Windows Updates - Rollup Approach

[smarties11]

Hi,

 

Just wanted to check something with regard to the Windows 7 rollup approach.

 

When building a fresh image, in order to bring it right up to date, we would normally apply KB3020369 (servicing stack update) and then KB3125574 (May 2016 convenience rollup). From there, we'd use windows update to get all the latest updates from KB3125574 to present. Then once one the domain, network management of updates would take over.

 

Now Microsoft have moved to the cumulative rollup approach they have published a list here (https://support.microsoft.com/en-us/help/4009438) of all updates available for Windows 7 SP1. It doesn't include the KB3125574 convenience rollup, but starts at KB3172605 (July 2016 Update).

 

Following the logic on this page, and assuming you use the 'monthly quality rollups' (which include previous monthly quality rollups), rather than the 'security only' updates, and also ignoring the preview updates, it would suggest you need...

 

KB3172605 - July 2016 Update

KB3179573 - August 2016 Update

KB4019264 - May 2017 Security Monthly Quality Update (which includes all updates from September 2016 - May 2017)

 

So my question is, do you still need KB3125574 (May 2016 convenience rollup) if you install the three above? Logic tells me yes, because the May 2016 convenience rollup is 500mb and the combined total of the three above is only 194mb, however there is no reference to this update on the page I linked above (which is titled "Windows 7 SP1 and Windows Server 2008 R2 SP1 update historyWindows 7 SP1 and Windows Server 2008 R2 SP1 update history"!)

 

Thanks!

[mrwoberts]

You're going to need more than a few updates to achieve your aim.

Here's the fruit of my near endless quest at creating a fully patched Windows 7 image.

It is a little out of date now, you'll want to check through it all, but I've pretty much finished with creating Windows 7 images now and concentrating my efforts on 10.

 

The list is in order of installation (Online). Notice the Convenience update is at the very end, mostly down to the research of others in this area who seem more knowledgeable than I.

 

::KB3020369 - Servicing Stack, April 2015

::KB3177467 - Servicing Stack, September 2016

::KB2670838 - Platform Update

 

::GENERAL UDPATES & HOTFIXES

::KB917607 - Error opening Help in Windows-based programs: "Feature not included" or "Help not supported"

::KB2574819 - An update to adds support for DTLS in Windows 7 SP1

::KB2592687 - Remote Desktop Protocol 8.0

::KB2645594 LDR - An update is available for computers that have an AMD FX, AMD Opteron 4200, AMD Opteron 6200, or AMD Bulldozer series processor

::KB2646060 - An update that selectively disables the Core Parking feature (Depends on KB2645594)

::KB2685811 - Kernel-Mode Driver Framework 1.11. Warning: Recommended not to offline integrate or Install LDR branch of this update

::KB2685813 - User-Mode Driver Framework 1.11. Warning: Recommended not to offline integrate or Install LDR branch of this update

::KB2695321 - IPsec session takes 5 to 6 minutes to connect to a storage controller

::KB2727994 - You cannot open or save Office 2010 documents on a WebDAV file server

::KB2728738 - You experience a long logon time when on a computer with roaming profiles

::KB2750841 LDR - Update for IPv6 readiness

::KB2752259 - An update that improves the performance of the Printbrm.exe command-line tool

::KB2818604 LDR - Microcode update for AMD processors

::KB2830477 - Remote Desktop Protocol 8.1

::KB2841134 - Internet Explorer 11 Main Package

::KB2849696 - IE Spelling

::KB2849697 - IE Hyphenation

::KB2872035 LDR - WMF

::KB2891144 - Application does not draw polylines correctly when you run it through an RD Session

::KB2907020 - Location is not available error when you access a mapped network drive after Windows standby or resume

::KB2918833 - Third-party IMEs give users unprotected access to your system

::KB2923766 LDR - Black screen when you plug in a monitor on a computer or open a lid of a laptop

::KB2925489 LDR - You cannot establish an IPsec connection with certain third-party devices

::KB2990184 - A FIPS-compliant recovery password cannot be saved to AD DS for BitLocker

::KB2990941 LDR - Update to add native driver support for NVM Express (NVMe) that uses the PCI Express (PCIe)

::KB3033929 LDR - WMF

::KB3046480 LDR - Update helps to determine whether to migrate the .NET Framework 1.1 when you upgrade Windows

::KB3064209 - Microcode update for Intel processors

::KB3158627 - Hyper-V guest integration components: July 2016

::KB3161102 - Update to remove Windows Journal components

::KB3172605 - July 2016 Monthly Rollup

::KB3179573 - August 2016 update rollup

::KB3181988 - Update to fix SFC integrity scan error in the usbhub.sys.mui file

::KB3184143 - Update to remove GWX and software related to the Windows 10 free upgrade offer

::KB3191566 - Windows Management Framework 5.1

::KB4019990 - DirectX 11 D3DCompiler

 

::SECURITY Updates

::KB2898851 LDR - Security update for the .NET Framework 3.5.1: May 13, 2014

::KB2900986 LDR - Cumulative security update for ActiveX Kill Bits: December 10, 2013

::KB3046269 - Vulnerability in Windows Task Scheduler could allow elevation of privilege: April 14, 2015

::KB3059317 LDR - Security update for Microsoft Common Controls: June 9, 2015

::KB3150220 - Security update for Windows Media Center: May 10, 2016

::KB3154518 - Support for TLS v1.2 included in the .NET Framework 3.5.1

::KB3156016 - Security update for Windows Graphics Component (Direct3D10Level9): May 10, 2016

::KB3156019 - Security update for Windows Graphics Component (Windows Codecs Library): May 10, 2016

::KB3159398 - Security update for Group Policy: June 14, 2016

::KB3161949 - Security update for Web Proxy Auto Discovery (WPAD): June 14, 2016

::KB3161958 - Security update for Windows Search Component: June 14, 2016

::KB3170455 - Security update for Windows Print Spooler Components: July 12, 2016

::KB3210131 - Security and Quality Rollup for .NET Framework 3.5.1

::KB3217125 - Security and Quality Rollup for .NET Framework 3.5.1

::KB4014565 - Security and Quality Rollup for .NET Framework 3.5.1

::KB4015549 - LATEST SECURITY ROLLUP - APRIL, 2017

::KB3125574 - Convenience Rollup

Edited May 18, 2017 by mrwoberts