Post by THi All,
Had a customer yesterday that needed Service Pack 1 (SP1)
installed manually. Looked all over M$'s web site and
found several. They ran and no service pack 1 afterwards.
I finally found the correct KB with the correct SP1 that
Windows Update recognizes.
-T
There are a lot of hits on Windows 7 Service Pack One, including
on M$'s own web site, that are not actually the correct service pack
that is recognized by Windows Updates
https://support.microsoft.com/en-us/help/15090/windows-7-install-service-pack-1-sp1
Tip: scroll down to
"Download and run the System Update Readiness Tool"
Windows 7 64-bit (x64)
http://go.microsoft.com/fwlink/?linkid=181491
Windows 7 32-bit (x86)
http://go.microsoft.com/fwlink/?linkid=181492
You can use the WSUSoffline kit, to prepare a folder
full of updates, with an application inside to apply them.
It's scripting, and the files come off a Microsoft server
and not off the Wsusoffline site.
http://www.wsusoffline.net/
05.08.2019 Version 11.8 released [likely Win7+]
04.06.2019 Version 9.2.5 ESR [should be suitable for WinXP,
don't know if Vista is in there]
Vista is perilously close to unmaintainable, and is a
waste of brainpower for an IT guy to try to fix. It
took me three tries to get the install order right,
and tip the Windows Update engine upright long enough
to finish. Each session took me a couple of days, to
try to finish.
The Wsusoffline people, have determined what "prerequisite"
files must be installed first, to keep Windows Update
responsive. In some cases, that's about 5 of the 150 plus
updates, that must be installed first, because they
prune the supersedence tree nicely. Vista used to have
information like that available, but as soon as some
shitty little update comes out, it can "break Vista
all over again" and then Windows Update never comes
back with a list of updates.
As part of good practice, you should be running these
patching strategies at home in your spare time. I've done
a few of these, am not an expert, but can see the
advantage in the field of being able to say
"yes, I can fix that".
You don't need any fancy facilities for Wsusoffline.
You could collect the information on a hard drive folder,
copy it to a USB stick as required, and slip it into
your kit bag before you go. You don't have to follow
any of the cheesy suggestions to "burn a DVD" or something.
That's not necessary.
It'll probably be at least 2GB of downloads, or a bit more.
Wsusoffline won't likely use the Win7 SP1 rollup, and some
attention will have been paid to a "CEIP free" version.
But it's pretty hard to patch up to date and stay CEIP free.
Or avoid the library that assists in running Universal
Apps or something. There's a couple items "the kids don't like".
So what you want to do as a "Windows Expert" is try the
different patching methods, time them, and see which
ones are a big win. To time the automation, you can leave
a screen recorder running, so you can review the progress
later. I think Wsusoffline needs multiple reboots (thanks
to Microsoft), and unfortunately I don't think there is
a way around that part. It has to do with installing
an updated version of Windows Update, plus some other
unsavory stuff.
And with any luck, they will also avoid installing any
WGA packages. (Windows Genuine Advantage).
I patched up Windows 7, one patch at a time, reading
every patch description and rejecting patches with
suspicious descriptions. It took me *hours* and my neck
was sore from the stress later :-) You have to try that
once, as a benchmark. That would be "what a tinfoil hat
person must pay for good patching".
While there are currently "security only" patches, they
don't cancel their more bloated counterparts. So it's not
like such a strategy is particularly easy or safe.
(If one of the bloated packages installs because
you made a mistake, your effort is in vain.)
Wsusoffline doesn't have to be any faster. It avoids the
download step (because you download them in advance). If
there is a problem with wuauserv, Wsusoffline can stop dead
in its tracks. This is why, on occasion, you need to test it.
Just to make sure it's still workable. This is part of the
reason they need to test their prerequisites list, to
ensure the engine is ready to go for the rest of the updates.
Once Windows 7 is patched far enough, any of the Jumbo
patches should install with less fuss. A more likely case
though, is the one you ran into, which is essentially as
bad as a reinstall for all practical purposes.
If you tick the box, Wsusoffline will include x86 and x64 versions
of SP1 installer package. So you can have it include those,
just plug it in and walk away. Checking early on, that
the train hasn't left the tracks. Once the 150 start
bunging in, enough has happened by that point it should
be OK.
At the current time, Wsusoffline should be installing the
SHA2 signing patch, so that the signing will work. The
installer checks that the packages are valid, before installing
them.
Paul