Windows 7: Creating Fully patched Image by Slipstream in the Convenience Rollup and Quality Rollup

Hello guys, today I am going to brief you about creating a perfect Windows 7 image having all latest updates till October’2016 (at the time when I updated and tested the image)

Convenience rollup will make life of system administrator easier by avoiding creating reference image every couple of months as we can slipstream only couple of updates to make it fully patched.

Microsoft has come up with a new concept called Convenience rollup which was released in May’2016. This single update KB3125574 (approx. 476 MB size) is the only patch you need to include into your Windows 7 SP1 image which will contain most of the updates has been released since Windows 7 SP1 release. Pre requisite for this update is KB3020369.

As this blog was created in October,2016. I wanted to demonstrate you including all patches till this month

Just to summarise, if you have Windows 7 SP1 iso, you need to have:

  1. KB3020369 –service stack update (Released in April’2015)

This is a prerequisite for installing convenience Rollup.

  1. KB3125574 Convenience rollup update for Windows 7 SP1 (Released in May’2016). This includes security and non-security patches till April’2016.

This patch is available only through Microsoft Update Catalog. Not available for WSUS & SCCM: KB3125574

  1. KB3185330Security Monthly quality rollup (Released in October’2016)

Benefit of monthly rollup is that you only require the most recent monthly rollup which will cater all previous updates. Ie we don’t require patches released in June, July, August, Sept month. These are cumulative updates and bundled as a single patch.

This patch is available through Microsoft Update Catalog, WSUS, SCCM and Windows Update: KB3185330

Note: One more type of update is available from october’2016. Security only quality update. KB3192391 is the one released, but we are not including this in image because these are security only updates which is already present in KB3185330. Security only update is the cumulative update, this is going to be released every month containing only security fix in a single file. With current month onwards, Microsoft has come with new further simplifying servicing model for Windows 7 and Windows 8.1 For more details:

How to Download these 3 updates ?

See below mentioned link and screenshot for your reference:


2. KB3125574

3. KB3185330

All 3 updates required:

Once updates are downloaded, we can proceed with slipstreaming these updates in Windows 7 image.

Create Folder Structure as:

Copy downloaded updates to “c:\Win7\Updates”

Extract Windows 7 SP1 iso source at any folder. I used: c:\iso\SourceWin7-1

Copy file c:\iso\SourceWin7-1\sources\install.wim to c:\Win7\wim

Launch Deployment and Imaging Tools Environment (This is part of ADK)

Use Following command to mount wim file

dism /mount-wim /wimfile:"c:\Win7\Wim\install.wim" /mountdir:"c:\Win7\mount" /index:1

Use Command, to add Update – 1 (KB3020369)

dism /image:"c:\Win7\mount" /add-package /packagepath:"C:\Win7\Updates\Update for Windows 7 for x64-based Systems (KB3020369)\AMD64-all-windows6.1-kb3020369-x64_5393066469758e619f21731fc31ff2d109595445.msu"

Use Command, to add Update – 2 (KB3125574)

dism /image:"c:\Win7\mount" /add-package /packagepath:"C:\Win7\Updates\Update for Windows Server 2008 R2 x64 Edition (KB3125574)\AMD64-all-windows6.1-kb3125574-v4-x64_2dafb1d203c8964239af3048b5dd4b1264cd93b9.msu"

This may take some time as it is a big patch, be patient to get it completed.

Use Command, to add Update – 3 (KB3185330)
dism /image:"c:\Win7\mount" /add-package /packagepath:"C:\Win7\Updates\October, 2016 Security Monthly Quality Rollup for Windows 7 for x64-based Systems (KB3185330)\AMD64-all-windows6.1-kb3185330-x64_8738d0ef3718b8b05659454cff898e8c4f0433d7.msu"

Commit and save the changes

dism /unmount-wim /mountdir:"c:\Win7\Mount" /commit

Copy updated install.wim from “c:\Win7\wim\install.wim” to c:\iso\SourceWin7-1\sources by replacing the old install.wim

Now we have new install.wim. We can use this wim in SCCM or MDT to deploy images fully patched till current date (October’2016).

We can also create iso using the source.

Command line to create ISO

oscdimg -n -m -bC:\iso\SourceWin7-1\boot\ c:\iso\SourceWin7-1 c:\iso\Win7_October2016.iso

To verify the difference, I build 2 systems using old ISO and new ISO. Found that we have now latest build version.

To verify the build, open registry, go to following location:

BuildLabEx is the registry key to check for Build version.

Windows 7 using old ISO: It consist of Build number(7601) and revision number(17514)

Windows 7 using new ISO: It consist of Build number(7601) and revision number(23564)

Leave a Reply

Your email address will not be published. Required fields are marked *

%d bloggers like this: