George: I downloaded and saved your executable file, then I extracted its contents with 7-Zip into a folder that I created for it. These are the 6 files that appeared: I'm aware the updroots.exe file installs the root certificate update, but I have no idea what the other 5 files do or how to use them.
I told you open it with WinRar… Do it and you got all needed info. See how are created original MS installers for certificates. Instead of using INF to launch updroots.exe I’m running it directly in silent temp mode.
George: I only use 7-Zip and have not used WinRAR or WinZip or other extraction apps in several years. I assumed that extraction apps all work in the same manner.
I don't have any AV hangs on 7z SFX that I created. Reason why I builded it with WinRAR is simple - everybody can read informations that are provided inside package and can easily update it. And also you can see what commands are used to install them, even they are taken from original INF.
I plan to do another test clean install of Windows Vista Business SP2 64-bit after the March 2022 "patch Tuesday". I plan to skip installing the root certificate update, and then see what effect it has on how Windows Update works, and then see if Vista can still be brought up to date with ESU updates.
I don't think WU is going to work without any root certificates update at all, and I don't see how useful it would be anyways, because you can't access modern websites without them.
I guess I'll find out in a few days. If WU doesn't work properly without deploying the updated RC, I'll do another test clean install with it.
ExtremeGrief: I fired up my Dell Precision M6400 laptop a short time ago which has Windows Vista SP2 64-bit already up to date to February 2022 "patch Tuesday". After Windows Update loaded, it detected the March 2022 KB5011534 security monthly quality rollup(SMQR) and installed it. After the laptop was restarted and Windows Update was loaded again, it detected the March 2022 KB5011942 servicing stack update(SSU) and installed it. After the laptop was restarted and Windows Update was loaded, no further updates were detected. I attempted to manually install the March 2022 KB5011486 Internet Explorer 9 cumulative security update, but it displayed a "This update does not apply to your system" message. I then edited lines #2 - #6 in xrononautis's batch file: by replacing October 2021 KB5006671 with March 2022 KB5011486. I do not know what I did wrong, but KB5011486 failed to install using the batch file. After the laptop was restarted, "Help - About Internet Explorer" still showed version 9.0.270 and KB5006671.
Doesn't the Security Monthly Quality Rollup package already include the IE stuff? AFAIK, only when using Security Only updates, the separate IE package is applicable.
Carlos: The SMQR in Windows 7 includes the Internet Explorer 11 cumulative security update, but the SMQR in Windows Vista/Server 2008 for Internet Explorer 9 does not for some reason. Note: This month's Windows 7 SMQR updated Internet Explorer 11 from 11.0.260 to 11.0.265. The Internet Explorer 9 cumulative security update in Windows Vista/Server 2008 refuses to install - which I am guessing is why xrononautis created a batch file. The current batch file worked fine for the October 2021 update, but I could not get it work to install the March 2022 update after I edited it with the appropriate KB number. I am sure xrononautis is very busy, but hopefully he will eventually jump in and resolve this issue.
I'm not 100 sure as I haven't tested yet, but you have to change the KB number and looking at the extracted files try changing the 6.0.1.0.mum entries to 6.0.1.1.mum See if that works.
Just set up another VM and tested and it works. So the full entry is: mkdir .\tmp expand.exe -f:*Windows*.cab *kb5011486-x64*.msu . >nul expand.exe -f:* *kb5011486-x64*.cab .\tmp >nul start /w PkgMgr.exe /ip /m:"%cd%\tmp\package_2_for_kb5011486~31bf3856ad364e35~amd64~~6.0.1.1.mum" /quiet /norestart start /w PkgMgr.exe /ip /m:"%cd%\tmp\package_3_for_kb5011486~31bf3856ad364e35~amd64~~6.0.1.1.mum" /quiet /norestart del /f /q *kb5011486-x64*.cab rd /s /q tmp