Discussion in 'Windows Vista' started by CaptainSpeleo, May 3, 2021.
Why do to have to hide optional updates?
I'll try to answer your comments and advice in the order that you submitted them.
(Note: I install Windows Vista SP2 64-bit in the normal manner and not in VM mode, so I probably run into a few problems that you don't, and may be why we disagree on a few steps)
I wasn't sure if leaving Windows Defender running would cause a problem, especially when deploying the SOQU mass install script and IE9 update script, so that's why I recommended disabling it.
Wouldn't removing what I consider to be some unnecessary Windows componants result in fewer updates during the initial "check for updates" scan in step #19?
You're saying to install Root Certificate first BEFORE installing the drivers in step #4?
You're saying to deploy Vista_SHA2_WUC option #3 in step #18 and then select and install ONLY the Windows Server 2008 updates that are displayed in step #19?
You're saying to leave KB971644 selected and install it with the rest of the Windows Server 2008 updates in step #19?
(Note: The install process would freeze every time it got to this update, which is why I recommended hiding it)
You're saying to install KB5006750 (October 2021 servicing stack update) AFTER installing KB4474419 in step #16 and BEFORE deploying Vista_SHA2_WUC - Install_WUC.cmd in step #17?
(Note: Windows Update would display code #8000266 and prevent updates from being installed if I installed KB5006750 before step #30)
I didn't bother to mention it in the guide, but I do deploy the IE9 script with KB5006671 (October 2021 IE9 cumulative update) AFTER step #31, which updates it to version 9.0.270.
It's not absolutely necessary to hide all of the optional updates.
In my case, most of them are unneeded and very outdated device drivers.
Physical machine or virtual machine makes no difference for the most part. The only difference I can think is the fact that on a VM I can have 8 GB of RAM while on a physical machine you normally are stuck with 4 GB. That might cause you some timeouts that I won't see on the VM. Mind you I did test it on a physical machine but with an SSD and 4GB Page File due to only 4GB of RAM.
My test method is a bit different than yours in the sense that you are going with the safe way while I try to break thinks and then see what caused the breaking. So while you suggest that the defender should be disabled for the safety's shake I would leave it on and see if it actually breaks anything.
Removing unnecessary components can a be a wide discussion but do they actually break anything? If not it is just a taste preference and that is totally respectable.
The root certificate is a good idea to be installed before the drivers because many newer drivers won't install otherwise. So if you have updated drivers for example for graphic cards or what ever that are dated (signed) after the date of the Vista SP2 they will fail to install until you update the root certificate. When I say for example that the guest additions will fail to install I mean that the drivers inside the guest additions won't install because the signature is not recognized. The exact same can happen with any numbers of drivers especially when we speak about physical machines. At any rate if you install your drivers without any problems who cares but this works for you and not for everybody.
About the freeze that you experience with KB971644 any chance that you exceeded the hard limit of 150 updates at once? For some reason Vista will always freeze if you try to install 150 or more without a restart in between. That will happen regardless of physical machine or virtual machine, installing offline or through windows update. The only solution to this is to install less than 150 (make it 145 to be on the safe side) restart and then install the rest.
Regarding the Vista_SHA2_WUC options. I go with option 3 so that I skip the multiple scans. Then -assuming that I install the updates through the windows update- I would choose all the WS2008, (but no more than 145 at once) restart and then I will install the Vista ones which at this point won't be more than 7-8 updates. You can as well choose option 3 and then do first the vista updates and then WS2008. It is just fine just a bit more duplicates and superseded updates. I am saying option 3 to skip the multiple scans. Now if option 3 fails then you can go for the multiple scans.
I do install the final servicing stack update before the Vista_SHA2_WUC. This is my preference though. What it matters a bit is that regarding on the servicing stack update that you are on you will get different results in the initial scan. Different IE9 Cumulative updates for example. So it is a bit better to be on the final one before the initial scan. At any rate you need KB4493730 and then KB5006750. Everything between is superseded. I never got the error code that you are saying regardless of VM or physical machine. It could be the RAM limitation of your machine that is causing it. Just try again and eventually it will succeed. (I guess you don't mean the ESU preparation package)
The latest cumulative for IE9 can be installed at any point after you have installed IE9 + KB5006750 + Restarted the computer. Personally I do it before the initial scan so that I am not offered twice the cumulative.
Keep up the good work Captain!
The Dell Precision M6400 laptop that I use for testing is 10+ years old and has 2 Kingston 120 GB SSD's and 8 GB of DDR3-1066 RAM.
The 5 drivers (chipset, graphics, audio, ethernet, wireless) that I install are dated 2017 or older, so that's probably why none of them fail to install or work properly.
With the initial scan after selecting option #1, I get 198 updates.
If I deselect all of the .NET Framework updates until doing the second scan, I get 165 updates to install.
The install process goes fine until it gets to KB971644, then it completely freezes.
That's why I hide it.
I will try out option #3 instead of first choosing option #1 and then later choosing option #2.
So you're saying not to install KB4474419 at all in step #16, and to replace it with KB5006750?
If it works correctly and doesn't cause Windows Update to display the C8000266 error code, that should prevent the 10+ SSU's from appearing during step #23.
I don't install any of the ESU LPP updates.
I will also try it out that way.
You have quite a nice machine actually! Most of the Vista era laptops had 4GB DDR2. Did your laptop came with Windows seven initially?
Regarding the SSU you need both KB4493730 and KB5006750. (I guess that you meant to write KB4493730) The latest SSU won't install without KB4493730. And ofc you need the SHA2 support as well (KB4494419-v4) before you can install the latest SSU.
Also when you install the updates through WU did you install at any moment more than 150 updates at once without restart? This could explain the freeze.
You need to login to view this posts content.
Based on what you said and suggested, this is the installation order that I now plan to use for the next test install and update.
Does it look okay?
One thing I would like to point out.
I don't see you listing the cumulative update for .net 4.6.1. This update won't be offered by WU anymore and requires the .net bypass and kb4019478 (Update for d3dcompiler 4.7) already installed.
Btw do you restart after the Platform update supplement? If not shut down the internet before you start installing IE9 and see what will happen
A new test install and update has successfully been done, and the new guide has been updated.
I would've posted it yesterday, but the site was down all day for some reason.
I selected option #3 in Vista_SHA2_WUC, as you suggested, before doing the initial scan, but the scan took over an hour and displayed 313 Vista/Server 2008 updates.
I selected option #1, as I've been doing, and the scan took much less time and displayed 202 Vista updates.
I reduced the list to less to 150, and KB971644 installed fine and didn't freeze the install process.
I then installed the remaining updates before switching to option #2 to obtain and install the 72 Server 2008 updates.
The mass install script worked fine and successfully installed the 22 SOQU's between February 2020 and November 2021.
Because KB5006750 was installed after KB4474419, as you suggested, several older SSU's didn't appear in Windows Update and need to be hidden.
you need to update ie9 as i know its outdated and some sites dont work, but its part of the os and it includes security updates for the os itself.
It only includes security updates related to IE. You can disable IE and then you won't need them.
Contents deleted by poster.
You should update the IE9 to the latest state regardless of using it or not. IE is deeply integrated with the system in windows Vista and it is even handling the updating process if I am not mistaken.
The new guide has been edited to include the instructions and links for updating Internet Explorer to version 9.0.270.
Would you mind browsing through the entire guide and see if everything looks okay now?
You could add the suggestion to restart and verify manually the the cumulative update has been installed by checking the About menu in IE9. This due to the fact that the script won't give you any result messages regarding the installation. Also keep in mind that the latest SSU is needed for the cumulative to install.
I've added a line about checking "Help - About IE9" to verify the version number.
I did install the latest SSU (KB5006750) before deploying the script and IE9 update.
I'm waiting for the next "patch Tuesday" to see if a new IE9 update and/or a new SSU is released.
It's my guess that steps #16 and #17 will need to be edited in the guide almost every month.
You are right about #17
Regarding the SSU though not really because it could be another year before we have a new SSU. This was more or less the interval for the previous SSU.
Regarding checking the version of IE9 please not that it won't show any difference until you restart the computer.
Based on what you said in post #136, I did add a line about checking the IE9 version after restarting the computer.
I'm holding off doing another clean install and update of Windows Vista SP2 64-bit until after December 2021 "patch Tuesday".
[QUOTE="CaptainSpeleo, post: 1711533, member: 1382386"
I'm holding off doing another clean install and update of Windows Vista SP2 64-bit until after December 2021 "patch Tuesday".[/QUOTE]
I assume we mortals will simply need to install any relevant components from tomorrow´s patch, or are you advising a full clean install for everyone?