Share via


Windows 7: Creating Fully patched Image by Slipstream in the Convenience Rollup and Quality Rollup

Convenience rollup will make the life of system administrator easier by avoiding creating reference image every couple of months as we can slipstream the only couple of updates to make it fully patched.

 

Microsoft has come up with a new concept called Convenience rollup which was released in May 2016. This single update KB3125574 (approx. 476 MB size) is the only patch you need to include into your Windows 7 SP1 image which will contain most of the updates has been released since Windows 7 SP1 release. Prerequisite for this update is KB3020369.

 

Just to summarise, if you have Windows 7 SP1 iso, you need to have:

1. KB3020369 –service stack update (Released in April’2015)

This is a prerequisite for installing convenience Rollup.

https://support.microsoft.com/en-us/kb/3020369

2. KB3125574 – Convenience rollup update for Windows 7 SP1 (Released in May’2016). This includes security and non-security patches till April’2016. This patch is available only through Microsoft Update Catalog. Not available for WSUS & SCCM.

https://support.microsoft.com/en-us/kb/3125574

  ** **

3. KB3185330 – Security Monthly quality rollup (Released in October’2016)

A benefit of monthly rollup is that you only require the most recent monthly rollup which will cater all previous updates. I.E. we don’t require patches released in June, July, August, Sept month. These are cumulative updates and bundled as a single patch.This patch is available through Microsoft Update Catalog, WSUS, SCCM and Windows Update.

https://support.microsoft.com/en-us/kb/3185330 

 

Note: One more type of update is available from October 2016. Security only quality update. KB3192391 is the one released, but we are not including this in the image because these are security only updates which are already present in KB3185330. Security only update is the cumulative update, this is going to be released every month containing only security fix in a single file.

   

With current month onwards, Microsoft has come with new further simplifying servicing model for Windows 7 and Windows 8.1 (For more details: https://blogs.technet.microsoft.com/windowsitpro/2016/08/15/further-simplifying-servicing-model-for-windows-7-and-windows-8-1/)

How to Download these three updates?

See below-mentioned link and screenshot for your reference:

  1. KB3020369-http://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3020369

     

  2. KB3125574-http://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3125574

     

  3. KB3185330-http://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3185330

     

    All three updates required:

     

     Once updates are downloaded, we can proceed with slipstreaming these updates in Windows 7 image.

     

  • Create Folder Structure as:

       

    Copy downloaded updates to “c:\Win7\Updates”

    Extract Windows 7 SP1 iso source at any folder. I used: c:\iso\SourceWin7-1

    Copy file c:\iso\SourceWin7-1\sources\install.wim to c:\Win7\wim

     

Launch Deployment and Imaging Tools Environment (This is part of ADK)

Use Following command to mount wim file

dism /mount-wim /wimfile:"c:\Win7\Wim\install.wim" /mountdir:"c:\Win7\mount" /index:1

Use Command, to add Update – 1 (KB3020369)

dism /image:"c:\Win7\mount" /add-package /packagepath:"C:\Win7\Updates\Update for Windows 7 for x64-based Systems (KB3020369)\AMD64-all-windows6.1-kb3020369-x64_5393066469758e619f21731fc31ff2d109595445.msu"

 Use Command, to add Update – 2 (KB3125574)

dism /image:"c:\Win7\mount" /add-package /packagepath:"C:\Win7\Updates\Update for Windows Server 2008 R2 x64 Edition (KB3125574)\AMD64-all-windows6.1-kb3125574-v4-x64_2dafb1d203c8964239af3048b5dd4b1264cd93b9.msu"

This may take some time as it is a big patch, be patient to get it completed.

Use Command, to add Update – 3 (KB3185330)

dism /image:"c:\Win7\mount" /add-package /packagepath:"C:\Win7\Updates\October, 2016 Security Monthly Quality Rollup for Windows 7 for x64-based Systems (KB3185330)\AMD64-all-windows6.1-kb3185330-x64_8738d0ef3718b8b05659454cff898e8c4f0433d7.msu"

Commit and save the changes

dism /unmount-wim /mountdir:"c:\Win7\Mount" /commit

Copy updated install.wim from “c:\Win7\wim\install.wim” to c:\iso\SourceWin7-1\sources by replacing the old install.wim

Now we have new install.wim. We can use this wim in SCCM or MDT to deploy images fully patched till current date (October’2016).

We can also create iso using the source.

Command line to create ISO

oscdimg -n -m -bC:\iso\SourceWin7-1\boot\etfsboot.com c:\iso\SourceWin7-1 c:\iso\Win7_October2016.iso

To verify the difference, built two systems using old ISO and new ISO. Found that we have now latest build version.

To verify the build, open registry, go to the following location:

BuildLabEx is the registry key to check for Build version.

Windows 7 using old ISO: It consists of Build number(7601) and revision number(17514)

Windows 7 using new ISO: It consists of Build number(7601) and revision number(23564)

   

http://c.statcounter.com/11140129/0/dc127a84/0/