Bypass Windows 7 Extended Security Updates Eligibility

Discussion in 'Windows 7' started by abbodi1406, Nov 17, 2019.

  1. vp2

    vp2 MDL Junior Member

    Dec 29, 2015
    58
    75
    0
    Read this thread attentively - KB5046682 is not Windows 2008 R2 update.
     
  2. Angilas

    Angilas MDL Novice

    Dec 24, 2019
    16
    16
    0
    Guys just waite with install this November Rollup KB5046687 first need to found the reason why this update break browsers it looks more programs no more work after install it !!! let the pro check first the will found it just Patience a bit!. Very Intresting old IE 11 still work.
     
  3. Enthousiast

    Enthousiast MDL Tester

    Oct 30, 2009
    54,966
    125,941
    450
    If the update installed, then the subject of this thread, the ESU updates installer, worked, the working, including the problems it causes, of the installed update is not part of the subject of this thread,

    Just be glad that the ESU Bypass tool offered us almost 3 years of extra updates for free.
     
    Stop hovering to collapse... Click to collapse... Hover to expand... Click to expand...
  4. GfaRm

    GfaRm MDL Novice

    Dec 9, 2019
    12
    10
    0
    #8206 GfaRm, Nov 15, 2024
    Last edited: Nov 15, 2024
    Ok, so please help me if you can, I'm standing now in front of 2024-11 updates after successful installation of Abodi's recent hacks:
    KB5046543
    KB5046687
    Should I go or should I stay with 2024-10 updates and wait for 2024-12 patches? ;)
    I'm afraid of installing these after all your reports of destroyed Chrome and Firefox functions :( I still use both of them...
     
  5. Enthousiast

    Enthousiast MDL Tester

    Oct 30, 2009
    54,966
    125,941
    450
    Then don't install the updates.
     
    Stop hovering to collapse... Click to collapse... Hover to expand... Click to expand...
  6. GfaRm

    GfaRm MDL Novice

    Dec 9, 2019
    12
    10
    0
    very helpfull indeed...
     
  7. John_3_16

    John_3_16 MDL Senior Member

    Feb 8, 2020
    253
    343
    10
    It is kind of that simple. Updates that don't work can't be used. The update process is working. I am waiting using only the Oct 2024 updates & the updates that did work.

    At some point we will be forced to accept what we have or to move on (Linux/Win11). Forever does not apply to Win7.

    There are other forums here that deal directly with Win7 problems. Click on "FORUMS" above & explore those.

    Hoping this is a little more gentle & helpful than the simple raw truth. Good hunting all. It has been a good run. ;>))
     
  8. Enthousiast

    Enthousiast MDL Tester

    Oct 30, 2009
    54,966
    125,941
    450
    What do you expect to happen? That someone outside of MSFT fixes the braking of the use of browsers with unsupported updates for an EOS OS?

    ?
     
    Stop hovering to collapse... Click to collapse... Hover to expand... Click to expand...
  9. abbodi1406

    abbodi1406 MDL KB0000001

    Feb 19, 2011
    18,610
    100,025
    340
    The world will not end with one month without updates, just wait until next month or fixed OOB update
     
  10. Paradroid666

    Paradroid666 MDL Novice

    Oct 30, 2018
    20
    34
    0
    #8212 Paradroid666, Nov 15, 2024
    Last edited: Nov 15, 2024
    Solution:

    1.
    disable integrity-checks and driver-signing.
    in a console with admin-rights:

    BCDEDIT /set nointegritychecks ON
    BCDEDIT /set LoadOptions DISABLE_INTEGRITY_CHECKS
    BCDEDIT /set TESTSIGNING ON

    2.
    Backup original \windows\system32\win32k.sys (before November Patches).

    3.
    Install November Patch KB5046705 (security only)

    4.
    Reboot to install this Update
    (Windows reboots automatically twice because of kernel-patch)

    5.
    Boot into Windows 7 Recovery CD or WinPE or Linux-LIVE etc.
    Copy the original win32k.sys from Backup to c:\windows\system32
    (overwrite the patched win32k.sys).

    6.
    Reboot normal
    No BSOD because of 1.

    Test Firefox 115.17.0 ESR: OK
    Test Supermium 126.0.6478.256 R5: OK
    Browsers are working.
     
  11. adric

    adric MDL Expert

    Jul 30, 2009
    1,527
    1,720
    60
    #8213 adric, Nov 15, 2024
    Last edited: Nov 15, 2024
    Installed BypassESU-v13 and ran WU search for updates before and after applying the Nov. Server 2008 R2 updates to an updated October Win7. Should the listed updates be installed or hidden?
    edit: Missed this post. So iI guess it's ignore or hide.

    Note: November updates not detected other than MRT :confused:
    Server2008R2.jpg Server2008R2_wUpdates.jpg

    IIRC there was a similar situation with W8.1 showing old updates with BypassESU-Blue, but they all disappeared after installing the current LCU back then which is not the case here.
     
  12. John_3_16

    John_3_16 MDL Senior Member

    Feb 8, 2020
    253
    343
    10
    So eloquent in its simplicity. Ask & it shall be given. (@Enthousiast)
    Help from beyond M$... (@GfaRm)
    Thank you. (@abbodi1406 @Paradroid666)

    I think I will create a restore point first & a Oct 2024 backup ISO before doing anything. Can't be too careful.
    I think I will retain a text copy of @Paradroid666's comment & a backup of Oct 2024 win32k.sys in case a future rollup repeats this problem.
    You have got to love it when a plan comes together for the greater good. ;>))
     
  13. xkubus

    xkubus MDL Novice

    Dec 10, 2011
    35
    43
    0
    What's wrong with you people? Why do you listen to perverts and follow their recommendations? Compromising the integrity of the system and inserting an old file with a vulnerability is the worst solution you can come up with. Just skip this update and wait for the next one.
     
  14. Ready_Slavik

    Ready_Slavik MDL Novice

    Mar 16, 2023
    37
    44
    0
    #8219 Ready_Slavik, Nov 15, 2024
    Last edited: Nov 15, 2024
    [Paradroid666, post: 1860547, member: 1170069 - "Solution 1. disable integrity-checks and driver-signing in a console with admin-rights:

    BCDEDIT /set nointegritychecks ON
    BCDEDIT /set LoadOptions DISABLE_INTEGRITY_CHECKS
    BCDEDIT /set TESTSIGNING ON

    2, 3, 4, ..

    5.
    Boot into Windows 7 Recovery CD or WinPE or Linux-LIVE etc.
    Copy the original win32k.sys from Backup to c:\windows\system32
    (overwrite the patched win32k.sys)."]


    Would reconstructing the November 2024 .CAB file that possesses the new win32k.sys file work (simply to delete the new win32k.sys file and copy the October 2024 win32k.sys file [ie., the backup file], and then to recompile the .CAB file as per the original .CAB file to then use W7ESUI to install the update package)?

    It would require to unpack the KB5046705 .MSU package with 7-Zip, to locate the win32k.sys file in the correct .CAB file [unpack THAT one also, but rename the original .CAB file with a "0" in front of the original filename after unpacking its contents] and make the switchover for the win32k.sys file from October 2024's security update. Then, to recompile that .CAB file and place it into the W7ESUI folder along with its other 3 original files. If it works out, this would have to be the unofficial November 2024 Security Only Quality Update for Windows Server 2008 R2 for future setups (for now until a better monthly update patch is official).

    Just an idea that might cut out needing to use settings changing with BCDEdit or the Recovery CD/WinPE/Linux-LIVE methods at all.

    P.S.: Were the previous (no) integrity checks, load options and test signing settings reverted back to their original state settings? Or they are left as were performed to avoid a BSOD?
     
  15. Paradroid666

    Paradroid666 MDL Novice

    Oct 30, 2018
    20
    34
    0
    #8220 Paradroid666, Nov 15, 2024
    Last edited: Nov 15, 2024