Windows 7 Forums
Welcome to Windows 7 Forums. Our forum is dedicated to helping you find support and solutions for any problems regarding your Windows 7 PC be it Dell, HP, Acer, Asus or a custom build. We also provide an extensive Windows 7 tutorial section that covers a wide range of tips and tricks.


Windows 7: Windows 7 servicing stack updates: manage change & cumulative updates

22 Sep 2018   #1
Brink

64-bit Windows 10 Pro
 
 
Windows 7 servicing stack updates: manage change & cumulative updates

Quote:
For many of you managing a Windows 7 infrastructure today, monthly servicing is primarily about making sure that you are installing the latest security patches on your devices and staying current. To simplify the servicing process (in addition to complexity and cost), we aligned our Windows 7 servicing model—consisting of Monthly Rollups and Security-only updates—to the update model we use with Windows 10. Instead of tracking and installing multiple, individual patches, you only need to install a single, cumulative patch each month to ensure that your systems have the latest updates.

Despite this simplified servicing model, some Windows 7 devices recently experienced issues installing either the August or September 2018 Monthly Rollups or Security-only updates. The intent of this blog is to share why these issues occurred, what we are doing about it, and how this relates to Windows 10 cumulative updates.

To tell this story, we need to travel back to October of 2016, when we released the Windows 7 Service Pack 1 (SP1) servicing stack update (KB 3177467). Servicing stack updates, or SSUs, are periodic updates released to specifically service or update the software stack for Windows platforms. These are fixes to the code that process and manage updates that need separate servicing periodically to improve the reliability of the update process, or address issue(s) that prevent patching some other part of the OS with the monthly latest cumulative update (LCU).

Servicing stack updates ensure that you have a robust and reliable servicing stack so that your devices receive and install Microsoft security fixes. That is why, when we released the Windows 7 SP1 servicing stack update (KB 3177467) it was marked “critical.” Because it was not categorized as a security fix; however, many organizations missed the update and decided to install only the default monthly security fixes instead of the full servicing stack update.

Fast forward to August 2018, when the Windows 7 SP1 Monthly Rollup (KB 4343900) was released. Customers who had not installed the critical Windows 7 SP1 servicing stack update (KB 3177467) were unable to install the August 30th Monthly Rollup Preview (KB 4343894), the September 11th Monthly Rollup (KB 4457144), or the September 11th Security-only update (KB 4457145)—and received “error 0x8000FFFF.” Installing the October 2016 Windows 7 SP1 servicing stack update (KB 3177467) first, and then applying the August 30th or September 11th, 2018 updates mitigates this issue.

We test our monthly patches on fully patched, up-to-date systems, which is why this issue was not seen in our testing, or by any of our preview partners.

To ensure that you don’t run into issues like this again, the Microsoft Windows Servicing and Delivery team has updated all release notes with guidance to install the latest servicing stack update for your platform before installing the latest cumulative update (LCU).

Going forward

An up-to-date, healthy servicing stack is critical to ensure that monthly security fixes can be efficiently and predictably installed on devices. As noted, when a servicing stack update does not exist, there is a risk that a device cannot be patched and kept secure. This makes a servicing stack update a key part of the security patch payload. However, the Windows 7 update technology, and patch installation chronology requires the servicing stack update to be handled separately from the monthly Security-only updates.

Starting with the October 2018 Update Tuesday, we are going to reissue the Windows 7 Service Pack 1 (SP1) servicing stack update (KB 3177467) and tag it as a security update to unblock any remaining customers from installing the August 2018 or later monthly Security-only updates.

To ensure our customers do not encounter this specific situation again, going forward, if we release a new servicing stack update, it will be marked as “security,” not just “critical,” so that it is included by those customers who are installing only tagged security fixes.

A new appreciation for cumulative updates

In this post, I have addressed only Windows 7 servicing stack updates. That is because we specifically addressed this complexity and exposure in Windows 10 with the cumulative update model. Today, we test each month’s patches against a known configuration of Windows 10 before we ship a release. Each update includes all the previous fixes necessary to bring a device forward to a fully patched and current state, provided it has the latest monthly update installed.

If you have any questions, please reach out to me here on Tech Community or on Twitter @johntwilcox.


Source: Windows 7 servicing stack updates: managing change and appreciating cumulative updates - Microsoft Tech Community - 260434


My System SpecsSystem Spec
.
22 Sep 2018   #2
Paul Black

7 HP SP1 64-bit Vista HB SP2 32-bit Linux Mint 18.3
 
 

Good evening Brink,

Could you clarify something for me please?
Can you have a look at my post #6 here: Win 7 sp1 installation issue

Quote   Quote: Originally Posted by Paul Black View Post
There is an opinion that although the KB3020369 [Servicing Stack Update - April 2015] update has been superseded/replaced by the KB3177467 [Servicing Stack Update - Oct 2016] update, that it should be used instead of KB3020369!
It appears that this is only the case if you are not installing KB3125574 [The Convenience Rollup Package - May 2016]. If you are installing KB3125574 then you must install the KB3020369 first.
My question is, after a clean install, if you were to use the update method used in my post, which many people have done and are still doing apparently, do you now use KB3177467 [Servicing Stack Update - Oct 2016] instead of KB3020369 [Servicing Stack Update - April 2015]. Previously, if you were going to install KB3125574 [The Convenience Rollup Package - May 2016], you had to install KB3020369 first. If you were not going to install KB3125574 then you would use KB3177467.

I know that there are other options available now to accomplish this, but I am just curious.

Thanks in advance.
My System SpecsSystem Spec
22 Sep 2018   #3
ThrashZone

Win-7-Pro64bit 7-H-Prem-64bit
 
 

Hi,
Another attempt to sneak in kb2952664 is all
They got it in on x99 dag nab-it lol my bad forgot all about it

Caught it on x299 though
Restoring system image shortly on x99 how dare MS keep doing that one
My System SpecsSystem Spec
.

22 Sep 2018   #4
Brink

64-bit Windows 10 Pro
 
 

Quote   Quote: Originally Posted by Paul Black View Post
Good evening Brink,

Could you clarify something for me please?
Can you have a look at my post #6 here: Win 7 sp1 installation issue



My question is, after a clean install, if you were to use the update method used in my post, which many people have done and are still doing apparently, do you now use KB3177467 [Servicing Stack Update - Oct 2016] instead of KB3020369 [Servicing Stack Update - April 2015]. Previously, if you were going to install KB3125574 [The Convenience Rollup Package - May 2016], you had to install KB3020369 first. If you were not going to install KB3125574 then you would use KB3177467.

I know that there are other options available now to accomplish this, but I am just curious.

Thanks in advance.
Personally, I just install whatever available updates there are in Windows Update.

Of course having a good base system image to use with all the updates is better.
My System SpecsSystem Spec
22 Sep 2018   #5
Paul Black

7 HP SP1 64-bit Vista HB SP2 32-bit Linux Mint 18.3
 
 

Hi Brink, thanks for the reply, it is appreciated,

The main reason that people go down that route is obviously to cut down on the amount of updates to install. I was just curious.

Thanks again.
My System SpecsSystem Spec
22 Sep 2018   #6
Ranger4

Windows 7 Home Premium 64 bit sp1
 
 

I also install all the Windows Updates as they come to hand & I have never had a problem with them. So Brink you are not alone.
My System SpecsSystem Spec
23 Sep 2018   #7
Brds7t7

Windows 7 Pro & Ultimate, Windows 8.1 Pro, Linux Mint 19 Cinnamon (All 64-Bit)
 
 

Quote   Quote: Originally Posted by Paul Black View Post
My question is, after a clean install, if you were to use the update method used in my post, which many people have done and are still doing apparently, do you now use KB3177467 [Servicing Stack Update - Oct 2016] instead of KB3020369 [Servicing Stack Update - April 2015]. Previously, if you were going to install KB3125574 [The Convenience Rollup Package - May 2016], you had to install KB3020369 first. If you were not going to install KB3125574 then you would use KB3177467.

I know that there are other options available now to accomplish this, but I am just curious.

Thanks in advance.

I haven't used the Convenience rollup on any installs, but I was always under the impression that newer servicing stacks should supersede the older ones, so I don't see why the Convenience rollup shouldn't work with KB3177467 installed previously.
My System SpecsSystem Spec
23 Sep 2018   #8
Brds7t7

Windows 7 Pro & Ultimate, Windows 8.1 Pro, Linux Mint 19 Cinnamon (All 64-Bit)
 
 

I've just set up a quick VM and installed both the newer Servicing Stack and Convenience Rollup without issue. So, it will install fine with the later SS installed. Whether it causes other issues though, I'm not sure. These are MS updates we're talking about!
My System SpecsSystem Spec
23 Sep 2018   #9
lehnerus2000

W7 Ultimate SP1, LM18.3 MATE, W10 Home, #All 64 bit
 
 

Quote   Quote: Originally Posted by ThrashZone View Post
Hi,
Another attempt to sneak in kb2952664 is all
They got it in on x99 dag nab-it lol my bad forgot all about it

Caught it on x299 though
Restoring system image shortly on x99 how dare MS keep doing that one
I've just read that MS will be including the Telemetry "upgrades" in future cumulative updates for W7.
My System SpecsSystem Spec
29 Sep 2018   #10
erpster4

Windows 7 SP1 Home Premium 64bit [x64]
 
 

Quote   Quote: Originally Posted by Paul Black View Post
Hi Brink, thanks for the reply, it is appreciated,

The main reason that people go down that route is obviously to cut down on the amount of updates to install. I was just curious.

Thanks again.
the KB3177467 update does supersede / replace the KB3020369 update as Windows Update no longer offers KB3020369. Microsoft has officially said so.

KB3177467


direct quote by Microsoft from that link:

Quote:
Update replacement information

This update replaces the previously released update 3020369.
and yes, KB3177467 can be installed first before installing the KB3122574 convenience rollup as I have done this many times without problems
My System SpecsSystem Spec
Reply

 Windows 7 servicing stack updates: manage change & cumulative updates




Thread Tools




Similar help and support threads
Thread Forum
How to manually update after cumulative updates come in October?
Just wondering how/if it's possible to just get security and stability updates after these changes come next month? I am a home user, so I don't have access to WSUS or whatever.
Windows Updates & Activation
April 2015 servicing stack update for Windows 7 (KB3020369) & files
April 2015 servicing stack update for Windows 7 (KB3020369) & files dates and versions Hi! Windows 7 Professional SP1 (x64). Checked - April 2015 servicing stack update for Windows 7 (KB 3020369) is installed (listed), but ... when I check files pointed in KB article...
Windows Updates & Activation
Does Windows Updates change DLLs?
One of my friends has a practice of changing the status of DLLs to "read-only" on Windows OS (7 and XP). He recommends doing this immediately after installation for security i.e. in order to prevent malware execution. Does that sound like a good idea, or do DLLs need stay writeable, in order...
Windows Updates & Activation
Windows 7 updates same for updates every time it checks for updates
For the past day windows wants to install the same 4 updates over and over, I have windows update set to download and let me choose when to install. I can't understand why I even need them, as I uninstalled net framework. Notice how the update at 8:17 AM., KB2656368, is the same as one of...
Windows Updates & Activation


Our Sites

Site Links

About Us

Find Us

Windows 7 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 7" and related materials are trademarks of Microsoft Corp.

Designer Media Ltd

All times are GMT -5. The time now is 02:20.
Twitter Facebook Google+