Alright, I made some more tests. Here's what I did:
- Created a new VM
- Installed Win7 x64 SP1 in the new VM. The system was installed in an unattended manner with network settings that do not allow internet access (invalid gateway)
- Installed KB4490628 (SSU, March 2019), KB3172605 (Rollup July 2016) and KB4474419 (SHA-2 code signature update, March 2019) - in this order, and all of them were installed during the first Administrator logon of the unattended Windows installation
- Installed .NET Framework 4.7.2 via my own script (switches /passive /norestart /lcid 1033) and the German language pack
Here's what I got:
- Code: Select all
C:\Users\Administrator>powershell -noprofile -command get-hotfix
Source Description HotFixID InstalledBy InstalledOn
------ ----------- -------- ----------- -----------
PC-NAME Update KB917607 PC-NAME\Administr...
PC-NAME Hotfix KB2534111
PC-NAME Update KB3172605 PC-NAME\Administr...
PC-NAME Security Update KB4474419 PC-NAME\Administr...
PC-NAME Update KB4490628 PC-NAME\Administr...
PC-NAME Update KB976902 PC-NAME\Administr...
C:\Users\Administrator>powershell -noprofile -command get-hotfix | find 999
PC-NAME Update KB4019990 PC-NAME\Administr...
That the first run shows the state before the .NET installation and the second one the state afterwards. Conclusion: KB4019990 is definitely installed alongside .NET 4.7.2 on Windows 7, even if everything is installed completely offline.
Another observation I made during these tests: Both Root CAs "Microsoft Root Certificate Authority 2010" and "Microsoft Root Certificate Authority 2011" are installed by any of the three Windows updates mentioned above. I don't know which one exactly, and in the end it doesn't really matter, but it's certain that these CAs have not been downloaded from the internet.
Unfortunately I don't have installation DVDs for Server 2008 R2 and
TechBench doesn't offer them, so it's currently impossible for me to tell if the results would be any different than on Win7.
Regards
Dalai