This is from a transcript of Laporte/Gibson’s Security Now podcast (https://www.grc.com/sn/sn-549.htm)
“What’s happened is Windows Update has changed a lot since the last service pack of Win7. So when you’re installing a new Windows 7 system, you’re installing Windows 7 with Service Pack 1. The problem is, even that is so old that it gets confused when you tell it to use Windows Update to bring the 250 things that have been updated since.
The secret is go and get the update to Windows Update manually off of Microsoft’s site. You can just - you can download it. ... So I got that after another fresh install of Windows 7. Oh, and you have to take it off the Internet. Don’t let it touch the Internet because it’ll start trying to sniff Windows Update and get confused. So after it first boots, with it off the Internet, you manually install the update to Windows Update. That then brings it current, and then you can let it run from there. So just a little tip, for those of us creaky old farts who refuse to go forward because, gee, Windows 7 works just fine.”