Windows 7 SP1 Convenience Rollup

[free780]

This makes me happy. There will still be 3500 individual Office updates each month, but they tend to be quick to install.

Even more with multiple versions of Office.

[3s-gtech]

True, but when we change Office version, we do it all-out. Old version is pulled from WSUS straight away to save space.

[Arthur]

I was reading around and some people are saying that with an offline integration of this rollup, SFC /SCANNOW detects damaged components post install.

Microsoft have finally released a hotfix which fixes the SFC errors when you offline integrate the rollup.

 

KB3181988 - SFC integrity scan reports and fixes an error in the usbhub.sys.mui file in Windows 7 SP1

 

Symptoms

After you install Convenience rollup update for Windows 7 SP1 and Windows Server 2008 R2 SP1 (KB3125574), every System File Checker (SFC) integrity scan reports and fixes an error regarding the following file:

 

%windir%\system32\drivers\en-US\usbhub.sys.mui

 

Cause

This issue occurs because the usbhub.sys.mui file is referenced and linked in two winsxs components:

 

• usb.inf.resources
  
• usbport.inf.resources
  

In update rollup KB3125574, the usbport.inf.resources component is included, but the usb.inf.resources component isn't included. The usbhub.sys.mui file encounters a problem in SFC integrity scans because it's part of both the usb.inf.resources and the usbport.inf.resources components.

[Arthur]

New article from Microsoft.

 

Windows 7 refreshed media creation

 

The fastest way to patch a Windows 7/Server 2008 R2 machine is to take advantage of the Convenience Update Rollup from April 2016 (KB3125574). The Conv. UR updates a lot of components and to ensure that that happens without any servicing problems, it has as a prerequisite the Servicing Stack Update from April 2015 (KB3020369). To install most of the other patches in between April 2016 and October 2016 we will include the following updates:

 

• KB3020369 (April 2015 Servicing Stack Update)
  
• KB3125574 (April 2016 Convenience Update Rollup)
  
• KB3177467 (September 2016 SSU)
  
• KB3172605 (July 2016 Functional Update Rollup, 7C* package)
  
• KB3179573 (August 2016 FUR, 8C* package)
  
• KB2841134 (Internet Explorer 11, Optional)
  
• KB3185330 (October 2016 Monthly Quality Rollup, 10B’ package [contains September 2016 FUR, 9C* package])
   
  *3rd Tuesday package of that month.
  

The last update to install is KB3185330, at the moment of writing this guide, in the future just replace it with the latest monthly/preview rollup, found on the page below:

 

Windows 7 SP1 and Windows Server 2008 R2 SP1 update history

https://support.microsoft.com/en-us/help/22801/windows-7-and-windows-server-2008-r2-update-history

 

TL;DR version:

 

Download the updates:

http://www.catalog.update.microsoft.com/Search.aspx?q=3020369
http://www.catalog.update.microsoft.com/Search.aspx?q=3125574
http://www.catalog.update.microsoft.com/Search.aspx?q=3177467
http://www.catalog.update.microsoft.com/Search.aspx?q=3172605
http://www.catalog.update.microsoft.com/Search.aspx?q=3179573
http://www.catalog.update.microsoft.com/Search.aspx?q=2841134
http://www.catalog.update.microsoft.com/Search.aspx?q=3185330

 

Extract CAB files from MSU:

expand -f:* C:\files\Window7MediaRefresh\AMD64-all-windows6.1-kb3020369-x64_5393066469758e619f21731fc31ff2d109595445.msu C:\files\Window7MediaRefresh\CABs
expand -f:* C:\files\Window7MediaRefresh\AMD64-all-windows6.1-kb3125574-v4-x64_2dafb1d203c8964239af3048b5dd4b1264cd93b9.msu C:\files\Window7MediaRefresh\CABs
expand -f:* C:\files\Window7MediaRefresh\AMD64-all-windows6.1-kb3177467-x64_42467e48b4cfeb44112d819f50b0557d4f9bbb2f.msu C:\files\Window7MediaRefresh\CABs
expand -f:* C:\files\Window7MediaRefresh\AMD64-all-windows6.1-kb3172605-x64_2bb9bc55f347eee34b1454b50c436eb6fd9301fc.msu C:\files\Window7MediaRefresh\CABs
expand -f:* C:\files\Window7MediaRefresh\AMD64-all-windows6.1-kb3179573-x64_0ec541490b3f7b02e41f26cb2c444cbd9e13df4d.msu C:\files\Window7MediaRefresh\CABs
expand -f:* C:\files\Window7MediaRefresh\AMD64-all-windows6.1-kb3185330-x64_8738d0ef3718b8b05659454cff898e8c4f0433d7.msu C:\files\Window7MediaRefresh\CABs

 

Mount the image:

Dism /Mount-Image /ImageFile:C:\test\images\install.wim /Name:”Windows 7 ENTERPRISE” /MountDir:C:\test\offline

 

Install the first two updates offline:

Dism /Image:C:\test\offline /Add-Package /PackagePath:C:\files\Window7MediaRefresh\CABs\Windows6.1-KB3020369-x64.cab
Dism /Image:C:\test\offline /Add-Package /PackagePath:C:\files\Window7MediaRefresh\CABs\Windows6.1-KB3125574-v4-x64.cab

 

Unmount and commit the changes to the install.wim file:

Dism /Unmount-Image /MountDir:C:\test\offline /Commit

 

Install a reference machine with the above install.wim file and continue to install the updates:

Dism /Online /Add-Package /PackagePath:C:\temp\Windows6.1-KB3177467-x64.cab
Dism /Online /Add-Package /PackagePath:C:\temp\Windows6.1-KB3172605-x64.cab
Dism /Online /Add-Package /PackagePath:C:\temp\Windows6.1-KB3179573-x64.cab
Dism /Online /Add-Package /PackagePath:C:\temp\Windows6.1-KB3185330-x64.cab

 

Search online to install the remainder of the updates.

 

Sysprep the newly patched machine and capture an updated wim file.

 

In the future, specifically later this year, we will have a follow-up update to KB3125574, which will also be a fully cumulative update, and we will only need to update our image with one or two KBs to be fully patched. The current prerequisite for Windows 7 updates is only SP1, when this will change the media will also be refreshed officially, as it was done for Windows 8.1 and Windows Server 2012 R2 to include Update 3 KB3000850 November 2014 Update Rollup.

[psydii]

So that's Windows 7 SP4, minus the extension of lifetime that they used to come with.

 

I've never been a fan of regularly wipe and reloading, we have better things to be doing with our time.

 

It's been quite a rough transition, but hopefully this last few years leaves MS much better tooled to continuously improve their software without so much accidental breakage along the way.

[2ilent8cho]

What a pity they couldn't just build and issue a SP2 for this well loved product!

That would be too logical, Microsoft don't do logical anymore, they do messy and infuriating. o how i wish it was like the NT4/Windows 2000 days with nice Service Packs, although monthly updates is a step back in that direction.

[Arthur]

Building Windows 7 Images in 2017 « Ask Premier Field Engineering (PFE) Platforms

 

You might be a little surprised to see a blog post on building Windows 7 images on an official Microsoft blog. Make no mistake: we recommend our customers switch to Windows 10 to take advantage of huge advancements in security.

 

While we advise our customers to switch to our most secure platform, Windows 10, we realize many of you must support and deploy Windows 7 while your migration projects are underway. If that is the case, we want to ensure you’re deploying Windows 7 with all needed security updates.

 

Second to the security conversation, there is potential to save your company some serious man hours. Imagine your company is deploying roughly 100 Windows 7 instances per week. Now imagine if we were installing dozens of updates, on the fly, during or after that process. That could easily add 30 minutes to the deployment. Multiply that by 100, and well, you can do the math…

 

I’ll be using System Center Configuration Manager for this tutorial, mainly because that’s my specialty, but these instructions can be adapted for other products. I realize many people use MDT to build their images, so that they can customize the default user profile and maybe for other reasons. The goal of this exercise is to have a Windows 7 image that can be deployed which minimizes, if not completed eliminates, updates required by Microsoft Update. This article does assume that you have a working knowledge of Operating System Deployment in Configuration Manager, so I won’t be covering things like content distribution and creating task sequence deployments.

 

Sounds simple, right? Let’s get started.

[TIOAOA]

Ok its probably been covered in previous posts and my skim reading is not up to par.

 

Can anyone advise me.

 

If I download a Win 7 ISO from the VLSC today, exactly what KB's do I need to put on and in what order to bring myself as up to date as possible.

 

Thanks

[psydii]

As per the post directly above yours.

 

[ATTACH=CONFIG]42137[/ATTACH]

[psydii]

As per the post directly above yours.

 

[TIOAOA]

Thanks I ignored that as it mentioned SCCM, I should of been more observant

[TIOAOA]

Thanks I ignored that as it mentioned SCCM, I should of been more observant