Wsus on server 2012 R2 deploy extended patches for windows 7

%3CLINGO-SUB%20id%3D%22lingo-sub-1491392%22%20slang%3D%22en-US%22%3EWsus%20on%20server%202012%20R2%20deploy%20extended%20patches%20for%20windows%207%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1491392%22%20slang%3D%22en-US%22%3EI%20have%20a%202012%20R2%20server%20with%20WSUS%20configuration.%3CBR%20%2F%3EThe%20wsus%20version%20is%206.3.900....%3CBR%20%2F%3EI%20want%20to%20know%20if%20the%20wsus%20can%20deploy%20the%20extended%20patches%20for%20windows%207%20system%20%3F%3CBR%20%2F%3EIf%20windows%207%20esu%20licence%20se%20has%20been%20purchased%20for%20the%20workstations.%3CBR%20%2F%3E%3CBR%20%2F%3EIf%20yes.%20How%20will%20wsus%20detect%20the%20extended%20patches%20and%20how%20will%20it%20scan%20which%20system%20has%20the%20licence%20key%20installed%20on%20it%20%3F%3C%2FLINGO-BODY%3E%3CLINGO-LABS%20id%3D%22lingo-labs-1491392%22%20slang%3D%22en-US%22%3E%3CLINGO-LABEL%3EWindows%20Server%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3EWSUS%3C%2FLINGO-LABEL%3E%3C%2FLINGO-LABS%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1493589%22%20slang%3D%22en-US%22%3ERe%3A%20Wsus%20on%20server%202012%20R2%20deploy%20extended%20patches%20for%20windows%207%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1493589%22%20slang%3D%22en-US%22%3EIt%20works%20the%20same%20as%20before%2C%20no%20extra%20action%20is%20required%3CBR%20%2F%3Eif%20a%20device%20is%20ESU-eligible%2C%20it%20will%20show%20in%20WSUS%20as%20compliant%2C%20otherwise%20not%3CBR%20%2F%3E%3CBR%20%2F%3E%3CA%20href%3D%22https%3A%2F%2Fsupport.microsoft.com%2Fen-us%2Fhelp%2F4561643%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%22%3Ehttps%3A%2F%2Fsupport.microsoft.com%2Fen-us%2Fhelp%2F4561643%3C%2FA%3E%3CBR%20%2F%3E%3CBR%20%2F%3EIMPORTANT%20WSUS%20scan%20cab%20files%20will%20continue%20to%20be%20available%20for%20Windows%207%20SP1%20and%20Windows%20Server%202008%20R2%20SP1.%20If%20you%20have%20a%20subset%20of%20devices%20running%20these%20operating%20systems%20without%20ESU%2C%20they%20might%20show%20as%20non-compliant%20in%20your%20patch%20management%20and%20compliance%20toolsets.%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1498373%22%20slang%3D%22en-US%22%3ERe%3A%20Wsus%20on%20server%202012%20R2%20deploy%20extended%20patches%20for%20windows%207%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1498373%22%20slang%3D%22en-US%22%3EThe%20below%20article%20says%202012%20R2%20configuration%20manager%20won't%20be%20able%20to%20support%20the%20windows%207%20on%20their%20respective%20ESU%20phases.%3CBR%20%2F%3E%3CA%20href%3D%22https%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Flifecycle%2Ffaq%2Fextended-security-updates%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%22%3Ehttps%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Flifecycle%2Ffaq%2Fextended-security-updates%3C%2FA%3E%3C%2FLINGO-BODY%3E
New Contributor
I have a 2012 R2 server with WSUS configuration.
The wsus version is 6.3.900....
I want to know if the wsus can deploy the extended patches for windows 7 system ?
If windows 7 esu licence se has been purchased for the workstations.

If yes. How will wsus detect the extended patches and how will it scan which system has the licence key installed on it ?
2 Replies
It works the same as before, no extra action is required
if a device is ESU-eligible, it will show in WSUS as compliant, otherwise not

https://support.microsoft.com/en-us/help/4561643

IMPORTANT WSUS scan cab files will continue to be available for Windows 7 SP1 and Windows Server 2008 R2 SP1. If you have a subset of devices running these operating systems without ESU, they might show as non-compliant in your patch management and compliance toolsets.
The below article says 2012 R2 configuration manager won't be able to support the windows 7 on their respective ESU phases.
https://docs.microsoft.com/en-us/lifecycle/faq/extended-security-updates