Microsoft to shift Windows 7 and 8 security updates to Windows 10 cumulative model

Microsoft are planning to move their update procedures for users of Windows 7 and 8.1 in line with their policies that have been used for Windows 10.

This move means that from October Windows 7 and 8.1 users will get a monthly patch updates instead of individuals ones. There is a risk that Microsoft may include a whole host of other features into these security updates. Microsoft did this when they ran their recent Windows 10 update campaign where they buried a version of their GWX nagware inside an important security update.

They claimed in a Microsoft TechNet blog post this was an extension of the ‘Convenience Rollup’ which was first introduced as part of the non-security updates earlier this year.

The post stated “By moving to a rollup model, we bring a more consistent and simplified servicing experience to Windows 7 SP1 and 8.1, so that all supported versions of Windows follow a similar update servicing model,” the post stated.

“The new rollup model gives you fewer updates to manage, greater predictability and higher quality updates. The outcome increases Windows operating system reliability by eliminating update fragmentation and providing more proactive patches for known issues. Getting and staying current will also be easier with only one rollup update required.”

These changes also include security releases to form part of the Patch Tuesday cycle.

“Also from October 2016 onwards, Windows will release a single security-only update. This update collects all of the security patches for that month into a single update. Unlike the Monthly Rollup, the security-only update will only include new security patches that are released for that month,” the post said.

“Individual patches will no longer be available. The security-only update will be available to download and deploy from WSUS, SCCM and the Microsoft Update Catalogue.

“Windows Update will publish only the Monthly Rollup – the security-only update will not be published to Windows Update. The security-only update will allow enterprises to download as small an update as possible while still maintaining more secure devices.”

Unfortunately administrators will have reduced ability to control which updates are installed and which are not.

The growth of Windows 10 has declined since the free upgrade offer has passed and this may be an attempt by Microsoft to reverse this.