ESUI script if you do not have an ESU subscription?

Reply | Quote

SSUs are important. Should be installed.
That is for legitimacy. Legally, one has to have an ESU subscription for installing any recent Win7 update, including the SSU, Rollup, SO, and .NET.
Does that prevent using W7WSUI?

Reply | Quote

PKCano,

Since only SSUs have been stipulated “with Win7 ESU subscriptions”  I have  erroneously been skipping them,  seeing them as something to be treated differently because they were listed this way.

Since I have been skipping them the question now is,  are they cumulative?  Will installing this latest SSU update bring me up to date or do I need to research back to previous SSU updates?

Thank you.

Reply | Quote

Ooops.  My error,  brain freeze.  Forget #2477676.

Reply | Quote

Either KB5017373 or KB5017397 added AutoLogger-Diagtrack-Listener under Startup Event Trace Sessions for me when doing this months updates.  It was not present after doing last months, August, updates (and hadn’t been for a long time as I check after each months updates).

5 users thanked author for this post.

T, coolyman, JimBean, SueW, jburk07

Reply | Quote

See AKB for information on how to remove AutoLogger-Diagtrack-Listener on computer startup.

https://www.askwoody.com/forums/topic/2000012-neutralize-telemetry-sustain-win-7-8-1-monthly-rollup-model/

3 users thanked author for this post.

T, JimBean, SueW

Reply | Quote

Is there any possibility that AutoLogger-Diagtrack-Listener could be used by MS, at some point, to disrupt use of WESUI?

Reply | Quote

That would be a question for @abbodi86
I have had the w10tel command running at startup in Task Scheduler since @abbodi86 put it out there. As far as I know, I have had no problems using W7ESUI since Win7 went EOL and it keeps things clean.

2 users thanked author for this post.

jburk07, rick41

Reply | Quote

Not at all

3 users thanked author for this post.

jburk07, SueW, rick41

Reply | Quote

It’s definitely been snuck in to KB5017373 because i just installed that and only that and there it was. They’ll do anything to sneak a bit of telemetry in.

1 user thanked author for this post.

jburk07

Reply | Quote

Hi,

Installed:

• Jul  2022 KB5015862 SO
• Aug  2022 K5016679 SO
• Aug 2022 (IE11) KB5016618
• Sep  2022 K5017373 SO
• Sep 2022 KB5017397 Servicing Stack

No problems to report.

Also had AutoLogger-Diagtrack-Listener under Startup Event Trace Sessions (thanks for the heads up, @Guest).

Set Task Scheduler to run W10Tel.cmd on startup (thanks for the link, @PKCano)

Thanks, everyone.

🙂

 

2 users thanked author for this post.

jburk07, SueW

Reply | Quote

DEFCON-4.  Time to install September updates.

Using DOTNETFX4 to install

.NET 4.8 – KB5017036

And using W7ESUI to install

Servicing Stack Update KB5017397

Windows 7 Monthly Rollup – KB5017361

Installed these updates on two Win 7,  SP 1,  x64 machines.

 

Reply | Quote

AKB 2000003 has been updated for Group B Win7 (ESU) and Win8.1 on Oct 10, 2022.

There is a Security-only Update for those with Win7 ESU subscriptions.
There is an October IE11 CU KB5018413 for Win7 ESU subscriptions.

October Rollup KB5018454 Download 32-bit or 64-bit for those with Win7 ESU subscriptions.

You must have at least the August 2020 Servicing Stack KB4570673 previously installed to receive these updates).

There is a Sept 2022 Servicing Stack KB5017397 – Download 32-bit or 64-bit  for those with Win7 ESU subscriptions.

There are .NET Framework updates listed for Win7. See #2487370.

****** NOTE: ********
Microsoft has released a new ESU Licensing Preparation Package KB5016892 for the extension of Win7/Windows Server 2008 R2 SP1 ESU on Aug 25, 2022. Requires SHA-2 KB4474419 (9/23/2019 or later) and SSU KB4490628 (3/12/2019).

5 users thanked author for this post.

JimBean, Microfix, rick41, SueW, abbodi86

Reply | Quote

Here’s your .NET Framework for Oct, 2022. There were no Win7 Security-only .NET updates.

Download only the update for the version(s) installed on your PC.
There were no 2022-10 (Oct) Security-only updates for .NET Framework

2022-10 .NET Quality Rollup KB5018547
.NET 3.5.1 KB5013637 (May 2022)
.NET 4.5.2 N/A
.NET 4.6 – 4.7.2 KB5018521
.NET 4.8 KB5018516

4 users thanked author for this post.

jburk07, JimBean, SueW, rick41

Reply | Quote

Oct 11th 2022
Win7 Pro x86 (offline ONLY using ESUb)
SMQR Driver signing revoked for legacy test device /sniff
KB5018516.NET4.8 installed ok and updated MSE & defender manually offline.

No unusual SysMon activity
No event viewer errors.
SFC Integrity good…FWIW

If debian is good enough for NASA...

4 users thanked author for this post.

jburk07, JimBean, abbodi86, SueW

Reply | Quote

DEFCON-4.  Time to install October updates.

Used DOTNETFX4 to install

.NET 4.8 – KB5018516

And used W7ESUI to install

Windows 7 Monthly Rollup – KB5018454

Installed these updates on two Win 7,  SP 1,  x64 machines.

1 user thanked author for this post.

jburk07

Reply | Quote

Microfix wrote:

SMQR Driver signing revoked for legacy test device /sniff

 

What exactly does this mean going forward?  I also read previously in the thread about parallels software problems, does this mean some software of drivers will stop working in the future?

The last update I installed was august, and I want to update again in the next few days, should I install September or is it safe to install October rollup ( or wait for November )?  Is there any chance software or drivers installed on my pc right now could stop working with any rollups after September?

Reply | Quote

Read the info from the three links in the quoted part of #2470380 from Parallels and Microsoft. It is pertinent for Parallels b/c that VM software uses Windows drivers in order for the Win8.1 to talk to the Mac hardware of the host machine.

What is happening is Microsoft is no longer signing drivers for old hardware. That means that the unsigned drivers won’t install on older versions of Windows without circumventing the required signing (there is a way to do this, to turn off signing so you can install). It will be important if you try to reinstall Win, or update drivers, if they are unsigned.

I have install updates through October on my Win7 machine without problems. I intend to keep on installing Win7 updates until at least Jan when the latest ESU expires (using W7EUSI). After that…. we’ll see what happens. MS is supposedly extending the support for a while. Will see what @abbodi86 comes up with.

1 user thanked author for this post.

JimBean

Reply | Quote

Still sort of confusing.  So it mainly concerns new drivers being signed by MS?  for example if I buy a new graphics card and want to add it to my pc, AMD cannot provide new drivers for that card for win7/8.1 from this month forward, is that what you mean?

But will all old hardware with drivers released say a month ago, still keep working, or will even older drivers stop working.

But my main concern is software, will this impact installing any new software, like say new versions of anti-virus, media apps, editing apps etc? not sure if they involve windows drivers…

Or am I completely off track 😛

Reply | Quote

You.Are.Ah.Toyyyyy wrote:

for example if I buy a new graphics card and want to add it to my pc, AMD cannot provide new drivers for that card for win7/8.1

Only applies if the driver you attempt to install is no longer signed by Microsoft. If it is signed (or you use the workaround by turning off signing for an unsigned driver before you install it), you are probably OK. You just have to find out if the driver is still signed, maybe from MS, maybe from the hardware/driver OEM.

You.Are.Ah.Toyyyyy wrote:

But my main concern is software, will this impact installing any new software, like say new versions of anti-virus, media apps, editing apps etc?

As time goes by, software vendors will stop supporting Win7/8.1. That has happened in the past with XP/Vista. It is nothing new. For example, Firefox will supposedly stop supporting Win7/8.1 in Jan 2023. You just have to verify if the particular application is still supported. The version supported info is usually on the app’s website.

2 users thanked author for this post.

JimBean, You.Are.Ah.Toyyyyy

Reply | Quote

AKB 2000003 has been updated for Group B Win7 (ESU) and Win8.1 on Nov 8, 2022.

There is a Security-only Update for those with Win7 ESU subscriptions.
There is a November IE11 CU KB5019958 for Win7 ESU subscriptions.

November Rollup KB5020000 Download 32-bit or 64-bit for those with Win7 ESU subscriptions.

****** UPDATE – Note changes to SSU requirements:
You must have at least the September 2022 Servicing Stack KB5017397 previously installed to receive these updates – Download 32-bit or 64-bit  for those with Win7 ESU subscriptions.

There are .NET Framework updates listed for Win7. See #2496434.

****** NOTE: ********
Microsoft has released a new ESU Licensing Preparation Package KB5016892 for the extension of Win7/Windows Server 2008 R2 SP1 ESU on Aug 25, 2022. Requires SHA-2 KB4474419 (9/23/2019 or later) and SSU KB4490628 (3/12/2019).

6 users thanked author for this post.

JimBean, zat_so, SueW, rick41, Microfix, abbodi86

Reply | Quote

Addendum:
Sept 2022 Servicing Stack KB5017397 is prerequisite for November 2022 updates (Monthly Rollup KB5020000, or Security Only KB5020013 / IE11 KB5019958)

August 2020 Servicing Stack KB4570673 is not enough anymore

5 users thanked author for this post.

jburk07, JimBean, zat_so, Microfix, PKCano

Reply | Quote

Here’s your .NET Framework for Nov, 2022. There were Win7 Security-only .NET updates.

Download only the update for the version(s) installed on your PC.
There were 2022-11 (Nov) Security-only updates for .NET Framework

2022-11 .NET Quality Rollup KB5020688
.NET 3.5.1 KB5013637 (May 2022)
.NET 4.5.2 N/A
.NET 4.6 – 4.7.2 KB5020630
.NET 4.8 KB5020621

2022-11 .NET Security-only Quality Rollup KB5020678
.NET 3.5.1 N/A
.NET 4.5.2  N/A
.NET 4.6 – 4.7.2 KB5020612
.NET 4.8 KB5020609

7 users thanked author for this post.

jburk07, JimBean, Steve, SueW, rick41, Microfix, abbodi86

Reply | Quote

DEFCON-3.  Time to install November updates.

Used DOTNETFX4 to install

.NET 4.8 – KB5020621

Used W7ESUI to install

Windows 7 Monthly Rollup – KB5020000

Installed these updates on two Win 7,  SP 1,  x64 machines.

1 user thanked author for this post.

jburk07

Reply | Quote

AKB 2000003 has been updated for Group B Win7 (ESU) and Win8.1 on Dec 13, 2022.

There is a Security-only Update for those with Win7 ESU subscriptions.
There is no December IE11 CU for Win7 ESU subscriptions.

December Rollup KB5021291 Download 32-bit or 64-bit for those with Win7 ESU subscriptions.

******  Note changes to SSU requirements:
You must have at least the September 2022 Servicing Stack KB5017397 previously installed to receive these updates – Download 32-bit or 64-bit  for those with Win7 ESU subscriptions.

There are .NET Framework updates listed for Win7. See #2507830.

****** NOTE: ********
Microsoft has released a new ESU Licensing Preparation Package KB5016892 for the extension of Win7/Windows Server 2008 R2 SP1 ESU on Aug 25, 2022. Requires SHA-2 KB4474419 (9/23/2019 or later) and SSU KB4490628 (3/12/2019).

6 users thanked author for this post.

jburk07, JimBean, Microfix, rick41, SueW, abbodi86

Reply | Quote

Here’s your .NET Framework for Dec, 2022. There were Win7 Security-only .NET updates.

Download only the update for the version(s) installed on your PC.
There were 2022-12 (Dec) Security-only updates for .NET Framework

2022-12 .NET Quality Rollup KB5021091
.NET 3.5.1 KB5020861
.NET 4.5.2 N/A
.NET 4.6 – 4.7.2 KB5020869
.NET 4.8 KB5020879

2022-12 .NET Security-only Rollup KB5021709
.NET 3.5.1 KB5020896
.NET 4.5.2 N/A
.NET 4.6 – 4.7.2  KB5020900
.NET 4.8 KB5020903

9 users thanked author for this post.

jburk07, Steve, JimBean, Microfix, rick41, Pexiler, SueW, zat_so, abbodi86

Reply | Quote

PKCano wrote:

2022-05 .NET Security-only Quality Rollup KB5021079

Thank you for posting. It appears this should be 2022-12?

3 users thanked author for this post.

Microfix, PKCano, SueW

Reply | Quote

What can I say – MS Patch Tuesday and Apple updates everything too. Too many changes.

And the Catalog is broken today. You can’t do a general search for “2022-12” and get good results. You have to know the KB number. Plus the MS Software Distribution History page hasn’t been updated as of 5:00pm CST US.

Thanks. Fixed it.

1 user thanked author for this post.

rick41

Reply | Quote

As of ±736pm CST, I had no problem with querying the catalog with “2022.12”. I got a total of 245 hits spread out across 10 pages. NOTE: The quotes surrounding the date are all normal, everyday quotes generated by using the uppercase ‘ on my keyboard and nothing else. They are NOT “smart quotes”.

When I used smart quotes, they seemed to be ignored by the catalog, and it generated over 1000 hits (and it complains about it too!), the same result as just typing 2022-12 without any quotes.

I hope this provides some good news out there!

Reply | Quote

Hi,

Installed:

• Oct 2022 KB5018479 SO
• Nov 2022 KB5020013 SO
• Nov 2022 (IE11) KB5019958
• Dec 2022 KB5021288 SO
• Dec 2022 KB5020896 SO Update for .NET 3.5.1

No problems to report.

Thanks, everyone.

 

1 user thanked author for this post.

SueW

Reply | Quote

Wondering why Installed Updates lists my full history of .NET quality Rollups, whether installed with dotNetFx4_ESU_Installer (in my case for .NET 4.8) or W7ESUI (.NET 3.5.1)?  Aren’t the .NET Rollups cumulative like the Windows Rollups installed with W7ESUI?  For the Windows Rollups, only the latest one installed is shown in Installed Updates.

1 user thanked author for this post.

jburk07

Reply | Quote

.NET Rollups for pre Windows 10 are not chained (Package_for_DotNetRollup) or fully cumulative
they are cumulative back to the first Rollup, but they don’t include all older .NET updates

essentially they are separate updates

2 users thanked author for this post.

jburk07, rick41

Reply | Quote

Thanks for the explanation.  That leads to a couple of process questions:

One of my Win 7 machines has not had any updates since Feb 2022 (I don’t use it much and have been relying on 0patch instead), but I want to update it soon. (It was fully updated through Jan 2022.)  Can I install all the .NET 4.8 “Quality Rollups” in a single run of dotNetFx4_ESU_Installer, and all the .NET 3.5.1 “Quality Rollups” in a single run of W7ESUI?  Or is it necessary to run them one at a time in each case?   And regarding the Windows Rollup, do I need to install all of SSUs, or just the latest?  If I need to install all of them, can I install them all in one run?

1 user thanked author for this post.

jburk07

Reply | Quote

You only need the latest Rollups: KB5020879 = 4.8, KB5020861 = 3.5.1

however, due messed up metadata, WU might still require older 3.5 Rollup KB5013637

2 users thanked author for this post.

jburk07, rick41

Reply | Quote

Thanks.  Any advice on the SSU question (last two sentences of my last post)?

Reply | Quote

Latest SSU KB5017397 is enough

2 users thanked author for this post.

jburk07, rick41

Reply | Quote

DEFCON-3.  Time to install December updates.

Used DOTNETFX4 to install

.NET 4.8 Quality Rollup – KB5020879

Used W7ESUI to install

Windows 7 Monthly Rollup – KB5021291

Installed these updates on two Win 7,  SP 1,  x64 machines.

Reply | Quote

What will you do in 2 weeks time after January 14, 2023?
Why even bother installing Dec.22 updates on Windows 7? what are the benefits?

Reply | Quote

Updates will continue to work, with a workaround.

If they don’t change the current verification scheme (check for activated ESU keys), then all will be fine.

What would be hard is if they change the updates applicability itself to require Windows 7 Embedded / Server 2008 R2 specific CBS packages, but it can still be fooled.

6 users thanked author for this post.

Pim, jburk07, Microfix, rick41, SueW, PKCano

Reply | Quote

Waiting for your information/directions 🙂

2 users thanked author for this post.

rick41, SueW

Reply | Quote

There will be another (final) set of Win 7 ESU updates released on January 10, 2023, right?

Reply | Quote

Correct. For both Win7 and Win8.1

2 users thanked author for this post.

jburk07, rick41

Reply | Quote

Benefits?  They provide security!

Reply | Quote

abbodi86 wrote:

Updates will continue to work, with a workaround.

Which updates? With end of ESU, who will issue updates?

Reply | Quote

Server 2008 R2 will get extra ESU year
Embedded Standard 7 will still get 10 months of ESU
Embedded POSReady 7 will still get 22 months of ESU

3 users thanked author for this post.

SueW, Alex5723, PKCano

Reply | Quote

None are Windows 7 home users versions.

I wonder how will 0Patch support Windows 7 for extra 2 years.

Reply | Quote

All of them get the same updates

3 users thanked author for this post.

Pim, jburk07, Alex5723

Reply | Quote

AKB 2000003 has been updated for Group B Win7 (ESU) and Win8.1 on Jan 10, 2023.

There is a Security-only Update for those with Win7 ESU subscriptions.
There is no January IE11 CU for Win7 ESU subscriptions.

January Rollup KB5022338 Download 32-bit or 64-bit for those with Win7 ESU subscriptions.

******  Note changes to SSU requirements:
You must have at least the September 2022 Servicing Stack KB5017397 previously installed to receive these updates – Download 32-bit or 64-bit  for those with Win7 ESU subscriptions.

There are .NET Framework updates listed for Win7. See #2517964.

****** NOTE: ********
Microsoft has released a new ESU Licensing Preparation Package KB5016892 for the extension of Win7/Windows Server 2008 R2 SP1 ESU on Aug 25, 2022. Requires SHA-2 KB4474419 (9/23/2019 or later) and SSU KB4490628 (3/12/2019).

4 users thanked author for this post.

jburk07, rick41, SueW, abbodi86

Reply | Quote

Here’s your .NET Framework for Jan, 2023. There were no 2023-01 (Jan) Win7 Security or Security-only .NET updates.

3 users thanked author for this post.

jburk07, rick41, SueW

Reply | Quote

PKCano wrote:

AKB 2000003 has been updated for Group B Win7 (ESU) and Win8.1 on Jan 10, 2023.

There is a Security-only Update for those with Win7 ESU subscriptions.
There is no January IE11 CU for Win7 ESU subscriptions.

January Rollup KB5022338 Download 32-bit or 64-bit for those with Win7 ESU subscriptions.

******  Note changes to SSU requirements:
You must have at least the September 2022 Servicing Stack KB5017397 previously installed to receive these updates – Download 32-bit or 64-bit  for those with Win7 ESU subscriptions.

There are .NET Framework updates listed for Win7. See #2517964.

****** NOTE: ********
Microsoft has released a new ESU Licensing Preparation Package KB5016892 for the extension of Win7/Windows Server 2008 R2 SP1 ESU on Aug 25, 2022. Requires SHA-2 KB4474419 (9/23/2019 or later) and SSU KB4490628 (3/12/2019).

Please excuse me. Did you forget to include the Security Only update KB5022339?

Important links you can use, without the monetization pitch = https://pqrs-ltd.xyz/bookmark4.html

Reply | Quote

The Security-only updates for Win7/8.1 are always included int AKB2000003 (linked above). Have you looked there?

2 users thanked author for this post.

Steve, SueW

Reply | Quote

DEFCON-4.  Time to install January updates.

Used DOTNETFX4 to install

There were no .NET 4.8 Quality Rollups

Used W7ESUI to install

Windows 7 Monthly Rollup – KB5022338

Installed these updates on two Win 7,  SP 1,  x64 machines.

 

1 user thanked author for this post.

jburk07

Reply | Quote

Hey, I’ve been racking my brain trying to get this to work in Virtualbox.  I created a fresh Windows 7 install downloaded all the updates from Windows Update and added required KBs mentioned at the top of the page. I added the KB5017397 & KB5022338 to the a folder on the root of C:  I keep getting a DISM error 800f081f .  I already started all over with a new VM of Windows 7 and did all the updates again and I still get the same error.

Any help would be great!

Reply | Quote

I suggest you read #2526142 and the rest of the recent discussion with poster Win7. In particular, the two threads linked and the recommendations therein. There are prereqs along the way to updating a clean install of Win7 that are not contained in this thread.

You do not use @abbodi ‘s method with W7ESUI and dotNetFx4_ESU_Installer_r, mentioned  in this thread, until after the time Win7 is EOL in Jan 2020. You will first have to bring Win7 up to date enough to start using Windows Update by download and manually installing updates. The two threads mentioned are old, but the considerations and the technique are the same. The choices for update points were made to circumvent problems Microsoft caused along the way. There is no instant gratification involved, it is a long drawn out process.

If you have questions, create a new thread or tag on to the discussion after Win7’s. I will be glad to help you along the way.

Reply | Quote

Regarding some old updates that may show up in WU since today or yesterday
—–

For whatever reason, MS expired “2022-09 Security Monthly Quality Rollup (KB5017361)” for Windows 7 (regular client)
it’s the only one expired (so far)

this break the metadata supersedence chain
i.e. for 2022-8 Rollup (KB5016676) you see now it’s not replaced by any newer Rollups
https://www.catalog.update.microsoft.com/ScopedView.aspx?updateid=7f3c75a0-bf68-4715-b5bf-b0083ee7adb8

but because all Rollups are connected to each other by CBS package name “Package_for_RollupFix”, 2022-8 Rollup (KB5016676) is automatically marked as superseded when newer rollup(s) is installed

this cause the old updates superseded by metadata of 2022-8 Rollup (KB5016676) and older rollups (but not newer rollups) to show up in WU

just ignore or hide those old updates (or even install them, they have no effect and all are replaced)

1 user thanked author for this post.

rick41

Reply | Quote

Now they accidentally expired all 2022-09 and later Monthly Rollups for Windows 7

Reply | Quote

“accidentally”????
Yeah, right!

/s

1 user thanked author for this post.

SueW

Reply | Quote

Lots of businesses will still have 7.  There are a lot of moving parts at microsoft and zero communication.

Susan Bradley Patch Lady/Prudent patcher

Reply | Quote

Seems to be fixed now, at least for January Rollup KB5022338 64-bit (I haven’t tested any others).

Reply | Quote

They only restored that last one
2022-09 > 2022-12 Rollups still missing

Reply | Quote

Now this is bizarre.  It looks like on Feb 8 they added back the 64-bit and 32-bit rollups for 2022-10, 2022-11 and 2022-12.  But the strangest part is that, while  they also added back the 2022-09 Rollup KB5017361, they are now calling it the 2023-02 Rollup.  Maybe there’s some method to the madness that I don’t understand.

2 users thanked author for this post.

Microfix, abbodi86

Reply | Quote

M$ are at it! They’re killing off new installations bit by bit
Recently re-installed three (fresh) Windows 7 for others to use offline (patched up to end of service) it would seem that those were done just in the nick of time.
Make dedicated image backups now whilst the going is good

Reply | Quote

New .NET 4.x ESU updates installer
https://github.com/abbodi1406/WHD/raw/master/scripts/dotNetFx4_ESU_Installer_u.zip

W7ESUI still work to install 2023-02 updates

3 users thanked author for this post.

rick41, jburk07, Pim

Reply | Quote

Use the Embeded 7 updates?

Are the Server 2012 R2 updates good for Win8.1?
Or use Win8.1 Embeded?

Waiting to update AKB2000003 and the Summary in this thread.

Reply | Quote

Yes, Embedded 7 & 8.1 updates apply to Windows 7 & 8.1
however, the updates contain ESU block, they cannot be installed without BypassESU or W7ESUI (or W81ESUI soon)

i think it’s safe to update AKB2000003 with new updates, with clear notice about applicability

Reply | Quote

AKB 2000003 has been updated for Group B Win7 (ESU) and Win8.1 on Feb 13, 2023.
****** Note Changes: The updates are for Win7 Embedded Standard and Win8.1 Embedded. W7ESUI or BypassESU will work for Win7 installation. Updates for Win8.1 require W81ESUI_0_1

***** Win7 (using Win7 Embedded Standard updates) *****
(Download revised installer v.4 W7ESUI_0_4.zip)

There is a Security-only Update for those with Win7 ESU subscriptions.
There is February IE11 CU for Win7 ESU subscriptions.
February Rollup KB5022872 Download 32-bit or 64-bit for those with Win7 ESU subscriptions.

******  Note changes to SSU requirements:
You must have at least the September 2022 Servicing Stack KB5017397 previously installed to receive these updates – Download 32-bit or 64-bit  for those with Win7 ESU subscriptions.

There are .NET Framework updates listed for Win7. See #.

****** NOTE: ********
Microsoft has released a new ESU Licensing Preparation Package KB5016892 for the extension of Win7/Windows Server 2008 R2 SP1 ESU on Aug 25, 2022. Requires SHA-2 KB4474419 (9/23/2019 or later) and SSU KB4490628 (3/12/2019).

 

******* Win8.1 (using Win8.1 Embedded updates) *******
(Requires installer W81ESUI_0_1.zip)

There is a Security-only Update for Win8.1.
There is February IE11 CU for Win8.1.
February Rollup KB5022899  Download 32-bit or 64-bit for Win8.1.

9 users thanked author for this post.

Erik, JimBean, Steve, jburk07, zat_so, Pim, rick41, SueW, abbodi86

Reply | Quote

Here’s your .NET Framework for Feb, 2023.

Download only the update for the version(s) installed on your PC.
There were 2023-02 (Feb) Security-only updates for .NET Framework

***** Using Win7 Embedded Standard *****  (Requires dotNetFx4_ESU_Installer_u) for .NET4.
(A link for this installer has also been added to the top post in this thread)

2023-02 .NET Quality Rollup KB5022731
.NET 3.5.1 KB5022523
.NET 4.5.2 N/A
.NET 4.6 – 4.7.2 KB5022515
.NET 4.8 KB5022509

2023-02 .NET Security-only Rollup KB5022783
.NET 3.5.1 KB5022530
.NET 4.5.2 N/A
.NET 4.6 – 4.7.2 KB5022526
.NET 4.8 KB5022520

 

******** Using Win8.1 Embedded ******** (Requires installer W81ESUI_0_1.zip)

2023-02 .NET Quality Rollup KB5022733
.NET 3.5.1 KB5022525
.NET 4.5.2 N/A
.NET 4.6 – 4.7.2 KB 5022513
.NET 4.8 KB 5022508

2023-02 .NET Security-only Rollup KB5022785
.NET 3.5.1 KB5022531
.NET 4.5.2 N/A
.NET 4.6 – 4.7.2 KB 5022524
.NET 4.8 KB5022516

8 users thanked author for this post.

Erik, Steve, JimBean, jburk07, Pim, rick41, abbodi86, SueW

Reply | Quote

Hello,

I’ve been wondering about which .NET Quality Rollup should I install for my Win7x64 Professional. The only .NET Framework that is installed in my OS is 4.8 (at least this is what the Add/Remove Programs list in Control Panel states). Once I read that there is an older version of .NET Framework built into Win7 by default. I don’t know if I should have installed 4.8 Quality Rollup, or maybe I should have installed the complete .NET Framework Quality Rollup? What would you suggest for me?

Reply | Quote

PKCano wrote:

Download only the update for the version(s) installed on your PC.

If you have never updated your Win7 computer since Win7 reached EOL in January, 2020, the first thing you need to know is how to do the manual update using the scripts provided here. The instructions are in the post at the top of this thread. Some of the prerequisites are listed in #2534438.

You only need the update(s) for the version(s) of .NET installed on your computer. Some programs require specific versions of the .NET platform to run. You only need the versions that those programs require. The older version you refer to is probably v3.5. That information will be in Programs & Features – click on “Turn Windows Features on or off” link at top left to see if it’s listed.

The .NET Rollup is a bundle of separate Rollups, one for each separate version of .NET. If you are using Windows Update, it will offer you the Rollup but will only install the individual updates for the versions you have installed. But at this point, Win7 is EOL and Windows Update is not available for updates issued after Jan 2020.

If you are manually downloading/installing the .NET updates, and you try to download the Rollup, you will find the bundle of separate updates (many downloads). So, there is a link provided to the update for each of the individual updates above. You only need the update(s) for the version(s) of .NET installed on your computer.

2 users thanked author for this post.

SueW, Pim

Reply | Quote

In order to find which versions of .NET Framework are installed in my OS I used a small application titled DotNetVersions. It listed the versions in my OS as follows:

• 2.0.50727.5420 Service Pack 2
• 3.0.30729.5420 Service Pack 2
• 3.5.30729.5420 Service Pack 1
• 4.0.0.0
• 4.8.03761

So, which .NET Quality Rollup should I stick with? 4.8 only?

Reply | Quote

There is NO Rollup for .NET4.8  – it is an individual update for ONLY .NET4.8.

You need the update for each version on .NET Framework installed on your computer.
Use both the one for 3.5 and the one for 4.8.

Reply | Quote

Then it means that I’ve been missing updates for 3.5 since February 2020 (once ESU kicked in). I have been updating 4.8 only. I don’t want to waste time installing each 3.5 update. Would .NET Quality Rollup be a better solution for me so it introduces all the updates/fixes I’ve been missing since February 2020? I don’t have all the .NET Framework versions the Rollup applies to but installing it shouldn’t brake things in my OS, right?

Reply | Quote

PKCano wrote:

If you are manually downloading/installing the .NET updates, and you try to download the Rollup, you will find the bundle of separate updates (many downloads). So, there is a link provided to the update for each of the individual updates above. You only need the update(s) for the version(s) of .NET installed on your computer.

The updates in the Quality Rollup are cumulative.
The Security-only updates are NOT cumulative.

Reply | Quote

No Group A rollup updates?

Could you please advise on how to proceed for those who’re currently in Group A on the latest January, 2023 Rollup for Windows?

Thanks

Reply | Quote

The Rollup for Group A for both Win7 and Win8.1 are listed in #2534438.
The procedure for Win7 Group A is the same as for Group B.
The procedure for Win8.1 requires W81ESUI_0_1.

1 user thanked author for this post.

heard

Reply | Quote

Thank you abbodi86 and PKCano.  Updated W7 for February and everything went well.

Oddly, Best Buy worked immediately before I updated Windows and Firefox but not after.  It now says “We’re sorry.Your browser is no longer supported by BestBuy.com.  Please download the latest version of Chrome, Firefox, Microsoft Edge, ”

 

Reply | Quote

Change your Browser agent to Windows 10.
You will find many sites blocking browsers Windows 7.

1 user thanked author for this post.

Steve

Reply | Quote

I believe setting “privacy.resistFingerprinting” to true does that and I have that as true.

Not sure why updating W7 or Firefox to 110.0 affected Best Buy like that but I was literally on the site, closed the browser and updated both Windows and Firefox and went back and was blocked with that message.

Thanks for the tip though.  I’ll look into it further in case that privacy.resistFingerprinting setting didn’t do what I thought it did.

Edit:  My user agent is showing up as Mozilla/5.0 (Windows NT 10.0; rv:110.0) Gecko/20100101 Firefox/110.0 so I am not sure what changed.

Reply | Quote

Update.

Found out the Best Buy site issue has nothing to do with Windows 7 or Firefox really.

Apparently some sites are erroneously looking at only the first two digits of the User Agent version and seeing Firefox versions 110-119 as IE 11.  Thinking one is using that browser, they are trying to block IE11 rather than the latest Firefox.

https://www.ghacks.net/2023/01/01/mozilla-changes-firefoxs-user-agent-because-of-internet-explorer-11/

https://bugzilla.mozilla.org/show_bug.cgi?id=1805967

https://borncity.com/win/2023/01/06/firefox-108-0-2-released-mozilla-freezes-user-agent-string-on-firefox-110-because-of-ie-11/

https://miketaylr.com/posts/2022/12/how-the-IE-11-ua-string-broke-sites-in-firefox.html

My issue, and anyone that has the “privacy.resistFingerprinting” set to true, is that is blocking the user agent fingerprint metric which also has a side effect of blocking the Firefox workaround of freezing part of the UA as version 109.

No idea if that is a bug that Firefox is looking into or even how to report/ask them.

See someone else having the issue at https://github.com/webcompat/web-bugs/issues/115507 (probably has yet to release it is because the resistfingerprinting setting is blocking the workaround as it should).  I tried to create a github account but it was blocked saying the account was suspicious and it can’t post messages to ask in that thread or at https://github.com/arkenfox/user.js

If anyone is curious and wants to see it in action.  Visit the Best Buy site, then change the “privacy.resistFingerprinting” setting to True in about:config and reload the site.  Remember to change the setting back to False when done.  Also, can see the UA change doing so using https://www.whatismybrowser.com/detect/what-is-my-user-agent/

Reply | Quote

I have not updated my Win7-Pro and using Edge. After reading your post, I did not have a problem visiting Best Buy’s site. Maybe it is because I am using Edge?

Reply | Quote

Alex5723 wrote:

Change your Browser agent to Windows 10.
You will find many sites blocking browsers Windows 7.

Exactly how does someone change the Browser agent to say from Windows 10 instead of Windows 7? Curious how this would be done for both Chrome and Firefox. I am hoping for detailed step by step instructions as this is beyond my knowledge by quite a bit.

Thanks in advance…

Reply | Quote

A quick search found this site: https://www.searchenginejournal.com/change-user-agent/368448/

cheers, Paul

1 user thanked author for this post.

castiel

Reply | Quote

OK, lets move this discussion to another thread. It has nothing to do with post ESU updating.

5 users thanked author for this post.

Kirsty, A1ex, Just another Forum Poster, castiel, SueW

Reply | Quote

Thanks to Abbodi86 and PKCano and others for the efforts/commitment to this project.

I ran the updated version (W7ESUI_0_4.zip) of the script on an up-to-date (Jan 2023) machine which had previously experienced no issues with theses scripts (SSU, SMQR, .Net 3.5.1). Previous updates with the dotNetFx4_ESU_Installer_r.zip on 4.7.2 have also been uneventful. (dotNetFx4_ESU_Installer_u.zip ready but didn’t get that far this month).

Running W7ESU_0_4 in folder with kb5022523-x86 and kb5022872-x86 (Image version 6.1.7601.24499) resulted in the following for each: Error 1018, “Illegal operation attempted on a registry key that has been marked for deletion.” Logged to the DISM log. Both aborted early (6.5% and 2.0% respectively).

Anyone else see this? Thoughts? I’m not familiar with DISM logs.

Reply | Quote

I see you are using the x86 updates instead of x64. Obvious question – is your system 32-bit?

Reply | Quote

Can you open C:\Windows\Logs\CBS\CBS.log and search for:

, error

and post the lines found?

1 user thanked author for this post.

PKCano

Reply | Quote

Win8.1 – SQMR, IE11, .Net 3.5/4.8 then MSRT through WU – no problems

Reply | Quote

Will WU still pull the MSRT for Windows 7 as well?

Reply | Quote

It did for me.  Win 7 Pro 64-bit.

2 users thanked author for this post.

SueW, Moonbear

Reply | Quote

Run MSRT first, it will automatically create a Restore Point for you.
Then install the updates.

2 users thanked author for this post.

SueW, Moonbear

Reply | Quote

Catalog Update: dotNET from 4.6.2 to 4.8 each updated on 17th Feb 2023
ESU blocks introduced that were missing from initial patch tuesday updates, or ?? affected systems:
Win7 Embedded Standard
Win Server 2008
Win Server 2008 R2
Win8 Embedded
Win Server 2012
Win 8.1 Embedded
Win Server 2012 R2

If debian is good enough for NASA...

1 user thanked author for this post.

Moonbear

Reply | Quote

No, it’s out-of-band fix
Windows 10/11 got similar updates on 31th January: KB5023323 -> KB5023327

p.s. 2023-02 .NET updates for Win 8 & Win 8.1 don’t have any ESU block

3 users thanked author for this post.

jburk07, rick41, Microfix

Reply | Quote

abbodi86 wrote:

p.s. 2023-02 .NET updates for Win 8 & Win 8.1 don’t have any ESU block

point was that perhaps an esu block was being introduced to those NET updates, which seems not. Thanks for the clarification that it’s an OoB fix 🙂

If debian is good enough for NASA...

Reply | Quote

Is the updated version of the .NET 4.8 patch for Win 7 embedded 64-bit possibly just for security-only instead of quality rollup?  Or was the update possibly released earlier than 17th Feb 2023?

I ask because I downloaded the quality rollup for .Net 4.8 on both 15th Feb and again early-a.m. today (as I had temporarily “misplaced” the prior download), and they appear identical.  That includes contents comparisons by Beyond Compare 4.

Reply | Quote

See @abbodi86 ‘s answer two posts up.
The one linked in #2534439 is the original.
The one issued on the 17th is an OoB fix.

1 user thanked author for this post.

rick41

Reply | Quote

.NET updates released on patch tuesday did not change

the released OOB .NET updates:
KB5023818, KB5023819, KB5023820, KB5023821, KB5023822, KB5023823

1 user thanked author for this post.

rick41

Reply | Quote

.NET Framework OoB Patches released Feb. 17, 2023
See #2534439 for installation instructions.

2023-02 .NET OoB Updates for Win7 Embedded Standard
.NET 4.6 – 4.7.2 KB5023820
.NET 4.8 KB5023823

2023-02 .NET OoB Updates for Win8.1 Embedded
.NET 4.6-4.7.2 KB5023819
.NET 4.8 KB5023822

7 users thanked author for this post.

Erik, JimBean, jburk07, Moonbear, rick41, SueW, abbodi86

Reply | Quote

Can this OoB be run concurrently with the 2023-02 .NET Quality Rollup?  I would assume that the answer is yes, but thought it wouldn’t hurt to double-check.

Reply | Quote

Yes

1 user thanked author for this post.

rick41

Reply | Quote

With many thanks to abbodi86, Windows 7 lives on in Windows Embedded Standard 7 (WES7) as of February’s updates!

I wanted to document my experience with this “updated” process; here is my feedback:

1 – imaged my computer with Macrium Reflect Free

2 – downloaded and extracted both of abbodi86’s updated installers — W7ESUI_0_4.zip and dotNetFx4_ESU_Installer_u — into their perspective folders

3 – downloaded the following into my ‘W7ESUI’ folder:

• KB5022874 (February Security Only Update for WES7)
• KB5022835 (February IE11 CU for WES7)
• KB5022523 (February Security and Quality Rollup for .NET Framework 3.5.1 for WES7)

4 – ran .cmd as admin to install, rebooted, and then waited 15 minutes

5 – downloaded the following into my ‘DotNet4’ folder:

• KB5022515 (February Security and Quality Rollup for .NET Framework .NET 4.6.2-4.7.2 for WES7)
• KB5023820 (Update for .NET Framework .NET 4.6.2-4.7.2 for WES7)

6 – ran .cmd as admin to install, rebooted, waited 15 minutes, and verified all installs

7 – ran Windows Update => KB890830 (MSRT v5.110) and installed it.

Thank you as always to PKCano for always ensuring that we have the links to the latest updates, and for the many contributions!

Win 7 SP1 Home Premium 64-bit; Office 2010; Group B (SaS); Former 'Tech Weenie'

9 users thanked author for this post.

Steve, jburk07, CdnTom, RDRguy, Microfix, Moonbear, rick41, PKCano, abbodi86

Reply | Quote

28th February 2023 UPDATE:
Servicing stack updates for Win8.1 embedded and Win Server 2012 R2 in the MSFT catalog: kb5022922

I’m hangin off that for now and see what happens past March patch-tuesday

If debian is good enough for NASA...

1 user thanked author for this post.

abbodi86

Reply | Quote

First off, thanks again to abbodi86 for continuing to help keep Windows 7 alive

No problems installing 5022872 and 5022523.

5022515 and 5023820 were another story entirely.

These updates would only install one at a time and each took over 20 minutes to install.

Did I do something wrong?

My system is running fine and all 4 updates are listed in the installed updates list.

1 user thanked author for this post.

jburk07

Reply | Quote

At the risk of asking the obvious, had you replaced the entire prior version with the current contents of the dotNetFx4_ESU_Installer_u installer? Ran the current .cmd file as admin?

Win 7 SP1 Home Premium 64-bit; Office 2010; Group B (SaS); Former 'Tech Weenie'

Reply | Quote

Yes to both questions.

But maybe I should re download the installer just to be sure.

Reply | Quote

Darn! I think I’d wait to see if others post their results for this month. Since you installed all 4 updates successfully, and your system is running fine, I’d be inclined to wait until next month before re-downloading and extracting the installer for March’s updates. Just my $.02.

[By the way, was the bittedness correct?]

Win 7 SP1 Home Premium 64-bit; Office 2010; Group B (SaS); Former 'Tech Weenie'

Reply | Quote

Installer re downloaded.

Now to wait for next month’s patches

1 user thanked author for this post.

SueW

Reply | Quote

Do you have too-protective protection program installed (Antivirus or Firewall..)?

each new .NET update installed, will trigger a rebuild of some of the Native Image Cache files (C:\Windows\assembly\NativeImages*)
this takes some time, but some AVs might get in the way

2 users thanked author for this post.

JimBean, jburk07

Reply | Quote

I use Panda Dome Free Antivirus.

Its never got in the way of either installer before and no messages or warnings showed today.

Could it have something to do with running it the first time directly after installing 5022872 and 5022523 without rebooting first?

Reply | Quote

[rick41]

My experience, which was good after an initial (likely self-induced?) stumble.

I have Win7 Pro 64-bit.  Ran my .NET 4.8 updates first, namely the “regular” Feb Quality update KB5022509, and the out-of-band KB5023823.  I did these in a single run, using the updated .NET installer version (dotNetFx4_ESU_Installer_u).  Took awhile — maybe even 15-20 minutes or more — but I don’t find this unusual or concerning relative to past experience, especially since there were two exe’s being installed instead of the usual one exe.

Where I then ran into problems initially was installing the two msu updates, namely Feb SQMR KB5022872 and Feb .NET 3.5.1 Quality Rollup KB5022523, using the new version (0.4) of W7ESUI.  Now, I was in a bit of a hurry (probably should’ve put off the tasks until later), so I can’t recall exactly what fixes or sequencing I tried, or at what points I rebooted (or didn’t).  I do know that when I tried installing them separately instead of simultaneously, they still both failed.

What I do know for sure is that after I deleted and re-downloaded both msu’s, they installed fine (in a single run).  Maybe I had initially downloaded the wrong version for one or both of them?  (Although the error message I attach does seem to reference the correct patch for KB5022523.)  Or is it possible MS actually silently modified the files from when I first downloaded them awhile ago (I guess that one’s unlikely…)?

FWIW, I know that somewhere along the line I got an “already installed” type error message.  And I also got the attached “Illegal operation attempted on a registry key that has been marked for deletion” on KB5022523.

Hopefully (and probably) the initial stumble was my error.  As always thanks to abbodi86 for the scripts, and to PKCano for the timely updates and advice.

 

• This reply was modified 2 years ago by rick41. Reason: EDITED for a couple minor corrections and clarifications
• This reply was modified 2 years ago by rick41. Reason: Multiple clarifications and minor corrections

1 user thanked author for this post.

jburk07

Reply | Quote

DEFCON-4.  Time to install February updates.

Used DOTNETFX4 to install

.NET 4.8 Quality Rollup – KB5022509

.NET 4.8 OoB – KB5023823

Used W7ESUI to install

Windows 7 Monthly Rollup – KB5022872

.NET 3.5.1 Quality Rollup  KB5022523

Installed these updates on two Win 7,  SP 1,  x64 machines.

 

2 users thanked author for this post.

jburk07, SueW

Reply | Quote

Thanks to Abbodi86, PKCano, and others, for their efforts supporting this forum.

Similar to posts above, I ran the updated version of the script W7ESUI_0.4.zip on a machine which had previously experienced no issues running theses scripts. Running W7ESU_0.4 in a folder with kb5022523-x64 and kb5022872-x64 (Image version 6.1.7601.24499) resulted in the following for each: Error: 1018, “Illegal operation attempted on a registry key that has been marked for deletion.” Error occurred at 5.6% and 1.0% respectively.

Attached are the “, Error” lines from the CBS.log file (CBS_Error.txt) and the DISM.log file (DISM_Error.txt).

As I don’t appear to be the only one running into this, any advice as to how to proceed at this point, would be greatly appreciated.

Thanks!

1 user thanked author for this post.

jburk07

Reply | Quote

Check installed updates and see if the Rollup is installed.
If not, try running only the Rollup again.
Remove the .NET 3.5.1 patch.
Let us know if that works.

1 user thanked author for this post.

SteveIT

Reply | Quote

The Rollup (KB5022872) was not found in Installed Updates. Rebooted, then installed only KB5022872 by itself, using W7ESU_0.4, which successfully completed. Rebooted to complete the installation. KB5022872 is now found under Installed Updates.

Should I now proceed with installing the .NET 3.5.1 patch (KB5022523) by itself using W7ESU_0.4?

Looking forward, is there any similar issue with dotNetFx4_ESU_Installer_u? That is, should KB5022515 and KB5023820 be installed one at a time for .NET 4.6.2?

Thanks!

Reply | Quote

can you run this in admin cmd before attempting to install KB5022523?

dism /online /remove-package /packagename:Package_for_KB5022523~31bf3856ad364e35~amd64~~6.1.1.2

reboot if requested

for .NET 4.x updates, yes you can install them together

Reply | Quote

Results of the above admin cmd were as follows:

———————————————————————————–
Deployment Image Servicing and Management tool
Version: 6.1.7601.24499
Image Version: 6.1.7601.24499

An error occurred trying to open – Package_for_KB5022523~31bf3856ad364e35~amd64~~6.1.1.2 Error: 0x800f0805
The specified package is not valid Windows package.
Error: 0x800f0805
The specified package is not valid Windows package.
The DISM log file can be found at C:\Windows\Logs\DISM\dism.log
———————————————————————————–

No reboot was requested.  Not certain if this is what you were expecting?  Let me know if I should proceed with the install of KB5022523.

Thanks.

Reply | Quote

It’s expected, i was trying to see if there are residue of previous attempts
just to make sure, run these too:

dism /online /remove-package /packagename:Package_1_for_KB5022523~31bf3856ad364e35~amd64~~6.1.1.2
dism /online /remove-package /packagename:Package_3_for_KB5022523~31bf3856ad364e35~amd64~~6.1.1.2

then, you can try installing it again

1 user thanked author for this post.

SteveIT

Reply | Quote

As expected, the results of the above two dism commands were the same:

—————————————————————————————————–
An error occurred trying to open – Package_1_for_KB5022523~31bf3856ad364e35~amd64~~6.1.1.2 Error: 0x800f0805
The specified package is not valid Windows package.
Error: 0x800f0805
The specified package is not valid Windows package.

An error occurred trying to open – Package_3_for_KB5022523~31bf3856ad364e35~amd64~~6.1.1.2 Error: 0x800f0805
The specified package is not valid Windows package.
Error: 0x800f0805
The specified package is not valid Windows package.
——————————————————————————————————

Then installed KB5022523 by itself, using W7ESU_0.4, which successfully completed.  Rebooted to complete the installation.  KB5022523 is now found under Installed Updates.

Thanks again.

1 user thanked author for this post.

abbodi86

Reply | Quote

Updated a second Win7 laptop.  Used the same method as I outlined in  #2538546 , but this time with no errors in the first attempt at the W7ESUI portion.  The only difference was that *I ensured I was using a fresh download of each patch* before installing.

Specifically:

1. Installed KB5022509 and KB5023823 together, using the new version of DotNetFx4.  Took about 10 minutes.  Then rebooted, with no noticeable time added to the reboot.
2. Installed freshly-downloaded copies of KB5022872 and KB5022523 together, using the new version of W7ESUI.  Took about 20 minutes.  Then rebooted, with roughly 5 minutes added to the total reboot time.

Not noticing any issues.

 

1 user thanked author for this post.

jburk07

Reply | Quote

I had downloaded KB5022872 and KB5022523 on Feb. 15.  I downloaded new copies of both patches and compared the files, but found that both downloads were identical.

1 user thanked author for this post.

rick41

Reply | Quote

After installing February updates to Win7 x86 VM I noticed that Installed Updates no longer showed the previously installed January updates (KB5022338  on 1/24/2023).  Is this expected?

Before –

After –

Reply | Quote

Yes, Monthly Rollups relace each other, only the latest shows up in Installed Updates

you didn’t notice this before? behavior since 2016-10? 🙂

Reply | Quote

When installation of updates in the past completed successfully and Win 7 restarted without issues I never bothered to look.  I only looked now because using the updates for Win7 Embedded sparked some curiosity. 🙂

Reply | Quote

I just realized I installed February’s updates (KB5022874/KB5022835/KB5022530) using W7ESUI_0.3 instead of the new W7ESUI_0.4.  It seemingly went fine.  Any reason to redo using W7ESUI_0.4?

1 user thanked author for this post.

jburk07

Reply | Quote

2 & 3 & 4 all works fine for installation

3 adds the ability to handle updates files downloaded from catalog via IE ActiveX variant (which now is dead)

4 adds the possibiliy to uninstall ESU updates manually (if one caused issue for example)

5 users thanked author for this post.

JimBean, jburk07, rick41, RDRguy, Guest

Reply | Quote

Attempt to install .NET 3.5.1 KB5022525 using the Bypass gives me “This update is not for your computer.”
I see a similar problem above with KBkb5022523 on Win7.
Is there a similar package that needs to be removed for Win8.1?

Reply | Quote

Are you trying to install msu file directly? did you enable .NET 3.5 feature?

2 users thanked author for this post.

JimBean, Microfix

Reply | Quote

I have been installing .NET Rollup. Didn’t think about it being enabled/disabled. Will check – Thanks.

Reply | Quote

You weren’t trying to install KB5022525 using the dotNetFx4_ESU bypass were you?

All .NET 3.5 updates are .msu files which have to be installed using the W7ESUI bypass.

The dotNetFx4_ESU bypass only works for .NET 4 or newer updates which are .exe files.

Reply | Quote

See #2541587. Obviously not.

Reply | Quote

yeah, if the 3.5 Net feature isn’t active on the system, that error is to be expected.

If debian is good enough for NASA...

1 user thanked author for this post.

JimBean

Reply | Quote

Yeah, Duh! I forgot about that.

Reply | Quote

I too appreciate it, abbodi86 it’s good to be able to update these even though they are are mainly keepsakes – Plus grateful to PKCano for guidance to precise updates, thanks!

Installed in the order as a poster way above went well – after the first attempt of .Net 3.5.1 gave Error: 1018, error occurred at 8.1%. So changed the order and installed individually +restarts, as longer duration noted by ppl.
Win7
*DOTNETFX4*
(.NET – 4.7.2) Quality Rollup – KB5022515
restart
(.NET – 4.7.2) OoB – KB5023820

Restore point created,
* W7ESUI *
Rollup for Windows Embedded Standard 7 – KB5022872
restart
.NET 3.5.1 Quality Rollup KB5022523, last

#WIN 8.1 also when very well, *W81ESUI_0_1* started w .NET 4.8’s>R.Point>SMQR>.Net 3.5.1

SSU for Win8.1 embedded kb5022922, not necessary right now i presume, thanks.

1 user thanked author for this post.

jburk07

Reply | Quote

SSU KB5022922 will probably be a prereq for the March updates.

2 users thanked author for this post.

jburk07, maisy2

Reply | Quote

AKB 2000003 has been updated for Group B Win7 (ESU) and Win8.1 (ESU) on  March 14, 2023.
****** Note Changes: The updates are for Win7 Embedded Standard and Win8.1 Embedded. W7ESUI or BypassESU will work for Win7 installation. Updates for Win8.1 require W81ESUI_0_1

***** Win7 (using Win7 Embedded Standard updates) *****
(Download revised installer v.4 W7ESUI_0_4.zip)

There is a Security-only Update for those with Win7 ESU subscriptions.
There is no March IE11 CU for Win7 ESU subscriptions.
March Rollup KB5023769 Download 32-bit or 64-bit for those with Win7 ESU subscriptions.

******  Note changes to SSU requirements:
You must have at least the September 2022 Servicing Stack KB5017397  previously installed to receive these updates – Download 32-bit or 64-bit  for those with Win7 ESU subscriptions.

There are .NET Framework updates listed for Win7. See #2543439.

****** NOTE: ********
Microsoft has released a new ESU Licensing Preparation Package KB5016892 for the extension of Win7/Windows Server 2008 R2 SP1 ESU on Aug 25, 2022. Requires SHA-2 KB4474419 (9/23/2019 or later) and SSU KB4490628 (3/12/2019).

 

******* Win8.1 (using Win8.1 Embedded updates) *******
(Requires installer W81ESUI_0_1.zip)

There is a Security-only Update for Win8.1 ESU subscriptions.
There is no March IE11 CU for Win8.1 ESU subscriptions.
March Rollup KB5023765 Download 32-bit or 64-bit for Win8.1 ESU subscriptions.

******  Note changes to SSU requirements:
You must have the October 2022 Servicing Stack KB5018922 installed to receive these updates –  Download 32-bit or 64-bit.
There is a new Servicing Stack for Win8.1 released Mar 14, 2023.
March 2023 Servicing Stack KB5023790 – Download 32-bit or 64-bit.

There are .NET Framework updates listed for Win8.1. See #2543439.

****** NOTE: ********
Microsoft has released a new ESU Licensing Preparation Package KB5017220 for the extension of Win8.1/Windows Server 2012 R2 ESU on Aug. 24, 2022.

14 users thanked author for this post.

Erik, Steve, TaskForce141, JimBean, jburk07, RDRguy, rick41, Just another Forum Poster, maisy2, Microfix, Moonbear, CdnTom, SueW, abbodi86

Reply | Quote

Here’s your .NET Framework for March, 2023.

There were no 2023-03 (Mar) updates for .NET Framework

 

8 users thanked author for this post.

Erik, JimBean, jburk07, RDRguy, rick41, Moonbear, SueW, abbodi86

Reply | Quote

Where is the link to the March 2023 security-only Update for Windows 8.1?

Mark

 

Reply | Quote

PKCano wrote:

AKB 2000003 has been updated for Group B Win7 (ESU) and Win8.1 (ESU) on March 14, 2023.

Please see PKCano’s link to AKB2000003 in the post above.

Win 7 SP1 Home Premium 64-bit; Office 2010; Group B (SaS); Former 'Tech Weenie'

Reply | Quote

I am still confused.

Mark

Reply | Quote

Look at AKB2000003. All the Win7/8.1 SOs  and IE11 CU updates are there since 2016 when MS started the Rollup thing.

Reply | Quote

I think that I understand now, but it is so confusing.

Mark

Reply | Quote

You seem to be the only one confused.
The updates are separated by OS version, in chronicle order, with KB numbers and download links from the MS Catalog for both the 32-bit and 64-bit formats.
Also noted are problems with certain updates.

1 user thanked author for this post.

SueW

Reply | Quote

Maybe I am the only one doing anything with Windows 8.1 at this time.

Why pick on me?  Other people are confused at other issues at other times and are not called out.

Mark

 

Reply | Quote

I’ll be posting up the master patch list later today which will also have links.  It takes me an extra day to gather the info.

Susan Bradley Patch Lady/Prudent patcher

1 user thanked author for this post.

Mark

Reply | Quote

While expressing confusion is fine, that alone doesn’t facilitate diagnosis of the underlying issue by those who would provide assistance to you.

When there is uncertainty about an issue asking questions about the specific facts and circumstances that are fostering the uncertainty makes it easier for interested parties to provide answers and explanations to bring clarity to the situation.

 

1 user thanked author for this post.

PKCano

Reply | Quote

If you haven’t already read it, abbodi86’s post at the top of this page is key reading.  While it is about Win7, the process for running Win8.1 updates is the same, with the difference being that you have to instead use the Win8.1 version of the “ESUI” script that PKCano links to (e.g., in post #2543438 ).

While there are no .NET updates this month, when there are, things are simplified a little for 8.1 vs. 7, as you’ll be able to use that same ESUI script to run any updates you need.  (Win7 requires a separate script for patching .NET versions that are not built-in Windows components like .NET 3.5.1 is.)

2 users thanked author for this post.

PKCano, SueW

Reply | Quote

First and foremost, I too wish to offer a sincere “Thank You” to abbodi86, PKCano & all others assisting us Win7 (& now Win8.1) diehards in keeping our pre-Windows 10 systems updated.

That said, for anyone who might be interested, here’s the Win7 ESU install process/method I’ve used since the very start in Feb 2020 and I’ve never had any install issues except for 1 unexpected hiccup with dotNet updates described after step 13.

Win7 ESU process …

1) created a “-ESU” (no “” marks) folder on Drive C … note: used “-” in folder name so it would sort at top (or bottom) of C drive’s directory listing

2) created a “-DotNET” (no “” marks) folder in the “-ESU” folder

3) downloaded/extracted abbodi86’s “W7ESUi_0.1.zip” script file to the “-ESU” folder … note: replaced “W7ESUI” script with the latest version as it was updated (version “_0.3” up thru Jan 2023)

4) downloaded/extracted abbodi86’s “dotNetFx4_ESU_Installer.zip” to the “-DotNET” folder … note: again replaced “dotNetFx4” script with the latest version as it was updated (version “_r” up thru Jan 2023)

5) download all current month’s “desired & appropriate” MS ESU updates (Security Only, Roll-ups, dotNet, OoBs, Hotfixes, SSUs, etc) from MS Update Catalog to the “-ESU” folder

6) “move” any/all version “4.x.x” dotNet ESU updates (4.5.x, 4.6.x, 4.7.x, 4.8.x) from the “-ESU” folder to the “-DotNET” folder by dragging them to the “-DotNET” folder leaving the dotNet version “3.5.x” updates in the “-ESU” folder

7) run the “W7ESUI” script (latest version) in the “-ESU” folder … installs ALL ESU updates in the “-ESU” folder except the dotNet version “4.x.x” updates in the “-DotNET” folder

8) reboot system when script completes (successful in all my cases)

9) after reboot & 10-15 min wait, open the “-DotNET” folder & run the “dotNetFx4_ESU_Installer” script (latest version) … installs ALL ESU dotNet version “4.x.x” updates in the “-DotNET” folder

10) reboot system when script completes (successful in all my cases)

11) after reboot & 5-10 min wait, verify MS Windows & dotNet updates were successfully installed via: Control Panel | Programs and Features | View Installed Updates

12) move all downloaded current month’s MS ESU updates from the “-ESU” & “-DotNET” folders to offline storage archive (for future use on other systems)

13) perform normal Windows Update to pick up other MS Updates (Office, MSRT, etc) as desired/necessary

The 1 dotNet hiccup …

When MS stopped support for dotNet versions 4.5.2 thru 4.6.1 in Apr 2022, I updated dotNet 4.5.2 to 4.6.2 using the .NET Framework 4.6.2 offline installer. After reboot & 15 min wait, ran normal Windows Update to pick up early dotNet 4.6.2 updates up thru Jan 2020 … all completed successfully.

With all remaining dotNet 4.6.2 updates released after Jan 2020 in the “-DotNET” folder, running the “dotNetFx4_ESU_Installer_r” script resulted in MS Installer FAILED error code message on several updates released in mid/2020 so aborted the “dotNetFx4” script after the 4th MS Installer failure.

The MS Installer failure (don’t remember the exact error code) seemed to indicate that the dotNet “.exe” update packages originally downloaded from the MS Update Catalog shortly after their release date were no longer valid. Re-downloading new ones didn’t help. Further investigation revealed that the MS dotNet update package’s certificate expiration date had passed.

Solution …

Set system date back to Dec 2020 – install all 2020 released updates using “dotNetFx4” script, set system date back to Dec 2021 – install all 2021 released updates using “dotNetFx4” script, set system date to current 2022 date – install all remaining 2022 released updates using “dotNetFx4” script … all 4.6.2 dotNet updates released after Jan 2020 were installed successfully.

Win7 ESU Embedded process … (Feb 2023 successful)

Same as Win7 ESU except … Drive C folder is “-ESU EMB” & dotNet folder is “-DotNET EMB”. Scripts used are the current “W7ESUI_0.4” & “dotNetFx4_ESU_Installer_u” versions placed in their appropriate folders.

Win8.1 ESU Embedded process … (Feb 23 successful)

Win8.1 ESU Embedded is the same as Win7 ESU except … Drive C folder is “-ESU EMB” & script used is “W81ESUI_0.1”.

Since Win8.1 ESU Embedded dotNet update files (3.5.x & 4.x.x versions) are all “.msu” files (as are the Win8.1 ESU Embedded update files), they remain in the “-ESU EMB” folder as they all get installed using the same “W81ESUI_0.1” script. Therefore, no “-DotNET EMB” folder or “dotNetFx4” script is required to install Win8.1 ESU Embedded dotNet updates.

Hope this is helpful to those still having difficulty installing the current crop of Win7/Win8.1 ESU Embedded Updates.

edits: made 5 paragraph headings bold

Win7 - PRO & Ultimate, x64 & x86
Win8.1 - PRO, x64 & x86
Groups A, B & ABS

1 user thanked author for this post.

fl

Reply | Quote

Hi,

Win7 HP x64, W7ESUI_0.4

Installed:

• Jan 2023 KB5022339 SO
• Feb 2023 KB5022874 SO
• Feb 2023 (IE11) KB5022835
• Feb 2023 KB5022530  .NET Framework 3.5.1 SO
• Mar 2023 KB5023759 SO

No problems to report.

Thanks, everyone.

 

3 users thanked author for this post.

jburk07, rick41, SueW

Reply | Quote

Microsoft has released a new ESU Licensing Preparation Package KB5017220 for the extension of <b>Win8.1</b>/Windows Server 2012 R2 ESU on Aug. 24, 2022.

I just want to make sure is this KB required to continue running the Win 8 install script to install updates? TIA

Win 10 ver. 22H2 x64

Reply | Quote

It’s not.
ESU LPP is needed for official ESU purchase to install ESU keys or to detect ESU updates via Windows Update.
It has no effect on ESU installation or bypass at all.

1 user thanked author for this post.

JD

Reply | Quote

abbodi86 wrote:

Further, we do not advocate the use of so-called “bypass” mechanisms to avoid licensing

Unless the hack/bypass is done by Microsoft’s support

1 user thanked author for this post.

JD

Reply | Quote

Correction: Please read what you quote

1 user thanked author for this post.

SueW

Reply | Quote

I was able to install the March 2023 Windows 8.1 security-only update  with no problems.  Does anyone know why a Click to Run (or whatever – I’m not on the Windows machine now) icon is left on the Desktop after the script is run?

Is this normal?  I use the right-click menu to invoke “run as administrator” for the script.

Shouldn’t need the Windows 8.1 updates after this month.  An order has been placed. 😉

Mark

P.S.  Is there another way to log out of here besides going all the way up to the top of the page?  Thanks.

 

Mark

 

Reply | Quote

DEFCON-4.  Time to install March updates.

Used DOTNETFX4 to install

There were no .NET 4.8 Quality Rollups

Used W7ESUI to install

Windows 7 Monthly Rollup – KB5023769

Installed these updates on two Win 7,  SP 1,  x64 machines.

4 users thanked author for this post.

TaskForce141, jburk07, SueW, CdnTom

Reply | Quote

Relied on W81ESUI_0_1 to install March Win8.1 Embedded updates – done well again!

Updated individually to be sound from ‘for W81ESUI_0_1′ folder in C:
(More information page states no restart needed after applying SSU)
1. KB5022922 – FEB 2023 Servicing Stack Update for Win8.1 Embedded
2. KB5023790 – MAR 2023 Servicing Stack Update for Win8.1 Embedded
3. KB5023765 – March 14, 2023 – Security Monthly Quality Rollup for Windows 8.1 Embedded

Everything ran well although taking time extracting .cab files from .msu rollup files – @32.9% /33.33% took a bit of time.

(W81ESUI-ReadMe says other regular updates should be installed normally, wasn’t sure of SSU)

Gratitude to abbodi86, and PKCano as updated March Monthly Rollup for Windows Embedded Standard 7 as well.
Upkeeps on unridable win7 & 8.1 i guess, and Firefox has been accomadating for now – exception of banking and credit card pay done on chromebook.

Reply | Quote

W81ESUI & W7ESUI are specifically for SSU, Monthly Rollup, Security Only, IE11 Cumulative, .NET updates

by “other regular updates” i ment old individual updates (prior 2016-09)

1 user thanked author for this post.

maisy2

Reply | Quote

AKB 2000003 has been updated for Group B Win7 (ESU) and Win8.1 on  April 11, 2023.
****** Note Changes: The updates are for Win7 Embedded Standard and Win8.1 Embedded. W7ESUI or BypassESU will work for Win7 installation. Updates for Win8.1 require W81ESUI_0_1

***** Win7 (using Win7 Embedded Standard updates) *****
(Download revised installer v.4 W7ESUI_0_4.zip)

There is a Security-only Update for those with Win7 ESU subscriptions.
There is no April IE11 CU for Win7 ESU subscriptions.
April Rollup KB5025279 Download 32-bit or 64-bit for those with Win7 ESU subscriptions.

******  Note changes to SSU requirements:
You must have at least the September 2022 Servicing Stack KB5017397 previously installed to receive these updates – Download 32-bit or 64-bit  for those with Win7 ESU subscriptions.

There are no .NET Framework updates listed for Win7. See #2551310.

****** NOTE: ********
Microsoft has released a new ESU Licensing Preparation Package KB5016892 for the extension of Win7/Windows Server 2008 R2 SP1 ESU on Aug 25, 2022. Requires SHA-2 KB4474419 (9/23/2019 or later) and SSU KB4490628 (3/12/2019).

 

******* Win8.1 (using Win8.1 Embedded updates) *******
(Requires installer W81ESUI_0_1.zip)

There is a Security-only Update for Win8.1 ESU subscriptions.
There is no April IE11 CU for Win8.1 ESU subscriptions.
April Rollup KB5025285 Download 32-bit or 64-bit for Win8.1.

******  Note changes to SSU requirements:
You must have at least the February 2023 Servicing Stack KB5022922 installed to receive these updates –  Download 32-bit or 64-bit.
There is a new Servicing Stack for Win8.1 released Mar 14, 2023.
March 2023 Servicing Stack KB5023790 – Download 32-bit or 64-bit.

There are no .NET Framework updates listed for Win8.1. See #2551310.

****** NOTE: ********
Microsoft has released a new ESU Licensing Preparation Package KB5017220 for the extension of Win8.1/Windows Server 2012 R2 ESU on Aug. 24, 2022.

11 users thanked author for this post.

RDRguy, Erik, JimBean, Pim, TaskForce141, rick41, SueW, Moonbear, jburk07, CdnTom, abbodi86

Reply | Quote

Here’s your .NET Framework for April, 2023.

There were no 2023-04 (Apr) updates for .NET Framework

10 users thanked author for this post.

RDRguy, Erik, JimBean, Pim, maisy2, rick41, SueW, Moonbear, jburk07, abbodi86

Reply | Quote

Hi,

If I have a Win7 ESU  (Win 7 Pro systems) for the full three years (which ended in Feb ‘23), is this April ‘23 patch for x64 Win 7 PCs a security update that will install on PCs w/ Win 7 ESU even though the Win 7 patching security updates ended in Feb ‘23? Thanks in adv for clarifying.

Reply | Quote

No, officially you cannot install Feb/Mar/April or later updates on Win 7

you need to use W7ESUI or BypassESU

Reply | Quote

Thx for replying.  What’s an WIN7ESUI?  I have the WIN ESUs for my Win7 Pro systems  that I had paid annually for all 3 years that it was offered (that I thought ended in Feb ‘23).

Regarding the link posted above for ‘April Rollup KB5025279 Download 64-bit’, will it install for those of us with the 3-year Win 7 Pro ESUs?

Reply | Quote

You are in the topic of W7ESUI script, see first the top post 🙂

no, it will not install

Reply | Quote

If I’m getting this right, there’s no way for Win 7 systems w/ the full three years ESUs to get security only patches Microsoft released after Feb ‘23? Or is there (for only Microsoft Win7  security patches)?  The confusion was that in my prev reply I included the April ‘23 Microsoft patch for Win7 that I saw posted above, and thought it was an out of bound patch by Microsoft? Thx in adv for clarifying. 🙂

Reply | Quote

2023-01 updates are the latest that can be installed for Win 7 systems w/ the full three years ESUs

2023-02 and later updates are officially only for Embedded 7 and Server 2008 R2

Reply | Quote

Got it. Thx! 😊

Reply | Quote

The procedure to get after-ESU updates is contained in the top post in this Topic.

The updates starting in February 2023, after the end of the third year of ESU, begin in post
#2534438. You will find MS Catalog links to all the necessary updates (both Windows and .NET) as well as the current scripts necessary to perform the procedures. Please note the prerequsite patches and SSUs required (information also in each month’s posting. March updates #2543438, April updates #2551309. .NET in the following posts.

@RDRguy gives another description of the procedure in post #2543915 which may also help you understand it.

Ask if you need help.

Reply | Quote

I won’t need any more help with updating Windows 8.1.  It is currently offline (no connection internet or power), and will only be used to migrate data once  to my new computer with Windows 11 Pro.  Then it will be rendered non-operational.

My old computer is ten years old and is sooo slow.  It takes 15 minutes to fully boot.  With Windows 8.1 EOL (I started with 8.0 and that’s what is on the recovery drive), I decided to start afresh.

Now I can wrestle with problems about Windows 11, and I read that there are many of them.

Thanks to everyone who provided information about Windows 8.1 updates.  I did manage the March updates for Windows 8.1.

BTW, it seems from my experience and others that for very recent editions of Windows 11, you cannot register Windows 11 without a Microsoft account.  I tried two different tricks and then gave up since I already had a Microsoft account from XBox.

Mark

Reply | Quote

You absolutely can still set it up without a Microsoft account.  When you get to the email address put in no@thankyou.com and any password.  It will fail and let you set up the computer without a Microsoft account.

Susan Bradley Patch Lady/Prudent patcher

1 user thanked author for this post.

Moonbear

Reply | Quote

DEFCON-4.  Time to install April updates.

Used DOTNETFX4 to install

There were no .NET 4.8 Quality Rollups

Used W7ESUI to install

Windows 7 Monthly Rollup – KB5025279

Installed these updates on two Win 7,  SP 1,  x64 machines.

2 users thanked author for this post.

jburk07, SueW

Reply | Quote

AKB 2000003 has been updated for Group B Win7 (ESU) and Win8.1 on  May 9 2023.
****** Note Changes: The updates are for Win7 Embedded Standard and Win8.1 Embedded. W7ESUI or BypassESU will work for Win7 installation. Updates for Win8.1 require W81ESUI_0_1

***** Win7 (using Win7 Embedded Standard updates) *****
(Download revised installer v.4 W7ESUI_0_4.zip)

There is a Security-only Update for those with Win7 ESU subscriptions.
There is a 2023-05 IE11 CU KB5026366 for Win7 ESU subscriptions.
2023-05 Rollup KB5026413 Download 32-bit or 64-bit for those with Win7 ESU subscriptions.

******  Note changes to SSU requirements:
You must have at least the September 2022 Servicing Stack KB5017397 previously installed to receive these updates – Download 32-bit or 64-bit  for those with Win7 ESU subscriptions.

There are no 2023-05 .NET Framework updates listed for Win7. See #2557751.

****** NOTE: ********
Microsoft has released a new ESU Licensing Preparation Package KB5016892 for the extension of Win7/Windows Server 2008 R2 SP1 ESU on Aug 25, 2022. Requires SHA-2 KB4474419 (9/23/2019 or later) and SSU KB4490628 (3/12/2019).

 

******* Win8.1 (using Win8.1 Embedded updates) *******
(Requires installer W81ESUI_0_1.zip)

There is a Security-only Update for Win8.1 ESU subscriptions.
There is a 2023-05 IE11 CU KB5026366 for Win8.1 ESU subscriptions.
2023-05 Rollup KB5026415 Download 32-bit or 64-bit for Win8.1 ESU subscriptions.

******  Note changes to SSU requirements:
You must have at least the February 2023 Servicing Stack KB5022922 installed to receive these updates –  Download 32-bit or 64-bit.
There is a new Servicing Stack for Win8.1 released Mar 14, 2023.
March 2023 Servicing Stack KB5023790 – Download 32-bit or 64-bit.

There are no 2023-05 .NET Framework updates listed for Win8.1. See #2557751.

****** NOTE: ********
Microsoft has released a new ESU Licensing Preparation Package KB5017220 for the extension of Win8.1/Windows Server 2012 R2 ESU on Aug. 24, 2022.

14 users thanked author for this post.

RDRguy, Erik, JimBean, jburk07, CdnTom, TaskForce141, rick41, maisy2, George1, SueW, Moonbear, abbodi86, Pim, Guest

Reply | Quote

Here’s your .NET Framework for May 9, 2023.

There were no 2023-04 (May) updates for .NET Framework

 

12 users thanked author for this post.

RDRguy, Erik, JimBean, jburk07, TaskForce141, rick41, maisy2, George1, SueW, Pim, Moonbear, Guest

Reply | Quote

What is KB5026886?  Isn’t that a 2023-05 (May) security only update for .NET 6?

Reply | Quote

The .Net Blog https://devblogs.microsoft.com/dotnet/ which usually announces updates to .Net and the .Net Framework has no mention of May 2023 updates to either one.  And the catalog had this –

Reply | Quote

Where are you seeing KB5026886 in this thread?

Reply | Quote

It disappeared while I was typing this!

https://cc.bingj.com/cache.aspx?q=2023-05+.NET+6.0.17+Security+Update+for+x64+Client+(KB5026886)&d=4304979852407&mkt=en-WW&setlang=en-GB&w=HWCq-SlxHrTN5iiiY84bkzeoSFM3K_Zw

Reply | Quote

Yes, there were 2023-05 .NET (Core) updates released, but they have been withdrawn for some reason.

They also have nothing to do with this topic or Windows 7

4 users thanked author for this post.

Microfix, George1, Just another Forum Poster, PKCano

Reply | Quote

Still off-topic: next 2023-06 .NET (Core) updates will be .NET 6.0.18 & .NET 7.0.7
which confirm that 2023-05 updates were withdrawn and skipped

1 user thanked author for this post.

PKCano

Reply | Quote

DEFCON-4.  Time to install May updates.

Used DOTNETFX4 to install

There were no .NET 4.8 Quality Rollups

Used W7ESUI to install

Windows 7 Monthly Rollup – KB5026413

Installed these updates on two Win 7,  SP 1,  x64 machines.

3 users thanked author for this post.

jburk07, maisy2, SueW

Reply | Quote

KB5026413 installed smoothly and successfully.

No issues to report.

3 users thanked author for this post.

jburk07, maisy2, SueW

Reply | Quote

KB5026415 installed smoothly without any problems.

Win 10 ver. 22H2 x64

2 users thanked author for this post.

jburk07, maisy2

Reply | Quote

AKB 2000003 has been updated for Group B Win7 (ESU) and Win8.1 on  June 13, 2023.
****** Note Changes: The updates are for Win7 Embedded Standard and Win8.1 Embedded. W7ESUI or BypassESU will work for Win7 installation. Updates for Win8.1 require W81ESUI_0_1

***** Win7 (using Win7 Embedded Standard updates) *****
(Download revised installer v.4 W7ESUI_0_4.zip)

There is a Security-only Update for those with Win7 ESU subscriptions.
There is no 2023-06 IE11 CU for Win7 ESU subscriptions.
2023-06 Rollup KB5027275 Download 32-bit or 64-bit for those with Win7 ESU subscriptions.

******  Note changes to SSU requirements:
You must have at least the September 2022 Servicing Stack KB5017397 previously installed to receive these updates – Download 32-bit or 64-bit  for those with Win7 ESU subscriptions.

There are/no .NET Framework updates listed for Win7. See #2565857.

****** NOTE: ********
Microsoft has released a new ESU Licensing Preparation Package KB5016892 for the extension of Win7/Windows Server 2008 R2 SP1 ESU on Aug 25, 2022. Requires SHA-2 KB4474419 (9/23/2019 or later) and SSU KB4490628 (3/12/2019).

 

******* Win8.1 (using Win8.1 Embedded updates) *******
(Requires installer W81ESUI_0_1.zip)

There is/no a Security-only Update for Win8.1 ESU subscriptions.
There is no 2023-06 IE11 CU for Win8.1 ESU subscriptions.
2023-06 Rollup KB5027271 Download 32-bit or 64-bit for Win8.1 ESU.

******  Note changes to SSU requirements:
You must have at least the February 2023 Servicing Stack KB5022922 installed to receive these updates –  Download 32-bit or 64-bit.
There is a new Servicing Stack for Win8.1 released June 13, 2023.
June 2023 Servicing Stack KB5027574– Download 32-bit or 64-bit.

There are/no .NET Framework updates listed for Win8.1. See #2565857.

****** NOTE: ********
Microsoft has released a new ESU Licensing Preparation Package KB5017220 for the extension of Win8.1/Windows Server 2012 R2 ESU on Aug. 24, 2022.

15 users thanked author for this post.

RDRguy, Erik, TaskForce141, JimBean, Steve, evets97, jburk07, SteveIT, rick41, George1, Just another Forum Poster, Pim, abbodi86, SueW, Moonbear

Reply | Quote

Here’s your .NET Framework for June 13, 2023.

Download only the update for the version(s) installed on your PC.
There were 2023-06 (Jun) Security-only updates for .NET Framework

***** Using Win7 Embedded Standard *****  (Requires dotNetFx4_ESU_Installer_u) for .NET4.
(A link for this installer has also been added to the top post in this thread)

2023-06 .NET Quality Rollup KB5027540
.NET 3.5.1 KB5027140
.NET 4.5.2 N/A
.NET 4.6 – 4.7.2 KB5027134
.NET 4.8 KB5027129

2023-06 .NET Security-only Rollup KB5027531
.NET 3.5.1 KB5027115
.NET 4.5.2 N/A
.NET 4.6 – 4.7.2 KB5027113
.NET 4.8 KB5027110

 

******** Using Win8.1 Embedded ******** (Requires installer W81ESUI_0_1.zip)

2023-06 .NET Quality Rollup KB5027542
.NET 3.5.1 KB5027141
.NET 4.5.2 N/A
.NET 4.6 – 4.7.2 KB5027133
.NET 4.8 KB KB5027128

2023-06 .NET Security-only Rollup KB5027533
.NET 3.5.1 KB5027116
.NET 4.5.2 N/A
.NET 4.6 – 4.7.2 KB5027112
.NET 4.8 KB5027109

16 users thanked author for this post.

RDRguy, Erik, TaskForce141, CdnTom, JimBean, Moonbear, Steve, evets97, jburk07, SteveIT, maisy2, George1, Just another Forum Poster, Pim, abbodi86, SueW

Reply | Quote

Here’s your .NET Framework OOB for June 22, 2023.

Download only the update for the version(s) installed on your PC.
There were 2023-06 (Jun) OOB updates to .NET Framework:  Change in how .NET Framework runtime imports X.509 Certificates.

See:  https://support.microsoft.com/help/5028608.

***** Using Win7 Embedded Standard *****  (Requires dotNetFx4_ESU_Installer_u) for .NET4.
(A link for this installer has also been added to the top post in this thread).

2023-06 .NET Framework OOB
.NET 4.6 – 4.7.2  KB5028591
.NET 4.8. KB5028586

******** Using Win8.1 Embedded ******** (Requires installer W81ESUI_0_1.zip).

2023-06 .NET Framework OOB
.NET 4.6 – 4.7.2  KB5028590
.NET 4.8  KB5028585

14 users thanked author for this post.

RDRguy, Steve, Erik, TaskForce141, jburk07, JimBean, SteveIT, Moonbear, maisy2, Microfix, rick41, George1, abbodi86, SueW

Reply | Quote

@PKCano, now that I am doing patching 100% manually, how do I tell which version of .Net I have? Most are for all versions but the OOB has specific versions. I looked in my registry under .Net Framwork Setup > NDP> and under v2.0 > 1033 it lists under version, 2.0.50727.4927; under v3.0 > 1033 it lists under version, 3.0.30729.4926, under v3.5  > 1033 it lists under version, 3.5.30729.4926 and under v4 it lists under version, 4.8.03761. So I suppose I have .net versions 2.0.5, 3.0.3, 3.5.3 and 4.8.0. Is that correct?

For these ones I understand that .Net updates had no privacy issues in the Quality versions. Is that still true or should I go with security only?

Are these Quality .Net updates, roll ups where If I install the June one, I don’t have to install the February one. Will the next one include the OOB one?

Thank you!

Windows 8.1 Group B, Brave & Mozilla ESR - grudgingly & Protonmail

Reply | Quote

Windows 7 only have two types of .NET Framework updates
3.5.1 family (include 2.0 and 3.0)
4.x family (include 4.0 up to 4.8)

embedded and server updates are the same

1 user thanked author for this post.

Erik

Reply | Quote

@PKCano also does it matter if I use the embedded or the windows server version? The are both the same file size so I guess it doesn’t but I just want to make sure.

Windows 8.1 Group B, Brave & Mozilla ESR - grudgingly & Protonmail

Reply | Quote

Looks like you have .NET 3.5.1 and 4.8
The Rollups are security+non-security and are cumulative, the SOs are security only and are NOT cumulative.
Use the ones for your versions only as linked above – Rollup or Security-only is your choice. But .NET doesn’t have the telemetry baggage. The above links are direct downloads from the MS Catalog.
I use the Rollups.

Reply | Quote

Hi,

Win7 HP x64, W7ESUI_0.4

Installed:

• Apr 2023 KB5025277 SO
• May 2023 KB5026426 SO
• May 2023 (IE11) KB5026366
• Jun 2023 KB5027115  .NET Framework 3.5.1 SO
• Jun 2023 KB5027256 SO

No problems to report.

Thanks, everyone.

 

3 users thanked author for this post.

jburk07, CdnTom, SueW

Reply | Quote

DEFCON-4.  Time to install June updates.

Used DOTNETFX4 to install

.NET 4.8 Quality Rollup – KB5027129

.NET 4.8 OOB – KB5028586

Used W7ESUI to install

.NET 3.5.1 Quality Rollup – KB5027140

Windows 7 Monthly Rollup – KB5027275

Installed these updates on two Win 7,  SP 1,  x64 machines.

 

3 users thanked author for this post.

jburk07, SueW, SteveIT

Reply | Quote

Did you install KB5027140 and KB5027275 in a single run of W7ESUI, or two separate runs?  Similarly for DOTNETFX4 and KB5027129 and KB5028586, was it a single run or two runs of the script?

The last time multiple updates needed to be installed was February, and a few of us had issues with the script generating Error: 1018 (see my post above #post-2538679).  I ended up installing the updates one at a time.

Thanks for the feedback!

1 user thanked author for this post.

jburk07

Reply | Quote

SteveIT wrote:

Did you install KB5027140 and KB5027275 in a single run of W7ESUI, or two separate runs? Similarly for DOTNETFX4 and KB5027129 and KB5028586, was it a single run or two runs of the script?

Can’t speak for George1, but in my case it was KB5027140 and KB5027275 in a single run of W7ESUI (v4); and KB5027129 and KB5028586 in a single run of dotNetFx4 (_u).  Two Win7 SP1 computers,  no problems.  The install time was on the longer side, especially for the W7ESUI run.

3 users thanked author for this post.

SteveIT, SueW, jburk07

Reply | Quote

Same here, only took a single run to install both the Win7 and .NET updates.

FYI, I’ve never needed more than a single run to install any of the updates and have never encountered the problem you indicated in your previous post.

Did you do the required restart after running the first update set? (i.e. restart after W7ESUI or restart after .NET)

If not, that “might” explain why you got that particular error.

i.e. the first set of updates you ran (either Win7 or .NET)  flagged a particular registry entry for removal but, because you hadn’t rebooted before installing the second set of updates, it hadn’t actually been removed from the registry and thus caused your error.

2 users thanked author for this post.

SteveIT, jburk07

Reply | Quote

Thanks for your insight and your suggestion.

Except for February, I have also never had any errors using the W7ESUI or the DOTNETFX4 scripts, and have never needed to install updates individually.

I would typically reboot before beginning any updates, to ensure nothing was pending. I have always first installed all W7ESUI updates and then rebooted to complete the installation. I have always then installed any DOTNETFX4 updates and then rebooted for good measure. Finally, I would install the MSRT using Windows Update.

Reply | Quote

I used the scripts from the first time Win7 went EOL.
I made two separate folders in the root of C:, one for the updates that required W7ESUI and one for updates that required DOTNETFX4, and placed all the updates for the month in the appropriate folder along with the script.

I ran the the W7ESUI script, then the DOTNETFX4 script, then rebooted.

I NEVER rebooted in between. That’s the way Windows Update works (with the exception of the SSU). The script takes care of the SSU (which went in the folder with the rest of the W7ESUI updates)

I NEVER had any problems doing that.

2 users thanked author for this post.

SteveIT, jburk07

Reply | Quote

Single run of each.  No problems.

2 users thanked author for this post.

jburk07, SteveIT

Reply | Quote

Installed June 2023 Windows 7 x64 Updates using W7ESUI_0.4.zip, as follows:

KB5027275 – Security Monthly Quality Rollup
KB5027140 – Security and Quality Rollup for .NET Framework 3.5.1

Both updates installed in single script run. Rebooted to complete installation.

Installed June 2023 Windows 7 x64 Updates using dotNetFx4_ESU_Installer_u.zip, as follows:

KB5027134 – Security and Quality Rollup for .NET Framework 4.6.2
KB5028591 – OoB Update for .NET Framework 4.6.2

Both updates installed in single script run. Rebooted for good measure.

Installed Windows Malicious Software Removal Tool x64 (v5.114) using Windows Update.

Two computers updated (one HP, one Dell). All updates successful, and systems operating as expected.

1 user thanked author for this post.

jburk07

Reply | Quote

It seems most people run the W7ESUI script, then Reboot to complete the installation, followed by the DOTNETFX4 script and another reboot.  Seems like a lot of reboots.

I run the the DOTNETFX4 script,  then the W7ESUI script,  followed by the restart requested by the W7ESUI script to complete the installation.  No boots or restarts in between.

Question for PKCano: Is there a reason why the W7ESUI script should be run before the DOTNETFX4 script?

2 users thanked author for this post.

jburk07, abbodi86

Reply | Quote

Only my preference.
I run all the updates, then reboot.
WU doesn’t require two reboots either.

4 users thanked author for this post.

jburk07, George1, rick41, Microfix

Reply | Quote

George1 wrote:

I run the the DOTNETFX4 script, then the W7ESUI script

I use the same method, .Net first, followed by the SMQR CU, been doing that for a good few years now with Win7 esu and now Win8.1 esu scripts without issue.

If debian is good enough for NASA...

1 user thanked author for this post.

jburk07

Reply | Quote

I don’t think I’ve had a restart request from the Standalone Installer for quite awhile.  Just the “press any key to exit,” or something along those lines.  At first its absence concerned me a bit, but it always says installed successfully, and the updates indeed show up in Installed Updates.

Reply | Quote

@abbodi86 @PKCano I am still struggling with the Windows 8.1 ESU updates. I have gotten as far as the cmd window and hitting 0 to start the process; however the 0 immediately disappears and nothing happens. I tried downloading an update just incase it worked and I can get it mostly installed but then it just rolls it back. Any help is appriciated.

Windows 8.1 Group B, Brave & Mozilla ESR - grudgingly & Protonmail

Reply | Quote

@abbodi86  @PKCano  I just figured it out. Where it says optional to put the downloaded stand alone updates in the same folder as the .cmd file was not optional for me. Once I put it in the same folder it started working.

One question: Once I installed the first set of update, this file showed up on my desktop: RunOnce_W10_Telemetry_Tasks.cmd

What is that about and why did it show up? The very reason I am sticking with 8.1 is because I am avoiding telemetry as much as possible and this is not a W10 computer. I dare not click on it, but haven’t deleted it until I know why its here.

Windows 8.1 Group B, Brave & Mozilla ESR - grudgingly & Protonmail

Reply | Quote

Erik wrote:

One question: Once I installed the first set of update, this file showed up on my desktop: RunOnce_W10_Telemetry_Tasks.cmd

What updates were you installing?
What script did you run?

This sounds very much like @abbodi86 ‘s method/scripts to tame telemetry. See #219238. I run the script mentioned there, win10tel.cmd, (in Win8.1) as a scheduled task on startup to minimize the effects of the Telemetry Microsoft has added. You can read the thread for the whole procedure.

1 user thanked author for this post.

Erik

Reply | Quote

For some reason, “RunOnce_W10_Telemetry_Tasks.cmd” appears on only one of the two Win 7 SP1 that I run the standalone installer on.  I just delete it, since I’m not overly concerned about the telemetry on these computers (not that I like it…).

 

1 user thanked author for this post.

Erik

Reply | Quote

It’s to disable any Telemetry_Tasks that might got enabled or installed by Monthly Rollup (or Security Only)
it’s self-deleted script, you can run or ignore and delete

3 users thanked author for this post.

jburk07, Erik, rick41

Reply | Quote

Thanks to all! Sounds like a useful tool. I am doing the security only, now that the focus of AskWoody has shifted from Windows 7 & 8 to 10 & 11, is anyone reporting telemetry on the ESU updates as was done in the past?

Windows 8.1 Group B, Brave & Mozilla ESR - grudgingly & Protonmail

Reply | Quote

2019-07 KB4507456 – contains Compatibility Appraiser (KB2952664)
2019-09 KB4516033 – contains Compatibility Appraiser (KB2952664)
2019-12 KB4530692 – contains end of support nagware (KB4493132)
2020-01 KB4534314 – contains end of support nagware (KB4493132)
2020-03 KB4541500 – contains DiagTrack service (Unified Telemetry Client)
2020-07 KB4565539 – contains DiagTrack service (Unified Telemetry Client)
2020-09 KB4577053 – contains DiagTrack service (Unified Telemetry Client)
2022-09 KB5017373 – contains DiagTrack service (Unified Telemetry Client)

9 users thanked author for this post.

RDRguy, TaskForce141, jburk07, JimBean, Microfix, Erik, SueW, PKCano, Lees7676

Reply | Quote

Windows 7 Embedded Update
July 5th 2023, KB5028917 released an update for
.NET Framework 3.5.1 for Windows Embedded 7 Standard and Windows Server 2008 R2 SP1

Info/ Ref:
https://support.microsoft.com/en-gb/topic/july-5-2023-update-for-net-framework-3-5-1-for-windows-embedded-7-standard-and-windows-server-2008-r2-sp1-kb5028917-161d3923-8b4c-477d-a5be-76bb58fd6c43

Security Improvements
There are no new security improvements in this release.

Quality and Reliability Improvements
CLR1 – Addresses an issue where .NET framework 3.5 scenarios might crash during startup whenever an instrumenting profiler is active.

Catalog link

If debian is good enough for NASA...

6 users thanked author for this post.

jburk07, JimBean, maisy2, SueW, George1, Just another Forum Poster

Reply | Quote

To PKCano,

A neebie question, just to be sure!
Are these Win7 monthly rollups (ex. kb5027275) include all previous one? Since Jan 2021…

So, if I did not update since Jan 2023 (kb5022338),
the last update (June 2023) will update it all ?

Thanks,
Frankie

 

Reply | Quote

The Win7 Rollups are cumulative – the last one contains the previous ones. They also contain the IE11 CUs.
The Security-only updates (SOs) are NOT cumulative and do NOT contain the IE11 updates..

You will also need to check for other prerequisites – such as SSUs. There is a summary for each month in this thread – scroll up.

1 user thanked author for this post.

Frankie

Reply | Quote

To PKCano,

Thank you,

I am getting old like my Win7 PC,
so I lose a bit of my memory and of my intelligence!
I keep my Win7 alongside Win10 and Win11 because
I love and use my good old Media Center!!!

Many THANKS for the answers and for all the precious works you do.

Reply | Quote

AKB 2000003 has been updated for Group B Win7 (ESU) and Win8.1 on  July 11, 2023.
****** Note Changes: The updates are for Win7 Embedded Standard and Win8.1 Embedded. W7ESUI or BypassESU will work for Win7 installation. Updates for Win8.1 require W81ESUI_0_1

***** Win7 (using Win7 Embedded Standard updates) *****
(Download revised installer v.4 W7ESUI_0_4.zip)

There is a Security-only Update for those with Win7 ESU subscriptions.
There is a 2023-07 IE11 CU KB5028176 for Win7 ESU subscriptions.
2023-07 Rollup KB5028240 Download 32-bit or 64-bit for those with Win7 ESU subscriptions.

******  Note changes to SSU requirements:
You must have at least the September 2022 Servicing Stack KB5017397 previously installed to receive these updates – Download 32-bit or 64-bit  for those with Win7 ESU subscriptions.
There is a new Servicing Stack for Win7 released July, 11 2023.
July 2023 Servicing Stack KB5028264 – Download 32-bit or 64-bit.

There are .NET Framework updates listed for Win7. See #2572805.

****** NOTE: ********
Microsoft has released a new ESU Licensing Preparation Package KB5016892 for the extension of Win7/Windows Server 2008 R2 SP1 ESU on Aug 25, 2022. Requires SHA-2 KB4474419 (9/23/2019 or later) and SSU KB4490628 (3/12/2019).

 

******* Win8.1 (using Win8.1 Embedded updates) *******
(Requires installer W81ESUI_0_1.zip)

There is/no a Security-only Update for Win8.1 ESU subscriptions.
There is a 2023-07 IE11 CU KB5028167 for Win8.1 ESU subscriptions.
2023-07 Rollup KB5028228 Download 32-bit or 64-bit for Win8.1.

******  Note changes to SSU requirements:
You must have at least the February 2023 Servicing Stack KB5022922 installed to receive these updates –  Download 32-bit or 64-bit.
There is a new Servicing Stack for Win8.1 released June 13, 2023.
June 2023 Servicing Stack KB5027574 – Download 32-bit or 64-bit.

There are .NET Framework updates listed for Win8.1. See #2572805.

****** NOTE: ********
Microsoft has released a new ESU Licensing Preparation Package KB5017220 for the extension of Win8.1/Windows Server 2012 R2 ESU on Aug. 24, 2022.

13 users thanked author for this post.

RDRguy, TaskForce141, Steve, jburk07, Erik, SteveIT, Pim, Just another Forum Poster, rick41, SueW, Moonbear, George1, abbodi86

Reply | Quote

Here’s your .NET Framework for July 11, 2023.

Download only the update for the version(s) installed on your PC.
There were no 2023-07 (July) Security-only updates for .NET Framework

***** Using Win7 Embedded Standard *****  (Requires dotNetFx4_ESU_Installer_u) for .NET4.
(A link for this installer has also been added to the top post in this thread)

2023-07 .NET Quality Rollup KB5028939
.NET 3.5.1 KB5028871
.NET 4.5.2 N/A
.NET 4.6 – 4.7.2 KB5028865
.NET 4.8 KB5028860

There were no Win7 2023-07 .NET Security-only Updates

 

******** Using Win8.1 Embedded ******** (Requires installer W81ESUI_0_1.zip)

2023-07 .NET Quality Rollup KB5028941
.NET 3.5 KB5028872
.NET 4.5.2 N/A
.NET 4.6 – 4.7.2 KB5028864
.NET 4.8 KB KB5028859

There were no Win8.1 2023-07 .NET Security-only Updates

15 users thanked author for this post.

RDRguy, TaskForce141, Steve, jburk07, Erik, SteveIT, Pim, maisy2, Just another Forum Poster, rick41, SueW, Microfix, Moonbear, George1, abbodi86

Reply | Quote

kb5028872 for Win8.1 embedded is for .NET 3.5

If debian is good enough for NASA...

1 user thanked author for this post.

PKCano

Reply | Quote

I am getting an overall sluggish system and event errors for Microsoft Security Essentials since installing KB5028224, KB5028167 and KB5028264.

The errors are repeated Schannel errors 40 and 70 and MSE errors 0x80072f8f. The definitions updates are sort of still working but it now takes manually clicking the MSE update button which applies them.

Anyone else having issues?

Reply | Quote

Can’t say for sure whether they’re update related, but since applying the updates on June 28 (SMQRs in my case) I’ve had two BSODs, on July 11 and July 18, and my Win7 machine has rarely, if ever, had Blue Screens before this.  Disk check, System File Checker, and a short memory test don’t reveal any problems.

1 user thanked author for this post.

jburk07

Reply | Quote

That 0x80072f8f error was also happening here on a Win81esu bypass but, only when updating virus definitions. This has now cleared up. I think MSFT changed something in their security mechanism regarding system protection.
I switched WU back on and repopulated to find that the error had disappeared upon defender updating and has been fine so far.
(I had WU disabled since Feb 2023 and defender.defs came in without issue.)

try downloading and manually update MSE from:
https://www.microsoft.com/en-us/wdsi/defenderupdates

Have found in the past this works when thing go west.

If debian is good enough for NASA...

1 user thanked author for this post.

Steve

Reply | Quote

DEFCON-4.  Time to install July updates.

Used DOTNETFX4 to install

.NET 4.8 Quality Rollup – KB5028860

Used W7ESUI to install

.NET 3.5.1 Quality Rollup – KB5028871

Windows 7 Monthly Rollup – KB5028240

Servicing Stack Update KB5028264

Installed these updates on two Win 7,  SP 1,  x64 machines.

Thanks to abbodi86 and PKCano for making this possible.

 

3 users thanked author for this post.

jburk07, SteveIT, SueW

Reply | Quote

From 12-29-22:

abbodi86 wrote:

Server 2008 R2 will get extra ESU year
Embedded Standard 7 will still get 10 months of ESU
Embedded POSReady 7 will still get 22 months of ESU

Does this mean that October 10, 2023 will be the last date that Win7 Embedded Standard KBs will be usable for Win 7 updating via the method outlined in this topic?

Reply | Quote

Update files are identical for all the three, and will continue to be available for Server / Embedded until 2024-01.
Afterwards however, it’ll depend if they make the updates restricted for Embedded or not (there is unsolid info that Server 2008 R2 Premium Assurance entities will get updates until 2026.)

POSReady 7 itself is merely a reduced SKU of Standard 7.

3 users thanked author for this post.

jburk07, George1, rick41

Reply | Quote

AKB 2000003 has been updated for Group B Win7 (ESU) and Win8.1 on  August 8, 2023.
****** Note Changes: The updates are for Win7 Embedded Standard and Server 2012 R2 x64. W7ESUI or BypassESU will work for Win7 installation. Updates for Win8.1 require W81ESUI_0_1.

***** Win7 (using Win7 Embedded Standard updates) *****
(Download revised installer v.4 W7ESUI_0_4.zip)

There is a Security-only Update for those with Win7 ESU subscriptions.
There is a 2023-08 IE11 CU for Win7 ESU subscriptions.

2023-08 Rollup KB5029296 Download 32-bit or 64-bit for those with Win7 ESU subscriptions.

******  Note changes to SSU requirements:
You must have at least the September 2022 Servicing Stack KB5017397 previously installed to receive these updates – Download 32-bit or 64-bit  for those with Win7 ESU subscriptions.
There is a new Servicing Stack for Win7 released July, 11 2023.
2023-07 Servicing Stack KB5028264 – Download 32-bit or 64-bit.

There are .NET Framework updates listed for Win7. See #2578465.

****** NOTE: ********
Microsoft has released a new ESU Licensing Preparation Package KB5016892 for the extension of Win7/Windows Server 2008 R2 SP1 ESU on Aug 25, 2022. Requires SHA-2 KB4474419 (9/23/2019 or later) and SSU KB4490628 (3/12/2019).

 

******* Win8.1 (using Server 2012 R2 x64 updates) *******
(Requires installer W81ESUI_0_1.zip)
Note changes: Windows 8.1 Embedded support ended in July, 2023. There are only Server 2012 R2 x64 (64-bit) updates available. ESU license (or bypass) is required for Win 8.1 x64 to install Server 2012 R2 updates manually.

There is a Security-only Update for Win8.1 64-bit ESU subscriptions.
There is a 2023-08 IE11 CU KB5029243 Download 64-bit only for Win8.1 ESU subscriptions.
2023-08 Rollup KB5029312 Download 64-bit only for Win8.1 ESU.

******  Note changes to SSU requirements:
You must have at least the February 2023 Servicing Stack KB5022922 installed to receive these updates –  Download 32-bit or 64-bit.
There is a new Servicing Stack for Win8.1 released August 6, 2023.
2063-08 Servicing Stack KB5029368 Download 64-bit only.

There are .NET Framework updates listed for Win8.1. See #2578465.

****** NOTE: ********
Microsoft has released a new ESU Licensing Preparation Package KB5017220 for the extension of Win8.1/Windows Server 2012 R2 ESU on Aug. 24, 2022.

14 users thanked author for this post.

RDRguy, TaskForce141, Steve, jburk07, Microfix, maisy2, jitterdither, Pim, rick41, Moonbear, abbodi86, SteveIT, George1, SueW

Reply | Quote

Here’s your .NET Framework for August 8, 2023.

Download only the update for the version(s) installed on your PC.
There were 2023-08 (Aug) Security-only updates for .NET Framework

***** Using Win7 Embedded Standard *****  (Requires dotNetFx4_ESU_Installer_u) for .NET4.
(A link for this installer has also been added to the top post in this thread)

2023-08 .NET Quality Rollup KB5029651
.NET 3.5.1 KB5028969
.NET 4.5.2 N/A
.NET 4.6 – 4.7.2 KB5028963
.NET 4.8 KB5028958

2023-08 .NET Security-only Rollup KB5029566
.NET 3.5.1 KB5028981
.NET 4.5.2 N/A
.NET 4.6 – 4.7.2 KB5028978
.NET 4.8 KB5028975

 

******** Using Server 2012 R2 x64 ******** (Requires installer W81ESUI_0_1.zip)

2023-08 .NET Quality Rollup KB5029653
.NET 3.5.1 KB5028970
.NET 4.5.2 N/A
.NET 4.6 – 4.7.2 KB5028962
.NET 4.8 KB KB5028957

2023-08 .NET Security-only Rollup KB5029568
.NET 3.5.1 KB5028982
.NET 4.5.2 N/A
.NET 4.6 – 4.7.2 KB5028977
.NET 4.8 KB5028974

12 users thanked author for this post.

RDRguy, TaskForce141, Steve, jburk07, Microfix, maisy2, Pim, rick41, Moonbear, SteveIT, George1, SueW

Reply | Quote

As Windows 8.1 Embedded support ended in July, we probably won’t see Win8.1 updates
only Server 2012 R2 x64

4 users thanked author for this post.

RDRguy, Steve, Microfix, PKCano

Reply | Quote

Win8.1 x64 to 2012 R2 x64 ESUb primed ready for post October 2023 patching. Many thanks to those clever guru’s 😉

If debian is good enough for NASA...

Reply | Quote

I noticed the updates go much quicker with an internet connection versus when installing them offline. Other than how long it takes, does it matter one way or another?

Reply | Quote

Internet connections make no difference when you are installing Win7/8.1 updates manually.

Reply | Quote

There is a new Servicing Stack for Win8.1 released August 6, 2023.
2063-08 Servicing Stack KB5029368 Download 64-bit only.

Small correction since both links were for the Server 2012 R2 SQMR instead:
2023-08 Servicing Stack Update for Windows Server 2012 R2 for x64-based Systems (KB5029368)
(64-bit only) https://catalog.s.download.windowsupdate.com/c/msdownload/update/software/secu/2023/07/windows8.1-kb5029368-x64_2afab9a8d12ca38305c593ed3cbb7b077885aebd.msu

Via:
https://www.catalog.update.microsoft.com/Search.aspx?q=5029368
https://www.catalog.update.microsoft.com/ScopedViewInline.aspx?updateid=76cab8f4-6d44-4a73-92a4-6b170850f5f8

Nonetheless, thanks for providing these timely routine updates each month, PKCano. 🙂

1 user thanked author for this post.

PKCano

Reply | Quote

Thanks. Fixed that.

Reply | Quote

All updates were installed with no issue.

Something I did notice though is that there was no restore point created when I installed the 4.7 .NET update. Is this normal and I only just now noticed?

Reply | Quote

My .NET 4.7 August update did create a System Restore Point.

Linux Mint Cinnamon 21.1
Group A:
Win 10 Pro x64 v22H2 Ivy Bridge, dual boot with Linux
Win l0 Pro x64 v22H2 Haswell, dual boot with Linux
Win7 Pro x64 SP1 Haswell, 0patch Pro, dual boot with Linux,offline
Win7 Home Premium x64 SP1 Ivy Bridge, 0patch Pro,offline

1 user thanked author for this post.

Moonbear

Reply | Quote

Ok, so it should have made a restore point.

Any ideas for what I should check to see why it didn’t?

Reply | Quote

I have .NET 4.7, not 4.8.  When I run WESUI and dotNetFx I usually end up with *more* Restore points than the number of KBs being installed.  But I do remember an instance early on, when I ran only an instance of dotNetFx, and there was no restore point created.  Since the update was indeed listed in Installed Updates, I didn’t worry about it.

Reply | Quote

The .NET 4.7 update is shown in the installed updates and the updates installed with the W7ESUI did create restore points as expected.

1 user thanked author for this post.

rick41

Reply | Quote

Dotnetfx does not create a restore point.

W7ESUI will create two restore points,  called Windows Module Installer,   for each update being installed.

I think these are created by the executes of DISM.  There is no  execute of DISM in Dotnefx.

3 users thanked author for this post.

rick41, Moonbear, jburk07

Reply | Quote

Would that be because the .NET 4 files are exe instead of msu?

Reply | Quote

For the record, I meant to say I have .NET 4.8, not .NET 4.7.  Too late to edit.  (I also have 3.5.1.)

Reply | Quote

DEFCON-3.  Time to install August updates carefully.

Used DOTNETFX4 to install

.NET 4.8 Quality Rollup – KB5028958

Used W7ESUI to install

.NET 3.5.1 Quality Rollup – KB5028969

Windows 7 Monthly Rollup – KB5029296

Installed these updates on two Win 7,  SP 1,  x64 machines.

Thanks to abbodi86 and PKCano for making this possible.

 

3 users thanked author for this post.

TaskForce141, SueW, jburk07

Reply | Quote

Installed August 2023 Windows 7 x64 updates using W7ESUI_0.4.zip:

KB5029296 – Security Monthly Quality Rollup for Windows 7 Embedded
KB5028969 – Security and Quality Rollup for .NET Framework 3.5.1

Installed August 2023 Windows 7 x64 updates using dotNetFx4_ESU_Installer_u.zip:

KB5028963 – Security and Quality Rollup for .NET Framework 4.6.2

Installed Windows Malicious Software Removal Tool x64 (v5.116) using Windows Update.

All updates successful, and systems operating as expected.  Thanks to abbodi86 and PKCano for your continued support of this effort.

2 users thanked author for this post.

jburk07, SueW

Reply | Quote

Hi thank you to the posts sharing successful win7 update results,
for Win 8.1

abbodi86 wrote:

As Windows 8.1 Embedded support ended in July, we probably won’t see Win8.1 updates
only Server 2012 R2 x64

Updates for Windows Server 2012 R2 for x64 went v well, as usual on my Win 8.1 x64.

******* Win8.1 (using Server 2012 R2 x64 updates) *******
(With installer W81ESUI_0_1.zip)
✓ KB5029312 – 2023—08 Security Monthly Quality Rollup for Windows Server 2012 R2 for x64
✓ KB5028970 – 2023-08 SMQ.Rollup for .NET Framework 3.5 for Windows Server 2012 R2 for x64

✓ KB5028957 – 2023-08 SMQ.Rollup for .NET Framework 4.8 for Windows Server 2012 R2 for x64

✓ KB5029368: new Servicing Stack for Windows Server 2012 R2: August 8, 2023

Thank you so much abbodi86, and PKCano I rely so much on your monthly update list! 💯

Reply | Quote

AKB 2000003 has been updated for Group B Win7 (ESU) and Win8.1 on  Sept 12, 2023.
****** Note Changes: The updates are for Win7 Embedded Standard and Server 2012 R2 x64. W7ESUI or BypassESU will work for Win7 installation. Updates for Win8.1 require W81ESUI_0_1

***** Win7 (using Win7 Embedded Standard updates) *****
(Download revised installer v.4 W7ESUI_0_4.zip)

There is a Security-only Update for those with Win7 ESU subscriptions.
There is a 2023-09 IE11 CU for Win7 ESU subscriptions.
2023-09 Rollup KB5030265 Download 32-bit or 64-bit for those with Win7 ESU subscriptions.

******  Note changes to SSU requirements:
You must have at least the September 2022 Servicing Stack KB5017397 previously installed to receive these updates – Download 32-bit or 64-bit  for those with Win7 ESU subscriptions.
There is a new Servicing Stack for Win7 released July, 11 2023.
2023-07 Servicing Stack KB5028264 – Download 32-bit or 64-bit.

There are/no .NET Framework updates listed for Win7. See #2586840.

****** NOTE: ********
Microsoft has released a new ESU Licensing Preparation Package KB5016892 for the extension of Win7/Windows Server 2008 R2 SP1 ESU on Aug 25, 2022. Requires SHA-2 KB4474419 (9/23/2019 or later) and SSU KB4490628 (3/12/2019).

 

******* Win8.1 (using Server 2012 R2 x64 updates) *******
(Requires installer W81ESUI_0_1.zip)
Note changes: Windows 8.1 Embedded support ended in July. There are only Server 2012 R2 x64 (64-bit) updates available. ESU license (or bypass) is required for Win 8.1 x64 to install Server 2012 R2 updates manually.

There is a Security-only Update for Win8.1 ESU subscriptions.
There is a 2023-09 IE11 CU for Win8.1 ESU subscriptions.
2023-09 Rollup KB5030269 Download 64-bit only for Win8.1 ESU.

******  Note changes to SSU requirements:
You must have at least the February 2023 Servicing Stack KB5022922 installed to receive these updates –  Download 32-bit or 64-bit.
There is a new Servicing Stack for Win8.1 released Sept 12, 2023.
2063-09 Servicing Stack KB5030329 Download 64-bit only.

There are .NET Framework updates listed for Win8.1. See #2586840.

****** NOTE: ********
Microsoft has released a new ESU Licensing Preparation Package KB5017220 for the extension of Win8.1/Windows Server 2012 R2 ESU on Aug. 24, 2022.

13 users thanked author for this post.

RDRguy, jburk07, TaskForce141, Erik, Steve, SteveIT, Moonbear, rick41, maisy2, abbodi86, George1, Pim, SueW

Reply | Quote

Here’s your .NET Framework for Sept 12, 2023.

Download only the update for the version(s) installed on your PC.
There were 2023-09 (Sep) Security-only updates for .NET Framework

***** Using Win7 Embedded Standard *****  (Requires dotNetFx4_ESU_Installer_u) for .NET4.
(A link for this installer has also been added to the top post in this thread)

2023-09 .NET Quality Rollup KB5030182
.NET 3.5.1 KB5029938
.NET 4.5.2 N/A
.NET 4.6 – 4.7.2 KB5029933
.NET 4.8 KB5029929

2023-09 .NET Security-only Rollup KB5030173
.NET 3.5.1 KB5029948
.NET 4.5.2 N/A
.NET 4.6 – 4.7.2 KB5029946
.NET 4.8 KB5029944

 

******** Using Server 2012 R2 x64 ******** (Requires installer W81ESUI_0_1.zip)

2023-09 .NET Quality Rollup KB5030184
.NET 3.5 KB5029915
.NET 4.5.2 N/A
.NET 4.6 – 4.7.2 KB5029916
.NET 4.8 KB KB5029917

2023-09 .NET Security-only Rollup KB5030175
.NET 3.5 KB5029940
.NET 4.5.2 N/A
.NET 4.6 – 4.7.2 KB5029941
.NET 4.8 KB5029942

16 users thanked author for this post.

RDRguy, jburk07, TaskForce141, Erik, Steve, SteveIT, CdnTom, Pexiler, Moonbear, rick41, zat_so, maisy2, abbodi86, George1, Pim, SueW

Reply | Quote

..and what of IE11 update KB5030209?

If debian is good enough for NASA...

Reply | Quote

You only need it if you use the Security-only patches, as the IE11 CU is included in the Rollup.

Since 2016 it has always been linked in AKB2000003, with the other Group B patches.

Where have you been in the last six years? 🙂 🙂

PS There is a link to KB2000003 included in the post above, if you don’t have a scrollbar. 🙂

1 user thanked author for this post.

Myst

Reply | Quote

Hi,

Win7 HP x64, W7ESUI_0.4

Installed:

• Jul 2023 KB5028224 SO
• Jul 2023 KB5028264 Servicing Stack Update
• Aug 2023 KB5029307 SO
• Aug 2023 .NET 3.5.1 KB5028981 SO
• Sep 2023 KB5030261 SO
• Sep 2023 (IE11) KB5030209
• Sep 2023 .NET 3.5.1 KB5029948 SO

No problems to report.

Thanks, everyone.

3 users thanked author for this post.

jburk07, Erik, SueW

Reply | Quote

DEFCON-4.  Time to install September updates.

Used DOTNETFX4 to install

.NET 4.8 Quality Rollup – KB5029929

Used W7ESUI to install

.NET 3.5.1 Quality Rollup – KB5029938

Windows 7 Monthly Rollup – KB5029265

Installed these updates on two Win 7,  SP 1,  x64 machines.

Thanks to abbodi86 and PKCano for making this possible.

 

2 users thanked author for this post.

jburk07, SueW

Reply | Quote

All September updates installed and system running normally with no issues at this time.

2 users thanked author for this post.

jburk07, Erik

Reply | Quote

Installed September 2023 Windows 7 x64 updates using W7ESUI_0.4.zip:

KB5030265 – Security Monthly Quality Rollup for Windows 7 Embedded
KB5029938 – Security and Quality Rollup for .NET Framework 3.5.1

Installed September 2023 Windows 7 x64 updates using dotNetFx4_ESU_Installer_u.zip:

KB5029933 – Security and Quality Rollup for .NET Framework 4.6.2

Installed Windows Malicious Software Removal Tool x64 (v5.117) using Windows Update.

All updates successful, and systems operating as expected.  Thanks to abbodi86 and PKCano for your continued support of this effort!

2 users thanked author for this post.

CdnTom, SueW

Reply | Quote

AKB 2000003 has been updated for Group B Win7 (ESU) and Win8.1 on  Oct 10, 2023.
****** Note Changes: The updates are for Win7 Embedded Standard and Server 2012 R2 x64. W7ESUI or BypassESU will work for Win7 installation. Updates for Win8.1 require W81ESUI_0_1

***** Win7 (using Win7 Embedded Standard updates) *****
(Download revised installer v.4 W7ESUI_0_4.zip)

There is a Security-only Update for those with Win7 ESU subscriptions.
There is a 2023-10 IE11 CU for Win7 ESU subscriptions.
2023-10 Rollup KB5031408 Download 32-bit or 64-bit for those with Win7 ESU subscriptions.

******  Note changes to SSU requirements:
You must have at least the September 2022 Servicing Stack KB5017397 previously installed to receive these updates – Download 32-bit or 64-bit  for those with Win7 ESU subscriptions.
There is a new Servicing Stack for Win7 released October 10 2023.
2023-10 Servicing Stack KB5031658 – Download 32-bit or 64-bit.

There are .NET Framework updates listed for Win7. See #2593087.

****** NOTE: ********
Microsoft has released a new ESU Licensing Preparation Package KB5016892 for the extension of Win7/Windows Server 2008 R2 SP1 ESU on Aug 25, 2022. Requires SHA-2 KB4474419 (9/23/2019 or later) and SSU KB4490628 (3/12/2019).

 

******* Win8.1 (using Server 2012 R2 x64 updates) *******
(Requires installer W81ESUI_0_1.zip)
Note changes: Windows 8.1 Embedded support ended in July. There are only Server 2012 R2 x64 (64-bit) updates available. ESU license (or bypass) is required for Win 8.1 x64 to install Server 2012 R2 updates manually.

There is/no a Security-only Update for Win8.1 ESU subscriptions.
There is a 2023-10 IE11 CU for Win8.1 ESU subscriptions.
2023-10 Rollup KB5031419 Download 64-bit only for Win8.1 ESU.

******  Note changes to SSU requirements:
You must have at least the February 2023 Servicing Stack KB5022922 installed to receive these updates –  Download 32-bit or 64-bit.
There is a new Servicing Stack for Win8.1 released Sept 12, 2023.
2063-09 Servicing Stack KB5030329 Download 64-bit only.

There are .NET Framework updates listed for Win8.1. See #2593087.

****** NOTE: ********
Microsoft has released a new ESU Licensing Preparation Package KB5017220 for the extension of Win8.1/Windows Server 2012 R2 ESU on Aug. 24, 2022.

12 users thanked author for this post.

RDRguy, SteveIT, Steve, jburk07, TaskForce141, maisy2, George1, CdnTom, Pim, rick41, SueW, abbodi86

Reply | Quote

Here’s your .NET Framework for October, 2023.

Download only the update for the version(s) installed on your PC.
There were no 2023-10 (Oct) Security-only updates for .NET Framework

***** Using Win7 Embedded Standard *****  (Requires dotNetFx4_ESU_Installer_u) for .NET4.
(A link for this installer has also been added to the top post in this thread)

2023-10 .NET Quality Rollup KB5031226
.NET 3.5.1 KB5029938 (9/12/23)
.NET 4.5.2 N/A
.NET 4.6 – 4.7.2 KB5031006
.NET 4.8 KB5031001

******** Using Server 2012 R2 x64 ******** (Requires installer W81ESUI_0_1.zip)

2023-10 .NET Quality Rollup KB5031228
.NET 3.5.1 KB5029915 (9/12/23)
.NET 4.5.2 N/A
.NET 4.6 – 4.7.2 KB5031008
.NET 4.8 KB5031003

12 users thanked author for this post.

RDRguy, Erik, SteveIT, Steve, jburk07, TaskForce141, maisy2, George1, Pim, rick41, SueW, abbodi86

Reply | Quote

There is a 2023-10 IE11 CU for Win7 ESU subscriptions.

1. Where can I find the link to it?
2. Does 2023-10 Rollup KB5031408 linked below contain it?

Reply | Quote

The standalone IE11 CU and the Win7 Security-only updates are linked in AKB2000003 (linked above).
The IE11 CU is included in the Oct Rollup, so you don’t need the standalone if you use the Rollup.

See the top post in this thread for instructions for using the W7ESUI script to update Win7 with the Win7 Embedded Standard updates. Each month’s posting contains current information on updates.

Reply | Quote

Once I read that Microsoft is going to support Win7 ESU until October 2023. Is the latest update the last one we can expect?

Reply | Quote

Win7 Client ESU ended 2023-01
Win7 Embedded Standard ESU ended 2023-10
Win7 Embedded POSReady ESU ends 2024-10

9 users thanked author for this post.

RDRguy, jburk07, Erik, Pim, PKCano, SteveIT, TaskForce141, George1, SueW

Reply | Quote

Updated 2 Win8.1 Pro with October patches using the Server 2012 R2 updates.
KB5031419 2023-10 SMQR
KB5031003 2023-10 .NET Framework 4.8 update.

Both running normally.

3 users thanked author for this post.

Erik, Steve, maisy2

Reply | Quote

DEFCON-3.  Time to install October updates.

Used DOTNETFX4 to install

.NET 4.8 Quality Rollup – KB5031001

Used W7ESUI to install

Servicing Stack Update – KB5031658

Windows 7 Monthly Rollup – KB5031408

Installed these updates on two Win 7,  SP 1,  x64 machines.

Thanks to abbodi86 and PKCano for making this possible.

6 users thanked author for this post.

jburk07, TaskForce141, SteveIT, SueW, maisy2, rick41

Reply | Quote

Installed October 2023 Windows 7 x64 updates using W7ESUI_0.4.zip:

KB5031658 – Servicing Stack Update for Windows 7 Embedded
KB5031408 – Security Monthly Quality Rollup for Windows 7 Embedded

Installed October 2023 Windows 7 x64 updates using dotNetFx4_ESU_Installer_u.zip:

KB5031006 – Security and Quality Rollup for .NET Framework 4.6.2

Installed Windows Malicious Software Removal Tool x64 (v5.118) using Windows Update.

All updates successful, and systems operating as expected for several days.  Thanks to abbodi86 and PKCano for your continued support of this effort!

4 users thanked author for this post.

jburk07, TaskForce141, George1, SueW

Reply | Quote

Per this article:

https://techcommunity.microsoft.com/t5/windows-it-pro-blog/windows-server-2012-r2-extended-security-updates/ba-p/3976610

Since we are using  Server 2012 R2 for updating Win 8.1, does that mean we could have 3 more years of updates for Win 8.1?  Thanks to all who contributed to continue this support!

Win 10 ver. 22H2 x64

1 user thanked author for this post.

Erik

Reply | Quote

Yes
unless they block or restrict the updates to Server editions

3 users thanked author for this post.

Erik, maisy2, JD

Reply | Quote

This doesn’t necessarily impact everyone’s use cases, but it’s still worth keeping in mind that browser vendors have either already dropped (Google Chrome) or are dropping (Mozilla Firefox) support for Windows 7/8.1, so even though one’s OS can still be patched, their browser will most likely not be.

Reply | Quote

jitterdither wrote:

This doesn’t necessarily impact everyone’s use cases, but it’s still worth keeping in mind that browser vendors have either already dropped (Google Chrome) or are dropping (Mozilla Firefox) support for Windows 7/8.1, so even though one’s OS can still be patched, their browser will most likely not be.

There are other browsers out there than just chrome and firefox that will make continuous updates. Waterfox has gone back independent and I have seen no mention of them discontinuing support for Windows 7/8.1. There is also the Tor Onion Browser if all else fails (yes I know it will be slow) not to mention Pale Moon and Sea Monkey (which may not patch as often but still do. I think K-Melon still patches and works on XP

Windows 8.1 Group B, Brave & Mozilla ESR - grudgingly & Protonmail

2 users thanked author for this post.

jburk07, rick41

Reply | Quote

In addition to Erik’s comments, it should also be mentioned that Firefox patching when used with Windows 7 is guaranteed for almost another year if the esr version is used.  Esr provides these security updates and some bug fixes, but without feature updates and changes that can sometimes be more annoyance than benefit, anyway.

 

2 users thanked author for this post.

TaskForce141, jburk07

Reply | Quote

AKB 2000003 has been updated for Group B Win7 (ESU) and Win8.1 on  Nov 14, 2023.
****** Note Changes: The updates are for Win7 Embedded Standard and Server 2012 R2 x64. W7ESUI or BypassESU will work for Win7 installation. Updates for Win8.1 require W81ESUI_0_1
****** Note: See @abbodi86 ‘s comments #2596621 and #2602669.

***** Win7 (using Win7 Embedded Standard updates) *****
(Download revised installer v.4 W7ESUI_0_4.zip)

There is a Security-only Update for those with Win7 ESU subscriptions.
There is a  2023-11 IE11 CU for Win7 ESU subscriptions.
2023-11 Rollup KB5032252 Download 32-bit or 64-bit for those with Win7 ESU subscriptions.

******  Note changes to SSU requirements:
You must have at least the November 2023 Servicing Stack KB5032383 or later installed to receive these updates.
There is a new Servicing Stack for Win7 released November 14 2023.
2023-11 Servicing Stack KB5032383 – Download 32-bit or 64-bit.

There are .NET Framework updates listed for Win7. See #2602523.

****** NOTE: ********
Microsoft has released a new ESU Licensing Preparation Package KB5016892 for the extension of Win7/Windows Server 2008 R2 SP1 ESU on Aug 25, 2022. Requires SHA-2 KB4474419 (9/23/2019 or later) and SSU KB4490628 (3/12/2019).

 

******* Win8.1 (using Server 2012 R2 x64 updates) *******
(Requires installer W81ESUI_0_1.zip)
Note changes: Windows 8.1 Embedded support ended in July. There are only Server 2012 R2 x64 (64-bit) updates available. ESU license (or bypass) is required for Win 8.1 x64 to install Server 2012 R2 updates manually.

There is no Security-only Update for Win8.1 ESU subscriptions.
There is a 2023-11 IE11 CU for Win8.1 ESU subscriptions.
2023-11 Rollup KB5032249 Download 64-bit only for Win8.1 ESU.

******  Note changes to SSU requirements:
You must have at least the February 2023 Servicing Stack KB5022922 installed to receive these updates –  Download 32-bit or 64-bit.
There is a new Servicing Stack for Win8.1 released Nov 14, 2023.
2063-11 Servicing Stack KB5032308 Download 64-bit only.

There are .NET Framework updates listed for Win8.1. See #2602523.

****** NOTE: ********
Microsoft has released a new ESU Licensing Preparation Package KB5017220 for the extension of Win8.1/Windows Server 2012 R2 ESU on Aug. 24, 2022.

 

16 users thanked author for this post.

RDRguy, TaskForce141, jburk07, Erik, maisy2, Microfix, Pim, AusJohn, rick41, abbodi86, JD, coolyman, Moonbear, George1, SteveIT, SueW

Reply | Quote

Here’s your .NET Framework for November, 2023.

Download only the update for the version(s) installed on your PC.
There were no 2023-11 (Nov) Win8.1 Security-only updates for .NET Framework

***** Using Win7 Embedded Standard *****  (Requires dotNetFx4_ESU_Installer_u) for .NET4.
(A link for this installer has also been added to the top post in this thread)

2023-11 .NET Quality Rollup KB5032341
.NET 3.5.1 KB5032000
.NET 4.5.2 N/A
.NET 4.6 – 4.7.2 KB5031987
.NET 4.8 KB5031995

2023-11 .NET Security-only Rollup KB5032185
.NET 3.5.1 KB5032012
.NET 4.5.2 N/A
.NET 4.6 – 4.7.2 KB5032009
.NET 4.8 KB5032010

 

******** Using Server 2012 R2 x64 ******** (Requires installer W81ESUI_0_1.zip)

2023-11 .NET Quality Rollup KB5032343
.NET 3.5.1 KB5032001
.NET 4.5.2 N/A
.NET 4.6 – 4.7.2 KB5031986
.NET 4.8 KB KB5031994

 

16 users thanked author for this post.

RDRguy, TaskForce141, jburk07, Erik, maisy2, Microfix, Pim, AusJohn, abbodi86, JD, coolyman, Moonbear, George1, rick41, SteveIT, SueW

Reply | Quote

abbodi86 wrote:

Win7 Embedded Standard ESU ended 2023-10

So, it looks like Win7 Embedded Standard ESU still lives (until it doesn’t)!!

Win 7 SP1 Home Premium 64-bit; Office 2010; Group B (SaS); Former 'Tech Weenie'

8 users thanked author for this post.

Microfix, TaskForce141, jburk07, Pim, Moonbear, George1, SteveIT, rick41

Reply | Quote

Only for POSReady 7 (which is a limited SKU of Embedded Standard 7, hence the same title)

8 users thanked author for this post.

jburk07, RDRguy, TaskForce141, SueW, Microfix, Pim, PKCano, rick41

Reply | Quote

Win8.1/2012R2 hybrid working fluid after November ESU patching:
SSU: kb5032308
NET3.5: kb5032001
NET4.8: kb5031994
SMQR CU: kb5032249
First ESU patches of intended many and long may it continue..merci, gracias, thank you, obrigado, shokran for the sanity check over the W10 and W11 crudware.

If debian is good enough for NASA...

7 users thanked author for this post.

Steve, Erik, abbodi86, JD, maisy2, Sueska, PKCano

Reply | Quote

Updated two Win8.1 installations without hiccup.

MSRT – allowed to run first from Windows Update, creating a Restore Point in the process.
SSU: KB5032308 – rebooted after installation
Then
NET3.5: KB5032001
NET4.8: KB5031994
2023-11 Rollup: KB5032249

Still use one of these as the main driver for my personal computing, alongside one of my Macs that does the heavy Internet work (more RAM).

3 users thanked author for this post.

Microfix, Erik, abbodi86

Reply | Quote

DEFCON-3.  Time to install November updates.

Used DOTNETFX4 to install

.NET 4.8 Quality Rollup – KB5031995

Used W7ESUI to install

.NET 3.5.1 – KB5032000

Servicing Stack Update – KB5032383

Windows 7 Monthly Rollup – KB5032252

Installed these updates on two Win 7,  SP 1,  x64 machines.

Thanks to abbodi86 and PKCano for making this possible.

4 users thanked author for this post.

TaskForce141, jburk07, SueW, SteveIT

Reply | Quote

Installed November 2023 Windows 7 x64 updates using W7ESUI_0.4:

KB5032383 – Servicing Stack Update for Windows 7 Embedded
KB5032000 – Security and Quality Rollup for .NET Framework 3.5.1
KB5032252 – Security Monthly Quality Rollup for Windows 7 Embedded

Installed November 2023 Windows 7 x64 updates using dotNetFx4_ESU_Installer_u:

KB5031987 – Security and Quality Rollup for .NET Framework 4.6.2

Installed Windows Malicious Software Removal Tool x64 (v5.119) using Windows Update.

All updates successful, and systems operating as expected.  Thanks to abbodi86 and PKCano for your continued support!

4 users thanked author for this post.

jburk07, George1, TaskForce141, SueW

Reply | Quote

AKB 2000003 has been updated for Group B Win7 (ESU) and Win8.1 on  Dec 12, 2023.
****** Note Changes: The updates are for Win7 Embedded Standard and Server 2012 R2 x64. W7ESUI or BypassESU will work for Win7 installation. Updates for Win8.1 require W81ESUI_0_1
****** Note: See @abbodi86 ‘s comments#2596621 and #2602669.

***** Win7 (using Win7 Embedded Standard updates) *****
(Download revised installer v.4 W7ESUI_0_4.zip)

There is a Security-only Update for those with Win7 ESU subscriptions.
There is a 2023-12 IE11 CU for Win7 ESU subscriptions.
2023-12 Rollup KB5033433 Download 32-bit or 64-bit for those with Win7 ESU subscriptions.

******  Note changes to SSU requirements:
You must have at least the November 2023 Servicing Stack KB5032383 or later installed to receive these updates.
There is a new Servicing Stack for Win7 released November 14 2023.
2023-11 Servicing Stack KB5032383 – Download 32-bit or 64-bit.

There are .NET Framework updates listed for Win7. See #2611089.

****** NOTE: ********
Microsoft has released a new ESU Licensing Preparation Package KB5016892 for the extension of Win7/Windows Server 2008 R2 SP1 ESU on Aug 25, 2022. Requires SHA-2 KB4474419 (9/23/2019 or later) and SSU KB4490628 (3/12/2019).

 

******* Win8.1 (using Server 2012 R2 x64 updates) *******
(Requires installer W81ESUI_0_1.zip)
Note changes: Windows 8.1 Embedded support ended in July. There are only Server 2012 R2 x64 (64-bit) updates available. ESU license (or bypass) is required for Win 8.1 x64 to install Server 2012 R2 updates manually.

There are no longer Security-only Updates for Win8.1 ESU subscriptions. See @abbodi86 ‘s comment in #2611480.
There is a 2023-12 IE11 CU for Win8.1 ESU subscriptions.
2023-12 Rollup KB5033420 Download 64-bit only for Win8.1 ESU.

******  Note changes to SSU requirements:
You must have at least the February 2023 Servicing Stack KB5022922 installed to receive these updates –  Download 32-bit or 64-bit.
There is a new Servicing Stack for Win8.1 released Nov 14, 2023.
2023-11 Servicing Stack KB5032308 Download 64-bit only.

There are .NET Framework updates listed for Win8.1. See #2611089.

****** NOTE: ********
Microsoft has released a new ESU Licensing Preparation Package KB5017220 for the extension of Win8.1/Windows Server 2012 R2 ESU on Aug. 24, 2022.

13 users thanked author for this post.

Erik, jburk07, TaskForce141, Steve, rick41, JD, maisy2, George1, Pim, RDRguy, Microfix, SueW, abbodi86

Reply | Quote

Here’s your .NET Framework for December, 2023.

Download only the update for the version(s) installed on your PC.
There were NO 2023-12 (Dec) Security or Security-only updates for .NET Framework

11 users thanked author for this post.

Erik, jburk07, TaskForce141, Steve, rick41, JD, maisy2, George1, Pim, SueW, RDRguy

Reply | Quote

Is there no new Windows Malicious Software Removal Tool this month?

I ran a check for updates and nothing came back.

There wasn’t a new version listed in the update catalog either.

Reply | Quote

Don’t see it (yet) on Win8.1 (as of 1:16pm CST US, 11:16 PST) an hour 15 min after Patch Tues started.

1 user thanked author for this post.

Moonbear

Reply | Quote

[KP]

I see it in the manual download catalogue now: https://www.catalog.update.microsoft.com/Search.aspx?q=890830

Update: Sorry I am wrong, It is the November MSRT.

• This reply was modified 1 year, 2 months ago by KP. Reason: Correction

2 users thanked author for this post.

Moonbear, PKCano

Reply | Quote

Win8.1/R2 x64 ESU Hybrid – aerodynamic patching without issue.
Minimal downforce only lift and flying along nicely after this months kb5033420. no errors, faults or AI crud 🙂

If debian is good enough for NASA...

2 users thanked author for this post.

maisy2, PKCano

Reply | Quote

DEFCON-4.  Time to install the December update.

Used W7ESUI to install

Windows 7 Monthly Rollup – KB5033433

Installed this update on two Win 7,  SP 1,  x64 machines.

Thanks to abbodi86 and PKCano for making this possible.

 

5 users thanked author for this post.

RDRguy, TaskForce141, jburk07, SteveIT, SueW

Reply | Quote

Installed December 2023 Windows 7 x64 updates using W7ESUI_0.4:

KB5033433 – Security Monthly Quality Rollup for Windows 7 Embedded

Update successful, and systems operating as expected.  Thanks to abbodi86 and PKCano for your continued support!

4 users thanked author for this post.

RDRguy, TaskForce141, jburk07, SueW

Reply | Quote

AKB 2000003 has been updated for Group B Win7 (ESU) and Win8.1 on  Jan 9, 2024.
****** Note Changes: The updates are for Win7 Embedded Standard and Server 2012 R2 x64. W7ESUI or BypassESU will work for Win7 installation. Updates for Win8.1 require W81ESUI_0_1
****** Note: See @abbodi86 ‘s comments #2596621 and #2602669.

***** Win7 (using Win7 Embedded Standard updates) *****
(Download revised installer v.4 W7ESUI_0_4.zip)

There is a Security-only Update for those with Win7 ESU subscriptions.
There is a 2024-01 IE11 CU for Win7 ESU subscriptions.
2024-01 Rollup KB5034169 Download 32-bit or 64-bit for those with Win7 ESU subscriptions.

******  Note changes to SSU requirements:You must have at least the November 2023 Servicing Stack KB5032383 or later installed to receive these updates.
There is a new Servicing Stack for Win7 released November 14 2023.
2023-11 Servicing Stack KB5032383 – Download 32-bit or 64-bit.

There are .NET Framework updates listed for Win7. See #2620028.

****** NOTE: ********
Microsoft has released a new ESU Licensing Preparation Package KB5016892 for the extension of Win7/Windows Server 2008 R2 SP1 ESU on Aug 25, 2022. Requires SHA-2 KB4474419 (9/23/2019 or later) and SSU KB4490628 (3/12/2019).

 

******* Win8.1 (using Server 2012 R2 x64 updates) *******
(Requires installer W81ESUI_0_1.zip)
Note changes: Windows 8.1 Embedded support ended in July 2023. There are only Server 2012 R2 x64 (64-bit) updates available. ESU license (or bypass) is required for Win 8.1 x64 to install Server 2012 R2 updates manually.

There is no Security-only Update for Win8.1 ESU subscriptions.
There is a 2024-01 IE11 CU for Win8.1 ESU subscriptions.
2024-01 Rollup KB5034171 Download 64-bit only for Win8.1 ESU.

******  Note changes to SSU requirements:
You must have at least the February 2023 Servicing Stack KB5022922 installed to receive these updates –  Download 32-bit or 64-bit.
There is a new Servicing Stack for Win8.1 released Jan 9, 2024.
2024-01 Servicing Stack KB5034587 Download 64-bit only for Win8.1 ESU.

There are .NET Framework updates listed for Win8.1. See #2620028.

****** NOTE: ********
Microsoft has released a new ESU Licensing Preparation Package KB5017220 for the extension of Win8.1/Windows Server 2012 R2 ESU on Aug. 24, 2022.

15 users thanked author for this post.

Erik, RDRguy, jburk07, TaskForce141, Steve, SteveIT, maisy2, rick41, George1, SueW, n0ads, JD, Microfix, Pim, abbodi86

Reply | Quote

Here’s your .NET Framework for January, 2024.

Download only the update for the version(s) installed on your PC.
There were 2024-01 (Jan) Security-only updates for .NET Framework

***** Using Win7 Embedded Standard *****  (Requires dotNetFx4_ESU_Installer_u) for .NET4.
(A link for this installer has also been added to the top post in this thread)

2024-01 .NET Quality Rollup KB5034277
.NET 3.5.1 KB5033899
.NET 4.5.2 N/A
.NET 4.6 – 4.7.2 KB5033907
.NET 4.8 KB5033916

2024-01 .NET Security-only Rollup KB5034269
.NET 3.5.1 KB5033946
.NET 4.5.2 N/A
.NET 4.6 – 4.7.2 KB5033947
.NET 4.8 KB5033948

 

******** Using Server 2012 R2 x64 ******** (Requires installer W81ESUI_0_1.zip)

2024-01 .NET Quality Rollup KB5034279
.NET 3.5.1 KB5033900
.NET 4.5.2 N/A
.NET 4.6 – 4.7.2 KB5033906
.NET 4.8 KB KB5033915

There were no 2024-01 .NET Security-only Rollups for Win8.1 ESU.

16 users thanked author for this post.

Erik, RDRguy, jburk07, TaskForce141, Steve, SteveIT, AusJohn, maisy2, rick41, George1, SueW, n0ads, JD, Pim, Microfix, abbodi86

Reply | Quote

If anyone is interested,  MSRT V5.120 (1/9/2024) is available.  KB890630.

2 users thanked author for this post.

AusJohn, SueW

Reply | Quote

I usually try to install MSRT first and let it make a Restore Point. Then do the manual updates. (I’m lazy! 🙂 )

2 users thanked author for this post.

RDRguy, SueW

Reply | Quote

Win 7 x64 I’ve installed these updates immeaditely when they are released without any probmles… until today. My perfect custom made aero shell style theme is now broken for the first time since 2011. I’m unable to get it back. Everytime I chance the theme aero drops to and when I manually re-enable it from ‘system performance use windows visual styles’ it reverts to Windows standard Aero. Every time I change the theme Aero drops… annoyed. I have to revert to my previus macrium backup.

1 user thanked author for this post.

rick41

Reply | Quote

Microsoft apparently now updated uxtheme.dll related patched files so I couldn’t use custom themes anymore. I think I have patched those files only once before so I even forgot how to fix it at first. So many years ago…

1 user thanked author for this post.

rick41

Reply | Quote

Found the solution: Uxtheme, Themeui and Themeservice files get unpached. Old patching softwares didn’t work. UltraUXThemePatcher_4.4.1 did the work. No back to normal. Reinstalled win7 from macrium backup couple of times, uninstalled and reistalled todays update also couple of times –  took 7 hours. So after installing kb5034169 you have to repatch theme files!

1 user thanked author for this post.

rick41

Reply | Quote

I’m a little confused here.  The MajorGeeks page for UltraUXThemePatcher says that it “enables system file modification allowing you to utilize and activate third-party themes.”

While I’ve created (and still use) themes created using Win7’s Personalize options, I’ve never downloaded third party themes for Win7 — unless Classic Shell, which I still use, would somehow fit that description.   So I’m trying to understand the likelihood I would be affected.

Regardless, thanks for the heads up.

Reply | Quote

Since Vista days I’ve used custom .msstyles / themes originally from deviantart and also modified these files heavily by myself with Restorator – combining “eye-candy” features for my liking. I think Uxtheme etc. files were originally patched by VistaGlazz software both in Vista and Win 7.  My desktop is minimalistic visual style with clear glass effect and custom icon sets with Iconpackager. I have used this same theme/style since 2009 in my laptops. Thank god my 2011 MSI gaming laptop still runs (never played, kept it clean and cool) and with the grace of Abbodi86 script I can still have latest updates. But the end is near.

I’ve done same for the firefox with .css (used Aris-t2 .css from github). There used to be great visual addons but every new version broke those themes and people quit making them. Now I try to make/modify .css file for every ESR generation. After new ESR comes out modification has to start from the scracth…

1 user thanked author for this post.

rick41

Reply | Quote

Yeah, uxtheme.dll was last updated in 2012

3 users thanked author for this post.

Microfix, rick41, PKCano

Reply | Quote

Win8.1/R2 hybrid test report:
SSU kb5034587
NET3.5 kb5033900
NET4.8 kb5033915 installed no problems.

However, CU kb5034171 wouldn’t go in so, alterations using a bootable minitool partition wizard media to the consecutive WinRE to OS partition seen to that.
Up-to-date and so far, so good…sweet!

If debian is good enough for NASA...

1 user thanked author for this post.

RDRguy

Reply | Quote

I don’t think they provided the capability for CU (or other updates) to update winre.wim in OSs below Win10 21H2

2 users thanked author for this post.

RDRguy, Microfix

Reply | Quote

The CU would not go in so I extended the WinRE partition and on a restart,
the CU went in thereafter..?! no harm done, just extra RE space for the future.
thanks for the clarification 🙂

If debian is good enough for NASA...

1 user thanked author for this post.

RDRguy

Reply | Quote

DEFCON-3.  Time to install January updates.

Used DOTNETFX4 to install

.NET 4.8 Quality Rollup – KB5033916

Used W7ESUI to install

.NET 3.5.1 – KB5033899

Windows 7 Monthly Rollup – KB5034169

Installed these updates on two Win 7,  SP 1,  x64 machines.

Thanks to abbodi86 and PKCano for making this possible.

6 users thanked author for this post.

RDRguy, jburk07, TaskForce141, maisy2, SueW, SteveIT

Reply | Quote

Win7 went terrifically as above – always very glad.
Win8.1 was as well, a faultless install as usual.
1) Windows MSRT v5.120 – restore point is a plus as suggested.

Win8.1 (using Server 2012 R2, for x64 updates) <Installer W81ESUI_0_1.zip>
a)From Quality Rollup .NET Framework 2024-01(KB5034279)<Parent>
*.NET 3.5.1 KB5033900 + *.NET 4.8 KB5033915
(restarted, bc i like abbreviated)
b)Installed 01-2024 Servicing Stack KB5034587
c) Last, KB503417, January Monthly Rollup for Windows Server 2012 R2
Restart, and glad every month for this great system, thank you so much!

4 users thanked author for this post.

Erik, RDRguy, TaskForce141, jburk07

Reply | Quote

Installed January 2024 updates using W7ESUI_0.4:

KB5033899 – Security and Quality Rollup for .NET Framework 3.5.1
KB5034169 – Security Monthly Quality Rollup for Windows 7 Embedded

Installed January 2024 updates using dotNetFx4_ESU_Installer_u:

KB5033907 – Security and Quality Rollup for .NET Framework 4.6.2

Installed Windows Malicious Software Removal Tool (v5.120) using Windows Update.

All updates successful, and systems operating as expected. Thanks to abbodi86 and PKCano for your continued support!

3 users thanked author for this post.

RDRguy, TaskForce141, jburk07

Reply | Quote

AKB 2000003 has been updated for Group B Win7 (ESU) and Win8.1 on  Feb 13, 2024.
****** Note Changes: The updates are for Win7 Embedded Standard and Server 2012 R2 x64. W7ESUI or BypassESU will work for Win7 installation. Updates for Win8.1 require W81ESUI_0_1

***** Win7 (using Win7 Embedded Standard updates) *****
(Download revised installer v.4 W7ESUI_0_4.zip)

There is a Security-only Update for those with Win7 ESU subscriptions.
There is no 2024-02 IE11 CU for Win7 ESU subscriptions.
2024-02 Rollup KB5034831 Download – 32-bit or 64-bit for those with Win7 ESU subscriptions.

******  Note changes to SSU requirements:
You must have at least the September 2022 Servicing Stack KB5017397 previously installed to receive these updates – Download 32-bit or 64-bit  for those with Win7 ESU subscriptions.
There is a new Servicing Stack for Win7 released February 13 2024.
2024-02 Servicing Stack KB5034865 – Download 32-bit or 64-bit.

There are .NET Framework updates listed for Win7. See #2637233.

****** NOTE: ********
Microsoft has released a new ESU Licensing Preparation Package KB5016892 for the extension of Win7/Windows Server 2008 R2 SP1 ESU on Aug 25, 2022. Requires SHA-2 KB4474419 (9/23/2019 or later) and SSU KB4490628 (3/12/2019).

 

******* Win8.1 (using Server 2012 R2 x64 updates) *******
(Requires installer W81ESUI_0_1.zip)
Note changes: Windows 8.1 Embedded support ended in July. There are only Server 2012 R2 x64 (64-bit) updates available. ESU license (or bypass) is required for Win 8.1 x64 to install Server 2012 R2 updates manually.

There is no Security-only Update for Win8.1 ESU subscriptions.
There is no 2024-02 IE11 CU for Win8.1 ESU subscriptions.
2024-02 Rollup KB5034819 Download 64-bit only for Win8.1 ESU.

******  Note changes to SSU requirements:
You must have at least the February 2023 Servicing Stack KB5022922 installed to receive these updates –  Download – 32-bit or 64-bit.
There is a new Servicing Stack for Win8.1 released Feb 13, 2024.
2024-02 Servicing Stack  KB5034866 Download – 64-bit only for Win8.1 ESU.

There are .NET Framework updates listed for Win8.1. See #2637233.

****** NOTE: ********
Microsoft has released a new ESU Licensing Preparation Package KB5017220 for the extension of Win8.1/Windows Server 2012 R2 ESU on Aug. 24, 2022.

14 users thanked author for this post.

jburk07, Erik, tbsky, RDRguy, TaskForce141, Steve, Moonbear, maisy2, JD, rick41, George1, SteveIT, SueW, abbodi86

Reply | Quote

Here’s your .NET Framework for February, 2024.

Download only the update for the version(s) installed on your PC.
There were no 2024-02 (Feb) Security-only updates for .NET Framework

***** Using Win7 Embedded Standard *****  (Requires dotNetFx4_ESU_Installer_u) for .NET4.
(A link for this installer has also been added to the top post in this thread)

2024-02 .NET Quality Rollup KB5034867
.NET 3.5.1 – KB5033899 (1/24)
.NET 4.5.2 N/A
.NET 4.6 – 4.7.2 KB5034620
.NET 4.8 KB5034615

There were no 2024-02 .NET Security-only Rollups for Win7 ESU.

 

******** Using Server 2012 R2 x64 ******** (Requires installer W81ESUI_0_1.zip)

2024-02 .NET Quality Rollup KB5034689
.NET 3.5.1 KB5033900 (1/24)
.NET 4.5.2 N/A
.NET 4.6 – 4.7.2 KB5034622
.NET 4.8 KB KB5034617

There were no 2024-02 .NET Security-only Rollups for Win8.1 ESU.

14 users thanked author for this post.

jburk07, Erik, tbsky, RDRguy, TaskForce141, Steve, Moonbear, maisy2, JD, rick41, George1, SteveIT, SueW, abbodi86

Reply | Quote

If anyone is interested, MSRT V5.121 (2/13/2024) is available. KB890830.

1 user thanked author for this post.

TaskForce141

Reply | Quote

Win8.1/ R2 Hybrid February patches applied:
SSU – kb5034866
NET48 – kb5034617
SMQR CU – kb5034819
No issues or tissues required, SWEEEET! 🙂

If debian is good enough for NASA...

3 users thanked author for this post.

Erik, RDRguy, maisy2

Reply | Quote

Two Win8.1 installations in Parallels VMs
MSRT
SSU – KB5034866
restart
.NET 4.8 – KB5034617
2024-02 Rollup – KB5034819

No problems.

4 users thanked author for this post.

Erik, abbodi86, RDRguy, maisy2

Reply | Quote

Installed the following 2024-02 ESU updates using @abbodi86’s ESU installer scripts:

Win7 Ultimate (x64) {Win7 Embedded Standard updates}
KB5034615 – .NET 4.8
KB5034865 – SSU
KB5034831 – Rollup

Win7 PRO (x32) {Win7 Embedded Standard updates}
KB5034620 – .NET 4.7.2
KB5034865 – SSU
KB5034831 – Rollup

Win8.1 PRO (x64) {Server 2012 R2 updates}
KB5034617 – .NET 4.8
KB5034866 – SSU
KB5034819 – Rollup

All updates installed successfully without issues … everything appears to be operating normally 👍

Thank you all for your continued Win7 & Win8.1 ESU support ‼️

Win7 - PRO & Ultimate, x64 & x86
Win8.1 - PRO, x64 & x86
Groups A, B & ABS

7 users thanked author for this post.

TaskForce141, Microfix, jburk07, Erik, tbsky, SteveIT, abbodi86

Reply | Quote

PKCano wrote:

There is no Security-only Update for Win8.1 ESU subscriptions.

There are no longer security only updates for Windows 8.1 server? I read the link that was in Abbodi86’s post that was linked to. The link was dated Jan 2022, so weird that there was still security only thru Oct 2024 – almost two years later. Too bad no one I know of  has been able to extract the security only patches from a CU.

So what do all of you suggest? I have been Group B since 2016 in the GWX fiasco. I have skipped every update that had any tracking in it… so I would hate to use the CU’s now. I remember vaguely that Woody said that there was a way to disable the tracking if you did get the CU’s but I don’t remember much about that or if it got rid of all that tracking or just some. I was planning on keeping Windows 8.1 thru 2026 then move to Linux.

Moderator Edit: Edit to remove quote of entire Reply. Please do not quote the entire post. Highlight the pertinent part and quote that.

Windows 8.1 Group B, Brave & Mozilla ESR - grudgingly & Protonmail

Reply | Quote

AKB2000012 desctibes how to remove the telemetry from Win8.1 CUs.
Do the cleanup described, then add @abbodi86 ‘s script to Task Scheduler to run on startup/login. It will keep the telemetry element off the computer. Been using it ever since….

1 user thanked author for this post.

Erik

Reply | Quote

The announcement was ment specifically for Server 2012 / R2 ESU, it’s just announced early

since 2020-04, Security Only updates include whatever Monthly Rollup include, nothing excluded

2 users thanked author for this post.

Erik, PKCano

Reply | Quote

DEFCON-4.  Time to install February updates.

Used DOTNETFX4 to install

.NET 4.8 Quality Rollup – KB5034615

Used W7ESUI to install

Servicing Stack Update – KB5034865

Windows 7 Monthly Rollup – KB5034831

Installed these updates on two Win 7,  SP 1,  x64 machines.

Thanks to abbodi86 and PKCano for making this possible.

 

4 users thanked author for this post.

TaskForce141, SueW, SteveIT, jburk07

Reply | Quote

Installed February 2024 updates using W7ESUI_0.4:

KB5034865 – Servicing Stack Update for Windows 7 Embedded
KB5034831 – Security Monthly Quality Rollup for Windows 7 Embedded

Installed February 2024 updates using dotNetFx4_ESU_Installer_u:

KB5034620 – Security and Quality Rollup for .NET Framework 4.6.2

Installed Windows Malicious Software Removal Tool (v5.121) using Windows Update.

All updates successful, and systems operating as expected. Thanks to abbodi86 and PKCano for your continued support!

2 users thanked author for this post.

jburk07, TaskForce141

Reply | Quote

Was able to install the latest security update on my Win 7 only after using the latest SSU. All went well. However trying to install the .NET update it’s not working.

I downloaded  dotNetFx4_ESU_Installer_u.zip but when I right click on the command prompt there is no Run As Administrator option, only OPEN.

"An analog kid in a digital world"

Win7 Ultimate home built desktop Running 0patch Pro

Two former 8.1 Laptops & two desktops now running Win 10

Win 10 Dell desktop

Reply | Quote

You need to open that .zip file to unzip (unpack) its contents.  You will get a folder,  named bin,  and a  command file,  dotNetFx4_ESU_Installer.cmd.  Right click on the command file will give you a Run As Administrator option.  The bin folder must be kept with the command file,  when you execute the command file it will look for the bin folder.

1 user thanked author for this post.

analogkid

Reply | Quote

Thanks for the reply, I’ll follow your steps right now……………

"An analog kid in a digital world"

Win7 Ultimate home built desktop Running 0patch Pro

Two former 8.1 Laptops & two desktops now running Win 10

Win 10 Dell desktop

Reply | Quote

As instructed I unzipped the file and this time I was able to right click and the Run As Administrator option is there.

However I’m getting an error message in the cmd “box” : ERROR NDP48 exe update files are not detected.  I have checked to see which version of .NET is installed on my Win 7 pc and it says 4.8. I was trying to install KB5034620 Security and Quality Rollup for .NET Framework 4.6.2

"An analog kid in a digital world"

Win7 Ultimate home built desktop Running 0patch Pro

Two former 8.1 Laptops & two desktops now running Win 10

Win 10 Dell desktop

Reply | Quote

Why trying to install .NET 4.6.2 update when you have .NET 4.8?

Reply | Quote

It appears the error is due to your attempting to install the rollup for .NET 4.6.2 instead of the rollup for version of .NET on your computer, namely .NET 4.8.  The rollup you need, as listed in PKCano’s Feb 13, 2024 post, is KB5034615

Reply | Quote

Thank you rick for the correct update, I feel like such an idiot.

OK I just tried installing KB5034615 and all seemed to proceeding well – files were verified then began installing but at the end of the process it says Failed. error code: 1603 . I’ll try again now

"An analog kid in a digital world"

Win7 Ultimate home built desktop Running 0patch Pro

Two former 8.1 Laptops & two desktops now running Win 10

Win 10 Dell desktop

Reply | Quote

Tried again several times without success. The installation extracts, verifies begins to install the update then stops it says  “Rollback Progress of NDP 48 KB5034615. After a minute or so the installation stops with the error code.

 

"An analog kid in a digital world"

Win7 Ultimate home built desktop Running 0patch Pro

Two former 8.1 Laptops & two desktops now running Win 10

Win 10 Dell desktop

Reply | Quote

Temporary disable Antivirus (if any)

otherwise, check txt log files in “%temp%”
example: ..Microsoft .NET Framework 4.8-MSP0.txt

search for: ValidateESULicense

Reply | Quote

Yes I did disable the antivirus (Avast) and Malwarebytes too. Checked the txt log (boy are those long)

I read this in the installation log:

<span class=”r”>Patch (C:\bd02f2c4a831693c6277c05bece4\NDP48-KB5034615.msp) Install failed on product (Microsoft .NET Framework 4.8). Msi Log: </span><span class=”r”>Final Result: Installation failed with error code: (0x80070643), “Fatal error during installation. “</span>

This indicates a different error code.

Guess I’ll try again tomorrow. At least I was able to install the monthly security update without a problem.

"An analog kid in a digital world"

Win7 Ultimate home built desktop Running 0patch Pro

Two former 8.1 Laptops & two desktops now running Win 10

Win 10 Dell desktop

Reply | Quote

Another possibility: did you install the correct bitness (32-bit / 64-bit)?

Win 7 SP1 Home Premium 64-bit; Office 2010; Group B (SaS); Former 'Tech Weenie'

Reply | Quote

Yes I did (64 bit) and still not installing

"An analog kid in a digital world"

Win7 Ultimate home built desktop Running 0patch Pro

Two former 8.1 Laptops & two desktops now running Win 10

Win 10 Dell desktop

1 user thanked author for this post.

SueW

Reply | Quote

Control Panel\Administrative Tools\Computer Management\Disk Management

Can you give us a screenshot of your drive layout? Expand it across the screen to give the greatest width possible. What I’m interested in, in particular, is the Windows Recovery partition, location, size, etc.

 

Reply | Quote

Wow was this tricky! PrintScreen key did not work. None of the tutorials or troubleshooting I tried would do a screen capture until I saw a helpful video that showed the Snipping Tool – that worked.

Is this what you asked for?

"An analog kid in a digital world"

Win7 Ultimate home built desktop Running 0patch Pro

Two former 8.1 Laptops & two desktops now running Win 10

Win 10 Dell desktop

Reply | Quote

The reason I asked is because that is the error code that Win10/11 have been throwing in relation to Microsoft updating of the Win RE Recovery Partition (which your computer does not show).

Also, I think @Microfix said he had a problem updating one of his Win7 or Win8.1 before increasing the size of that partition.

@abbodi86 , is that a possibility here?

Reply | Quote

.NET 4.x updates has nothing to do with that
0x80070643 is just generic “Fatal error during installation”, and it’s not the actual error

1 user thanked author for this post.

PKCano

Reply | Quote

 

I thank you all who had suggestions but after two days without success I’m giving up.

"An analog kid in a digital world"

Win7 Ultimate home built desktop Running 0patch Pro

Two former 8.1 Laptops & two desktops now running Win 10

Win 10 Dell desktop

Reply | Quote

Open the text log and search for: ValidateESULicense
and post the result
or upload the log to https://pasteio.com/

Reply | Quote

I found ValidateESULicense in the text log. Sorry for the stupid question but do you want me to upload the log? It’s pretty long. I copied all of the text after ValidateESULicense and saved it.

 

"An analog kid in a digital world"

Win7 Ultimate home built desktop Running 0patch Pro

Two former 8.1 Laptops & two desktops now running Win 10

Win 10 Dell desktop

Reply | Quote

Only the small part between “ValidateESULicense Started” and “ValidateESULicense Ended” lines

Reply | Quote

Ok, I found it.

 

 

"An analog kid in a digital world"

Win7 Ultimate home built desktop Running 0patch Pro

Two former 8.1 Laptops & two desktops now running Win 10

Win 10 Dell desktop

Reply | Quote

The log means that the MSI hook used to fake ESU is not working

verify that you Antivirus is not blocking or removing “C:\windows\system32\msiesu.dll” file, or registry path “HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\msiexec.exe”

1 user thanked author for this post.

analogkid

Reply | Quote

I checked everything you listed and it would seem that under “Image File Execution Options” there is no “msiexec.exe” listed. I did a screen capture of this if you would like I can upload it.

I have disabled Avast as well as Malwarebytes and will try again.

(And I want to express my gratitude for your assistance. I understand it’s frustrating dealing with folks like myself who are not as computer literate)

update………….

SUCCESS!!!!

Update was installed successfully just now. Not certain why because I’d disabled Avast and Malwarebytes the other night but this time it worked. I just checked “Installed Updates” (to be sure) and there it is. And what a beautiful sight that is. I have a huge smile on my face right now after  hours of frustration.

Thank you for your time and patience, I sincerely appreciate it.

 

"An analog kid in a digital world"

Win7 Ultimate home built desktop Running 0patch Pro

Two former 8.1 Laptops & two desktops now running Win 10

Win 10 Dell desktop

Reply | Quote

The registry key and the file are temporary added by the script dotNetFx4_ESU_Installer.cmd before starting installation, and removed at the end
they are not persistent

i’m not sure why it’s not working

Reply | Quote

Thank you all again for the help

"An analog kid in a digital world"

Win7 Ultimate home built desktop Running 0patch Pro

Two former 8.1 Laptops & two desktops now running Win 10

Win 10 Dell desktop

Reply | Quote

AKB 2000003 has been updated for Group B Win7 (ESU) and Win8.1 on  March 12, 2024.
****** Note Changes: The updates are for Win7 Embedded Standard and Server 2012 R2 x64. W7ESUI or BypassESU will work for Win7 installation. Updates for Win8.1 require W81ESUI_0_1

***** Win7 (using Win7 Embedded Standard updates) *****
(Download revised installer v.4 W7ESUI_0_4.zip)

There is a Security-only Update for those with Win7 ESU subscriptions.
There is no 2024-03 IE11 CU for Win7 ESU subscriptions.
2024-03 Rollup KB5035888 Download 32-bit or 64-bit for those with Win7 ESU subscriptions.

******  Note changes to SSU requirements:
You must have at least the September 2022 Servicing Stack KB5017397 previously installed to receive these updates – Download 32-bit or 64-bit  for those with Win7 ESU subscriptions.
There is a new Servicing Stack for Win7 released February 13 2024.
2024-02 Servicing Stack KB5034865 – Download 32-bit or 64-bit.

There are .NET Framework updates listed for Win7. See #2648115.

****** NOTE: ********
Microsoft has released a new ESU Licensing Preparation Package KB5016892 for the extension of Win7/Windows Server 2008 R2 SP1 ESU on Aug 25, 2022. Requires SHA-2 KB4474419 (9/23/2019 or later) and SSU KB4490628 (3/12/2019).

 

******* Win8.1 (using Server 2012 R2 x64 updates) *******
(Requires installer W81ESUI_0_1.zip)
Note changes: Windows 8.1 Embedded support ended in July. There are only Server 2012 R2 x64 (64-bit) updates available. ESU license (or bypass) is required for Win 8.1 x64 to install Server 2012 R2 updates manually.

There is no Security-only Update for Win8.1 ESU subscriptions.
There is no 2024-03 IE11 CU for Win8.1 ESU subscriptions.
2024-03 Rollup KB5035885 Download 64-bit only for Win8.1 ESU.

******  Note changes to SSU requirements:
You must have at least the February 2023 Servicing Stack KB5022922 installed to receive these updates –  Download 32-bit or 64-bit.
There is a new Servicing Stack for Win8.1 released Mar 12, 2024.
2024-03 Servicing Stack KB5035968 – Download 64-bit only.only for Win8.1 ESU.

There are .NET Framework updates listed for Win8.1. See #2648115.

****** NOTE: ********
Microsoft has released a new ESU Licensing Preparation Package KB5017220 for the extension of Win8.1/Windows Server 2012 R2 ESU on Aug. 24, 2022.

14 users thanked author for this post.

jburk07, TaskForce141, Moonbear, Microfix, Steve, maisy2, Pim, rick41, JD, analogkid, SteveIT, George1, SueW, abbodi86

Reply | Quote

Here’s your .NET Framework for March, 2024.

Download only the update for the version(s) installed on your PC.
There were NO 2024-03 (Mar) Security or Security-only updates for .NET Framework

 

12 users thanked author for this post.

jburk07, TaskForce141, Moonbear, maisy2, Pim, rick41, JD, analogkid, SteveIT, George1, SueW, abbodi86

Reply | Quote

Hi,

Updated: Win 7 HP x64

• Jan 2024 KB5034167 SO
• Jan 2024 KB5034120 (IE11)
• Jan 2024 KB5033946 .NET 3.5.1
• Feb 2024 KB5034809 SO
• Feb 2024 KB5034865 Servicing stack
• Mar 2024 KB5035919 SO

No problems to report.

Thanks, all.

4 users thanked author for this post.

TaskForce141, Steve, George1, SueW

Reply | Quote

If anyone is interested, MSRT V5.122 (3/12/2024) is available. KB890830.

1 user thanked author for this post.

Steve

Reply | Quote

Win8.1 /R2 ESU hybrid:
SSU kb5035968
SMQR CU kb5035885
slick update process as usual
No issues or tissues 🙂

If debian is good enough for NASA...

2 users thanked author for this post.

abbodi86, maisy2

Reply | Quote

Updated two Win8.1 successfully:

MSRT
SSU KB5035968
restart
2024-03 Rollup KB5035885

1 user thanked author for this post.

abbodi86

Reply | Quote

DEFCON-3.  Time to install the March update.

Used W7ESUI to install

Windows 7 Monthly Rollup – KB5035888

Installed this update on two Win 7,  SP 1,  x64 machines.

Thanks to abbodi86 and PKCano for making this possible.

2 users thanked author for this post.

jburk07, SteveIT

Reply | Quote

Installed March 2024 update using W7ESUI_0.4:

KB5035888 – Security Monthly Quality Rollup for Windows 7 Embedded

Installed Windows Malicious Software Removal Tool (v5.122) using Windows Update.

Update successful, and systems operating as expected (one Dell desktop, one HP laptop). Thanks to abbodi86 and PKCano for your support!

1 user thanked author for this post.

jburk07

Reply | Quote

AKB 2000003 has been updated for Group B Win7 (ESU) and Win8.1 on  April 9, 2024.
****** Note Changes: The updates are for Win7 Embedded Standard and Server 2012 R2 x64. W7ESUI or BypassESU will work for Win7 installation. Updates for Win8.1 require W81ESUI_0_1

***** Win7 (using Win7 Embedded Standard updates) *****
(Download revised installer v.4 W7ESUI_0_4.zip)

There is a Security-only Update for those with Win7 ESU subscriptions.
There is no 2024-04 IE11 CU for Win7 ESU subscriptions.
2024-04 Rollup KB5036967 Download 32-bit or 64-bit for those with Win7 ESU subscriptions.

******  Note changes to SSU requirements:
You must have at least the September 2022 Servicing Stack KB5017397 previously installed to receive these updates – Download 32-bit or 64-bit  for those with Win7 ESU subscriptions.
There is a new Servicing Stack for Win7 released February 13 2024.
2024-02 Servicing Stack KB5034865 – Download 32-bit or 64-bit.

There are .NET Framework updates listed for Win7. See #2658203.

****** NOTE: ********
Microsoft has released a new ESU Licensing Preparation Package KB5016892 for the extension of Win7/Windows Server 2008 R2 SP1 ESU on Aug 25, 2022. Requires SHA-2 KB4474419 (9/23/2019 or later) and SSU KB4490628 (3/12/2019).

 

******* Win8.1 (using Server 2012 R2 x64 updates) *******
(Requires installer W81ESUI_0_1.zip)
Note changes: Windows 8.1 Embedded support ended in July. There are only Server 2012 R2 x64 (64-bit) updates available. ESU license (or bypass) is required for Win 8.1 x64 to install Server 2012 R2 updates manually.

There is no Security-only Update for Win8.1 ESU subscriptions.
There is no 2024-04 IE11 CU for Win8.1 ESU subscriptions.
2024-04 Rollup KB5036960 Download 64-bit only for Win8.1 ESU.

******  Note changes to SSU requirements:
You must have at least the February 2023 Servicing Stack KB5022922 installed to receive these updates –  Download 32-bit or 64-bit.
There is a new Servicing Stack for Win8.1 released April 9, 2024.
2024-04 Servicing Stack KB5037021– Download 64-bit only for Win8.1 ESU.

There are .NET Framework updates listed for Win8.1. See #2658203.

****** NOTE: ********
Microsoft has released a new ESU Licensing Preparation Package KB5017220 for the extension of Win8.1/Windows Server 2012 R2 ESU on Aug. 24, 2022.

14 users thanked author for this post.

Erik, jburk07, TaskForce141, Steve, George1, Pim, maisy2, JD, rick41, abbodi86, SteveIT, SueW, Moonbear, Microfix

Reply | Quote

Here’s your .NET Framework for April, 2024.

Download only the update for the version(s) installed on your PC.
There were/no 2024-04 (Apr) Security-only updates for .NET Framework

***** Using Win7 Embedded Standard *****  (Requires dotNetFx4_ESU_Installer_u) for .NET4.
(A link for this installer has also been added to the top post in this thread)

2024-04 .NET Quality Rollup KB5037038
.NET 3.5.1 KB5036626
.NET 4.5.2 N/A
.NET 4.6 – 4.7.2 KB5036607
.NET 4.8 KB5036615

2024-04 .NET Security-only Rollup KB5037127
.NET 3.5.1 KB5036634
.NET 4.5.2 N/A
.NET 4.6 – 4.7.2 K5036631
.NET 4.8 KB5036632

 

******** Using Server 2012 R2 x64 ******** (Requires installer W81ESUI_0_1.zip)

2024-04 .NET Quality Rollup KB5037040
.NET 3.5.1 KB5036627
.NET 4.5.2 N/A
.NET 4.6 – 4.7.2 KB5036606
.NET 4.8 KB KB5036614

There were NO 2024-04 (Apr) Security-only updates for .NET Framework

14 users thanked author for this post.

Erik, jburk07, TaskForce141, Steve, George1, Pim, maisy2, JD, rick41, abbodi86, SteveIT, SueW, Moonbear, Microfix

Reply | Quote

Phase 3 of the DCOM hardening changes..wonder what’ll break this month?
HKLM\SOFTWARE\Microsoft\Ole\AppCompat
RequireIntegrityActivationAuthenticationLevel
Hex value options ending in 0 to disable or 1 to enable
I believe kb5036960 defaults to enable.
Gonna hang off patching Win8.1/R2 Hybrid and let the dust settle this month..

If debian is good enough for NASA...

1 user thanked author for this post.

PKCano

Reply | Quote

@abbodi86 , any insight here?

Reply | Quote

No clue
KB5004442 says it’s mandatory hardening now, that registry key has no effect

2 users thanked author for this post.

Microfix, PKCano

Reply | Quote

Had a ‘bull by the horns’ moment earlier today:
Win8.1/R2 Hybrid updated without issue..
SSU kb5037021
CU kb5036960
NET4.8 kb5036614
All good here.
UCPD does not seem applicable on Win8.1 x64 ESU bypass,
it’s simply not there, Taskscheduler nor registry after April patching.

I’m happy about that, as it’ll just be another avenue for MS to exploit later, nevermind miscreants.. 🙂

If debian is good enough for NASA...

1 user thanked author for this post.

maisy2

Reply | Quote

For the .Net Framework there is no link for KB5036615 (Quality roll-up).  The Microsoft update catalog does contain downloads described for Windows Embedded Standard 7 but the related KB speaks to Windows Server 2008 R2 SP1.

The KB5036632 Security-Only roll-up link is live but suffers the same discrepancy in descriptions.

So its not clear to me if either one of these should be installed on Win7 SP1?

If installable, should only the Security-only roll-up be installed?

Reply | Quote

The links are correct for Win7. Win7 no longer gets updates. The updates for the corresponding servers are compatible for use.

If you want the security fixes ONLY, use the Security-only updates in AKB2000003. If you install the Rollup, you do not need the Security-only update, as it is contained in the Rollup.
There is NO Security-only Rollup. Security-only updates ARE NOT cumulative. Rollups ARE cumulative.

Read the instructions in the top post of this thread and those in each monthly post in order to use these updates correctly.

Reply | Quote

Thanks for clarifying that its OK to ignore the discrepancy in Microsoft’s descriptions of .Net Framework updates as they appear in the update catalog vs. the KB articles.

Since the .Net Framework Quality roll-up link did not exist when I posted it wasn’t clear to me if that was simply an oversight (since corrected) or was meaningful.  And yes, the referenced .Net Framework security only update was described as a roll-up

And since my question was specifically about the .Net Framework update discrepancy chiding me about the difference between Win7 Quality roll-ups and security-only updates was both unnecessary and annoying.

Reply | Quote

If anyone is interested, MSRT V5.123 (4/9/2024) is available. KB890830.

2 users thanked author for this post.

Steve, maisy2

Reply | Quote

Updated Win8.1 Pro to 2024-04 patches, in Parallels VMs on 2013 15″ MacBook Pro (Intel Haswell i7) and 2017 iMac4K (Intel Kaby Lake i7), without problems. Both running Open Shell Menu.

MSRP
2024-04 SSU KB5037021
restart
2024-04 .NET Framework 3.5 KB5036627
2024-04 .NET Framework 4.8 KB5036614
2024-04 Rollup KB5036960

2 users thanked author for this post.

abbodi86, Microfix

Reply | Quote

DEFCON-4.  Time to install April updates.

Used DOTNETFX4 to install

.NET 4.8 Quality Rollup – KB5036615

Used W7ESUI to install

.NET 3.5.1 Quality Rollup – KB5036626

Windows 7 Monthly Rollup – KB5036967

Installed these updates on two Win 7,  SP 1,  x64 machines.

Thanks to abbodi86 and PKCano for making this possible.

4 users thanked author for this post.

jburk07, TaskForce141, SueW, SteveIT

Reply | Quote

Installed April 2024 updates using W7ESUI_0.4:

KB5036626 – Security and Quality Rollup for .NET Framework 3.5.1
KB5036967 – Security Monthly Quality Rollup for Windows 7 Embedded

Installed April 2024 updates using dotNetFx4_ESU_Installer_u:

KB5036607 – Security and Quality Rollup for .NET Framework 4.6.2

Installed Windows Malicious Software Removal Tool (v5.123) using Windows Update.

Updates successful on one Dell desktop, and one HP laptop. Thanks to abbodi86 and PKCano for your support!

3 users thanked author for this post.

jburk07, TaskForce141, SueW

Reply | Quote

Something a little different happened in applying April’s updates.

Win7 Pro.

Installed in this order, with no restarts in-between:

— April ’24 Malicious Software Removal Tool (using Windows Update)
— dotNET 4.8 Quality Rollup KB5036615 (using dotNetFx4_ESU_Installer_u)
— dotNET 3.5.1 Quality Rollup KB5036626 and Win7 April Rollup KB5036967 (using W7ESUI_0.4)

Then I restarted.  What surprised me is what happened after the system came back up and did the usual countdown:  It got to 33%, was stuck there for a minute (not unusual), but then it spontaneously restarted again. After the system came back up the countdown resumed (starting at 58% IIRC), went to 100% and finished.  No error messages at any time.

All seems fine, and all the updates are listed as installed.  No duplicates.

Has anyone ever seen a spontaneous second restart like this?  I ask more out of curiosity than concern.

Reply | Quote

Updates that require two or more restarts are not new or unusual
KB2894518 Software updates that require multiple reboots

3 users thanked author for this post.

jburk07, George1, rick41

Reply | Quote

I installed KB5036922 without a hitch but just as happened last month the .NET update will not install. I used the dotNetFx4_ESU_Installer_u) and have confirmed my machine has .NET 4.8 but keep getting error messages so for now I’m giving up.

But I had a new issue tonight when trying to connect using my Nord VPN. The program would not open up. This has never happened on any of my pc’s including this one.

Then it occurred to me that the only thing that happened only after installing KB5036922

I just uninstalled it, rebooted and Nord is working once again (I’m connected right now)I thought I would post it here in case anyone else runs into this issue

"An analog kid in a digital world"

Win7 Ultimate home built desktop Running 0patch Pro

Two former 8.1 Laptops & two desktops now running Win 10

Win 10 Dell desktop

Reply | Quote

AKB 2000003 has been updated for Group B Win7 (ESU) and Win8.1 on May 14, 2024.
****** Note Changes: The updates are for Win7 Embedded Standard and Server 2012 R2 x64. W7ESUI or BypassESU will work for Win7 installation. Updates for Win8.1 require W81ESUI_0_1

***** Win7 (using Win7 Embedded Standard updates) *****
(Download revised installer v.4 W7ESUI_0_4.zip)

There is a Security-only Update for those with Win7 ESU subscriptions.
There is no 2024-05 IE11 CU for Win7 ESU subscriptions.
2024-05 Rollup KB5037780 Download 32-bit or 64-bit for those with Win7 ESU subscriptions.

******  Note changes to SSU requirements:
You must have at least the September 2022 Servicing Stack KB5017397 previously installed to receive these updates – Download 32-bit or 64-bit  for those with Win7 ESU subscriptions.
There is a new Servicing Stack for Win7 released February 13 2024.
2024-02 Servicing Stack KB5034865 – Download 32-bit or 64-bit.

There are .NET Framework updates listed for Win7. See #2671417.

****** NOTE: ********
Microsoft has released a new ESU Licensing Preparation Package KB5016892 for the extension of Win7/Windows Server 2008 R2 SP1 ESU on Aug 25, 2022. Requires SHA-2 KB4474419 (9/23/2019 or later) and SSU KB4490628 (3/12/2019).

 

******* Win8.1 (using Server 2012 R2 x64 updates) *******
(Requires installer W81ESUI_0_1.zip)
Note changes: Windows 8.1 Embedded support ended in July. There are only Server 2012 R2 x64 (64-bit) updates available. ESU license (or bypass) is required for Win 8.1 x64 to install Server 2012 R2 updates manually.

There is no Security-only Update for Win8.1 ESU subscriptions.
There is no 2024-05 IE11 CU for Win8.1 ESU subscriptions.
2024-05 Rollup KB5037823 Download 64-bit only for Win8.1 ESU.

******  Note changes to SSU requirements:
You must have at least the February 2023 Servicing Stack KB5022922 installed to receive these updates –  Download 32-bit or 64-bit.
There is a new Servicing Stack for Win8.1 released April 9, 2024.
2024-04 Servicing Stack KB5037021– Download 64-bit only for Win8.1 ESU.

There are .NET Framework updates listed for Win8.1. See #2671417.

****** NOTE: ********
Microsoft has released a new ESU Licensing Preparation Package KB5017220 for the extension of Win8.1/Windows Server 2012 R2 ESU on Aug. 24, 2022.

13 users thanked author for this post.

Erik, TaskForce141, jburk07, Steve, Pim, JD, maisy2, SteveIT, George1, abbodi86, rick41, Moonbear, SueW

Reply | Quote

Here’s your .NET Framework for May 14, 2024.

Download only the update for the version(s) installed on your PC.
There were 2024-05 (May) Security-only updates for .NET Framework

***** Using Win7 Embedded Standard *****  (Requires dotNetFx4_ESU_Installer_u) for .NET4.
(A link for this installer has also been added to the top post in this thread)

2024-05 .NET Quality Rollup KB5038288
.NET 3.5.1 KB5036626 (4/24)
.NET 4.5.2 N/A
.NET 4.6 – 4.7.2 KB5037917
.NET 4.8 KB5037916

There were NO 2024-05 (May) Security-only updates for .NET Framework

******** Using Server 2012 R2 x64 ******** (Requires installer W81ESUI_0_1.zip)

2024-05 .NET Quality Rollup KB5038290
.NET 3.5.1 KB5036627 (4/24)
.NET 4.5.2 N/A
.NET 4.6 – 4.7.2 KB5037925
.NET 4.8 KB KB5037923

There were NO 2024-05 (May) Security-only updates for .NET Framework

12 users thanked author for this post.

Erik, TaskForce141, jburk07, Steve, Pim, SteveIT, JD, George1, abbodi86, rick41, Moonbear, SueW

Reply | Quote

If anyone is interested, MSRT V5.124 (5/14/2024) is available. KB890830.

1 user thanked author for this post.

Steve

Reply | Quote

Feedback for the Win8.1/ R2 Hybrid 🙂
May ESU patches applied in the following order..
NET48 kb5037923
SMQR CU kb5037823
All went in well without any hiccups soon after official release on catalog.

If debian is good enough for NASA...

1 user thanked author for this post.

maisy2

Reply | Quote

Updated two Win8.1 in Patallels VMs on Intel based Macs:
MSRT first
2024-05 .NET Framework 4.8 KB5037923
2024-05 Rollup KB5037823

No problems so far.

Reply | Quote

DEFCON-4.  Time to install May updates.

Used DOTNETFX4 to install

.NET 4.8 Quality Rollup – KB5037916

Used W7ESUI to install

Windows 7 Monthly Rollup – KB5037780

Installed these updates on two Win 7,  SP 1,  x64 machines.

Thanks to abbodi86 and PKCano for making this possible.

3 users thanked author for this post.

jburk07, SueW, SteveIT

Reply | Quote

Installed May 2024 updates using W7ESUI_0.4:

KB5037780 – Security Monthly Quality Rollup for Windows 7 Embedded

Installed May 2024 updates using dotNetFx4_ESU_Installer_u:

KB5037917 – Security and Quality Rollup for .NET Framework 4.6.2

Installed Windows Malicious Software Removal Tool (v5.124) using Windows Update.

Updates successful on one Dell desktop, and one HP laptop. Thanks to abbodi86 and PKCano for your support!

1 user thanked author for this post.

SueW

Reply | Quote

AKB 2000003 has been updated for Group B Win7 (ESU) and Win8.1 on June 11, 2024.
****** Note Changes: The updates are for Win7 Embedded Standard and Server 2012 R2 x64. W7ESUI or BypassESU will work for Win7 installation. Updates for Win8.1 require W81ESUI_0_1

***** Win7 (using Win7 Embedded Standard updates) *****
(Download revised installer v.4 W7ESUI_0_4.zip)

There is a Security-only Update for those with Win7 ESU subscriptions.
There is no 2024-06 IE11 CU for Win7 ESU subscriptions.
2024-06 Rollup KB5039289 Download 32-bit or 64-bit for those with Win7 ESU subscriptions.

******  Note changes to SSU requirements:
You must have at least the September 2022 Servicing Stack KB5017397 previously installed to receive these updates – Download 32-bit or 64-bit  for those with Win7 ESU subscriptions.
There is a new Servicing Stack for Win7 released June 11 2024.
2024-06 Servicing Stack KB5039339 – Download 32-bit or 64-bit.

There are .NET Framework updates listed for Win7. See #2679897.

****** NOTE: ********
Microsoft has released a new ESU Licensing Preparation Package KB5016892 for the extension of Win7/Windows Server 2008 R2 SP1 ESU on Aug 25, 2022. Requires SHA-2 KB4474419 (9/23/2019 or later) and SSU KB4490628 (3/12/2019).

 

******* Win8.1 (using Server 2012 R2 x64 updates) *******
(Requires installer W81ESUI_0_1.zip)
Note changes: Windows 8.1 Embedded support ended in July. There are only Server 2012 R2 x64 (64-bit) updates available. ESU license (or bypass) is required for Win 8.1 x64 to install Server 2012 R2 updates manually.

There is no Security-only Update for Win8.1 ESU subscriptions.
There is no 2024-06 IE11 CU for Win8.1 ESU subscriptions.
2024-06 Rollup KB5039294 Download 64-bit only for Win8.1 ESU.

******  Note changes to SSU requirements:
You must have at least the February 2023 Servicing Stack KB5022922 installed to receive these updates –  Download 32-bit or 64-bit.
There is a new Servicing Stack for Win8.1 released June 11 2024.
2024-06 Servicing Stack KB5039340 – Download 64-bit only for Win8.1 ESU.

There are .NET Framework updates listed for Win8.1. See #2679897.

****** NOTE: ********
Microsoft has released a new ESU Licensing Preparation Package KB5017220 for the extension of Win8.1/Windows Server 2012 R2 ESU on Aug. 24, 2022.

14 users thanked author for this post.

Erik, jburk07, TaskForce141, Steve, JD, SteveIT, Pim, rick41, maisy2, abbodi86, Sueska, George1, Moonbear, SueW

Reply | Quote

Here’s your .NET Framework for June 11, 2024.

Download only the update for the version(s) installed on your PC.
There were NO 2024-06 (Jun) Security or Security-only updates for .NET Framework

14 users thanked author for this post.

Erik, jburk07, TaskForce141, Steve, JD, SteveIT, Pim, rick41, maisy2, abbodi86, Sueska, George1, Moonbear, SueW

Reply | Quote

If anyone is interested, MSRT V5.125 (6/11/2024) is available. KB890830.

Reply | Quote

The MSRT update is available every month through normal Windows Update. It doesn’t have to be downloaded from the MS Catalog manually.

Reply | Quote

Advice taken.

Reply | Quote

Updated two Win8.1 in Patallels VMs on Intel based Macs:
Turned off A/V
MSRT first, download/install from Windows Update
2024-06 SSU KB5039340
Restart – Turned off A/V again
No .NET Framework
2024-06 Rollup KB5039294

No problems so far.

2 users thanked author for this post.

abbodi86, Microfix

Reply | Quote

Win8.1/R2 ESU June update:
Imaged the OS prior to and installed the following:
SSU – kb5039340
SMQR CU – kb5039294
with no issues to report during the procedure or post-update.

After 47+ hours or so, nothing, nada, zero erroneous to report.
SFC integrity is good and DISM healthy, with no program or canon pixma printer glitches.
Purged the winsxs redundancy, I’m that confident this month!

Don’t let the FUD bugs bite.. 😉

If debian is good enough for NASA...

1 user thanked author for this post.

abbodi86

Reply | Quote

On Win 7 Home 32-bit:

Ran Malicious Software Removal tool kb890830 (June 2024).

Installed May 2024 updates: kb5037780  Win 7 quality rollup, kb5037916 .net 4.8. quality rollup.  Restarted.

Installed June 2024 updates: kb5039289 Win 7 quality rollup, kb5039339 servicing stack. Restarted.  Updated Firefox and Thunderbird.

No problems to report.

Reply | Quote

In the future, it would be a good idea to install the Servicing Stack before the Rollup.
The SSU is the update for the Windows Update service.

4 users thanked author for this post.

jburk07, SteveIT, George1, rick41

Reply | Quote

For accuracy, SSU is an update to the installation engine, which both Windows Update and Dism utilize to install updates

5 users thanked author for this post.

jburk07, SteveIT, George1, rick41, PKCano

Reply | Quote

I thought W7ESUI automatically installs the Servicing Stack before the Rollup,  or anything else in the package being submitted.

2 users thanked author for this post.

zat_so, SteveIT

Reply | Quote

I believe W7ESUI just makes it possible to bypasses the ESU requirements.
The updates are being installed by you manually in whatever order you install them.

Confirmation, @abbodi86 ?
Edit: Never mind. I’m losing my memory in my old age. Been too long since I did Win7. See below.

Reply | Quote

Unless I’m mistaken if update(s) and an SSU are placed in the folder then the script will always install the SSU first.

Reply | Quote

I can be wrong, but…
I don’t believe the script installs the updates. You do, manually.

At least that’s the case with the Win8.1 updates I install.
Perhaps it’s different with Win7.
It’s been several years since I had a Win7 installation.

Edit: OK, refresh my memory. With Win7, you run the script and it does the install? Now I remember something like that, in a Command Prompt. Senior moment. You all are right.

I am using the bypass with Win8.1. It is installed at the onset, then I manually install the updates by double clicking on the .msu and manually running the installer.

Reply | Quote

Win8,1 procedures are no different from those for Win7.  Copy the relevant updates to the folder containing the Win8.1 script and then run the script to do the install.  I’ve never tried to install directly without using the script.

1 user thanked author for this post.

abbodi86

Reply | Quote

DEFCON-4.  Time to install June updates.

Used DOTNETFX4 to install

There are no .NET updates for June.

Used W7ESUI to install

Servicing Stack Update – KB5039339

Windows 7 Monthly Rollup – KB5039289

Installed these updates on two Win 7,  SP 1,  x64 machines.

Thanks to abbodi86 and PKCano for making this possible.

3 users thanked author for this post.

jburk07, SteveIT, SueW

Reply | Quote

Installed June 2024 updates using W7ESUI_0.4:

KB5039339 – Servicing Stack Update for Windows 7 Embedded
KB5039289 – Security Monthly Quality Rollup for Windows 7 Embedded

Installed Windows Malicious Software Removal Tool (v5.125) using Windows Update.

Updates successful on one Dell desktop, and one HP laptop. Thanks to abbodi86 and PKCano for your support!

1 user thanked author for this post.

SueW

Reply | Quote

AKB 2000003 has been updated for Group B Win7 (ESU) and Win8.1 on July 9, 2024.
****** Note Changes: The updates are for Win7 Embedded Standard and Server 2012 R2 x64. W7ESUI or BypassESU will work for Win7 installation. Updates for Win8.1 require W81ESUI_0_1

***** Win7 (using Win7 Embedded Standard updates) *****
(Download revised installer v.4 W7ESUI_0_4.zip)

There is a Security-only Update for those with Win7 ESU subscriptions.
There is a 2024-07 IE11 CU for Win7 ESU subscriptions.
2024-07 Rollup KB5040497 Download 32-bit or 64-bit for those with Win7 ESU subscriptions.

******  Note changes to SSU requirements:
You must have at least the September 2022 Servicing Stack KB5017397 previously installed to receive these updates – Download 32-bit or 64-bit  for those with Win7 ESU subscriptions.
There is a new Servicing Stack for Win7 released June 11 2024.
2024-06 Servicing Stack KB5039339 – Download 32-bit or 64-bit.

There are .NET Framework updates listed for Win7. See #2686576.

****** NOTE: ********
Microsoft has released a new ESU Licensing Preparation Package KB5016892 for the extension of Win7/Windows Server 2008 R2 SP1 ESU on Aug 25, 2022. Requires SHA-2 KB4474419 (9/23/2019 or later) and SSU KB4490628 (3/12/2019).

 

******* Win8.1 (using Server 2012 R2 x64 updates) *******
(Requires installer W81ESUI_0_1.zip)
Note changes: Windows 8.1 Embedded support ended in July. There are only Server 2012 R2 x64 (64-bit) updates available. ESU license (or bypass) is required for Win 8.1 x64 to install Server 2012 R2 updates manually.

There is no Security-only Update for Win8.1 ESU subscriptions.
There is a 2024-07 IE11 CU for Win8.1 ESU subscriptions.
2024-07 Rollup KB5040456 Download 64-bit only for Win8.1 ESU.

******  Note changes to SSU requirements:
You must have at least the February 2023 Servicing Stack KB5022922 installed to receive these updates –  Download 32-bit or 64-bit.
There is a new Servicing Stack for Win8.1 released July 9 2024.
2024-07 Servicing Stack KB5040569 – Download 64-bit only for Win8.1 ESU.

There are .NET Framework updates listed for Win8.1. See #2686576.

****** NOTE: ********
Microsoft has released a new ESU Licensing Preparation Package KB5017220 for the extension of Win8.1/Windows Server 2012 R2 ESU on Aug. 24, 2022.

Pay attention: Updates for IE11

12 users thanked author for this post.

TaskForce141, Erik, Moonbear, abbodi86, Steve, JD, SteveIT, Pim, maisy2, rick41, George1, SueW

Reply | Quote

Here’s your .NET Framework for July 9, 2024.

Download only the update for the version(s) installed on your PC.
There were/no 2024-07 (Jul) Security-only updates for .NET Framework

***** Using Win7 Embedded Standard *****  (Requires dotNetFx4_ESU_Installer_u) for .NET4.
(A link for this installer has also been added to the top post in this thread)

2024-07 .NET Quality Rollup KB5041021
.NET 3.5.1 KB5039909
.NET 4.5.2 N/A
.NET 4.6 – 4.7.2 KB5039882
.NET 4.8 KB5039891

2024-07 .NET Security-only Rollup KB5041026
.NET 3.5.1 KB5040119
.NET 4.5.2 N/A
.NET 4.6 – 4.7.2 KB5040122
.NET 4.8 KB5040123

 

******** Using Server 2012 R2 x64 ******** (Requires installer W81ESUI_0_1.zip)

2024-07 .NET Quality Rollup KB5041023
.NET 3.5  KB5039910
.NET 4.5.2 N/A
.NET 4.6 – 4.7.2 KB5039881
.NET 4.8 KB KB5039890

There were NO 2024-07 (Jul) Security-only updates for .NET Framework

12 users thanked author for this post.

TaskForce141, Erik, Moonbear, Steve, abbodi86, JD, SteveIT, Pim, maisy2, rick41, George1, SueW

Reply | Quote

Updated x2 Win8.1 Pro running in Parallels VMs on Intel Macs:

Turned off A/V
MSRT using Windows Update
2024-07 SSU KB5040569
Restart
Turned off A/V again
2024-07 .NET Framework v3.5 KB5039910
2024-07 .NET Framework v4.8.1 KB5039890
2024-07 Quality Rollup KB5040456 (contains July CU for IE11)

1 user thanked author for this post.

maisy2

Reply | Quote

@PKCano

Do those of us using the script need to watch out for the Bitlocker issues that are effecting W10 & 11?

I’m hoping to install the July updates tomorrow before severe weather moves in for the rest of the week and I’d like to know if there’s anything I should watch out for.

Reply | Quote

I don’t believe Bitlocker is available in Win7/8.1.
I haven’t heard of anyone using Bitlocker on Win7/8.1, but….
Are you using Bitlocker on Win7/8.1?
I didn’t have any problems with Win8.1, don’t have an installation of Win7 at this time.

1 user thanked author for this post.

Moonbear

Reply | Quote

PKCano wrote:

I don’t believe Bitlocker is available in Win7/8.1.

It is: https://en.wikipedia.org/wiki/BitLocker#History

1 user thanked author for this post.

PKCano

Reply | Quote

@PKCano

No, I’ve never used it. The Bitlocker Drive Encryption Service is stopped and set to manual

Reply | Quote

Windows 8.1, yes, in case of UEFI and Secure Boot
Windows 7 doesn’t support those

2 users thanked author for this post.

PKCano, Moonbear

Reply | Quote

BitLocker is available on:

Enterprise and Ultimate editions of Windows Vista and Windows 7
…

Initially, the graphical BitLocker interface in Windows Vista could only encrypt the operating system volume. Starting with Windows Vista with Service Pack 1 and Windows Server 2008, volumes other than the operating system volume could be encrypted using the graphical tool.
…
The version of BitLocker included in Windows 7 and Windows Server 2008 Release 2 adds the ability to encrypt removable drives.

https://en.wikipedia.org/wiki/BitLocker#History

Reply | Quote

The issue is not caused by Bitlocker and will not occur on Windows 7

2 users thanked author for this post.

jburk07, PKCano

Reply | Quote

Windows 7 and Windows Server 2008 R2 SP1

Known issues

Devices might boot into BitLocker recovery with the July 2024 security update

After installing the July 2024 Windows security update, released July 9, 2024 (KB5040497), you might see a BitLocker recovery screen upon booting your device.

https://learn.microsoft.com/en-us/windows/release-health/status-windows-7-and-windows-server-2008-r2-sp1#3358msgdesc

Reply | Quote

It’s not

1 user thanked author for this post.

PKCano

Reply | Quote

Right!

Windows 7 Home/Pro didn’t include Bitlocker/drive encryption, it was only available in the Windows 7 Enterprise & Ultimate versions.

Bitlocker History

BitLocker is available on:

• Enterprise and Ultimate editions of Windows Vista and Windows 7
• Pro and Enterprise editions of Windows 8 and 8.1
• Windows Embedded Standard 7 and Windows Thin PC
• Windows Server 2008 and later
• Pro, Enterprise, and Education editions of Windows 10
• Pro, Enterprise, and Education editions of Windows 11

3 users thanked author for this post.

jburk07, Steve, PKCano

Reply | Quote

@Moonbear, I just installed the July updates earlier today and didn’t encounter any issues. The installation went as smoothly as always over many months past (thanks to abbodi86 and PKCano!). Good luck with your weather — I hope it’s not too severe.

Win 7 SP1 Home Premium 64-bit; Office 2010; Group B (SaS); Former 'Tech Weenie'

4 users thanked author for this post.

jburk07, maisy2, rick41, Moonbear

Reply | Quote

b wrote:

After installing the July 2024 Windows security update, released July 9, 2024 (KB5040497), you might see a BitLocker recovery screen upon booting your device.

Phew! I had installed July’s Security Only update (KB5040498); maybe that’s why I had smooth sailing . . .

Win 7 SP1 Home Premium 64-bit; Office 2010; Group B (SaS); Former 'Tech Weenie'

Reply | Quote

Hi to add, no phew! here whatsoever with the precautionary issue.
Updated with KB5040497, July 2024 SMQR for Windows Embedded Standard 7/ Windows Server 2008 R2

Hopefully an extraordinary occurrence for Win7/Server 2008 R2 cited. Both Windows Embedded 8.1 & Win Embedded Standard 7 updated fine with their July Rollups. Thanks to one and all!

2 users thanked author for this post.

SueW, rick41

Reply | Quote

Also,

Susan Bradley wrote:

I have NEVER seen Windows update enable Bitlocker.  Ever.

So,
Check BitLocker Status (Command Line)
Search box type “cmd” right-click cmd icon Run as admin
In command prompt, type “manage-bde -status”. Press Enter.
View the status of BitLocker on the drives in the computer.

Reply | Quote

Since my system (Windows 7 Home Premium) isn’t even supposed to have Bitlocker, would simply disabling the service before I install the updates hurt anything?

The service is already stopped and set to manual start. (The default setting as far as I know.)

Reply | Quote

No need

“if it’s not broken, don’t fix it”

1 user thanked author for this post.

Moonbear

Reply | Quote

DEFCON-3.  Time to install July updates.

Used DOTNETFX4 to install

.NET 4.8 Update – KB5039891

Used W7ESUI to install

.NET 3.5.1 Update – KB5039909

Windows 7 Monthly Rollup – KB5040497

Installed these updates on two Win 7,  SP 1,  x64 machines.

Thanks to abbodi86 and PKCano for making this possible.

3 users thanked author for this post.

TaskForce141, jburk07, SteveIT

Reply | Quote

Installed July 2024 updates using W7ESUI_0.4:

KB5039909 – Security and Quality Rollup for .NET Framework 3.5.1
KB5040497 – Security Monthly Quality Rollup for Windows 7 Embedded

Installed July 2024 updates using dotNetFx4_ESU_Installer_u:

KB5039882 – Security and Quality Rollup for .NET Framework 4.6.2

Installed Windows Malicious Software Removal Tool (v5.126) using Windows Update.

Updates successful on one Dell desktop, and one HP laptop. Thanks to abbodi86 and PKCano for your support!

3 users thanked author for this post.

TaskForce141, jburk07, George1

Reply | Quote

AKB 2000003 has been updated for Group B Win7 (ESU) and Win8.1 on  August 13, 2024.
****** Note Changes: The updates are for Win7 Embedded Standard and Server 2012 R2 x64. W7ESUI or BypassESU will work for Win7 installation. Updates for Win8.1 require W81ESUI_0_1

***** Win7 (using Win7 Embedded Standard updates) *****
(Download revised installer v.4 W7ESUI_0_4.zip)

There is a Security-only Update for those with Win7 ESU subscriptions.
There is a 2024-08 IE11 CU for Win7 ESU subscriptions.
2024-08 Rollup KB5041838 Download 32-bit or 64-bit for those with Win7 ESU subscriptions.

******  Note changes to SSU requirements:
You must have at least the September 2022 Servicing Stack KB5017397 previously installed to receive these updates – Download 32-bit or 64-bit  for those with Win7 ESU subscriptions.
There is a new Servicing Stack for Win7 released June 11 2024.
2024-06 Servicing Stack KB5039339 – Download 32-bit or 64-bit.

There are .NET Framework updates listed for Win7. See #2696157.

****** NOTE: ********
Microsoft has released a new ESU Licensing Preparation Package KB5016892 for the extension of Win7/Windows Server 2008 R2 SP1 ESU on Aug 25, 2022. Requires SHA-2 KB4474419 (9/23/2019 or later) and SSU KB4490628 (3/12/2019).

 

******* Win8.1 (using Server 2012 R2 x64 updates) *******
(Requires installer W81ESUI_0_1.zip)
Note changes: Windows 8.1 Embedded support ended in July. There are only Server 2012 R2 x64 (64-bit) updates available. ESU license (or bypass) is required for Win 8.1 x64 to install Server 2012 R2 updates manually.

There is no Security-only Update for Win8.1 ESU subscriptions.
There is a  2024-08 IE11 CU for Win8.1 ESU subscriptions.
2024-08 Rollup KB5041828 Download 64-bit only for Win8.1 ESU.

******  Note changes to SSU requirements:
You must have at least the February 2023 Servicing Stack KB5022922 installed to receive these updates –  Download 32-bit or 64-bit.
There is a new Servicing Stack for Win8.1 released August 13 2024.
2024-08 Servicing Stack KB5041588 – Download 64-bit only for Win8.1 ESU.

There are .NET Framework updates listed for Win8.1. See #2696157.

****** NOTE: ********
Microsoft has released a new ESU Licensing Preparation Package KB5017220 for the extension of Win8.1/Windows Server 2012 R2 ESU on Aug. 24, 2022.

12 users thanked author for this post.

TaskForce141, jburk07, Steve, JD, George1, abbodi86, Pim, rick41, maisy2, SteveIT, Moonbear, SueW

Reply | Quote

Here’s your .NET Framework for August 13, 2024.

Download only the update for the version(s) installed on your PC.
There were/no 2024-08 (Aug) Security-only updates for .NET Framework

***** Using Win7 Embedded Standard *****  (Requires dotNetFx4_ESU_Installer_u) for .NET4.
(A link for this installer has also been added to the top post in this thread)

2024-08 .NET Quality Rollup KB5042354
.NET 3.5.1 KB5041942
.NET 4.5.2 N/A
.NET 4.6 – 4.7.2 KB5041926
.NET 4.8 KB5041954

There were NO 2024-08 (Aug) Security-only updates for .NET Framework

 

******** Using Server 2012 R2 x64 ******** (Requires installer W81ESUI_0_1.zip)

2024-08 .NET Quality Rollup KB5042356
.NET 3.5 KB5041945
.NET 4.5.2 N/A
.NET 4.6 – 4.7.2 KB5041923
.NET 4.8 KB5041960

There were NO 2024-08 (Aug) Security-only updates for .NET Framework

12 users thanked author for this post.

TaskForce141, jburk07, Steve, JD, George1, abbodi86, Pim, rick41, maisy2, SteveIT, Moonbear, SueW

Reply | Quote

Updated x2 Win8.1 Pro running in Parallels VMs on Intel Macs:

Turned off A/V
MSRT using Windows Update
2024-08 SSU KB5041588
Restart
Turned off A/V again
2024-08 .NET Framework v3.5 KB5041945
2024-08 .NET Framework v4.8.1 KB5041960
2024-08 Quality Rollup KB5041828 (contains Aug CU for IE11)

No problems so far.

 

2 users thanked author for this post.

abbodi86, maisy2

Reply | Quote

DEFCON-3.  Time to install August updates.

Used DOTNETFX4 to install

.NET 4.8 Update – KB5041954

Used W7ESUI to install

.NET 3.5.1 Update – KB5041942

Windows 7 Monthly Rollup – KB5041838

Installed these updates on two Win 7,  SP 1,  x64 machines.

Thanks to abbodi86 and PKCano for making this possible.

6 users thanked author for this post.

TaskForce141, Steve, abbodi86, jburk07, SteveIT, SueW

Reply | Quote

Installed August 2024 updates using W7ESUI_0.4:

KB5041942 – Security and Quality Rollup for .NET Framework 3.5.1
KB5041838 – Security Monthly Quality Rollup for Windows 7 Embedded

Installed August 2024 updates using dotNetFx4_ESU_Installer_u:

KB5041926 – Security and Quality Rollup for .NET Framework 4.6.2

Installed Windows Malicious Software Removal Tool (v5.127) using Windows Update.

Updates successful on one Dell desktop, and one HP laptop. Thanks to abbodi86 and PKCano for your support!

6 users thanked author for this post.

TaskForce141, Steve, jburk07, abbodi86, George1, SueW

Reply | Quote

AKB 2000003 has been updated for Group B Win7 (ESU) and Win8.1 on  September 10, 2024.
****** Note Changes: The updates are for Win7 Embedded Standard and Server 2012 R2 x64. W7ESUI or BypassESU will work for Win7 installation. Updates for Win8.1 require W81ESUI_0_1

***** Win7 (using Win7 Embedded Standard updates) *****
(Download revised installer v.4 W7ESUI_0_4.zip)

There is a Security-only Update for those with Win7 ESU subscriptions.
There is a 2024-09 IE11 CU for Win7 ESU subscriptions.
2024-09 Rollup KB5043129 Download 32-bit or 64-bit for those with Win7 ESU subscriptions.

******  Note changes to SSU requirements:
You must have at least the September 2022 Servicing Stack KB5017397 previously installed to receive these updates – Download 32-bit or 64-bit  for those with Win7 ESU subscriptions.
There is a new Servicing Stack for Win7 released June 11 2024.
2024-06 Servicing Stack KB5039339 – Download 32-bit or 64-bit.

There are .NET Framework updates listed for Win7. See #2702744.

****** NOTE: ********
Microsoft has released a new ESU Licensing Preparation Package KB5016892 for the extension of Win7/Windows Server 2008 R2 SP1 ESU on Aug 25, 2022. Requires SHA-2 KB4474419 (9/23/2019 or later) and SSU KB4490628 (3/12/2019).

 

******* Win8.1 (using Server 2012 R2 x64 updates) *******
(Requires installer W81ESUI_0_1.zip)
Note changes: Windows 8.1 Embedded support ended in July. There are only Server 2012 R2 x64 (64-bit) updates available. ESU license (or bypass) is required for Win 8.1 x64 to install Server 2012 R2 updates manually.

There is no a Security-only Update for Win8.1 ESU subscriptions.
There is a 2024-09 IE11 CU for Win8.1 ESU subscriptions.
2024-09 Rollup KB5043138 Download 64-bit only for Win8.1 ESU.

******  Note changes to SSU requirements:
You must have at least the February 2023 Servicing Stack KB5022922 installed to receive these updates –  Download 32-bit or 64-bit.
There is a new Servicing Stack for Win8.1 released September 10, 2024.
2024-09 Servicing Stack KB5044410 – Download 64-bit only for Win8.1 ESU.

There are .NET Framework updates listed for Win8.1. See #2702744.

****** NOTE: ********
Microsoft has released a new ESU Licensing Preparation Package KB5017220 for the extension of Win8.1/Windows Server 2012 R2 ESU on Aug. 24, 2022.

14 users thanked author for this post.

TaskForce141, jburk07, Steve, Moonbear, j896, JD, maisy2, SteveIT, Pim, George1, rick41, abbodi86, Sueska, SueW

Reply | Quote

Here’s your .NET Framework for September 10, 2024.

Download only the update for the version(s) installed on your PC.
There were NO 2024-09 (Sep) Security or Security-only updates for .NET Framework

13 users thanked author for this post.

TaskForce141, jburk07, Steve, Moonbear, j896, JD, maisy2, SteveIT, Pim, George1, rick41, Sueska, SueW

Reply | Quote

Updated this morning after the uneventful (at least here) passage of hurricane Francine last night:

x2 Win8.1 Pro running in Parallels VMs on Intel Macs:

Turned off A/V
MSRT using Windows Update
2024-09 SSU KB504410
Restart
Turned off A/V again
2024-09 Quality Rollup KB5043138 (contains Sep CU for IE11)
No 2024-09 .NET Framework updates

No problems so far.

3 users thanked author for this post.

jburk07, j896, abbodi86

Reply | Quote

DEFCON-4.  Time to install September updates.

Used DOTNETFX4 to install

There are NO .NET updates for September.

Used W7ESUI to install

Windows 7 Monthly Rollup – KB5043129

Installed these updates on two Win 7,  SP 1,  x64 machines.

Thanks to abbodi86 and PKCano for making this possible.

4 users thanked author for this post.

TaskForce141, jburk07, SteveIT, SueW

Reply | Quote

Installed September 2024 updates using W7ESUI_0.4:

KB5043129 – Security Monthly Quality Rollup for Windows 7 Embedded

Installed Windows Malicious Software Removal Tool (v5.128) using Windows Update.

Updates successful on one Dell desktop, and one HP laptop. Thanks to abbodi86 and PKCano for your support!

4 users thanked author for this post.

TaskForce141, jburk07, George1, SueW

Reply | Quote

AKB 2000003 has been updated for Group B Win7 (ESU) and Win8.1 on  October 8, 2024.
****** Note Changes: The updates are for Win7 Embedded Standard and Server 2012 R2 x64. W7ESUI or BypassESU will work for Win7 installation. Updates for Win8.1 require W81ESUI_0_1

***** Win7 (using Win7 Embedded Standard updates) *****
(Download revised installer v.4 W7ESUI_0_4.zip)

There is a Security-only Update for those with Win7 ESU subscriptions.
There is a 2024-10 IE11 CU for Win7 ESU subscriptions.
2024-10 Rollup KB5044356 Download 32-bit or 64-bit for those with Win7 ESU subscriptions.

******  Note changes to SSU requirements:
You must have at least the September 2022 Servicing Stack KB5017397 previously installed to receive these updates – Download 32-bit or 64-bit  for those with Win7 ESU subscriptions.
There is a new Servicing Stack for Win7 released June 11 2024.
2024-06 Servicing Stack KB5039339 – Download 32-bit or 64-bit.

There are .NET Framework updates listed for Win7. See #2708829.

****** NOTE: ********
Microsoft has released a new ESU Licensing Preparation Package KB5016892 for the extension of Win7/Windows Server 2008 R2 SP1 ESU on Aug 25, 2022. Requires SHA-2 KB4474419 (9/23/2019 or later) and SSU KB4490628 (3/12/2019).

 

******* Win8.1 (using Server 2012 R2 x64 updates) *******
(Requires installer W81ESUI_0_1.zip)
Note changes: Windows 8.1 Embedded support ended in July. There are only Server 2012 R2 x64 (64-bit) updates available. ESU license (or bypass) is required for Win 8.1 x64 to install Server 2012 R2 updates manually.

There is no Security-only Update for Win8.1 ESU subscriptions.
There is a 2024-10 IE11 CU for Win8.1 ESU subscriptions.
2024-10 Rollup KB5044343 Download 64-bit only for Win8.1 ESU.

******  Note changes to SSU requirements:
You must have at least the February 2023 Servicing Stack KB5022922 installed to receive these updates –  Download 32-bit or 64-bit.
There is a new Servicing Stack for Win8.1 released October 8, 2024.
2024-10 Servicing Stack KB5044411 – Download 64-bit only for Win8.1 ESU.

There are .NET Framework updates listed for Win8.1. See #2708829.

****** NOTE: ********
Microsoft has released a new ESU Licensing Preparation Package KB5017220 for the extension of Win8.1/Windows Server 2012 R2 ESU on Aug. 24, 2022.

 

11 users thanked author for this post.

Steve, TaskForce141, JD, SteveIT, maisy2, abbodi86, heard, rick41, jburk07, George1, SueW

Reply | Quote

Here’s your .NET Framework for October 8, 2024.

Download only the update for the version(s) installed on your PC.
There were/no 2024-10 (Oct) Security-only updates for .NET Framework

***** Using Win7 Embedded Standard *****  (Requires dotNetFx4_ESU_Installer_u) for .NET4.
(A link for this installer has also been added to the top post in this thread)

2024-10 .NET Quality Rollup KB5044095
.NET 3.5.1 KB5044011
.NET 4.5.2 N/A
.NET 4.6 – 4.7.2 KB5044019
.NET 4.8 KB5044027

2024-10 .NET Security-only Rollup KB5044085
.NET 3.5.1 KB5043946
.NET 4.5.2 N/A
.NET 4.6 – 4.7.2 KB5043947
.NET 4.8 KB5043948

 

******** Using Server 2012 R2 x64 ******** (Requires installer W81ESUI_0_1.zip)

2024-10 .NET Quality Rollup KB5044097
.NET 3.5 KB5044012
.NET 4.5.2 N/A
.NET 4.6 – 4.7.2 KB5044018
.NET 4.8 KB KB5044026

There were NO 2024-10 (Oct) Security-only updates for .NET Framework

11 users thanked author for this post.

Steve, TaskForce141, JD, SteveIT, maisy2, abbodi86, heard, rick41, jburk07, George1, SueW

Reply | Quote

The Windows 7 rollup has failed to install with a DISM error.

All DISM fix commands return error 87

1 user thanked author for this post.

evets97

Reply | Quote

Ditto on (2) Dell E6230 Win7 Laptops; “Failure To Configure Updates…” -on the ‘Rollup’

Reply | Quote

The links looked OK, but I redid them just in case. Try again, or use the link at the KB# and download directly. Let us know if you still have a problem.

Reply | Quote

Downloaded KB5044356-x64 ‘Rollup’ again directly from the MUC and ran it again-NoGo! Additionally tried the .NET 4.8 Q&S Rollup and that failed as well…

PS: Thanks for all the work you and others have devoted to this project!

1 user thanked author for this post.

heard

Reply | Quote

In my case I was able to update to the October .NET 4.8 Quality Rollup without a problem.

But the Windows 7 October Rollup is still failing to install after multiple tries and re-downloads from the MUC.

error:  0x800f0900

DISM failed

Reply | Quote

This is what @abbodi86 said:

Hi,
it seems the user specific issue

it install fine for me
others users too

Suggest you turn off any A/V or other scanning software and use an Admin ID. Be sure you have the right bittage (32 or 64) and that the updates are in the same folder as the script. (see instructions above and in post at top of thread)

32-bit worked for @EricB

Reply | Quote

Win7 32-bit VM successfully updated with October roll-up for Windows (KB5044356) and .Net Framework Quality roll-ups for 3.5.1 (KB5044011) and 4.8 (KB5044027).

2 users thanked author for this post.

TaskForce141, heard

Reply | Quote

@PKCano
The October Win7 Rollup still failing on:

bare metal machine, 64 bit, A/V off, under Admin ID, updates and the script in the same folder.

Also cleared  the c:/windows/softwaredistribution folder as per @Microfix suggestions in other threads – no change.

Will wait for more reports of the successful installs and then probably re-install Windows.

Reply | Quote

Win 7 32-bit, successfully installed:

• KB5044011 (.Net)
• KB5044356

Thanks to @abbodi86 et al for your work on this.

 

Reply | Quote

One last question – do you have the right bittage? There are 32 and 64 bit updates.

Reply | Quote

@PKCano

That’s right, I always double check for correct bittage: 64-bit in my case.

Reply | Quote

@heard, Have you tried the usual remedies to scan for and correct corruption using sfc and dism?

Reply | Quote

@EricB

Yes, tried them all multiple times.

sfc /scannow – no problems found

DISM:

ScanHealth – completes:  the log file shows hundreds of missing files. No idea how to fix those manually without re-installing Windows.

CheckHealth and RestoreHealth – refuse to run: error 87

Reply | Quote

Updated today 10/12/24:

x2 Win8.1 Pro running in Parallels VMs on Intel Macs:

Turned off A/V
MSRT using Windows Update
2024-10 SSU KB5044411
Restart
Turned off A/V again
2024-10 .NET Framework 3.5 KB5044012
2024-10 .NET Framework 4.8 KB5044026
2024-10 Quality Rollup KB5044343 (contains Oct CU for IE11)

No double restarts. Short time between the 30% restart and login.
Letting them stew for an hour or so to complete the installation before cleaning up.
No problems so far.

2 users thanked author for this post.

abbodi86, maisy2

Reply | Quote

All Oct updates (5044356, 5044011, 5044019) installed without issue.

There was a double restart, but nothing else of note.

6 users thanked author for this post.

abbodi86, TaskForce141, SteveIT, maisy2, George1, rick41

Reply | Quote

DEFCON-4.  Time to install October updates.

Used DOTNETFX4 to install

.NET 4.8 Update – KB5044027

Used W7ESUI to install

.NET 3.5.1 Update – KB5044011

Windows 7 Monthly Rollup – KB5044356

Installed these updates on two Win 7,  SP 1,  x64 machines.

Thanks to abbodi86 and PKCano for making this possible.

5 users thanked author for this post.

abbodi86, TaskForce141, SueW, SteveIT, maisy2

Reply | Quote

Installed October 2024 updates using W7ESUI_0.4:

KB5044011 – Security and Quality Rollup for .NET Framework 3.5.1
KB5044356 – Security Monthly Quality Rollup for Windows 7 Embedded

Installed October 2024 updates using dotNetFx4_ESU_Installer_u:

KB5044019 – Security and Quality Rollup for .NET Framework 4.6.2

Installed Windows Malicious Software Removal Tool (v5.129) using Windows Update.

Updates successful on one Dell desktop, and one HP laptop (second reboot at 100% on HP). Thanks to abbodi86 and PKCano for your support!

4 users thanked author for this post.

Steve, abbodi86, George1, SueW

Reply | Quote

New version of dotNetFx4_ESU_Installer, that mimic Server 2008 R2 for installation

https://github.com/abbodi1406/WHD/raw/master/scripts/dotNetFx4_ESU_Installer_v4.zip

the previous version mimic Windows 7 Embedded POSReady 7, which most likely will not work beyond 2024-10
if it continue to work, then either can be used

9 users thanked author for this post.

Steve, George1, Guest, rick41, maisy2, PKCano, SteveIT, zat_so, SueW

Reply | Quote

My anti-virus program (AVG) flags the msiesu64.dll file in dotNetFx4_ESU_Installer_v4.zip as infected with Win64:Evo-gen [Trj] but passes the msiesu64.dll file in dotNetFx4_ESU_Installer_u.zip as clean.

Is that a problem or a false positive?

Reply | Quote

false positive
both are the same code

1 user thanked author for this post.

Guest

Reply | Quote

AKB 2000003 has been updated for Group B Win7 (ESU) and Win8.1 on  Nov. 12, 2024.
****** Note Changes: The updates are for Server 2008 R2 x64 and Server 2012 R2 x64. W7ESUI or BypassESU will work for Win7 installation. Updates for Win8.1 require W81ESUI_0_1

***** Win7 (using Server 2008 R2 x64 updates) *****
(Download revised installer v.4 W7ESUI_0_4.zip)

There is only a 64-bit Security-only Update for those with Win7 ESU subscriptions.
There is only a 64-bit 2024-11 IE11 CU for Win7 ESU subscriptions.
2024-11 Rollup KB5046687 Download 64-bit only for those with Win7 ESU subscriptions.

******  Note changes to SSU requirements:
You must have at least the September 2022 Servicing Stack KB5017397 previously installed to receive these updates – Download 32-bit or 64-bit  for those with Win7 ESU subscriptions.
There is a new Servicing Stack for Win7 released June 11 2024.
2024-06 Servicing Stack KB5039339 – Download 32-bit or 64-bit.

There are .NET Framework updates listed for Win7. See #2716924.

****** NOTE: ********
Microsoft has released a new ESU Licensing Preparation Package KB5016892 for the extension of Win7/Windows Server 2008 R2 SP1 ESU on Aug 25, 2022. Requires SHA-2 KB4474419 (9/23/2019 or later) and SSU KB4490628 (3/12/2019).

 

******* Win8.1 (using Server 2012 R2 x64 updates) *******
(Requires installer W81ESUI_0_1.zip)
Note changes: Windows 8.1 Embedded support ended in July. There are only Server 2012 R2 x64 (64-bit) updates available. ESU license (or bypass) is required for Win 8.1 x64 to install Server 2012 R2 updates manually.

There is no Security-only Update for Win8.1 ESU subscriptions.
There is a 2024-11 IE11 CU for Win8.1 ESU subscriptions.
2024-11 Rollup KB5046682 Download 64-bit only for Win8.1 ESU.

******  Note changes to SSU requirements:
You must have at least the February 2023 Servicing Stack KB5022922 installed to receive these updates –  Download 32-bit or 64-bit.
There is a new Servicing Stack for Win8.1 released October 8, 2024.
2024-10 Servicing Stack KB5044411 – Download 64-bit only for Win8.1 ESU.

There are .NET Framework updates listed for Win8.1. See #2716924.

****** NOTE: ********
Microsoft has released a new ESU Licensing Preparation Package KB5017220 for the extension of Win8.1/Windows Server 2012 R2 ESU on Aug. 24, 2022.

 

9 users thanked author for this post.

Steve, Guest, Pim, rick41, maisy2, George1, SteveIT, abbodi86, SueW

Reply | Quote

Here’s your .NET Framework for November 12, 2024.

Download only the update for the version(s) installed on your PC.
There were no 2024-11 (Nov) Security-only updates for .NET Framework.

***** Attention: See @abbodi86 ‘s post #2716885 above. *****
New version of dotNetFx4_ESU_Installer, that mimics Server 2008 R2 for installation. The previous version mimics Windows 7 Embedded POSReady 7, which most likely will not work beyond 2024-10 If it continues to work, then either can be used.

****Win7 Using Server 2008 R2 x64  ********* (Requires installer dotNetFx4_ESU_Installer_v4.zip) for .NET4.

2024-11 .NET Quality Rollup 64-bit only KB5046543
.NET 3.5.1 N/A
.NET 4.5.2 N/A
.NET 4.6 – 4.7.2 KB5046261
.NET 4.8 KB5046258

There were NO 2024-11 (Nov) Security-only updates for .NET Framework

****Win8.1 Using Server 2012 R2 x64 ****** (Requires installer W81ESUI_0_1.zip)

2024-11 .NET Quality Rollup KB5046545
.NET 3.5 KB5044012 (Oct)
.NET 4.5.2 N/A
.NET 4.6 – 4.7.2 KB5046263
.NET 4.8 KB KB5046260

There were NO 2024-11 (Nov) Security-only updates for .NET Framework

 

9 users thanked author for this post.

JD, Guest, Pim, rick41, maisy2, George1, SteveIT, abbodi86, SueW

Reply | Quote

Note: The top post in this thread has been revised to reflect the new installer  dotNetFx4_ESU_Installer_v4  required for .NET 4.x Framework installations on Win7.

There are only 64-bit updates available for Win7 using Server 2008 R2 updates.

8 users thanked author for this post.

Steve, Guest, Pim, rick41, maisy2, George1, SteveIT, SueW

Reply | Quote

I just checked, and it will not work 🙂

dotNetFx4_ESU_Installer_v4 is needed

8 users thanked author for this post.

Steve, Guest, rick41, maisy2, George1, SteveIT, SueW, PKCano

Reply | Quote

I tried downloading the dotNetFx4_ESU_Installer_v4, but got an error. It looks like the file is not in the directory indicated in the link. Was it removed, or am I mistaken? Thanks!

 

Reply | Quote

The link in #2716924 works. Which. one did you use?

2 users thanked author for this post.

abbodi86, zat_so

Reply | Quote

I tried both of them. It turns out, however, that Avast was blocking the URL. (I don’t know why it didn’t alert me before.) I turned it off for 10 minutes and was able to download the ZIP file. Thanks for confirming the link is good.

Reply | Quote

Why do you say N/A for Win7 .NET 3.5.1?  Why shouldn’t KB5046543 be used?

Reply | Quote

KB5046543 is the 2024-11 Rollup for .Net Framework. It contains the updates K5046261 for .Net 4.6-4.7.2 and KB5046258 for .Net 4.8. It does not contain a new update for .NET 3.5.1

If you try to download KB5046543, you are going to get a surprise, because it is not one update.

2 users thanked author for this post.

George1, abbodi86

Reply | Quote

PKCano and abbodi86, many thanks for once again coming up with workarounds to continue applying Win7 updates as of this month (11-2024).

Just want to double check one thing:  There is NOT a need need to switch to a new version of W7ESUI this month.  Right?

EDIT:  I probably should’ve posted this a bit further down.

1 user thanked author for this post.

Guest

Reply | Quote

W7ESUI still works

5 users thanked author for this post.

Steve, George1, rick41, SteveIT, Guest

Reply | Quote

No idea why it would be related but I have been having consistent tab crashes in Firefox starting immediately after installing KB5046705 and KB5046630.

Can’t recall having a single one in the last decade but a half a dozen in the last few hours.  No other changes in the time frame around this period.

Reply | Quote

Have you changed to the 115 ESR version of Firefox? Main stream Firefox is no longer supported on Win7/8/8.1.

1 user thanked author for this post.

Guest

Reply | Quote

Yes.  Firefox 115.17.0 ESR.  Like you said, 115 ESR has been the only supported Firefox version for W7 for about a year now.

Just found this thread, https://forums.mydigitallife.net/threads/bypass-windows-7-extended-security-updates-eligibility.80606/page-412, which mentions others having issues with KB5046705 and older browsers no longer working.

4 users thanked author for this post.

Microfix, rick41, SteveIT, PKCano

Reply | Quote

Yes, it’s issue with update itself
maybe not tested for “Client” compatibility, or intentional 😀

3 users thanked author for this post.

rick41, SteveIT, George1

Reply | Quote

There are multiple reports of KB5046687/KB5046705 breaking browsers (See Don’t Install KB5046687/KB5046705).

As abbodi86 indicated, this may be a bug or it may be intentional. Will need to hold off applying updates if this issue is not resolved.

2 users thanked author for this post.

rick41, George1

Reply | Quote

If this isn’t remedied with the December SMQR, looks like I’ll either end up switching to SO as of December; using 0Patch (which says they will support Win7 through at least Jan 2026); or just stop patching my Win7 machine.

1 user thanked author for this post.

George1

Reply | Quote

Unfortunately, as noted upstream, SO [KB5046705] also breaks Firefox 115.17.0 ESR. 🙁

Win 7 SP1 Home Premium 64-bit; Office 2010; Group B (SaS); Former 'Tech Weenie'

1 user thanked author for this post.

George1

Reply | Quote

SO and Monthly Rollup had been the same since 2020-08
i.e. each month, whatever new fixes/gliches Rollup have, the same is included with that month SO

3 users thanked author for this post.

rick41, George1, SueW

Reply | Quote

SueW wrote:

Unfortunately, as noted upstream, SO [KB5046705] also breaks Firefox 115.17.0 ESR.

But wouldn’t the fact that the SOs are non-cumulative allow avoiding the November bug, if no November update is applied and only SO are applied effective December?  Maybe I’m over-simplifying?

Reply | Quote

@rick41, good question! It may, although I’d want to wait to see if the bug gets corrected and the November updates are re-issued first. Another reason to wait before installing the latest updates.

Win 7 SP1 Home Premium 64-bit; Office 2010; Group B (SaS); Former 'Tech Weenie'

1 user thanked author for this post.

rick41

Reply | Quote

So, is my understanding correct that there are no more Win 7 embedded updates? And if you install the Server 2008 R2 update it breaks older browsers? That’s a shame but it was a good run, i can’t see Microsoft having any intention of resolving this going forward. I’d be curious to know if installing the Net Framework updates also causes unintended consequences.

Reply | Quote

Win 7 embedded updates and Server 2008 R2 updates had been always the same binaries

nothing changed in the update structure this month, it just cause a bug

4 users thanked author for this post.

rick41, George1, SteveIT, T

Reply | Quote

Yes, i am aware they are fundamentally the same and i learnt that mainly from you and reading this site for several years. What confused me is that up until last month there were separate updates for Windows Embedded Standard but as of this month those have disappeared. I just don’t think Microsoft have any intention of fixing this and looking at the comments on My Digital Life it does appear to be fixable.

Reply | Quote

So I was looking at that Don’t Install KB5046687/KB5046705 link and it appeared there were no problems with 8.1 with the updates. I’m holding off until the go ahead to install the November updates but is it safe to say that Firefox ESR isn’t crashing on Win 8.1?  Thank you.

Win 10 ver. 22H2 x64

1 user thanked author for this post.

maisy2

Reply | Quote

Just installed November updates on two Win8.1 Pro in Parallels VMs on Intel Macs (2017 iMac4K Haswell i7 and 2012 MacBookPro Ivy Bridge i7) 11/15/24.

Turned off TrendMicro A/V
MSRT
2024-11 KB5046260 .NET 4.8
2024-11 KB5046682 Security Quality Rollup for Win8.1 (contains Nov CU for IE11)

Updates installed normally.
Running Firefox 115.17esr. Fooled around for about 15 minutes on the Internet with no tab crashes or other oddities.
Waterfox G6.0.20 is another matter. It will no longer update. Looking for a secondary browser to replace it.

 

8 users thanked author for this post.

Steve, rick41, abbodi86, George1, SteveIT, maisy2, T, JD

Reply | Quote

Installed KB5046260 (Net4.8) followed by KB5046682 SMQR (CU) on the Win8.1/R2 Hybrid, haswell hardware installation.
No adverse effects on post update checks.
Firefox-esr 115.17 chugs along nicely when browsing.
All followed up with a sfc (no violations) and DISM componentstore cleanup.

If debian is good enough for NASA...

3 users thanked author for this post.

Steve, George1, abbodi86

Reply | Quote

JD wrote:

So I was looking at that Don’t Install KB5046687/KB5046705 link and it appeared there were no problems with 8.1 with the updates. I’m holding off until the go ahead to install the November updates but is it safe to say that Firefox ESR isn’t crashing on Win 8.1?  Thank you.

Installed Win 8.1 .Net and the SMQR updates and my Firefox 115.18.0 ESR browser is working fine with no tab crashes or other issues. 🙂

Win 10 ver. 22H2 x64

Reply | Quote

Is the final word that Rollup KDB5046687 will cause problems with Firefox if installed on win7 sp1 x64 machines and therefore should be bypassed for November?

What about .NET 4.8?  Can KB5046258 be safely  installed on these machines?

 

2 users thanked author for this post.

SteveIT, rick41

Reply | Quote

George1, my computer is Win7 SP1 x64 with Firefox 115.18.0esr installed. After updating with KB5046630, KB5046705, and KB5046258 (.NET 4.8), Firefox tabs constantly crashed. I uninstalled KB5046705 only, and Firefox is now fine.

 

4 users thanked author for this post.

George1, rick41, SteveIT, SueW

Reply | Quote

zat_so,

It has been noted many times above starting,  with #2717204,  that KB5046705 breaks Firefox 115.17.  Thank you for letting us know KB5046705 breaks Firefox 115.18 also.

I am curious about your updates to IE.  I have always been advised to not use it because it is very susceptible to malware attacks.

 

Reply | Quote

.NET 4.8 KB5046258 is safe, but it’s quality update not security

1 user thanked author for this post.

George1

Reply | Quote

DEFCON-4.  Time to install November updates.

Used DOTNETFX4 to install

.NET 4.8 Update – KB5046258

Used W7ESUI to install

Hold off applying November Windows 7 Monthly Rollup due to problems noted in above posts.

Installed these updates on two Win 7,  SP 1,  x64 machines.

Thanks to abbodi86 and PKCano for making this possible.

3 users thanked author for this post.

rick41, SteveIT, SueW

Reply | Quote

George1 wrote:

I am curious about your updates to IE. I have always been advised to not use it because it is very susceptible to malware attacks.

If by this paragraph you are asking if I use IE, the answer is no. But my understanding is that it is so intertwined in the guts of Windows pre-10, it still needs to be patched.

2 users thanked author for this post.

George1, SueW

Reply | Quote

zat_so wrote:

If by this paragraph you are asking if I use IE, the answer is no. But my understanding is that it is so intertwined in the guts of Windows pre-10, it still needs to be patched.

You are correct on both counts.

1. I made a false assumption wrt you using IE.
2. I agree IE is used by much of win7 and should be kept up to date.  However,  I have no idea how to find them.  (I installed KB5046630 thanks to you mentioning it in your post.)

Reply | Quote

@George1, by definition, the monthly Rollup updates include IE11, whereas the monthly Security Only updates do not (we have to install IE11 separately each month).

To your 2nd point: normally, you wouldn’t need to find the IE updates as you install the Rollups each month. However, since November’s updates for Win 7/Server 2008 R2 [Rollup KB5046687 and SO KB5046705] have “issues” and are not being installed by some of us, it was good that you went ahead and installed IE separately.

By the way, if you ever need to find the current IE CU, @PKCano always includes the link to “AKB 2000003” in her post on the second Tuesday of each month. Just scroll down that page for the current month.

Win 7 SP1 Home Premium 64-bit; Office 2010; Group B (SaS); Former 'Tech Weenie'

6 users thanked author for this post.

Moonbear, Pim, abbodi86, rick41, George1, Microfix

Reply | Quote

I was made aware of this once before but I forgot the monthly Rollup updates include IE11.  Thanks for reminding me.

Since I planned to stay “Group A” (the easy way) and never use “Group B” Security-only updates I never looked at AKB 2000003.  Good to know  IE CUs are there if we ever again run into a situation like we did this month.  If we do  I hope I remember where to find the IE CUs, Thanks for this information.

1 user thanked author for this post.

SueW

Reply | Quote

This snag seemingly only affects Windows 8.1 ESU, but since there is virtually no new content on that rubric, I will remark here.
On 29 November 2024, Bleeping Computer reported on a zero-day flaw affecting Windows Server 2012 R2.
The article mentions it was first introduced to Windows Server 2012 over two years ago, yet remained undetected or unfixed until [today].
0Patch has uploaded its unofficial patches to its World-Wide Web site.
I query if there will be an emergency patch for those using abbodi86’s procedure? `

Important links you can use, without the monetization pitch = https://pqrs-ltd.xyz/bookmark4.html

2 users thanked author for this post.

abbodi86, PKCano

Reply | Quote

Are there issues with switching from the .NET quality rollups to the security only updates?

Reply | Quote

Rollup updates are cumulative, so you get all of the past updates every time you patch. Beside security fixes, they can include non-security fixes as well as new enhancements.

The Security-only patches are unique, each is a one-time update (not cumulative). Next month’s is different. And they only include security fixes.

 

2 users thanked author for this post.

George1, Moonbear

Reply | Quote

AKB 2000003 has been updated for Group B Win7 (ESU) and Win8.1 on  December 10, 2024.
****** Note Changes: The updates are for Server 2008 R2 x64 and Server 2012 R2 x64. W7ESUI or BypassESU will work for Win7 installation. Updates for Win8.1 require W81ESUI_0_1

***** Win7 (using Server 2008 R2 x64 updates) *****
(Download revised installer v.4 W7ESUI_0_4.zip)

There is only a 64-bit Security-only Update for those with Win7 ESU subscriptions.
There is no  64-bit 2024-12 IE11 CU for Win7 ESU subscriptions.
2024-12 Rollup KB5048695 Download 64-bit only for those with Win7 ESU subscriptions.

******  Note changes to SSU requirements:
You must have at least the September 2022 Servicing Stack KB5017397 previously installed to receive these updates – Download 32-bit or 64-bit  for those with Win7 ESU subscriptions.
There is a new Servicing Stack for Win7 released June 11 2024.
2024-06 Servicing Stack KB5039339 – Download 32-bit or 64-bit.

There are .NET Framework updates listed for Win7. See #2724429.

****** NOTE: ********
Microsoft has released a new ESU Licensing Preparation Package KB5016892 for the extension of Win7/Windows Server 2008 R2 SP1 ESU on Aug 25, 2022. Requires SHA-2 KB4474419 (9/23/2019 or later) and SSU KB4490628 (3/12/2019).

 

******* Win8.1 (using Server 2012 R2 x64 updates) *******
(Requires installer W81ESUI_0_1.zip)
Note changes: Windows 8.1 Embedded support ended in July. There are only Server 2012 R2 x64 (64-bit) updates available. ESU license (or bypass) is required for Win 8.1 x64 to install Server 2012 R2 updates manually.

There is no Security-only Update for Win8.1 ESU subscriptions.
There is no 2024-12 IE11 CU for Win8.1 ESU subscriptions.
2024-12 Rollup KB5048735 Download 64-bit only for Win8.1 ESU.

******  Note changes to SSU requirements:
You must have at least the February 2023 Servicing Stack KB5022922 installed to receive these updates –  Download 32-bit or 64-bit.
There is a new Servicing Stack for Win8.1 released October 8, 2024.
2024-10 Servicing Stack KB5044411 – Download 64-bit only for Win8.1 ESU.

There are .NET Framework updates listed for Win8.1. See #2724429.

****** NOTE: ********
Microsoft has released a new ESU Licensing Preparation Package KB5017220 for the extension of Win8.1/Windows Server 2012 R2 ESU on Aug. 24, 2022.

 

10 users thanked author for this post.

Steve, JD, rick41, abbodi86, maisy2, George1, Pim, Moonbear, SteveIT, SueW

Reply | Quote

Here’s your .NET Framework for December 10, 2024.

Download only the update for the version(s) installed on your PC.
There were/no 2024-12(Dec) Security-only updates for .NET Framework

***** Attention: See @abbodi86 ‘s post #2716885 above. *****
New version of dotNetFx4_ESU_Installer, that mimics Server 2008 R2 for installation. The previous version mimics Windows 7 Embedded POSReady 7 will not work.

****Win7 Using Server 2008 R2 x64  ********* (Requires installer dotNetFx4_ESU_Installer_v4.zip) for .NET4.

***Win7 Using Windows 7 Embedded ***  (Requires installer dotNetFx4_ESU_Installer_u) for .NET4. (A link for this installer has also been added to the top post in this thread)

There were NO 2024-12 (Dec) Quality Rollups for .NET Framework

There were NO 2024-12 (Dec) Security-only updates for .NET Framework

 

****Win8.1 Using Server 2012 R2 x64 ****** (Requires installer W81ESUI_0_1.zip)

There were NO 2024-12 (Dec) Quality Rollups for .NET Framework

There were NO 2024-12 (Dec) Security-only updates for .NET Framework

 

9 users thanked author for this post.

Steve, JD, j896, rick41, maisy2, George1, Moonbear, SteveIT, SueW

Reply | Quote

Win8.1/ R2 Hybrid (December patch 2024)
(imaged yesterday)
SMQR CU kb5048735 installed.
I did notice a pause during the update at around 92% which progressed to 100% a minute later. Logged in to check, then restarted PC to find..

Sfc: No integrity violations 🙂
Event viewer: Clear of any major errors.
Device Manager: Everything working as intended.
Dism: Present and correct.
Finally purged Winsxs of excess bit-baggage.
Invoked a trim and optimise after a Diskclean ‘as admin’ using sagerun configurations.
Job done, if anything crops up, I’ll update here.

If debian is good enough for NASA...

2 users thanked author for this post.

maisy2, PKCano

Reply | Quote

The Improvements section of KB5048695 indicates the following:

This cumulative security update contains improvements that are part of update KB5046687 (released November 12, 2024). The following is a summary of the key issues that this update addresses. The bold text within the brackets indicates the item or area of the change we are documenting.

• [Web browser] Fixed: A web browser such as the Supremium web browser might crash or not start after installing the November 12, 2024, Windows update KB5046687.

Hopefully testing will verify that the Web browser issue introduced in November has now been Fixed.

5 users thanked author for this post.

rick41, George1, PKCano, Moonbear, SueW

Reply | Quote

Same for KB5048676; we’ll know by the time Susan gives the “all clear” later this month.

Win 7 SP1 Home Premium 64-bit; Office 2010; Group B (SaS); Former 'Tech Weenie'

4 users thanked author for this post.

Moonbear, rick41, George1, SteveIT

Reply | Quote

Just installed December updates on two Win8.1 Pro in Parallels VMs on Intel Macs (2017 iMac4K Haswell i7 and 2012 MacBookPro Ivy Bridge i7) 12/12/24.

Turned off TrendMicro A/V
2024-12 KB5048735 Security Quality Rollup for Win8.1

Both up and running, completing after-update tasks. Still using Firefox esr.

2 users thanked author for this post.

abbodi86, maisy2

Reply | Quote

Any word on Windows 7 Firefox crashes fixed with the December update?

Reply | Quote

See #2724555 from SteveIT.

 

Reply | Quote

The Supermium PSA (Issue #1012) advising not to install November’s updates has now been closed. Testing has shown that December’s updates (KB5048695, etc.) have resolved the issue. See Comment-2532559926 from the Author, among others.

2 users thanked author for this post.

George1, SueW

Reply | Quote

Note:  Comment-2532559926 from the Author also contains a caution “Further tests will be required to see if all software affected by this bug are working.”

1 user thanked author for this post.

SteveIT

Reply | Quote

The final comment from the Author, which was from last week (Comment-2550661904) indicates “So, as it is definitely confirmed that this issue is fixed, I hereby declare this issue closed.”

As I have not installed the December update (KB5048695) myself, I can only contribute that everything I’ve seen so far has indicated that the issue has been resolved. I will be installing KB5048695 once Susan provides the green light.

Reply | Quote

Yes . . . after reading that others had been successful installing both November’s SO (KB5046705) and December’s SO (KB5048676) Updates for Windows Server 2008 R2 earlier this month, I decided to install December’s updates a little earlier than Susan’s usual MS-DEFCON Notice. I downloaded November’s and then December’s into the W7ESUI folder and then ran the script.

Great news — success! And those of you who install the monthly Rollup only need to install December’s Rollup (KB5048695) as it’s cumulative.

By the way, there is no MSRT update for December.

Looks like we’re back in business! Many thanks to @abbodi86 and to @PKCano!

Win 7 SP1 Home Premium 64-bit; Office 2010; Group B (SaS); Former 'Tech Weenie'

3 users thanked author for this post.

rick41, George1, SteveIT

Reply | Quote

So far so good with Nov/Dec W7 updates and Firefox ESR 115.18.0.

Thanks to everyone involved with this. Any additional days I don’t have to deal with Windows 10/11 are a blessing.

3 users thanked author for this post.

George1, rick41, SteveIT

Reply | Quote

DEFCON-4.  Time to install December updates.

Used DOTNETFX4 to install

There are NO .NET updates for December.

Used W7ESUI to install

Windows 7 Monthly Rollup – KB5048695

Installed these updates on two Win 7,  SP 1,  x64 machines.

Thanks to abbodi86 and PKCano for making this possible

2 users thanked author for this post.

SteveIT, SueW

Reply | Quote

5046705 & 5048676 installed and system running with no issues.

My system did double restart though, did anyone else have this?

Reply | Quote

Installed December 2024 updates using W7ESUI_0.4:

KB5048695 – Security Monthly Quality Rollup for Server 2008 R2

Installed November 2024 updates using dotNetFx4_ESU_Installer_v4 (did not install any updates in November):

KB5046261 – Rollup for .NET Framework 4.6.2 for Server 2008 R2

No Windows Malicious Software Removal Tool this month.

Updates successful on one Dell desktop and one HP laptop, both computers Windows 7 SP1 x64 (second reboot at 100% on HP). Thanks to abbodi86 and PKCano for your support!

3 users thanked author for this post.

George1, SueW, Moonbear

Reply | Quote

AKB 2000003 has been updated for Group B Win7 (ESU) and Win8.1 on  January 14, 2025.
****** Note Changes: The updates are for Server 2008 R2 x64 and Server 2012 R2 x64. W7ESUI or BypassESU will work for Win7 installation. Updates for Win8.1 require W81ESUI_0_1

***** Win7 (using Server 2008 R2 x64 updates) *****
(Download revised installer v.4 W7ESUI_0_4.zip)

There is a 64-bit Security-only Update for those with Win7 ESU subscriptions.
There is a 64-bit 2025-01 IE11 CU for Win7 ESU subscriptions.
***** URGENT: See #2739943 before/about downloading Rollup.
2025-01 Rollup KB5050049 Download 64-bit only for those with Win7 ESU subscriptions.

******  Note changes to SSU requirements:
You must have at least the September 2022 Servicing Stack KB5017397 previously installed to receive these updates – Download 32-bit or 64-bit  for those with Win7 ESU subscriptions.

NOTE: **** See #2739521 below *****
There is a new Servicing Stack for Win7 released January 14, 2025.
2025-01 Servicing Stack 5050681 – Download 64-bit only

There are .NET Framework updates listed for Win7. See #2739432.

****** NOTE: ********
Microsoft has released a new ESU Licensing Preparation Package KB5016892 for the extension of Win7/Windows Server 2008 R2 SP1 ESU on Aug 25, 2022. Requires SHA-2 KB4474419 (9/23/2019 or later) and SSU KB4490628 (3/12/2019).

 

******* Win8.1 (using Server 2012 R2 x64 updates) *******
(Requires installer W81ESUI_0_1.zip)
Note changes: Windows 8.1 Embedded support ended in July. There are only Server 2012 R2 x64 (64-bit) updates available. ESU license (or bypass) is required for Win 8.1 x64 to install Server 2012 R2 updates manually.

There is no Security-only Update for Win8.1 ESU subscriptions.
There is a 2025-01 IE11 CU for Win8.1 ESU subscriptions.
***** URGENT: See #2739943 before/about downloading Rollup.
2025-01 Rollup KB5050048 Download 64-bit only for Win8.1 ESU.

******  Note changes to SSU requirements:
You must have at least the February 2023 Servicing Stack KB5022922 installed to receive these updates –  Download 32-bit or 64-bit.

NOTE: **** See #2739521 below *****
There is a new Servicing Stack for Win8.1 released January 14, 2025.
2025-01 Servicing Stack KB5050115 – Download 64-bit only for Win8.1 ESU.

There are .NET Framework updates listed for Win8.1. See #2739432.

****** NOTE: ********
Microsoft has released a new ESU Licensing Preparation Package KB5017220 for the extension of Win8.1/Windows Server 2012 R2 ESU on Aug. 24, 2022.

10 users thanked author for this post.

JD, George1, Pim, rick41, abbodi86, Microfix, SteveIT, Steve, Moonbear, SueW

Reply | Quote

Here’s your .NET Framework for January 14, 2025.

Download only the update for the version(s) installed on your PC.
There were/no 2025-01 (Jan) Security-only updates for .NET Framework

***** Attention: See @abbodi86 ‘s post #2716885 above. *****
New version of dotNetFx4_ESU_Installer, that mimics Server 2008 R2 for installation. The previous version mimics Windows 7 Embedded POSReady 7 will not work.

****Win7 Using Server 2008 R2 x64  ********* (Requires installer dotNetFx4_ESU_Installer_v4.zip) for .NET4.

***Win7 Using Windows 7 Embedded ***  (Requires installer dotNetFx4_ESU_Installer_u) for .NET4. (A link for this installer has also been added to the top post in this thread)

***** URGENT: See #2739943 before/about downloading Rollup.
2025-01 .NET Quality Rollup KB5050183
.NET 3.5.1 KB5044011 (10/24)
.NET 4.5.2 N/A
.NET 4.6 – 4.7.2 KB5049611
.NET 4.8 KB5049619

2025-01 .NET Security-only Rollup KB5050180
.NET 3.5.1 N/A
.NET 4.5.2 N/A
.NET 4.6 – 4.7.2 KB5049627
.NET 4.8 KB5049628

 

****Win8.1 Using Server 2012 R2 x64 ****** (Requires installer W81ESUI_0_1.zip)

***** URGENT: See #2739943 before/about downloading Rollup.
2025-01 .NET Quality Rollup KB5050185
.NET 3.5.1 KB5044012 (10/24)
.NET 4.5.2 N/A
.NET 4.6 – 4.7.2 KB5049610
.NET 4.8 KB KB5049618

There were NO 2025-01 (Jan) Security-only updates for .NET Framework

10 users thanked author for this post.

JD, George1, maisy2, Pim, rick41, abbodi86, Microfix, SteveIT, Steve, SueW

Reply | Quote

Server 2008 R2 Rollup KB5050049 and SO KB5050006 explicitly require the new SSU KB5050681 first

Server 2012 R2 Rollup KB5050048 explicitly require the new SSU KB5050115 first

10 users thanked author for this post.

JD, SteveIT, George1, Microfix, maisy2, Pim, Sueska, SueW, rick41, PKCano

Reply | Quote

I’ve always installed the SSU first, then restarted straight after as a matter of preference, before installing .NET then onto the CU last with manual downloads. YMMV
Never had an issue on the Win8.1/R2 hybrid.

If debian is good enough for NASA...

Reply | Quote

There is an MSRT update for January.  It should show up in your windows update folder if it has not already been placed there.

MSRT v5.131 (KB890830) released 1/14/2025.

 

2 users thanked author for this post.

Microfix, maisy2

Reply | Quote

Problem installing 2025 Rollup KB5050048 on Win8.1 Pro in Parallels VM on 2012 MacBookPro Ivy Bridge i7) 12/12/24.
I try this one first as a Guinea pig for my other (more important) Win8.1 installation.

Turned off TrendMicro A/V
Installed MSRT through Windows Update,
2025-01 SSU for Server 2012 R2 (x64) KB5050115
Restarted.
Turned off TrendMicro A/V again
2025-01 Update for .NET Framework 4.8 for Server 2012 R2 (x64) KB5049618
2025-01 Quality Rollup for Server 2012 R2 (x64) KB5050048
Restarted

After the restart, I got the message that some updates failed to install. Looking at the Installed Updates list, both the SSU KB5050115 and the update for .Net 4.8 KB5049618 installed.
I restarted, turned off the A/V again, and tried Rollup KB5050048 again – and got the message that the Standalone Installer failed on error 0x80246002.

Waiting advice from @abbodi86

Reply | Quote

AhHa! I have found the problem! If any of you have downloaded KB5050048 Rollup for Win81 previously or KB5050049 Rollup for Win7, you will need to re-download it as of the morning of  1/16/25.
Update: After further observation it looks like this may also involve the .NET updates if you see a similar popup at download.

See the problem installing I had in the post above.
The original download was SHA-1. This has been corrected by MS as of this morning. There is now a SHA-2 (256) version with the correct verification available. But you have to be careful how you download it (for now).
I have changed the download link it the post above to access the Catalog page and removed the direct download. When you click on the “Download” link on the right side of the Catalog page you will see this popup. Click on “Copy” first, then click on the link for the Rollup. This will change the value to SHA-2 (notice in the description it was SHA-1 originally with a different verification/digital signature). Check after the download that the file is SHA-2. That file should install without error. The screenshot shows  the popup for Win8.1, but the one for Win7 looks the same.

5 users thanked author for this post.

JD, Pim, abbodi86, George1, Microfix

Reply | Quote

For SMQR KB5050049 in Win 7, the SHA value remains unchanged at SHA1 after I click Copy.  Do we know that the same issue you encountered in Win 8 necessarily exists for Win 7 (using Server 2008 R2 x64 updates) this month?

Whether I download KB5050049 with or without clicking Copy first, I note that the resulting download says SHA256 in the Digital Signatures tab of File Properties.

 

1 user thanked author for this post.

SteveIT

Reply | Quote

I thought I followed the instructions word for word.  I tried a couple times.

It’s likely I’m missing something obvious here (especially since I’m unfamiliar with the world of digital signatures), but I’m not sure what you’re referring to now by “at the top under ‘Check’ and the at the bottom under the original.”

Reply | Quote

I take it you mean that after downloading the standalone update .msu files we are good to go if the file properties indicate sha256 as shown here –

2 users thanked author for this post.

Pim, SteveIT

Reply | Quote

I did previously read the posts about clicking the copy button and so forth. However, when following the procedure I did not notice any changes to anything as has been previously described.

Reply | Quote

Could you post a shot of where it says, “Update ID”?  Like @EricB, I see nothing to that effect.  Is it possible that the dialog in Win 8.1 is slightly different that in Win 7?  Or that clicking the Copy button has no effect in Win 7 (at least for these updates)?  When you found something referring to the issue for these updates, was it specifically about Win 8.1, or was Win 7 referenced?

While I would normally wait until Susan’s MS-Defcon 3, later today I’ll give the Win 7 SMQR a try on a computer I don’t use very often, and report back.

Reply | Quote

We’re not being argumentative.  We simply don’t see what has been described.  For example, following are images of the download dialog before and after clicking the Copy button.  I don’t see any differences between them with respect to the Update Id or anything else.

Before clicking Copy-

After clicking Copy-

Reply | Quote

Well, in any event I just tested, and the Win 7 SMQR (using Server 2008 R2 x64 updates) KB5050049 downloaded and installed OK with no modification required.  So either MS has fixed it, or the problem only applies to 8.1 (using Server 2012 R2 x64 updates).  Will provide more detail after I do the dotNET 4.8 update.

 

2 users thanked author for this post.

SteveIT, George1

Reply | Quote

While the Win 7 SMQR went fine, the dotNET 4.8 Quality Rollup KB5049619 install failed in minutes with code 1603.  I tried several times, including re-downloading it.  Unless I later see reports of it being installed OK (thus suggesting there’s been a fix) I’m inclined to just skip it this month as a lower priority than the Win 7 SMQR.

Instead of doing a separate summary post, I’ll just add here that I already did the SSU update a few days ago.

EDIT:  It looks like I might not have the latest version of the dotNET installer on that infrequently-used machine.  I’m going to retry shorty ensuring I have the latest version of the installer.

EDIT2:  Before the edit window closes, I want to add that it looks like the issue installing the dotNET update may be due to a new free antivirus added to this machine.

 

Reply | Quote

Yep, it looks like there were “just” some convoluted issues I had to work through with the new AV.  After that, the dotNET 4.8 Quality Rollup KB5049619 for Win 7 embedded installed fine as well.

Reply | Quote

Win8.1/R2 hybrid report:
January 2025 patches went in without issue on the haswell system.
(non-VM, ‘bare metal’ installation)

In order of introduction..
SSU – kb5050115 (manually restarted)
.NET4.8 – kb5049618
SMQR CU – kb5050048

No Resmon issues flagged up during installation or thereafter within
Event Viewer logs, SFC integrity or DISM health checks. All good 🙂

If debian is good enough for NASA...

1 user thanked author for this post.

maisy2

Reply | Quote

Updating the second Win8.1 installation with the re-downloaded Rollup went without a hitch.
Whew!

Turned off TrendMicro A/V
Installed MSRT through Windows Update,
2025-01 SSU for Server 2012 R2 (x64) KB5050115
Restarted.
Turned off TrendMicro A/V again
2025-01 Update for .NET Framework 4.8 for Server 2012 R2 (x64) KB5049618
2025-01 Quality Rollup for Server 2012 R2 (x64) KB5050048
Restarted

Checked installation in Control Panel – all good.

2 users thanked author for this post.

maisy2, abbodi86

Reply | Quote

Summarizing what I wrote in bits and pieces above, here is how I proceeded with the Win 7 updates (on a less-frequently-used machine, for test purposes) :

1. Installed 2025-01 Servicing Stack 2025-01 Servicing Stack KB5050681 a few days ago, using installer v.4 W7ESUI_0_4.  Then, today:
2. Downloaded (without any interventions) and installed 2025-01 Rollup KB5050049 (for Server 2008 R2 x64), using v.4 W7ESUI_0_4.  Restarted.
3. Downloaded and installed 2025-01 dotNET 4.8 Quality Rollup KB5049619 (for Windows Embedded 7), using W7ESUI.  Restarted. (Initial failures turned out to be caused by interventions by my new AV, now solved.)
4. Ran MSRT via Windows Update.

3 users thanked author for this post.

SteveIT, Pim, abbodi86

Reply | Quote

CORRECTION:  The dotNET 4.8 Quality Rollup was installed using the latest version of the dotNetFx4 installer

 

Reply | Quote

CORRECTION #2, again re dotNET 4.8:   As with the SMQR, the update used is for Server 2008 R2 x64.  This and the last correction were probably obvious, but I didn’t want to leave even a little doubt. 🙂

BTW, I haven’t noticed any issues since the updates, although I don’t use that computer much.

 

Reply | Quote

DEFCON-4.  Time to install January updates.

Used DOTNETFX4 to install

.NET 4.8 Update – KB5049619

Used W7ESUI to install

Servicing Stack Update – KB5050681

Windows 7 Monthly Rollup – KB5050049

Installed these updates on two Win 7,  SP 1,  x64 machines.

Thanks to abbodi86 and PKCano for making this possible.

 

2 users thanked author for this post.

SteveIT, SueW

Reply | Quote

Verified Digital Signatures of all updates indicate sha256 for Digest algorithm. Installed the SSU and restarted before installing the SMQR, as per abbodi86’s post (#2739521) above.

Installed January 2025 updates using W7ESUI_0.4:

KB5050681 – Servicing Stack Update for Server 2008 R2
KB5050049 – Security Monthly Quality Rollup for Server 2008 R2

Installed January 2025 updates using dotNetFx4_ESU_Installer_v4:

KB5049611 – Rollup for .NET Framework 4.6.2 for Server 2008 R2

Installed Windows Malicious Software Removal Tool (v5.131) using Windows Update.

Updates successful on one Dell desktop and one HP laptop, both computers Windows 7 SP1 x64. Thanks to abbodi86 and PKCano for your support!

2 users thanked author for this post.

George1, SueW

Reply | Quote

AKB 2000003 has been updated for Group B Win7 (ESU) and Win8.1 on  February 11, 2025.
****** Note Changes: The updates are for Server 2008 R2 x64 and Server 2012 R2 x64. W7ESUI or BypassESU will work for Win7 installation. Updates for Win8.1 require W81ESUI_0_1

***** Win7 (using Server 2008 R2 x64 updates) *****
(Download revised installer v.4 W7ESUI_0_4.zip)

There is only a 64-bit Security-only Update for those with Win7 ESU subscriptions.
There is only a 64-bit 2025-02 IE11 CU for Win7 ESU subscriptions.
2025-02 Rollup KB5052016 Download 64-bit only for those with Win7 ESU subscriptions.

******  Note changes to SSU requirements:
You must have at least the September 2022 Servicing Stack KB5017397 previously installed to receive these updates – Download 32-bit or 64-bit  for those with Win7 ESU subscriptions.

There is a new Servicing Stack for Win7 released January 14, 2025.
2025-01 Servicing Stack 5050681 – Download 64-bit only

There are .NET Framework updates listed for Win7. See #2747431.

****** NOTE: ********
Microsoft has released a new ESU Licensing Preparation Package KB5016892 for the extension of Win7/Windows Server 2008 R2 SP1 ESU on Aug 25, 2022. Requires SHA-2 KB4474419 (9/23/2019 or later) and SSU KB4490628 (3/12/2019).

 

******* Win8.1 (using Server 2012 R2 x64 updates) *******
(Requires installer W81ESUI_0_1.zip)
Note changes: Windows 8.1 Embedded support ended in July. There are only Server 2012 R2 x64 (64-bit) updates available. ESU license (or bypass) is required for Win 8.1 x64 to install Server 2012 R2 updates manually.

There is no Security-only Update for Win8.1 ESU subscriptions.
There is a 2025-02 IE11 CU for Win8.1 ESU subscriptions.
2025-02 Rollup KB5052042 Download 64-bit only for Win8.1 ESU.

******  Note changes to SSU requirements:
You must have at least the February 2023 Servicing Stack KB5022922 installed to receive these updates –  Download 32-bit or 64-bit.

There is a new Servicing Stack for Win8.1 released February 11, 2025.
2025-02 Servicing Stack KB5052108 – Download 64-bit only for Win8.1 ESU.

There are .NET Framework updates listed for Win8.1. See #2747431.

****** NOTE: ********
Microsoft has released a new ESU Licensing Preparation Package KB5017220 for the extension of Win8.1/Windows Server 2012 R2 ESU on Aug. 24, 2022.

8 users thanked author for this post.

Steve, JD, George1, Pim, rick41, SteveIT, SueW, abbodi86

Reply | Quote

Here’s your .NET Framework for February 11, 2025.

Download only the update for the version(s) installed on your PC.
There were/no 2025-02 (Feb) Security-only updates for .NET Framework

***** Attention: See @abbodi86 ‘s post #2716885 above. *****
New version of dotNetFx4_ESU_Installer, that mimics Server 2008 R2 for installation. The previous version mimics Windows 7 Embedded POSReady 7 will not work.

****Win7 Using Server 2008 R2 x64  ********* (Requires installer dotNetFx4_ESU_Installer_v4.zip) for .NET4.

***Win7 Using Windows 7 Embedded ***  (Requires installer dotNetFx4_ESU_Installer_u) for .NET4. (A link for this installer has also been added to the top post in this thread)

There were NO 2025-02 (Feb) Quality Rollups for .NET Framework

There were NO 2025-02 (Feb) Security-only updates for .NET Framework

****Win8.1 Using Server 2012 R2 x64 ****** (Requires installer W81ESUI_0_1.zip)

There were NO 2025-02 (Feb) Quality Rollups for .NET Framework

There were NO 2025-02 (Feb) Security-only updates for .NET Framework

8 users thanked author for this post.

JD, j896, maisy2, George1, Pim, rick41, SteveIT, SueW

Reply | Quote

******* NOTICE ******** NOTICE: *********

The download box on the MS Catalog looks the same as it did last month, with the “Copy” at the top. See #2739943 for a screenshot’

1 user thanked author for this post.

George1

Reply | Quote

Currently updating the Win8.1/ R2 Hybrid with February’s offerings..
SMQR CU: kb5052042
SSU: kb5052108

Edit 2025-02-11: Update completed normally, no on-the-surface issues..yet?
Edit2 2025-02-13: Not encountered a problem with peripherals plugged in either.
Edit3 2025-02-18: All good for this month 🙂

If debian is good enough for NASA...

1 user thanked author for this post.

maisy2

Reply | Quote

PKCano wrote:

There is a new Servicing Stack for Win7 released February 11, 2025. 2025-02 Servicing Stack 5050631 – Download 64-bit only

The KB5050631 Servicing Stack update is from January 14 not February 11!

5 users thanked author for this post.

George1, rick41, PKCano, SueW, Microfix

Reply | Quote

My messup. The link was to the right place.
So if you downloaded it, you got the right update.
The rest has been corrected.

But the patch is KB5050681 (not 31) and it IS the January 14, 2025 SSU for Win7 (Server 2008 R2).
There is NO NEW SSU for Win7 this month.

4 users thanked author for this post.

George1, rick41, SueW, Microfix

Reply | Quote

Feb SSU KB5052108 is not hard prerequisite (yet), Jan SSU is enough to install KB5052042

2 users thanked author for this post.

rick41, PKCano

Reply | Quote

There is an MSRT update for February.  It should show up in your windows update folder if it has not already been placed there.

MSRT v5.132 (KB890830) released 2/11/2025.

2 users thanked author for this post.

Steve, maisy2

Reply | Quote

Just installed February updates on two Win8.1 Pro in Parallels VMs on Intel Macs (2017 iMac4K Haswell i7 and 2012 MacBookPro Ivy Bridge i7) 2/12/25.

Turned off TrendMicro A/V
Installed MSRT through Windows Update,
2025-01 SSU for Server 2012 R2 (x64) KB5052108
Restarted.
Turned off TrendMicro A/V again
2025-02 KB5052042 Security Quality Rollup for Win8.1

Both up and running, completing after-update tasks. Still using Firefox updated to version 115.20esr.

1 user thanked author for this post.

maisy2

Reply | Quote

Verified Digital Signature of update indicates sha256 for Digest algorithm.

Installed February 2025 update using W7ESUI_0.4:

KB5052016 – Security Monthly Quality Rollup for Server 2008 R2

Installed Windows Malicious Software Removal Tool (v5.132) using Windows Update.

Updates successful on one Dell desktop and one HP laptop, both computers Windows 7 SP1 x64. Thanks to abbodi86 and PKCano for your support!

2 users thanked author for this post.

George1, SueW

Reply | Quote

DEFCON-4.  Time to install February updates.

Used DOTNETFX4 to install

No .NET 4.8 Updates for February

Used W7ESUI to install

Windows 7 Monthly Rollup – KB5052016

Installed these updates on a Win 7,  SP 1,  x64 machine.

Thanks to abbodi86 and PKCano for making this possible.

2 users thanked author for this post.

SueW, SteveIT

Reply | Quote

KB5052032 & KB5051972 both installed smoothly and system is running normally.

3 users thanked author for this post.

George1, abbodi86, SueW

Reply | Quote