We help IT Professionals succeed at work.

Installing security patches for Windows 7 - JUST the security patches

Last Modified: 2017-05-22
I don't want to load enhancements or improvements.  Just security patches to avoid any malware, etc.
I was told that https://technet.microsoft.com/en-us/library/security/ms17-010.aspx
is the one that's most currently important.
How can I selectively install these and not the other stuff?
Watch Question

AlexA lack of information provides a lack of a decent solution.

Load up windows update

Go through and select the patches you want and ignore the others.

And yes, that one is very important :-)
Distinguished Expert 2019

You need to lookup security-only quality updates (rollups are called security monthly quality rollups). HOWEVER, that is aimed at businesses. So if you're using WSUS, then you can choose to approve that. Otherwise, you're going to have to update manually because they're not made available via WIndows Update itself (even though you can download them).
Distinguished Expert 2019
Unlock this solution and get a sample of our free trial.
(No credit card required)
Brian MurphySenior Information Technology Consultant
Distinguished Expert 2019

Easiest, automated, and least expensive = WSUS

Unless you are referring to "just your workstation" then I would agree with the Windows Update route.

And make sure your running AV and Malware/Ransomware software.  There are many out there but I would focus on the ones that are highly rated and have Malware related software.  It is not the same as computer virus.  Two different products.

I can make some offline suggestions if you wish, just let me know.  But keep in mind that this things was stopped in the track it was on by someone "registering" the domain name which removed it from Dark Web.  

That doesn't mean there will not be more "variants".

Brian Murphy


Thank you Jackie Man!!!!!
BTW, I had two people talk about WSUS but no one told me what it was.  What is it?  What does that acronym stand for?
Distinguished Expert 2019

WSUS = Windows Server Update Services. For a long time it was a standalone app, but they eventually integrated it as a role starting in (I think) Server 2008 R2.

Basically, think of it as your own onsite system for managing Windows Updates. Using your server (after you've modified the systems' registries to look at the WSUS server for updates instead of MS updates site), you get to centrally approve/reject which updates go to the systems on your network.

I had posted my answer based on the assumption for the long haul, you wanted to only install security updates, versus just one time. WSUS is just the type of system to allow you to do that without having to to go the site and download the patches and give it to users manually.

Gain unlimited access to on-demand training courses with an Experts Exchange subscription.

Get Access
Why Experts Exchange?

Experts Exchange always has the answer, or at the least points me in the correct direction! It is like having another employee that is extremely experienced.

Jim Murphy
Programmer at Smart IT Solutions

When asked, what has been your best career decision?

Deciding to stick with EE.

Mohamed Asif
Technical Department Head

Being involved with EE helped me to grow personally and professionally.

Carl Webster
CTP, Sr Infrastructure Consultant
Empower Your Career
Did You Know?

We've partnered with two important charities to provide clean water and computer science education to those who need it most. READ MORE

Ask ANY Question

Connect with Certified Experts to gain insight and support on specific technology challenges including:

  • Troubleshooting
  • Research
  • Professional Opinions
Unlock the solution to this question.
Thanks for using Experts Exchange.

Please provide your email to receive a sample view!

*This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.


Please enter a first name

Please enter a last name

8+ characters (letters, numbers, and a symbol)

By clicking, you agree to the Terms of Use and Privacy Policy.