Bypass Windows 7 Extended Security Updates Eligibility

You need to login to view this posts content.

 

I have 3 operating systems and I'm waiting for out-of-band updates for them.

 

The wait is over, msft probably won't release a OOB update for an OS that was ended in 2020..

Usually an Out Of Band is a panic release to fix a problem instantly.

Next tuesday is the next patch tuesday, but we'll see what is going to happen.

 

Yes

 

Sorry if this is a dumb question but even after several attempts, the KB5034865 update won't install, it says that it's "not applicable" for this version of Windows. I'm on Windows 7 Ultimate x64, do I need to be on Pro or Server for it to work?

 

Tomorrow we will know if there be any oob updates left for us or not

 

Game over

 

Nah, Windows 7 is finally complete. Now we can finally migrate from XP to a newer OS that has all of it's bugs patched.

 

You really think that when EOS/L is reached all loopholes and vulnrerabilities are patched?

It wasn't the first time it reached official EOS/L, not at the second time when official ESU ended and not now after server updates are done.

 

exactly

 

Well. It's half truth half wishful thinking.
Windows 7 is now one of the most mature Windows operating system that you can use. Hackers have been poking at it for years and it had years of improvements. And it does not have part of the crap of Windows 10 and 11 like the phone/metro apps and the AI and what is not there cannot be attacked.

But the other side that security researchers will continue to find new weaknesses in the common codebase of Windows that also affect Windows 7 and those weaknesses can be exploited. So pick your poison. Do you want to live on the edge of what is new, with the newest Windows version, lots of time untested code that has many new vulnerabilities that yet have to be discovered and patched. Or will you stay with a mature OS that will have more and more known weaknesses as they will stay unpatched. For my main systems I'm all running Win 11. But for the other systems I will happily keep using Windows 7. With a responsible user, a firewall and an anti-malware solution to harden it.

 

You need to login to view this posts content.

 

yeah, let's do that

 

Actually this thread is tool specific, about: # BypassESU AIO

As long as the tool can be used, how can this thread be dead? Because it is not turned into a general discussion thread?

People who seek info and support are supposed to post in this thread.

 

This is a best BypassESU reference list of security update packages for those of us whom wish to know the shortest way to update a Windows 7 PC with BypassESU beyond 2020-01. This reference list has been tried and tested with a 4th Generation PC (LGA1150 CPU slot, 1600MHz RAM supported)

Key:-
SMQR = Security Monthly Quality Rollup
SQR = Security & Quality Rollup (Applicable for .NET updates)

Official ESU #1: BypassESU v11 (February 2020 until January 2023)

Update (KB4565354) - ESU WU Servicing Stack Update - July 20
Update (KB4575903) - ESU MAK Add-On Key Licensing Preparation Package (Pre-MAK Key) - July 20

At this point, install the BypassESU-v11 "LiveOS-Setup.cmd" file with Run As Administrator. When installing it for the very first time, choose [Option 1] that installs ALL the necessary components to be active. Restart your PC for the ESU to take effect properly.

SMQR (KB4565524) - Security Improvements + Disable Remote vGPU - July 20

Update (KB5017397) - WU Servicing Stack Update - September 22
SMQR (KB5022338) - Improvements (16-bits SupportedEncryptionTypes,ODBC sqlsrv32-DLL) [ESU 1 FINAL] - January 23

SQR (KB5013637) - NET Framework v3-5-1 DoS Patch + APIs Crash Fix [Revised 10-2022] - May 22
SQR (KB5020861) - NET v3-5-1 Restricted Mode XPS File Parsing RCE Patch (ESU 1 FINAL) - December 22

SQR (KB5012141) - NETs Framework v4-5-(1,2) DoS Patch [ESU FINAL] - April 22

SQR (KB5012131) - NETs v4-6-(1,2) & v4-7-(1,2) DoS Patch [v4-6-1 ESU FINAL] - April 22

SQR (KB5013644) - NETs v4-6-2 & v4-7-[1,2] DoS Patch + APIs Crash Fix - May 22
SQR (KB5020869) - NETs v4-6-2 & v4-7-(1,2) Restricted Mode XPS File Parsing RCE Patch [ESU 1 FINAL] - December 22

SQR (KB5013632) - NET Framework v4-8 DoS Patch + APIs Crash Fix - May 22
SQR (KB5020879) - NET v4-8 Restricted Mode XPS File Parsing RCE Patch [ESU 1 FINAL] - December 22

Cumulative Security Update (KB5019958) - IE11 Vulnerabilities Resolution (ESU 1 FINAL) - November 22

-----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------

Official Windows Embedded WE7S POS ESU #2 (FINAL support for Windows 7 x86 version): BypassESU v12 (February 2023 until October 2024)

Copy PatchWU.cmd from BypassESU-v13f "bin" folder and paste it into the BypassESU-v12 "bin" folder. This is a fixed patch for Windows Update to display Windows 7 ESU updates.

Apply Options:- (These will upgrade the BypassESU-v11 components to the latest version)

Install ESU Suppressor
Install .NET v4 Bypass

Also use the Win7 WU ESU Patcher v1 as follows:
[Option 1] - Windows Embedded 7 applies for x86 versions of Windows 7, but it can also be applied for x64 (for a prolonged solely Windows 7 experience)

As an x64 OS version you may also choose:
[Option 3] - Windows Server 2008 R2 + Windows 7 Client
however, Windows Update will summon new security updates packages for components to update to Windows Server 2008 R2 versions.

In choosing [Option 3], you WILL NEED to install the WS2008 R2 ESU support package for updating via Windows Update (Staying with [Option 1] for Windows Embedded 7 x64, do NOT install this updates package now - you can apply this updates package later for BypassESU-13f):-
Update (KB5016892) - ESU Licensing Preparation Package (WS2008 R2 Only) - August 22

Also, you may run the Defragment-Datastore-edb.cmd file by Run As Administrator
BUT this will NOT prevent the DataStore.edb file from bloating beyond 2.5GB for an x64 OS version of Windows 7. Expect a DataStore.edb file size go from 2.5GB to 4.9GB, and at worst to 7.9GB. Defragmenting the DataStore.edb file will reduce the file size to 4.9GB if bloated to 7.9GB.

Update (KB5039339) - WE7S POS ESU WU Servicing Stack Update (ESU 2 FINAL) - June 24
SMQR (KB5044356) - Internal OS Misc Security Improvements (ESU 2 FINAL) - October 24

SQR (KB5044011) - NET v3-5-1 Security Improvements (DoS Patches) [ESU 2 FINAL] - October 24

Update (KB5023820) - NETs v4-6-2 & v4-7-(1,2) XPS Documents Glyph Images & Null Reference Exceptions Fixes - February 23
SQR (KB5044019) - NETs 4-6-2 & v4-7-[1,2] Security Improvements (DoS Patches) [ESU 2 FINAL] - October 24

Update (KB5023823) - NET v4-8 XPS Documents Glyph Images & Null Reference Exceptions Fixes - February 23
SQR (KB5044027) - NET v4-8 Improvements (DoS Patches, NET Libraries Fix) [ESU 2 FINAL] - October 24

Cumulative Security Update (KB5044272) - WE7S ESU IE11 Vulnerabilities Resolution - October 24

NOTE;
I stayed with [Option 1] during this process, I installed ALL these listed packages successfully, and defragged all the files updated before going online to check for updates with Windows Update. I did not get a list of missed updates.
-----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------

Official Windows Server 2008 R2 ESU 3 (FINAL support for Windows 7 x64 version ONLY): BypassESU v13f (November 2024 until January 2026)

Install the WS2008 R2 ESU support package for WU: (Only if this step was NOT APPLIED for BypassESU-v12)
Update (KB5016892) - ESU Licensing Preparation Package (WS2008 R2 Only) - August 22

Apply first the Win7 WU ESU Patcher v1 as follows:-

[Option 3] - Windows Server 2008 R2 + Windows 7 Client

BypassESU-v13f Apply Options:- (These will upgrade the BypassESU-v12 components to the latest version)

Install ESU Suppressor
Install .NET v4 Bypass

Update x64 (KB5071810) - WS2008 R2 ESU WU Servicing Stack Update [ESU 3 FINAL] - November 25
SMQR x64 (KB5073695) - WS2008 R2 ESU WDS Fix + Modem Drivers Removed [ESU 3 FINAL] - January 26

Update x64 (KB981392) - WS2008 R2 Best Practices Analyzer for Application Server - August 12
Update x64 (KB2386667) - WS2008 R2 Best Practices Analyzer for Application Server (6 New Rules) - August 12
Update x64 (KB981390) - WS2008 R2 Best Practices Analyzer For WSUS - October 12
Critical Update x64 (KB2992611) - WS2008 R2 SChannel RCE Patch (MS14-066) - November 14 (This one MAY APPLY for under Gen 4 PCs)
Security Update x64 (KB2992611-KB3018238) - WS2008 R2 Update (MS14-066) - November 14

SQR x64 (KB5066150) - WS2008 R2 ESU NET v3-5-1 Information Disclosure Patch [ESU 3 FINAL] - October 25

SQR x64 (KB5066146) - WS2008 R2 ESU NETs v4-6-2 & v4-7-[1,2] RCE Patch [ESU 3 FINAL] - October 25

SQR x64 (KB5066141) - WS2008 R2 ESU NET v4-8 Information Disclosure Patch [ESU 3 FINAL] - October 25

Cumulative Security Update x64 (KB5066840) - WS2008 R2 ESU IE11 [ESU 3 FINAL] - October 25


Optional WS2008 R2 Updates Re-installs:- (These packages were announced during the ESU 3 support duration, and these MAY APPLY for under Gen 4 PCs)

Security Update x64 (KB2643719) - WS2008 R2 Color Control Panel DLL RCE Patch (MS12-012) - February 12
Update x64 (KB2608658) - WS2008 R2 SIS (Single Instance Storage) Component Update - March 12
Security Update x64 (KB3133043) - WS2008 R2 NPS RADIUS Server Authentication DoS Fix (MS16-021) - February 16


Windows 10 Add-On Packages:- (Optional, and essential ONLY when working linked with another PC running Windows 10. If not needed, hide these updates.)

Update x64 (KB3068708) - WS2008 R2 Diagnostics & Telemetry Tracking Service - June 15
Update x64 (KB3080149) - WS2008 R2 Customer Experience & Diagnostic Telemetry (DATA MINING!) - August 15
Update x64 (KB3118401) - WS2008 R2 Universal C Runtime Update - February 16
Update x64 (KB2952664) - WS2008 R2 W7-W10 Compatibility Update - July 18


NOTES:
1) Without BypassESU active, you may not update the Windows Malicious Software Removal Tool (KB890830) successfully beyond the October 2024 released version (v5.129). You may get a halting error message when trying to install it with the February 2026 release version (v5.139).
2) Unwanted Windows 7 Updates:-

2018-08 KB971033 - Windows 7 WAT Activation & Validation Components (Permanent Update - Not Wanted!)

2019-10 KB4524752 - EOL OS Support Notification (Permanent Update - Not Wanted!)

2021-03 KB5001027 - MS Edge Update (EDGE Not Supported From Build v109 - Permanent Update, No Rollback To IE11 - Not Wanted!)

Also, I've included an amended Windows 7 Official Updates list for updating from Service Pack 1 installation until January 2020.