- CreateISOImage.cmd script will now compute hashes for generated ISO files
- Downloads from a local WSUS server will now only optionally use proxy settings (Thanks to "omo683")
- Files whose digital signatures can't be verified will now be automatically deleted
- Fix: CopyToTarget.cmd and CreateISOImage.cmd scripts missed language specific directories when called with "all" parameter (Thanks to "psj")
- Fix: DoUpdate.cmd script ignored custom static installation definition list ...\static\custom\StaticUpdateIds-dotnet.txt (Thanks to "wwsmith")
- Fix: DownloadUpdates.cmd script ignored custom static and exclude lists if corresponding lists were not delivered (Thanks to "wwsmith")
- Fix: DownloadUpdates.sh script contained a duplicate menu id (Thanks to Thomas Rieck)
- Fix: DownloadUpdates.sh script contained a reference to the obsolete filter ExtractDownloadLinks-win-x86-glb.xsl (Thanks to "NoKurth")
- Fix: Self update script UpdateOU.cmd overwrote itself while running
- Fix: Self version check script CheckOUVersion.cmd did not work properly in v. 6.7
- Microsoft Security Essentials installation updated to version 2.0 (Thanks to "Matjes")
- Obsolete directories ...\client\win\<language>\ie6setup will be removed (Thanks to "boco")
- Optional verification of digital file signatures will now include Windows Update Agent installation and catalog files (Thanks to "albertx")
- Subsequent downloads from a local WSUS server speeded up by using wget '-N' option

- CreateISOImage.cmd and CopyToTarget.cmd scripts will now log to ..\log\download.log file (Thanks to "Matjes")
- Fix: CreateISOImage.cmd script did not properly signal errors (Thanks to "AlBundy")
- Fix: Microsoft removed the Office File Converter Pack (oconvpck.exe) from their servers (Thanks to "-Iwan-", "harry" and "Denniss")
- HashDeep utility updated to version 3.7
- Optional download and automatic update of Windows Defender definition files
- Optional installation of Internet Explorer 9 Beta on Windows Vista, 7 and Server 2008(R2) (x86/x64) systems
- Optional installation of Windows Defender on Windows XP and Server 2003 (x86/x64) systems
- Optional verification of digital file signatures will now include .NET, MSSE and Windows Defender packages

- Windows 7 / Server 2008 R2 Service Pack 1 integrated
- Optional installation of Internet Explorer 9 Release Candidate on Windows Vista, 7 and Server 2008(R2) (x86/x64) systems
- Superseded updates will now be dynamically determined and automatically excluded from download (Thanks to "Denniss" and "harry")
- Self update will now check integrity of downloaded release archive before updating
- Fix: Internet Explorer 9 Beta offline installation missed prerequisites according to http://support.microsoft.com/kb/2399238 (Thanks to "boco")
- Fix: Internet Explorer 9 prerequisites were erroneously installed even for IE8 on Windows Vista and Server 2008 systems (Thanks to "boco")
- Fix: Case sensitive file name handling lead to false audit errors when attempting to install Windows Defender on Windows XP systems (deu and jpn only)
- Fix: DownloadUpdates.sh script contained invalid references to StaticDownloadLink-msse-*.txt (Thanks to "Andrew")
- Fix: CreateISOImage.sh script erroneously supported "wxp-x64" target (Thanks to "rupat")
- Fix: Added missing custom directory support for StaticDownloadLinks-dotnet.txt and StaticDownloadLinks-msse-<architecture>-glb.txt (Thanks to "rednaxela" and "yodog")
- Fix: Added missing template files for statical download definitions of .NET updates (Thanks to "rednaxela")
- Fix: Obsolete MSXML patches kb925672, kb925673, kb927977, kb927978, kb933579, kb936021 and kb936181 were not excluded (Thanks to "rustam")
- Fix: Obsolete .NET patches kb886903, kb928366, kb971108, kb979906, kb917283, kb922770, kb947746, kb947748, kb971110, kb971111 and kb974417 were not excluded (Thanks to "Denniss")
- Fix: Numerous obsolete patches for all platforms were not excluded (Thanks to "Denniss")
- Fix: XSLT filter for Windows Server 2003 x64 global included Japanese updates (Thanks to "Denniss")
- Fix: DownloadUpdates.sh and CreateISOImage.sh scripts did not support symbolic links as working directories (Thanks to "NoKurth")
- Fix: Installation of kb2416447 (security update for .NET 1.1) caused uncontrolled reboots (Thanks to "wwsmith" and "Denniss")
- Fix: Security update for .NET 3.5 SP1 on Windows Vista / Server 2008 (kb2416470) was not properly installed (Thanks to "Denniss")
- Fix: Security update for Jscript for Windows Server 2003 (KB971961) was not downloaded for Jscript v. 5.6 (Thanks to "Denniss")
- Fix: Double-quoted argument check in SafeRmDir.cmd could cause installation failures (Thanks to "thadsaab" and "Neb")

- Optional installation of Internet Explorer 9 on Windows Vista, 7 and Server 2008(R2) (x86/x64) systems
- Language Pack support added for .NET Frameworks 3.5 SP1 and 4 (Thanks to "aker")
- Installation and update packages for .NET Frameworks 3.5 SP1 and 4 will be validated only once a day if verification is enabled
- Fix: Automatic recall preparation failed for new version 3.1 of Sysinternals' tool Autologon.exe (Thanks to "Yany", "harry" and "boco")
- Fix: Download exclude lists for Windows 7 / Server 2008 R2 (x86/x64) updated since Microsoft modified their list of included fixes and updates on March 4th, 2011 (Thanks to "harry")
- Fix: Download filters missed CAPICOM security update kb931906 again
- Fix: Several obsolete cumulative security updates for Internet Explorer remained (Thanks to "Denniss")

- DownloadUpdates.cmd script will now avoid re-downloading after daylight saving time to standard time switch by setting TZ environment variable (Thanks to "Gerby")
- Optional cleanup of target directory added to CopyToTarget.cmd script and USB stick option (Thanks to "Mike")
- Optional updating of DirectX End-User Runtimes (Thanks to "Denniss", "aker", "boco" and "-Iwan-")
- Microsoft Security Essentials and Windows Defender installation and definition files will now be validated only once a day (Thanks to "Denniss")
- Superseded updates will now be determined depending on archive attribute of catalog file wsusscn2.cab (Thanks to "harry")
- Update for Root Certificates (rootsupd.exe/kb931125) updated to March 2011 (Thanks to "Gerby")
- AddCustomLanguageSupport.cmd and RemoveCustomLanguageSupport.cmd scripts added to ease download of localized IEx, .NET and MSSE installation files (Thanks to "harry" and "aker")
- Fix: Remote Desktop Connection 7.0 client (kb969084) was erroneously attempted to be installed on Windows Server 2008 (x86/x64) systems (Thanks to "mAsTa")
- Fix: Regional date format settings could cause redundant determination of .NET updates (Thanks to "harry")
- Fix: DirectX main version will now be determined correctly according to MSDN article
- Fix: Obsolete update for the DirectX IDirectPlay4 API (kb839643) was not excluded (Thanks to "Denniss")
- Fix: Superseded updates' determination missed several entries (Thanks to Martin Trenkner)
- Fix: 'Clean up download directories' option will now also affect directories for .NET and MSSE installation files

- DownloadUpdates.sh script will now create hash files for downloaded updates (Thanks to Stefan Jöhnke)
- DownloadUpdates.sh script will now support optional download of Windows Defender definition files (Thanks to Stefan Jöhnke)
- DownloadUpdates.sh script will now support custom static and exclude directories (Thanks to Stefan Jöhnke)
- HashDeep utility updated to version 3.9.1
- Fix: DownloadUpdates.sh and CreateISOImage.sh scripts did not support working directories containing spaces (Thanks to Stefan Jöhnke)
- Fix: Registry references to WOUTempAdmin profile were not cleaned up (Thanks to Bert Schinkel-Momsen)
- Fix: Determination of Office and superseded updates caused invalid file system activities (Thanks to "Yaso Kuhl")
- Fix: Windows 7 / Server 2008 R2 Service Pack 1 (kb976932) was attempted to be installed as a patch (Thanks to "Denniss")

- INSTALLATION HINT: If you localized your installation using AddCustomLanguageSupport.cmd {lng}, please call it again after updating WOU in order to get MSSE 2.1 downloaded (see below)
- NOTE: This version is supposed to be the last one supporting Office XP (see Microsoft Support Lifecycle)
- Office 2010 Service Pack 1 integrated
- Optional installation of Office File Validation Add-in (Thanks to "Gerby")
- C++ Runtime Libraries' installation option will now only update existing versions
- Static download definitions for Microsoft Security Essentials updated to version 2.1 (Thanks to "Denniss")
- Update for Root Certificates (rootsupd.exe/kb931125) updated to June 2011 (Thanks to "Denniss")
- Fix: Two EoLn spaces were too much for TZ environment variable setting (Thanks to "psj")
- Fix: C++ Runtime Libraries' x86 versions were not installed/updated on x64 Operating Systems (Thanks to "Denniss")
- Fix: C++ 2005 and 2008 Runtime Libraries' installations will now be called using undocumented "/r:n" switch (Thanks to "pdietrich")
- Fix: DirectX main version detection did not use "/64bit" switch on x64 Operating Systems
- Fix: Temporary file package.xml remained after Office downloads (Thanks to "Denniss")
- Fix: "Clean up download directories" functionality could lead to "file not found" error messages (Thanks to "rednaxela")

- Linux download and ISO creation scripts now support Office again and exclusion of superseded updates (Thanks to Stefan Jöhnke)
- Support removed for Office XP since Microsoft discontinued support for it on July 12th, 2011 (see Microsoft Support Lifecycle)
- C++ 2010 Runtime Libraries updated to include kb2565063 / MS11-025 (Thanks to "Denniss")
- Update for Root Certificates (rootsupd.exe/kb931125) download URL updated to provide most recent version always (Thanks to "Gerby")
- Optional verification of downloaded updates will now check SHA-1 message digest included in file names
- Download of updates will optionally use a local WSUS server only (Thanks to "FrankWeber" and "balonik")
- User's SID will now only be determined if WOUTempAdmin is logged on (Thanks to "Adorno")
- HashDeep utility updated to version 3.9.2, x64 variant included (Thanks to "Gerby" and "boco")
- Fix: Temporary file "%TEMP%\InstalledUpdateIds.txt" remained after update run without any missing update (Thanks to "Denniss")
- Fix: Temporary files "%TEMP%\sigcheck-wddefs-%TARGET_ARCH%-glb.txt" remained after download of Windows Defender definition files (Thanks to "boco")
- Fix: ISO and USB filters for x86 platforms erroneously excluded .NET Framework 4 installation packages (Thanks to "boco")
- Fix: Download exclude lists for Windows 7 / Server 2008 R2 (x86/x64) modified since Microsoft updated their List of updates included in SP1 on March 24th, 2011
- Fix: Download exclude list for Office (...\exclude\ExcludeList-ofc.txt) improved
- Fix: UpdateGenerator will now also check for valid script path (Thanks to "Sydnelson")
- Fix: DownloadUpdates.sh script called wget using problematic -c and --no-cache switches (Thanks to "Medvedko")

- Office 2007 Service Pack 3 integrated
- Office Compatibility Pack Service Pack 3 integrated
- Automatic recall feature enhanced to support network shares permitting anonymous access
- DownloadUpdates.cmd and DoUpdate.cmd scripts now support "/skipdynamic" switch for "statics only" mode
- DownloadUpdates.cmd and DoUpdate.cmd scripts will now log errorlevels of custom initialization and finalization hook scripts (Thanks to "aker")
- Fix: Linux download scripts contained invalid formatted conditional statements (Thanks to "t3573r")
- Fix: Linux download scripts did not support o2k10 target (Thanks to "Medvedko")
- Fix: Download procedure missed kb2564958 for Windows XP / Server 2003 (x86/x64) because of variant file name scheme (Thanks to "peter2" and "harry")
- Fix: TZ environment variable setting failed under Windows Server 2003 (x86) due to "SET /A" bug (erroneous INT overflow error)

- Office File Converter/Compatibility Packs and Office File Validation Add-In may now be installed separately
- Installation routine will now adjust power management settings when running under WOUTempAdmin user account to avoid standby and hibernate modes
- DownloadUpdates.cmd script now supports "/skipdownload" switch for "determine only" mode
- DownloadUpdates.cmd switches "/skipdownload" and "/skipdynamic" may be preset in UpdateGenerator.ini file
- Installation exclude list (...\client\exclude\ExcludeList.txt) may contain comma separated descriptions (Thanks to "Pete Monger")
- DoUpdate.cmd script won't terminate any longer if most recent OS Service Pack is not found
- Fix: Linux script DownloadUpdates.sh did not download C++ Runtime Libraries (Thanks to "Spider-Mann")
- Fix: DownloadUpdates.cmd showed misleading warnings when attempting to remove alternate data streams on non-NTFS file systems (Thanks to "aker")
- Fix: Linux script DownloadUpdates.sh missed grep -F option ('fixed strings') several times (Thanks to "zoc")
- Fix: When running under WOUTempAdmin user account, DoUpdate.cmd script will now assume that the service 'automatic updates' (wuauserv) is running if its start mode is 'Auto' (Thanks to "1inux")
- Fix: Office File Validation installation now includes update kb2553065 (Thanks to "harry" and "-Iwan-")
- Fix: Automatic recall failed if script path contained a blank (Thanks to "abox")

- Optional installation of most recent Update for Root Certificates (Thanks to "mth404")
- Superseded updates' determination speeded up for systems running paranoid AV scanners (Thanks to Peter Schöll)
- HashDeep utility updated to version 4.0.0
- AutoIt script compiler updated to version 3.3.8.0
- Removed proprietary, w2k-compatible shutdown/reboot implementation
- Fix: Download part missed Excel 2003 Security Update kb2596954 (Thanks to "peter2")
- Fix: Installation part tried to install IEx on Server 2008(R2) Core systems (Thanks to "herbert")
- Fix: Linux script DownloadUpdates.sh used invalid wget parameter combination '-N -O' (Thanks to "harry", "nebyah" and "Spider-Mann")
- Fix: CopyToTarget.cmd script failed when started from a read-only share (Thanks to "OlegK")
- Fix: CopyToTarget.cmd script failed when output path contained a blank
- Fix: Office Compatibility Pack SP3 will now be stringently installed after Office Compatibility Pack (Thanks to "aker" and "Denniss")
- Fix: Using an incomplete cross-platform update medium, the installation procedure could try to install x86 patches on x64 platforms (Thanks to U. Bookjans)
- Fix: Linux script DownloadUpdates.sh performed invalid dos2unix conversions (Thanks to "ewasscher")
- Fix: Damaged Windows Scripting (WSH) installations could cause misleading syntax errors in DoUpdate.cmd (Thanks to "martink")

- HashDeep utility updated to version 4.1
- AutoIt script compiler updated to version 3.3.8.1
- Fix: Installation of .NET Framework 4 could fail on Windows Server 2003 (x86/x64) systems due to missing prerequisite "Windows Imaging Component (WIC)" (Thanks to "dreamz")
- Fix: Linux script DownloadUpdates.sh did not download MSSE definition files (Thanks to M. Speck)
- Fix: Linux script DownloadUpdates.sh did not report dos2unix conversion failures (Thanks to R. Zocholl)
- Fix: Download URLs of Sysinternals' tools changed (Thanks to "harry")
- Fix: Download part missed Office 2010 Security Update kb2598039

- Installation part will now disable the screensaver when running under WOUTempAdmin user account (Thanks to "harry")
- Existing installations of Microsoft Security Essentials may now be updated to most recent version (Thanks to Th. Baisch)
- Fix: Linux script DownloadUpdates.sh attempted invalid dos2unix calls (Thanks to "Spider-Mann")
- Fix: Scripts contained typos in log messages (Thanks to "Extrinsic")
- Fix: Download part missed Security Update kb2633171 for Windows Vista and 7 (x86)
- Fix: Microsoft Security Essentials definition files wouldn't be updated on Windows Server systems (Thanks to "Denniss")
- Fix: Windows Defender definition files were attempted to be updated even if Windows Defender was disabled (Thanks to "Denniss" and "aker")
- Fix: Network drive reconnection during recall failed on English systems (Thanks to J. Holland)

- Automatic recall feature enhanced to support Service Pack installations on Windows Vista, 7 and Server 2008(R2) systems
- Optional installation/updating of Microsoft Silverlight
- HTTP Proxy password storage to UpdateGenerator.ini file may now be avoided (Thanks to "Mortimer")
- CreateISOImage.cmd script and UpdateGenerator.ini file now support "[/]skiphashes" switch to skip time-consuming hash computation of generated ISO files
- HashDeep utility updated to version 4.2
- InitializationHook.cmd calls moved upwards in DownloadUpdates.cmd and DoUpdate.cmd scripts (Thanks to S. Struß)
- Fix: For Windows XP (x86) systems, kb2686509 was downloaded twice (Thanks to Th. Baisch)
- Fix: Linux script DownloadUpdates.sh threw misleading connection timeout errors (Thanks to J. Steffens)
- Fix: Linux script DownloadUpdates.sh attempted invalid dos2unix calls II (Thanks to "Spider-Mann")

NOTE: This version is supposed to be the last one maintaining the Linux download scripts
- UpdateGenerator GUI logic improved
- Installation part will now suppress Winlogon Legal Notice during automatic recalls (Thanks to "Mortimer" and "aker")
- Fix: Microsoft removed the Command Line Transformation Utility (msxsl.exe) from their servers
- Fix: For Windows XP (x86) systems, an invalid version of kb2686509 was downloaded (Thanks to "Aldegundis", "mbathen", "aker" and "harry")
- Fix: Download part missed Security Update kb2645640 for Windows Server 2003 (x86/x64)
- Fix: .NET 3.5 patches kb2657424 and kb2604111 could fail to install on Windows Vista systems (Thanks to R. Tolley)
- Fix: Error handling in CreateISOImage.cmd and CopyToTarget.cmd scripts corrected
- Fix: Linux script DownloadUpdates.sh did not create platform specific subdirectories for .NET patches (Thanks to "zan69")
- Fix: Linux script DownloadUpdates.sh contained invalid Windows (<CR><LF>) instead of Unix (<LF>) line feeds (Thanks to Ch. Grafe)
- Fix: Slackware part and fromdos alias in Linux download script DownloadUpdates.sh (Thanks to A. Klie)

- Support removed for the Linux download scripts
- Fix: Microsoft removed the Windows Defender installation files for Windows XP / Server 2003 (x86/x64) from their servers (Thanks to "psj", "LigH" and "aker")
- Fix: Microsoft removed the Office 2003 Resource Kit (ork.exe), containing the Office File Converter Pack (oconvpck.exe), from their servers (Thanks to "LigH" and "boco")

- NOTE: If you customized your copy of WOU using the script AddCustomLanguageSupport.cmd {lng}, please call it again once (per language) to get the appropriate .NET 4.5 language pack(s) downloaded
- Linux download scripts reintegrated (Thanks to H. Hullen)
- Optional installation of Windows Management Framework 3.0 on Windows 7 and Server 2008(R2) (x86/x64) systems (Thanks to "boco")
- Optional installation of .NET Framework 4 will now install .NET Framework 4.5 instead of v. 4.0 on Windows Vista, 7 and Server 2008(R2) (x86/x64) systems (Thanks to "harry")
- Office 2003 Resource Kit (ork.exe) reintegrated, since Microsoft provides it again (Thanks to "harry" and "aker")
- UpdateGenerator script will now download mkisofs.exe regardless of the current ISO image creation settings (Thanks to "harry")
- Fix: Automatic recall feature was broken on Windows XP systems (Thanks to "cecinit" and "boco")
- Fix: Download part missed Security Update kb967723 for Windows Server 2003 (x86/x64)
- Fix: ISO and USB filters for Windows 7 and Server 2008 R2 now include .NET Framework 3.5 SP1 installation files, since Windows Server 2008 R2 does not automatically contain .NET Framework 3.5 SP1
- Fix: ISO and USB filters for Windows XP and Server 2003 (x64) erroneously excluded kb923789
- Fix: UpdateGenerator script will now check for existence of USB target directory before attempting to copy to it (Thanks to "kara2004")

- NOTE: If you customized your copy of WOU using the script AddCustomLanguageSupport.cmd {lng}, please call it again once (per language) to get the appropriate IE10 installation file(s) downloaded
- Support added for Windows 8 and Server 2012 (Thanks to "boco")
- Optional installation of Internet Explorer 10 Release Preview on Windows 7 and Server 2008 R2 (x86/x64) systems
- Support added for Remote Desktop Connection 8.0 client (kb2592687) on Windows 7 / Server 2008 R2 (x86/x64) systems
- Support added for C++ 2012 Runtime Libraries Update 1 (Thanks to B. Knapp and "harry")
- Linux scripts reviewed and enhanced to support Windows 8 / Server 2012 targets (Thanks to H. Hullen)
- HashDeep utility updated to version 4.3
- ISO filters improved to mutually exclude .NET Framework 4.0/4.5 installation packages (Thanks to "boco")
- Removed obsolete "trailing colon" restriction for environment variable TEMP from UpdateGenerator script (Thanks to "daos" and "boco")
- DownloadUpdates.cmd script now evaluates a custom ExcludeList-superseded-exclude.txt file (Thanks to "boco")
- Default changed for updating DirectX Runtime Libraries
- Fix: Network drive reconnection failed during subsequent recalls if its default was 'persistent' (Thanks to J. Holland)
- Fix: Microsoft Silverlight x64 version was erroneously attempted to be installed on Windows XP/Vista and Server 2003/2008 (x64) systems (Thanks to "friday123" and "Denniss")
- Fix: Update for Root Certificates (rootsupd.exe/kb931125) was not properly detected on x64 systems (Thanks to "boco")
- Fix: Linux script CreateISOImage.sh did not exit on missing iso creation tool (Thanks to S. Baur and H. Hullen)
- Fix: 'x86-cross-product' ISO images exceeded 4.7 GB (max. capacity of DVD-5 media) and therefore won't contain Vista, but Server 2003 updates now
- Fix: State of service 'Windows Update' (wuauserv) might be determined incorrectly (Thanks to "boco")
- Fix: UpdateInstaller script offered .NET Framework 3.5 SP1 installation under Windows 7 / Server 2008 R2 (Thanks to Ch. Giesers)
- Fix: UpdateInstaller script did not properly detect existing .NET Framework 3.5 SP1 installations under Windows 7 / Server 2008 R2 (Thanks to "boco")
- Fix: Update Rollup 1.1 for Windows MultiPoint Server 2011 (kb2626067) was erroneously downloaded