The story spread quickly across the web, and users were quick to react. Microsoft's decision to block updates on Ryzen and Kaby Lake platforms with Windows 7 and Windows 8.1 sparked a storm of criticism, but Redmond doesn't seem willing to change its mind. The result is a new patch that hacks an internal system file, tricking Windows Update into always seeing a supported processor.
The block and the backlash
Another stain on Microsoft's record, no doubt. In the midst of the "software as a service" frenzy and multiplying legal demands, Redmond decided to block Windows Update on Windows 7 and Windows 8.1 when these operating systems run on Ryzen or Kaby Lake hardware. Microsoft had already tried to do the same with Skylake, but after the initial reaction it moved the block back one generation. While it's worth recognizing that there are some technical challenges when installing Windows 7 on a Ryzen computer (mainly on the USB detection side), none of this would happen with the right drivers. Add the fact that Windows 7 is supported until 2020 and Windows 8.1 hasn't even left the mainstream, and it's easy to see why many users are angry.
The patch and its limitations
One of them is "Zeffy" on GitHub, who, in addition to sharing his opinion on Windows 10 using colorful language, published a patch that unlocks the use of Windows Update on Windows 7 and 8.1 with Ryzen-Kaby Lake. The hotfixes that add the restriction in the first place are KB4012218 and KB4012219. After a series of comparisons in the files, Zeffy finally found wuaueng.dll, which has two functions: IsDeviceServiceable(void) and IsCPUSupported(void). With a simple edit, wuaueng.dll is forced to report the CPU as compatible.
Now, the fine print. First, everything Microsoft needs to do to disable the patch is to issue a new version of wuaueng.dll in future hotfixes. This turns the whole process into a race, since the user will need to overwrite the new wuaueng.dll with a modified one each time. Second, editing system files breaks the integrity of the System File Checker, so any SFC review will show errors. The alternatives are to limit updates on Windows 7 and 8.1 to "security only" to avoid installing KB4012218 and KB4012219 (which does not prevent Microsoft from placing the block in other patches), or to use an external solution like WSUS Offline Update to bypass Windows Update entirely.
