Bypass Windows 7 Extended Security Updates Eligibility

Discussion in 'Windows 7' started by abbodi1406, Nov 17, 2019.

Page 151 of 425

Nagivator MDL Novice

Jan 27, 2020

21

11

0
#3001 Nagivator, May 13, 2020
You need to login to view this posts content.
Attached Files:

ndp48-kb4552921-x64_6912af0422fc16a14f4f398fda98117f1e2f01b8.zip

File size:

377 bytes

Views:

159
758gp MDL Novice

Mar 12, 2020

1

0

0

#3002 758gp, May 13, 2020

Thank you. It worked.!!!
aalleexxd MDL Novice

Jan 25, 2020

3

1

0

#3003 aalleexxd, May 13, 2020

It's working for me. Many thanks @vinzf!!!
haz367 MDL Addicted

Jan 11, 2020

805

1,465

30

#3004 haz367, May 13, 2020

vinzf said: ↑

Ok girls, here is the solution:

I've captured the custom action dll from NDP48-KB4552921.msp and analyzed it in IDA.
The custom action dll exports a function ValidateESULicense which initially queries a msi property "ESU_LOCK" and compares it to several values that determine the further path of action.
Long story short, if that value is "2D40812E-974C-4EA2-8DCC-63C992D505B9" the code path logs "ESU Validation is OFF", yay!

So we can override that property via msiexec:

msiexec /p PACKAGENAME.msp /log c:\tmp\log.txt ESU_LOCK=2D40812E-974C-4EA2-8DCC-63C992D505B9

Luckily also the ndp48-kb4552921 installer exe accepts msioptions for the embedded package it ships.

So the final solution to get KB4556399 installed is:

for x86:
ndp48-kb4552921-x86_608b67e4011b9e103ca18deadbfc013d1c328508.exe /msioptions "ESU_LOCK=2D40812E-974C-4EA2-8DCC-63C992D505B9"

for x64:
ndp48-kb4552921-x64_6912af0422fc16a14f4f398fda98117f1e2f01b8.exe /msioptions "ESU_LOCK=2D40812E-974C-4EA2-8DCC-63C992D505B9"

reboot as requested and go to windows updates which still believes that KB4556399 is not installed but quickly marks it as installed once you tell it to update.
Click to expand...

Cheers....Works perfect
Greg R MDL Novice

Mar 2, 2020

18

5

0

#3005 Greg R, May 13, 2020
Last edited: May 13, 2020

Just confirming the above method works with KB4552953 as well (.net 4.8 security-only) on both x64 and x86.

Just run the following from a command prompt in the same folder as the patch:

ndp48-kb4552953-x64_251d9ac6b7e872dabe6d772f5925876ac5232db3.exe /msioptions "ESU_LOCK=2D40812E-974C-4EA2-8DCC-63C992D505B9"

Replace the filename with the x86 version if necessary. Thanks again to vinzf for solution.

Is there a way to get these to show up as installed updates in WU?
penkoffpentest MDL Novice

Jan 24, 2020

9

1

0

#3006 penkoffpentest, May 13, 2020

You need to login to view this posts content.
Greg R MDL Novice

Mar 2, 2020

18

5

0

#3007 Greg R, May 13, 2020
Last edited: May 13, 2020

You need to login to view this posts content.
istighfar MDL Junior Member

Apr 18, 2020

66

31

0

#3008 istighfar, May 13, 2020

Great find @vinzf
Once ndp48_4552921 has been installed, the KB556399 update was finally installed through WU.
Good job my friend.
penkoffpentest MDL Novice

Jan 24, 2020

9

1

0

#3009 penkoffpentest, May 13, 2020

Greg R said: ↑

The "ndp48" one you specified is the .net framework 4.8 update everyone was having trouble installing. If you only have .net 4.8 installed then yes, that is the file you need to install to get the latest security updates for this version of .net

The "ndp47" and "ndp45" files are for earlier versions I'm assuming. Make sure you get the right ones. If you have .net 3.5 installed you will need KB4552965.

EDIT: If you're unsure which version you have and are in a pinch, try them all lol. You only need the command line bypass for the one file (ndp48 kb4552921) you highlighted in your post, or KB4552953 for those that downloaded that one.
Click to expand...

Thanks.

One more question - this command doesn't change anything permanently, right? So it shouldn't cause any problems with future bypasses or Microsoft's restrictions.
Greg R MDL Novice

Mar 2, 2020

18

5

0

#3010 Greg R, May 13, 2020

penkoffpentest said: ↑

Thanks.

One more question - this command doesn't change anything permanently, right? So it shouldn't cause any problems with future bypasses or Microsoft's restrictions.
Click to expand...

Nope, the /msioptions part just specifies a parameter for that one .exe file. It doesn't change any system settings or anything.
reneweesp MDL Novice

Mar 24, 2014

14

4

0

#3011 reneweesp, May 13, 2020
Last edited: May 13, 2020

Greg R said: ↑

The "ndp47" and "ndp45" files are for earlier versions I'm assuming. Make sure you get the right ones. If you have .net 3.5 installed you will need KB4552965.
Click to expand...

I don't have 4.8 so i need 4.7 with "vinzf" method. Plus (as usual) windows6.1-kb4552940-x64 (around 23,6 MB).
Restart, KB556399 installed no longer pending in WU.
zepper72 MDL Novice

May 9, 2010

48

49

0

#3012 zepper72, May 13, 2020

Thank-you to vinzf and pesho_georgiev, using that method I was able install kb4552920 successfully.
Greg R MDL Novice

Mar 2, 2020

18

5

0

#3013 Greg R, May 13, 2020

You need to login to view this posts content.
Mar V MDL Novice

Jan 16, 2020

29

10

0

#3014 Mar V, May 13, 2020

vinzf said: ↑

Ok girls, here is the solution:

I've captured the custom action dll from NDP48-KB4552921.msp and analyzed it in IDA.
The custom action dll exports a function ValidateESULicense which initially queries a msi property "ESU_LOCK" and compares it to several values that determine the further path of action.
Long story short, if that value is "2D40812E-974C-4EA2-8DCC-63C992D505B9" the code path logs "ESU Validation is OFF", yay!

So we can override that property via msiexec:

msiexec /p PACKAGENAME.msp /log c:\tmp\log.txt ESU_LOCK=2D40812E-974C-4EA2-8DCC-63C992D505B9

Luckily also the ndp48-kb4552921 installer exe accepts msioptions for the embedded package it ships.

So the final solution to get KB4556399 installed is:

for x86:
ndp48-kb4552921-x86_608b67e4011b9e103ca18deadbfc013d1c328508.exe /msioptions "ESU_LOCK=2D40812E-974C-4EA2-8DCC-63C992D505B9"

for x64:
ndp48-kb4552921-x64_6912af0422fc16a14f4f398fda98117f1e2f01b8.exe /msioptions "ESU_LOCK=2D40812E-974C-4EA2-8DCC-63C992D505B9"

reboot as requested and go to windows updates which still believes that KB4556399 is not installed but quickly marks it as installed once you tell it to update.
Click to expand...

Please can you help me installing this :
ndp47-kb4552919-x86_c511d2f913ca5f6df5248e1c03f8f1f31d9c82a2.exe /msioptions "ESU_LOCK=2D40812E-974C-4EA2-8DCC-63C992D505B9"
What do you mean with "The Tarhet box "? I am Dutch and do not know mucvh about pc technics
pc71520 MDL Junior Member

Feb 12, 2013

89

44

0

#3015 pc71520, May 13, 2020
Last edited: May 13, 2020

https://forums.mydigitallife.net/th...dates-eligibility.80606/page-150#post-1596140

Worked for me, too.
Many thanks!!!

Stop hovering to collapse... Click to collapse... Hover to expand... Click to expand...
zepper72 MDL Novice

May 9, 2010

48

49

0

#3016 zepper72, May 13, 2020

Mar V said: ↑

Please can you help me installing this :
ndp47-kb4552919-x86_c511d2f913ca5f6df5248e1c03f8f1f31d9c82a2.exe /msioptions "ESU_LOCK=2D40812E-974C-4EA2-8DCC-63C992D505B9"
What do you mean with "The Tarhet box "? I am Dutch and do not know mucvh about pc technics
Click to expand...

Create a shortcut to the net update file, then from properties in the target box, don't delete anything, just add a space at the end and then add this line:

/msioptions "ESU_LOCK=2D40812E-974C-4EA2-8DCC-63C992D505B9"
Jim K. MDL Novice

Dec 10, 2019

49

57

0

#3017 Jim K., May 13, 2020

Thanks vinzf and pesho_georgiev. I knew someone would figure this out.
BobT36 MDL Novice

Jan 24, 2020

7

3

0

#3018 BobT36, May 13, 2020
Last edited: May 13, 2020

You need to login to view this posts content.
FlyingLuka MDL Novice

Dec 15, 2019

39

13

0

#3019 FlyingLuka, May 13, 2020

You need to login to view this posts content.
engel1307 MDL Novice

Mar 23, 2020

18

6

0
#3020 engel1307, May 13, 2020
Great thanks vinzf and pesho_georgiev.

(You must log in or sign up to post here.)

Page 151 of 425