New Win7 HVM will not update?

[gaikokuji...@gmail.com]

Hi, I finally got past the cdrom issue (ie didn't need it anyway!) and installed win7 with only one hiccup (512 default mem setting) and it seemed to install fine, I had net access and everything. I downloaded the GWX control panel app and anti-beacon then tried to run win updates, it ran, and ran, for like 3 hours never giving any indication that it was doing anything but "checking". That was before started "start VM for Windows Tools Installation" and ran the qubes-tools-WIN7x64-3.0.4.1 app in the virt cdrom that showed up in win7 , I then rebooted win7 and was able to open shortcuts to apps in win7 (win7 appvm?) from Qubes! Great! but then I am not sure what happened, I wasn't able to start the "windows window" at first, and I think I might have tried from the Qubes VM Manager to run "update VM" and eventually was able to get a "windows 7 window" but now no network access at all (said no connection), and I am no longer able to open win7 apps via shortcuts in their own windows, now they open up a large "win7 window" (full screen) and the app inside of that (not full screen, so win menu/taskbar etc are accessible). I then put in the network info from the Win7 settings into windows and set a DNS and I had internet access again, but still no updates and still not back to being able to open up appvms). And for what its worth, I am noticing now that before when the win7 window opened up it would not go to full screen, now it does; also it now (not sure about before) tells me in the bottom right hand side that its in "Test Mode, Windows 7, Build 7601".

I am fine with starting over with the Win7 VM (after getting over the cdrom and bsod hurdles it doesn't seem so bad) but I would like to know if in what I have described I have done anything wrong, hopefully so as I figure I should be doing sec updates etc in win7.

Thanks!!!

[John Marrett]

I've recently completed a windows 7 install and gotten it to update
completely. This was not at all easy.

I took my original ISO and updated it with the recent convenience
rollup (I used an unpatched win 7 install with about 30G of user space
to do this, you'll need the disk space necessary for two copies of the
ISO, the 1G+ convenience patch and some software for the patching):

http://www.howtogeek.com/255540/the-last-windows-7-iso-youll-ever-need-how-to-slipstream-the-convenience-rollup/

I then installed from this iso, I installed another patch that's
supposed to improve windows patching speed that I found out about on
stackoverflow:

https://support.microsoft.com/en-us/kb/3138612

I then waited a very long time, it was still stuck checking for
updates but the shutdown option showed patches ready to install. After
2-3 shutdowns to install patches and a lot of waiting the system is
now fully patched.

Hopefully this information can help you,

-JohnF

> --
> You received this message because you are subscribed to the Google Groups "qubes-users" group.
> To unsubscribe from this group and stop receiving emails from it, send an email to qubes-users...@googlegroups.com.
> To post to this group, send email to qubes...@googlegroups.com.
> To view this discussion on the web visit https://groups.google.com/d/msgid/qubes-users/43aa9356-883f-4585-9aba-64609e955567%40googlegroups.com.
> For more options, visit https://groups.google.com/d/optout.

[gaikokuji...@gmail.com]

Thanks for the response, that is a bit of a PITA but I'm totally willing to give it a try. One question, when you say unpatched do you mean w/o SP1 or you did this with a SP1 ISO?

Cheers

[Andrew David Wong]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

On 2016-06-07 05:39, gaikokuji...@gmail.com wrote:
> Thanks for the response, that is a bit of a PITA but I'm totally
> willing to give it a try. One question, when you say unpatched do
> you mean w/o SP1 or you did this with a SP1 ISO?
>
> Cheers
>

FWIW, I had a relatively painless Win 7 update experience by following
the advice here:

https://superuser.com/questions/951960/windows-7-sp1-windows-update-
stuck-checking-for-updates

(At the time, I followed some combination of the top two rated
answers, but it looks like the content of the answers is different
now. Still a good bet, IMO.)

- --
Andrew David Wong (Axon)
Community Manager, Qubes OS
https://www.qubes-os.org
-----BEGIN PGP SIGNATURE-----
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=pcie
-----END PGP SIGNATURE-----

[gaikokuji...@gmail.com]

Thanks Andrew! I came across WSUS and actually pointed NTlite to the updates that WSUS downloaded so it was quite handy! (cant imagine downloading them separately). NTlite allows you to make an updated/customized install iso with all (ok, most) the updates etc. It added an extra 1.5gb to the ISO but *totally* worth it. So far I was able to make the win7vm, install it (almost unattended) and run updates immediately and fill in the few updates that NTLite didn't cover.

John's response got me on the right track for sure, but I wasn't able to make it work so I tried NTlite and WSUS as subs.