Windows users face massive update bloat, tough choices

[Borg 386]

Windows 10’s cumulative updates have ballooned in size, and a similar bloat will also affect the Windows 7 updates that Microsoft revamped this month.

Updates increase in size because they are cumulative; October’s 989MB update for 1511 included not only new fixes, but also those in every prior update. September’s, in turn, included new fixes as well as those in August’s and July’s and June’s and....

And so on and so on.

In fact, Microsoft expects that Windows 7’s updates, like those for Windows 10, will get bigger.

“The rollups will start out small, but we expect that these will grow over time to something close to the convenience roll-up size,” said Nathan Mercer, a Microsoft product marketing manager, in the August announcement of the change to Windows 7’s update scheme.

The “convenience roll-up” Mercer mentioned was about 477MB in size (for the 64-bit version). Microsoft issued the roll-up in May.

In another answer, Mercer got more specific. “Eventually [the Windows 7] Monthly Roll-up will grow to around the 500MB size,” he said.

Windows users face massive update bloat, tough choices | PCWorld

 

[HammerHead]

Poses Question

Do we update or do we not update (Win7)?

 

[Jody Thornton]

But wait, does that mean that the equivalent of each update bundled in is bigger, or that there are just more updates bundled together?

I'm on the original Windows 8, and so I just used the Security-Only update for the original Server 2012 (which is essentially Windows 8 Server). It updated with aplomb, and the IE update was bundled in as well. Down the road, the only separate update will be the .NET rollup and any Flash update. It didn't seem to be a lot of extras there.

I would suggest if you like Windows 7 the way it is, just install the Security-only and .NET rollups from the Security Bulletins page.

 

[torchwood]

Allthough the Cumulative updates will grow in size.,

Windows Update process will continue as it allways has, it will prune out any previously installed KB's/hotfix's, during the evaluation and set-up stage, this can be seen in YOUR current CBS log.

So although the download may be 500Mb in size thats not whats actually installed.

Roy

 

[Brds7t7]

They can change the update model all they like. I've never installed every update which has been pushed out anyway. So I'll be sticking with the security only rollups for now.

If they wanted to end fragmentation then why still have two separate updates, one for Security only and one that also contains the other updates? How is that going to end fragmentation?

The main issue I have is this still won't address the slow update scans on new installs. You need to have a couple of patches installed to get Windows Update working out of the box these days. This issue hasn't been addressed and that's still the main Windows Update problem!

We will still see users complaining about updates not working on new setups.

 

[tannim]

So every time you download the new updates, you're re-downloading every other update you've already downloaded? That's a huge waste of bandwidth.

 

[Painter]

If you choose to get updated through Windows Update, you do not have to install every single monthly rollup that is offered, because they are going to be cumulative. You could skip a few months at a the time and then when you decide to apply updates just install the current month's offering and your system will be fully up to date.

Security is always the concern, however security holes are usually around for quite a while before they are addressed by MS. If something super critical is found, there is going to be a lot of internet buzz about it, then it would be appropriate to get the monthly rollup installed that contains that fix, asap.

I know that that is not the way we have been trained to think about updating, however, monthly is just an arbitrary schedule. As the rollups grow in size and become an issue for those users on severely metered connections, they may find it more palatable to give over a good percentage of their bandwidth to MS to cannibalize just one month in three.

 

[lehnerus2000]

If they wanted to end fragmentation then why still have two separate updates, one for Security only and one that also contains the other updates? How is that going to end fragmentation?

Most users won't know how to get the Security Only Update.

 

[ThrashZone]

Hi,
Should ssd users be more concerned about all of these large updates

 

[mjf]

If they wanted to end fragmentation then why still have two separate updates, one for Security only and one that also contains the other updates? How is that going to end fragmentation?

Most users won't know how to get the Security Only Update.

I'm one of them.
All my PCs have Home Premium and I thought there was a restriction on accessing security only updates.

 

[Brds7t7]

If they wanted to end fragmentation then why still have two separate updates, one for Security only and one that also contains the other updates? How is that going to end fragmentation?

Most users won't know how to get the Security Only Update.

True, a lot of home users might not. But there are business environments who access the updates other ways and will have had time to prepare for this.

It will reduce fragmentation that's true, but it certainly won't end it. The only way to do that is just push out one update for everybody without leaving any other option for security-only updates.

 

[RoasterMen]

My main drive will be doing a lot of hard work when that starts. I'll be limiting updates for Windows 10 once these updates appear on my PC.

 

[mjf]

If they wanted to end fragmentation then why still have two separate updates, one for Security only and one that also contains the other updates? How is that going to end fragmentation?

Most users won't know how to get the Security Only Update.

I was hinting if you know the process then maybe enlighten us.

 

[Brds7t7]

Published here every month:
https://support.microsoft.com/en-us/kb/894199

Direct link here:
https://support.microsoft.com/en-us/kb/3192391

MS update catalog links here:
Microsoft Update Catalog

There is no automated way to get these security-only updates though.

Edit: I might look into making a batch script each month and adding/updating each months Security-only rollups into it for easy installation on a new install. Will most likely do the same for Windows 8.1 too. Means I'll have to collect a lot of updates (although not as many as it would have been before the rollups).

 

[mjf]

Thanks
So if I understand correctly you hide all updates (my setting - tell me & let me download) then hide them. Then go here

then install???

If you leave security updates for a couple of months will the new ones include the older "required" security updates.

I apologize for my ignorance since I haven't been following all this required rigamarole.
I have concerns that there may be other non security updates required.

Yours in some confusion - MJF.

 

[Brds7t7]

When it comes to the security-only updates you have to install each months. Say if you skip September and just install October then you'd be missing September's security updates.

That link I posted for KB3192391 only has this months security updates.

You will need to check the first link I posted each month for the security-only quality update - not to be confused with the monthly security quality update (yes this is badly named and confusing, it should be called a Security AND quality update).

If you want to install other recommended updates then your choices are "all or nothing" once they become fully cumulative, and all past patches will be bundled in

If you want to avoid any recommended updates then you will have to hide (or ignore) each months "Security Quality Rollups" from Windows Update.
Then manually download and install that months security-only updates

This whole thing would be much easier if they made the security-only updates cumulative too. As we could just install one update and be up to date security wise.
Unfortunately, they've chosen not to do that.

 

[mjf]

That's what I thought so you may as well do as I do:
1) wait a little while for the failure dust to settle (eg. 1-2 weeks) before installing updates.
2) make a system image
3) install the rollups
4) wait a little while including doing an sfc /scannow and see if there are any problems
5) if problems occur then perform a system reimage and decide what to do

Life couldn't be simpler could it :sarc:

 

[MeOnMine]

I can't find a "September Security only update".
Was there one ?

 

[Brds7t7]

I can't find a "September Security only update".
Was there one ?

No, I was just using it as an example. The Security-only rollups only started this month.

 

[Brds7t7]

Life couldn't be simpler could it :sarc:

It's going to be a lot of fun :sarc: doing clean installs now for anyone who wants to skip certain updates. That's when the real headaches will begin!