Offline package installation order

[Cixert]

Edit, the solution is here:

Original post:
Is there a post that tells the order to install update packages in Windows Seven Ultimate SP1?
I install the packages in this order but Windows Update says that I have pending updates.
What offline packages do I have to install to avoid pending updates?

1- Cumulative Update Package 2016 (KB3125574) aka SP2

2- SHA-2 (KB4474419-v3)

3- SSU with SHA-2 signing code (KB4490628) (SSU 2019-03)

4- SSU KB5017397 (SSU 2022-09).

5- Monthly Cumulative Update (not ESU)
2020-01-14 (KB4534310) (quality only) (latest non-ESU)
2020-01-14 (KB4534314) (security only) (latest non-ESU)
Do I have to install both packages?
Right now Windows Update says that I have 24 pending updates.
All dated before 2018. What seems strangest to me is that an update is called SP1 (kb976932), although it is only 9.1 MiB

Edited November 16, 2023 by Cixert
Inserted post with solution

[Cocodile]

Usually SSU are installed before SHA2, at least on Vista, could be the same case with 7.

Also, we need to assume pre-2018 updates were all superseded and make no sense anymore.

[Cocodile]

For example, SHA-2 (KB4474419-v3) you're trying to install was superseded with this one from 2019.

https://support.microsoft.com/en-us/topic/2019-sha-2-code-signing-support-requirement-for-windows-and-wsus-64d1c82d-31ee-c273-3930-69a4cde8e64f

On Vista it is marked as v4, the same case would be with 7.

[Dixel]

6 hours ago, Cixert said:

All dated before 2018.

Before 2018 would be the key words here, we'd have to assume they are simply not needed. Just check if you have the latest SHA2 version, like @Cocodile wrote.

[ED_Sln]

7 hours ago, Cixert said:

2020-01-14 (KB4534310) (quality only) (latest non-ESU)

The latest KB4539602, it fixed the wallpaper bug.

My list of updates:

KB917607

KB969168
KB971033
KB2545698
KB2547666
KB2574819-v2
KB2592687
KB2603229
KB2667402-v2
KB2670838
KB2685811
KB2685813
KB2698365
KB2729094-v2
KB2732059-v5
KB2750841
KB2761217
KB2773072
KB2818604
KB2823180
KB2830477
KB2834140-v2
KB2853587
KB2862330-v2
KB2894844
KB2900986
KB2919469
KB2970228
KB2984972
KB3004375-v3
KB3006137
KB3046269
KB3059317
KB3064209
KB3102429-v2
KB3123479
KB3125574-v4
KB3138612
KB3156016
KB3159398
KB3161102
KB3161949
KB3179573
KB3184143
KB4019990
KB4474419-v3
KB4490628
KB4575903

+

Stack.
Monthly cumulative.
Cumulative Framework 3.5.

You can open UpdatePack7R2 with 7zip and see the list of required updates. That's what I did, and added a few optional updates as well.

But even after that, the update center still offers updates, some of them replaced but it still offers them, some leftover telemetry updates and updates to Win 10.

Edited November 7, 2023 by ED_Sln

[Cixert]

8 hours ago, Cocodile said:

Usually SSU are installed before SHA2, at least on Vista, could be the same case with 7.

Also, we need to assume pre-2018 updates were all superseded and make no sense anymore.

Thanks, I thought I had read on a website that it was the other way around.

8 hours ago, Cocodile said:

For example, SHA-2 (KB4474419-v3) you're trying to install was superseded with this one from 2019.

https://support.microsoft.com/en-us/topic/2019-sha-2-code-signing-support-requirement-for-windows-and-wsus-64d1c82d-31ee-c273-3930-69a4cde8e64f

On Vista it is marked as v4, the same case would be with 7.

That link leads to the v3 download, I don't see that there is a v4 download for Windows Seven
https://catalog.update.microsoft.com/search.aspx?q=kb4474419
 

3 hours ago, ED_Sln said:

The latest KB4539602, it fixed the wallpaper bug.

My list of updates:

 

  Reveal hidden contents

KB917607

KB969168
KB971033
KB2545698
KB2547666
KB2574819-v2
KB2592687
KB2603229
KB2667402-v2
KB2670838
KB2685811
KB2685813
KB2698365
KB2729094-v2
KB2732059-v5
KB2750841
KB2761217
KB2773072
KB2818604
KB2823180
KB2830477
KB2834140-v2
KB2853587
KB2862330-v2
KB2894844
KB2900986
KB2919469
KB2970228
KB2984972
KB3004375-v3
KB3006137
KB3046269
KB3059317
KB3064209
KB3102429-v2
KB3123479
KB3125574-v4
KB3138612
KB3156016
KB3159398
KB3161102
KB3161949
KB3179573
KB3184143
KB4019990
KB4474419-v3
KB4490628
KB4575903

+

Stack.
Monthly cumulative.
Cumulative Framework 3.5.

You can open UpdatePack7R2 with 7zip and see the list of required updates. That's what I did, and added a few optional updates as well.

But even after that, the update center still offers updates, some of them replaced but it still offers them, some leftover telemetry updates and updates to Win 10.

 

Thank you.
Do you know if the KB4539601 (2020-01-31) package is cumulative and replaces the KB4534310 (2020-01-14) package or if both packages must be installed?

I do not remember if I have installed KB4534310 (2020-01-14), if I try to install this now says "the update is not applicable to the equipment"

Edited November 7, 2023 by Cixert

[ED_Sln]

9 hours ago, Cixert said:

Do you know if the KB4539601 (2020-01-31) package is cumulative and replaces the KB4534310 (2020-01-14) package or if both packages must be installed?

Oops, sorry, got the numbers confused, KB4539601 does not replace KB4534310, it complements it. KB4539601 replaces KB4534314. And also it can only be downloaded from the Update Catalog, it's not offered through WU.

[Cixert]

I have checked C:\Windows\Logs\CBS\CBS.log to see the error cause "the update is not applicable to the equipment" when trying to install "Monthly Rollup update."
CBS.log says "superseded"
I see that every time a "Monthly Rollup update" is installed, the previous "Monthly Rollup update" disappears from the updates list performed in Windows 7.
The same does not happen with "security only" updates, which continue to appear in the list of updates even if new versions are installed.

[Monroe]

Help with the 'Final Windows 7' updates ...

Glad to read about these final Windows 7 updates. Just bought a Windows 7 Pro ThinkPad notebook last month. I want to have all the Win 7 updates on hand before Windows 7 updating goes away. In case for some reason I might need any of them later.

So this is my list of updates that I have currently downloaded. I downloaded the SP1 update anyway ... really don't need it since Windows 7 Pro SP1 is on the Recovery Disks.

01 Install KB3020369 for x64 Systems
02 Install KB3125574 Convenience Rollup Update - (SP2) for Windows 7 x64

At the MS forum there was mention about a 'Windows Update Loop Fix' to be able to download Windows 7 updates ... did that.

There were many updates to download after 'SP2' but all except for 4 or 5 (I think) downloaded.

Now to the downloads mentioned in this topic or post. I got everything this morning from the Windows Update catalog.

Windows Update Agent v7.6 downloaded earlier.

01 KB4474419 x64
02 KB4490628 x64
03 KB4534310 x64
04 KB4539601 x64
05 KB4539602 x64 (01-2020)

I had KB4534314 x64 (01-2020) downloaded to install but in the above post from ED_Sln ...
he states: "KB4539601 replaces KB4534314. And also it can only be downloaded from the Update Catalog, it's not offered through WU."

So does this list look like I have all the 'final' Win 7 updates into Jan 2020 and  a little after.

Just to add, I also downloaded the MS download of Internet Explorer 11 for Windows 7 only as stated by M Soft.

"Internet Explorer 11 (64-bit) for Windows 7 ONLY" .

...

Thanks ...

Edited November 11, 2023 by Monroe
add,

[Lemberg]

https://blog.simplix.info/update7/#history

[Monroe]

Thanks for the list. I want to make a complete image backup of everything that was released up to the end date for Windows 7. Then I  will always have that complete and will not have to worry about anything 'missing' from January 14, 2020 and before.

I am going with this information from M$ ...

"Windows 7 support ended on January 14, 2020.

The specific end of support day for Windows 7 was January 14, 2020. Technical assistance and software updates from Windows Update that help protect your PC are no longer available for the product."

I am not sure about any later updates after Jan 2020. Once I get the image backup made then I will check on updates listed after Jan 2020 and if they will install on my computer.

...

[Cixert]

Windows Seven updates list to install offline:

In this post I list the latest updates for the Windows 7 operating system (NT 6.1) in its final versions. If there was any mistake, please comment.
Internet Explorer and .net Core is not included.
There are 2 types of general updates.

Free updates that are facilitated until January 2020, except for small exceptions, and ESU updates (Extended Security Updates) that are facilitated to the business environment in cumulative packages, prior economic payment until at least 2024 year.

The following updates requested by Windows Update have been removed from the list because these are not necessary or cause problems:
KB971033 (Update for Windows Activation Verification Technologies)
KB2952664 (System compatibility update for migration to Windows 10)

The list is shown in recommended installation order, although there are people who say it is better to leave the Cumulative Update Packages 2016 for the end.


FREE UPDATES

-Service Stack (SSU) SHA-2 compatible (KB4490628) (2019-03)
-Service Pack SP1 (KB976932)
-SHA-2 signature code (KB4474419)
-Windows Update supports SHA-2 (KB3138612)
-Platform update for SP1 (Direct 2D-3D, etc.) (2013-02-26) (KB2670838+KB2834140)
-Cumulative Update Package 2016-05-17 (KB3125574) aka SP2
-Cumulative Update Package 2016-08-16 (KB3179573)
-Mothly Rollup 2020-01-14 (KB4534310) (latest non-ESU)
-Mothly Rollup 2020-01-31 (KB4539601) (complements 2020-01-14)

Windows Journal, choose between:
-Update Windows Journal vulnerability (KB3155178) (2016-05)
-Remove components from Windows Journal KB3161102-v2 (2016-09)

Windows Management Framework 3.0 (if installed)
(PowerShell 3.0,WMI,WinRM,Management OData IIS Extension & Server Manager CIM Provider)
-KB2823180 (2013-04) WMF 3.0 Update

List shows Windows Update after installing all update packages:
KB973688 (2011-07) Microsoft XML Core Services 4.0 SP2
KB2667402 (2012-07) Vulnerabilities in Remote Desktop
KB2676562 (2012-05) Combined Security Update for Microsoft Office, Windows, .NET Framework, and Silverlight
KB2698365 (2012-08) Windows Data Access Components Vulnerability
KB2813347 (2014-09) Vulnerability in Remote Desktop Client
KB2862330 (2014-01) Security for USB drivers
KB2900986 (2013-11) Security for ActiveX killbits
KB2984972 (2014-02) Remote Desktop Connection 7.1 Update
KB3004375 (2015-02) Improve command line auditing (tmb included in KB3031432)
KB3046269 (2015-04) Task Scheduler Vulnerability
KB3059317 (2016-06) Microsoft Common Controls Vulnerability
KB3156016 (2016-06) Microsoft graphics component security
KB3159398 (2016-06) Security for Group Policy
KB3161949 (2016-06) Security for WPAD

Recommended List does not show Windows Update:
KB917607 Install Winhelp32.exe (Help not supported error)
KB2574819 (2013-09) DTLS protocol compatibility
KB2592687 (2013-09) Remote Desktop Protocol (RDP) 8.0 Update
KB2603229 (2011-10) Two 32-bit register values are incorrect in 64-bit version
KB2667402 (2012-08) Terminal Server denial of service vulnerability
KB2685811 (2012-11) Kernel-mode driver framework update version 1.11
KB2685813 (2012-11) Update User-Mode Driver Framework version 1.11
KB2729094 (2012-10) Segoe UI symbol font update
KB2732059 (2012-09) Error cannot open an .oxps file
KB2750841 (2012-11) IPv6 Preparation Update
KB2761217 (2012-11) Add Calibri Light and Calibri Light Italic fonts
KB2773072 (2014-09) Changes Windows 7 game rating systems
KB2818604 (2013-04) Microcode update for AMD processors
KB2835174 (2013-05) Incorrect disclaimer Product activation assistant in v. Polish
KB2919469 (2014-02) Incorrect Canada country code
KB2970228 (2014-10) New symbol of the Russian Ruble
KB3006137 (2015-02) Change Lithuania currency symbol from Lithuanian litas (Lt) to euro (€)
KB3064209 (2015-06) Intel CPU microcode update
KB3102429-v2 (2016-03) Currency symbols Azeri Manat and Georgian Lari
KB3184143 (2016-10) Remove ads from free Windows 10

For non-ESU customers only:
KB3123479 (2015-05) Deprecated SHA-1 hash algorithm in root certificates
KB3156019 (2016-05) Microsoft graphics component security


ESU (EXTENDED SECURITY UPDATE)

Servicing Stack Updates (SSU)
Before proceeding update to the latest SSU stack version available.
SSU 2022-09 (KB5017397) is required at least in 2023.

For ESU customers only, choose between:
-ESU MAK licensor (individual online) (KB4575903)
-VANT-ESU licensor (multiple online-offline by volume)
More info:
https://learn.microsoft.com/en-us/troubleshoot/windows-client/windows-7-eos-faq/windows-7-extended-security-updates-faq
https://www.dell.com/support/kbdoc/en-us/000184542/windows-7-extended-security-updates

Latest ESU rollup package (published at least until 2024)
Offline installation is compatible with all systems until last update in 2024:
https://support.microsoft.com/en-us/topic/windows-7-sp1-and-windows-server-2008-r2-sp1-update-history-720c2590-fd58-26ba-16cc-6d8f3b547599


.NET FRAMEWORK RUNTIME

Free updates:
-2014-09 NET Security Update 3.5.1 (KB2894844)
-.NET Framework 4.8 (ndp48-kb4503575)
-2020-01 Update cumulative package quality and safety for .NET Framework for Windows 7 (latest free)

ESU customers only:
Search the Microsoft Update Catalog for the latest version, at least until 2024.
https://catalog.update.microsoft.com/Home.aspx
For example:
2023-11 Net Framework for Windows 7
(replace the date with the estimated one)

Edited November 16, 2023 by Cixert

[Monroe]

Cixert ... thanks for all that information. My problem was not being able to get IE 11 to work so I could go online to the MS update page. I was able to do it once and thought I had a good backup of everything but I did not. The program I had works great for a Windows XP image backup and it is supposed to work with Windows 7 x64. It did a great backup but would not restore anything.

So I did a couple more restores with the T520 recovery disks ... found a good backup program on the internet using my Win XP computer ... but I could not get IE 11 installed until I got two downloads that were needed. So again yesterday I started early in the morning with the T520 recovery disks ... put the 'SP2' update on after and the few extra downloads needed and went right for the Windows update site.

Everything worked 100% ... had 73 security updates and 13 non -security updates. All updates downloaded after several passes ... no failures. After the security updates were installed I made a complete backup of the HD ... not going to have to spend all that time again installing recovery disks and updates.

Then after the backup was finished, I went back to Windows update and downloaded the 13 non-security updates. All was good, no failures ... so I got off the internet and made another back up with everything on the disks. I wanted two separate backups in case something in the 'non-security' backups messed up the computer. I would not have to go back to 'square 1' ... it took all day ... actually three backups, one set of 5 dvds and then I used two 32GB flash drives. I wanted to be covered ... I am satisfied the backups are good but when it's time to do a restore one day ... then I will know for sure if everything is 100% good.

So the backups are my new 'Factory Restore' disks ... hopefully I'm done with the older T520 recovery disks and all the Windows 7 updates into Jan 2020.

I don't know if I will look into the updates after Jan 2020 ... just happy to have everything done going into Jan 2020.

I appreciate your time involved with your post ... like I said, I didn't have success till yesterday and I could have saved you some work.

thanks ...

 

Edited November 16, 2023 by Monroe
sp,