# Bypass ESU v12

* A project to install Extended Security Updates for Windows 7 and Server 2008 R2

* It consists of three functions:

- suppress ESU eligibility check for OS updates (including .NET 3.5.1)

- bypass ESU validation for .NET 4 updates (4.5.2 up to 4.8)

- patch WU engine to allow receiving ESU updates

______________________________

## Important Notes:

* WU ESU Patcher:  
for Windows 7 Client: it allow to receive updates up to 2023-01  
for Server 2008 R2: it allow to receive updates up to 2024-01 (at least)  
for Windows 7 Embedded: it has no effect and do not work

* This version will remove previous versions of .NET 4 ESU Bypass (if detected).

* Make sure that "Windows Management Instrumentation (winmgmt)" service is not disabled

* You can acquire and download the updates manually from Microsoft Update Catalog  
https://www.catalog.update.microsoft.com

to track the updates KB numbers, either check the official Update History page  
https://support.microsoft.com/help/4009469

or follow this MDL thread  
https://forums.mydigitallife.net/threads/19461/

* ESU updates for each month will require (at least) the latest extended SSU from previous month(s)

* System Restart is required after installing WU ESU Patcher on live system.

* Unless you integrate the ESU Suppressor, ESU updates are not supported offline (you cannot integrate them), they must be installed online on live system.

* Extract the 7z pack contents to a folder with simple path, example C:\files\BypassESU

* Temporarily turn off Antivirus protection (if any), or exclude the extracted folder

______________________________

## Recommended Updates

for Live OS installation, it's best to install the following updates before using BypassESU:

- KB4490628: 2019-03 Servicing Stack Update
x64
http://download.windowsupdate.com/c/msdownload/update/software/secu/2019/03/windows6.1-kb4490628-x64_d3de52d6987f7c8bdc2c015dca69eac96047c76e.msu
x86
http://download.windowsupdate.com/c/msdownload/update/software/secu/2019/03/windows6.1-kb4490628-x86_3cdb3df55b9cd7ef7fcb24fc4e237ea287ad0992.msu

- KB4474419: 2019-09 SHA-2 code signing support update
x64
http://download.windowsupdate.com/c/msdownload/update/software/secu/2019/09/windows6.1-kb4474419-v3-x64_b5614c6cea5cb4e198717789633dca16308ef79c.msu
x86
http://download.windowsupdate.com/c/msdownload/update/software/secu/2019/09/windows6.1-kb4474419-v3-x86_0f687d50402790f340087c576886501b3223bec6.msu

- KB5017397: 2022-09 Servicing Stack Update, or later SSU
x64
http://download.windowsupdate.com/c/msdownload/update/software/secu/2022/09/windows6.1-kb5017397-x64_2a9999bd20cb964869c59bb16841a76e14030a29.msu
x86
http://download.windowsupdate.com/c/msdownload/update/software/secu/2022/09/windows6.1-kb5017397-x86_96b91eb53575a201d59b1a2b540aa15df0d23b3a.msu

- KB4575903: ESU Licensing Preparation Package / to receive updates up to 2023-01
x64
http://download.windowsupdate.com/d/msdownload/update/software/secu/2020/07/windows6.1-kb4575903-x64_b4d5cf045a03034201ff108c2802fa6ac79459a1.msu
x86
http://download.windowsupdate.com/d/msdownload/update/software/secu/2020/07/windows6.1-kb4575903-x86_5905c774f806205b5d25b04523bb716e1966306d.msu

- KB5016892: ESU Licensing Preparation Package / to receive updates after 2023-01 for Server 2008 R2 only
x64
http://download.windowsupdate.com/c/msdownload/update/software/secu/2022/08/windows6.1-kb5016892-x64_52b68ba8744cb47ddfcecd19238087625e1a5fbd.msu
x86
http://download.windowsupdate.com/c/msdownload/update/software/secu/2022/08/windows6.1-kb5016892-x86_ffb5b83149833e7f969f69e4f152fee5c1fdbc68.msu

- Updated Windows Update Client, at least KB3138612
x64
http://download.windowsupdate.com/d/msdownload/update/software/updt/2016/02/windows6.1-kb3138612-x64_f7b1de8ea7cf8faf57b0138c4068d2e899e2b266.msu
x86
http://download.windowsupdate.com/d/msdownload/update/software/updt/2016/02/windows6.1-kb3138612-x86_6e90531daffc13bc4e92ecea890e501e807c621f.msu

if you installed any Monthly Quality Rollup, or July 2016 update rollup KB3172605, both already have updated WUC

if you installed January 2020 Security Only update KB4534314, or the fix update KB4539602, both already have updated WUC

______________________________

## How to Use - Live OS Installation

* Install the recommended updates (reboot if required)

* right-click on LiveOS-Setup.cmd and "Run as administrator"  

* from the menu, press the corresponding number for the desired option

* Remarks:

ESU Suppressor cannot be uninstalled after installing ESU updates, and option [5] is not shown in that case

You get option [1] only if both WU ESU Patcher/.NET 4 ESU Bypass and/or Suppressor are not installed

Warning: unless you have another bypass installed, ESU updates installation will fail if you used option [3] alone

______________________________

## How to Use - Offline Image/Wim Integration

* Wim-Integration.cmd support two target types to integrate BypassESU:

[1] Direct WIM file (not mounted), either install.wim or boot.wim

[2] Already Mounted image directory, or offline image deployed on another partition/drive/vhd

___
** Direct WIM file integration **

- place install.wim or boot.wim (one of them, not both) next to Wim-Integration.cmd, then run the script as administrator

- alternatively, run the script as administrator, and when prompted, enter the full path for the wim file

- choose the desired option from the menu (similar to live setup)

- Notes about this method:  

it will also integrate the Suppressor for winre.wim, if it exists inside install.wim  

it does not provide options to remove the Suppressor/Patcher/.NET Bypass, for that, mount the wim image then use second method

___
** Mounted directory / offline image integration **

- manually mount the image of install.wim or boot.wim  
no need for this step if the image is already deployed on another partition/drive/vhd, example Z:\

- No need to integrate the recommended updates, you can integrate BypassESU first

- right-click on Wim-Integration.cmd and "Run as administrator"

- enter the correct path for mounted directory or offline image drive letter

- choose the desired option from the menu (similar to live setup)

- afterwards, continue to integrate the updates, including ESU updates

- manually unmount install.wim/boot.wim image and commit changes

______________________________

## Credits

* Gamers-Against-Weed (superUser, haveSxS)
