Tackle Windows 7 end of life with Desktop Central

Hello everyone,

As most of you are already aware, Microsoft is pulling the plug on Windows 7 on January 14, 2020. This means that the Patch Tuesday of this month is the last time that security updates will be released for Windows 7. After this Patch Tuesday, the Windows 7 machines running in your environment will not receive any security updates or tech support.

The lack of security updates can put your Windows 7 machines at severe risk. Considering its been over a year since Microsoft announced the end of life date for Windows 7, we can expect these machines to be targeted in cyberattacks.

There are 2 ways with which you can tackle this end of life

1. Migrate to Windows 10
2. Purchase Windows 7 Extended Security Updates

Migrate to Windows 10

There are 2 ways you can migrate to Windows 10 using Desktop Central

1. Under Software Deployment --> Templates, search for Windows 10 OS Upgrade and refer the document attached on how to deploy it.
2. If you are running the UEM edition of Desktop Central, you can also use OS deployment, create an image of a Windows 10 machine and customise the deployment to other machines.

Purchase Windows 7 Extended Security Updates

The other option to stay securely on Windows 7 is to purchase the Extended Security Updates.

Editions that can avail ESUs

Windows 7 Professional and Windows 7 Enterprise.
The Datacenter, Enterprise, and Standard editions of Windows Server 2008/2008 R2 are eligible for Extended Security Updates, for both x86 and x64 versions.
Windows 7 for Embedded Systems, Windows Embedded Standard 7, and Windows Embedded POS Ready 7.
Windows Server Embedded 2008 SP2 and R2 SP1 Data Center and Standard Editions.

Once you have purchased the licenses for Windows 7 Extended Security Updates from Microsoft, you will receive a MAK key, that you will have to deploy to your endpoints.

You can deploy the Windows 7 ESU MAK key using Desktop Central script repository, by navigating to Admin --> Script repository ---> Templates
Search for DeployESUMAKKey.exe and click on 'Add to Repository'.
In the Repository tab, Under Actions choose "Add Computer Configuration" and give the MAK key as Script Argument.
Choose 'Enable Logging for troubleshooting' checkbox.
Deploy it to the target machines.
The status of the deployment process will show 'Success' if the MAK keys have been successfully deployed to the target machines.

Refer the follow-up post to know how to verify your ESU license activation: https://pitstop.manageengine.com/portal/community/topic/windows-7-esu-verification

We suggest all our users to migrate to Windows 10 as soon as possible or to purchase the Windows 7 Extended Security Updates licensing from Microsoft to stay abreast security loopholes that might be exploited post Windows 7 end of life.

Cheers,

ManageEngine Team