ExtremeGrief: Yes, I did a restart after installing each of the updates in the list - 15 restarts. Vista_SHA2_WUC has 3 functions to perform (wuaueng.dll update, option #1 for Vista updates, option #2 for Server 2008 updates) - 3 restarts. xrononautis: I did 2 clean installs and updating of Windows Vista on January 22nd and 24th. I used the Root Certificate from HHo2016 the first time, and the Root Certificate from ExtremeGrief the second time. I don't know if the new Root Certificate was a contributing factor or a fluke, but KB4575904 ESU LLP worked fine again and didn't break Windows Update. Yes, the January 2022 KB5009627 SMQR for Server 2008 was detected and installed by Windows Update.
This is interesting. As far as I can see the only thing that you do differently and could matter is that you install the KB4575904 before the latest SSU. I am going to try this tomorrow and see what happens.
ExtremeGrief: Using option #1 first and then option #2 second works better for me than using option #3. I know I can't make everyone happy with the method that I'm using, but it's what works for me.
Have you tried clamwin? The creators claim that it is compatible even with windows 95. I have tried on vista and works fine. Open source as well. You will have to manually scan what ever you like though. It doesn't have a realtime scanner (which I really like because it is much easier on the CPU). About a firewall try out the "Windows Firewall Control". Version 4.5.0.0 is compatible with Vista (needs .net 4.0) It works quite nicely in manual mode where a message pops up every time that something needs to access the internet. Then you either allow or block, temporary or permanently. It acts as a front end for the windows firewall. Let me know if you cannot find it.
You don't really need an AV hogging your CPU, if you don't run random stuff. Edit: nevermind, I just read that it doesn't have realtime protection. In that case I would couple it with Malwarebytes and schedule scans regularly, maybe even Sophos.
I've done a few test installs over the last few days with the new root certificate update and ESU licence prep update. I did a few of both 32 and 64-bit. All the installs updated fine and included this month's updates. I modified the IE9 script for the 32bit IE9 CSU and it also installed fine. One thing I have noticed, after patching to vista with WUC, installing all the updates and then patching to Server 2008 - the first Server 2008 check ALWAYS throws up an error code for me. After that it always runs fine. It's just the first check that never seems to work. Also, l tried installing the ESU licence prep update AFTER running WUC patcher and the update check always failed for me. It wouldn't work again until the ESU licence prep update had been removed. This means the latest updates won't show up though. So as long as the ESU licence prep update was installed BEFORE running the WUC patcher then it worked for me on every check. The steps in the OP are spot-on. However I don't reboot after every step. I only do about 6 reboots. 1st reboot is after KB2117917 (Platform Update) 2nd reboot after IE9 Install 3rd Reboot After KB4474419 (SHA-2 Update) 4th Reboot after Install WUC 5th Reboot after Patch WUC and SSU Always works okay for me.
Here's the order I've been doing it the last few days. I do the first few in a slightly different order though, as this means fewer reboots for me. Works okay though. 1 - rootsupd_XP 2 - windowsupdateagent-7.6 3 - KB3205638 4 - KB4012583 5 - KB4015380 6 - KB4019204 7 - KB971512 (IE9 Prerequisite) 8 - KB2117917 (Platform Update) 9 - ***Reboot*** 10 - Install IE9 11 - ***Reboot*** 12 - KB4018271 (IE9 Update) 13 - KB4493730 (April 2019 SSU) 14 - KB4474419-v4 (SHA-2 Update) 15 - ***Reboot*** 16 - KB4575904 (ESU Licence Prep) 17 - ***Reboot*** 18 - Install Vista_SHA2_WUC 19 - ***Reboot*** 20 - Patch as Vista 21 - KB5006750 (Oct 2021 SSU) 22 - Install IE9 CSU (Using Script for 64-Bit) 23 - ***Reboot*** Then I check for Vista Updates and hide the ones I don't need (Language packs, Security Essentials, Windows Live Essentials, etc). Install the Vista Updates and Reboot Patch for Server 2008 Updates. First update check ALWAYS fails for me for some reason. After that I run it again and no issues. January 2022 SMQR and .NET Updates all show up and Install (DotNet ESU Bypass installed just for latest .NET Update, and removed straight after install).
The reason why there is no script for the 32bit version of IE9 CSU is that you don't need one. You can just double click the CSU and it will just install fine. The script is needed only for the 64bit OSes. Don't ask me why is that... I have no clue except this. The IE9 setup for 64bit is the same for both Vista and WS2008 (same hash). The IE9 for 32bit is not the same between client and server. About the LPP before the WUC patch: This is great news! I am going to test it tomorrow Also the update to Windows update 7.6 is not needed since the WUC tool updates wu all the way to 7.7. I wonder though if this has something to do with the LPP problem. I will test this as well tomorrow
Ahh thanks! Good to know! I just assumed that it would be a problem for both 32 and 64-Bit. So, I can forget about the Script for 32-Bit.
I did try to install the latest .NET Update without the .NET Bypass, but it failed for me. Worked fine after I installed the Bypass. Could have been a coincidence though. I'll try it a few more times tomorrow.
The .net cumulative will get detected without .net esu bypass but it won't install. You still need it in order to install it.
How to get Microsoft Update working in Vista? I need for Office 2010 updates (AFAIK 2013 is impossible on Vista)