Best updates list for Windows 7? And unattended question

F

fishingfish

Member
1. I want to slipstream a Windows 7 sp1 professional. The problem is that the NTlite list is different from the WHDownloader list (not counting ESU updates, ofc). Overall, NTlite has a higher number of updates, but a random comparison showed that it lacked some security stacks from WHDownloader... It also misses the hotfixes. Are these security updates already included in NTlite list?

2. Also I tried to integrate the ESU compatibility update, that says that it can be integrated, but it always fails and gives the error message when you integrate an ESU.

3. Another question. When using the unattended page, there are these options:
- Reseal mode (blank, Audit and OOBE)
- Skip Windows Welcome (machineOOBE)
- Skip Welcome Center (userOOBE)
Do I have to put something in reseal or can I leave it blank? Can I skip both OOBEs without problems if I fill most of information (except registered owner, organization, etc)? I ask because Im testing and its stuck in "completing installation".

Thanks
 
I recommend to use WSUSOffline Update. Version 11.9.1 is the last Win 7 able.
Integrate those makes WSUS faster
Code: 
    <AddPackages>
        <Package>F:\wsusoffline 11.9.1 Win7 x64 security only - test\client\w61-x64\glb\windows6.1-kb4474419-v3-x64_748febffa79a7ae4286b16ff3c373baf344095e6.cab</Package>
        <Package>F:\wsusoffline 11.9.1 Win7 x64 security only - test\client\w61-x64\glb\windows6.1-kb4490628-x64_6d7e7f728029598fc4b9b4ddd86c8bf1d43289a2.cab</Package>
        <Package>F:\wsusoffline 11.9.1 Win7 x64 security only - test\client\w61-x64\glb\windows6.1-kb4537829-x64_b646594fb95d085fd0f25dfa81296bfe859d8a60.cab</Package>
        <Package>F:\wsusoffline 11.9.1 Win7 x64 security only - test\client\w61-x64\glb\Windows6.1-KB2670838-x64.msu</Package>
        <Package>F:\wsusoffline 11.9.1 Win7 x64 security only - test\client\w61-x64\glb\Windows6.1-KB2574819-v2-x64.msu</Package>
        <Package>F:\wsusoffline 11.9.1 Win7 x64 security only - test\client\w61-x64\glb\IE11-Windows6.1-x64-de-de.exe</Package>
        <Package>F:\wsusoffline 11.9.1 Win7 x64 security only - test\client\w61-x64\glb\windows6.1-kb2552343-x64_51acdacad4855a2a04f35e2ac511fd3832a5d931.cab</Package>
        <Package>F:\wsusoffline 11.9.1 Win7 x64 security only - test\client\w61-x64\glb\Windows6.1-KB2533623-x64.msu</Package>
        <Package>F:\wsusoffline 11.9.1 Win7 x64 security only - test\client\w61-x64\glb\Windows6.1-KB2639308-x64.msu</Package>
        <Package>F:\wsusoffline 11.9.1 Win7 x64 security only - test\client\w61-x64\glb\Windows6.1-KB2731771-x64.msu</Package>
        <Package>F:\wsusoffline 11.9.1 Win7 x64 security only - test\client\w61-x64\glb\Windows6.1-KB2729094-v2-x64.msu</Package>
        <Package>F:\wsusoffline 11.9.1 Win7 x64 security only - test\client\w61-x64\glb\Windows6.1-KB2786081-x64.msu</Package>
        <Package>F:\wsusoffline 11.9.1 Win7 x64 security only - test\client\w61-x64\glb\Windows6.1-KB2834140-v2-x64.msu</Package>
        <Package>F:\wsusoffline 11.9.1 Win7 x64 security only - test\client\w61-x64\glb\Windows6.1-KB2882822-x64.msu</Package>
        <Package>F:\wsusoffline 11.9.1 Win7 x64 security only - test\client\w61-x64\glb\Windows6.1-KB2888049-x64.msu</Package>
        <Package>F:\wsusoffline 11.9.1 Win7 x64 security only - test\client\w61-x64\glb\Windows6.1-KB2857650-x64.msu</Package>
        <Package>F:\wsusoffline 11.9.1 Win7 x64 security only - test\client\w61-x64\glb\Windows6.1-KB2830477-x64.msu</Package>
        <Package>F:\wsusoffline 11.9.1 Win7 x64 security only - test\client\w61-x64\glb\Windows6.1-KB2923545-x64.msu</Package>
        <Package>F:\wsusoffline 11.9.1 Win7 x64 security only - test\client\w61-x64\glb\windows6.1-kb3172605-x64_2bb9bc55f347eee34b1454b50c436eb6fd9301fc.msu</Package>
        <Package>F:\wsusoffline 11.9.1 Win7 x64 security only - test\client\w61-x64\glb\ie11-windows6.1-kb4505050-x64_510bbaf55c0948fdbda0c214994115396f707c99.msu</Package>
        <Package>F:\wsusoffline 11.9.1 Win7 x64 security only - test\client\w61-x64\glb\ie11-windows6.1-kb4534251-x64_91ee2d40871aba94d4c13eaaa623c7f4b6577e46.msu</Package>
    </AddPackages>

Either way you need an USB-Stick. The WSUS UpdateInstaller can be copyed onto it.
When creating an ESU-Win7 and having no telemetry worries, it´s point and click use.
And it will need less space than an NTLite integration of KBs. Still ~11GB.

For 2. I guess you need to run NTLite on a Win7 with active ESU to work.

3. I don´t know.
 
fishingfish said:
1. I want to slipstream a Windows 7 sp1 professional. The problem is that the NTlite list is different from the WHDownloader list (not counting ESU updates, ofc). Overall, NTlite has a higher number of updates, but a random comparison showed that it lacked some security stacks from WHDownloader... It also misses the hotfixes. Are these security updates already included in NTlite list?

2. Also I tried to integrate the ESU compatibility update, that says that it can be integrated, but it always fails and gives the error message when you integrate an ESU.

3. Another question. When using the unattended page, there are these options:
- Reseal mode (blank, Audit and OOBE)
- Skip Windows Welcome (machineOOBE)
- Skip Welcome Center (userOOBE)
Do I have to put something in reseal or can I leave it blank? Can I skip both OOBEs without problems if I fill most of information (except registered owner, organization, etc)? I ask because Im testing and its stuck in "completing installation".

Thanks
Click to expand...
1. Careful with WHDownloader, it has two modes, with update rollup and without. The without combination is the one with more updates.
Best test would be to integrate one collection to the clean ISO, then another image with another list, and compare final result Windows Update scan.
Careful with ESU updates, they are not integrate-able.

2. That's expected, install after setup only if you have such a license.

3. Reseal is for Sysprep methods when capturing an image, if you don't know what it is, you don't need it.

Microsoft, does not recommend skipping OOBE, nor there is the need for it, use other options to skip unwanted pages.
It's there because some users requested it, I wasn't in the mood to convince them otherwise - there are edge cases that I didn't save when it is needed, but you would know, again.
 
VladimirII, please stick to the topic, and this is an NTLite forum, do not advertise other tools but suggest improvements for this one.
Meaning, let me know if something to Windows 7 is missing on the update list to improve the Windows Update result at the end product.
Ping me if you found some missing or redundant updates, thanks.
 
nuhi said:
Careful with ESU updates, they are not integrate-able.
Click to expand...

ESU SSU update is integratable by dism without problem.

I want to have Windows 7 updated as much as possible. Here is my custom update script -at the end is clear Windows Update. Including true integration of SSU KB2533552, MRT and Windows Defender Definitions.
ESU Updates are integratable using dism after integration KB4528069 (x86 / x64) - extract update and edit all Package_*.mum in disposition="staged" to disposition="installed". In Package_3*.mum completely remove component section and now you can integrate this update using dism and ESU updates can be integrated without problem into install.wim.
Code: 
      <component>
        <assemblyIdentity name="73e1027dd541dcdb5e846dd0830a5738" version="6.1.7602.20587" processorArchitecture="x86" language="neutral" buildType="release" publicKeyToken="31bf3856ad364e35" versionScope="nonSxS" />
      </component>

Update.cmd
 

Attachments

  • Update.7z
    4.6 KB
Last edited:
1. I know about WHD modes, I use the rollup ones, which are just the categories General, Hotfix and Security. The non rollup are in a subcategory in extras. Id like to know which one has the most complete update list between ntlite and whd...

2. The ESU compatibility update says that it can be integrated so... I expected it to be integrated.

3. I remember when these options werent present and it was easy to make an unattended image... Now I just dont know. What should I know to make it unattended? Just enable the mode and fill the basic fields?

I know that I can brute force some of these questions by just doing the ntlite process again and again... But its not exactly fast.
 
fishingfish said:
Id like to know which one has the most complete update list between ntlite and whd...
Click to expand...

WHDownloader does not include the superseded updates that are offered by Windows Update whereas NTLite does.

Hotfixes are not required unless you have a specific problem that a hotfix fixes. They are not offered by Windows Update.

In short, if you don't care what Windows Update shows the WHDownloader list is much shorter and sufficient to keep all Windows components up to date. Otherwise the NTLite list is more complete.
 
George King said:
ESU SSU update is integratable by dism without problem.

I want to have Windows 7 updated as much as possible. Here is my custom update script -at the end is clear Windows Update. Including true integration of SSU KB2533552, MRT and Windows Defender Definitions.
ESU Updates are integratable using dism after integration KB4528069 (x86 / x64) - extract update and edit all Package_*.mum in disposition="staged" to disposition="installed". In Package_3*.mum completely remove component section and now you can integrate this update using dism and ESU updates can be integrated without problem into install.wim.
Code: 
      <component>
        <assemblyIdentity name="73e1027dd541dcdb5e846dd0830a5738" version="6.1.7602.20587" processorArchitecture="x86" language="neutral" buildType="release" publicKeyToken="31bf3856ad364e35" versionScope="nonSxS" />
      </component>

Update.cmd
Click to expand...

What does this script does? Integrate all updates into win7? Where do you download these updates? How should I extract them?
 
Yes, all should be downloaded from Update Catalog or Windows Update servers. Im going to prepare list of download links. If you don't know how to extract updates, please wait - I can prepare more complex script for you or maybe nuhi improve NTLite Windows 7 internal updates list, so you can easily download them using this tool.
 
Thanks George, we can continue over a private message, I'll review your findings and make it simple for others.
 
You must log in or register to reply here.
Back
Top