

Here's the fruit of my near endless quest at creating a fully patched Windows 7 image. You're going to need more than a few updates to achieve your aim. So my question is, do you still need KB3125574 (May 2016 convenience rollup) if you install the three above? Logic tells me yes, because the May 2016 convenience rollup is 500mb and the combined total of the three above is only 194mb, however there is no reference to this update on the page I linked above (which is titled "Windows 7 SP1 and Windows Server 2008 R2 SP1 update historyWindows 7 SP1 and Windows Server 2008 R2 SP1 update history"!)

KB4019264 - May 2017 Security Monthly Quality Update (which includes all updates from September 2016 - May 2017) It doesn't include the KB3125574 convenience rollup, but starts at KB3172605 (July 2016 Update).įollowing the logic on this page, and assuming you use the 'monthly quality rollups' (which include previous monthly quality rollups), rather than the 'security only' updates, and also ignoring the preview updates, it would suggest you need. Now Microsoft have moved to the cumulative rollup approach they have published a list here ( ) of all updates available for Windows 7 SP1.

Then once one the domain, network management of updates would take over. From there, we'd use windows update to get all the latest updates from KB3125574 to present. When building a fresh image, in order to bring it right up to date, we would normally apply KB3020369 (servicing stack update) and then KB3125574 (May 2016 convenience rollup). Just wanted to check something with regard to the Windows 7 rollup approach.
