Updated - How To Install And Update Windows Vista SP2 64-bit Beyond Its EOL Date

Discussion in 'Windows Vista' started by CaptainSpeleo, May 3, 2021.

  1. CaptainSpeleo

    CaptainSpeleo MDL Senior Member

    May 24, 2020
    369
    168
    10
    OSMAN:
    It's already up to date until January 2020 with the KB4534303 security monthly quality rollup.
    I tried manually installing the October 2021 KB5006736 security monthly quality rollup to bring it up to date, but it failed with a "This update does not apply to your system" message.
    The KB4575904 ESU Licensing Preparation Package no longer can be used because it breaks Windows Update and generates an error code.
     
  2. xrononautis

    xrononautis MDL Junior Member

    Mar 30, 2021
    86
    20
    0
    Awesome :) Note that this procedure is needed only for x64 versions. On x86 installs just by double clicking the update... go figure.. The "M" on microsoft probably stands for mess...
    For the next cumulative update you just need to edit the .bat file and put the correct kb and package file names. I will make sure to post the updated script though.
     
  3. xrononautis

    xrononautis MDL Junior Member

    Mar 30, 2021
    86
    20
    0
    In my tests I was able to install KB4575904 after I had installed everything else and it didn't break the WU (as far as I know at least). No error messages.. nothing, just "Your system is up to date" message. Still it didn't detect the monthly roll up. I could install the monthly manually but the weird thing is that when I tried to install previous monthlies after I had installed the October one they could install as well. They shouldn't apply since the latest was already installed. So my understanding is that it doesn't install properly under the hook. I will repeat the process at some point and check the cbs log.
     
  4. CaptainSpeleo

    CaptainSpeleo MDL Senior Member

    May 24, 2020
    369
    168
    10
    I was already thinking ahead and was going to ask you that.

    After reading OSMAN's reply, I decided to try to manually install the KB4537810 February 2020 SMQR update to see if it installs, and it did.
    I'm going to attempt the same with the SMQR updates from March 2020 until October 2021 to try to bring Vista up to date.
    My birthday party plans for today got cancelled, so I've got plenty of free time on my hands to do it.
     
  5. xrononautis

    xrononautis MDL Junior Member

    Mar 30, 2021
    86
    20
    0
    Happy birthday man!!
    You could install the security only updates between 2020-01 and today with the last one being quality rollup. Although honestly it shouldn't make so much of a difference.
     
  6. CaptainSpeleo

    CaptainSpeleo MDL Senior Member

    May 24, 2020
    369
    168
    10
    The KB4575904 ESU LLP installed fine for me, but after I did a restart and then did a "checking for updates" with Windows Update, the red banner and the 8000266 failure code appeared.
    After I uninstalled it and did a restart, Windows Update worked fine again.
    Frustrating!
     
  7. xrononautis

    xrononautis MDL Junior Member

    Mar 30, 2021
    86
    20
    0
    Well we are trying to make things work in a way that they are not mend to in first place! So be proud of any obstacle we put aside and continue :)
    You could install KB4575904 install the monthly and then uninstall KB4575904 again. Not that you really need windows update any more though at this point though.
     
  8. CaptainSpeleo

    CaptainSpeleo MDL Senior Member

    May 24, 2020
    369
    168
    10
    xrononautis:
    I've already downloaded and copied all of the SMQR updates from February 2020 to October 2021 into the Vista laptop.
    I'm in the process of installing them now, in-between what I'm doing at home, so it's going to take awhile.
    After I'm done, I'm going to re-install KB4575904 ESU LLP and then see what happens when I do a "checking for updates".
    I'm not going to bet yet on the 8000266 failure code not appearing.
     
  9. xrononautis

    xrononautis MDL Junior Member

    Mar 30, 2021
    86
    20
    0
    If you are going this route of installing all the quality rollups you might want to install the "security only" which are not cumulative. SMQRs are cumulative which means that they "accumulate" all the updates (they are meant for installing only the latest) while the security only includes only the respective month's security updates.
     
  10. CaptainSpeleo

    CaptainSpeleo MDL Senior Member

    May 24, 2020
    369
    168
    10
    #50 CaptainSpeleo, Nov 7, 2021
    Last edited: Nov 8, 2021
    (OP)
    I'm so used to installing the SMQR in Windows 7 every month, so I naturely am doing the same with Windows Vista/Server 2008.
    I've already gone through the trouble of obtaining all the SMQR updates, so I'll finish up with them.
    When I submit my new Windows Vista/Server 2008 install and update guide, I'll make sure the last steps are for the SOQU's and not for the SMQR's.

    Update:
    All of the SMQR's for February 2020 through September 2021 are installed.
    I kept getting a "This update does not apply to your system" message when trying to install the October 2021 SMQR update.
    I decided to try the October 2021 SOQU update, and it installed fine.

    After I was all done, I decided to install KB4575904 ESU LLP again to see if it still generates an error code in Windows Update.
    Sure enough, it did.
    After I uninstalled it, Windows Update worked fine.

    If all goes well, I plan to post an edited install and update guide for Vista/Server 2008 tomorrow.
     
  11. CaptainSpeleo

    CaptainSpeleo MDL Senior Member

    May 24, 2020
    369
    168
    10
    #52 CaptainSpeleo, Nov 8, 2021
    Last edited: Nov 8, 2021
    (OP)
    After 2 test clean installs and several problems that had to be dealt with over a 3-day period, a new Windows Vista SP2 64-bit install and update guide has been submitted in the original post (#1).

    For those of you who want to keep Internet Explorer 9 up to date (even though few websites now support it), read posts #33 and #37 and give all the thanks to xrononautis.
     
  12. CaptainSpeleo

    CaptainSpeleo MDL Senior Member

    May 24, 2020
    369
    168
    10
    That's the plan.
     
  13. CaptainSpeleo

    CaptainSpeleo MDL Senior Member

    May 24, 2020
    369
    168
    10
    These are the Windows Update Agent and Root Certificate files being used after doing a clean install of Windows Vista SP2 64-bit.
    Does a more current version exist for either file?

    Clipboard.jpg
     
  14. xrononautis

    xrononautis MDL Junior Member

    Mar 30, 2021
    86
    20
    0
    The Windows Update Agent 7.6 is not needed at all. By deploying Sha_WUC tool you are installing 7.7 anyway and it can be installed directly.
    About the root certificates I haven't come across an update and I never had any problems. There might exist updated ones but I am not aware of one.
    One thing though related to the root certificate is the update kb2763674 (SHA256 related app signing). Before installing this update I couldn't install for example the tigervnc application. So if you have any applications that refuse to install try installing this one and try again.
     
  15. xrononautis

    xrononautis MDL Junior Member

    Mar 30, 2021
    86
    20
    0
    #56 xrononautis, Nov 8, 2021
    Last edited: Nov 9, 2021
    Here is my sequence of installing updates: (This is the long version since I am basically doing everything offline and I just use windows update only for verification. At the bottom there is the short version if you just want to get the update up and running). The reason why I am extra keen on which updates supersede what is that in Vista you cannot clean up the update backup files the way you can on Seven. So since they stay fat taking space on the hard drive permanently you can as well install the absolutely minimum needed. Also I will need to occupy less space on my small repository that way.

    0. I forgot to mention the root certificate which I install absolutely first because the VirtualBox tools won't install without it.

    #1 Wave
    a) Longscan issue: kb3205638, kb4012583, kb4015380, kb4019204 (the last two have been replaced by kb453403 and can be skipped if you install it before the initial scan)

    b) Platform update kb971644 (Consists of kb960362, kb971512, kb971513, kb971514)
    c) KB956250 .Net related update (installs automatically with .net 3.5 if you are online during the installation)
    d) kb2117917 Platform update supplement
    e) kb2763674 SHA256 related app signing
    f) kb4019478 d3dcompiler_4.7

    g) kb4090450 SHA2 Support without build changing (The installation will crash if you try to install a monthly with only this update installed and not the one beneath)
    h) kb4474419 SHA2 Code signing support, Prerequirement for the SHA2_WUC tool

    Restart the computer

    #2 Wave Servicing stack updates and IE9 setup
    a) kb4493730 2019-04 Prerequirement for the SHA2_WUC tool
    b) kb5006750 2021-10 Prerequirement for the IE9 Esu cumulative
    c) IE9 setup

    Restart

    #3 kb5006671 2021-10 Cumulative Security update v9.0.270 (installs only through the script on x64)
    mkdir .\tmp
    expand.exe -f:*Windows*.cab *kb5006671-x64*.msu . >nul
    expand.exe -f:* *kb5006671-x64*.cab .\tmp >nul
    start /w PkgMgr.exe /ip /m:"%cd%\tmp\package_2_for_kb5006671~31bf3856ad364e35~amd64~~6.0.1.0.mum" /quiet /norestart
    start /w PkgMgr.exe /ip /m:"%cd%\tmp\package_3_for_kb5006671~31bf3856ad364e35~amd64~~6.0.1.0.mum" /quiet /norestart
    del /f /q *kb5006671-x64*.cab
    rd /s /q tmp

    Restart and verify that the above is installed (Just open the about menu in IE9 and see that the version is 9.0.270)

    #4 Wave .Net Setup (3.5 and 4.x of your choice) In my tests 4.5.2 was able to detect ESU updates 4.6.x didn't detect any updates the latest cumulative for 4.6.x can be installed manually though)

    Restart

    #5 Wave Updates to .net Which replace other updates and therefore is a good idea to install before the initial scan.
    a) kb982525 (only kb979899 the rest are superseded), kb982536 (only kb976768, kb976772 the rest are superseded) Those updates are for .net 3.5
    b) kb4040978 part of cumulative updates kb4049019, kb4041086 .net 2.0
    c) kb4578951 part of kb5006764 .net 2.0 & 3.0 (Curiously this doesn't need dotnet esu bypass)

    Deploy dotnet esu bypass

    d) If you have .net 4.6.1 installed the cumulative won't detect so install kb5006061 (part of KB5006764) manually

    e) Install those updates before the 2020-01 monthly quality rollup or they will bug.
    kb3060716, kb4014793, kb4018556, kb4036162
    f) kb4534303 2020-01 Cumulative monthly quality rollup (this will supersede something like 70 updates if you have option 3 on sha_wuc tool)

    #6 Those updates are replacing other updates and therefore is good to install them before the initial scan
    kb3110329, kb3170455, kb4074621, kb2820917, kb2893294, kb3138378, kb3140709, kb3193418, kb4014794, kb4018821, kb4074834, kb4090928, kb4101477, kb4291391

    #7 At this point you can install windows update client 7.7 with the SHA2_WUC tool

    Restart

    #8 Patch windows update client with option 3 (Everything else and you are just installing duplicates)

    #9 Scan for updates and install the rest of the updates. (It won't be more that 130 or so and you will see only updates that haven't been superseded)

    If you deploy wuc 7.7 at an earlier point make sure that you choose "Don't check for updates" or you will have to wait for the scan after every .msu file you install.
    Note that kb4056564 adds TLS 1.1 and 1.2 to IE9 after you install this update run this registry fix and then go manually to check them on IE9 Settings.
    Windows Registry Editor Version 5.00

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\AdvancedOptions\CRYPTO\TLS1.1]
    "OSVersion"=-

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\AdvancedOptions\CRYPTO\TLS1.2]
    "OSVersion"=-

    [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\AdvancedOptions\CRYPTO\TLS1.1]
    "OSVersion"=-

    [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\AdvancedOptions\CRYPTO\TLS1.2]
    "OSVersion"=-

    An alternative path is to install the "long scan issue" updates then the first servicing stack stack and the SHA2 support and deploy the sha2_wuc tool. This is the shortest way to a working windows update.
     
  16. CaptainSpeleo

    CaptainSpeleo MDL Senior Member

    May 24, 2020
    369
    168
    10
    Oh, okay.
    Do you recommend KB2763674 (01/07/2013) be installed between steps #9 and #10 of the newly posted guide?
    Do you have any questions and comments about the newly-posted guide?
     
  17. CaptainSpeleo

    CaptainSpeleo MDL Senior Member

    May 24, 2020
    369
    168
    10
    Whew! I got lost and confused reading post #56. :confused:
     
  18. xrononautis

    xrononautis MDL Junior Member

    Mar 30, 2021
    86
    20
    0
    The great spirits meet each other! :) We posted simultaneously. If I am doing the process on a laptop to which I connect with tiger vnc I will install at the earliest moment so that I can install tiger vnc. If you don't have anything in particular needing it it can wait but in general I will say together with the platform and .net prerequirements is a good time to install it.
     
  19. CaptainSpeleo

    CaptainSpeleo MDL Senior Member

    May 24, 2020
    369
    168
    10
    I had no idea what TigerVNC is until you mentioned it and I read about it.
    It's definitely something that I have no use for.

    The wife of my long-time friend of 36 years just called me to let me know he's been diagnosed with congestive heart failure.
    He's 84 years old and will be in the hospital for at least the next 2 days.
    She's 79 years old and was diagnosed with it last year and went through several months of treatment before her heart function improved to 50%.
    Him and I were supposed to visit yesterday for my birthday, but he wasn't feeling good, so he cancelled the visit.
    That's how I wound up being free all day to deal with the new Vista guide.

    It's time to take a break from the computer and put some nourishment in my body and get caught up on the national news.
    Until later.