Bypass Windows 7 Extended Security Updates Eligibility

Discussion in 'Windows 7' started by abbodi1406, Nov 17, 2019.

  1. bluiks

    bluiks MDL Novice

    Jun 2, 2017
    15
    7
    0
    I open a cmd prompt with my domain user, right-clicking and selecting "Run as Administrator".

    In the output of `whomi /groups` there is no S-1-5-19 SID.
    There are other groups like BUILTIN\Administrators. I guess the SID could be changed as well. Or maybe there is some reason why exactly that SID is being currently checked.

    The current test does not work for me anyways, running the .cdm file just exits without any output (I guess the superadmin fails due to some restriction active in the domain). After I changed the test to either test some privilege, or simply the BUILTIN\Administrators SID, running the .cmd file seems to work fine.

    Maybe I am missing something important about how the .cmd is supposed to work...
     
  2. abbodi1406

    abbodi1406 MDL KB0000001

    Feb 19, 2011
    17,209
    90,791
    340
    It's not really about the used SID
    it's just a way to check administrator rights (simply because HKU\S-1-5-19 and HKU\S-1-5-20 require admin to access/query)
    there are other ways of doing that, each with pros and cons
     
  3. bluiks

    bluiks MDL Novice

    Jun 2, 2017
    15
    7
    0
    #6143 bluiks, Jan 24, 2022
    Last edited: Jan 24, 2022
    Ah, we are talking about different commands. Actually I did not have issue with the HKU check, the problem was with the "whoami /USER" check (where it checks if user is SYSTEM). It seems I have some problem elevating to SYSTEM with TrustedInstaller. Sorry for the confusion, I need to look more deeply why it fails at those points with zero output (no error at location "E_TI" is printed).

    Edit: Aaah, OK, looking at what is SuperUser64 it is clear what is my problem. The SeDebug privilege has been removed from any user (even administrator) in my domain. And it does not handle that gracefully, no error is printed. Sorry for the noise, I should have checked this first before opening my mouth!
    I guess it could check the exit value of SuperUser64 if it is non-zero, or even print "Couldn't acquire SeDebugPrivilege" if the exit value is 2.
     
  4. bluiks

    bluiks MDL Novice

    Jun 2, 2017
    15
    7
    0
    One small issue removing WU ESU Patcher in line 320:
    if exist "%SysPath%\sle.dll" (removing "%SystemRoot%\System32\sle.dll"&del /f /q "%SysPath%\sle.dll")

    It is missing "echo" before the "removing"...
     
  5. JPMedia

    JPMedia MDL Novice

    Jan 19, 2022
    3
    0
    0
    Thank you for the response! Please forgive my ignorance, but what are the steps that I must take the remove the .NET portion of the bypass?
     
  6. Skunk1966

    Skunk1966 MDL Member

    Jul 15, 2011
    165
    167
    10
    open BypassESU-v9 or v11 and enter the number corresponding with Remove .net bypass (6). It will show you when done. When done close the bypass window by using the corresponding number (9)
     
  7. JPMedia

    JPMedia MDL Novice

    Jan 19, 2022
    3
    0
    0
    Thank you for you help! This did the trick and I can now run Photoshop x64
     
  8. nidzo2001

    nidzo2001 MDL Novice

    Jan 28, 2020
    1
    0
    0
  9. new369one

    new369one MDL Novice

    Mar 18, 2020
    35
    13
    0
    You are false; you need it to unlock the updates for the new processor generations.

    Here you see the .exe info :

    Enables Windows Update on PCs with unsupported processors.
     
  10. Enthousiast

    Enthousiast MDL Tester

    Oct 30, 2009
    49,674
    103,513
    450
    Simplix does disable cpu check too.
     
  11. ExtremeGrief

    ExtremeGrief MDL Addicted

    Jun 2, 2020
    729
    156
    30
    If you do not install some updates then there is no CPU check...
     
  12. new369one

    new369one MDL Novice

    Mar 18, 2020
    35
    13
    0
    And then i will have open insecure faulty windows 7; perfect for malware et cetera...
     
  13. Enthousiast

    Enthousiast MDL Tester

    Oct 30, 2009
    49,674
    103,513
    450
    Simplix installs all needed updates and disables the cpu check.
     
  14. ExtremeGrief

    ExtremeGrief MDL Addicted

    Jun 2, 2020
    729
    156
    30
    The updates which enable CPU check don't do anything else, except add telemetry and CPU check....
     
  15. new369one

    new369one MDL Novice

    Mar 18, 2020
    35
    13
    0
    telemetry <<< lol you are using a normal-open-router and i use a vpn-router with vpn software have fun with your crap you pseudo-boffin.

    Thank you for your into.
     
  16. Friend I totally agree with you . you are absolutely correct.
     
  17. Aralka

    Aralka MDL Novice

    Aug 20, 2015
    2
    0
    0
    Any idea why I'm only offered 2021-10 monthly security rollup (KB500563) from WU? I have installed newest SSU (KB5006749) from WU, rebooted, nothing shows up. Should I install newest updates manually? Could it have something to do with edge browser update that I dont want?
     
  18. abbodi1406

    abbodi1406 MDL KB0000001

    Feb 19, 2011
    17,209
    90,791
    340
    2021-10 monthly rollup is KB5006743

    you could try to remove WU ESU patcher, stop wuauserv service, delete the folder "C:\Windows\SoftwareDistribution", install WU ESU patcher, restart, then check WU