/Insights

WINDOWS 7 END OF LIFE (PART II) – Installing Extended Security Updates (ESUs)

Last Call

Today, January 14, 2020, marks the day that Microsoft will cease technical support for Windows 7, and will not update its security features again.

However, any size business running Windows 7 Professional or Enterprise can still purchase Windows 7 Extended Security Updates (ESUs) through January 14, 2023.

Pre-Installation

  1. Install the SHA-2 code signing support update and SSU (servicing stack update)

  2. Install the Monthly Rollup and SSU:

  3. Once activated, continue use of current update and servicing strategy to deploy ESU through Windows Update, Windows Server Update Services (WSUS), Microsoft Update Catalog, or other patch management solution.

Installation and Activation

Install the ESU product key using the Windows Software Licensing Management Tool (slmgr). ESU product key installation does not replace current OS activation method utilized on the device. Use the Activation ID to differentiate between the OS activation and ESU activation.

  1. Open an elevated Command Prompt.
  2. Type slmgr /ipk <ESU key> and press Enter.
  3. If the product key installed successfully, you will see a message similar to the following:

Product key installed correctly
Product key installed correctly

Find the ESU Activation ID:

  1. In the elevated Command Prompt, type slmgr /dlv and press Enter.
  2. Note the Activation ID as you will need it in the next step.

Detailed license information
Detailed license information

Activate the ESU product key:

  1. Open an elevated Command Prompt.
  2. Type slmgr /ato <ESU Activation Id> and press Enter.

Activation
Activation

The following table outlines possible values for the <ESU Activation ID>:

Activation Table
Activation Table

Once the ESU product key is activated, verify the status:

  1. Open an elevated Command Prompt.
  2. Type slmgr /dlv and press Enter.
  3. Verify Licensed Status shows as Licensed for the corresponding ESU program.
  4. Use a management tool (e.g., System Center Configuration Manager) to send slmgr scripts to enterprise devices.

License check
License check

Install and activate ESU for machines unconnected to the Internet:

  1. Download and install the Volume Activation Management Tool (VAMT).
  2. Download the VAMT- ESU configuration file and update your VAMT configuration file.
  3. Configure the client device’s firewall for VAMT.
  4. Add the ESU product key to VAMT.
  5. Install KB4519972 prior to using VAMT to perform proxy activation, which will pick up the activation ID:

VAMT Activation
VAMT Activation

Verify Deployment

  • Install optional, non-security update outlined in KB4528069. This test package has no security content. It is suitable for test environment deployment, and should be installed on on-premises devices eligible for ESU.

Trusted Tech Team: A Microsoft Gold Partner

For more information about Windows 7 ESUs, contact Trusted Tech Team for a free consultation. Our Licensing Engineers help you maximize your software subscriptions, and provide you the lowest costs available in the market.

Subscribe to the Trusted Tech Team Blog

Get the latest posts delivered right to your inbox

Trusted Tech Team

Trusted Tech Team

The Source

Read More