Here's what's new in the final updates for Windows 7 and Windows Server 2008

As we all know, extended support for Windows 7 ended today. As expected, the decade-old OS got one final update, as did Windows Server 2008 R2, which is also no longer supported.

The monthly rollup is KB4534310, and there"s also a security-only update, KB4534314. You can manually download the monthly rollup here, and the security-only update here. As you"d probably guess, there are only some security fixes in these updates, so the changelogs are exactly the same between the two. Here"s the list of improvements and fixes:

  • Security updates to the Microsoft Scripting Engine, Windows Input and Composition, Windows Storage and Filesystems, and Windows Server.

Windows 8.1 and Windows Server 2012 also got updates today, although support for those doesn"t end until 2023. The monthly rollup is KB4534297, and you can manually download it here. As always, there"s also a security-only update, KB4534309, which you can download here. They both have the same changelog. Here"s the list of fixes and improvements:

  • Addresses an issue to support new SameSite cookie policies by default for release 80 of Google Chrome.
  • Security updates to Windows Input and Composition, Windows Media, Windows Storage and Filesystems, and Windows Server.

The update for Windows 8.1 and Server 2012 also has one known issue:

Symptom Workaround
Certain operations, such as rename, that you perform on files or folders that are on a Cluster Shared Volume (CSV) may fail with the error, “STATUS_BAD_IMPERSONATION_LEVEL (0xC00000A5)”. This occurs when you perform the operation on a CSV owner node from a process that doesn’t have administrator privilege.

Do one of the following:

  • Perform the operation from a process that has administrator privilege.
  • Perform the operation from a node that doesn’t have CSV ownership.
Microsoft is working on a resolution and will provide an update in an upcoming release.


You can grab these updates through Windows Update, or if you want the security-only update, you can install that manually.

Windows 7 and Windows Server 2008 won"t get anymore updates after this month, but if you need more time, businesses can subscribe to Extended Security Updates (ESUs). ESUs will be available for three years, and they"ll get more expensive every year.

Report a problem with article
Next Article

Google announces plans to phase out support for third-party cookies in Chrome

Previous Article

Microsoft releases Windows 10 build 19041.21 to the Slow Ring