Bypass Windows 7 Extended Security Updates Eligibility

Discussion in 'Windows 7' started by abbodi1406, Nov 17, 2019.

  1. Prsa01

    Prsa01 MDL Novice

    Dec 8, 2019
    14
    13
    0
    You lose your config and have to reconfigure from scratch which is more of a pain now that MS no longer has servers for support information. I'm told that then lose config on every subsequent reboot (have not witnessed this myself).
     
  2. NewEraCracker

    NewEraCracker MDL Junior Member

    Apr 19, 2011
    71
    62
    0
    Stop hovering to collapse... Click to collapse... Hover to expand... Click to expand...
  3. blub666

    blub666 MDL Novice

    Mar 10, 2022
    4
    0
    0
    #6244 blub666, Mar 11, 2022
    Last edited: Mar 11, 2022
    Hi I am knew. Most of my security updates don´t install.I also tried to install them manually. KB5011552, KB5008867, KB5008867 etc Code 80004002
    What does the Wim-Integration do? When I want to start it it says enter target path and that it´s not mounted and mounted directory offline image drive letter. Perhaps I am missing something?
    What do I have to do please?

    Do I probably have to download a win 7 iso first in addition to my installed win 7?
     
  4. Enthousiast

    Enthousiast MDL Tester

    Oct 30, 2009
    49,665
    103,464
    450
    Offline integration of the ESU Bypass into install.wim.

    You need to properly install the ESU Bypass on your live windows.
     
  5. blub666

    blub666 MDL Novice

    Mar 10, 2022
    4
    0
    0
    LiveOS-Setup was installed. But what is a live windows? Do I have to download a ISO first to get the install.wim.
     
  6. Enthousiast

    Enthousiast MDL Tester

    Oct 30, 2009
    49,665
    103,464
    450
    An already installed and running windows.

    Not for when you already have a running windows.

    Can you run it again and show us the content of the cmd window or a good screenshot?
     
  7. blub666

    blub666 MDL Novice

    Mar 10, 2022
    4
    0
    0
    Dont know how to upload but it has only [4-9] to choose from.
     
  8. blub666

    blub666 MDL Novice

    Mar 10, 2022
    4
    0
    0
    #6249 blub666, Mar 11, 2022
    Last edited: Mar 11, 2022
    I have to leave now but I ll come back later. WU is able to find updates but cant finish the konfiguration process afterwards.

    So I am back again. Perhaps some nice dude could help me further.
     
  9. Fire Spitting Dragon

    Mar 10, 2020
    3
    3
    0
    Thank you @Prsa01 and @NewEraCracker for reporting this. It helped me a lot after trying to find a solution for hours myself.
     
  10. HangNail

    HangNail MDL Novice

    Jan 20, 2021
    9
    4
    0
    #6252 HangNail, Mar 30, 2022
    Last edited: Mar 30, 2022
    Today I had 4 updates ready to install:

    1. 2022-03 Security Monthly Quality Rollup for Windows 7 (KB5011552)
    2. Windows Malicious Software Removal Tool x64 - v5.98 (KB890830)
    3. Windows Malicious Software Removal Tool x64 - v5.99 (KB890830)
    4. The .NEt update for February was also listed.

    After I installed 1, 2 and 3, it still showed that 3 needed to be installed.

    After I installed 3 again, the .NET update was no longer available and a new update was on the list:

    2022-03 Servicing Stack Update for Windows 7 for x64- based Systems (KB5011649)

    It was published on 3/8/2022

    Here is the description of the update:

    Summary
    This update makes quality improvements to the servicing stack, which is the component that installs Windows updates. Servicing stack updates (SSU) makes sure that you have a robust and reliable servicing stack so that your devices can receive and install Microsoft updates.

    How to get this update

    Before installing this update
    IMPORTANT Customers who have purchased the Extended Security Update (ESU) for on-premises versions of these operating systems must follow the procedures in KB4522133 to continue receiving security updates. Extended support ended as follows:
    • For Windows 7 Service Pack 1 and Windows Server 2008 R2 Service Pack 1, extended support ended on January 14, 2020.
    For more information about ESU and which editions are supported, see KB4497181.

    Prerequisites
    You must install the updates listed below and restart your device before installing the latest Rollup. Installing these updates improves the reliability of the update process and mitigates potential issues while installing the Rollup and applying Microsoft security fixes.
    1. The March 12, 2019 servicing stack update (SSU) (KB4490628). To get the standalone package for this SSU, search for it in the Microsoft Update Catalog. This update is required to install updates that are only SHA-2 signed.

    2. The latest SHA-2 update (KB4474419) released September 10, 2019. If you are using Windows Update, the latest SHA-2 update will be offered to you automatically. This update is required to install updates that are only SHA-2 signed. For more information on SHA-2 updates, see 2019 SHA-2 Code Signing Support requirement for Windows and WSUS.

    3. To get this security update, you must reinstall the "Extended Security Updates (ESU) Licensing Preparation Package" (KB4538483) or the "Update for the Extended Security Updates (ESU) Licensing Preparation Package" (KB4575903) even if you previously installed the ESU key. The ESU licensing preparation package will be offered to you from WSUS. To get the standalone package for ESU licensing preparation package, search for it in the Microsoft Update Catalog.
    After you install the items above, we strongly recommend that you install the latest SSU. If you are using Windows Update, the latest SSU will be offered to you automatically if you are an ESU customer. To get the standalone package for the latest SSU, search for it in the Microsoft Update Catalog. For general information about SSUs, see see Servicing stack updates and Servicing Stack Updates (SSU): Frequently Asked Questions.

    -----

    This update looks like it may have the potential to break the ESU Bypass. I searched this thread and this update has not been discussed at all so I thought I would bring it up. I am going to hold off on installing it.

    I'm also curious what happened to the .NET update. Maybe this is nothing and it is harmless but I'd like to know what people think.
     
  11. abbodi1406

    abbodi1406 MDL KB0000001

    Feb 19, 2011
    17,204
    90,771
    340
    SSU KB5011649 is safe to install
     
  12. HangNail

    HangNail MDL Novice

    Jan 20, 2021
    9
    4
    0
    Thanks for the reply. Of course, you are correct. I installed KB5011649 and then the .NET update (KB5010581) reappeared and installed without issue. Thanks again
     
  13. sluggerb

    sluggerb MDL Novice

    Dec 30, 2019
    38
    23
    0
    #6255 sluggerb, Apr 11, 2022
    Last edited: Apr 11, 2022
    I am doing a new fresh Win7 install, on new hardware. What is the correct order of operations to get it all updated? Is it

    1. Complete fresh Win7 install
    2. Install the 5 prereqs in the first post of this thread (does the order matter?)
    3. Install ESU Bypass
    4. Run Windows update until I am fully updated

    Or is it

    1. Complete fresh Win7 install
    2. Run Windows Update until it gets as updated as it can
    3. Install ESU bypass
    4. Run Windows update until I am fully updated

    Or another process? I cannot use Simplix so I need to do this manually. My goal is to do the minimal updates I need for security only, I don't want any new windows "features"
     
  14. kamyshoviy

    kamyshoviy MDL Junior Member

    Nov 30, 2014
    53
    49
    0
    Installation order "Recommended Updates": kb3138612 + kb4490628 + kb4474419-v3 > reboot > Latest SSU + kb4575903 > reboot. Everything, you can install Install ESU bypass.
    When:"Run Windows update..."? - at your own discretion.

    "I cannot use Simplix so I need to do this manually..."
    Can. Turn off the internet. Do an update integration. Install Windows 7.
     
  15. alzcoew397

    alzcoew397 MDL Senior Member

    Oct 6, 2018
    441
    200
    10
    1. Complete fresh Win7 install
    2. Run simplix pack 7
    3. Install ESU bypass
    4. Run Windows update
     
  16. sluggerb

    sluggerb MDL Novice

    Dec 30, 2019
    38
    23
    0
    I cannot use Simplix as it installs some optional update that does something to the Windows display system that triggers a visual disability I suffer from. On other Windows 7 PC's that I update via WU, this does not happen. So using Simplix is not an option as it leaves me with a PC I cannot use


    What is meant by "When:"Run Windows update..."? - at your own discretion"? It sound like you are saying install the 5 pre req's from the first post in that order, rebooting as noted, then install ESU Bypass, and then run Windows Update. Is that correct?

    Appreciate the help
     
  17. My2GirlsDad

    My2GirlsDad MDL Novice

    Mar 24, 2020
    30
    4
    0

    I believe the best option is the top one that way you will be offered any ESU updates the first time you run Windows Update. Just my opinion.
     
  18. Enthousiast

    Enthousiast MDL Tester

    Oct 30, 2009
    49,665
    103,464
    450
    This tutorial is still accurate i believe: https://forums.mydigitallife.net/th...pdates-eligibility.80606/page-70#post-1578167

    The updates overview needs to be updated, the tutorial is still good.