KB4537820 Security Monthly Quality Rollup update Windows 7 - Feb 11

[Brink]

   Tip

It appears that the Windows 7 ESU Bypass is indeed working - gHacks Tech News

February 11, 2020 - KB4537820 (Monthly Rollup)

Applies to: Windows 7 Service Pack 1, Windows Server 2008 R2 Service Pack 1, Windows Embedded Standard 7 Service Pack 1, Windows Embedded POSReady 7, Windows Thin PC

IMPORTANT Verify that you have installed the required updates listed in the How to get this update section before installing this update.

NEW
IMPORTANT Some customers who use Windows Server 2008 R2 SP1 and have activated their ESU multiple activation key (MAK) add-on before installing the January 14, 2020 updates might need to re-activate their key. Re-activation on affected devices should only be required once.  For information on activation, see this blog post.

NEW
IMPORTANT WSUS scan cab files will continue to be available for Windows 7 SP1 and Windows Server 2008 R2 SP1. If you have a subset of devices running these operating systems without ESU, they might show as non-compliant in your patch management and compliance toolsets.

UPDATED
IMPORTANT Customers who have purchased the Extended Security Update (ESU) for on-premises versions of these operating systems must follow the procedures in KB4522133 to continue receiving security updates after extended support ends on January 14, 2020. For more information on ESU and which editions are supported, see KB4497181.

IMPORTANT Starting on January 15, 2020, a full-screen notification will appear that describes the risk of continuing to use Windows 7 Service Pack 1 after it reaches end of support on January 14, 2020. The notification will remain on the screen until you interact with it. This notification will only appear on the following editions of Windows 7 Service Pack 1:

• Starter.
• Home Basic.
• Home Premium.
• Professional. If you have purchased the Extended Security Update (ESU), the notification will not appear. For more information, see How to get Extended Security Updates for eligible Windows devices and Lifecycle FAQ-Extended Security Updates.
• Ultimate.

Note The notification will not appear on domain-joined machines or machines in kiosk mode.

Improvements and fixes

This security update includes improvements and fixes that were a part of update KB4534310 (released January 14, 2020) and addresses the following issues:

• Security updates to Internet Explorer, Microsoft Graphics Component, Windows Input and Composition, Windows Media, Windows Shell, Windows Fundamentals, Windows Cryptography, Windows Hyper-V, Windows Core Networking, Windows Peripherals, Windows Network Security and Containers, Windows Storage and Filesystems, the Microsoft Scripting Engine, and Windows Server.

For more information about the resolved security vulnerabilities, please refer to the Security Update Guide.

Known issues in this update



How to get this update

Before installing this update

Prerequisite:

You must install the updates listed below and restart your device before installing the latest Rollup. Installing these updates improves the reliability of the update process and mitigates potential issues while installing the Rollup and applying Microsoft security fixes.

• The March 12, 2019 servicing stack update (SSU) (KB4490628). To get the standalone package for this SSU, search for it in the Microsoft Update Catalog. This update is required to install updates that are only SHA-2 signed.
• The latest SHA-2 update (KB4474419) released September 10, 2019. If you are using Windows Update, the latest SHA-2 update will be offered to you automatically. This update is required to install updates that are only SHA-2 signed. For more information on SHA-2 updates, see 2019 SHA-2 Code Signing Support requirement for Windows and WSUS.
• The January 14, 2020 SSU (KB4536952) or later. To get the standalone package for this SSU, search for it in the Microsoft Update Catalog.
• The Extended Security Updates (ESU) Licensing Preparation Package (KB4538483) released February 11, 2020. The ESU licensing preparation package will be offered to you from WSUS. To get the standalone package for ESU licensing preparation package, search for it in the Microsoft Update Catalog.

After installing the items above, Microsoft strongly recommends that you install the latest SSU (KB4537829). If you are using Windows Update, the latest SSU will be offered to you automatically if you are an ESU customer. To get the standalone package for the latest SSU, search for it in the Microsoft Update Catalog. For general information about SSUs, see Servicing stack updates and Servicing Stack Updates (SSU): Frequently Asked Questions.

Install this update



File information

For a list of the files that are provided in this update, download the file information for update 4537820.

Source: https://support.microsoft.com/en-us/help/4537820


Direct download links for KB4537820 MSU file from Microsoft Update Catalog:

:ar: Download KB4537820 MSU for Windows 7 32-bit (x86) - 206.5 MB

:ar: Download KB4537820 MSU for Windows 7 64-bit (x64) - 315.3 MB

 

[NoN]

Thanks for heads up! This, is not showing up in WU instead of Kb890830, but this last won't install thru WU.

 

[katlani]

is it possible to download them manually though?

 

[Brds7t7]

They won't show up in Windows Update as they're ESU updates, and you can't install them manually unless you have an ESU license. They'll just fail to install.

 

[katlani]

OK thanks, as 3 other updates landed like the MCT, Excel and Outlook 2010.. and still having a preview one as optional.

 

[feetand nches]

Why won't MS take pity on us holdouts and give us some free updates, wah wah wah, please MS give me some updates! Stingy MS, share with us all those nice little Updates you are selling to the business's. MS could even charge the home user a lower rate than the business's and make even more money. I'd pay 30us a year for my updates!

 

[Brds7t7]

Why won't MS take pity on us holdouts and give us some free updates, wah wah wah, please MS give me some updates! Stingy MS, share with us all those nice little Updates you are selling to the business's. MS could even charge the home user a lower rate than the business's and make even more money. I'd pay 30us a year for my updates!

Because they want everyone on Windows 10, it's as simple as that. I'm pretty sure MS would prefer not to continue supporting Windows 7 full stop. But the fact that a lot of businesses are still using 7 has pretty much swayed the decision for them to keep supporting it in ESU.

They haven't particularly made it easy though, even for big businesses, so there's no way they have any intention of making it easy for home users to stay on 7. MS makes very little from Home PC licences, so that's not a priority for them.

 

[TheQuickFox]

Home users should be able to manually download and install the patches with the BypassESU tool installed from the mydigitallife forums. Skip the kb4537829 2020-02 Service Stack Update for now because it breaks updating.

 

[NoN]

I confirm, it failed to install yesterday evening as stand-alone.

 

[katlani]

I confirm, it failed to install yesterday evening as stand-alone.

Have you tried to install without a license in order to test it out?

 

[NoN]

Have you tried to install without a license in order to test it out?

No I haven't Sir! The license is tight to my machine and this for years now...

 

[katlani]

No I haven't Sir! The license is tight to my machine and this for years now...

I mean't ESU license, is that what you mean?

 

[Brds7t7]

I mean't ESU license, is that what you mean?

I believe NoN tried to install it without an ESU licence and it failed, as expected. Those updates will refuse to install if you don't have an ESU licenced PC.

For my own curiosity, I've already tried to install it in a VM to see what happens, and it won't work.

 

[erpster4]

No I haven't Sir! The license is tight to my machine and this for years now...

did you purchase a valid ESU license (separate from a Win7 license) and activate it?
AND did you manually download & install the KB4538483 update? (one of the Pre-requisite updates)

if all these conditions are not met, KB4537820 will fail to install 100% successfully

 

[Brds7t7]

I just noticed the "tip" at the start of this thread now.
Just wondering if that's something that can be discussed on here now? As one of my posts about it appears to have been removed. So, are we allowed to talk about it, or.... ?

 

[NoN]

I believe NoN tried to install it without an ESU licence and it failed, as expected. Those updates will refuse to install if you don't have an ESU licenced PC.

For my own curiosity, I've already tried to install it in a VM to see what happens, and it won't work.

That's exact i tried without the ESU license!

did you purchase a valid ESU license (separate from a Win7 license) and activate it?
AND did you manually download & install the KB4538483 update? (one of the Pre-requisite updates)

if all these conditions are not met, KB4537820 will fail to install 100% successfully

No i did purchase the ESU license. I thank you for the tip info of the condition to met.

 

[Barman58]

I just noticed the "tip" at the start of this thread now.
Just wondering if that's something that can be discussed on here now? As one of my posts about it appears to have been removed. So, are we allowed to talk about it, or.... ?

Discuss ahead

Just keep everything civilised and keep links to a minimum to keep it "In House"

 

[ian50]

Have no ESU licence, nor any installed workaround.


Installed KB4537829 to test. But first, of course, I made a Restore Point just prior to testing.


It installed perfectly and came up in the Control Panel list of installed updates. BUT: the "uninstall" option was missing. Just not there.


So I activated the Restore Point, which removed it. If MS doesn't want you to uninstall an update (after Win7 EOL) then I most certainly will remove it.

 

[Brds7t7]

Discuss ahead

Just keep everything civilised and keep links to a minimum to keep it "In House"

Thanks Barman! Wasn't sure if I'd get a slapped wrist!

 

[NoN]

Have no ESU licence, nor any installed workaround.


Installed KB4537829 to test. But first, of course, I made a Restore Point just prior to testing.


It installed perfectly and came up in the Control Panel list of installed updates. BUT: the "uninstall" option was missing. Just not there.


So I activated the Restore Point, which removed it. If MS doesn't want you to uninstall an update (after Win7 EOL) then I most certainly will remove it.

Tested either and installed fine..in Programs & Features =>Installed Packages, it shows this Kb4537829 Servicing Stack Update:https://support.microsoft.com/en-us...date-for-windows-7-sp1-and-server-2008-r2-sp1 , but it is normal that there's no uninstaller for such package, it replaces Kb4536952.