Windows 7 end of support - What to do guide

Sounds right to me, Bo.

 

Considering MS will be continuing paid support, we can be sure that if we have any serious enough issues again, they will push something out to all.
I haven't seen any info or statement from WSUS about what they are going to do about pulling updates, but there are a few alternatives that may also try to come up with a work around.

One project worth investigating is 0patch. I haven't tried it yet, but they are intending on being the saviour of the day for Win7 users, by issuing micro-patches based on the existing updates.
https://blog.0patch.com/2019/09/keeping-windows-7-and-windows-server.html

 

I do not think this will happen.

This is very helpful info, A_mouse. TY for posting it. I do, of course, wonder at what cost will these updates be provided to W7 users. That is not addressed in the linked article, probably because they have not determined that yet.

 

From the 0patch Frequently Asked Questions ...

What will I have to do to receive post-EOS Windows 7 and Windows Server 2008 micropatches?
mitja.kolsek - October 21, 2019 06:37

To receive our post-End-of-Support Windows 7 and Windows Server 2008 micropatches, you will have to:

1. Apply all official Windows updates to your Windows 7 and Windows Server 2008 computers up to the latest ones, and also any subsequent updates that Microsoft may issue (like they have issued EternalBlue and BlueKeep updates for Windows XP and Windows Server 2003 after their support had ended).
2. Install 0patch Agent on each Windows 7 and Windows Server 2008 computer you want to protect with 0patch, and register these agents with your 0patch account.
3. Have a suitable number of 0patch PRO or 0patch Enterprise licenses in your 0patch account.
4. Allow your 0patch-protected computers to connect to 0patch server for periodic syncing in order for them to receive new micropatches and in order for you to remotely manage them (included in the Enterprise license).

 

But it is addressed in the FAQ. I hadn't looked far enough.

 

Yeah I guess you found it is free for home and non-commercial use.

As for the doubt about MS releasing an emergency patch for 7 if needed.
We all heard how XP/2000 would get no more updates. However reality kicked in, and after an attack of twitching sphincters Microsoft pushed the patch they swore would never happen.

The install-base and nature of threat will be the deciding factor again, not "can we be *****" or "how much is it worth".
As long as commercial users have access to updates, that increases the chance important security fixes have to go public (if they made it already and the risk high enough)

 

Anyone here considering 0Patch? Why/why not? TY

 

I'd consider OPatch only if an evil presence was proven in the wild, targeting W7, could only be addressed with a patch to Windows and if OPatch had a viable solution for that particular evil. Otherwise, I think the risk to remaining on an unsupported OS can be managed by other means (layered security, vigilance and common sense).

 

I have not updated my Windows 7 machines probably for a year. How do you feel about taking all updates at this point pro and con and thanks.

 

The only problem you may face is with the signing patch. Other than that, should be fine.
Mrk

 

Thanks. If I do update now, can I still turn off Windows updates like before?

 

Of course!
Mrk

 

"0patch offers two more years of updates for Windows 7 and Windows Server 2008 R2

Third-party security updates will keep the rusty OSes going for a while..."

https://www.techspot.com/news/96309-0patch-offers-two-more-years-updates-windows-7.html

 

it is not sure if ESU is extended for another paid 3 years.
0patch'es are a reversed product. it surely have risks because not all flaws are covered and then only windows 7 for free, office and business need payment. and its not sure if the reversed patch is fully compatible to windows 7 because patches are not build for windows 7. even for unsupported office builds it is not sure that all flaws are covered or working as expected, they only test the patch vs malware, not functionality. this and more was written more than once, but users claim as secure, which obviously is not.

but the comments on techspot are really dumb and far away from truth.

 

Those "rusty" old Windows 7 OSes and it's user's are as firm in their commitment to that particular system as i seem to be with Windows 8.1. Plenty of user's are on to Microsoft's release and ditch policy. Which is why ALL my many 8.1's are in this for the very long haul irregardless of their bullheaded neglect. Some can choose to jump ship to another O/S while others will be content to settle on Windows 10 a little while longer. As for me and my house, we WILL wait for WINDOWS 12

And there's no rush. Microsoft will sooner than later ditch Windows 10 soon enough followed by what seems is new Windows 11 in their endless quest to remake the wheel

 

As I already said in the Forum, I use again 7 on one pc: since it was discontinued I never had malwares or issues, also without updates. I don't say that Windows updates are unnecessary, but I think that it's better don't use Windows patches of third part as those of 0patch, and rather rely on a multi layered defense.