Windows Updates types
There are two major types of Windows Updates:-
GDR - General Distribution Release.
A binary marked as GDR contains only security-related changes that have been made to the binary, including changes that are relevant to this build of the file and those from any earlier security hotfix that updates the same binary.
These updates are distributed via Microsoft WSUS.
-
LDR (QFE) - Limited Distribution Release (formerly known as Quick Fix Engineering).
A binary marked as QFE/LDR contains both security-related changes that have been made to the binary as well as any functionality changes, including changes that are relevant to this build of the file and those from any earlier security fix or bug fix that updates the same binary.
These updates are installed manually and are not present in WSUS.
Additional information on Microsoft Updates types:
Technet: QFE vs GDR/LDR hotfixesTechnet: GDR, QFE, LDR... WTH?
Windows Updates Mechanism
As of Windows 2008, binary files of an update are unpacked under the "\Windows\WinSxS" folder, after which a hardlink to the actual "location" of the file is created.
Show\hide detailed example 

Additional information on Microsoft Updates mechanism:
Technet: What is the WINSXS directory in Windows 2008 and Windows Vista and why is it so large?Microsoft Windows Updates and Parallels Virtuozzo Containers
All kernel updates, both LDR and GDR, have to be supported by the Parallels Virtuozzo Containers kernel abstraction layer. Parallels Virtuozzo Containers updates introduce support for new Microsoft Windows updates, both GDR and LDR.In order to verify that an update is supported, take one of the following actions:
- For GDR: Find the list of supported updates on our website.
- For LDR|QFE: Do a search in our knowledgebase, e.g., for KB981957.
Useful links
-
112060 Parallels Virtuozzo Containers for Windows best practices and known limitations
It is recommended to read the entire article, but you may check only point #1 in scope of MS updates learning. -
985 How to keep a Parallels Virtuozzo Containers for Windows server up-to-date.
Parallels recommend to install updates only through "Automatic Updates" distributed from our WSUS (correct WSUS is configured after PVC installation automatically) -
113428 How to know if an unsupported Microsoft update can be installed on a PVC node
Due to huge amount of MS updates Parallels physically cannot check all of them. Therefore if update is not distributed through WSUS it still might be safe to install it manually. This article will explain how to determine whether some certain update can be installed on the node even if it is not marked as "approved". -
11220 Is it safe to install Microsoft .NET Framework on a hardware node?
Small FAQ about .NET installation to the node.In short: Do not install .NET on the node, but if it is already installed, do not uninstall, or things will get worse. -
113348 Microsoft updates for .NET Framework in PVCfW
Addition to previous article. In short: as installation of .NET on the node is not supported, then all .NET updates are not supported as well. -
111448 How do I properly install .NET Framework inside Containers?
Small addition to the 2 previous articles.
Also see
1256 [Info] How should I set up Windows Automatic Updates?1204 [How To] How can I install the latest approved Microsoft Updates?
1748 [Info] What registry entries are used for Windows Server Update Services (WSUS) and Virtuozzo Update Service (VUS) settings?
113525 Available Windows Updates are not detected
112060 Parallels Virtuozzo Containers for Windows best practices and known limitations
112890 How to compare lists of Microsoft Updates installed on Parallels Virtuozzo Containers nodes
No
Yes