forums.wsusoffline.net

I ran Microsoft Baseline Security Analyzer because I'm getting error 80072EFD while trying to run Windows Update, and the troubleshooter can't fix it as of Oct 2019. So, there are some updates that haven't downloaded and thus haven't been installed, when I ran wsusoffline1181 on WIndows 7 ultimate.

Microsoft Baseline Security Analyzer wanted KB4507004, KB4507411, and KB4514602, amongst others, and when I ran wsusoffline1181, it installed the other updates but didn't install these ones because it didn't download them:
Warning: Update kb4507004 not found
Warning: Update kb4507411 (id: 106cdb86-48da-4e3d-8331-e1eee8b3adb6) not found
Warning: Update kb4514602 (id: 82179f99-89b1-4260-b917-4913cc3fe030) not found

After tweaking my firewall to a more permissive state, Windows update worked again, but I think it's still a valid point about missing updates that Wsusoffline should have downloaded and also installed.

All three of those updates are Security-Only updates. If you didn't tell WSUS Offline to download and install these, you'll get rollup updates instead, which, kind of, supersede the SecOnly updates (meaning you don't need both but only one of them).

Regards
Dalai

I think, it is more complicated than that:

• kb4507004 was part of the July 2019 Security and Quality Rollup
  https://devblogs.microsoft.com/dotnet/net-framework-july-2019-security-and-quality-rollup/
  
  This is the kb number, which contains the actual downloads for .NET Framework 3.5.1 on Windows 7.
  
  It is referenced in the file client/static/StaticUpdateIds-w61-dotnet35.txt.
  
  kb4507004 is listed as superseded in both files ExcludeList-superseded.txt and ExcludeList-superseded-seconly.txt. This may be wrong, because kb4507004 is still part of the September 2019 and October 2019 Security and Quality Rollups.
  
  
• kb4507411 is also part of the July 2019 Security and Quality Rollup, but this is the "enclosing" kb number for security-only updates on Windows 7.
  
  
• kb4514602 is part of the September 2019 Security and Quality Rollup
  https://devblogs.microsoft.com/dotnet/net-framework-september-2019-security-and-quality-rollup/
  
  The "enclosing" kb number was updated, but kb4507004 is still needed for the actual downloads.
  
  kb4514602 is referenced in the file client/exclude/HideList-seconly.txt.
  
  
• Apparently, there is already an October 2019 Security and Quality Rollup:
  https://devblogs.microsoft.com/dotnet/net-framework-october-2019-security-and-quality-rollup/
  
  Again, the enclosing kb number changed, but kb4507004 is still needed for the actual downloads.

So, if kb4507004 is still needed for the September and October 2019 update rollups, it should not be listed as "superseded". This may be an error in the Microsoft database. I would suggest, to add this kb number to the file ExcludeList-superseded-exclude.txt.

Users can try to create a "custom" file exclude/custom/ExcludeList-superseded-exclude.txt and enter the kb number there.

Regards,
hbuhrmester

Moin und danke schön!

Erledigt.

VG Torsten

@hbuhrmester Thank you so much for your investigation. and your detailled response. It saves me the hassle of having to provide all that. Many thanks.