They are a mixture of both (GDR+LDR and LDR only,) note that all hotfixes have a LDR branch inside but the ones with both LDR and GDR by default will install the GDR branch unless a previous hotfix with LDR only files was installed, this is the reason for the LDR placeholders...with w7t you dont need to integrate the LDR placeholder hotfixes to force a superseding hotfix to install the same branch, this is what the QFE/LDR option does More info on LDR/QFE and GDR http://blogs.technet...r-hotfixes.aspx So in a nutshell: if you want only the security fixes let the hotfix install the default GDR branch...if you want the security+bug fixes force install the LDR branch