How to really, truly block the pushed upgrade to the next version of Windows 10, version 1803

Topic

New Reply

If you’re serious about blocking the forced upgrade to the next version of Win10, watch out for the minefields.  
[See the full post at: How to really, truly block the pushed upgrade to the next version of Windows 10, version 1803]

10 users thanked author for this post.

Fred, AlexEiffel, RamRod, ch100, Microfix, abbodi86, MrBrian, CADesertRat, Elly

Reply | Quote

Replies

The link’s not working; I can’t access the full post.

1 user thanked author for this post.

yvrhnl

Reply | Quote

The article isn’t up yet on Computerworld. I’ll update the link as soon as it’s live.

Reply | Quote

I plan to delay this update until I feel comfortable that it is stable.  This will be the first time I will be doing this, since both of my machines were shipped at 1709.  If one upgrades to 1803, how are the drivers handled?   Are the 1709 ones left in place?  Upgraded to what Microsoft “thinks” is a better version of the driver?  If one has driver updates blocked, does that effect the update process?

Reply | Quote

Currently installing KB4088891 via the update catalog as I write this. I had been offered an upgrade to 1709 and a whole bunch of other patches, all of which I hid using wushowhide. I’ve set my connection as metered and disabled the update service; the fact that it seems to remain disabled suggests I haven’t installed any of Microsoft’s nefarious patches that forcefully reenable it.

Why oh why am I having to fight my own computer now? Seems like my computer no longer serves me, but I serve the computer now…

Reply | Quote

The article says that forced updates from Windows 7 are long behind us. My surprised experience has been that WSUS continues to offer a Windows 10 upgrade to computers running Windows 7 Enterprise even though they are long past their Software Assurance expiration.

Reply | Quote

OUCH! I wasn’t aware of that.

Any idea if it’s widespread, or just one-off?

Reply | Quote

I only have one customer with Enterprise licenses, a small non-profit that gets those licenses through TechSoup. Wanted to post a screen shot but that’s confusing:  when I create a WSUS view listing Windows 7 Upgrades, it actually looks like WSUS offered Windows 10 1607 and 1703 to both Pro and Enterprise, then 1709 was offered without being specific to the Windows edition.

I temporarily moved the last 3012973 upgrade from Declined to Not Approved and pushed through detection on three computers. On Windows 7 Home Premium and Windows 7 Pro, the Status is “Not Applicable,” so it wouldn’t install even if I approved it. On Windows 7 Enterprise, the status is “Not Installed,” indicating that it would install if I approved it. So it’s reproducible in this environment.

Will have to watch what happens when 1803 comes down the chute.

 

 

2 users thanked author for this post.

geekdom, woody

Reply | Quote

My recommendation is to mark your internet connection as “metered” — telling Microsoft, in effect, that you’re paying for internet by the bit, and you don’t want to overload your connection.

For Win10 Home users setting your internet connection to metered doesent have any really adverse effects for your day to day use, if you use “One Drive” it’ll nag you to Sync your files at start up, just select ignore metered settings as and when it prompts you, although it may not Sync in the background automatically and Office 2016 connected to an Exchange server Outlook mail or your company Mail server you get a another nag Message that you can cheerfully set to ignore metered settings every time you fire up your Email or Outlook client. All the rest Apps etc continue to work as normal or live time in the background, just the desktop apps wont update automatically in the background, which is not a bad thing as occasionally the app’s update and don’t always work properly afterwards. In my experience that’s fine if everything’s working to your satisfaction why update?
Should you need to update your apps etc Admin Cmd Prompt WSRESET and life is good that cheerfully ignores the metered setting as well.
For your day to day updates just use WUMT you can select to hide, download and install and that ignores the metered settings as well, only downside is you have to check manually every day but as it resides on my desktop its normally one of the first orders of Business as I fire up the machine. It works really well up to now.

2 users thanked author for this post.

abbodi86, MrBrian

Reply | Quote

I believe anyone and any edition should set internet connection to metered if you want to avoid WU mess or have some control

2 users thanked author for this post.

BobbyB, woody

Reply | Quote

And in Services turn Windows Update off or to manual, since a metered wifi connection won’t always stop MS from downloading updates.

Reply | Quote

anonymous wrote:

And in Services turn Windows Update off or to manual,

Ah, but that’s the objective of Update Assistant – to blast away those manual changes.

I mean, if you can’t trust Microsoft, who can you… oh wait. Nevermind.

1 user thanked author for this post.

RamRod

Reply | Quote

Until you’ve had MS reset your settings, and I have twice, it’s truly hard to appreciate the trust MS is now violating. Either it’s my machine or it isn’t. If it is, I control what goes on. If someone violates my ownership they are very bad people. IMHO.

In Task Scheduler – Task Scheduler Library – Microsoft – Windows – Windows Update – SIH you have the following description of a task:

“This daily task launches the SIH client (server-initiated healing) to detect and fix system components that are vital to automatic updating of Windows and Microsoft software installed on the machine. This task can go online, evaluate applicability of healing actions, download necessary payloads to execute the actions, and execute healing actions.”

Doesn’t get any clearer than that.

2 users thanked author for this post.

HiFlyer, Ascaris

Reply | Quote

In Task Scheduler – Task Scheduler Library – Microsoft – Windows – Windows Update – SIH you have the following description of a task:

@RamRod What would happen if you disabled: the a) Scheduled Start, b) sih and c) sihboot tasks in the Task Scheduler? Would it do any good, be bad, or not matter?

Reply | Quote

I have them both disabled on my machine. I was only able to disable SIH on my wife’s machine. When I disabled SIHboot her machine really reacted poorly. There is other stuff going on that I don’t have a handle on. Trust the experts here at Woody’s site. I’m not one of them. I’m hacking and cutting on my machine desperately trying to stay on 1511. I’m trying to measure just how far MS will go to force me to upgrade. Pretty far to date. Wow.

1 user thanked author for this post.

dononline

Reply | Quote

I had all three disabled — Scheduled Start, sih and sihboot, but I see that on this computer, MS has already re-enabled Scheduled Start. Could be because I was checking on my hidden updates in wushowhide earlier, though. Anyhow, I’ll leave that one on and sih and sihboot off, as you’ve done, and see what happens.

I’m desperately trying to get on an 18-month upgrade schedule by skipping a couple of upgrades instead of upgrading every six months, which is ridiculous. I have a desktop, a laptop, and a 2-in-1 to update every month. It’s no fun anymore.

Reply | Quote

I believe that you have to turn Windows Update Service OFF as part of a larger overall strategy. Leaving that service on is an open invitation to MS to ‘self heal’ your machine.

1 user thanked author for this post.

dononline

Reply | Quote

yeah – running 1709; Ethernet Metered connection On… and the last 2 months I got automatically installed updates… Yesterday it was kb4093112, kb2837597 (Outlook 2010) and kb4093110 (Flash)

1 user thanked author for this post.

MrBrian

Reply | Quote

Have you tried throttling down bandwidth on background update downloads? Go to Windows Update/Advanced Options/Delivery Optimization/Advanced Options [again!]/Download Settings, and take the slider down to the minimum, i.e. 5%.

1 user thanked author for this post.

HiFlyer

Reply | Quote

Doesn’t it have to be ‘WiFi’ metered connection to stop downloads?

Reply | Quote

You can configure your wired connection to be metered Under Settings\Network.

Reply | Quote

You can configure your wired connection to be metered Under Settings\Network.

That wasn’t always the case. Which version introduced it? 1609?

Reply | Quote

1703.

Reply | Quote

One question on the metered connection trick for Win 10 home. In order to get the metered connection set I had to log on as administrator. When logged on as a limited user the metered connection option is off and grayed out even though it is set to on in the administrator account. Is this the way it is supposed to work?

1 user thanked author for this post.

Know Whey

Reply | Quote

I think that’s the intended behavior.

I think.

Reply | Quote

I find wireless printers don’t work when using a metered connection in WIN 10 home. I haven’t worked on debugging that however.

I do have a more pressing question: When it comes time to install updates, the 1803 upgrade will be available also. When reverting to a metered connection for updating, how does one prevent the 1803 upgrade from installing and just install the 1709 patches?

 

znitro

Reply | Quote

I can offer a workaround for the second question:  go to

https://www.microsoft.com/en-us/software-download/windows10

and click Download tool now. Use the tool to create an offline USB installer for 1709. I always choose the option to create it for another PC, then create a combined 32-bit and 64-bit USB stick.

Can someone confirm that this works for Home? I’ve only tried with Pro.

 

Reply | Quote

@znitro if you use http://www.softpedia.com/get/System/System-Miscellaneous/Windows-Update-MiniTool.shtml it should give you the chance to block the upgrade and you just either hide it or leave it on ignore.
As for making a USB or .iso select make for another machine i.e. don’t select what M$ recommends, create for another machine. using @mcbsys link and create an install medium I recommend that as its a good recovery tool should the worst happen crash reinstall etc. If you create it that way you can get a choice of versions on install with a simple trick. (works for 1709 vers)

Then create an “ei.cfg” file using the following:

[EditionID]

[Channel]
OEM
[VL]
0

save as notepad file with “all files” as save format with the title ” ei.cfg ” throw it in the Sources folder and “et voila” you’ll get a choice on set up

PS as best I can recollect if you create it the M$ recommended way it normally creates a small .xml file with preference’s language etc in the .iso which not only auto selects your version but language settings etc, you can mess with that if you wish but we are getting in to the realms of Win ADK SIM etc not for the feint heated and definitely a “Snooze” topic all by its self.

1 user thanked author for this post.

znitro

Reply | Quote

In reply to znitro, 9 April: I’m running W10 Home and an Epson WF-2630 wireless printer (which won’t in fact work on a usb connection since the upgrade to v1709), and it’s still printing OK.

1 user thanked author for this post.

HiFlyer

Reply | Quote

The latest version of KB4023814 installs 4 tasks, all of which as their action run updateassistant.exe. I’ll provide more info in a new topic soon.

3 users thanked author for this post.

RamRod, CADesertRat, Elly

Reply | Quote

Yes! You can’t ignore the tasks MS installs in Task Scheduler. Look for task related to SIH – the Server-Initiated Healing. MS installs tasks to blow away the steps you’ve taken to postpone the update. REALLY!

1 user thanked author for this post.

MrBrian

Reply | Quote

Excellent timely Topic bump for those who wish to avoid the forthcoming ‘Windows 10 April 2018 update’ and stick on previous versions.

Windows - commercial by definition and now function...

Reply | Quote

Neowin or some other site said that 1803 will hit WU in May 8, the April 30 is for manual download using media creation tool or update assistant

1 user thanked author for this post.

woody

Reply | Quote

That’s what I thought – but then I saw this from Ed Bott (who’s usually right about such things):

On April 30 Microsoft’s update servers will begin delivering the Windows 10 April 18 (formerly “Spring Creators”) Update, version 1803, to current installations of Windows 10 that have been running for at least 30 days.

1 user thanked author for this post.

abbodi86

Reply | Quote

https://forums.mydigitallife.net/threads/wumt-wrapper-script-controls-windows-update-service.72203/

This is what I use to prevent updates , started using it when MS started forcing the updateassistant updates 2 months ago and  never ever had since then ( I dont think this particularly targets the update assistant but it is pretty easy to just remove the tasks and the programs)

Reply | Quote

Sorry Woody, we may be on the same page when it is about Windows 7, but when it comes to Windows 10, while the technicalities of blocking various upgrades are right, the question is: why blocking?
Windows 10 is supposed to be WaaS to use an acronym in fashion.
Or “Hustle As A Service has no downtime!” from Dona Sarkar.
Don’t like it, don’t use Windows 10, it is as simple as that!

Reply | Quote

ch100 wrote:

Don’t like it, don’t use Windows 10, it is as simple as that!

I would tend to agree (and I’d add that no rational person would “like it” when “it” means “being a beta tester for a product you have to pay for,”), but MS has worked tirelessly for years to make sure there is a great deal of lock-in when it comes to Windows, and so a great many people don’t feel like there is any alternative.

New PCs generally don’t come with anything but Windows 10 anymore, and switching to Linux or another version of Windows almost seems like black magic to a lot of people, and asking every one of them to do either that or to abandon their Windows PCs in favor of some other device is a tall order indeed.  I wish more people would take your suggestion to heart, as MS would undoubtedly feel some pressure to quit being as aggressive as they are if people weren’t tolerating it and trying to make the best of a terrible situation.

Dell XPS 13/9310, i5-1135G7/16GB, KDE Neon 6.2
XPG Xenia 15, i7-9750H/32GB & GTX1660ti, Kubuntu 24.04
Acer Swift Go 14, i5-1335U/16GB, Kubuntu 24.04 (and Win 11)

6 users thanked author for this post.

BobbyB, Know Whey, David F, Cascadian, Elly, RamRod

Reply | Quote

I have run both wushowhide and the minitool and I have never been able to have it bring up any available updates other than third party drivers etc. I have Win10 Pro 1703 set to metered and 365 day option turned on. Do I need to turn off metered and all other setting to get either one of these programs to work correctly ? I’ve trying for months to get either one to show me an update. I have updates paused for 35 days, would that by any chance be blocking them from checking ? If so, my system would start updating before I could scan and hide anything. I can’t figure out why it’s not showing.

Reply | Quote

1. I have mine set to Feature updates = 365, quality updates = 0, no pause.
2. In GP I have Automatic Updates – Enabled, = 2 notify download/install (prevents auto download like Win7 “let me choose whether download and install) – no download till you click download.
3. Set Metered connections

Quality updates = 0 and No pause should let the updates show up.
Between #2 and #3 should give you enough time to run wushowhide and hide the ones you don’t want.
Watch out for the updating patches – @abbodi86 has a list here.
Also folders C:\Get$Current and c:\Windows\upgredeassistant and upgradeassistantv2 play a part in forcing.

3 users thanked author for this post.

Know Whey, RamRod, bobcat5536

Reply | Quote

I will make an image and as soon as I uncheck pause it will update. After it’s done I will try those settings. I see in my installed updates KB4023057 has been installed many times over. I see no option to remove it.

Thank You

Reply | Quote

Question of PKCano:

1. I have mine set to Feature updates = 365, quality updates = 0, no pause.
2. In GP I have Automatic Updates – Enabled, = 2 notify download/install (prevents auto download like Win7 “let me choose whether download and install) – no download till you click download.

I’m a newbie with Win 10.  I have Windows 10 x64 Pro 1709 set per you above only quality updates set at 14 days.

I have yet to go through a update cycle or receive quality updates so still unsure what to expect to see. I do receive a daily or more notifications and request to download Defender updates which I do by selecting the Download button.

So with these settings will the May quality updates automatically appear and await me to click on the Download button before installing? If so how do I not install them while continuing to download and install the daily Defender updates?

Once they appear on my screen, can I use the wuhideshow tool to hide the May updates and then Download the Defender only updates? Or, is it too late to hide them once they appear?  If so how do I get to them before they appear in order to hide?

Thx

Reply | Quote

anonymous wrote:

I have Windows 10 x64 Pro 1709 set per you above only quality updates set at 14 days.

I think this setting will keep them from showing up for 14 days. If they haven’t downloaded, you can help two ways: Set your network connections to “Metered” and run wushowhide to search for and hide any applicable updates. On wushowhide, click on Advanced, then uncheck auto correction.
If the Defender update is the only thing in the queue in Windows Update, you can download it, but Defender should update automatically not through WU.

anonymous wrote:

So with these settings will the May quality updates automatically appear and await me to click on the Download button before installing?

With the update setting = 2, the updates appear in the queue but do not download automatically. DO NOT use WU to search for updates, as the search will initiate the download and install. Use wushowhide to search and hide.

Reply | Quote

PK

If the Defender update is the only thing in the queue in Windows Update, you can download it, but Defender should update automatically not through WU.

anonymous wrote:

So with these settings will the May quality updates automatically appear and await me to click on the Download button before installing?

With the update setting = 2, the updates appear in the queue but do not download automatically. DO NOT use WU to search for updates, as the search will initiate the download and install. Use wushowhide to search and hide.

FYI the Defender definitions on my system do come down on the Windows Update screen and ask me to install. I also receive a notice in the notification area.

So to clarify with setting =2, the monthly quality updates will be delayed 14 days from release and at some point during those 14 days will be visible in the wushowhide queue, but never on the Window 10 Update screen until they are ready to download/install?  In which case I must continually check in with the wus/h application?

Reply | Quote

I cannot verify this b/c my setting is defer 0 days, but I believe that the updates won’t show up in the WU queue for 14 days because of your settings. They may show up in wushowhide though. That is something you will have to check out.

But they should not download/install without you clicking on the “Download” button – at least mine haven’t. But, again, DO NOT do the search in Windows Update. Use wushowhide.

Reply | Quote

So when they show in the Setting Windows Update queue awaiting me to hit the Download button, can I still go into wushowhide and hide them, or is it too late to choose among what is now showing?

In essence, if the May quality update(s) were showing in the Windows Update queue along with a/some Defender definition updates, can I hide the May updates and Download the Defender Definitions or is it too late to use wushowhide?

Reply | Quote

Hide the updates with wushowhide.
Shutdown the computer.
Restart, and hopefully the updates you hid are no longer in the queue.

It’s a struggle!!!

Microsoft is determined.

Reply | Quote

IF you have Home I believe you MUST turn OFF Windows Update Service to have any long-term hope of forestalling unwelcome updates. You must also remove the Self Healing tasks in Task Scheduler. Having a Metered connection can’t hurt. But MS cannot easily reach you without their enabler – Windows Update Service. At least they haven’t tipped other cards to me yet. I fully expect them to.

When I least expect it and am not awake to defend my computing installation.

Reply | Quote

woody wrote:

There’s no warning about the shift to “Semi-Annual Channel.” Microsoft just declares a new version to be ready for full availability, for reasons as yet unknown, and that same day, the new version starts rolling out to those on the Semi-Annual Channel branch.

This is still wrong. There’s a warning one week in advance:

Microsoft today [Jan 11, 2018] told enterprises that Windows 10’s second feature upgrade of last year, October’s “Fall Creators Update,” had been sufficiently tested and is ready to deploy across their organizations.
…
Windows 10 Pro- and Windows 10 Enterprise-powered systems that rely on the consumer-grade Windows Update for servicing will be automatically offered 1709 beginning Jan. 18.

https://www.computerworld.com/article/3247864/microsoft-windows/microsoft-stamps-octobers-windows-10-feature-upgrade-as-enterprise-worthy.html

1 user thanked author for this post.

MrBrian

Reply | Quote

I’m prepared-THE Moment 12pm hits monday, I am hiding it and checking it from 12-3:30pm before work. I’ll keep my eyes peeled for a week even on the 7th of may. 1803 is gonna be hidden using WUHide or however is spelt. AND I will install it of my own free will when I feel it is stable and when Woody gives the word AND I will tell Microsoft/Windows to DON’T THEY DARE FORCE FEED IT like they did 1709 when they forced users to update against their will even with all steps taken.

Reply | Quote

Surely the only real, true, way of blocking pushed version upgrades under Windows 10 is to roll back to Windows 7 ;)!

2 users thanked author for this post.

RamRod, Elly

Reply | Quote

My two Windows 10 Home machines had been forced to version 1709. On April 14-15 both machines with metered connection received the KB4093112 Cumulative Update.

Edited for HTML. Please use the Text tab for copy/paste, in your reply.

1 user thanked author for this post.

MrBrian

Reply | Quote

Win 10 Pro…Is anyone else having problems downloading the April updates. They get to about 4% and freeze. I cleared out the Software Distribution Folder and tried again with no success. I restored an image back to just before I installed the March updates, when I knew everything was working fine, because the March updates installed no problem, and then tried to update again and it still freezes.

Reply | Quote

With my Win7 Pro x64 machine, as solid as I can make it (except for Intel’s and Micro$oft’s neglect in not issuing microcode updates for my Haswell processor); this morning, after finishing my daily review of AskWoody incl. the above post; I smile, and I look down at the systray. I see that familiar, blessed, friendly large-size blue neon “10”, for my running GWX Control Panel Monitor from Josh Mayfield (thank you, a *ton*, Josh!!!). It’s been running nonstop since the day I installed it, 18 months or so, ago……And when my Win7 runs out of support next year or whenever, I then can run my mnfr’s upgrade to Win 8, which will have several years’ more support on it. When that runs out, if I’m still around (I’m a retiree), then I can just run the unpatched machine with the latest Ffox, SeaMonkey, LibreOfc, Opera etc., and take my risks; or switch to SuSE or Ubuntu Linux or another. Micro$oft, you’re getting, just what you earned!!! </smile>

Reply | Quote

Should be 17134 instead of 17133… Must have been written 2 weeks ago :).

Fractal Design Pop Air * Thermaltake Toughpower GF3 750W * ASUS TUF GAMING B560M-PLUS * Intel Core i9-11900K * 4 x 8 GB G.Skill Aegis DDR4 3600 MHz CL16 * ASRock RX 6800 XT Phantom Gaming 16GB OC * XPG GAMMIX S70 BLADE 1TB * SanDisk Ultra 3D 1TB * Samsung EVO 840 250GB * DVD RW Lite-ON iHAS 124 * Windows 10 Pro 22H2 64-bit Insider * Windows 11 Pro Beta Insider

Reply | Quote

So i went from a fully patched 1607 to 1703 not 1803 to wait while still receiving patches for security but now I only have two patches on 1703 and Windows update tells me I am up to date. So I went from being fully patched from Meltdown and Spectre (as much as possible right now) to unpatched because the 1703 patch is for december? I sure didn’t get the most secure Windows version ever.

Reply | Quote

I have Win10 Home v. 1703 on metered connection with Feature Update To 1709 hidden. With Woody’s Defcon at Level 3 today, I tried to patch and almost got voluntold for version 1709 again. This has almost happened several times since November.  (See my previous comments on the forum.)

First thing I did was run WUShowHide and make sure the Feature Update was hidden. It was, so I turned the metered connection setting off.

As soon as I switched the metered connection off, Windows Update said it was installing the Feature Update to 1709 along with other updates.

I switched the connection back to hidden, turned off the WiFi and rebooted. I ran WUShowHide again and hid the Feature Update again.

I have now switched metered connection to off again and Windows Update is downloading updates.  I will try to sleep now and see what version I have tomorrow morning.

1 user thanked author for this post.

MrBrian

Reply | Quote

That is the very reason I went from doing a monthly image to a weekly image. I can go back faster than  they can go forward.

Reply | Quote

@PKCano   Can    c:\Windows\upgredeassistant and upgradeassistantv2 folders be deleted ? I uninstalled Windows Update Assistant from Programs and Features and these 2 folders are left over.

Reply | Quote

I deleted them – doesn’t mean it’s OK, I just did it. And the C:\Get$Current folder as well.
Also look under Settings\Apps – there was something there too.
I’ve done a lot of things that probably shouldn’t be done to keep 1703 and avoid 1709.

I let one of my VMs upgrade to 1709, though. And some of the things I blocked in 1703 I didn’t have enough privilege to do in 1709. I have been trying things I can get to in the GUI (no scripts, etc) using Settings, Group Policy, Task Scheduler and Services.

1 user thanked author for this post.

bobcat5536

Reply | Quote

I deleted all three as well. On 1511. No discernible operational issues. So far. Revenge of the Empire?

Reply | Quote

PK, I’m contemplating removing the SIH subdirectory at C:\Windows\SoftwareDistribution\SIH. It was added on 4/9/2018. I was NOT accepting any updates at that time, but I had not yet turned Windows Update Service off – that came later. I suspect that this is where MS stores the rudiments of the Update Assistant. I know what the SIH is, and I detest anything having to do with it.

Do you have thoughts you care to share about the removal of this VERY SUSPECT directory?

RamRod

Reply | Quote

Have not looked at that. I think MS will just put everything back and turn everything back on though. It’s not going to stop – they are marching to their own tune and they don’t care about the complaints from users. Unless Ent. puts it’s foot down, by the time Win7 is over everything will be forced, all UWP, and probably all online.

The days of build-your-own are over. Those of us that did that once need to realize it’s time to give it up (unless you have a special interest like gaming). It used to be a source of pride, but with Win10 there is no longer any pride.

1 user thanked author for this post.

RamRod

Reply | Quote

With Update Service disabled and SIH tasks disabled or deleted, how will MS force updates? Are you aware of other routes. My goal in removing this stuff is to, hopefully or delusionally, deny MS the building blocks for their self healing efforts. I fell like being on both the defense and offense. Thanks for the reply. I think I’ll conduct the experiment one of these days soon.

Reply | Quote

Latka wrote:

As soon as I switched the metered connection off, Windows Update said it was installing the Feature Update to 1709 along with other updates.

I’ve dealt with this same thing trying to stay on 1607. I’m doing my best to work out an 18-month upgrade schedule instead of WaaS’s insane six-month schedule. I’ve been fighting off 1709 for two or three months now. It’s gotten past me twice. Had to unplug my router and go through a lengthy clean-up process as described by others here in the Lounge.

I’m certainly no expert, but I can offer what I’ve done to, at least this month, effectively keep 1709 at bay. It’s a lengthy process, and requires a little work, but here goes:

First, I use two programs: Windows Update Blocker and Windows Update MiniTool. They’re here:

http://www.majorgeeks.com/files/details/windows_update_blocker.html

and here:

http://www.majorgeeks.com/files/details/windows_update_minitool.html

Neither requires installation, I just made folders for them in the respective C:\Program Files folders. WUMT comes in x64 and x86. I use the x64 version. WUB is only x86. Then I made shortcuts and pinned them to the Start Menu.

I use WUB to keep Windows Update Service turned off until needed. I also keep my Wi-Fi Metered Connection turned off until needed. You could keep both turned on, but I don’t trust Microsoft and it’s insipid WaaS. No way. No how. Been burned too many times.

So, to check for updates, or perform updates, here’s my routine:

1) On my desktop, I turn off the Ethernet connection and switch to Wi-Fi. My desktop came with a Wi-Fi card, fortunately. I keep the W-Fi set as Metered all the time on the desktop, but I check it to make sure anyhow.

2) On both my laptop and 2-in-1, I set the Wi-Fi as Metered.

3) I fire up WUB and turn Windows Update Service on on all three computers.

4) I fire up WUMT and check for and hide updates on Patch Tuesdays as needed. I only keep the updates I’ll want to install at DEFCON-3 or above unhidden.

5) If we’re at DEFCON-3 or above, and I’m ready to do the installs, I do them here. WUMT pays no attention to the Metered Wi-Fi setting and blasts those updates right on past it. I don’t install the big Cumulative Updates with WUMT, though. I download those from the Microsoft Update Catalog to the Downloads folders of all three computers, the day or night before I plan to do the updates, if possible.

6) After I’ve installed all the updates except the Cumulative Updates, I close down WUMT and manually install the Cumulative Updates. With three computers, it just seems to go faster and with less problems.

7) After everything is installed and working, I fire up WUB again and turn Windows Update Service off.

8) On the laptop and 2-in-1, I turn the Metered Wi-Fi to Off. You could leave it on all the time, but I’ve read that it could cause some file downloading and page loading glitches.

9) On the desktop, I turn Off the Wi-Fi and switch back to the Ethernet connection.

10) Fingers, toes, eyes and legs crossed, I’m DONE and good to go.

By following this method, Microsoft and it’s horrid WaaS can’t ram upgrades down your throat because at no time is both Windows Update Service and a non-Metered Wi-Fi connection on at the same time… at least for now, anyhow. Of course, MS could “remedy” this “bug” at any time.

2 users thanked author for this post.

Fred, MrBrian

Reply | Quote

and those two programs WUB & WUMT are what I use to block any unwanted & unexpected Win10 updates from Microsoft

1 user thanked author for this post.

dononline

Reply | Quote

PKCano wrote:

Hide the updates with wushowhide. Shutdown the computer. Restart, and hopefully the updates you hid are no longer in the queue. It’s a struggle!!! Microsoft is determined.

think not, nothing helped… just started to dowload and install, in spite off all

* _ ... _ *

Reply | Quote

sorry to disappoint you, nothing of this helped at all,

just installed automaticly, without any question or warning etc…

*YAK*

* _ ... _ *

Reply | Quote

Well, there’s always “Rollback to an earlier version” (and hope the ongoing install and/or the eventual rollback don’t hose the machine) NOT funny!!!

Reply | Quote

Finally hussled in v1803… Pops questions about dataownership, about something left of influence in ones own computer, about datamining, electronic warfare, *bigbrother v3.0* ?

regard fred

* _ ... _ *

Reply | Quote

The upgrade loop on a machine with small drive (32GB) is ridiculous. Download update. Attempt install. Fail due to lack of space either during download or update. I run disk cleanup so my system drive isn’t full. Then the cycle repeats. The only thing that keeps me on Windows is the applications. I desperately wish I could move to Linux. Windows 7 was a joy in comparison.

Reply | Quote

@ anon with the device with 32 GB of storage (post #190075)

Check out this blog post by Susan, the Patch Lady:

https://www.askwoody.com/2018/patch-lady-finally-got-an-hp-envy-8-note-5000-upgraded/

Reply | Quote

I was using the wushowhide tool to block the 1803 update (which forced me to clean install) and today the update was released and started downloading anyway. I just wanted to pass on the message that you need to reblock the update

Reply | Quote

Was the Windows Update Service running while on a non-metered Internet connection?

Reply | Quote

Just for information, there is a WUMT = Windows Update MiniTool,  Wrapper Script available from the Major Geeks website.  The creator/author is  pf100 and has a forum for the script on the  My Digital Life  forums.  Google  ‘wumt wrapper script’  and look for the mydigitallife forum website. It has 22, or maybe by now, 23 pages of development history. The script includes the program/script  WUB  Windows Update Blocker, and other features.

http://www.majorgeeks.com/files/details/wumt_wrapper_script.html

https://forums.mydigitallife.net/threads/wumt-wrapper-script-controls-windows-update-service.72203/page-23

Thank you  @dononline  post #188621  for your detailed instructions.

1 user thanked author for this post.

dononline

Reply | Quote

G’day folks

I have an HP 250 laptop with Win 10 Home 1709 and try to follow group A tips, so far successfully.  However, I now don’t seem to be able to get any new rollups updates (May or June), after attempting the May rollup after the presentation of 1803 occurred.

The problem seemed to start when I tried to get the May updates.  Unfortunately the 1803 download had started before I could hide it with wushowhide, so I stopped it by disconnecting the wifi.  However this seems to prevent wushowhide from seeing anything, so I connected again, then hid the update, and rebooted (I think that was the sequence from memory).  The 1803 installation may have started before I finally got everything under control.  I couldn’t see the May rollup, so ended up downloading and installing it manually.

This month the June rollup has not appeared even after I check for updates, nor in wushowhide, whereas other updates do appear (MSRT and Defender updates).

I have run the updates trouble shooter as suggested, and also allowed KB4056254 through as a last resort, but still no June rollup visible.  I could manually install again as per last month, but would rather fix this if possible.  The 1803 update seems to be remaining safely hidden.

Any suggestions gratefully received.

Reply | Quote

Several questions come to mind:

What version of 1709 are you running. In the search box, type “winver” (without quotes). press Enter and find the Build number.

When updating through Windows Update, any bundled patches (which may not be listed) are downloaded and installed in the correct order. When using the MS Catalog download and manual install, this does not happen. There was a Servicing Stack Update that was associated with the April  update that should have been downloaded and installed prior to the CU. Did you also install KB4099989 (SSU) manually prior to installing KB4093112 (April CU)?

Reply | Quote

Thanks for the quick reply PKCano.  OS Build 16299.461.

I do remember the need for the stack update as well, and so what I installed for May (April rollup was OK) were KBs 4134661, 4132650 and 4103714 according to my update history.  I think the latter two are the ones in question, and I installed them in the recommended order.

Reply | Quote

Ok, what you installed was the May non-security CU KB4103714 which is sorta like a Preview. It was released after the May KB4103727 Delta or KB4093105 CU. So, being cumulative, it contains the May CU and you will not see the May CU in Windows Update.

I would suggest you try either:
Manually install KB4284819 (the full June CU Build 16299.492). Be aware of the known issues. I do not see a servicing stack listed with it. Maybe this will straighten out Windows Update.
OR
Just wait until the July CU is released on the 10th and see if it shows up.

I wouldn’t try to install KB4284822 (Build 16299.522) as it is a “Preview.”

Reply | Quote

Thanks PKCano

I’ll have to digest this and get back to you later; can’t do it just now.

Sorry I don’t know how to make my reply sit below your indented reply.

Reply | Quote

There is a “Reply” button third (from the right) in the top line of the one you want to reply to. Click “reply” (be careful, the buttons are real light), fill in the entry box, and “submit”.

Reply | Quote

Sorry; didn’t see your reply hint until too late.  Cheers

Reply | Quote

@anonymous #201029   You wrote “Sorry I don’t know how to make my reply sit below your indented reply.”

This works for me using Firefox (unless another user answered while you are replying, then it’s down one or two).

1.  Highlight (as if you wanted to copy) the number of the post you want to answer.

2. Click on FF ‘Edit/Find in this page’.  The ‘find’ box will open at bottom of page.

3. Click on ‘up arrow’ just left of ‘Highlight All’.

4. Click on ‘quote’ at bottom of highlighted post.

5.  Write your reply and Submit.

Edit or Trash if not as desired.  It takes longer to explain than to do.

HF

Reply | Quote

Thanks HiFlyer

That process didn’t seem to work; couldn’t see any “Quote” button anywhere.  No luck on FF, nor on Chromium, in my Linux Mint nor Win 8.1 partitions, nor on Chrome in my Win 10 partition.  I don’t have FF in my Win 10 partition, and as it wasn’t available in the Store, I haven’t installed it.

To craft and position this reply I clicked on the “Reply” button in the header of your reply, and copied and pasted your text in above my typing in the box at the end of the posts.  Not sure where this will end up, but here goes!

EDIT html copy removed (caused by copy>paste) – reply may not read as intended

1 user thanked author for this post.

HiFlyer

Reply | Quote

@hiflyer – Quote function is only available to logged on users (Loungers), sorry

2 users thanked author for this post.

Elly, HiFlyer

Reply | Quote

Thanks Kirsty; that makes sense.

1 user thanked author for this post.

HiFlyer

Reply | Quote

Not sure where this will end up in the list, but this is reply to PKCano #201023.

I chose the updates based on numbers in a post at the time, and I got the updates from the Microsoft Update Catalogue, which I now see does not seem to differentiate between proper updates and previews; a “trap for young players”.  I will therefor not chance this method again, and wait for the July updates (and Defcon 3) to see what happens.

I only use my windows partitions for what my primary Linux Mint partitions can’t do (accessing iTunes to service my iDevices), so waiting and not being fully updated is no big deal for me.

Many thanks for your help PKCano.

Cheers

Reply | Quote

If you have your settings on Semi Annual Channel, you will see the Patch Tuesday Security updates in WU. If you set it to Semi Annual Channel (Targeted) you will see both the Patch Tuesday updates and the non-security (like Preview) updates released later in the month.

Reply | Quote

Thanks PKCano.  I have a Home version, so I presume I don’t have those settings to get a little more control.  Am I missing something?

Reply | Quote

Oh, I made an assumption you had Pro. The only thing Home has is Metered connections and wushowhide (unfortunately).

Reply | Quote

No worries; thanks.  I use both, and keep WU disabled, and my wifi on manual connect instead of automatic, so I can ensure WU is still disabled before I connect to the net each bootup.

Reply | Quote

WOW; even this doesn’t work anymore!!
After today’s bootup without wifi connected as usual, and confirming WU was disabled, I connected my wifi, and a couple of minutes later noticed a list of updates, including the 1803 update, all getting ready to download!  The Services screen confirmed WU was now running!!  I had to Stop it twice before it would give up, and then set it back to Disabled, where it has stayed.  I checked my wifi connection was metered (which I check in my limited account with cli command [netsh wlan show profile name=”mynetworkname”] and confirm its Cost is “Fixed”).
Checking wushowhide now indicated no hidden updates, and no updates available for download!!!  As well as overriding my Services and metered connection restrictions, can Microsoft also stuff up wushowhide?  Who do these people think they are?!

1 user thanked author for this post.

woody

Reply | Quote

What version are you running?

Reply | Quote

As far as I know it hasn’t updated from last time I used it, as above; 1709, OS Build 16299.461. ( I am in the Linux partition now, but could confirm if you want me to.)

Reply | Quote

Thanks. Yep, 1709 is the answer I needed.

Reply | Quote

I can confirm the same experience with Win10 Home 1709 a couple times since moving up from 1703 about 6 weeks ago.

Basically the same experience multiple times on 1703 since November. (See my previous comments on other threads.)

The technique seems to be the most successful for countering upgrades, but not completely reliable.

The effectiveness of this blocking technique seems to vary with different hardware. It is more successful blocking updates on a couple HP computers circa 2010. I have had to rollback to previous version several times on a newer (2015) Lenovo.

Lately the Feature Update to 1803 keeps showing up on Windows Update, but it’s not listed on WUShowHide. This usually occurs only once after booting.

2 users thanked author for this post.

BobbyB, woody

Reply | Quote

Thanks Latka; sounds like this deviousness is not new.

I am not sure it has actually affected wushowhide as I thought above, as I don’t think wushowhide works properly if WU is disabled (I’m guessing).  I am not going to take WU off disabled again until we are back to Defcon 3, so can’t check this out until then.

I had another instance of WU switching itself to “manual triggered” after I started Win 10 today, but was able to set it back to Disabled before it achieved anything, and it has stayed there.  It seems constant vigilance is the only defence.

Also, winver confirms I am still on Win 10 1709 OS Build 16299.461 as stated above.

1 user thanked author for this post.

BobbyB

Reply | Quote

In my experience, wushowhide definitely does not work if (like me) you have WU disabled. And, yes, the only thing (apart from the various special settings already discussed) that works is indeed constant, daily vigilance.

2 users thanked author for this post.

HiFlyer, BobbyB

Reply | Quote

Thanks JLamede.

It’s now looking like the “daily” vigilance has become true for me.  I booted back into the partition again yesterday and tried to provoke WU to restart, but nothing I did caused it to do anything other than remain disabled.  (I find I have to regularly check the Services screen, and refresh it, to catch the restarts; just checking the Services without refreshing it screen doesn’t catch changes.)

However, trying the same thing today resulted in WU switching from disabled to “Manual (triggered)” soon after bootup.  Again it took two Stops to make it stay stopped, and I again disabled it, and it has stayed disabled.  Seems like something has been added that allows MS to meddle with my system each day.  I wonder if it is the KB 4056254 update (WU repairer thing) I let through as noted above, when I was trying to get my system to see the June updates?

I can’t see it in the list of updates I get when I go to View Installed Updates (nothing shows) > Uninstall Updates (a normal window lists updates previously installed), so I can’t uninstall it.  Again, I am not going to allow WU to run normally to see if it becomes visible, so will have to wait until Defcon 3 rolls around again, and try to get rid of it then, if it is the likely culprit?

The struggle continues.

Reply | Quote

UPDATE

It has taken about 6 weeks for DefCon to reach >2 again, so I am not sure this update will make it into the thread, or be seen/read if it does, but here goes:

I used WUShowHide to make sure the 1803 upgrade was hidden and checked for updates.  There was actually no July or August CU offered, only the July, Aug and Sept update tweaking KBs (4023814, 4295110 and 4023057).  I initially thought these were CUs, so hid July and Sept, and let Aug install, along with MSRT and Flash updates.

After I realised there were still no CUs offered, rather than wade into trying to fix this, which I presumed would be complicated and possibly not work, I opted to allow the 1803 feature upgrade to run, hoping this would sort out the problems with my WU not offering CUs anymore.  However, it made it to 87% installed and stopped, partially freezing the machine.  Clock and mouse pointer worked, but clicking on things produced no response.  Ctrl-Alt-Delete produced no response.

I used a hard power button off to reset, fearing it would more likely leave it in an unbootable state, but it came back up, wanting to do a drive scan, which I stopped.  Windows loaded OK and immediately started downloading the 1803 feature update again, which quickly became installing at 25%.  After 5 minutes of no further progress on installing percentage, I restarted and allowed the C:\ drive check.

I then decided to unhide the update tweaking KBs in case that helped MS to more accurately judge what the upgrade to 1803 required. I also re-enabled my ethernet connection and set my wifi to unmetered, and reduced my active hours settings to increase reliability, and then let WU run again.  It downloaded the July and Sept tweaks, and began installing the 1803 upgrade first, leaving the tweaks awaiting install.  What a relief when the install reached 88% and continued to show drive activity!

Two hours after that it was ready to reboot without installing the tweaks (which I presume would now be redundant with 1803).

After 3-4 restarts, I am now on 1803, Build 17134.254, and all seems well so far.  There was another Flash update available, which I took, and also allowed Office 365 to update.

To get back to best protection against MS, I have again disabled my ethernet; set my wifi to metered, with a data limit set now, and not auto connected; set active times to 18 hours; and disabled WU.

The real test will be when it is safe to enable WU to try to download Sept CUs at the end of the month.  I will first hide 1809 upgrade if it shows.
Cheers

2 users thanked author for this post.

columbia2011, Latka

Reply | Quote

FINAL UPDATE FOR COMPLETENESS

With MS-DefCon at 3 for a while last week, I enabled WU and was presented with what was labelled the CU for Sept (2018-09 Cumulative Update for Windows 10 Version 1803 for x64-based Systems KB4458469), along with a flash update, a HP HID Class update, MSRT and from memory I thought a .Net update (although this is not visible in the update list now (?)).  All updated normally then.  No 1809 was presented, so I didn’t have to deal with that.  Looked like the shift to 1803 did solve the above original problem of WU not seeing CUs in 1709.

However, I later noted that what was presented to me as the above CU, was listed in Susan’s master patch list as a preview for October, which I found disconcerting.  I hoped this was a mistake in the patch listing, as the update seemed to work OK.  I am now on 1803 build 17134.320, which corresponds with the support article about the re-release of the update linked in the patch list.

However, during the session last week in which I did the updates, my machine suddenly switched itself completely off a couple of times, so I wondered if that was due to some change from the last updates.  There was no warning, and no blue screen or anything else; just complete, instantaneous power off, as if I had been holding the power button down.  I downloaded and ran Open Hardware Monitor to check for temperature problems, but temps never got over about 60 degrees.

At the start of last week’s session a popup appeared showing a setting for what I took to be processor utilisation that was set to balanced, between performance and power saving.  As I only use this laptop on mains power, I shifted the setting to maximum performance.  I wondered if this had caused some extra stress, and went looking in detailed settings, and the only setting that had the option of balanced was for GPU operation.  I set it back to balanced (from max performance), but the machine failed again after that, so maybe that wasn’t the cause.

Just wondered if anyone else has noticed power shutoff problems associated with recent updates?

Reply | Quote

New files and services will activate as you holdout from 1709 to 1803.

As I posted somewhere else, take ownership of Update Orchestrar task folder and files, and store the files somewhere else.

Take ownership and deny access to everything other than Admin to WaasMedic.exe.

Use an anti-exe such as Voodoo Shield and block any Windows exe connected to updates.

BOOM!!

1 user thanked author for this post.

HiFlyer

Reply | Quote

Thanks Anonymous

Not sure exactly what you mean, but it sounds like it relates to getting into the workings of the system and thwarting things, which is a little too complex for me.

I don’t have the UpdateAssistant(2) folders in my Windows folders, and that is about as far as I feel comfortable going.

I suspect that the latest attempts by MS are aimed at undoing the tweaks that have been developed over the last few months anyway, so I will stick with constant monitoring of my Services screen as above.  I use the Windows partition for so little (Linux Mint does most things for me and is more secure) that this is no big hassle for me, although may be impractical for regular Windows users.

I am now thinking MS may not have done anything extra to my machine, and that if my machine just rechecks for updates every day by itself, that may be enough to trigger the restart of WU service.  I’ll just be extra vigilant at the start of each new bootup.

Reply | Quote

One of my laptops on W7 64bit has a quirk where on any startup; if I do not go check my Windows update settings; the setting always reverts back to the “Install update s automatically” how the heck has this happened someone? It matters not how many times I change the setting back to NEVER EVER!? my other laptop on same platform is fine, but my secondary has the habit of changing to update! I just leave the cable out of the other one until I am ready to check manual-mode(!) My wife had the same but now she has W10 and all sorts of updates since! But she’s fine with that as all she does is surf the net for shopping and tips.

If there is magic on this earth ... it's in the water.

Reply | Quote

I’d wonder what KBs have been installed in the past, such as KB 2952664 OR 3150513 perhaps?

If it was my machine, I’d consider changing the Services option for Windows Update to Manual (rather than automatic)…

Reply | Quote